Security Engineer

• Manage and lead various initiatives to assist Solutions Consultants (SCs), Domain Consultants (SCs), and Enablement team using AI and Public Cloud Service Providers (CSPs)
• Spearhead the architectural design of sophisticated, multi-product lab environments
• Act as a key consultant to Sales Engineering and Learning & Enablement organizations
• Build foundational, "golden-image" proof-of-concepts for new product integrations
• Define modular "building block" solutions for lab users
• Collaborate closely with lab engineers to scale designs for hundreds of concurrent users
• Drive AI solutions and integrate AI/ML technologies into architectural designs
• Identify opportunities to create AI solutions, promoting an

Network Security Lab Architect

• Support security design and installation projects throughout North America
• Manage all aspects of the project from initial engagement through project completion, including multiple projects and scopes of work
• Identify project schedule, scope parameters, and oversee security design and implementation per client design requirements and standards
• Manage early project initiation activities and develop project security scope, schedule, critical deliverables, and requirements
• Manage scheduling, status, and tracking of critical project tasks, issues, and deliverables
• Prepare, issue, and manage Request for Proposal (RFP) documents for security systems installation scope
• Evaluate RFP responses and prepare evaluation reports, to include evaluation criteria, scoring, and recommendation details
• Perform security site evaluations of potential client properties and review proposed design concepts
• Collaborate with client owner and user group stakeholders to define use cases and verify functional requirements, and produce a security functional specification for the project

Physical Security Project Manager

• Leads and manages programs supporting secure software delivery capabilities
• Develops and maintains schedules, deliverables, and engagement plans
• Coordinates activities across engineering, Product Security, and supporting organizations
• Provides user support and engagement for internal customers
• Identifies and drives process improvements to enhance efficiency, scalability, and service delivery
• Communicates program status, risks, and issues
• Supports adoption of security-related capabilities such as code signing, certificates, keys, and related controls

Senior Engineering Program Manager, Product Security

• Work closely and effectively with senior management to keep them well informed of upcoming commitments and responsibilities
• Manage a very active calendar of appointments.
• Arrange sophisticated and detailed travel plans, itineraries, and agendas; compile documents for travel-related meetings.
• Compose and prepare draft documents and correspondence that are sometimes confidential.
• Successfully complete tasks and critical aspects of deliverables such as assisting in strategic planning, workforce estimates, and other annual planning activities.
• Establish relationships with team members.
• Help plan, run, and execute large events. Manage and facilitate meetings.
• Demonstrate proactive approaches to problem-solving with strong decision-making capability.

Executive Assistant

• Collaborating with leading tech professionals to strengthen and protect economic, financial and payments systems
• Operating the DevSecOps program according to standards and policies
• Partnership with peers in FRB Kansas City and other Reserve Banks across the System
• Building relationships with development teams
• Identifying, implementing, and supporting security across the organization
• Assessing maturity of development teams’ DevSecOps practices against an existing framework
• Implementing secure continuous integration and continuous delivery (CI/CD) pipelines

Information Security Specialist

• Oversee the Attack Surface Management program from the technical perspective
• Regularly identify and catalog all assets, including new and existing ones
• Coordinate with various stakeholders to ensure a comprehensive understanding of the attack surface
• Serve as a subject matter expert for application development and infrastructure teams
• Analyze organization's cyber defense policies/configurations
• Participate in the creation of effective and efficient processes to drive successful reduction of risk
• Research and advocate for new security solutions and technologies
• Establish communications related to threats, vulnerabilities, processes and security risks across a Global landscape

Associate Web Application Security Specialist, Attack Surface Management

• Find new and creative ways to break technology through either Red Team or Purple Team operations
• Plan, scope, and implement large scale covert operations that have sophisticated goals and significant impact
• Develop new adversary tools, techniques, or methodologies
• Threat Hunting opportunities to partner with the teams Threat Hunters, using our special adversarial talents to discover and eradicate threats
• Engagement in all phases of Red Team security operations
• Work within the Red Team to perform physical exploitation, network exploitation and social engineering assessments against authorized targets
• Perform network reconnaissance and open-source intelligence gathering
• Configure and safely utilize attack tools, tactics, and procedures against authorized targets
• Develop scripts, tools, or methodologies to enhance red teaming capabilities
• Effectively communicate findings and strategy to client stakeholders including technical staff, executive leadership, and legal counsel
• Provide risk-appropriate and pragmatic recommendations to correct identified flaws, vulnerabilities and misconfigurations

