Security Engineer

• Manage employees performing engineering and technical activities in the area of Product Security Test & Evaluation across the Enterprise including Defense Engineering Technology and Services.
• Manage, develop, and motivate a Product Security Test Team.
• Develop project and/or operational plans aligned to BT&E organizational objectives.
• Implement plans to ensure business, technical and customer requirements are achieved.
• Assign authority and responsibilities to employees to execute the plan.
• Reviewing execution plans, making appropriate adjustments, and resolving issues.
• Developing and monitoring appropriate metrics to ensure performance to plan.
• Support the execution and implementation of technical and functional excellence projects and processes applicable to the organization.
• Ensuring technical excellence by developing teammates, providing mentorship and instilling a culture of accountability and bias for action.
• Creating a positive cohesive team environment that embodies the Boeing Behaviors.
• Develop and execute plans to support and grow programs.
• Implementing policies and procedures and setting operational goals.
• Developing and maintaining relationships and partnerships with customers, stakeholders, peers, partners and direct reports.
• Effectively communicating to Senior Leaders and Executive Management.
• Develop a culture wherein Safety and Quality concerns are identified, assessed and actively managed as one element in the conduct of daily business.

Product Security Test & Evaluation Manager

• The Workday Security Developer III is responsible for performing system analysis and designing to include requirements, specifications, configuration, documentation, testing, and development of security roles and policies within Workday.
• Conducts highly complex work, without supervision and with extensive latitude for independent judgment.
• Serves as a liaison between TSG groups, clients, and vendors and as a mentor to others on the team and in the department.
• Design, configure, and maintain Workday security for HCM, Payroll, Financials, Recruiting, Learning, and other Workday modules.
• Perform security analysis, troubleshooting, and root cause analysis for access-related issues.
• Collaborate with HR, Finance, Supply Chain, Internal Audit, Compliance, and business stakeholders to gather and implement security requirements.

Workday Security Developer

• Design and implement cybersecurity solutions
• Provide technical expertise and support for cybersecurity solutions
• Lead technical assessments of systems and applications to ensure compliance
• Develop project scope requirements and support model creation
• Collaborate closely with cross functional IT teams

Cybersecurity Engineer II

• Lead and mentor a team of information security professionals including compliance specialists, compliance managers, and/or analysts
• Develop and execute the information security strategy aligned with business objectives and threat landscape
• Collaborate with executive leadership on security risk management, investment priorities, and incident response
• Lead and write procedures on approving security exceptions, foreign travel, and deviations following established risk management frameworks
• Build compliance approaches for NIST SP 800-171, CMMC, DFARS, ITAR, EAR, and other defense industry information security requirements
• Develop and maintain security policies, procedures, and standards
• Conduct information security risk assessments and manage risk treatment plans
• Oversee security audits, assessments, and government inspections
• Maintain relationships with government and third party representatives
• Review and advise on continuous monitoring, compliance practices, and security automation priorities
• Develop security metrics and reporting for leadership and government customers
• Manage security budget and resource allocation
• Serve as trusted advisor to business units on security requirements
• Facilitate security discussions with customers and partners
• Balance security requirements with mission effectiveness and operational efficiency
• Promote security awareness culture throughout the organization

Director of Information Security

• Owning our compliance program end to end: driving our annual SOC 2 Type 2 audits from evidence collection through auditor walkthroughs, and running Vanta as our governance home base year-round.
• Completing security questionnaires, addendums, and AI risk assessments for the IT and security teams at our hospital clients — and making sure they understand we're doing the right thing. (Health systems ask great, hard questions. You'll have great answers.)
• Running real BCDR tests and treating them like live incidents to find the gaps before the gaps find us.
• Coordinating annual pen tests and driving remediation of findings within SLA.
• Managing security across our stack: AWS, Heroku, Cloudflare, Google Workspace, GitHub, and our communication tools.
• Administering our laptop fleet for a fully remote team — imaging, shipping, MDM enrollment, inventory, and end-of-life — so every machine is encrypted, managed, and remotely wipeable.
• Running access reviews and enforcing least privilege: pruning admin lists, enforcing SSO and 2FA, and tuning password policies.
• Ensuring new employees get access to everything they need on day one, and departing ones are locked out the same day — partnering with HR and Finance on a tight onboarding/offboarding loop through Rippling and Google.
• Evaluating and securing AI tooling — from how our team uses Claude and MCP servers to partnering with engineering on customer questions about AI risk, bias testing, and model governance.
• Doing vendor management and procurement reviews, and finding savings while you're at it.
• Staying on top of the rapidly evolving AI threat landscape and adapting our defenses and team training as fast as the attackers adapt theirs.
• Playing professor and educating our team on everything security.
• Advising leadership on security matters during project planning, and working with our full stack engineers to ship improvements you identify.
• Being the savior in the event of a security incident — leading response, analysis, and the write-up afterward.
• Supporting co-workers when they manage to put their computers in a bad place. (They should enjoy talking to you, and you to them!)

