Security Engineer

• Design, build, and maintain secure CI/CD pipelines with security gates that catch issues before they reach production.
• Systematically, consistently and automatically capture the risk exposure of Chainguard's products.
• Implement and enforce software supply chain security controls: signed artifacts, SBOMs, provenance attestation (SLSA, Sigstore / Cosign).
• Proactively identify emerging customer security needs, and build solutions to meet these.
• Lead security architecture reviews and threat models for Kubernetes-based workloads running on GCP and AWS.
• Harden container images, Kubernetes cluster configurations, and cloud IAM postures — minimising attack surface across our product stack.
• Define and drive adoption of baseline security standards: pod security standards, network policies, workload identity, secrets management.
• Evaluate and operationalise CNAPP / CSPM tooling to maintain continuous visibility into cloud-native risk.

Senior Product Security Engineer

• Continuously monitor Claude and ChatGPT product roadmaps, release notes, and vendor communications to anticipate platform changes before they land
• Translate upcoming features into proactive configuration, policy, and enablement decisions not reactive scrambles
• Maintain active relationships with Anthropic and OpenAI account teams; flag ToS updates, data processing agreement changes, and acceptable use policy shifts before they become surprises
• Provide expert-level administration of AI console environments across both platforms
• Manage Claude and ChatGPT organizational settings files using Git, version-controlled, reviewed, and deployed like the infrastructure they are
• Own API key lifecycle management and secrets hygiene for all AI integrations
• Manage SSO/SCIM provisioning for AI platforms; ensure access is tight, auditable, and clean
• Develop token tracking and financial dashboards so leadership actually knows what AI costs us by team, by use case, by month
• Build anomaly detection on AI spend; if something spikes, you catch it before accounting does
• Produce regular usage trend reports and ROI framing for leadership that goes beyond "we use AI a lot"
• Build and maintain internal MCP servers that extend AI capabilities into our workflows securely
• Be the in-house subject matter expert on agentic AI builds such as architecture, risk, failure modes, and the parts that go sideways in ways no one anticipated
• Write code. Python and/or TypeScript. AI-augmented is fine (encouraged, even), but you need to own what ships
• Identify and mitigate prompt injection risks in internal AI-powered tools
• Ensure no sensitive or regulated data (PII, PCI, PHI) flows into AI prompts. Architect the guardrails, not just the policy
• Maintain awareness of AI-specific incident response options; when something goes wrong with an AI integration, you're in the room
• Serve as IT Engineering's primary liaison to the AI Adoption Committee bringing operational grounding to adoption decisions
• Participate actively in the AI Working Group; connect platform capabilities to how the company actually uses them
• Partner closely with the Governance &amp; Trust team, who leads AI policy and governance. Your job is to be their technical counterpart by implementing, informing, and flagging issues, not owning the policy itself

Senior Security Engineer – AI Platform

• Pre-sales - assist in qualifying sales leads from a technical standpoint.
• Sales calls - be the main technical resource on sales calls and answer/ educate the customer on issues ranging from features, specifications and functionality to integration.
• Conversant with networking applications and solutions.
• Experience with virtualization, NFV and emerging SDN technologies
• Post-sales - be the lead technical contact for identified accounts for technical issues and will work closely with the technical support team and engineering to answer, elevate and resolve customers technical issues.
• Provide assistance to identified customers with post-sales training.
• Regularly interface, provides presales support and assist in training Fortinet Channel partners in your region.
• Presenting at events, seminars, customer and partner meetings
• Flexible to travel. Travel will primarily be within the SEs designated region, but may also include occasional travel to other regions.

Presales Security Expert – Mid-Market

• Extensive experience in pre-sales designing and proposing secure platform solutions
• Hands on experience in architectural administration, proving designs in simulated and production environments.
• Building technical security solutions, proving their viability and providing technological justifications
• Ability to design complete network, cloud and security solutions providing strong technical Roadmaps
• Knowledge in the following architectural technologies: Secure Networking, Secure Wireless, Private/Public Cloud, SD WAN, SASE, Zero trust, AI, Automation, Sec Ops, Operational Technology, Forensics & IR response
• Strong presentation and white boarding skills
• Strong communication and written skills, including responding to technical RFPs.
• Proactively identify technical opportunities within the field to increase pipeline growth and team prosperity
• Leading proof of concept valuations, technical workshops and events
• Become a passionate industry leader that can articulate a compelling vision
• Model a high standard of performance, professionalism, and integrity in all interactions
• Facilitate effective communication and teamwork across departments or teams

