Staff Corporate Security Engineer

Overview

Staff Corporate Security Engineer responsible for building secure-by-default controls for endpoints and SaaS platforms. The role emphasizes macOS security and turning requirements into measurable, auditable engineering systems in a fully remote environment.

What you'll do

• Lead security architecture for GitLab’s endpoint fleet, with primary focus on macOS.
• Design and support automation for secure endpoint deployment, configuration, and lifecycle management.
• Manage endpoint and SaaS security configuration using Terraform, version control, CI pipelines, and automated rollouts.
• Define and enforce security baselines across macOS, iOS, Windows, and Linux endpoints.
• Develop patching and software distribution approaches aligned with security, compliance, and operational requirements.
• Partner with Security Operations and detection/response teams to improve endpoint telemetry, detections, and response models.
• Mentor engineers and act as a senior escalation point for complex endpoint security issues.

What you'll need

• Experience designing and delivering endpoint, systems, or corporate security solutions with scalable, durable controls.
• Deep knowledge of endpoint management platforms such as Jamf Pro or FleetDM, especially for architecting and securing macOS environments.
• Hands-on ability with Terraform and Infrastructure-as-Code, including module design, state management, and pipeline-based deployment.
• Experience with GitOps workflows using Git repositories, merge requests, code review, and automated pipelines.
• Strong proficiency in scripting/programming for automation/security tooling such as bash, Python, PowerShell, or Go.
• Familiarity with cloud identity providers and directories including Okta, Google Workspace, and LDAP.
• Ability to communicate clearly and collaborate across distributed teams in an all-remote environment.

Details

• Work environment: fully remote.