← All roles

Security Engineer, Corporate

Serval· Engineering
Apply on company site
San Francisco$200k - $325kFull-timePosted 3mo ago

About the role

Role focused on building and scaling Serval's corporate security program across endpoints, device trust, SaaS security posture, workforce identity, and corporate network access. Hands-on leadership to implement secure-by-default systems and mentor a security team.

Responsibilities

  • Own endpoint security for our fleet, maintain hardened configuration baselines, endpoint detection and protection, full-disk encryption, patch and compliance posture, and centralized device management at scale.
  • Stand up and operate a device trust program so that only healthy, managed, and attested devices can reach corporate and production resources, with posture continuously verified as a condition of access.
  • Implement binary authorization and application controls on endpoints, allowlisting and execution policy that prevents unauthorized or untrusted software from running, with a workflow that scales without grinding engineering to a halt.
  • Build a SaaS Security Posture Management practice across the company's SaaS estate, securing configurations, monitoring for drift, and governing third-party application access, focusing on OAuth grant and integration governance against the corporate identity and productivity suite.
  • Own workforce identity and access, single sign-on, strong/phishing-resistant multi-factor authentication, and joiner/mover/leaver lifecycle, enforcing least privilege across corporate systems.
  • Lead corporate network security, including rollout of certificate-based network access control (e.g., 802.1x) across offices, and partnering with Infrastructure Security on zero-trust / mesh network access policies and ACLs.
  • Build, lead, and directly mentor a team spanning endpoint security, corporate/SaaS security, and identity, hiring and scaling these functions as Serval grows.
  • Embed security into how the company works by design, partnering across IT, Engineering, and People teams so that secure defaults and paved roads are easier than the insecure alternative, and using Serval's own agents to automate corporate-security

Qualifications

  • Have 10+ years in cybersecurity with deep expertise in corporate/enterprise security, endpoint security, and workforce identity.
  • Deep, hands-on expertise securing and managing a Mac-native fleet, MDM, configuration management, hardening, and endpoint protection on macOS.
  • Built or operated device trust, binary authorization / application allowlisting, and SaaS security posture management programs in a fast-moving environment.
  • Strong command of workforce identity (SSO, phishing-resistant MFA, lifecycle automation) and third-party OAuth application governance across a corporate identity and productivity suite.
  • Experience rolling out certificate-based network access control (802.1x) and partnering on zero-trust / mesh network access policies and ACLs.
  • Stellar leadership skills and a demonstrated history of driving durable, continuous improvements to programs, processes, and people.
  • Strong engineering and automation instincts, comfortable scripting, building tooling, and treating corporate-security controls as code rather than one-off manual configuration.
  • Deep experience building and leading endpoint, corporate/SaaS security, and identity teams.
  • Mission-oriented, unimpeachable integrity, and passion for securing a modern, high-trust workforce in a complex, fast-paced environment.

Skills

Required:Endpoint securityDevice trustBinary authorization / allowlistingSaaS Security Posture ManagementWorkforce identity & SSONetwork access control (802.1x)Leadership & team building

Benefits

  • Meaningful early-stage equity
  • Comprehensive health coverage
  • Flexible PTO
  • Daily lunches and snacks
  • onsite gym access
  • Regular team events and offsites
Last updated Aug 19, 2026. Interested? Apply on the company site.

About Serval

AI Agents for IT

Serval is the AI-native ITSM for modern teams. Use natural language to automate routine tasks and resolve help desk requests.

AI guidanceIT operationsITSMai-agents-and-applicationsautomationhelpdeskknowledge basesecurity
Company profileWebsite

More open roles at Serval