Senior Penetration Testing – Red Team

• Implement industry leading security solutions by understanding client requirements through your savvy business and technical consulting skills
• Validate clients' existing architecture, identify gaps and assist the various business and technical teams with gathering their business use cases
• Provide a technical implementation plan and assist with the configuration of cloud discovery
• Work as a subject matter expert to deliver projects from initiation through to successful implementation
• Help the team better define protocols and maturing standard operating procedures in response to cyber threats
• Create and manage security Identity and Access Management workflows including but not limited to Microsoft Entra and CyberArk Privileged Access Management
• Deploy, troubleshoot, and maintain vulnerability management workflows using toolsets including but not limited to Tenable, Rapid7, and Defender Vulnerability Management
• Coordinate major security incident situations and provide internal communications via email in a timely manner
• Documenting remediation recommendations and use case recommendations to detect future risks
• Provide general support using Defender Vulnerability Management (Defender for Cloud) to identify, review and measure operational performance for clients
• Provide security guidance to team member across the organization how to best identify, contain and remediate security related incidents
• Understand complex issues across on premise, public and private cloud solutions and articulate the impact to higher tier team members
• Provide feedback and update client escalation procedures and documentation
• Diagnose, research, classify, resolve, and assign technical and procedural issues as outlined in support documentation
• Understand the business impact of issues that a customer reports; have a genuine concern for their situation and act appropriately

Security Consultant

• Designs and executes critical aspects of the Enterprise Security Risk Management function.
• Develops, recommends and implements controls and cost-effective approaches to minimize the organization's risks effects.
• Partners with the business and technology teams to promote understanding of the business landscape in order to facilitate security risk-based discussions.
• Collaborates with executive and technical leadership to embed a security-focused mindset in all areas.
• Analyzes organizational security risks, interactions, develop and publish security risk handbook, and procedures for implementation ensuring alignment with appropriate standards and frameworks.
• Manage and execute risk identification, assessment and quantification, aggregation reporting, and monitoring processes.
• Interprets internal or external business issues and recommends solutions/best practices.
• Solves complex problems; takes a broad perspective to identify solutions.
• Analyzes external market dynamics and other data sources to assess trends and develop actionable insights and recommendations to management, via understanding of the business model and the information available for analysis.
• Assist in coordinating the security risk within the context of the security risk model.
• Assesses and communicates information regarding business risks with functions across the organization.
• Builds and maintains relationships with business partners, including understanding their specific risk landscape.
• Uses professional knowledge, skills, and experience to influence and guide, monitor, and credibly challenge business areas as they manage risk and make risk decisions.
• Coordinates the security risk program efforts including risk modeling, comprehensive periodic risk assessments, and regulatory reporting standards and expectations.
• Develops presentations appropriate for senior level audiences and external regulators.
• May mentor and give work direction to less experienced colleagues.

Principal Security Risk Analyst

• Gather and handle forensic evidence in accordance with Rules of Evidence and perform forensic analysis of digital information
• Monitor, detect and report indicators of misuse, abuse, data spillage, insider threat, and security violations
• Identify acceptable use policy infractions
• Review event logs to determine events of interest
• Monitor for fraud, waste and abuse, including inappropriate content, Illegal Activity, Productivity Loss and Non-Compliant Activity, as well as Identity Leakage (PII)
• Prepare case evidence and incident reports
• Work on special projects as assigned

