Corporate Security Engineer

About the role

As a Corporate Security Engineer, you will build and operate security foundations that protect Parloa's internal systems, workforce, and SaaS ecosystem. This is a hands-on builder role focused on improving corporate security operations maturity in a rapidly scaling environment, working at the intersection of security operations, endpoint security, SaaS security, and incident response.

What you'll do

• Build and improve corporate security operations by investigating alerts, improving detection coverage, and strengthening incident response processes
• Define and implement endpoint security baselines and compliance standards across corporate devices
• Enhance security monitoring and detection by tuning alerts, improving signal-to-noise ratios, and expanding logging coverage
• Partner with teams to define and enforce security guardrails for new SaaS tools and applications
• Collaborate on corporate application security reviews by assessing technical risk and validating security configurations
• Lead incident response for corporate security events, coordinating response actions and conducting post-incident reviews
• Develop runbooks, escalation paths, tabletop exercises, and measurable security metrics
• Produce security evidence for audit and compliance requirements

What you'll need

• 6-10 years of experience in security engineering or security operations, ideally in SaaS or cloud-native environments
• Strong hands-on experience with incident response, detection engineering, and operational security tooling
• Experience improving endpoint security posture and device compliance in corporate environments
• Familiarity with SIEM, EDR, and cloud-native security tooling
• Practical experience securing SaaS ecosystems, including authentication models and access controls
• Comfortable operating in ambiguous, high-growth environments
• Strong cross-functional collaboration skills with IT, engineering, and business teams
• Familiarity with security controls related to SOC 2, ISO 27001, or enterprise security reviews

Nice to have

• Experience with Datadog Cloud SIEM or similar detection platforms
• Experience with identity systems such as Okta
• Familiarity with Google Workspace, Slack, and SaaS-heavy corporate environments
• Experience running tabletop exercises and incident simulations
• Exposure to cloud security or CNAPP tooling

What they offer

• Competitive compensation and equity package
• Flexible working hours, 28 vacation days and workation opportunities
• Deutschland ticket, Urban Sports Club, Job Rad, Nilo Health, weekly sponsored office lunches
• Access to training and development budget for continuous professional growth
• Work from home and beautiful Berlin office with adjustable desks and amenities
• Regular team events, game nights, and social activities