Senior Security Engineer - Corporate Security

WHO WE ARE Atlan is building the context layer for enterprise AI. Enterprises are pouring money into AI and most of it dies in production because the AI does not understand the business context around the data. That is the problem Atlan solves. Gartner has named context the defining issue in enterprise AI, and calls context graphs the essential infrastructure for AI agents, naming Atlan one of three vendors already building it. We are also the only vendor named a Leader across all four major Gartner and Forrester evaluations for data catalogs, data governance and metadata management, the foundation the context layer runs on. Come build the infrastructure that AI runs on. WHAT WILL YOU DO? 🤔 We are looking for a Senior Security Engineer to own and drive Corporate Security at Atlan. This is a senior individual contributor role with high autonomy and high visibility. You will be the technical authority for everything that protects our people, endpoints, networks, SaaS ecosystem, and corporate data—the full surface area outside of production infrastructure. The scope is broad and the team is lean. You need to have done this before: deployed and operated the core corporate security stack, made architectural calls on tooling, and built engineering-driven solutions over manual processes. We need someone who can hit the ground running and start delivering from week one, not someone who needs technical guidance on what EDR to pick or how to architect zero trust. You will provide technical direction to the IT Operations team on security matters, partner closely with Infrastructure Security, Detection & Response, GRC, and Legal teams, and report into Security leadership. Because Atlan serves regulated enterprises, the security posture of our corporate environment directly impacts customer trust, compliance audits, and deal velocity. - Corporate Security Architecture & Engineering - Design, build, and operate the security controls for Atlan’s corporate environment: macOS fleet, SaaS applications, corporate identities (Okta/Google Workspace), email, endpoints, and network edge - Evaluate, select, deploy, and operate the corporate security stack: EDR/XDR, MDM, ZTNA, CASB/SSPM, email security, DLP, browser security. You will own vendor selection, PoCs, deployment, tuning, and lifecycle management - Define and enforce security baselines, hardening standards, and configuration policies across all corporate platforms - Drive vulnerability management for corporate assets: patch orchestration, risk-based prioritization, exception tracking, and SLA enforcement - Build security automation and internal tooling. We expect you to use LLMs (Claude, custom agents) to accelerate security workflows - Lead security reviews of new SaaS adoptions, corporate infrastructure changes, and IT projects - Define what it means to operate safely in an environment where AI agents act autonomously across corporate systems - Roadmap & Cross-Team Collaboration - Own the Corporate Security roadmap. Align investments to Atlan’s risk register, compliance calendar, and growth trajectory - Provide technical direction and security guidance to IT Operations on endpoint provisioning, network design, SaaS lifecycle management, and access controls - Partner with Detection & Response on telemetry coverage, detection engineering, and incident handling for corporate-sourced events - Collaborate with Infrastructure Security and AppSec teams to ensure security standards are consistent across corporate and production environments - Support compliance programs (ISO 27001, ISO 42001, SOC 2, HIPAA, GDPR) by ensuring corporate security controls satisfy audit evidence requirements - Communicate security posture, risks, and investment needs to Security leadership and cross-functional stakeholders clearly and persuasively WHAT MAKES YOU A GREAT MATCH FOR US? 😍 MUST HAVE - 5+ years of hands-on Security Engineering experience in corporate/enterprise security (endpoint, network, SaaS, identity, or a combination) - Have built or significantly matured a corporate security program before: selected the tooling, defined the architecture, shipped the controls. Not just operated what someone else built - Strong engineer who still writes code regularly. You can prototype a tool, write a detection, build an integration, script an API, or debug a complex configuration issue - Deep experience with macOS fleet security (this is our primary endpoint platform) - Hands-on experience deploying and operating EDR/XDR, MDM, ZTNA/zero trust, and identity security solutions at scale - Understand modern SaaS security challenges: shadow IT, OAuth token sprawl, data exfiltration paths, SaaS-to-SaaS integrations, and CASB/SSPM tooling - Can work independently with high autonomy, manage ambiguity, and make sound risk-based prioritization decisions without waiting for direction - Excellent communication skills: can translate complex security topics into clear recommendations for both engineering teams and business stakeholders - Experience supporting ISO 27001, SOC 2, or equivalent compliance frameworks from the corporate security controls side STRONG BONUS - Experience securing corporate environments at high-growth SaaS, AI, cloud, or developer-tools companies - Advanced macOS security: system extensions, Endpoint Security framework, MDM profile engineering, Declarative Device Management - Network security architecture for distributed/remote-first environments: SD-WAN, ZTNA, DNS security, network segmentation - Browser security and isolation technologies (Island, Talon/Palo Alto, Chrome Enterprise) - Proficiency in Python, Go, or similar languages for building security tooling and automation - Experience leveraging LLMs/AI to augment security operations, build investigative tooling, or automate policy enforcement - Familiarity with IaC (Terraform), CI/CD pipelines, and DevSecOps practices as they apply to corporate infrastructure - Mobile security for iOS/Android in a BYOD environment - Data Loss Prevention (DLP) program design and implementation across endpoints, email, SaaS, and cloud storage - Exposure to ISO 42001 (AI Management Systems) controls WHY ATLAN? Joining Atlan means being part of a global movement to help data teams do their life’s best work. Here’s what you can expect: - Competitive Compensation: We benchmark at the top of the market and keep compensation simple: strong base salary, performance‑based variable pay, and impact‑driven equity (for most roles), so your total rewards grow in step with the value you create over time. - AI Native Culture: Atlan is where AI-native builders come to build the systems the future of work will run on. AI isn’t an add-on, it’s woven into how we build, think, and work every day, empowering every Atlanian to move faster and create a bigger impact. - Health & Wellness: From Day‑1 health, dental, vision, and mental health to flexible health stipends, we design benefits offerings that lead in each country we're in. - Flexible Time Off & Leave Policies: We trust you to own your energy: flexible time off and modern leave so you can unplug properly, support yourself and your loved ones, and come back ready to drive an impact. - Accelerated Growth & Learning: Develop at an uncommon velocity through cutting-edge tech, complex implementations, and an experienced team that values mastery. - Global, Remote-First, High-Trust: Work from anywhere with a diverse team across 15+ countries, in a trust-first, async environment that gives you true flexibility and ownership over how you work. More About Us Atlan is building the shared context layer that enterprises need so AI can operate on trusted, governed context. The conversation has moved from data leaders asking: “Can we trust the data in our stack?” to businesses asking: “Can we trust AI inside the business?” We are the missing infrastructure for bu