Security Engineer, Corporate Security

Doppel is seeking a Security Engineer to join their Corporate Security team to help protect their people, systems, and data. The role focuses on securing corporate infrastructure, implementing security controls, and managing identity and access systems.

Responsibilities:

• Design, implement, and maintain security controls across corporate infrastructure (endpoints, identity, SaaS, internal networks)
• Own and evolve identity and access management (SSO, MFA, RBAC, lifecycle automation)
• Build automation to manage access controls using APIs, scripting, and infrastructure-as-code
• Implement and maintain conditional access policies and device trust controls
• Improve endpoint security posture (MDM, EDR, disk encryption, patch management, hardening standards)
• Conduct security reviews of new SaaS tools and ensure secure integration with identity systems
• Monitor identity-related logs and authentication signals; respond to suspicious activity
• Drive vulnerability management and remediation efforts across corporate systems
• Develop and maintain corporate security policies, standards, and technical controls
• Support audit readiness and compliance efforts (e.g., SOC 2, ISO 27001), including access reviews and automated evidence collection

Requirements:

• 3–7+ years of experience in security engineering, IT security, or corporate security
• Strong experience with identity platforms (Okta, Azure AD, Google Workspace, etc.)
• Solid understanding of authentication and authorization protocols (SAML, OIDC, OAuth, SCIM)
• Experience implementing RBAC and enforcing least privilege across SaaS environments
• Experience building automation using scripting (Python, Bash, etc.) or infrastructure-as-code (e.g., Terraform)
• Familiarity with EDR, SIEM, and log analysis tools
• Knowledge of network security fundamentals (VPNs, firewalls, segmentation, zero trust)
• Experience responding to and investigating security incidents
• Ability to balance strong security controls with user experience
• Strong written and verbal communication skills
• Experience designing zero trust architectures
• Experience with privileged access management (PAM) tools
• Familiarity with SaaS Security Posture Management (SSPM)
• Experience in a high-growth or startup environment
• Familiarity with compliance frameworks (SOC 2, ISO 27001, HIPAA, etc.)