Presales Security Expert – Public Sector

• Collaborate with assigned Sales Representative to develop secure platform solutions
• Be the main technical resource on sales calls and educate the customer
• Strategizing about future services or capabilities customers may require within your account base
• Support your customer through issue resolution by collaborating with TAC and other technical resources
• Build technical business relationships with key customers and partners
• Presenting at events, seminars, customer and partner meetings

Presales Security Expert – Named Enterprise

• Development, maintenance, advocacy, and compliance for security architecture and DevSecOps framework and policy instruments such as directives, frameworks, policies, standards, and guidelines.
• Security architecture subject matter expertise in the one or more following domains: Secure application development processes and tools.
• Secure business architecture. Secure data architecture. Secure application architecture. Secure technology architecture.
• Consultation, evaluation, and delivery of digital service products throughout the solution development life cycle (SDLC) for conformance to IMT cybersecurity policy instruments including formulation of options and recommendations.
• Conduct security review, consult, and advise on secure coding, secrets management, on-premises, Amazon Web Services (AWS), Azure, Google Cloud Platform (GCP), and third-party hosted solutions with verbal and written report.
• Provide security advice to business and technical stakeholders, including senior executives.
• Participate in projects as an information security subject matter expert with a focus on security architecture and security capabilities within a DevSecOps framework to protect digital service development and operations.
• Participate in the identification of information security requirements, as well as the development of strategies and solutions to meet these requirements across the organization.
• Facilitate or perform identification, assessment, and treatment of information and technology security threats and risks.

Information Security Officer 3 – Security Architect, Application and Product Security

• Triage and coordinate remediation of vulnerabilities across SAST, SCA, DAST, CSPM, external reconnaissance, security advisories, and bug reports
• Own the SAST, DAST, and SCA technical stack end-to-end including configuration, execution, triage, and reporting across Solink's technology stack
• Lead Solink's shift-left security program by embedding security guardrails, automated checks, and developer tooling into IDEs and CI/CD pipelines to identify issues early and drive adoption across teams
• Leverage AI-powered security tools and modern techniques for vulnerability discovery and triage, combining them with practical experience and traditional security tooling.
• Develop scalable practices, automation workflows, and documentation that raise the security bar across the organization
• Participate in architecture reviews and threat modeling exercises, providing security and compliance guidance across product-engineering and corporate systems.
• Conduct source code and whitebox security assessments, providing actionable recommendations to improve security posture
• Support incident response activities, including investigation, containment, recovery, and post-incident reviews.
• Contribute to threat hunting and red team exercises across AWS, Kubernetes, and other cloud environments.
• Support compliance initiatives, evidence collection, audit readiness and the ongoing automation of compliance processes.
• Help teams adopt AI tools securely by contributing to AI threat modeling, implementing appropriate controls, and addressing emerging AI-related risks.
• Partner with IT Services and corporate stakeholders on endpoint security, EDR, and broader security operations initiatives.
• Execute penetration tests for web, mobile, and API applications.

Senior Security Engineer

• Coordinate the deployment, configuration, testing, monitoring, and ongoing maintenance of security technologies, including SIEM, EDR, DLP, WAF, CASB, Secure Web Gateway, URL filtering, email security, and application/vulnerability scanning platforms.
• Lead small-to-medium-sized security initiatives from requirements gathering through design, testing, pilot execution, and implementation.
• Support proof-of-concept evaluations and product assessments to ensure proposed solutions align with security strategy, standards, and industry best practices.
• Act as a service or tool owner by identifying enhancements, maintaining operational runbooks, and recommending improvements for tools under your responsibility.
• Develop and maintain procedures, workflows, architecture diagrams, and operational playbooks that support security monitoring and engineering activities.
• Investigate and triage security events using technologies such as SIEM, EDR, DLP, WAF, CASB, Secure Web Gateway, and email security solutions.
• Detect, respond to, and support investigations of security incidents while documenting root-cause analysis and lessons learned.
• Follow established incident response procedures and playbooks, escalating critical findings appropriately and efficiently.
• Apply analytical and adversarial thinking to identify, protect, detect, respond to, and recover from common cyber threats and attack vectors.
• Perform and support secure baseline reviews, infrastructure scanning, endpoint scanning, application vulnerability assessments, penetration testing validation, and AI red-teaming exercises.
• Review vulnerability findings for accuracy and completeness while partnering with stakeholders to prioritize remediation efforts based on risk.
• Escalate critical vulnerabilities, zero-day threats, and high-priority risks while supporting rapid mitigation efforts.
• Contribute to continuous improvements in vulnerability management workflows through automation and the integration of security testing into CI/CD pipelines.
• Conduct security risk assessments for internal initiatives, product enhancements, vendors, and productivity tools.
• Perform STRIDE-based threat modeling for internal projects and AI-enabled solutions, producing actionable recommendations and clear risk reports.
• Apply a risk-based approach to evaluating Agentic AI technologies and AI-related security risks.
• Conduct vendor risk assessments within OneTrust and support broader third-party risk management activities.
• Identify opportunities to strengthen controls, improve processes, and enhance security outcomes across teams.
• Stay informed on emerging threats, technologies, and industry best practices, sharing relevant insights with colleagues and stakeholders.

