Security Engineer

• Maintain and update the team's testing schedule, tracking completion status, due dates, and resource assignments across all active engagements
• Build and maintain Excel-based dashboards and reporting tools to track testing completion, deficiency counts, aging issues, and remediation progress
• Perform data analysis on control testing results to identify trends, recurring failures, and areas requiring deeper investigation
• Identify repetitive manual tasks within the testing cycle that are candidates for automation or AI-assisted processing
• Support the build-out of automated reporting templates and testing workflows using available tools (Excel macros, Power Query, Python)
• Collaborate cross-functionally across risk, compliance, and business functions to gather context and ensure testing priorities are aligned with enterprise risk appetite
• Escalate issues, blockers, and opportunities to the Senior Manager and senior leadership

Senior Analyst, Control Testing Reporting and Operations – Global Security

• Champion the digitization of control testing workflows, replacing manual processes with automated, scalable solutions
• Lead the integration of AI and machine learning tools to enhance anomaly detection, sample selection, and continuous monitoring capabilities
• Partner with Technology and Data teams to build and maintain automated control testing pipelines and dashboards
• Develop and deliver executive-level presentations (PowerPoint) summarizing control testing results, risk themes, and remediation status for senior leadership and Board committees
• Build and maintain advanced Excel-based reporting models and data analysis tools to support control testing metrics and KRIs
• Prepare management reports, issue logs, and trend analyses to support governance forums and audit committees
• Monitor and report on key risk indicators (KRIs) and control effectiveness metrics on a periodic basis
• Manage Statements of Work (SOWs) for third-party engagements including scope definition, deliverable tracking, and vendor performance oversight
• Oversee Project Approval Requests (PARs) and ensure proper financial authorization and governance compliance
• Administer internal chargeback processes, ensuring accurate cost allocation and transparency across business lines
• Monitor program budgets, forecasts, and actuals; flag variances and recommend corrective actions to senior leadership

Director, Control Testing Reporting and Operations – Global Security

• Maintain and update the team's testing schedule, tracking completion status, due dates, and resource assignments across all active engagements
• Build and maintain Excel-based dashboards and reporting tools to track testing completion, deficiency counts, aging issues, and remediation progress
• Perform data analysis on control testing results to identify trends, recurring failures, and areas requiring deeper investigation
• Identify repetitive manual tasks within the testing cycle that are candidates for automation or AI-assisted processing
• Support the build-out of automated reporting templates and testing workflows using available tools (Excel macros, Power Query, Python, or RPA)
• Prepare and maintain testing trackers, issue logs, and status reports to support team-wide visibility and accountability
• Ensure all workpapers, evidence files, and supporting documentation are stored and organized per quality standards
• Develop team capability in translating data into compelling narratives; coach team members on how to articulate findings in both technical and business terms for different audiences
• Model cross-functional collaboration, represent and escalate issues and opportunities to senior leadership

Senior Manager, Control Testing Reporting and Operations – Global Security

• Provide technology direction on the architecture and design of security-related technology initiatives
• Serve as a trusted advisor to security specialists, leveraging expertise to ensure high judgement decisions are made on complex and ambiguous security problems across all security domains, either by acting as decision-maker or by helping other specialists with the decision-making process
• Act as a force multiplier: Leverage your extensive expertise to enhance the effectiveness and efficiency of the entire engineering team
• Foster a culture of innovation and excellence by mentoring colleagues, enhancing mechanisms, introducing best practices, and driving architectural improvements that enable the team to implement strong security risk mitigations
• Promote cross-team collaboration and drive technical direction across teams, functions, and products, ensuring decisions support overall business, technology and security strategy
• Collaborate closely with senior leadership and principals to develop and implement strategic initiatives that contribute to a durable and resilient security control environment
• Continually identify opportunities for improvement and act as an agent of change by championing innovative ideas and initiatives to improve mechanisms
• Monitor and assess the impact of industry trends, emerging technologies, and changes in threat actor tactics and techniques; recommend strategies to evolve security countermeasures in response
• Serve as an active member of the tech community and promote technology within and outside the organization as a thought leader and contributing to advance IFC’s interests.

Principal, Security Engineering

• Design, build, and maintain secure CI/CD pipelines with security gates that catch issues before they reach production.
• Systematically, consistently and automatically capture the risk exposure of Chainguard's products.
• Implement and enforce software supply chain security controls: signed artifacts, SBOMs, provenance attestation (SLSA, Sigstore / Cosign).
• Proactively identify emerging customer security needs, and build solutions to meet these.
• Lead security architecture reviews and threat models for Kubernetes-based workloads running on GCP and AWS.
• Harden container images, Kubernetes cluster configurations, and cloud IAM postures — minimising attack surface across our product stack.
• Define and drive adoption of baseline security standards: pod security standards, network policies, workload identity, secrets management.
• Evaluate and operationalise CNAPP / CSPM tooling to maintain continuous visibility into cloud-native risk.

