Corporate Security Engineer

About us: Founded in Copenhagen, Denmark, in 2014, Templafy’s success is built by our 60+ employee nationalities found at offices around the world. We believe that when people feel valued, heard, and empowered, they perform at their best—creating a win for all. Our unique product and dedication to innovation and excellence have raised over $200 million in funding from top investors like Insight Venture Partners, Seed Capital, Dawn Capital, Damgaard Company and Golub Capital. Role Summary As Corporate Security Engineer at Templafy, you will help secure the corporate technology foundation of a global SaaS company building AI-powered document generation and business content solutions. You will take responsibility for protecting the systems, identities, devices, networks, and SaaS platforms that enable our teams to operate securely at scale. This is a hands-on engineering role where you will design and operate controls across identity, endpoints, email, data protection, cloud, and SaaS governance. As a technical security partner, you will contribute to corporate infrastructure decisions and help shape how Templafy protects its business operations as the company grows. You will collaborate closely with IT, Security, Legal, Privacy, and business stakeholders. A separate Senior Information Security Analyst is responsible for application and product security and incident response. This role complements that work by strengthening the corporate environment that supports the wider business. What Will Help You Succeed You have experience in corporate or infrastructure security and enjoy building, hardening, automating, and continuously improving systems. You use sound judgment to assess risk, make pragmatic technical decisions, and determine when broader input is needed. You are comfortable working across technical and non-technical teams and can translate security requirements into practical solutions that people can understand and adopt. You enjoy improving systems through automation, scripting, and thoughtful workflow design. You are comfortable taking responsibility for security initiatives while collaborating with colleagues when decisions require broader input. You will have the opportunity to work across several technical areas and help shape our corporate security practices as our technology and business evolve. Key Responsibilities • Identity and access security — Design and operate controls across the identity layer, including JIT/PAM, Conditional Access, OAuth scope reviews, and SSO enforcement. • Endpoint and platform security — Implement and operate the Microsoft 365 Defender suite, harden endpoints, and manage patching and remediation across Windows, macOS, and corporate applications. • Data protection — Implement and manage data loss prevention controls and configure backup solutions, such as Keepit, for corporate and SaaS data. • Network and email security — Deploy and maintain firewalls, egress filtering, network segmentation, anti-phishing controls, and email authentication standards including DMARC, DKIM, and SPF. • SaaS governance — Discover and govern shadow IT and unsanctioned SaaS or AI usage, and support effective application patching and lifecycle management. • Security automation — Automate routine IT and security operations, including lifecycle workflows, compliance checks, access reviews, asset discovery, and data classification. Build scripting-based tools using PowerShell or Python and use appropriate automation and agentic tooling to improve manual workflows. • Security advisory — Partner with the IT Administrator on security-related decisions, provide technical input on vendor assessments and integration reviews, and advise teams across the business on infrastructure security. • Incident support — Investigate incidents involving corporate infrastructure in coordination with the Senior Information Security Analyst. Required Qualifications • Relevant experience in corporate security engineering, infrastructure security, or a combined IT and security role, typically gained through four or more years of professional experience. • Experience taking responsibility for at least one security domain—such as identity, endpoint, network, or data protection—from design and implementation through to ongoing operation and improvement. • Practical experience implementing and operating an enterprise identity provider, including Conditional Access, privileged access controls, SSO, and MFA. Experience with Entra ID is preferred, but experience with platforms such as Okta or an equivalent solution is also relevant. • Production experience implementing and operating at least one of the following: data loss prevention, network segmentation, or egress filtering. • The ability to assess risk, evaluate trade-offs, and make clear, defensible prioritisation decisions. • Scripting and automation skills using PowerShell, Python, or a comparable language, with examples of improving or replacing manual workflows. • Experience scoping, coordinating, and delivering security projects involving multiple teams or business functions. • Experience communicating security decisions to both technical and non-technical stakeholders. • Experience working in a technology-led or similarly complex environment. Familiarity with B2B SaaS is beneficial but not essential. Preferred Qualifications • Certifications such as CISSP, GSEC, Azure Security Engineer Associate, or equivalent knowledge developed through practical experience. • Familiarity with security and compliance frameworks such as SOC 2, ISO 27001, or NIST CSF. • Experience with SaaS backup solutions such as Keepit, Veeam, or an equivalent platform. Employee Benefits: • Employee equity program • Private health insurance • Company lunch contribution • Phone and broadband covered by company • Centrally located office – easy access to public transportation • Company events and team activities • Flexible work environment