Senior Security Engineer - Maze

About Maze

Maze is the user research platform that helps companies build the right products faster by making user insights available at the speed of product development. We operate a global remote workforce driven by our core values.

Senior Security Engineer

We’re hiring a Senior Security Engineer to take the lead on security at Maze. You’ll own two closely connected areas:

• The corporate IT foundation every Maze employee relies on
• The security controls that keep our cloud, code, and SaaS environment secure and auditable

You’ll report to our Senior Manager, Platform Engineering and work closely with teams across Maze.

As a Senior Security Engineer at Maze, you will:

• Own identity and SSO in Google Workspace, including groups, SCIM provisioning, MFA, and access policies.
• Run our macOS fleet through Iru, including enrolment, configuration, patching, and compliance.
• Automate joiner, mover, and leaver flows from Rippling.
• Own SaaS licensing and app provisioning while keeping internal support lightweight through automation and self-service.
• Own security controls across AWS, GitHub, Kubernetes, and our SaaS environment.
• Run vulnerability management end to end, taking findings through remediation and verification.
• Run regular access reviews and generate audit evidence through Vanta.
• Bring a security perspective to incidents and post-incident reviews.
• Use AI-assisted and agentic workflows to reduce manual work and investigate issues faster.

What you won’t own

Application code review and threat modelling, sales questionnaires, customer security calls, or other customer-facing security work.

What we’re looking for

• Strong software, infrastructure, or security engineering background with experience using code and infrastructure as code to automate repetitive work.
• Experience owning identity, MDM, and joiner/leaver automation at a remote company.
• Experience securing a modern AWS or GCP environment with sound IAM trade-offs.
• Experience running vulnerability management or access reviews in an environment with external audits.
• Experience with SOC 2 or ISO 27001 controls and automating checks.
• Care for the employee experience and comfort saying no with context.
• Excitement about AI-assisted development and modern AI tools.

Our stack

• Identity and people systems: Google Workspace, Rippling
• Devices: Iru (formerly Kandji), macOS
• Cloud and infrastructure: AWS, GCP, Kubernetes, Terraform, Docker
• Security and compliance: Vanta, Intruder, Socket, Datadog Security, Riot
• Network: Cloudflare Zero Trust
• CI/CD: GitHub Actions, Depot CI, Argo CD
• Observability: Datadog

Benefits

• Health insurance with international coverage, vision, and dental (100% team member premium paid)
• Free access to mental health care and unlimited virtual therapy sessions
• Life and Disability Insurance
• Flexible time off
• Meaningful equity
• Company retreats
• New MacBook
• Paid Family leave (16 weeks)
• $500/month dependent health insurance coverage or flexible wellness/perks stipend
• $1,500 remote work setup fund
• Flexible work schedule and monthly Bonus.ly points