Senior Product Security Engineer

• Continuously monitor Claude and ChatGPT product roadmaps, release notes, and vendor communications to anticipate platform changes before they land
• Translate upcoming features into proactive configuration, policy, and enablement decisions not reactive scrambles
• Maintain active relationships with Anthropic and OpenAI account teams; flag ToS updates, data processing agreement changes, and acceptable use policy shifts before they become surprises
• Provide expert-level administration of AI console environments across both platforms
• Manage Claude and ChatGPT organizational settings files using Git, version-controlled, reviewed, and deployed like the infrastructure they are
• Own API key lifecycle management and secrets hygiene for all AI integrations
• Manage SSO/SCIM provisioning for AI platforms; ensure access is tight, auditable, and clean
• Develop token tracking and financial dashboards so leadership actually knows what AI costs us by team, by use case, by month
• Build anomaly detection on AI spend; if something spikes, you catch it before accounting does
• Produce regular usage trend reports and ROI framing for leadership that goes beyond "we use AI a lot"
• Build and maintain internal MCP servers that extend AI capabilities into our workflows securely
• Be the in-house subject matter expert on agentic AI builds such as architecture, risk, failure modes, and the parts that go sideways in ways no one anticipated
• Write code. Python and/or TypeScript. AI-augmented is fine (encouraged, even), but you need to own what ships
• Identify and mitigate prompt injection risks in internal AI-powered tools
• Ensure no sensitive or regulated data (PII, PCI, PHI) flows into AI prompts. Architect the guardrails, not just the policy
• Maintain awareness of AI-specific incident response options; when something goes wrong with an AI integration, you're in the room
• Serve as IT Engineering's primary liaison to the AI Adoption Committee bringing operational grounding to adoption decisions
• Participate actively in the AI Working Group; connect platform capabilities to how the company actually uses them
• Partner closely with the Governance &amp; Trust team, who leads AI policy and governance. Your job is to be their technical counterpart by implementing, informing, and flagging issues, not owning the policy itself

Senior Security Engineer – AI Platform

• Pre-sales - assist in qualifying sales leads from a technical standpoint.
• Sales calls - be the main technical resource on sales calls and answer/ educate the customer on issues ranging from features, specifications and functionality to integration.
• Conversant with networking applications and solutions.
• Experience with virtualization, NFV and emerging SDN technologies
• Post-sales - be the lead technical contact for identified accounts for technical issues and will work closely with the technical support team and engineering to answer, elevate and resolve customers technical issues.
• Provide assistance to identified customers with post-sales training.
• Regularly interface, provides presales support and assist in training Fortinet Channel partners in your region.
• Presenting at events, seminars, customer and partner meetings
• Flexible to travel. Travel will primarily be within the SEs designated region, but may also include occasional travel to other regions.

Presales Security Expert – Mid-Market

• Extensive experience in pre-sales designing and proposing secure platform solutions
• Hands on experience in architectural administration, proving designs in simulated and production environments.
• Building technical security solutions, proving their viability and providing technological justifications
• Ability to design complete network, cloud and security solutions providing strong technical Roadmaps
• Knowledge in the following architectural technologies: Secure Networking, Secure Wireless, Private/Public Cloud, SD WAN, SASE, Zero trust, AI, Automation, Sec Ops, Operational Technology, Forensics & IR response
• Strong presentation and white boarding skills
• Strong communication and written skills, including responding to technical RFPs.
• Proactively identify technical opportunities within the field to increase pipeline growth and team prosperity
• Leading proof of concept valuations, technical workshops and events
• Become a passionate industry leader that can articulate a compelling vision
• Model a high standard of performance, professionalism, and integrity in all interactions
• Facilitate effective communication and teamwork across departments or teams

Presales Security Expert – Public Sector

• Collaborate with assigned Sales Representative to develop secure platform solutions
• Be the main technical resource on sales calls and educate the customer
• Strategizing about future services or capabilities customers may require within your account base
• Support your customer through issue resolution by collaborating with TAC and other technical resources
• Build technical business relationships with key customers and partners
• Presenting at events, seminars, customer and partner meetings