Senior IT/Security Engineer – AI-native

• Configure business operating environments securely using CIS best practices.
• Perform penetration testing and threat hunting to identify potential risks.
• Monitor for and respond to incidents in the Firm’s hybrid environment.
• Keep infrastructure current, making recommendations and continually improving security technologies.
• Analyze, design, and develop programs, shell scripts, tests, and infrastructure automation capabilities.
• Work with analysts and engineers across the organization to continually improve cyber resilience.
• Provide support to understand and develop system requirements and technical solutions for cybersecurity engineering based on system architectures (CIS Controls, MITRE ATT&CK Framework, and NIST Cyber Security Framework).
• Support the maturation of the enterprise architecture to align with the Firm’s information security and risks to the organizational operations, organizational assets, and individuals.
• Develop alternatives of system designs and/or architecture, which consider trade-offs between security requirements, functional/operational requirements, and cost.
• Identify and define the requirements of the overall security of the network.
• Plan, engineer, and monitor overall security implementation of network systems.
• Support in configuring and implementing network security tools.
• Test and provide solutions for system weaknesses, threats, and security issues.
• Research and identify latest suitable technologies and processes that will improve the overall security of the system.
• Regularly audit the existing network configuration and provide improvement recommendations.
• Other duties as assigned.

• Design and implement cybersecurity solutions, upgrades, enhancements
• Provide technical expertise and support for cybersecurity solutions
• Serve as subject matter expert in compliance of secure baseline configurations
• Initiate technical assessments of systems and applications
• Author new cybersecurity standards and procedures
• Serve as technical leader for cybersecurity projects
• Identify threats and develop suitable defense measures
• Lead root-cause analysis on Cyber systems

Cybersecurity Engineer III

• Execute Internal Security Controls through compliance assessment reviews and self-inspections
• Identify deficiencies, develop and implement corrective actions
• Conduct Administrative Inquiries on personnel and processes
• Conduct Communication Security (COMSEC) duties
• Protect government, intellectual, third party, and company information
• Develop and administer an Operational Security program

Senior Industrial Security Specialist

• Lead the creation, implementation, and continuous improvement of ECS University training programs
• Develop and manage structured onboarding and refresher training for new and existing employees across all ECS disciplines
• Design specialized training tracks tailored to cyber, industrial/program, and management roles, incorporating regulatory compliance requirements
• Utilize Degreed and other existing tools to optimize training delivery and resource utilization
• Integrate training programs with the Technical Data Management System (TDMS) to track progress, completion, and effectiveness
• Update and maintain onboarding and training checklists and documentation
• Collaborate with leadership and subject matter experts to identify training needs and develop relevant content
• Build and lead a dedicated training team, including Industrial Individual Contributors (ICs)
• Organize and facilitate workshops, including Enterprise Classified Security University (ECSU) planning sessions, to establish project plan

Senior Industrial Security Training Manager

• Provide strategic, analytical, and technical support to SAMD leadership regarding security assistance, Foreign Military Sales, aviation, missile, sustainment, acquisition, logistics, and international partner activities.
• Develop executive-level briefings, information papers, issue papers, decision-support packages, talking points, strategic assessments, and recommendations for government leadership consideration.
• Integrate and analyze information from SAMD divisions, Portfolio Acquisition Executive (PAE) offices, International Cooperation Offices (ICO), Army Materiel Command organizations, Combatant Commands, Army Staff, OSD organizations, contractors, and partner nations to support SAMD decision-making processes.
• Assess aviation, missile, sustainment, and international program activities to identify emerging issues, risks, opportunities, and priorities affecting program execution.
• Provide subject matter expertise regarding international aviation, missile, and Non-Standard Missile System programs involving acquisition support, fielding, modernization, sustainment, logistics, training, lifecycle management, and coalition interoperability activities.