Cyber Security, Insider Threat Analyst

• Define and execute the cybersecurity vision, strategy, and multi-year roadmap
• Provide leadership for cybersecurity operations including EDR, vulnerability management, incident response, and threat detection
• Drive standardization and optimization of the security tool stack across managed and augmented clients
• Formalize and maintain governance, risk, and compliance frameworks including SOC2 alignment
• Lead enterprise incident response strategy, ensuring readiness and effective remediation
• Act as executive escalation point for major security incidents and client-impacting events
• Own budgeting, forecasting, and resource planning for the security function
• Lead risk assessments and ensure mitigation strategies are implemented
• Build, mentor, and develop a high-performing cybersecurity team
• Foster a culture of security awareness and continuous improvement
• Collaborate cross-functionally with Engineering, Consulting, Product, and Project teams
• Represent cybersecurity in executive forums and client discussions in partnership with the CISO and executive leadership

Director of Cybersecurity

• Architect, design, and implement secure infrastructure solutions across Windows, RHEL Linux, virtualization, storage, and networking technologies in classified environments
• Develop cybersecurity and infrastructure architectures from concept through deployment, integrating security controls, systems hardening, and DISA STIG compliance
• Conduct architecture assessments to identify risks, gaps, and mitigation strategies; ensure designs support mission needs, scalability, resilience, and operational readiness
• Lead RMF and ATO-aligned systems engineering activities, including compliant infrastructure design, control implementation, documentation, and remediation
• Design secure network segmentation, access control strategies, virtualization architectures, and system integration approaches
• Implement centralized logging, monitoring, auditing, and SIEM solutions to enhance visibility and security posture
• Support resilience initiatives through backup, recovery, failover, and continuity architecture for mission-critical systems
• Develop technical architecture documentation, infrastructure standards, and repeatable deployment processes
• Collaborate closely with engineering, cybersecurity, ISSO, and mission teams to drive secure, integrated infrastructure solutions and modernization initiatives
• Provide technical leadership during architecture reviews, incident investigations, and complex implementation efforts

Senior Advisory Security Architect

• Lead all facility-related responsibilities and security operations across the organization
• Oversee facility management, leasing, and compliance
• Manage personnel clearances, secure facilities, and physical security programs
• Ensure compliance with all government security requirements and regulations
• Conduct regular security assessments and implement improvements

Facility Security Officer

• Provides subject matter expertise when applying security concepts
• Leverages technical knowledge and industry experience to design, build, and maintain technology solutions
• Responsible for deliverables related to project timelines
• Responsible for working with architecture to take high level architectural designs and determine the specifics around implementation details (ex: sizing) integration details, onboarding and operationalization
• Evaluates patches, updates, and ongoing maintenance
• Determines impacts to existing solutions when new standards are implemented
• Utilizes change control and other governance processes to ensure alignment of solutions
• Develops detailed implementation, configuration, design, and engineering documentation
• Build and implement solutions
• Works with operational partners to enable transition and day-to-day supportability
• Provides engineering support to existing technology in a production environment and collaborating with other groups as required
• Seeks opportunities to grow a broad knowledge base to complement specific subject matter expertise

Security Engineer – Cryptographic Engineer, Post Quantum Cryptography

• Develop, configure, and manage security policies to ensure the protection of data
• Compliance with regulations and prevention of security threats
• Work closely with security teams, network engineers, and application administrators
• Implement and enforce policies that align with the organization’s security strategy and business goals
• Implements and supports security solutions and technologies to protect data/assets from unauthorized access
• Provides project leadership, security oversight, and risk management on security projects
• Sets security design guidelines, frameworks, and models
• Works to identify new security issues and risks and develops mitigation plans
• Helps identify and document security objectives
• Participates in projects that develop new intellectual property
• Trains/mentors members of the team
• Builds relationships and trust across the organization
• Evaluates and recommends new and emerging security products and technologies
• Supports acquisition and vendor risk assessment due diligence
• Leads the building, deployment, and maintenance of security tools utilized by the insider threat program
• Proactively seeks solutions to mitigate risk and clearly communicate risks to the appropriate stakeholders
• Monitor the performance and availability of the Netskope platform using tools like Prometheus, Grafana
• Develop and maintain incident response processes for handling system outages, performance degradation, or security incidents
• Participate in on-call rotations to provide 24/7 support for critical issues
• Conduct root cause analysis (RCA) post-incident to identify systemic issues and implement corrective measures to prevent recurrence
• Design and implement strategies for platform scalability to support growth in users, traffic, and security demands
• Work with security teams to ensure the Netskope platform is secure by regularly performing vulnerability assessments
• Develop and maintain disaster recovery (DR) and business continuity plans to ensure the Netskope platform can recover from catastrophic failures