Presales Security Expert – Named Enterprise

• Development, maintenance, advocacy, and compliance for security architecture and DevSecOps framework and policy instruments such as directives, frameworks, policies, standards, and guidelines.
• Security architecture subject matter expertise in the one or more following domains: Secure application development processes and tools.
• Secure business architecture. Secure data architecture. Secure application architecture. Secure technology architecture.
• Consultation, evaluation, and delivery of digital service products throughout the solution development life cycle (SDLC) for conformance to IMT cybersecurity policy instruments including formulation of options and recommendations.
• Conduct security review, consult, and advise on secure coding, secrets management, on-premises, Amazon Web Services (AWS), Azure, Google Cloud Platform (GCP), and third-party hosted solutions with verbal and written report.
• Provide security advice to business and technical stakeholders, including senior executives.
• Participate in projects as an information security subject matter expert with a focus on security architecture and security capabilities within a DevSecOps framework to protect digital service development and operations.
• Participate in the identification of information security requirements, as well as the development of strategies and solutions to meet these requirements across the organization.
• Facilitate or perform identification, assessment, and treatment of information and technology security threats and risks.

Information Security Officer 3 – Security Architect, Application and Product Security

• Triage and coordinate remediation of vulnerabilities across SAST, SCA, DAST, CSPM, external reconnaissance, security advisories, and bug reports
• Own the SAST, DAST, and SCA technical stack end-to-end including configuration, execution, triage, and reporting across Solink's technology stack
• Lead Solink's shift-left security program by embedding security guardrails, automated checks, and developer tooling into IDEs and CI/CD pipelines to identify issues early and drive adoption across teams
• Leverage AI-powered security tools and modern techniques for vulnerability discovery and triage, combining them with practical experience and traditional security tooling.
• Develop scalable practices, automation workflows, and documentation that raise the security bar across the organization
• Participate in architecture reviews and threat modeling exercises, providing security and compliance guidance across product-engineering and corporate systems.
• Conduct source code and whitebox security assessments, providing actionable recommendations to improve security posture
• Support incident response activities, including investigation, containment, recovery, and post-incident reviews.
• Contribute to threat hunting and red team exercises across AWS, Kubernetes, and other cloud environments.
• Support compliance initiatives, evidence collection, audit readiness and the ongoing automation of compliance processes.
• Help teams adopt AI tools securely by contributing to AI threat modeling, implementing appropriate controls, and addressing emerging AI-related risks.
• Partner with IT Services and corporate stakeholders on endpoint security, EDR, and broader security operations initiatives.
• Execute penetration tests for web, mobile, and API applications.

Senior Security Engineer

• Coordinate the deployment, configuration, testing, monitoring, and ongoing maintenance of security technologies, including SIEM, EDR, DLP, WAF, CASB, Secure Web Gateway, URL filtering, email security, and application/vulnerability scanning platforms.
• Lead small-to-medium-sized security initiatives from requirements gathering through design, testing, pilot execution, and implementation.
• Support proof-of-concept evaluations and product assessments to ensure proposed solutions align with security strategy, standards, and industry best practices.
• Act as a service or tool owner by identifying enhancements, maintaining operational runbooks, and recommending improvements for tools under your responsibility.
• Develop and maintain procedures, workflows, architecture diagrams, and operational playbooks that support security monitoring and engineering activities.
• Investigate and triage security events using technologies such as SIEM, EDR, DLP, WAF, CASB, Secure Web Gateway, and email security solutions.
• Detect, respond to, and support investigations of security incidents while documenting root-cause analysis and lessons learned.
• Follow established incident response procedures and playbooks, escalating critical findings appropriately and efficiently.
• Apply analytical and adversarial thinking to identify, protect, detect, respond to, and recover from common cyber threats and attack vectors.
• Perform and support secure baseline reviews, infrastructure scanning, endpoint scanning, application vulnerability assessments, penetration testing validation, and AI red-teaming exercises.
• Review vulnerability findings for accuracy and completeness while partnering with stakeholders to prioritize remediation efforts based on risk.
• Escalate critical vulnerabilities, zero-day threats, and high-priority risks while supporting rapid mitigation efforts.
• Contribute to continuous improvements in vulnerability management workflows through automation and the integration of security testing into CI/CD pipelines.
• Conduct security risk assessments for internal initiatives, product enhancements, vendors, and productivity tools.
• Perform STRIDE-based threat modeling for internal projects and AI-enabled solutions, producing actionable recommendations and clear risk reports.
• Apply a risk-based approach to evaluating Agentic AI technologies and AI-related security risks.
• Conduct vendor risk assessments within OneTrust and support broader third-party risk management activities.
• Identify opportunities to strengthen controls, improve processes, and enhance security outcomes across teams.
• Stay informed on emerging threats, technologies, and industry best practices, sharing relevant insights with colleagues and stakeholders.

