Sr. Corporate Security Engineer

The Role

Cockroach Labs seeks a Senior Corporate Security Engineer to protect endpoints, cloud platforms, internal applications, and enterprise SaaS environments. This hands-on, cross-functional role focuses on AI governance, data protection, and corporate security operations, with ownership of security initiatives from design through implementation.

Candidates must be based in the NYC area. The company follows a hybrid model: employees local to an office attend on Mondays, Tuesdays, and Thursdays, with flexible work the rest of the week.

Responsibilities

• Build and manage AI governance, including security controls for AI tools, agents, MCP connections, and data flows.
• Develop and secure internal applications hosted on GCP, including the internal LLM gateway.
• Design and maintain DLP, data classification, and governance controls.
• Administer and optimize CASB and SaaS security controls.
• Assess risks for internal applications, AI use cases, and third-party tools.
• Monitor and respond to security alerts and incidents across email, endpoints, SaaS applications, and cloud environments.
• Reduce risks from Shadow IT, Shadow AI, and SaaS sprawl.
• Build automations to improve security visibility, response, and operational efficiency.
• Partner with IT, Legal, Compliance, and Security on access management, endpoint security, regulatory requirements, and third-party risk.
• Lead corporate security projects from design through implementation.

Qualifications

• At least 5 years of experience in corporate security, security operations, IT security, or a related field.
• Experience owning a security program, major initiative, or complex cross-functional project.
• Hands-on experience with DLP, CASB, or SaaS security tools, including policy creation and tuning.
• Experience securing cloud-hosted applications and corporate IT environments.
• Strong understanding of identity and access management, endpoints, email, file-sharing systems, networks, and enterprise SaaS applications.
• Familiarity with security and data risks associated with AI tools, applications, agents, and integrations.
• Experience conducting risk assessments, gap assessments, or threat modeling.
• Strong project management, communication, and cross-functional collaboration skills.

Preferred Qualifications

• Experience building AI governance controls or securing AI applications and agents.
• Experience with Netskope, Zscaler, GCP, Okta, Google Workspace, CrowdStrike Falcon, or similar technologies.
• Experience with SIEM, SOAR, and security automation tools such as Tines or Python.
• Previous IT support or systems administration experience.
• Familiarity with NIST, SOC 2, ISO 27001, GDPR, or CIS Critical Controls.
• Experience using AI development tools such as Claude Code or Cursor.
• Relevant security certifications, such as Security+, CISSP, or CCSP.

First Three Months

• Month 1: Join the Corporate Engineering Team and learn the company's technology, systems, and processes.
• Month 2: Evaluate the AI governance program, propose improvements, scope security projects, and track goals and milestones.
• Month 3: Lead Corporate Security projects, manage AI governance, help build the AI Gateway and other infrastructure, and support teams with AI workloads, AI applications, and secure hosting of internal tools.

Team

Reports to Elliot Kartus, Manager, Corporate Security. Adam Brennick is Director, Security & GRC and the manager's manager.

Compensation and Benefits

The anticipated annual U.S. base salary range is $131,000–$174,100 USD. Actual salary may vary or fall outside the range based on qualifications, location, skills, experience, and competencies. The company may consider candidates with different experience levels.

Benefits include stock options, medical, vision and dental insurance, life and disability insurance, professional development funds, flexible paid time off, 11 paid holidays, 10 paid sick days, paid parental leave, a 401(k), and mental wellbeing benefits.

Application

Apply through the company's Careers Page. This position remains posted until filled. For interview accommodations, email accessibility@cockroachlabs.com.