Staff Corporate Security Engineer

About the Company

Crusoe is on a mission to accelerate the abundance of energy and intelligence. As the only vertically integrated AI infrastructure company built from the ground up, we own and operate each layer of the stack to power the world's most ambitious AI workloads.

Responsibilities

• Lead the design and implementation of Zero Trust Network Access (ZTNA) and Secure Access Service Edge (SASE) architectures
• Architect preventative SaaS security across platforms such as Google Workspace, Slack, and Okta
• Implement Binary Authorization and device trust mechanisms using hardware-backed identity
• Design and tune Data Loss Prevention (DLP) controls across endpoints and SaaS platforms
• Strengthen email security posture, including MFA enforcement and session controls
• Architect AI-native security frameworks and secure gateways for agent-based systems
• Scale identity and access management systems including SSO, SAML, OAuth, and SCIM
• Define and execute a "Crown Jewels" security methodology to remediate high-risk vulnerabilities

Requirements

• 8+ years of experience designing Zero Trust, SASE, and modern identity-based security architectures
• Strong expertise in SaaS security, CASB, DLP, and governance
• Experience implementing device trust and hardware-backed identity solutions
• Strong understanding of IAM systems (SSO, SAML 2.0, OAuth, SCIM)
• Knowledge of email security and phishing mitigation
• Experience identifying application-layer vulnerabilities like IDOR
• Familiarity with emerging AI security challenges and agent-based system governance
• Strong architectural mindset and excellent communication skills

Preferred Qualifications

• Experience implementing CASB platforms and enterprise DLP solutions at scale
• Familiarity with Model Context Protocol (MCP) or similar AI orchestration frameworks
• Experience building "Secure by Default" environments in high-growth organizations
• Background in cloud-native or AI infrastructure environments