Security Engineer – Contract

• Analyze the application security of web components, APIs, and microservices;
• Provide security and mitigation recommendations;
• Support developers in implementing secure development best practices;
• Participate in application risk analysis and in prioritizing remediation measures;
• Recommend appropriate security controls for Azure environments;
• Contribute to authentication, authorization, and data protection mechanisms;
• Support logging, detection, and incident monitoring/tracking;
• Produce advisories, reports, risk registers, or mitigation plans.

Application Security Expert

• Validate business cases and advise stakeholders on their development
• Define, document, and communicate guiding principles for the design, implementation, deployment, and support of selected solutions
• Follow up with division heads of the Digital Security and Cyberdefense Directorate (DSNC) when required, according to established processes
• Plan, control, and support activities related to information security
• Develop strategies and guidance for the evolution of information technologies
• Conduct knowledge transfer to the teams of the Digital Security and Cyberdefense Directorate (DSNC) regarding work performed
• Identify governance needs and directions for information security based on business requirements
• Participate in designing and/or validating governance and information security solutions, ensuring their consistency and integration with reference standards
• Participate in orientation studies, opportunity assessments, and preliminary analyses
• Define security orientations for systems taking into account technological directions and business needs, and ensure their implementation
• Perform risk analyses
• Coordinate work
• Support the project team regarding governance, security, and strategic directions

Senior Information Security Governance Advisors

• Integrate and maintain secure decryption and authentication software on partners' hardware platforms.
• Integrate the software into partners' software development kits and ensure it operates on external embedded hardware platforms.
• Define and maintain application programming interfaces as well as interfaces related to secure key management, authentication, and data access.
• Support integration across trust boundaries, including the internal backend system, the provisioning pipeline, and partners' receivers and simulators.
• Collaborate with internal teams and external partners to enable secure deployment, debugging, and validation on external hardware.
• Work with product and engineering teams to ensure a scalable, robust, production-ready security architecture.
• Participate in manufacturing and provisioning workflows for the secure commissioning of devices.

Software Developer, Embedded Software Developer – Security, Platform Integration

• Design, build, and own the vulnerability engineering pipeline
• Raise the team's bar for building with AI by experimenting openly
• Partner deeply with dev teams across Jane to make security feel like a service
• Coordinate complex, multi-team vulnerability findings
• Contribute to the team's on-call rotation

Senior Security Engineer, AppSec Automation

• Perform a leadership role in the planning and design of enterprise security architecture, and coordinate with system owners, control providers, and other stakeholders on the allocation of security controls as system-specific, hybrid, or common controls.
• Perform threat modeling and risk assessments based on legacy or new environments using organizational guidelines or established industry frameworks.
• Identify technical and procedural controls to mitigate newly identified threats and risks.
• Participate in the various technology and architecture governance forums to ensure adherence to standards.
• Be part of the Architecture team to review and implement security architecture best practices across the organization.
• Own and maintain the Security Architecture Roadmap items under the overall C1 Technology Roadmap.
• Work with external vendors on technology evaluation, selection, and implementation.
• Recommend adjustments to Information Security and Enterprise Architecture policies and standards as necessary.

Security Architect – Hybrid

• Implement and maintain Data Loss Prevention (DLP) solutions
• Configure and deploy DLP policies, rules, and alerts
• Collaborate with multi-functional teams including IT, Legal, and Compliance
• Conduct data discovery and classification exercises
• Integrate DLP solutions with existing security infrastructure
• Stay updated on trends in DLP technologies and regulations
• Develop DLP configurations, procedures, and troubleshooting guides

Senior DLP Security Engineer

• Lead the design and development of robust security frameworks, standards, and best practices for global systems, data, and networks
• Translate business, technology, and threat drivers into practical security roadmaps
• Conduct financial evaluations of security technologies
• Draft project plans for security service and technology deployments
• Collaborate with various teams across Manulife's business and IT units
• Conduct comprehensive risk assessments to identify vulnerabilities and define necessary controls
• Continuously evaluate the security of new and emerging technologies
• Act as a security subject matter expert

Lead Cybersecurity Architect

• Lead Serve’s security strategy across corporate security, platform security, product and robot security.
• Own the security roadmap and drive progress on initiatives.
• Partner closely with IT, Engineering, Product, and Platform teams.
• Advance GRC maturity, including security policies and monitoring.
• Build and mature incident response capabilities.
• Develop and maintain security practices that support operations.
• Lead, mentor, and grow a high-performing security organization.
• Translate complex security risks into clear business decisions and actionable guidance.
• Establish metrics, dashboards, and reporting cadences.
• Evaluate and improve security tooling and operational processes.
• Support executive leadership and board-level reporting.

See all jobs on JobTailor