---
title: 'Sr. Enterprise Security Engineer at Material Security'
canonical: 'https://feeny.ai/job/sr-enterprise-security-engineer-material-security-remote-1jrryz6t8w2c'
type: 'job'
last_seen: '2026-11-04'
---

# Sr. Enterprise Security Engineer at Material Security

- **Company:** Material Security
- **Location:** Remote
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-10-19
- **Last confirmed live:** 2026-11-04
- **Apply:** https://jobs.ashbyhq.com/materialsecurity/df897fcf-10c5-4da2-83ee-2e0eb9268734

## Job description

Material works with some of the most sophisticated security teams in the industry. These customers have entrusted us with protecting one of their most critical assets: Google Workspace. Your mission is to make our own corporate environment worthy of that trust: take a mature security program and make it rigorous, measured, and adapted to the new generation of LLM-based security tooling. Success means we can detect and defend against sophisticated attacks. This includes hardening our corp services, increasing detection efficacy while reducing response times, and making sure our employees are working with customer data in ways that reflect the trust of our customers Concretely: bring your experience to identify and close gaps in our environment, rebuild our detection and response around LLMs — and be customer zero for our own product, working with Engineering to turn what you learn into detection improvements that ship to every customer. The environment is what you’d expect at a modern startup: Mac-only fleet, Google Workspace, expected security services like a SIEM, IdP, EDR, fleet management and a cloud production environment. Our security posture is more mature than typical for a company our size.

You Might Be This Person If

- You have owned a corporate stack end to end — devices, identity, SaaS, collaboration — and turned controls that were deployed into controls that are enforced.
- You treat the IdP, the device fleet, and the SaaS estate as one system, and you harden the paths between them rather than each tool in isolation.
- You have written detections that caught real attacks and removed the noise that buried the team, and you can explain how you measured the difference.
- You have responded to live incidents and made the containment call. You know what to revoke first.
- When a job requires someone to do something manually and repetitively, your instinct is to build the system that makes that job unnecessary.
- You have put an LLM into a security workflow, measured it, and have specific views about where it should and should not be trusted.
- You work through design decisions by asking questions on both sides, and when the call goes against you, you respect it and build it.
- Bonus: you have written a technical paper, spoken at a technical conference, or maintain open-source security tooling.

## Responsibilities

- Detection and Response (own): Own corporate telemetry and the detection content on it. Close coverage gaps, reduce noise with measured fidelity, and build detections for what matters here: account takeover, session token theft, malicious OAuth grants, admin abuse, and exfiltration by someone who legitimately has access. Lead corporate incident response and own the playbooks.
- LLM-Driven Triage (own): Design and build the agent that reviews privileged access grants, customer data access, and high-fidelity endpoint and identity alerts in near real time, with labeled evaluation sets, measured precision and recall, explicit limits on automated action, and a defense against being steered by log content or an employee's reply.
- Endpoint (shared with the CorpSec team): Device management and endpoint detection for the Mac fleet. Automate update enforcement, deepen EDR coverage, bring browser-level DLP to the fleet, and enforce BYOD posture on iOS and Android.
- Identity and SaaS (shared with the CorpSec team): The identity provider and the SaaS estate. Maintain phishing-resistant authentication everywhere, address the applications that cannot do SSO, automate access-review evidence, and turn manual vendor and OAuth application review into a pipeline.
- Google Workspace (shared with the CorpSec team): Admin alerting, OAuth governance, Apps Script governance, sharing, and DLP, using our own product where it fits. Partner with Engineering to propose, test, and ship detection updates to the product based on what you see in our own tenant.
- Corporate to Production (shared with AppSec): The boundary between corporate and production: detections that cross it, just-in-time access, and the logging that shows who touched what.

## What We’re Looking For

- Operator Depth: 6+ years in corporate or enterprise security or detection and response, with hands-on ownership of a SIEM, detection content, and incident response.
- Software Engineering: Comfortable in Python, Go, or TypeScript working directly against vendor APIs. You automate enforcement rather than configuring it by hand.
- Identity Fundamentals: Deep understanding of OAuth, SAML/OIDC, session and token lifecycle, and how identity reaches cloud IAM.
- Endpoint Fluency: You have managed a Mac fleet with a modern MDM and EDR and taken it from deployed to enforced.
- Applied LLM Judgment: You have built or seriously experimented with LLM-driven workflows, including prompting, tool use, and evaluation, and can explain how you would know whether one is doing a good job.
- Software Development (nice to have): You have contributed detection logic or security features to a product codebase and are comfortable working inside an engineering team's review and release process.
- How You Work: Collaborative, curious, direct. You work well next to more junior engineers without taking over, and you would rather engineer a problem away than staff it.

-- Material Security is a remote-first workplace with an office in San Francisco, California. By clicking "Apply for this Job", you acknowledge that you have read the [California Candidate Privacy Notice Regarding Use of Personal Information](https://material.security/ccpa) and hereby agree to its terms. Compensation at Material Security is determined by a range of factors, including but not limited to the individual’s particular combination of knowledge, skills, competencies, and experience. The projected compensation range for this position is $220,000-$240,000 annually.

## Equal Opportunity Employer Statement

Material Security is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate on the basis of race, color, religion, creed, national origin, ancestry, sex, gender, gender identity or expression, sexual orientation, age, marital status, veteran status, disability, genetic information, or any other legally protected status. All employment decisions are based on qualifications, merit, and business needs.

