Corporate Security Engineer

We are looking for a Corporate Security Engineer to grow our rapidly expanding Security team here at Asana. You will be leading initiatives to help keep Asana’s Corporate environment and users safe.

The security team is responsible for protecting Asana’s employees, users, and customers. We are a team of security engineers and risk and compliance practitioners who build innovative safeguards to ensure that our data is protected against threats and that we comply with legal, regulatory, and customer requirements. We collaborate closely with teams across the organization to foster a culture of security throughout our product and operations.

This role is based in our San Francisco office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements.

What you’ll achieve:

• Lead initiatives across key security domains, including Endpoint Security, SaaS Security Posture Management (SSPM), Identity & Access Management (IAM), Identity Governance, and data-loss prevention


• Collaborate closely with IT, engineering, and business stakeholders to integrate security tools, policies, and processes into corporate systems and workflows, enabling secure-by-design implementations


• Design and build automation scripts and tools to streamline security workflows, collect actionable metrics, and enforce security policies at scale.


• Develop and implement strategies and tooling for Data Loss Prevention (DLP) and the mitigation of insider risks within Asana.


• Partner with our Incident Manager and provide subject matter expertise for incident response. 

About you:

• 4 years experience in a Corporate Security or IT Security


• Familiarity with Identify and Access Management, Authentication & Authorization, Endpoint management, and Network Security Controls.


• Strong understanding of security concepts including zero trust architecture, threat modeling, security frameworks (SOC 2, ISO 27001) and CIS Controls. 


• Experience in implementing Data Loss Prevention tooling and insider risk programs. 


• Some experience writing and maintaining scripts in at least one language such as Python.


• Experience with Okta, Google Workspace, osQuery and EDR solutions. 


• Demonstrates curiosity about AI tools and emerging technologies, with a willingness to learn and leverage them to enhance productivity, collaboration, or decision-making

At Asana, we're committed to building teams that include a variety of backgrounds, perspectives, and skills, as this is critical to helping us achieve our mission. If you're interested in this role and don't meet every listed requirement, we still encourage you to apply.

What we’ll offer:

Our comprehensive compensation package plays a big part in how we recognize you for the impact you have on our path to achieving our mission. We believe that compensation should be reflective of the value you create relative to the market value of your role. To ensure pay is fair and not impacted by biases, we're committed to looking at market value which is why we check ourselves and conduct a yearly pay equity audit.

For this role, the estimated base salary range is between $194,000 - $220,000. The actual base salary will vary based on various factors, including market and individual qualifications objectively assessed during the interview process. The listed range above is a guideline, and the base salary range for this role may be modified.

In addition to base salary, your compensation package may include additional components such as equity, sales incentive pay (for most sales roles), and benefits. If you're interviewing for this role, speak with your Talent Acquisition Partner to learn more about the total compensation and benefits for this role.

We strive to provide equitable and competitive benefits packages that support our employees worldwide and include:

• Mental health, wellness & fitness benefits


• Career coaching & support


• Inclusive family building benefits


• Long-term savings or retirement plans


• In-office culinary options to cater to your dietary preferences 

These are just some of the benefits we offer, and benefits may vary based on role, country, and local regulations. If you're interviewing for this role, speak with your Talent Acquisition Partner to learn more about the total compensation and benefits for this role.

#LI-Hybrid #LI-AA1