Enterprise Security Engineer

Benchling

Enterprise Security Engineer at Benchling building a best-in-class security program. Focused on real-world security, automation, and AI application in biotech R&D.

Posted 6/4/2026full-timeSan Francisco • California • 🇺🇸 United StatesMid-LevelSenior💰 $189,000 - $256,000 per yearWebsite

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformMacOSPython

About the role

Key responsibilities & impact

Drive the organization's zero trust strategy end to end
Design and maintain least-privilege access patterns, Just-in-Time (JIT) access, and Privileged Access Management (PAM) controls
Deploy, configure, and maintain MDM infrastructure for the macOS fleet
Enforce SSO-required policies, review and restrict OAuth scopes
Build processes and tooling to detect shadow IT and unauthorized OAuth app grants
Evaluate and deploy AI-native security tooling
Define and enforce security standards for AI agent and LLM service identities
Develop and enforce CIS/NIST-aligned configuration baselines
Meaningfully reduce manual toil through automation and AI-assisted tooling

Requirements

What you’ll need

5+ years in a security engineering or IAM-focused role
Deep, hands-on IdP expertise (preferably Okta)
Demonstrated experience implementing zero trust architecture in practice
Strong working knowledge of identity protocols: SAML, OIDC, OAuth 2.0, and SCIM
Proficiency managing macOS endpoints at scale using Fleet or an equivalent MDM platform
Foundational cloud IAM experience across at least one major provider (AWS, GCP, or Azure)
Demonstrated track record of building automation that eliminated recurring manual work
Scripting proficiency in at least one language, preferably Python
Excellent communication skills

Benefits

Comp & perks

equity
health
dental
vision
401(k)+ employer match
wellness
commuter
professional development

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

zero trust architecturePrivileged Access Management (PAM)Just-in-Time (JIT) accessidentity protocolsSAMLOIDCOAuth 2.0SCIMscripting (Python)automation

Soft Skills

communication