Security Engineer

• Lead security evaluation and enhancement initiatives across Tricentis AI utilization, including Claude, Copilot, Cursor, and 3rd Party SaaS AI tools.
• Drive innovation through research and implementation of advanced AI security technologies
• Conduct comprehensive architecture reviews, threat modeling, and vulnerability assessments
• Design and implement robust security architectures for AI systems
• Collaborate with cross functional teams to track security defects and align with them on remediation steps.
• Provide technical leadership and mentorship in AI security best practices

Senior AI Security Engineer

• Own the end-to-end post-sale delivery organization for Genea’s physical security and access control business, including Security Support (L1 and L2) and Security Implementations, with planned expansion into Renewals management and a net-new Customer Success function.
• Own a delivery P&L and an associated growth target; build and manage a services portfolio that balances margin-positive offerings with strategic loss-leaders that drive adoption, retention, and expansion.
• Lead and mature both onshore and offshore delivery, building the staffing models, partner relationships, and follow-the-sun coverage needed to scale quality and capacity cost-effectively.
• Manage implementation delivery through Genea’s partner / integration channel, holding partners accountable to scope, timeline, quality, and customer-experience standards across engagements ranging from short multi-week installs up to complex multi-month programs.
• Transform and mature the post-sale organization — redesigning the operating model, roles, hand-offs, and value chain to move from reactive support toward proactive, outcome-driven delivery and customer success.
• Stand up the Renewals function and, subsequently, the Customer Success function: define the charter, segmentation, health-scoring, playbooks, and the renewal and expansion motion in partnership with Sales and Operations.
• Operationalize delivery, reporting, and process with AI — instrumenting the organization with dashboards, forecasting, and AI-enabled workflows that improve throughput, margin visibility, and customer outcomes.
• Define and own the KPIs for the function (utilization, margin, time-to-value, CSAT, gross and net retention, on-time delivery) and report performance and risk to the executive team.
• Coach and develop frontline and emerging managers, strengthening the leadership bench and elevating the team’s capability within the Director’s span of control.
• Lead cross-functionally and through influence — partnering with Sales, Product, Engineering, and broader Operations to enhance the value chain inside and outside the direct reporting line.
• Serve as a senior point of escalation for strategic accounts and complex delivery situations, representing the post-sale organization in executive and customer-facing forums.
• Performs other related duties as assigned by management.

Director, Security Delivery – Physical Security

• Leads AVEVA’s Governance, Risk and Compliance function within the central Digital Security organization
• Accountable for policies, standards, and governance frameworks that protect AVEVA’s digital estate and products
• Responsible for the risk assurances required to make informed business decisions
• Sets standards for federated teams
• Manages the full policy lifecycle in response to evolving threats and business context
• Owns the enterprise security risk register and operates governance processes
• Engages business owners in risk treatment decisions
• Leads the TPRM programme and assesses security posture of suppliers
• Coordinates investment and improvement initiatives to advance programme maturity
• Manages AVEVA’s compliance posture across applicable regulatory frameworks
• Builds and develops a high-performing GRC team with a culture of intellectual curiosity

Director, Information Security – GRC

• Lead AVEVA’s Security Assurance function within the central Digital Security organization
• Independently test if AVEVA’s security controls are operating as designed
• Connect assurance findings directly to the risk register and governance process
• Design and lead a continuous controls assurance programme
• Oversee in-depth technical assurance activities including penetration testing and configuration reviews
• Own the security evidence library and lead coordination of external audit and certification processes
• Identify control weaknesses and remediation tracking through the GRC risk register
• Provide high-quality, evidence-based assurance reporting to the CISO and AVEVA Executive Team

Director, Information Security – Assurance

• Lead AVEVA’s Security Resilience function in crisis management and enterprise-wide resilience
• Ensure AVEVA can withstand, respond, and recover from disruptions
• Build and develop a high-performing Security Resilience team
• Drive Business Continuity and Disaster Recovery (BCDR) planning
• Maintain crisis management frameworks and conduct simulations
• Provide security assessments for staff travel and events
• Ensure resilience requirements are embedded into systems and products
• Report programme progress to executive leadership

Director, Security Resilience

• Zoox is seeking a motivated (undergraduate) student worker to join our team, focusing on AI and our initiatives to leverage AI for automated security reviews.
• Help us operationalize our workflows to perform these functions at scale.