Senior Security Assistance – International

• Produce recurring intelligence products, including the weekly Physical Security Intelligence Update.
• Monitor and assess threats that may impact employees, facilities, executives, or business operations.
• Conduct intelligence-driven investigations involving insider threat, executive protection, physical security, and other sensitive matters.
• Monitor criminal activity, protests, demonstrations, and other events that could disrupt operations or pose security risks.
• Conduct executive travel threat assessments and provide intelligence support for executive protection activities.
• Process and analyze tactical intelligence alerts involving at-risk individuals and potential threats.
• Conduct background investigations using internal, commercial, and open-source intelligence resources.
• Provide timely intelligence assessments, briefings, and recommendations to security stakeholders and leadership.
• Partner with Physical Security, Executive Protection, Incident Response, Crisis Management, and other security teams to support threat mitigation efforts.
• Respond to high-priority intelligence requests and emerging security events.
• Prepare clear, concise written reports and executive-level intelligence briefings.
• Participate in rotational on-call coverage supporting after-hours intelligence and security matters.

Security Intelligence Specialist

• Develop, deliver, and maintain classified industrial/program security training programs for employees working in secure environments
• Support onboarding, recurring, and role-based training requirements
• Create training content aligned to classified program needs, security policies, and applicable regulatory requirements
• Partner with leadership, security professionals, and subject matter experts to identify training gaps and build effective learning solutions
• Track training completion, effectiveness, and compliance using established systems and reporting tools
• Update training materials, checklists, and documentation to reflect current policies, processes, and requirements
• Facilitate workshops, training sessions, and refresher events to reinforce industrial/program security awareness and performance

Senior Industrial, Program Security Trainer

• Assists with releasing candidate CI/CD pipelines as a mechanism to communicate the states and steps necessary to determine a release candidate for each application and service
• Designs and develops fully autonomous CI/CD pipelines which facilitate cloud deployments which includes automation of all infrastructure, services and application build and deployment
• Ensures that all parts of the pipeline follow good software engineering practices to include automated tests and infrastructure tests
• Builds tools which reduce errors and improve our overall customer experiences
• Assists in troubleshooting of production issues and ensure pipeline and infrastructure produces clear documentation and metrics which enables Root Cause Analysis
• Develops and tests – Ansible Playbooks, Terraform Scripts, Packer Scripts and establish immutable infrastructure such that patches are an artifact of the past
• Works with Enterprise Architecture, Information Security (InfoSec), Software Delivery, and Quality Assurance to enable the organization to move to the cloud using complete automation
• Partners across Technology, Operations, Digital, and Data (TODD) to ensure controls are designed, implemented, and monitored to strengthen risk management, compliance, and cyber security, effectively mitigating risk to levels within the company’s risk appetite
• Practices disciplined change management by evaluating risk and control impacts when designing or implementing changes to processes, systems, products, and/or services and ensures appropriate updates to procedures, training, and controls are made accordingly

AI Identity Security Engineer – SailPoint

• Partners with other engineers and information technology staff to orchestrate code builds, quality and security analyses, deployments, and automated testing through CI/CD release candidacy pipelines
• Articulates business needs and translate them into technology solutions
• Models release candidate CI/CD pipelines as a mechanism to communicate the states and steps necessary to determine a release candidate for each application and service
• Designs and develops fully autonomous CI/CD pipelines which facilitate cloud deployments which includes automation of all infrastructure, services and application build and deployment
• Ensures that all parts of the pipeline follow good software engineering practices to include automated tests and infrastructure tests
• Researches new technologies that will improve efficiency and effectiveness
• Implements highly scalable CI/CD platforms to support high change volumes and fast feedback
• Automates operational activities and tasks
• Responds to performance issues identified by alerts and reported incidents related to CI/CD platforms
• Builds tools which reduce errors and improve our overall customer experiences
• Assists in troubleshooting of production issues and ensure pipeline and infrastructure produces clear documentation and metrics which enables Root Cause Analysis
• Develops and tests – Ansible Playbooks, Terraform Scripts, Packer Scripts and establish immutable infrastructure such that patches are an artifact of the past
• Works with Enterprise Architecture, Information Security (InfoSec), Software Delivery, and Quality Assurance to enable the organization to move to the cloud using complete automation
• Ensures compliance with risk management programs, rules and regulations, and cybersecurity practices; identifies opportunities for and supports process improvements; applies disciplined change management practices

AI Identity Security Engineer

• Lead application security design across web, mobile, and AWS cloud-native systems.
• Administer and optimize SAST/SCA tools (e.g., Checkmarx, Snyk).
• Triaging vulnerabilities, and guiding remediation aligned to OWASP Top Ten.
• Secure cloud environments (especially AWS Lambda, API Gateway, IAM, S3).
• Support runtime and application-layer protections.
• Partner with release and change management to ensure secure, stable production deployments.
• Provide security input in architecture and project planning.

