Senior Security Engineer, Enterprise Security

Turo is searching for a highly motivated and versatile Sr. Security Engineer to spearhead our efforts in securing enterprise systems and data through the architecture, design, and continuous improvement of a comprehensive security framework. This role will focus heavily on leading the deployment of Zero Trust principles across the organization, ensuring the integrity of our systems, and protecting against emerging threats.

The successful candidate will be a subject matter expert in these domains, possess a proactive mindset for staying ahead of potential threats, and serve as a technical mentor to junior team members.

• Lead the architecture and implementation of Zero Trust security frameworks across the enterprise, focusing on continuous verification and least privilege access models.

• Architect, develop, and manage Advanced Email Security solutions to protect against phishing, spoofing, and other email-based attacks.

• Deploy, maintain, and design policies for Data Loss Prevention (DLP) and Insider Threat prevention technologies to mitigate risks from internal and external actors.

• Partner closely with IT Engineering on Identity and Access Governance solutions (e.g., Okta, IGA workflows) to enforce secure and efficient access control policies across the organization.

• Lead the technical side of compliance audits, executing deep gap assessments for SOX and SOC 2 standards.

• Champion and drive the adoption of Infrastructure as Code (IaC) specifically using Terraform, to automate security configurations across the enterprise cloud stack.

• Lead Incident Response efforts for enterprise security, developing advanced automation playbooks (e.g., Tines), conducting root-cause analyses, and guiding the incident response team during critical events.

• Establish and maintain a robust SaaS Security Posture to ensure third-party services are securely integrated.

• Mentor and provide technical guidance to mid-level security engineers and IT partners.

• 5+ years of experience in enterprise security, with a proven track record in Zero Trust, DLP, and Endpoint Security.

• Proven experience in architecture design and hands-on deployment of enterprise-wide security platforms.

• High proficiency in scripting and automating custom security processes using Python, Go, or PowerShell.

• Advanced experience with configuration management and infrastructure as code tools (e.g., Terraform).

• Industry certifications such as CISSP, CISM, or GIAC are highly preferred.

For this role, the target base salary range in San Francisco is $148k - $185k annually. This role is also eligible for equity and benefits. In general, our ranges reflect the market-based target for new hire salaries based on the level and location of the role.

Within the range, individual pay is determined by objective factors assessed during the application and interview process, such as job-related skills, experience, and relevant education or training. We encourage you to talk with your recruiter to learn more about the total compensation and benefits available for this role.

Turo highly values having employees working in-office to foster a collaborative work environment and company culture. This role will be in-office on a hybrid schedule — Turists will be expected to work in the office 3 days per week on Mondays, Wednesdays, and Thursdays. Your recruiter can share more information about the various in-office perks Turo offers.