Senior Corporate Security Engineer

Nexthink

Senior Corporate Security Engineer securing internal environment for Nexthink's SaaS ecosystem. Collaborating with IT and business teams to architect security strategies and responding to incidents.

Posted 4/22/2026full-timeRemote • 🇫🇷 FranceSeniorWebsite

Tech Stack

Tools & technologies

AzureCloudJamfLinuxMacOSPythonTerraform

About the role

Key responsibilities & impact

Identity-Centric Security Architecture: Contribute to the design and support the implementation of passwordless authentication and Zero Trust principles.
Manage secure provisioning and lifecycle management, ensuring least-privilege access across all business systems.
Partner with HR and IT to streamline onboarding/offboarding workflows, ensuring timely access revocation and auditability.
Define and enforce security baselines for our diverse fleet of endpoints (Windows, macOS) and mobile devices via MDM (Intune/Jamf).
Manage and tune EDR/XDR solutions to ensure high-fidelity detection on workstations and servers (Windows, Linux, macOS).
Secure the corporate Azure footprint, ensuring proper configuration of subscriptions, networking, and resources distinct from our production product environment.
Proactively identify and mitigate security risks in our corporate environment, conducting regular security assessments and vulnerability scans.
Coordinate vulnerability management and patch management.
Collaborate with IT to automate endpoint compliance checks and remediation workflows.
Support the development and maintenance of Infrastructure-as-Code.
Ensure hardening and compliance of endpoints and servers.
SaaS Security & Integration: Assess and secure third-party SaaS integrations (e.g., Salesforce apps, browser extensions, productivity tools) to prevent data leakage and over-privileged access.
Collaborate with Legal and Compliance to vet new vendors and tools.
Configure and maintain CASB and DLP policies to safeguard sensitive corporate data without hindering productivity.
Lead incident response activities for corporate security events (phishing, malware, lost devices).
Develop automation scripts (Python/PowerShell) and workflows (SOAR) to automate manual security tasks, evidence collection, and response actions.
Proactively hunt for threats within the corporate network and identity providers.
Develop incident response playbooks including technology specific procedures and forensics collection.
Design and implement security controls to safeguard corporate resources, including endpoints, data storage, networking, computing and identity and access management.
Support and automate evidence collection for audits.
Act as the primary security liaison to the IT Department and business teams, helping them build security into their operations (DevSecOps for IT).
Design and deliver technical security training and awareness campaigns for engineering and business teams.

Requirements

What you’ll need

5-8 years of hands-on experience in Corporate Security, IT Security Engineering, or a SOC role in a cloud-first environment.
Endpoint Mastery: Experience hardening operating systems (macOS/Windows) and managing security via MDM/UEM tools.
Vulnerability management: Proven experience in helping IT and business teams patching systems and infrastructures.
Coding Skills: Proficiency in Python and Terraform for automating APIs and security workflows.
Security Ops: Proven experience with EDR tools and SIEM log analysis.
Communication: Fluent in English with the ability to explain complex risks to non-technical stakeholders.
Proven ability to influence and drive security best practices across non-security teams.
Experience with security awareness training platforms and phishing simulation tools.

Benefits

Comp & perks

Health insurance employee-employer paid options covering medical, dental, and optical treatments, hospitalization, and equipment and 100% employer-paid life insurance.
Flexible Hours and unlimited vacation (employees have unlimited paid time off on top of the 25 days of holidays we offer), RTT days, and 3 extra days for volunteering.
Free access to professional training platforms to explore your interests and enhance your skills.
50% reimbursement on your Pass Navigo, making travel to and from work more affordable and sustainable.
16 weeks of fully paid leave for primary caregivers, extendable up to 8 additional months unpaid, and 6 weeks of fully paid leave for secondary caregivers.
Reimbursement for fitness, gym memberships, and sports participation up to 25 EUR/month.
Bonuses for referring successful hires after three months of continuous employment.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

passwordless authenticationZero Trust principlessecure provisioninglifecycle managementEDRXDRAzureInfrastructure-as-CodePythonTerraform

Soft Skills

communicationinfluencecollaborationtechnical trainingrisk explanation