{"id":3634712,"url":"https://alion.io/job/relativity-senior-security-engineer-identity-endpoint","title":"Senior Security Engineer - Identity & Endpoint","company":{"id":2576,"name":"Relativity","domain":"relativity.com","url":"https://alion.io/company/relativity","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":3,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":49,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":130000,"max":195000,"currency":"USD","period":"year","gross":null,"usd_annual":195000},"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomaly Detection","optional":false},{"name":"Defense in Depth","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"CI/CD","optional":true},{"name":"GCP","optional":true},{"name":"HIPAA","optional":true},{"name":"ISO 27001","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-11-02T20:50:47Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-05T18:02:37Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Posting Type\nHybrid/Remote\nJob Overview\nThe Senior Security Engineer is a technically deep, hands-on practitioner who elevates the enterprise security function through technical project leadership, cross-functional collaboration, and mentorship. Operating within a layered defense-in-depth program, this engineer takes ownership of complex security technology initiatives spanning design, deployment, and optimization of AI-enabled security technologies at all layers. With a focus on advancing automated orchestration of security operations, detection and response capabilities, and hardening rigor, this role serves as a technical escalation point and force multiplier for the security engineering team. The Senior Security Engineer works closely with the Senior Manager of Enterprise Security, and cross-functional engineering teams to reduce the organization's attack surface, enable threat landscape adaptability, and improve detection and response times across Relativity's technical ecosystem.This role will have a primary focus on identity and endpoint security engineering, including the design, deployment, and optimization of controls that protect user and privileged identities, devices, and access across the enterprise. The engineer will strengthen identity governance, authentication, authorization, privileged access, endpoint hardening, device trust, threat detection, and response by integrating identity and endpoint security technologies, automation, policy-based controls, and telemetry into the broader defense-in-depth and security operations ecosystem.\nJob Description and Requirements\nEndpoint Security & Hardening\nDeploy, integrate, optimize and manage EDR/XDR platforms; define custom detections and automated response actions across security tooling.\nOwn the implementation and enforcement of endpoint and image hardening baselines, configuration standards, and application control baselines.\nIntegrate endpoint telemetry into the central analytics platform or (SIEM) to support security context and cross-domain correlation; ensure SIEM coverage is adequate and effective.\nServe as a technical escalation point for endpoint-based security events, exposures, vulnerabilities, and alerts; collaborate cross-functionally to drive remediation within appropriate SLAs.\nInvestigate complex endpoint-based alerts and incidents through to root cause: perform triage, forensic artifact collection (memory, disk, logs), timeline reconstruction, and containment/eradication actions.\nIdentity Security & Access\nLead the design, deployment, integration, and optimization of identity security controls across workforce, privileged, service, and machine identities.\nEngineer and maintain capabilities for identity governance and administration, single sign-on, multi-factor authentication, conditional access, privileged access management, just-in-time access, secrets management, and identity threat detection and response.\nDesign and enforce least-privilege access patterns, role-based and attribute-based access controls, segregation of duties, and lifecycle controls for joiner, mover, and leaver events.\nIntegrate identity, authentication, authorization, and privileged-access telemetry into central analytics and SIEM platforms to enable cross-domain correlation, detection, investigation, and automated response.\nServe as a technical escalation point for identity-based attacks, anomalous access, credential compromise, privilege misuse, and authorization failures; lead root-cause analysis and coordinated remediation.\nAutomate identity and access provisioning, certification, policy enforcement, control validation, and response through APIs, scripting, workflow orchestration, and policy-as-code practices.\nPartner with IAM, IT, Security, Engineering, and application owners to embed secure identity patterns, remediate access risks, and improve the adoption and usability of identity controls.\nDefine and monitor identity-security measures such as authentication coverage, privileged-access reduction, access-review completion, policy compliance, identity-control health, detection efficacy, and remediation performance.\nLayered Defense/Defense in Depth\nLead the design, deployment and optimization security controls spanning perimeter, network, host, application, identity and data layers, ensuring and maintaining effectiveness of controls at each layer.\nContribute to and enforce security control standards and design patterns aligned to industry-recognized frameworks, serving as a subject matter expert during implementation and review.\nValidate that telemetry from each layer feeds the central analytics platforms and supports 360-degree visibility and appropriate attack surface coverage.\nContinuously assess effectiveness of enterprise security controls as the ecosystem expands and the threat landscape evolves; propose and implement supplemental or extended coverage.\nProactively partner with IT, Engineering and other stakeholders to embed security controls natively, serving as a technical lead on cross-functional initiatives.\nProvide technical recommendations on security control design aligned to vulnerabilities, risks, issues, and events; support lead-level decisions with well-documented analysis.\nLead purple-team exercises and control-efficacy testing to verify depth and resilience under attack conditions.\nEnsure redundant, complementary security capabilities to prevent bypasses and ensure failure redundancy through all security layers.\nThreat Hunting\nLead structured threat hunting engagements and purple team exercises in partnership with the Purple Team, analyzing security telemetry to surface anomalous and malicious behavior and communicating findings to relevant stakeholders.