Senior Info Security Engineer – Netskope ZTNA Platform

Senior Red Operation, Team Penetration Testing Analyst

• Support the dedicated ESS (Enterprise Security Solutions) team within Johnson Controls Security Solutions and other Business Units as required.
• Provide remote diagnostic and technical reporting/support for customers, Johnson Controls technicians and authorized contractors.
• Maintain customer Security and possibly network equipment to meet compliance standards for their industry.
• Objectively and proactively work on Remote Projects and Service Request.
• Completes programming assignments within assigned hours, in a manner that reduces emergency calls and results in achieving the goal of zero call backs.
• Assists with the start-up of new equipment or system installation and adjusts as needed to ensure the system is operational.
• Performs work assignments in a safe manner and within specified cost limits.
• Keeps up-to-date of changes and new developments in products and technology.
• Services CCTV and Access control security systems.
• Create detailed documentation/incident reporting of troubleshooting and diagnosis of customer equipment.
• Deliver routine and on time reporting to the customer regarding their system, status, health and compliance status.
• When needed pre-stage system before deployment and configure to system specifications
• Perform other custom support functions as stated in customer contracts as it relates to compliance or their security equipment.

Security Operations Technician 3

• Monitor and triage alerts across various security tools
• Validate alert severity, business impact, affected assets, containment status, and escalation requirements.
• Coordinate security events from initial triage through containment, documentation, closure, and post-incident follow-up.
• Support daily dashboard review, security ticket queues, alert quality checks, and operational reporting.
• Develop, tune, and maintain detection logic in security tools.
• Reduce false positives and alert noise by reviewing recurring detections.
• Assist with incident response for endpoint, identity, cloud, email, and suspicious activity events.
• Support security operations across various Microsoft security tools.
• Create and maintain security runbooks and knowledge base articles.

• Lead the secure design, development, and assessment of GenAI and Agentic systems across the organization
• Mature Gen AI and Agentic policy and playbooks
• Mature Risk based approach to appropriately designate level of review for each GenAI and agentic use case
• Partner with Architecture, Automation, Data Science, Lines of Business and other Security teams to ensure a seamless process for new use case review and enablement
• Help team align their Gen AI and Agentic use cases to platforms with Gen AI and Agentic controls to compliment the use case they are building
• Ensure required Gen AI and Agentic security requirements are built into new solutions up front as they are being designed
• Help direct teams to existing Gen AI and agentic security controls currently available
• Review and coach teams regarding their plans to meet required Gen AI and Security Controls within their project
• Assist in validating Gen AI and Agentic security controls have been effectively implemented prior to production release

Senior Software Security Specialist – AI Security

• Work on Defensive Cyber Operations for Space (DCO-S) providing expertise and support in network security engineering and/or integration of security products
• Ensure the appropriate operational security posture is maintained for assigned IT
• Implement and enforce all AF cybersecurity policies, procedures, and countermeasures
• Complete and maintain required cybersecurity certification IAW AFMAN 17-1303
• Ensure all users have requisite security clearances and need-to-know and complete annual cybersecurity training
• Maintain all authorized user access control documentation IAW the applicable AF Records Information Management System
• Leverage ACAS, Nessus, and Tenable solutions to support continuous monitoring, vulnerability management, and RMF compliance
• Ensure software, hardware, and firmware comply with appropriate security configuration guidelines
• Coordinate changes or modifications with the system-level ISSM, SCA, and/or Wing Cybersecurity office
• Initiate protective or corrective measures when a security incident or vulnerability is discovered
• Report security incidents or vulnerabilities to the system-level ISSM and wing cybersecurity office according to AFI 17-203
• Initiate exceptions, deviations, or waivers to cybersecurity requirement.

See all jobs on JobTailor