Senior Corporate Security Engineer, Nexthink

• 5-8 years of hands-on experience in Corporate Security, IT Security Engineering, or a SOC role in a cloud-first environment
• Endpoint Mastery: Experience hardening operating systems (macOS/Windows) and managing security via MDM/UEM tools
• Vulnerability management: Proven experience in helping IT and business teams patching systems and infrastructures
• Coding Skills: Proficiency in Python and Terraform for automating APIs and security workflows
• Security Ops: Proven experience with EDR tools and SIEM log analysis
• Communication: Fluent in English with the ability to explain complex risks to non-technical stakeholders
• Proven ability to influence and drive security best practices across non-security teams
• Experience with security awareness training platforms and phishing simulation tools

Desirable

• As a Senior Corporate Security Engineer at Nexthink, you will be responsible for the security of our internal environment
• You won't just be monitoring logs; you will be architecting the security fabric that enables our rapid growth
• Working in close partnership with IT, business teams and, partnering with our Cloud and Application Security teams, you will secure the identity, devices, and applications used by "Nexthinkers" worldwide
• You will own the security of a complex SaaS ecosystem, and lead detection and response for the corporate environment
• Contribute to the design and support the implementation of passwordless authentication and Zero Trust principles
• Manage secure provisioning and lifecycle management, ensuring least-privilege access across all business systems
• Partner with HR and IT to streamline onboarding/offboarding workflows, ensuring timely access revocation and auditability
• Define and enforce security baselines for our diverse fleet of endpoints (Windows, macOS) and mobile devices via MDM (Intune/Jamf)
• Manage and tune EDR/XDR solutions to ensure high-fidelity detection on workstations and servers (Windows, Linux, macOS)
• Secure the corporate Azure footprint, ensuring proper configuration of subscriptions, networking, and resources distinct from our production product environment
• Proactively identify and mitigate security risks in our corporate environment, conducting regular security assessments and vulnerability scans
• Coordinate vulnerability management and patch management
• Collaborate with IT to automate endpoint compliance checks and remediation workflows
• Support the development and maintenance of Infrastructure-as-Code
• Ensure hardening and compliance of endpoints and servers
• Assess and secure third-party SaaS integrations (e.g., Salesforce apps, browser extensions, productivity tools) to prevent data leakage and over-privileged access
• Collaborate with Legal and Compliance to vet new vendors and tools
• Configure and maintain CASB and DLP policies to safeguard sensitive corporate data without hindering productivity
• Lead incident response activities for corporate security events (phishing, malware, lost devices)
• Develop automation scripts (Python/PowerShell) and workflows (SOAR) to automate manual security tasks, evidence collection, and response actions
• Proactively hunt for threats within the corporate network and identity providers
• Develop incident response playbooks including technology specific procedures and forensics collection
• Design and implement security controls to safeguard corporate resources, including endpoints, data storage, networking, computing and identity and access management
• Support and automate evidence collection for audits
• Act as the primary security liaison to the IT Department and business teams, helping them build security into their operations (DevSecOps for IT)
• Design and deliver technical security training and awareness campaigns for engineering and business teams