Betterment

Sr. Security Engineer, Corporate Information Security

Betterment HQ - New York City · Senior

No sponsorship$165k-$185kDetected 20 days ago

PythonGoLinuxOAuthAgentic AICybersecurityComplianceHRISFirewallNetwork MonitoringZero TrustCommunicationMentoring

About the role

Security Engineer, Corporate Information Security to be a principal member of the Workforce Security team.
As we extend centralized management to a small Windows and Linux footprint, you'll help shape how we do that securely from day one.
This is a hands-on senior IC role focused on designing, implementing, and continuously improving identity architecture, privileged access controls, endpoint hardening standards, and our overall workforce security posture.

Build a sustainable Identity Governance & Administration (IGA) practice, including User Access Review campaigns that produce real evidence rather than rubber stamps.
Lead initiatives across authentication, authorization, federation, and privileged access.
Design time-bound, just-in-time, and break-glass patterns (PIM-equivalent) for high-risk roles so standing privilege trends toward zero.
Own configuration baselines for macOS, Windows, and Linux Desktops, with mobile and managed browser controls layered on top.
Lead the workforce vulnerability management program for endpoints and corporate SaaS.
Design remediation SLAs by severity and asset class, run remediation campaigns that actually close findings, and partner with IT Systems to surface and fix identity and configuration misconfigurations.
Our team is passionate about our mission, to empower people to build wealth with confidence and ease.
Your weeks blend strategic architecture, hands-on implementation, and operational support:

comfort extending security to mobile and managed browser surfaces.
Python, Go, or similar with a track record of automation that survives the person who built it.
Enterprise network: Experience with network monitoring & alerting, perimeter blocking, intelligence gathering/sharing, and other network related security controls (ZTNA)
Familiarity with endpoint management and EDR
Experience with network monitoring & alerting, perimeter blocking, intelligence gathering/sharing, and other network related security controls (ZTNA)

Real-world Zero Trust implementation experience, not as a slide.
Working knowledge of policy-as-code (OPA / Rego) or similar.
Experience partnering with an MDR / managed SOC and shaping their detection content.
Security certifications such as CISSP or vendor IAM certifications.
Join a team built on these core values
We set audacious goals
We don't just show up
we give our all, then celebrate our wins.

include DLP enforcement to protect PII and conducting email investigations for spam, phishing and other threats.
Curiosity for AI tools and workflows; an instinct for enabling responsibly rather than reflexively blocking.

Below we've reflected the base salary range for this position.
The range listed is just one component of Betterment's total compensation package for employees.

This job may also be eligible for variable compensation in the form of a company incentive bonus.
Equity for all employees, including new hire and refresher grants.
Flexible paid time off, paid parental leave, and a fully paid four-week sabbatical in your sixth year.

us as a transgender or transsexual individual), sexual orientation, marital status, age, physical or mental disability, citizenship, past, current or prospective service in the uniformed services, predisposing genetic ch

This listing is sourced directly from Betterment's careers page and normalized into a canonical job model.