Security Engineer, Corporate

About the role

WHO WE ARE

Serval http://serval.com/ is the AI-native enterprise service management platform that automates the work legacy IT service management tools only track. Our AI agents build the automations that power employee support, then resolve requests against them instantly—helping teams across IT, HR, finance, legal, and beyond automate work within one governed platform.

Companies including Fox, Live Nation, Notion, Ramp, and Lucid Motors run on Serval. Headquartered in San Francisco, we’ve raised $277 million from investors including Sequoia Capital, Redpoint Ventures, First Round, General Catalyst, and Elad Gil, most recently a $150 million Series C at a $3 billion valuation.

We’re building a team that moves quickly, takes ownership, and wants to make a meaningful impact on how the world’s largest organizations work. Come help us build what’s next for enterprise service management.

ROLE OVERVIEW

As Corporate Security Lead, you'll build and scale the foundations of how Serval secures its workforce, devices, and the SaaS systems the company runs on. You will set the strategy and drive execution for endpoint security across our fleet, device trust, SaaS security posture, workforce identity, and corporate network access. You’ll make it easy for employees to do their jobs securely while keeping the corporate environment defensible against sophisticated adversaries.

You'll be a hands-on leader with deep technical credibility and strong operational instincts. You will build and mentor a team, partner closely with IT, Engineering, D&R and Infrastructure Security, and ensure that strong device posture, least-privilege access, and secure-by-default corporate systems are the path of least resistance for the people who work here.

WHAT YOU'LL DO

- Own endpoint security for our fleet, maintain hardened configuration baselines, endpoint detection and protection, full-disk encryption, patch and compliance posture, and centralized device management at scale.

- Stand up and operate a device trust program so that only healthy, managed, and attested devices can reach corporate and production resources, with posture continuously verified as a condition of access.

- Implement binary authorization and application controls on endpoints, allowlisting and execution policy that prevents unauthorized or untrusted software from running, with a workflow that scales without grinding engineering to a halt.

- Build a SaaS Security Posture Management practice across the company's SaaS estate, securing configurations, monitoring for drift, and governing third-party application access, with particular focus on OAuth grant and integration governance against the corporate identity and productivity suite.

- Own workforce identity and access, single sign-on, strong/phishing-resistant multi-factor authentication, and joiner/mover/leaver lifecycle, enforcing least privilege across corporate systems.

- Lead corporate network security, including rollout of certificate-based, port-level network access control (e.g., 802.1x) across offices, and partnering with Infrastructure Security on zero-trust / mesh network access policies and ACLs.