TRM Labs

1 day ago

Enterprise Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 17 hours agoStatus: Live

Job Summary

Own secure-by-default identity, endpoint, and SaaS security improvements for a corporate environment. Engineer hardened macOS/Windows endpoint baselines, automate identity and access controls in Entra ID and Google Workspace, and codify controls using infrastructure-as-code and policy-as-code. Build integrations and AI-assisted workflows to reduce manual grants and improve visibility via logging and detection. Partner with Security and Compliance while maintaining usability through a risk-based approach and on-call rotation.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Engineer secure-by-default endpoint baselines for macOS and Windows, including encryption, firewall, application controls, device compliance, and configuration standards.
•Automate and scale identity and access controls in Entra ID and Google Workspace, including SSO, SCIM, conditional access, privileged access workflows, access reviews, and joiner/mover/leaver.
•Codify security controls as code (Terraform/configuration profiles/policy-as-code) with peer review, change history, testing/rollback, and measurable outcomes.
•Build and maintain automations and integrations (e.g., n8n/SlackOps/APIs/scripts) to reduce manual access grants and eliminate repetitive workflows.
•Harden SaaS and collaboration platforms, improve visibility and detection via logging, and partner with compliance/risk stakeholders to document and operationalize controls.

Key Requirements

•Experience engineering and scaling endpoint security controls for macOS and Windows.
•Strong IAM foundation with hands-on Entra ID (conditional access, SSO, access governance) and Google Workspace and/or Microsoft 365 administration.
•Ability to automate real operational workflows using tools such as Bash, PowerShell, and Python.
•Fluency with AI-assisted engineering, including using coding agents/LLM tooling and validating outputs.
•Strong troubleshooting and systems thinking across identity, endpoint, network controls, and SaaS integrations.

Experience:Endpoint securityIdentity and access managementSaaS securityInfrastructure-as-codeSecurity automation

Skills:TroubleshootingSystems thinkingRisk-based decision makingStakeholder communicationAutomation mindset

Tech Stack:Entra IDGoogle WorkspaceMicrosoft 365SSOSCIMConditional accessTerraformPolicy-as-codeBashPowerShellPythonIntuneN8nSlackOpsAPIsClaude CodeLLMMCPDefenderSentinel

Company Brief

TRM Labs

Provides blockchain intelligence and crypto risk management solutions to help financial institutions, governments, and crypto firms detect fraud, trace illicit activity, and comply with regulatory requirements across digital asset ecosystems.

Industry: RegTech

Company Size: Large (251 to 1,000 employees)

Growth: Growth Stage Startup

Headquarters: San Francisco, United States

Founded: 2018

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

TRM Labs

1 day ago

Enterprise Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 17 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Engineer secure-by-default endpoint baselines for macOS and Windows, including encryption, firewall, application controls, device compliance, and configuration standards.
•Automate and scale identity and access controls in Entra ID and Google Workspace, including SSO, SCIM, conditional access, privileged access workflows, access reviews, and joiner/mover/leaver.
•Codify security controls as code (Terraform/configuration profiles/policy-as-code) with peer review, change history, testing/rollback, and measurable outcomes.
•Build and maintain automations and integrations (e.g., n8n/SlackOps/APIs/scripts) to reduce manual access grants and eliminate repetitive workflows.
•Harden SaaS and collaboration platforms, improve visibility and detection via logging, and partner with compliance/risk stakeholders to document and operationalize controls.

Key Requirements

•Experience engineering and scaling endpoint security controls for macOS and Windows.
•Strong IAM foundation with hands-on Entra ID (conditional access, SSO, access governance) and Google Workspace and/or Microsoft 365 administration.
•Ability to automate real operational workflows using tools such as Bash, PowerShell, and Python.
•Fluency with AI-assisted engineering, including using coding agents/LLM tooling and validating outputs.
•Strong troubleshooting and systems thinking across identity, endpoint, network controls, and SaaS integrations.

Experience:Endpoint securityIdentity and access managementSaaS securityInfrastructure-as-codeSecurity automation

Skills:TroubleshootingSystems thinkingRisk-based decision makingStakeholder communicationAutomation mindset

Tech Stack:Entra IDGoogle WorkspaceMicrosoft 365SSOSCIMConditional accessTerraformPolicy-as-codeBashPowerShellPythonIntuneN8nSlackOpsAPIsClaude CodeLLMMCPDefenderSentinel

Company Brief

TRM Labs

Industry: RegTech

Company Size: Large (251 to 1,000 employees)

Growth: Growth Stage Startup

Headquarters: San Francisco, United States

Founded: 2018

Website LinkedIn