Application Security Consultant

• serves as a cybersecurity Subject Matter Expert (SME) with regards to Assessment and Authorization (A&A) of information systems and all associated cybersecurity policies and procedures.
• performs a DOD cybersecurity process while either authorizing an information system or serving as a SME for an information system undergoing authorization.
• possesses an understanding of how the security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization’s IT infrastructure such as DLA’s.
• determines the applicable severity value for an identified vulnerability (e.g., non-compliant security control).
• determines the possible ramifications on the system’s current or future authorization.
• briefs senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process.

Cybersecurity Assessment & Authorization SME

• Overseeing the delivery of innovative IT services and security solutions
• Collaborating with cross-functional teams to design and deploy secure IT services solutions
• Providing technical expertise and guidance on security architecture, incident response, and threat mitigation
• Conducting risk assessments and security evaluations to identify vulnerabilities and recommend mitigation strategies
• Supporting budgeting, planning, and lifecycle management processes for classified IT solutions
• Developing and maintaining security policies, procedures, and standards

Senior Classified Security Information Technology Solutions Specialist

• Overseeing the delivery of innovative IT services and security solutions
• Collaborating with cross-functional teams to design and deploy secure IT services solutions
• Conducting risk assessments and security evaluations to identify vulnerabilities
• Developing and maintaining security policies, procedures, and standards

• Own and drive delivery of technology programs supporting:
• ○ Mergers & Acquisitions (technology integration)
• ○ Physical security systems and building-related technologies
• ○ Enterprise architecture and cross-domain technology initiatives
• ○ Infrastructure as a service (IaaS) technology delivery
• Lead execution across initiatives that span infrastructure, applications, security, and physical security technologies.
• Actively manage program health—identifying risks, resolving dependencies, and keeping projects on track.
• Lead and develop a team of 7–10 direct reports.
• Provide hands-on coaching on structured problem solving, execution rigor, and stakeholder management.
• Build a strong delivery culture focused on accountability, collaboration, and continuous improvement.
• Support team growth through mentorship, feedback, and performance management.
• Apply deep understanding of the technical domain to actively help solve delivery challenges—not just escalate them.
• Break down complex, ambiguous problems into actionable execution plans.
• Partner with technical leads and architects to develop pragmatic solutions that move programs forward.
• Ensure clarity of scope, milestones, ownership, and execution plans across initiatives.
• Engage senior technology leaders and business stakeholders across M&A, security, infrastructure, and enterprise platforms.
• Translate technical complexity into clear, outcome-focused communication.
• Align priorities across teams with competing demands, dependencies, and timelines.

Technology Program Management Manager – Technology Office, Physical Security

• Act as a key partner across security, infrastructure, and application teams
• Clearly communicate identity and access strategies, risks, and solutions
• Design, implement, and manage solutions using Microsoft Entra ID
• Configure and maintain identity security controls aligned with best practices
• Support enterprise identity governance and compliance initiatives
• Build and manage Conditional Access policies with strong focus on risk-based access policies, adaptive authentication controls, and session controls
• Implement and manage Multi-Factor Authentication (MFA) strategies
• Enforce MFA across applications and users
• Troubleshoot authentication and MFA-related issues
• Drive adoption of passwordless authentication
• Configure and manage Azure AD / Entra ID PIM
• Maintain clear understanding and governance across Entra ID roles and Azure RBAC roles
• Implement Administrative Units (AUs) for scoped delegation

Security Engineer jobs in Alabama

See all jobs on JobTailor

Product Security Test & Evaluation Manager

Workday Security Developer

Cybersecurity Engineer II

Director of Information Security

Senior IT/Security Engineer – AI-native

Security Engineer

Cybersecurity Engineer III

Senior Industrial Security Specialist

Senior Industrial Security Training Manager

Senior Security Assistance – International

Security Intelligence Specialist

Senior Industrial, Program Security Trainer

AI Identity Security Engineer – SailPoint

AI Identity Security Engineer

Application Security Consultant

Cybersecurity Assessment & Authorization SME

Senior Classified Security Information Technology Solutions Specialist

Senior Classified Security Information Technology Solutions Specialist

Technology Program Management Manager – Technology Office, Physical Security

Security Specialist – IAM, Entra ID