Corporate IT Security Engineer

Software development is becoming autonomous. The fastest teams already work this way, and at Corridor, we are leading the way on secure development as the rest of the industry follows.Security tools were designed for a world where a person wrote the code and a person reviewed it. That’s changing quickly. Corridor is securing software factories. We are the security solution for software that builds itself at every level of autonomy. We are preventing vulnerabilities as agents write code, and guiding teams to help decide what’s safe to ship.

We’re a small, talented team, led by Jack Cable (Former CISA - Secure by Design), Ashwin Ramaswami (Former CISA, Stanford, and Schmidt Futures) and, Alex Stamos (Former CISO of Facebook, Yahoo, SentinelOne).Corridor is backed by Conviction, with a $25M Series A led by Felicis and our customers include ElevenLabs, Lovable, Mercor, and Langchain.

The RoleWe’re looking for a Corporate IT Security Engineer to own Corridor’s internal IT operations, security, and GRC programs. This is a highly hands-on role for someone who knows how to make things work - from laptops, networks, and authentication to endpoint security, access controls, and compliance. You’ll keep our employees productive and our internal environment secure as we scale.

We’re looking for a practical problem solver who is comfortable getting under a desk to troubleshoot a connection just as readily as they are configuring an identity provider or investigating a security issue.

What You’ll Do

• Own day-to-day corporate IT, including employee onboarding and offboarding, laptops and endpoints, networking, SaaS applications, identity and access management, authentication, and troubleshooting.
• Administer and secure our core corporate systems, including device management, SSO, MFA, endpoint security, networking, and access controls.
• Build and maintain practical security processes across the company, including asset management, access reviews, security policies, vulnerability management, incident response, and employee security practices.
• Own and develop Corridor’s GRC and compliance programs, working toward relevant security certifications and customer security requirements.
• Partner with employees across the company to solve IT and security problems quickly while maintaining a high bar for security and usability.
• Evaluate and implement tools and automations that make IT and security more efficient, including leveraging AI where it can meaningfully improve internal operations.
• Build the systems and processes that allow Corridor’s IT and security environment to scale without unnecessary complexity.

• 2-6+ years of hands-on experience in corporate IT, IT security, systems administration, or a similar role; internships, campus IT, or early career experience with significant hands-on responsibility are highly relevant.
• Strong practical understanding of corporate IT environments: laptops, networking, identity, authentication, endpoints, SaaS administration, and hardware.
• Experience administering systems such as Google Workspace, Okta, Microsoft 365, Jamf, Intune, CrowdStrike, or similar tools.
• A security mindset and experience with access controls, endpoint security, vulnerability management, incident response, and security best practices.
• Exposure to GRC frameworks and compliance programs such as SOC 2, ISO 27001, or similar is a plus.
• You’re comfortable troubleshooting physical and technical problems and figuring things out when there isn’t an obvious answer.
• You’re highly responsive, organized, and pragmatic, with a strong bias toward getting things working rather than over-engineering solutions.
• You don’t need to be a software engineer - we care more about hands-on IT and security experience than computer science credentials.
• Interest in AI and using modern tools to automate and improve IT and security operations is highly desirable., Access Control, Artificial Intelligence (AI), Asset Management, Authentication, CISA - Certified Information Systems Auditor, Computer Programming, Computer Science, Computer Security, Endpoint Security, Facebook, Futures, Hardware Administration, ISO (International Organization for Standardization), Identify Issues, Identity Data Management, Incident Response, Information Technology & Information Systems, Juniper Networks M-Series, Laptop PC, Microsoft Product Family, Network Access Control (NAC), Onboarding, Operational Improvement, Operations Security (OPSEC), Organizational Skills, Problem Solving Skills, Security Software, Single Sign-On (SSO), Software Development, Software Engineering, Software as a Service (SaaS), Systems Administration/Management, Usability Engineering, Yahoo!