Security Engineer – Contract

• Analyze the application security of web components, APIs, and microservices;
• Provide security and mitigation recommendations;
• Support developers in implementing secure development best practices;
• Participate in application risk analysis and in prioritizing remediation measures;
• Recommend appropriate security controls for Azure environments;
• Contribute to authentication, authorization, and data protection mechanisms;
• Support logging, detection, and incident monitoring/tracking;
• Produce advisories, reports, risk registers, or mitigation plans.

Application Security Expert

• Validate business cases and advise stakeholders on their development
• Define, document, and communicate guiding principles for the design, implementation, deployment, and support of selected solutions
• Follow up with division heads of the Digital Security and Cyberdefense Directorate (DSNC) when required, according to established processes
• Plan, control, and support activities related to information security
• Develop strategies and guidance for the evolution of information technologies
• Conduct knowledge transfer to the teams of the Digital Security and Cyberdefense Directorate (DSNC) regarding work performed
• Identify governance needs and directions for information security based on business requirements
• Participate in designing and/or validating governance and information security solutions, ensuring their consistency and integration with reference standards
• Participate in orientation studies, opportunity assessments, and preliminary analyses
• Define security orientations for systems taking into account technological directions and business needs, and ensure their implementation
• Perform risk analyses
• Coordinate work
• Support the project team regarding governance, security, and strategic directions

Senior Information Security Governance Advisors

• Integrate and maintain secure decryption and authentication software on partners' hardware platforms.
• Integrate the software into partners' software development kits and ensure it operates on external embedded hardware platforms.
• Define and maintain application programming interfaces as well as interfaces related to secure key management, authentication, and data access.
• Support integration across trust boundaries, including the internal backend system, the provisioning pipeline, and partners' receivers and simulators.
• Collaborate with internal teams and external partners to enable secure deployment, debugging, and validation on external hardware.
• Work with product and engineering teams to ensure a scalable, robust, production-ready security architecture.
• Participate in manufacturing and provisioning workflows for the secure commissioning of devices.

Software Developer, Embedded Software Developer – Security, Platform Integration

• Design, build, and own the vulnerability engineering pipeline
• Raise the team's bar for building with AI by experimenting openly
• Partner deeply with dev teams across Jane to make security feel like a service
• Coordinate complex, multi-team vulnerability findings
• Contribute to the team's on-call rotation

Senior Security Engineer, AppSec Automation

• Perform a leadership role in the planning and design of enterprise security architecture, and coordinate with system owners, control providers, and other stakeholders on the allocation of security controls as system-specific, hybrid, or common controls.
• Perform threat modeling and risk assessments based on legacy or new environments using organizational guidelines or established industry frameworks.
• Identify technical and procedural controls to mitigate newly identified threats and risks.
• Participate in the various technology and architecture governance forums to ensure adherence to standards.
• Be part of the Architecture team to review and implement security architecture best practices across the organization.
• Own and maintain the Security Architecture Roadmap items under the overall C1 Technology Roadmap.
• Work with external vendors on technology evaluation, selection, and implementation.
• Recommend adjustments to Information Security and Enterprise Architecture policies and standards as necessary.

Security Architect – Hybrid

• Implement and maintain Data Loss Prevention (DLP) solutions
• Configure and deploy DLP policies, rules, and alerts
• Collaborate with multi-functional teams including IT, Legal, and Compliance
• Conduct data discovery and classification exercises
• Integrate DLP solutions with existing security infrastructure
• Stay updated on trends in DLP technologies and regulations
• Develop DLP configurations, procedures, and troubleshooting guides

Senior DLP Security Engineer

• Lead the design and development of robust security frameworks, standards, and best practices for global systems, data, and networks
• Translate business, technology, and threat drivers into practical security roadmaps
• Conduct financial evaluations of security technologies
• Draft project plans for security service and technology deployments
• Collaborate with various teams across Manulife's business and IT units
• Conduct comprehensive risk assessments to identify vulnerabilities and define necessary controls
• Continuously evaluate the security of new and emerging technologies
• Act as a security subject matter expert

