IT Security Engineer - Riskified

Experience operating EDR/XDR, IdP/SSO, and MDM platforms (CrowdStrike, Okta, IRU/Jamf or equivalents) 4+ years of hands-on experience as a security engineer in a cloud-native / SaaS-first company Hands-on experience implementing and tuning DLP controls across email, endpoints, Experience in a cloud native high-scale SaaS or fintech environment Hands-on experience with LLM-based tools and agents (coding agents, AI assistants, MCP) and a solid understanding of their security risks - prompt injection, tool/connector abuse, data leakage, over-permissioned integrations Proven hands-on experience with incident response and forensic investigation in SaaS environments Experience assessing SaaS and third-party integrations (OAuth scopes, API access, data flows) Strong communicator, able to explain security risks to technical and non-technical stakeholders Professional English (written and spoken) Bachelor's degree in Computer Science, Information Security, or equivalent practical experience

The IT Security team protects endpoints, identities, SaaS applications, and the fast-growing landscape of AI tools and agents used across the company. In this role, you will operate and improve our security stack, handle detection and response across the organization, and drive security controls around identity, endpoints, SaaS, and AI adoption - governing AI assistants, coding agents, and MCP integrations while keeping employees productive. You will report to the IT Security & GRC Lead and work closely with IT, GRC, R&D, external vendors, and the wider security team.

Experience operating EDR/XDR, IdP/SSO, and MDM platforms (CrowdStrike, Okta, IRU/Jamf or equivalents) 4+ years of hands-on experience as a security engineer in a cloud-native / SaaS-first company Hands-on experience implementing and tuning DLP controls across email, endpoints, Experience in a cloud native high-scale SaaS or fintech environment Hands-on experience with LLM-based tools and agents (coding agents, AI assistants, MCP) and a solid understanding of their security risks - prompt injection, tool/connector abuse, data leakage, over-permissioned integrations Proven hands-on experience with incident response and forensic investigation in SaaS environments Experience assessing SaaS and third-party integrations (OAuth scopes, API access, data flows) Strong communicator, able to explain security risks to technical and non-technical stakeholders Professional English (written and spoken) Bachelor's degree in Computer Science, Information Security, or equivalent practical experience