As a Senior Enterprise Security Engineer, you will be a foundational architect of Navan’s security posture, directly safeguarding our corporate infrastructure, sensitive financial data, and global user base. This is a highly hands-on, configuration-driven role that requires working directly with systems that power our security program in a modern, cloud-native environment.
Your work will be critical in ensuring Navan becomes globally recognized for secure, unparalleled corporate travel and expense management.
What You’ll Do- Threat Detection & Automation: Architect and execute the end-to-end security pipeline, including developing advanced detection logic (TTPs), refining alerting in SIEM platforms, and building robust, efficient automation playbooks in SOAR to reduce Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).
- Identity Governance & Access Control: Define and enforce strong IAM principles (e.g., Least Privilege, Zero Trust) and contribute to identity governance platforms to ensure secure authentication, authorization, and access across the enterprise.
- Email Security: Strengthen email security by managing alerts and workflows in platforms like Material Security, reviewing post-delivery threats, and improving automated response to suspicious messages and mailbox activity.
- Cross-Functional Security Leadership: Proactively partner with Engineering, IT, and Compliance teams to embed security best practices early in the lifecycle and align security controls with business risk objectives.
- Process Improvement: Participate actively in incident reviews, contribute to security process improvements, and work with external vendors to align system capabilities and security expectations.
- 5+ years of hands-on experience in information or enterprise security, preferably within a high-growth tech environment utilizing cloud infrastructure (AWS, Azure, GCP).
- You possess deep, up-to-date knowledge of modern attacker tactics, techniques, and procedures (TTPs) and excel at translating complex technical risk into clear business context for a range of stakeholders.
- Demonstrated expertise in developing detections, alerting logic, and monitoring improvements using SIEM platforms (e.g., Splunk, Sentinel, Elastic).
- Expert comfort interpreting endpoint telemetry and supporting investigations using EDR/XDR technologies (e.g., CrowdStrike, Defender).
- Proven ability to build and maintain automation through SOAR workflows (e.g., Phantom, Demisto, XSOAR) to improve investigation and response efficiency.
- Demonstrated expertise in Zero Trust principles, modern identity governance, and access management solutions (e.g., Okta, Ping, or Azure AD).
- Experience managing email security using platforms like Material Security, including reviewing post-delivery detections and analyzing mailbox activity.
- You collaborate effectively across teams, proactively take ownership of complex challenges, and contribute actively within a small, focused security team.
Top Skills
What the Team is Saying
What We Do
Navan is the leading all-in-one business travel and expense management solution that makes travel easy for frequent travelers. From finding flights and hotels, to automating expense reconciliation, with 24/7 support along the way, Navan delivers an intuitive experience travelers love and finance teams rely on. See how Navan customers benefit and learn more at navan.com.
Why Work With Us
At Navan, we’re never satisfied with the status quo, and we know breakthrough ideas come from diverse perspectives. We are committed to cultivating a workplace that reflects the diversity of the customers we serve while fostering leadership and innovation.
Gallery
Navan Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
In-person connections is the foundation of Navan, the connections forged through face-to-face interactions improve company culture and what we can achieve together. We operate on a hybrid working model, which we define as four days a week in-office.
.png)
