Corporate Security Engineer

About us: Founded in Copenhagen, Denmark, in 2014, Templafy’s success is built by our 60+ employee nationalities found at offices around the world. We believe that when people feel valued, heard, and empowered, they perform at their best—creating a win for all. Our unique product and dedication to innovation and excellence have raised over $200 million in funding from top investors like Insight Venture Partners, Seed Capital, Dawn Capital, Damgaard Company and Golub Capital. Role Summary As Corporate Security Engineer at Templafy, you will help secure the corporate technology foundation of a global SaaS company building AI-powered document generation and business content solutions. You will take responsibility for protecting the systems, identities, devices, networks, and SaaS platforms that enable our teams to operate securely at scale. This is a hands-on engineering role where you will design and operate controls across identity, endpoints, email, data protection, cloud, and SaaS governance. As a technical security partner, you will contribute to corporate infrastructure decisions and help shape how Templafy protects its business operations as the company grows. You will collaborate closely with IT, Security, Legal, Privacy, and business stakeholders. A separate Senior Information Security Analyst is responsible for application and product security and incident response. This role complements that work by strengthening the corporate environment that supports the wider business. What Will Help You Succeed You have experience in corporate or infrastructure security and enjoy building, hardening, automating, and continuously improving systems. You use sound judgment to assess risk, make pragmatic technical decisions, and determine when broader input is needed. You are comfortable working across technical and non-technical teams and can translate security requirements into practical solutions that people can understand and adopt. You enjoy improving systems through automation, scripting, and thoughtful workflow design. You are comfortable taking responsibility for security initiatives while collaborating with colleagues when decisions require broader input. You will have the opportunity to work across several technical areas and help shape our corporate security practices as our technology and business evolve. Key Responsibilities • Identity and access security — Design and operate controls across the identity layer, including JIT/PAM, Conditional Access, OAuth scope reviews, and SSO enforcement. • Endpoint and platform security — Implement and operate the Microsoft 365 Defender suite, harden endpoints, and manage patching and remediation across Windows, macOS, and corporate applications. • Data protection — Implement and manage data loss prevention controls and configure backup solutions, such as Keepit, for corporate and SaaS data. • Network and email security — Deploy and maintain firewalls, egress filtering, network segmentation, anti-phishing controls, and email authentication standards including DMARC, DKIM, and SPF. • SaaS governance — Discover and govern shadow IT and unsanctioned SaaS or AI usage, and support effective application patching and lifecycle management. • Security automation — Automate routine IT and security operations, including lifecycle workflows, compliance checks, access reviews, asset discovery, and data classification. Build scripting-based tools using PowerShell or Python and use appropriate automation and agentic tooling to improve manual workflows. • Security advisory — Partner with the IT Administrator on security-related decisions, provide technical input on vendor assessments and integration reviews, and advise teams across the business on infrastructure security. • Incident support — Investigate incidents involving corporate infrastructure in coordination with the Senior Information Security Analyst. Required Qualifications • Relevant experience in corporate security engineering, infr