Part-Time Student Worker, Product Security

• Own the intake, prioritization, and completion of all inbound customer security questionnaires, RFPs, and due diligence requests including SIG, CAIQ, and custom enterprise questionnaires with a commitment to accuracy, thoroughness, and turnaround time.
• Serve as the primary customer-facing representative for security and compliance, leading calls and meetings with enterprise customers, prospects, and their security or procurement teams.
• Build and maintain a comprehensive, evergreen response library for common security and compliance questions, reducing duplication of effort and ensuring consistency across all customer engagements.
• Build and maintain automations to continuously validate the organization's compliance posture across key frameworks including SOC2 Type II, ISO 27001, and HIPAA, coordinating evidence collection, managing external auditor relationships, and driving readiness for annual assessments.
• Build dashboards and reporting pipelines that provide leadership with real-time visibility into compliance posture, open risks, and program health.
• Design and automate the third-party risk assessment process, including vendor tiering logic, questionnaire workflows, and continuous monitoring for critical vendors.
• Perform ongoing risk assessments and maintain a risk register that reflects the current threat and compliance landscape, escalating material findings to leadership with clear remediation recommendations.
• Conduct third-party vendor risk assessments, including use case-specific risk analysis, ongoing tiering and monitoring, and implementation recommendations.
• Author, maintain, and operationalize security policies and procedures; track employee acknowledgments and manage exceptions through to resolution.
• Coordinate and participate in customer security review meetings, including onsite or virtual sessions with enterprise security, legal, and procurement stakeholders.
• Collaborate cross-functionally with Engineering, Legal, and Product to gather documentation, validate control descriptions, and resolve compliance gaps surfaced through customer inquiries.

Senior Security Engineer, GRC

• Develop and automate security metrics and dashboards to provide insights into threat trends, risk posture, compliance status, and the overall effectiveness of the cybersecurity program.
• Design and maintain cybersecurity metrics and Key Performance Indicators (KPIs) to measure control effectiveness, risk exposure, and compliance status.
• Develop and automate dashboards and reports using platforms such as Power BI, Tableau, or equivalent BI tools.
• Ensure timely, accurate, and consistent data reporting across multiple cybersecurity domains (e.g., vulnerability management, incident response, phishing simulations, access management).
• Design and manage the data model for reporting across multiple sources.
• Leverage Federal Data Lake and related platforms for secure, scalable data integration.
• Ensure data accuracy, consistency, and traceability across dashboards and reports.
• Partner with cross-functional teams to aggregate, standardize, and validate data from multiple cybersecurity tools.
• Deliver regular and ad-hoc reports to leadership, auditors, and stakeholders to support strategic decisions and regulatory requirements.
• Present findings in executive-friendly formats that translate technical data into business-relevant insights.
• Establish governance processes for metric definitions, data quality, and reporting cadence.
• Identify data gaps or quality issues and coordinate remediation with technical teams.
• Support compliance and audit reporting needs for standards such as NIST, ISO 27001, GDPR, and others.

Cybersecurity Lead – Metrics and Reporting

• Design and Build the AI Security Control Plane.
• Design and implement scalable controls for AI-enabled development and operations.
• Establish secure patterns for: LLMs and agents, AI-assisted development model and inference access data protection and governance, AI telemetry and visibility.
• Create guardrails that enable safe AI adoption without slowing engineering velocity.
• Partner with Product Security and Engineering to evolve the SDLC for an AI-enabled world.
• Embed security directly into developer workflows through: pipeline enforcement, AI-aware testing, secure coding patterns, and automated controls.
• Help shift vulnerability management from reactive patching toward systemic risk reduction.
• Partner with Cyber Defense teams to address how AI changes: attacker behavior, detection and response, vulnerability exploitation, and operational tempo.

Principal Engineer, AI Security

• Serve as the designated Information System Security Officer (ISSO) and primary cybersecurity lead for the cloud data platform.
• Lead all security activities supporting the system's Authority to Operate (ATO) and ongoing authorization.
• Develop, maintain, and update security documentation including: System Security Plans (SSPs), POA&Ms, Risk Assessments, Security Assessment Reports (SARs), Continuous Monitoring artifacts.
• Support compliance with: FedRAMP Moderate, FISMA, NIST SP 800-53, NIST SP 800-207 (Zero Trust), FTC security policies.
• Implement and maintain cloud security controls within Microsoft Azure.
• Design and manage identity and access management using Microsoft Entra ID and RBAC.
• Configure and validate encryption for data at rest and in transit.
• Support vulnerability management, remediation planning, and security assessments.
• Coordinate monthly continuous monitoring activities and security metrics reporting.
• Conduct annual risk assessments and security control reviews.
• Support privacy documentation including PTAs and PIAs.
• Work closely with the Government Authorizing Official, System Owner, CISO, COR, and Continuous Assurance teams.
• Assist with incident response, forensic investigations, and security event analysis.
• Coordinate vulnerability scanning, penetration testing, and remediation activities.
• Participate in tabletop exercises, disaster recovery planning, and cyber resilience initiatives.
• Ensure cloud solutions comply with FedRAMP authorization boundaries and federal cybersecurity requirements.
• Provide technical guidance to cloud architects and engineering teams on secure cloud design and implementation.

See all jobs on JobTailor