Senior Security Engineer

📋 Job Overview

Atlan is building the context layer for enterprise AI. Enterprises are pouring money into AI and most of it dies in production because the AI does not understand the business context around the data. That is the problem Atlan solves.

Gartner has named context the defining issue in enterprise AI, and calls context graphs the essential infrastructure for AI agents, naming Atlan one of three vendors already building it. We are also the only vendor named a Leader across all four major Gartner and Forrester evaluations for data catalogs, data governance and metadata management, the foundation the context layer runs on.

Come build the infrastructure that AI runs on.

🏢 About Atlan

We are looking for a Senior Security Engineer to own and drive Corporate Security at Atlan. This is a senior individual contributor role with high autonomy and high visibility. You will be the technical authority for everything that protects our people, endpoints, networks, SaaS ecosystem, and corporate data—the full surface area outside of production infrastructure.

The scope is broad and the team is lean. You need to have done this before: deployed and operated the core corporate security stack, made architectural calls on tooling, and built engineering-driven solutions over manual processes. We need someone who can hit the ground running and start delivering from week one, not someone who needs technical guidance on what EDR to pick or how to architect zero trust.

You will provide technical direction to the IT Operations team on security matters, partner closely with Infrastructure Security, Detection & Response, GRC, and Legal teams, and report into Security leadership. Because Atlan serves regulated enterprises, the security posture of our corporate environment directly impacts customer trust, compliance audits, and deal velocity.

🎯 The Role

Corporate Security Architecture & Engineering

Design, build, and operate the security controls for Atlan’s corporate environment: macOS fleet, SaaS applications, corporate identities (Okta/Google Workspace), email, endpoints, and network edge

Evaluate, select, deploy, and operate the corporate security stack: EDR/XDR, MDM, ZTNA, CASB/SSPM, email security, DLP, browser security. You will own vendor selection, PoCs, deployment, tuning, and lifecycle management

Define and enforce security baselines, hardening standards, and configuration policies across all corporate platforms

Drive vulnerability management for corporate assets: patch orchestration, risk-based prioritization, exception tracking, and SLA enforcement

Build security automation and internal tooling. We expect you to use LLMs (Claude, custom agents) to accelerate security workflows

Lead security reviews of new SaaS adoptions, corporate infrastructure changes, and IT projects

Define what it means to operate safely in an environment where AI agents act autonomously across corporate systems

Roadmap & Cross-Team Collaboration

Own the Corporate Security roadmap. Align investments to Atlan’s risk register, compliance calendar, and growth trajectory

Provide technical direction and security guidance to IT Operations on endpoint provisioning, network design, SaaS lifecycle management, and access controls

Partner with Detection & Response on telemetry coverage, detection engineering, and incident handling for corporate-sourced events

Collaborate with Infrastructure Security and AppSec teams to ensure security standards are consistent across corporate and production environments

Support compliance programs (ISO 27001, ISO 42001, SOC 2, HIPAA, GDPR) by ensuring corporate security controls satisfy audit evidence requirements

Communicate security posture, risks, and investment needs to Security leadership and cross-functional stakeholders clearly and persuasively

✅ Key Responsibilities

• Own and drive Corporate Security at Atlan, acting as the technical authority for protecting people, endpoints, networks, SaaS ecosystem, and corporate data
• Design, build, and operate security controls for Atlan’s corporate environment, including macOS fleet, SaaS applications, corporate identities, email, endpoints, and network edge
• Evaluate, select, deploy, and operate the corporate security stack, including EDR/XDR, MDM, ZTNA, CASB/SSPM, email security, DLP, and browser security
• Define and enforce security baselines, hardening standards, and configuration policies across all corporate platforms
• Drive vulnerability management for corporate assets, including patch orchestration, risk-based prioritization, exception tracking, and SLA enforcement
• Build security automation and internal tooling, leveraging LLMs to accelerate security workflows
• Lead security reviews of new SaaS adoptions, corporate infrastructure changes, and IT projects
• Define security standards for operating in an environment with AI agents acting autonomously across corporate systems
• Own the Corporate Security roadmap, aligning investments with Atlan’s risk register, compliance calendar, and growth trajectory
• Provide technical direction and security guidance to IT Operations on endpoint provisioning, network design, SaaS lifecycle management, and access controls
• Partner with Detection & Response on telemetry coverage, detection engineering, and incident handling for corporate-sourced events
• Collaborate with Infrastructure Security and AppSec teams to ensure consistent security standards across corporate and production environments
• Support compliance programs (ISO 27001, ISO 42001, SOC 2, HIPAA, GDPR) by ensuring corporate security controls satisfy audit evidence requirements
• Communicate security posture, risks, and investment needs to Security leadership and cross-functional stakeholders clearly and persuasively

📌 Required Qualifications

• 5+ years of hands-on Security Engineering experience in corporate/enterprise security (endpoint, network, SaaS, identity, or a combination)
• Experience building or significantly maturing a corporate security program, including selecting tooling, defining architecture, and shipping controls
• Strong engineer who still writes code regularly, capable of prototyping tools, writing detections, building integrations, scripting APIs, or debugging complex configuration issues
• Deep experience with macOS fleet security (primary endpoint platform)
• Hands-on experience deploying and operating EDR/XDR, MDM, ZTNA/zero trust, and identity security solutions at scale
• Understanding of modern SaaS security challenges, including shadow IT, OAuth token sprawl, data exfiltration paths, SaaS-to-SaaS integrations, and CASB/SSPM tooling
• Ability to work independently with high autonomy, manage ambiguity, and make sound risk-based prioritization decisions without waiting for direction
• Excellent communication skills, capable of translating complex security topics into clear recommendations for both engineering teams and business stakeholders
• Experience supporting ISO 27001, SOC 2, or equivalent compliance frameworks from the corporate security controls side

⭐ Desirable Experience

• Experience securing corporate environments at high-growth SaaS, AI, cloud, or developer-tools companies
• Advanced macOS security knowledge, including system extensions, Endpoint Security framework, MDM profile engineering, and Declarative Device Management
• Network security architecture for distributed/remote-first environments, including SD-WAN, ZTNA, DNS security, and network segmentation
• Browser security and isolation technologies (Island, Talon/Palo Alto, Chrome Enterprise)
• Proficiency in Python, Go, or similar languages for building security tooling and automation
• Experience leveraging LLMs/AI to augment security operations, build investigative tooling, or automate policy enforcement
• Familiarity with IaC (Terraform), CI/CD pipelines, and DevSecOps practices

🎁 Benefits

Competitive

🛂 Visa & Eligibility

No visa sponsorship is provided for this position.