## About Material Security

## Company Overview
- **One-liner**: Material Security is a detection and response platform purpose-built to secure Google Workspace and Microsoft 365, protecting email, data, accounts, and configurations from modern threats.
- **Entity Type**: Private (Series C)
- **Headquarters**: San Francisco, California, United States
- **Founded**: 2017
- **Founders**: Ryan Noon, Abhishek Agrawal, Chris Park

## Core Business
- **Primary Industry**: Computer and Network Security (Cloud Office Security)
- **Target Customers**: B2B, primarily mid-market and enterprise security teams using Google Workspace or Microsoft 365
- **Mission Statement**: To build security that works — and works simply — by bringing pragmatism, productivity, and interdisciplinary thinking to cloud workspace security.

## Products & Services
Material Security offers a unified SaaS platform with several integrated modules:
- **Email Security**: Automatically detects and remediates sophisticated malicious emails that bypass native email controls.
- **File Security**: Protects sensitive content by managing sharing permissions and reducing data sprawl across cloud drives.
- **Account Security**: Hardens user accounts, detects risky behavior, and contains the blast radius of a compromise.
- **Data Security (DLP)**: Prevents data loss and protects sensitive information in emails & files at scale without hampering productivity.
- **Posture Management**: Monitors and remediates configuration drift and risky behaviors across the workspace automatically.

## Market Standing
- **Valuation**: Not publicly disclosed
- **Total Funding**: $162.0M (3 rounds: Seed, Series A, B, C)
- **Key Investors**: Andreessen Horowitz (led Series A), Founders Fund (led Series C), Stripe, Elad Gil, and angel investors including Andy Bechtolsheim, Nat Friedman, and Drew Houston. [material.security](https://material.security/about)
- **Key Metric**: Annual Revenue estimated at $3.0M (via LinkedIn company data). Note: As a private company, this figure is not officially confirmed and may lag.
- **Growth Signals**: 8,233 LinkedIn followers (YoY growth of +19.2%), recently posted 8 active job openings (up 700% YoY and 300% quarter-over-quarter). A notable hub for talent from companies like Dropbox, Okta, and CrowdStrike. [linkedin.com](https://www.linkedin.com/company/materialsecurity)

## Competitive Advantages
- **Purpose-built for Cloud Workspaces**: Unlike legacy email security tools retrofitted for the cloud, Material's platform is natively designed for the architecture of Google Workspace and Microsoft 365.
- **Single-tenant Architecture**: Offers "Isolated Deployments" for full customer environment isolation, a strong differentiator for enterprise clients with strict data residency requirements.
- **Automation & Efficiency**: Focuses on built-in auto-remediations to reduce the manual workload for lean security teams.
- **Founding Team Pedigree**: The co-founders (Dropbox, Google, Microsoft Research, Stanford) bring deep experience in both building scalable productivity platforms and enterprise security.

## Strategic Focus
Material's current strategic priorities include:
- **Incumbent Disruption**: Competing against legacy email security gateways (e.g., Mimecast, Proofpoint) by offering a unified platform that covers email, data, account, and posture security in one view.
- **AI-native Threats**: Positioning its platform to handle the new wave of AI-generated phishing and social engineering attacks that bypass traditional signature-based detection.
- **Channel & Alliances**: Growing its go-to-market motion through strategic partnerships (e.g., Strategic Alliances Lead role recently hired).
- **Product Expansion**: Continuing to build out the "Check" product (posture management) to become the central security console for cloud workspaces.

## Why Work Here
- **Remote-First Culture**: Material is a remote-first organization with a physical HQ in San Francisco. Employees can work from home, co-working spaces, or the office. They host in-person company gatherings twice a year. [material.security](https://material.security/careers)
- **Engineering Culture**: The founders come from a strong engineering background (Dropbox, Google, Microsoft Research). The company values "Act with urgency," "Start with yes," and "Engineer customer love."
- **Benefits**: 100% coverage of Health, Dental, & Vision for employees and dependents, unlimited vacation (that they claim is actually used), up to 16 weeks parental leave, cell phone & internet stipend, 401(k), and an AI-native tooling environment (including access to Claude, Cursor).
- **AI-First Workplace**: The company actively invests in AI tools for its own productivity, making it an attractive environment for engineers who want to work with cutting-edge tech.
- **Meaningful Impact**: The product protects critical infrastructure for thousands of businesses, solving a pressing and evolving problem.

## Sources
1. [material.security - Product & Security Overview](https://material.security/)
2. [material.security - About Us and Leadership](https://material.security/about)
3. [material.security - Careers Page](https://material.security/careers)
4. [material.security - Remote-First Culture](https://material.security/resources/remote-first-culture-built-on-flexibility-boundary-setting-autonomy-and-meetups)
5. [linkedin.com - Material Security Company Page](https://www.linkedin.com/company/materialsecurity)

## Other roles at Material Security

- [Account Executive, SMB](https://feeny.ai/job/account-executive-smb-material-security-remote-h0pr2b217nze)
- [Sr. Technical Customer Success Manager](https://feeny.ai/job/sr-technical-customer-success-manager-material-security-remote-xxs1k53wj7r2)
- [Senior Site Reliability Engineer](https://feeny.ai/job/senior-site-reliability-engineer-material-security-remote-pzxpg997jqap)
- [Sr. Manager, Content Marketing](https://feeny.ai/job/sr-manager-content-marketing-material-security-remote-20fqv3bx4nt0)