Senior Corporate Security Engineer

About the role

Mirantis, a Kubernetes-native AI infrastructure company, is hiring a Corporate Security Engineer to join its security team, based remotely in the United States. The role extends security operations coverage beyond EU hours and adds hands-on capacity to detect, triage and respond to issues faster. It covers endpoint protection (EDR) and device management (MDM), identity and access (IAM/SSO, MFA), and the detection-and-response stack (SIEM, alerting, and coordination with an external SOC), while supporting the ISO 27001 and SOC 2 compliance program.

Key responsibilities

• Own the security policies, hardening baselines and compliance posture for the EDR and MDM stack, and drive threat response on endpoints
• Administer IAM/SSO, MFA, provisioning and deprovisioning, and least-privilege access reviews
• Operate the SIEM and detection tooling, tune rules, triage alerts and investigate suspicious activity, and take part in incident response end to end
• Coordinate with the external SOC on monitoring and escalations, and contribute to post-incident reviews and runbooks
• Operate, integrate and improve the corporate security toolset, and proactively harden the environment
• Support ISO 27001 and SOC 2 by operating and evidencing the required controls, including audits and control mapping
• Track and help remediate vulnerabilities, and run and improve the security awareness and phishing-simulation program
• Work with IT, Product Security and Compliance in a distributed team, extending coverage into US time zones

Required profile

• 4+ years of experience in corporate/enterprise security, security operations or IT security engineering
• Hands-on experience with endpoint security (EDR) on macOS and Windows; Linux endpoint management is a plus
• Incident response experience and comfort coordinating with an external SOC/MSSP
• Collaborative style suited to a distributed team, with clear written communication and reliable handoffs across time zones
• Based in the United States, able to cover US business hours

Required skills

• Solid knowledge of IAM/SSO, MFA and modern IAM platforms (Okta, Entra ID/Azure AD, Google Workspace)
• Experience with a SIEM and detection tooling; Splunk preferred
• Network and host hardening, common attack techniques and vulnerability management
• Familiarity with ISO 27001 and SOC 2; scripting (Python, Bash, PowerShell) is a strong plus

What we offer

• Professional development and training, conferences and working groups
• Company outings, happy hours, hackathons and tech talks
• A competitive compensation package with a strong benefits plan