Senior Security Engineer (IT)

You will keep Coder’s internal systems secure, reliable, and functional. This role matters because strong endpoint security, access controls, and application protections make it easier for employees to work safely and for the business to move with confidence. This is not only a keep-the-lights-on IT role. You will handle day-to-day security work across IT systems, but you will also lead platform rollouts and high-visibility projects that shape how we manage devices, protect data, secure access, and support compliance. This role serves as the primary point person for IT corporate security, offering real influence over platforms, processes, and tooling decisions in a fast-growing technology company that requires both steady ownership and thoughtful improvement. You will partner closely with Security, own key platforms like Okta, Slack, and Google Workspace, and help us improve the systems and processes that protect the company.

What you’ll do here:

• Own security administration and configuration for core IT platforms, including Okta, Slack, and Google Workspace.
• Manage general IT support requests during EMEA working hours, with a focus on security-related systems and issues.
• Lead rollout and ongoing management of endpoint and data protection tools, including MDM, DLP, and EDR.
• Partner with the broader Security team on SOC2 compliance work, audit preparation, and security improvement projects.
• Work with Security to develop and refine policies for endpoint protection and corporate application security.
• Act as the primary IT Systems point of contact during declared security incidents, including triage, coordination, and follow-through.
• Monitor security portals, dashboards, and automated alerts across IT systems, then investigate and act on what matters.
• Develop and enforce access groups across applications and platforms, with a focus on least privilege and operational clarity.
• Audit user access across systems and tools, and automate that work where it makes sense.
• Support security audits by representing IT systems, reviewing internal processes, and helping harden controls over time.
• Create and maintain documentation for IT security systems, processes, FAQs, and support workflows.
• Build installation packages and policy assignments for endpoint security software and serve as an escalation point for deployment or configuration issues.
• Create visual data flows that show how systems interact and what data moves between them.
• Build dashboards, reports, datasets, and alerting using APIs, logging platforms, and internal systems.
• Stay current on security trends, best practices, zero-day notices, and vendor alerts, then assess internal impact and recommend response plans.

What we’re looking for:

• 5+ years of experience supporting Windows, macOS, and Linux operating systems.
• 3+ years of experience working with endpoint security tools such as CrowdStrike, SentinelOne, or similar EDR and antivirus platforms.
• 3+ years of experience with SSO and SAML technologies using Okta, Google, or other identity providers.
• 3+ years of experience with mobile device management tools such as Jamf, Workspace ONE, or similar platforms.
• 3+ years of experience administering DLP controls across platforms such as Google Workspace, Slack, Okta, and GitHub, and experience administering general security controls in Okta and Google Workspace.
• Experience leading EDR, MDM, and DLP rollouts in a mid-sized organization.
• Experience working with compliance platforms such as Drata.
• Strong understanding of SOC2 requirements, including experience supporting audits.
• Strong understanding of workstation security policy across macOS, Windows, and Linux. Encryption, firewall, password complexity, etc.
• Experience with incident management and change management in an IT or security environment.
• Comfort using AI tools to improve efficiency and reduce repetitive work.
• Clear judgment, strong documentation habits, and the ability to work across IT and Security without creating friction.

Bonus if you have:

• Experience using scripting and automation to improve workflows, reporting, and operational efficiency.
• Experience using flowgramming tools such as Okta Workflows, Workato, or similar.
• Experience tinkering with APIs to pull data, trigger actions, or connect security systems.
• Strong understanding of identity and access management across cloud providers, including GCP, AWS, and Azure.
• Experience building practical internal tools, dashboards, or reporting workflows for IT and security teams.

About Coder:

Coder is an AI software development company leading the future of autonomous coding. We empower teams to build software faster, more securely, and at scale through the collaboration of AI coding agents and human developers. Our mission is to make agentic AI a safe, trusted, and integral part of every software development lifecycle.

Our self-hosted AI Development Environment is the foundation for deploying agentic AI in the enterprise. It provides a secure, standardized, and governed workspace to deploy autonomous coding agents alongside human developers, accelerating innovation while maintaining control and compliance. Coder's isolated, policy-driven environments improve productivity, cut cloud costs, and reduce data risks. Developers transition to AI at their own pace using their own tools. Platform and security teams can govern, audit, and manage a great developer experience at scale.

Interview process:

We believe that the interview process should be transparent, consistent, and enjoyable. We value your time and hope to complete the interview process in two to four weeks, if schedules allow. Through your interviews, you will meet a mix of individual contributors, managers, and senior leaders.

AI use during the interview process:

As an AI company, Coder embraces the use of AI tools, and we want to be transparent about our expectations as you navigate our interview process. Not permitted: Using AI assistance during conversational interviews. Permitted: Using AI tooling for take-home assessments. Please flag where and to what extent it was used in your take-home. Your submission will not be penalised for using AI as long as it is done honestly.

Our use of AI in hiring:

We use AI tools to help manage our recruitment process efficiently and fairly. Specifically: Ashby helps us review inbound applications by surfacing candidates who best match the role requirements we've defined. This tool does not make hiring decisions - it helps our team prioritise which applications to review first. Granola takes notes during our interview calls so our team can focus on the conversation with you. All hiring decisions are made by humans. Our team reviews applications, conducts interviews, and makes final selections. AI tools assist us but never replace human judgment, and these practices are conducted in compliance with applicable data protection, AI governance, and labour laws. Your data is not used to train AI models.

In accordance with New York City Local Law 144, an independent bias audit has been conducted on 'Automated Employment Decision Tools'; results are available for Ashby.

If you're applying for a role at Coder and have questions about how we use AI in our process, or if you'd like to request information about the data we collect, please contact careers@coder.com.

Coder is a proud Equal Opportunity Employer. We are committed to providing equal employment opportunities to qualified applicants and do not discriminate on the basis of race, colour, ancestry, religion, sex, pregnancy, gender, gender identity, gender expression, sexual orientation, national origin, age, marital status, genetic information, disability, protected veteran status or any other characteristic protected by federal, state, or local laws.