Senior Security Engineer, Enterprise Security

About the team

Turo is searching for a highly motivated and versatile Sr. Security Engineer to spearhead our efforts in securing enterprise systems and data through the architecture, design, and continuous improvement of a comprehensive security framework. This role will focus heavily on leading the deployment of Zero Trust principles across the organization, ensuring the integrity of our systems, and protecting against emerging threats.

The successful candidate will be a subject matter expert in these domains, possess a proactive mindset for staying ahead of potential threats, and serve as a technical mentor to junior team members.

• Lead the architecture and implementation of Zero Trust security frameworks across the enterprise, focusing on continuous verification and least privilege access models.
• Architect, develop, and manage Advanced Email Security solutions to protect against phishing, spoofing, and other email-based attacks.
• Deploy, maintain, and design policies for Data Loss Prevention (DLP) and Insider Threat prevention technologies to mitigate risks from internal and external actors.
• Partner closely with IT Engineering on Identity and Access Governance solutions (e.g., Okta, IGA workflows) to enforce secure and efficient access control policies across the organization.
• Lead the technical side of compliance audits, executing deep gap assessments for SOX and SOC 2 standards.
• Champion and drive the adoption of Infrastructure as Code (IaC) specifically using Terraform to automate security configurations across the enterprise cloud stack.
• Lead Incident Response efforts for enterprise security, developing advanced automation playbooks (e.g., Tines), conducting root‑cause analyses, and guiding the incident response team during critical events.
• Establish and maintain a robust SaaS Security Posture to ensure third‑party services are securely integrated.
• Mentor and provide technical guidance to mid‑level security engineers and IT partners.

• 5+ years of experience in enterprise security, with a proven track record in Zero Trust, DLP, and Endpoint Security.
• Proven experience in architecture design and hands‑on deployment of enterprise‑wide security platforms.
• High proficiency in scripting and automating custom security processes using Python, Go, or Power Shell.
• Advanced experience with configuration management and infrastructure as code tools (e.g., Terraform).
• Industry certifications such as CISSP, CISM, or GIAC are highly preferred.

Target base salary range in San Francisco is $148k - $185k annually. This role is also eligible for equity and benefits.

• Competitive salary, equity, benefits, and perks for all full‑time employees
• Employer‑paid medical, dental, and vision insurance (Country specific)
• Retirement employer match
• Learning & Development stipend
• Turo host matching program
• Turo travel credit
• Cell phone and internet stipend
• Paid time off to relax and recharge
• Paid holidays, volunteer time off, and parental leave
• In‑office lunch, office snacks, and fun activities for those in office full‑time or hybrid

This role will be in‑office on a hybrid schedule – we expect you to work in the office 3 days per week on Mondays, Wednesdays, and Thursdays.

Turo is an Equal Opportunity Employer and a participant in the U.S. Federal E‑Verify program. Women, minorities, individuals with disabilities and protected veterans are encouraged to apply. We welcome people of different backgrounds, experiences, abilities and perspectives. Turo will consider qualified applicants with criminal histories in a manner consistent with the San Francisco Fair Chance Ordinance, as applicable. We welcome candidates with physical, mental, and/or neurological disabilities.

If you require assistance applying for an open position, or need accommodation during the recruiting process due to a disability, please submit a request to People Operations by emailing