\nDevelop, execute and document structured hunts mapped to MITRE ATT&CK and ATLAS techniques and current threat intelligence.\nPerform exposure analysis on identified vulnerabilities, zero-day, alert telemetry, threat intelligence feeds and notifications from partners and customers and conclude on exploitability risk and/or exposure.\nMaintain awareness of the evolving threat landscape, adversary TTP’s, and emerging vulnerabilities and their relevance to Relativity’s technical ecosystem and organizational trajectory.\nStandardize and document hunt methodology, hypotheses, and outcomes; contribute to the maturation of the threat hunting program in partnership with the Purple Team.\nConvert successful hunts, exposure analysis, purple team findings and alerts into durable, automated detections and containment logic and improved coverage.\nAI-Enabled Security Operations\nBuild and maintain SOAR workflows that automate enrichment, triage, containment, and routine response actions; contribute to the broader automation roadmap.\nMeasure and continuously improve the impact of automation on time-based detection, containment and response times to reduce threat actor dwell time.\nIdentify, evaluate and operationalize AI/ML capabilities for semantic anomaly detection, behavioral analytics, alert triage, and prioritization; provide recommendations to stakeholders on platform and tooling decisions.\nData Security\nImplement and manage data classification, discovery, and data security posture management across cloud and on-premises stores.\nDeploy and tune data loss prevention controls across endpoints, network, email, cloud and SaaS surfaces.\nInvestigate data key risk indicators associated with data access, exfiltration, and integrating data telemetry into central analytics (SIEM).\nLeadership & Mentorship\nServe as a technical mentor and day-to-day escalation point for junior and mid-level security engineers, providing guidance on technical approach, tooling, and professional development.\nLead technical design and implementation efforts for assigned security initiatives, producing clear documentation, runbooks, and knowledge artifacts for the broader team.\nParticipate in hiring processes including technical interviews and candidate assessments.\nRepresent the security engineering team in cross-functional technical discussions, translating security requirements and findings clearly for both engineering peers and non-technical stakeholders.\nMinimum qualifications:\n4-8 years of hands-on experience in enterprise security engineering, with a focus on endpoints and identity.\nHands-on experience with common security tools such as EDR, XDR, SIEM, CNAPP, CSPM, CWP, etc. and strong knowledge of applicable security technologies at all layers of the OSI model.\nDemonstrated experience in threat hunting, digital forensics, and/or detection engineering experience, including writing automation scripts and rules for security enforcement and observability.\nSolid knowledge of industry standard common security benchmarks and frameworks (e.g., MITRE, NIST, etc.)\nDemonstrated expertise in at least one scripting/automation language (Python, Bash, or PowerShell) applied to modern containerized services, CLI based commands, and/or security specific use cases.\nDemonstrated experience owning and driving complex security initiatives end-to-end, including cross-functional coordination, stakeholder communication, and delivery of technical outcomes.[BM1.1]\nAbility to communicate technical findings clearly to both engineering peers and non-technical stakeholders.\nRelevant certification such as SSCP, Security+ or equivalent.\nPrior experience mentoring or providing technical guidance to junior engineers.\nPreferred qualifications:\nBachelor’s in Computer Science, Information Security, or equivalent experience.\nExperience with AI-enabled SecOps (e.g., detection: UEBA, ML-based alert prioritization, or AI-assisted threat hunting workflows)\nWorking knowledge of common cloud environments such as AWS, Azure or GCP.\nExperience contributing endpoint or network security controls to CI/CD pipelines and infrastructure-as-code environments.\nExperience supporting compliance and audit requirements (SOC 2, ISO 27001, HIPAA) from a technical control perspective.\nRelativity is committed to competitive, fair, and equitable compensation practices.\nThis position is eligible for total compensation which includes a competitive base salary, an annual performance bonus, and long-term incentives.\nThe expected salary range for this role is betweenfollowing values:\n$130,000 and $195,000The final offered salary will be based on several factors, including but not limited to the candidate's depth of experience, skill set, qualifications, and internal pay equity. Hiring at the top end of the range would not be typical, to allow for future meaningful salary growth in this position.\nRequired Skills:\nAccess Management, Application Security, Endpoint Security, Network Security, Penetration Testing, Security Architecture Design, Security Information, Security Information and Event Management (SIEM), Security Operations, Vulnerability Management","description_format":"text","description_chars":10875,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Document Management","Legal AI","Legal Software"],"lifecycle":[{"event":"open","at":"2026-11-02T20:50:47Z"}],"visa":[],"liveness":{"score":99,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.993,"p_room":1,"age_days":2,"expected_fill_days":49,"reasons":["conf:4","urgency","velocity","win:early"],"computed_at":"2026-11-05T05:54:30Z"},"pay":{"stated_usd_annual":195000,"is_top_pay":true},"html_url":"https://alion.io/job/relativity-senior-security-engineer-identity-endpoint","json_url":"https://alion.io/job/relativity-senior-security-engineer-identity-endpoint.json","meta":{"generated_at":"2026-11-05T20:55:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":546,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2576},"rest":"https://alion.io/mcp/rest/get_company?id=2576"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frelativity-senior-security-engineer-identity-endpoint"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frelativity-senior-security-engineer-identity-endpoint"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frelativity-senior-security-engineer-identity-endpoint"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/relativity-senior-security-engineer-identity-endpoint\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frelativity-senior-security-engineer-identity-endpoint"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3634712}},{"tool":"search_jobs","arguments":{"company":"relativity.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3634712},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}