Senior Security Engineer

Описание

As a Senior Enterprise Security Engineer, you will be a foundational architect of Navan’s security posture, directly safeguarding our corporate infrastructure, sensitive financial data, and global user base. This is a highly hands-on, configuration-driven role that requires working directly with systems that power our security program in a modern, cloud-native environment. Your work will be critical in ensuring Navan becomes globally recognized for secure, unparalleled corporate travel and expense management.

Responsibilities

• Architect, manage, and scale the end-to-end vulnerability management program
• Oversee continuous asset discovery, vulnerability scanning, threat exposure assessment, and risk-based prioritization (CVSS, EPSS, threat intelligence)
• Partner closely with infrastructure, engineering, and IT teams to establish SLAs, streamline patch management workflows, and validate effective remediation
• Participate in the security engineering on-call rotation
• Serve as a responder responsible for identifying, scoping, triaging, managing, and mitigating security incidents, followed by leading thorough post-incident reviews and root-cause analyses
• Help improve and maintain existing detection pipeline by providing feedback on alert quality, reviewing current monitoring coverage, and performing direct tuning in SIEM platforms to reduce noise and increase signal fidelity
• Evaluate existing SOAR playbooks and workflows, offering recommendations and performing targeted updates to streamline response processes
• Define and enforce strong IAM principles (e.g., Least Privilege, Zero Trust) and contribute to identity governance platforms to ensure secure authentication, authorization, and access across the enterprise
• Strengthen email security by managing alerts and workflows in platforms like Material Security, reviewing post-delivery threats, and improving automated response to suspicious messages and mailbox activity
• Proactively partner with Engineering, IT, and Compliance teams to embed security best practices early in the lifecycle, align vulnerability SLAs with business risk objectives, and foster a culture of shared security ownership
• Establish and track key performance indicators (KPIs) for vulnerability management and incident response
• Participate actively in incident and posture reviews, drive continuous operational improvements, and work with external vendors to align system capabilities and security expectations

Requirements

• 5+ years of hands-on experience in information or enterprise security, preferably within a high-growth tech environment utilizing cloud infrastructure
• Proven track record of designing, implementing, or maturing an enterprise-wide Vulnerability Management program, including expertise with modern exposure management and scanning platforms (e.g., Tenable, Qualys, Rapid7, Wiz) and vulnerability remediation workflows
• Demonstrated experience in incident response, with a willingness to participate in an on-call rotation to identify, analyze, contain, and resolve active security incidents
• Deep, up-to-date knowledge of modern attacker tactics, techniques, and procedures (TTPs), common exploit vectors, and risk prioritization frameworks (CVSS, EPSS, KEV)
• Ability to review SIEM and EDR/XDR platform outputs, provide constructive feedback on detection efficacy, and execute direct rule tuning and configuration refinements to optimize signal-to-noise ratio
• Comfort interfacing with SOAR workflows (e.g., Phantom, Demisto, XSOAR) to suggest optimizations and perform light playbook updates that improve overall team efficiency
• Demonstrated expertise in Zero Trust principles, modern identity governance, and access management solutions (e.g., Okta, Ping, or Azure AD)
• Experience managing email security using platforms like Material Security, including reviewing post-delivery detections and analyzing mailbox activity
• Highly collaborative with strong ownership skills, adept at negotiating SLA timelines with engineering/IT partners and contributing actively within a small, focused security team

We offer

• Comprehensive benefits program designed to support well-being, financial security, and life outside of work
• Healthcare coverage, insurance offerings, and wellness resources
• Support long-term financial growth through retirement savings programs and opportunities to participate in equity plans
• Flexible time off, country-specific holidays, and paid parental leave for all new parents
• Connectivity and commuting support
• Mental health resources
• Exclusive travel-related perks
• In-office perks such as company-provided lunches and happy hours
• Employees work from the office four days a week

Hiring process

• Navan uses an AI-assisted Automated Employment Decision Tool (Metaview) to assist with evaluating resumes against job qualifications for this role. All final decisions are made by human recruiters and hiring managers
• If you prefer to have your application reviewed without AI assistance, you may request a human evaluation by entering your email at my.metaview.app/applications/opt-out?organization=15dd7e883f