> Markdown version of [/jobs/ext/2915832-security-engineer](https://www.wearedevelopers.com/jobs/ext/2915832-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer

- **Company:** Critical River, Inc.
- **Location:** San Francisco, CA, United States
- **Contract:** Permanent contract
- **Skills:** Network Security, Zero Trust Network Access, Scripting, Okta, Git, Microsoft InTune, Casper Suite
- **Published:** September 15, 2026
- **Apply:** https://www.dice.com/job-detail/8818dab9-07c3-41f5-b9e9-4efd0f6ffebe

## About the Role

* Strong endpoint security or enterprise security-engineering experience.
 * Experience with vulnerability-management and remediation programs.
 * Knowledge of device posture, certificates, conditional access, and zero-trust principles.
 * Experience with enterprise endpoint, identity, or network-security platforms.
 * Automation or scripting skills.
 * Ability to convert security requirements into practical controls., * WARP, SCEP, NAC, EDR, Kandji, Jamf, or Intune.
 * Okta or another enterprise identity platform.
 * Infrastructure-as-code and Git-based delivery.
 * Security engineering in a rapidly scaling company.
 * Relevant security certifications.

## Description

Build and operate endpoint posture, access-enforcement, certificate, vulnerability-management, and automated remediation capabilities., * Design and implement enterprise endpoint-security standards.

 * Establish device-posture and conditional-access controls.
 * Implement WARP, SCEP, NAC, certificate, EDR, and compliance capabilities as applicable.
 * Build vulnerability identification, prioritization, remediation, and reporting workflows.
 * Integrate endpoint-security signals with identity, network, and device-management platforms.
 * Automate evidence collection, compliance checks, and remediation.
 * Define exceptions, approvals, metrics, procedures, and audit documentation.


## Related Videos

- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)
- [Git for Code Reviews](https://www.wearedevelopers.com/videos/429-git-for-code-reviews)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)