Enterprise Security Engineer

The Enterprise Security Engineer is a hands-on engineer who implements, operates, and improves security controls across corporate architecture, SaaS platforms, cloud services, endpoints, identity, data, and workforce technologies. This role translates enterprise security strategy into practical, measurable controls and secure-by-default solutions that reduce risk without slowing the business.
The engineer partners with Enterprise IT, Corporate Engineering, SRE and Platform teams, Business Systems, Product Security, Legal, Privacy, and other stakeholders to deliver scalable security improvements across Atlassian's corporate environment. As part of Atlassian's "Customer Zero" initiative, the engineer helps validate and improve security capabilities internally before broader adoption.
Enterprise Security Engineering

• Design, implement, operate, and maintain security controls across identity, endpoints, network, cloud (AWS/GCP), SaaS, and data-protection domains.
• Remediate identified gaps in access controls, device posture, SaaS configurations, and sensitive data protections.
• Assist with the rollout and adoption of secure baseline configurations and paved-path implementations across internal teams.
• Participate in security reviews for new tools, internal workflows, and SaaS integrations under the guidance of senior engineers.
• Support cyber-related physical security operations, including maintaining integrations between physical access-control systems and identity platforms, monitoring access lifecycles, and addressing facility-related cyber risks.

Identity, Access & Human Risk

• Strengthen identity lifecycle management, privileged access, authentication, authorisation, and access reviews.
• Help validate agentic identity, AI-native governance, data-protection, and access controls internally before broader release.
• Monitor insider risk signals, anomalous access patterns, and policy violations to support triage and response.
• Support the secure implementation of service accounts and automated bot credentials.

Cloud, SaaS & Endpoint Protection

• Implement and monitor security guardrails and posture baselines across cloud environments (AWS/GCP) and SaaS suites (Google Workspace, Slack, Okta).
• Maintain endpoint security agents, device compliance policies, and configuration baselines across macOS and Windows fleets.
• Help implement and tune Data Loss Prevention (DLP) and data-classification controls to safeguard internal and customer information.

Automation & Operational Excellence

• Build scripts, API integrations, and automations (e.g., Python, Bash, Go) to eliminate repetitive tasks and streamline security operations.
• Maintain infrastructure-as-code and CI/CD security checks for enterprise tooling.
• Track operational metrics, monitor control health, and contribute to standard operating procedures (SOPs) and runbooks.
• Participate in on-call rotations, troubleshooting, and post-incident reviews (PIRs) for security tooling outages, pipeline failures, and platform availability issues.

SaaS Supply Chain & Third-Party Risk

• Execute security evaluations and vendor risk reviews for new SaaS tooling and browser extensions against defined security criteria.
• Track remediation of identified vendor vulnerabilities and configuration risks.

How You'll Measure Success (first 6-12 months)

• Execution and Delivery: Successfully deliver scoped technical tasks, control deployments, and automation milestones on time with high code and configuration quality.
• Operational Excellence: Triage and resolve security escalations, access tickets, and alert queues within established SLOs, actively reducing backlog and manual toil.
• Automation and Tooling: Write reliable scripts and workflow automations that reduce manual operational effort and improve control reliability.
• Security Hygiene & Remediation: Close identified posture gaps across SaaS, endpoints, or IAM systems, demonstrating measurable improvements in baseline compliance.
• Collaboration & Learning: Partner effectively with senior engineers and cross-functional teams, actively expanding your technical depth across enterprise security domains.

At Atlassian, we strive to design equitable, explainable, and competitive compensation programs. We follow consistent hiring practices and account for each candidate's skills, knowledge, and experience when setting base pay within the range.
This role may also be eligible for benefits, bonuses, commissions, and equity.
Key Skills and Experience

• 3-5+ years of experience in cybersecurity, security engineering, cloud security, systems engineering, or enterprise technology.

• Experience implementing, operating, and maintaining security controls across identity, endpoint, SaaS, cloud, network, and data protection domains.
• Hands-on experience with IAM, directory services, SSO/MFA, and access governance (e.g., Okta, Google Workspace, Azure AD / Entra ID).
• Practical experience securing cloud environments (AWS or GCP) and enterprise SaaS collaboration suites (e.g., Google Workspace, Slack).
• Experience automating security tasks and operational workflows using scripting (e.g., Python, Bash, Go), REST APIs, and CI/CD pipelines.
• Working knowledge of endpoint security architectures, device posture management (MDM), and data protection / DLP controls across macOS and Windows.
• Understanding of SaaS vendor risk assessments, third-party integration risks, and secure baseline standards.
• Foundational awareness of cyber-related physical access-control systems and their integration with enterprise identity lifecycles.
• Strong troubleshooting and communication skills, with the ability to write clear runbooks and technical documentation, and collaborate effectively across engineering and operations teams.

Benefits & Perks
Atlassian offers a wide range of perks and benefits designed to support you, your family and to help you engage with your local community. Our offerings include health and wellbeing resources, paid volunteer days, and so much more. To learn more, visit go.atlassian.com/perksandbenefits .
About Atlassian
At Atlassian, we're motivated by a common goal: to unleash the potential of every team. Our software products help teams all over the planet and our solutions are designed for all types of work. Team collaboration through our tools makes what may be impossible alone, possible together.
We believe that the unique contributions of all Atlassians create our success. To ensure that our products and culture continue to incorporate everyone's perspectives and experience, we never discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status. All your information will be kept confidential according to EEO guidelines.
To provide you the best experience, we can support with accommodations or adjustments at any stage of the recruitment process. Simply inform our Recruitment team during your conversation with them.
To learn more about our culture and hiring process, visit go.atlassian.com/crh .
In line with local law, identity verification (which may include use of biometric data) is a condition of employment with Atlassian for employment fraud purposes.