Sr. Security Engineer, Corporate Information Security

About the Role

Betterment is hiring a Sr. Security Engineer, Corporate Information Security to be a principal member of the Workforce Security team. We are responsible for managing identity and logical access across the company, owning change management for the systems employees and contractors rely on every day, and operating the technologies that secure them: Okta, Google Workspace, Slack, Atlassian, Glean, Jamf, and the SaaS portfolio that surrounds them. As we extend centralized management to a small Windows and Linux footprint, you will help shape how we do that securely from day one.

This is a hands-on senior IC role focused on designing, implementing, and continuously improving identity architecture, privileged access controls, endpoint hardening standards, and our overall workforce security posture. You will embed secure access patterns across SaaS, managed browser, mobile, and workstation environments partnering closely with other Security teams, IT, Legal, Compliance, and the business units we serve.

In parallel, you will partner with our AI Governance & enablement team to evaluate, enable, and secure the use of AI tools (ChatGPT, Claude, Glean Assistant, and the agentic tooling that's coming next) establishing practical guardrails that let employees move quickly without compromising data or systems.

This role is based out of our NYC office.

What You'll Do

Architect and maintain the enterprise identity and access management roadmap, defining role-based access controls and lifecycle automation that span HRIS, joiner/mover/leaver workflows, and downstream systems.

Design and implement zero trust and least-privilege patterns, including time-bound access, just-in-time privileges, and break-glass procedures for high-risk roles and service accounts.

Lead vulnerability and posture management programs for endpoints and corporate SaaS, establishing remediation SLAs by severity and driving remediation campaigns to closure.

Define and enforce endpoint, mobile, and browser hardening standards aligned with CIS benchmarks, including macOS, Windows, Linux Desktops, managed browser configurations, and extension governance.

Own the security management of corporate communication platforms such as email and Slack, executing DLP enforcement and conducting investigations for spam, phishing, and other threats.

Evaluate, enable, and secure AI tools including ChatGPT, Claude, Glean Assistant, and emerging agentic tooling, establishing practical guardrails that enable speed without compromising data or systems.

Operate and optimize SaaS posture tools and identity platforms, acting as the connective tissue across the SaaS estate to ensure consistent security coverage.

Partner with IT Systems to surface and remediate identity and configuration misconfigurations, translating risk into actionable remediation plans.

Build and mature an Identity Governance and Administration (IGA) practice, including user access review campaigns that produce defensible evidence and reduce manual overhead.

Champion secure access patterns across SaaS, managed browser, mobile, and workstation environments while balancing usability and security for business needs.

Requirements

Demonstrate extensive experience designing and managing identity and access management programs for enterprise environments.

Possess deep operational knowledge of Okta, Google Workspace, Slack, Atlassian, Glean, Jamf, and related SaaS security controls.

Show proven ability to define and implement security standards for endpoints, mobile devices, and browsers in a corporate environment.

Have a strong track record of managing vulnerability remediation programs and driving measurable risk reduction across systems.

Exhibit expertise in security architecture for authentication, authorization, federation, and privileged access management.

Bring experience with security operations including monitoring, incident response, and investigations for email and communication platforms.

Require a thorough understanding of Zero Trust principles, least-privilege design, and the protection of non-human identities such as service accounts and API tokens.

Demand excellent collaboration skills to work effectively with security, IT, legal, compliance, and business stakeholders in a fast-paced environment.

About Betterment

Betterment is a leading, technology-driven financial services company that offers investing, savings and retirement solutions for retail investors and investment advisors as well as financial wellness solutions, including a 401(k) for small and medium-sized businesses. Our team is passionate about our mission, to empower people to build wealth with confidence and ease. We are headquartered in NYC and offer hybrid NY-based positions (four days/week in-office, with no required office days during the summer and winter holidays).

Compensation & Practical Notes

Location: Betterment HQ - New York City

New York City

Engagement: Hybrid NY-based positions (four days/week in-office, with no required office days during the summer and winter holidays).

New York City: $165,000-185,000

This job may also be eligible for variable compensation in the form of a company incentive bonus.