{"id":16292,"url":"https://alion.io/job/crusoe-senior-endpoint-security-engineer","title":"Senior Endpoint Security Engineer","company":{"id":48024,"name":"Crusoe","domain":"crusoe.ai","url":"https://alion.io/company/crusoe-ai","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":84,"open_postings":45,"ghost_share":0,"stale_share":0.644,"repost_share":0,"time_to_fill_p50_days":56,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":170000,"max":205000,"currency":"USD","period":"year","gross":null,"usd_annual":205000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Bash","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"osquery","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"VPN","optional":false},{"name":"Wi-Fi","optional":false},{"name":"Windows","optional":false},{"name":"Linux","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"Puppet","optional":true}],"status":"live","first_seen_at":"2026-07-10T18:36:35Z","employer_posted_date":"2026-07-10","last_verified_at":"2026-10-17T14:47:00Z","board_verified":true,"closed_at":null,"days_open":98,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":98},"description":"Crusoe is on a mission to accelerate the abundance of energy and intelligence. As the only vertically integrated AI infrastructure company built from the ground up, we own and operate each layer of the stack - from electrons to tokens - to power the world's most ambitious AI workloads. When you join Crusoe, you join a team that is building the future, faster.\nWe're in the midst of the greatest industrial revolution of our time. The demand for AI compute is boundless, and power is a bottleneck. We're solving that - with an energy-first approach that makes AI infrastructure better for the world and faster for the people innovating with AI.\nWe're looking for problem-solving, opportunity-finding teammates with a sense of urgency, who believe in the scale of our ambition and thrive on a path not fully paved - people who want to grow their careers alongside a team of experts across energy, manufacturing, data center construction, and cloud services.\nIf you want to do the most meaningful work of your career, help our customers and partners advance their AI strategies, and be part of a high-performing team that believes in each other, come build with us at Crusoe.\nAbout the Role:\nCrusoe is seeking a Security Engineer to join the Security Engineering team as the primary driver for implementing security defaults and endpoint visibility. This is a strategic, architectural position focused on building secure-by-default endpoints that protect the organization as it scales. You will be responsible for security architecture, endpoint visibility, and maintaining our security posture across a rapidly growing global fleet of macOS, Windows, iOS, and Android devices. This role involves cross-functional partnership with Security and People Operations, with genuine scope to shape how Crusoe manages and secures endpoints. This role is onsite in San Francisco, CA, Sunnyvale, CA or Denver CO.\nWhat You'll Be Working On:\nAdminister and continuously improve Jamf and Microsoft Intune environments across all managed device types: macOS, Windows, iOS, and Android; maintain configuration profiles, compliance policies, app deployment packages, and OS update enforcement across all platforms.\n\nBuild and maintain automated enrollment workflows including Apple Business Manager (ABM) and Windows Autopilot for zero-touch provisioning at scale.\n\nOwn a structured patch management program with clear SLAs for OS and application updates across all device platforms.\n\nDefine and enforce device compliance baselines aligned with Crusoe security standards and frameworks including CIS Benchmarks and SOC 2; integrate MDM telemetry with EDR and SIEM tooling for compliance drift visibility and proactive remediation.\n\nPartner with Security on device trust policies, Conditional Access enforcement, certificate-based authentication rollout (SCEP/PKCS), and network-level access control for certificate-based Wi-Fi and VPN authentication.\n\nBuild and maintain scripts and automation in Bash, Python, or PowerShell to reduce manual IT workload; develop self-service tooling that puts routine fixes and software requests directly in employees’ hands.\n\nOwn MDM runbooks, device policy documentation, and asset records; contribute to the standardization of enrollment workflows, naming conventions, and configuration baselines across all platforms.\n\nServe as the MDM escalation point in the IT on-call rotation; partner with People Operations on seamless device provisioning and deprovisioning; mentor junior IT team members on endpoint management practices.\n\nWhat You'll Bring to the Team:\nFoundational Security Experience: Demonstrated experience with OSQuery and CrowdStrike (XDR/EDR) for endpoint visibility and threat detection.\n\nIdentity & Access Management: Deep understanding of Okta (Device Trust/FastPass) and Entra ID (Conditional Access).\n\nMDM/Endpoint Management: 3-6 years of experience with Jamf/Kandji and Microsoft Intune (Autopilot, Compliance Policies, App Protection).\n\nIndependent Engineering: A \"Security-First\" mindset and proven ability to drive R&D initiatives from planning through implementation independently, with a focus on automating security controls.\n\nScripting & Automation: Proficiency in Bash, Python, or PowerShell for device policy automation, packaging, and remediation.\n\nInfrastructure Knowledge: Strong understanding of certificate infrastructure (SCEP, PKCS) and experience with Absolute for Windows persistence.\n\nStrong documentation habits, ownership mindset, and ability to communicate technical policies to non-technical stakeholders.\n\nBachelor’s degree in IT, Computer Science, or equivalent practical experience.\n\nOSQuery and CrowdStrike expertise , demonstrable experience leveraging OSQuery for endpoint visibility and administering CrowdStrike for threat detection and response; these are foundational to our security visibility and enforcement strategy.\n\nBonus Points\nJamf Pro administration experience: Smart Groups, configuration profiles, and Jamf Connect or equivalent SSO integration.\n\nExperience with Jamf Protect, Microsoft Defender for Endpoint, or equivalent EDR tooling.\n\nFamiliarity with Linux endpoint management via Fleet, Puppet, or similar.\n\nApple Certified Support Professional (ACSP) or equivalent MDM certification.\n\nExposure to SIEM tooling and endpoint log pipelines.\n\nExperience at a high-growth technology company through a period of rapid headcount scaling.\n\nBenefits:\nCompetitive compensation and equity packages\n\nRestricted Stock Units\n\nPaid time off, paid holidays & leave of absence programs\n\nComprehensive health, dental & vision insurance\n\nEmployer contributions to HSA account\n\nPaid parental leave\n\nPaid life insurance, short-term and long-term disability\n\nProfessional development & tuition reimbursement\n\nMental health & wellness support\n\nCommuter benefits (parking & transit)\n\nCell phone stipend\n\n401(k) Retirement plan with company match up to 4% of salary\n\nVolunteer time off\n\nGlobal travel insurance & emergency assistance\n\nDaily meals allowance\n\nAdditional perks & programs specific to location\n\nCompensation Range\nCompensation will be paid in the range of up to $170,000 - $205,000 + Bonus. Restricted Stock Units are included in all offers. Compensation to be determined by the applicants knowledge, education, and abilities, as well as internal equity and alignment with market data.\nCrusoe is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation.","description_format":"text","description_chars":6701,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Life insurance","Parental leave","Professional development","Restricted stock units","Retirement plans","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Vulnerability Management","Data Centers & Colocation","AI Compute & Inference"],"lifecycle":[{"event":"open","at":"2026-07-10T18:36:35Z"}],"visa":[],"liveness":{"score":17,"band":"cold","label":"Long shot","p_open":1,"p_active":0.483,"p_room":0.36,"age_days":98,"expected_fill_days":56,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":205000,"is_top_pay":true},"html_url":"https://alion.io/job/crusoe-senior-endpoint-security-engineer","json_url":"https://alion.io/job/crusoe-senior-endpoint-security-engineer.json","meta":{"generated_at":"2026-10-17T15:23:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20792,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":48024},"rest":"https://alion.io/mcp/rest/get_company?id=48024"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcrusoe-senior-endpoint-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcrusoe-senior-endpoint-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcrusoe-senior-endpoint-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/crusoe-senior-endpoint-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcrusoe-senior-endpoint-security-engineer"}]}