Enterprise Security Engineer

Applied Intuition, Inc. is powering the future of physical AI. Founded in 2017 and now valued at $15 billion, the Silicon Valley company is creating the digital infrastructure needed to bring intelligence to every moving machine on the planet. Applied Intuition services the automotive, defense, trucking, construction, mining and agriculture industries in three core areas: tools and infrastructure, operating systems, and autonomy. Eighteen of the top 20 global automakers, as well as the United States military and its allies, trust the company’s solutions to deliver physical intelligence. Applied Intuition is headquartered in Sunnyvale, California, with offices in Washington, D.C.; San Diego; Ft. Walton Beach, Florida; Ann Arbor, Michigan; London; Stuttgart; Munich; Stockholm; Bangalore; Seoul; and Tokyo. Learn more at applied.co.

We are an in-office company, and our expectation is that full-time employees primarily work from their Applied Intuition office 5 days a week. However, we also recognize the importance of flexibility and trust our employees to manage their schedules responsibly. This may include occasional remote work, starting the day with morning meetings from home before heading to the office, or leaving earlier when needed to accommodate family commitments. This in-office expectation does not apply to contractor positions

About the role

We are looking for someone to lead enterprise security operations within our security team. You will be responsible for ensuring the security of systems and data used by our global workforce. You will work to ensure adequate security controls to manage risk across the organization. Additionally, you will collaborate with engineering, operations and legal teams to ensure compliance with all relevant security requirements.

At Applied Intuition, you will:

• Own the administration, policy governance, and day-to-day operation of our endpoint, email, data protection (DLP/DSPM), and SaaS security posture (SSPM) platforms

• Design and evolve enterprise DLP policy across endpoints, email, and collaboration platforms - data classification, encryption, insider risk signals, and privacy-regulation alignment - running policies from monitoring mode through tuned enforcement

• Lead security technology evaluations end to end: define requirements and success criteria, run structured proofs of concept against real traffic, and drive selection and renewal decisions with data

• Define and enforce security baselines and hardening standards across macOS, Linux, and Windows - low-friction controls built in close partnership with the people who use them

• Run vulnerability and patch management for corporate systems: risk-based prioritization, remediation SLAs, and compliance tracking with IT and system owners

• Automate the repetitive: build tooling and integrations that replace manual security work and make safe behavior the default, including applying AI tooling to triage, classification, and reporting where it measurably helps

• Lead clean cross-region handoffs, escalation paths, and shared runbooks, and mentor junior engineers

We’re looking for someone who has:

• 8+ years of hands-on enterprise or corporate security engineering

• Deep experience administering EDR/XDR platforms at scale, including policy and exception governance

• Working depth in at least two of: DLP, DSPM, email security, SSPM, SASE/SSE/ZTNA, or vulnerability management

• A track record of evaluating, selecting, and deploying enterprise security tooling with measurable outcomes

• A record of shipping preventative controls, not just detections and reports

• Scripting or automation skills (e.g., Python, shell) applied to security workflows

• Fluent AI user: you work with AI tools daily, know when to trust their output, and have shipped automations that hold up in production

• Deep experience securing macOS or Linux fleets, with working knowledge across macOS, Linux, and Windows

• A strong grasp of emerging enterprise security challenges: shadow IT, AI agents in the workplace, SaaS-to-SaaS integrations, browser security, and data exfiltration paths

• Familiarity with security frameworks and standards (e.g., NIST, CIS, ISO 27001)

• The ability to operate with high autonomy: take an ambiguous problem, scope it into a project with clear success criteria, and land it with risk-proportionate decisions

• Clear communication with technical and non-technical stakeholders alike

Nice to have:

• Insider risk program exposure

• SIEM or detection engineering experience

• Relevant certifications (e.g., CISSP, GIAC)

Compensation at Applied Intuition for eligible roles includes base salary, equity, and benefits. Base salary is a single component of the total compensation package, which may also include equity in the form of options and/or restricted stock units, comprehensive health, dental, vision, life and disability insurance coverage, 401k retirement benefits with employer match, learning and wellness stipends, and paid time off. Note that benefits are subject to change and may vary based on jurisdiction of employment.

Applied Intuition pay ranges reflect the minimum and maximum intended target base salary for new hire salaries for the position. The actual base salary offered to a successful candidate will additionally be influenced by a variety of factors including experience, credentials & certifications, educational attainment, skill level requirements, interview performance, and the level and scope of the position.

This position will involve access to export controlled information. Disclosure of certain export controlled information requires status as a U.S. Person (e.g., as a U.S. citizen or national, as a lawful permanent resident of U.S., or as a protected individual, including asylee or refugee) or the eligibility to obtain applicable authorizations from the U.S. government.

Don’t meet every single requirement? If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles.

Applied Intuition is an equal opportunity employer and federal contractor or subcontractor. Consequently, the parties agree that, as applicable, they will abide by the requirements of 41 CFR 60-1.4(a), 41 CFR 60-300.5(a) and 41 CFR 60-741.5(a) and that these laws are incorporated herein by reference. These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity or national origin. These regulations require that covered prime contractors and subcontractors take affirmative action to employ and advance in employment individuals without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status or disability. The parties also agree that, as applicable, they will abide by the requirements of Executive Order 13496 (29 CFR Part 471, Appendix A to Subpart A), relating to the notice of employee rights under federal labor laws.

FOR US-BASED ROLES: Applied Intuition is committed to providing an accessible and inclusive application and interview experience to applicants who are disabled veterans and other applicants with disabilities or medical conditions. Reasonable accommodations are available, requesting an accommodation will not affect your candidacy in any way, and you are not required to disclose the nature of your disability or medical condition in order to make a request.
If you require an accommodation please contact careers@applied.co. We will work with you!

Department: Security & IT Operations