About the role
Serve as a technical subject matter expert for enterprise tenant and identity security, applying deep knowledge of tenant architecture, configuration, identity controls, authentication, authorization, application identities, service principals, privileged access, and identity lifecycle management. Identify and drive remediation of systemic security risks across tenant and identity environments, connecting individual findings and incidents to broader patterns and developing scalable approaches to address them. Lead complex identity and tenant security campaigns end-to-end, including problem discovery, technical scoping, risk assessment, investigation, prioritization, engineering remediation, validation, and closure. Lead technical investigations of identity and tenant security incidents, determining root cause and impact and driving containment, remediation, and preventative actions across affected environments. Partner deeply with Software Engineering teams to translate security risks into technical
requirements and durable platform improvements, influencing engineering priorities and design decisions where necessary. Analyse tenant configuration, identity telemetry, security signals, and operational data to identify emerging risks, recurring issues, anomalous behaviour, and opportunities for proactive protection. Design and drive scalable security protections and remediation mechanisms that improve the ability to detect, prevent, and remediate tenant and identity risks across large-scale environments. Establish technical strategies for recurring security problems, moving beyond individual remediation to improve platform capabilities, automation, detection, protection, and operational resilience. Drive measurable security outcomes across multiple technical workstreams, maintaining ownership of risks, dependencies, exceptions, remediation commitments, and engineering outcomes through closure. Influence senior engineering and security stakeholders through technical expertise, data, and clear articulation of risk, trade-offs, and recommended solutions. Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or related technical field AND 6+ years of experience in identity and access management, security engineering, cybersecurity, security operations, or a related technical field OR equivalent experience. 5+ years of hands-on experience with enterprise identity and tenant environments, with deep expertise in tenant configuration, identity architecture, authentication, authorization, application identities, service principals, privileged access, or identity lifecycle management. 4+ years of experience independently driving complex identity or tenant security investigations and remediation campaigns, including technical assessment, risk prioritization, engineering remediation, validation, and closure. Experience partnering directly with Software Engineering and Security teams to investigate complex technical problems and drive scalable security improvements. Experience leading large-scale identity or tenant security incidents, remediation campaigns, or security posture initiatives across complex enterprise environments. Experience in security detection, incident response, protection, threat investigation, or security operations, particularly in identity-focused environments. Experience building or driving automation, detection, telemetry, or security tooling to identify and remediate tenant and identity risks at scale. Demonstrated ability to act as a technical leader without direct authority, influencing engineering direction, resolving cross-team dependencies, and driving ambiguous security problems to measurable outcomes.
