Description
At Komodo Health, you will engineer and run Corporate IT Security, protecting the employee environment across identity, devices, endpoints, internal networks, workforce SaaS and AI tools, and workforce-related risk.
Responsibilities:
- Identity and access hardening in the enterprise identity provider and productivity suite
- Device trust and conditional access using device-posture tooling with MDM and EDR
- Joiner-mover-leaver integrity through the identity provider with no out-of-band accounts
- Workforce SaaS security posture, including data export and API access controls
- Corporate incident response as Incident Commander for incidents limited to the corporate environment
- Workforce AI guardrails, including approved-tool standards and SSO
Requirements:
- 6–8+ years in corporate security, IT security, security engineering or security operations
- Deep experience with an enterprise identity provider and its protocols
- Hands-on experience with device trust, MDM and EDR across macOS and Windows
- Experience hardening productivity suites and major SaaS platforms
- Experience defining detection use cases and writing detection rules
- Served as incident commander or lead responder on real security incidents
- Production-quality scripting in Python or similar
- Experience producing control evidence for SOC 2 and other audits
- Clear writing and executive communication
Nice to Have:
- Experience in healthcare, life sciences or another environment handling regulated or sensitive data
- Experience at a high-growth company through Series C–E or pre-IPO stages
- Identity workflow automation, identity threat detection or device-assurance integrations
- Experience with SSPM or compliance-automation platforms
- Insider-risk or DLP programs, or digital forensics
- Evaluating and implementing enterprise security vendors
- Certifications such as GCIH or CISSP