Senior Security Engineer (Remote, EU/CET)

About Maze

Maze is the user research platform that helps companies build the right products faster by making user insights available at the speed of product development.

In most companies, research demand far exceeds supply. Time, cost, and lack of access to expertise hold teams back. In today’s AI-powered world, anyone can build a product fast. The real challenge? Deeply understanding user needs and building the right product. That’s where Maze comes in.

We believe companies shouldn’t have to choose between building fast and building right. Maze makes research accessible, intuitive, and fast so product teams can put user insights at the center of every decision.

Our platform enables researchers, designers, and product managers to quickly recruit participants, run studies autonomously, and surface insights that actually drive product decisions. Our AI capabilities automate the busywork and add depth and direction to the insights themselves.

That’s why Maze was recently named the #1 user research platform in UX Tools’ Design Tools Survey, and why we’re scaling fast across industries like B2B SaaS, e-Commerce, Financial Services, Retail, and Automotive, supporting world class customers such as Uber, Amazon, Atlassian, Anthropic & more.

Maze is a Series B company backed by top-tier investors (Felicis, Emergence & Amplify). We operate a global remote workforce driven by our core values.

Senior Security Engineer

Location: Remote*, preference for Netherlands, United Kingdom, Ireland, Spain or Portugal. Key engineering and product teams are based in these locales.*

About the Role

We’re hiring a Senior Security Engineer to take the lead on security at Maze. You’ll own two closely connected areas:

The corporate IT foundation every Maze employee relies on

The security controls that keep our cloud, code and SaaS environment secure and auditable

Identity, devices and access sit right at the intersection of IT and security. This is an opportunity to own that space end to end. Your job is to automate the IT side so well that most of your time goes to corporate security engineering. You own the budget and tooling to automate the IT layer, and the helpdesk scope stays deliberately small, so the role stays an engineering role.

You’ll report to our Senior Manager, Platform Engineering and work closely with teams across Maze.

As a Senior Security Engineer at Maze, you will:

Own identity and SSO in Google Workspace, including groups, SCIM provisioning, MFA and access policies

Run our macOS fleet through Iru, including enrolment, configuration, patching and compliance

Automate joiner, mover and leaver flows from Rippling so new hires are fully provisioned on day one and leavers lose access within hours

Own SaaS licensing and app provisioning, while keeping internal support lightweight through automation and self-service

Own security controls across AWS, GitHub, Kubernetes and our SaaS environment, including role based access, IAM hygiene, cloud guardrails, network boundaries and secrets management

Run vulnerability management end to end, taking findings from Intruder, Socket and pentests through remediation and verification with clear owners and SLAs

Run regular access reviews and generate audit evidence through Vanta, making compliance thorough, timely and low effort

Bring a security perspective to incidents and post-incident reviews, turning what we learn into stronger controls

Use AI-assisted and agentic workflows to reduce manual work and investigate issues faster

What you won’t own

Application code review and threat modelling, sales questionnaires, customer security calls or other customer-facing security work. These sit with our Senior Manager, Platform Engineering today and will move into the Infosec function as business needs grow.

What we’re looking for

You have a strong software, infrastructure or security engineering background and are comfortable using code and infrastructure as code to automate repetitive work

You’ve owned identity, MDM and joiner and leaver automation at a remote company and can speak to the impact your automation had

You’ve secured a modern AWS or GCP environment and can explain the trade-offs behind your IAM decisions

You’ve run vulnerability management or access reviews in an environment with external audits

You have experience with SOC 2 or ISO 27001 controls and know how to turn a control into an automated check

You care about the employee experience and are comfortable saying no when needed while providing context and a better path forward

You’re excited about AI-assisted development and actively use modern AI tools in your work

Our stack

Identity and people systems: Google Workspace, Rippling

Devices: Iru (formerly Kandji), macOS

Cloud and infrastructure: AWS, GCP, Kubernetes, Terraform, Docker

Security and compliance: Vanta, Intruder, Socket, Datadog Security, Riot

Network: Cloudflare Zero Trust

CI/CD: GitHub Actions, Depot CI, Argo CD

Observability: Datadog

Collaboration: Slack, Notion, Linear, GitHub, Zoom

Application: TypeScript, Node.js, React

You don’t need experience with every technology in our stack. We care more about strong fundamentals, an engineering approach to both IT and security and excitement about making Maze secure by default as we scale.

Inclusivity and Pay