Lead Cybersecurity Architect

• Lead Serve’s security strategy across corporate security, platform security, product and robot security.
• Own the security roadmap and drive progress on initiatives.
• Partner closely with IT, Engineering, Product, and Platform teams.
• Advance GRC maturity, including security policies and monitoring.
• Build and mature incident response capabilities.
• Develop and maintain security practices that support operations.
• Lead, mentor, and grow a high-performing security organization.
• Translate complex security risks into clear business decisions and actionable guidance.
• Establish metrics, dashboards, and reporting cadences.
• Evaluate and improve security tooling and operational processes.
• Support executive leadership and board-level reporting.

VP of Security

• Own the end-to-end remediation process from validated finding through fix verification. Define and enforce SLAs by severity, track progress across engineering teams, escalate aging findings, and drive blockers to resolution.
• Organize third-party penetration tests: scoping, scheduling, vendor coordination, finding intake, and tracking through remediation. Own the operational side of the bug bounty program, ensuring researcher submissions are acknowledged, triaged, validated, and resolved within committed timelines.
• Build and maintain security kanban boards that give the entire organization visibility into vulnerability status: internal findings, pen test results, bug bounty submissions, and security exceptions. These boards are the single source of truth. Engineering knows what's on their plate, security leadership knows the posture, and Customer Trust has what they need for customer conversations.
• Use Claude and LLM platforms to automate finding intake and routing, generate status reports, flag at-risk SLAs, draft stakeholder communications, and surface patterns that indicate systemic issues. Focus your time on judgment and coordination by letting AI handle the repetitive tracking.
• Own the security exception process: intake, risk documentation, approval routing, time-bound tracking, and expiration enforcement. When an engineering team requests an exception, you ensure it's documented with clear risk context, reviewed by the right people, and actively tracked to expiration.
• Own Product Security metrics: mean time to remediate, SLA compliance, finding aging, exception counts, recurrence rates, coverage by product. Build reporting that serves the VP (portfolio posture), engineering leaders (their team's queue), and Customer Trust (defensible data for customer security reviews).
• Coordinate with Engineering and Product Management on remediation prioritization and release planning. Work with Customer Support and Customer Trust on vulnerability status for customer inquiries and security questionnaires. Partner with Cyber Defense on findings that cross product and infrastructure boundaries. Keep Security Architects and Product Security Engineers aligned on remediation status.

Technical Program Manager, Product Security

• Process requests for temporary assignments
• Submit BEM requests
• Arrange appointments for medical assessments
• Request files/records

Occupational Health and Safety Technician

• Define, communicate and execute product roadmaps aligned with CIRA’s strategic priorities for cybersecurity products and services
• Lead early-stage product discovery, platform evolution and decision-making for new cybersecurity capabilities, integrations and services
• Define product requirements and success metrics informed by customer feedback, threat trends, market analysis and operational insights
• Identify opportunities to leverage DNS-layer visibility, telemetry and threat intelligence to improve detection quality, automation and customer outcomes
• Work cross-functionally with engineering, security operations and partners to deliver secure, resilient and accessible product experiences
• Balance long-term platform strategy with near-term delivery, helping teams make informed trade-offs in a fast-evolving threat landscape
• Collaborate with channel partners, managed service providers and internal stakeholders to support product adoption and market expansion
• Support go-to-market activities including product positioning, customer engagement and sales enablement for CIRA Cybersecurity Services
• Support the sales cycle from customer engagement through to successful product implementation
• Act as a subject matter expert, representing CIRA through customer engagements, webinars, conferences, trade shows and other industry events

Senior Product Manager – Cybersecurity

• Work with business partners and application teams across RBC Enterprise and Brewin Dolphin, to review their changes and ensure they are aligning to IAM Controls through the Athena process
• Review and validate architecture documents against IAM standards and established patterns
• Cross collaborate on identity management initiatives across multiple platforms (Azure, Okta, Entra ID)
• Investigate and implement endpoint encryption and API security best practices
• Contribute to policy management and compliance verification processes
• Provide consultative services to ensure application teams are following RBC Standards
• Provide support with tasks and ad-hoc requests as required
• Function as point of escalation and resolution for incidents and project related issues
• Provide guidance, coaching, and mentoring within the team to drive optimal performance

See all jobs on JobTailor