Security Engineer

• The Cybersecurity Risk and Compliance Manager is a key role in ASSA ABLOYs strategy to accelerate the organization’s cyber resilience.
• The newly created position will report to ASSA ABLOY America’s Division CISO and will be accountable for the divisional Cyber Risk and Compliance program.
• The role will build strong alliances with all functions and sub-groups across the division to help in the process of identifying, analyzing, quantifying, and treating risks.
• In addition, this role will be responsible to define, measure, and report on Information security compliance within the operation of an ISMS, providing relevant KPIs and KRIs.
• Establish divisional cyber risk governance
• Build divisional risk management culture and methodologies
• Maintain divisional cyber risk register
• Establish and execute risk assessment and management with business functions
• Build and maintain Cyber Risk and Compliance Reporting dashboards and reports for stakeholder groups
• Definition, monitoring and reporting of Key Risk indicators and relevant Key performance indicators
• Create, modify and implement divisional policies and directives based on Information security standards ISO27001 and NIST
• Develop deep coalitions with business partners to anchor Information Security into Policy framework
• Collaborate with corporate counsels and HR departments to monitor enforcement of standards and regulations
• Review policies periodically to identify hidden risks or non-conformity issues
• Develop and oversee control systems to prevent or deal with violations of legal guidelines and internal policies
• Evaluate the efficiency of controls and improve them continuously.

Cybersecurity Risk and Compliance Manager

• Supervise and direct on-duty FuelCell Energy security personnel
• Ensure adherence to post orders, policies, and standard operating procedures
• Serve as primary point of contact for all security matters during the shift
• Respond to, assess, and manage incidents, emergencies, and alarms
• Prepare detailed incident and activity reports
• Oversee access control, badging, and visitor management processes
• Monitor CCTV, alarm systems, and patrol operations
• Conduct routine inspections of posts, personnel, and equipment

Security Supervisor

• Monitor and control access through badge systems and visitor management processes
• Conduct routine interior and exterior patrols of buildings and grounds
• Monitor CCTV, alarm systems, and security equipment
• Respond to alarms and incidents and notify the Shift Supervisor
• Document incidents and activities in accurate reports
• Assist with emergency response situations, including evacuations and medical incidents
• Enforce company policies, procedures, and post orders
• Maintain a visible security presence to deter unauthorized activity
• Provide customer service to employees and visitors
• Report hazards, risks, and vulnerabilities

Security Officer – 2nd Shift

• Owning our compliance program end to end: driving our annual SOC 2 Type 2 audits from evidence collection through auditor walkthroughs, and running Vanta as our governance home base year-round.
• Completing security questionnaires, addendums, and AI risk assessments for the IT and security teams at our hospital clients — and making sure they understand we're doing the right thing. (Health systems ask great, hard questions. You'll have great answers.)
• Running real BCDR tests and treating them like live incidents to find the gaps before the gaps find us.
• Coordinating annual pen tests and driving remediation of findings within SLA.
• Managing security across our stack: AWS, Heroku, Cloudflare, Google Workspace, GitHub, and our communication tools.
• Administering our laptop fleet for a fully remote team — imaging, shipping, MDM enrollment, inventory, and end-of-life — so every machine is encrypted, managed, and remotely wipeable.
• Running access reviews and enforcing least privilege: pruning admin lists, enforcing SSO and 2FA, and tuning password policies.
• Ensuring new employees get access to everything they need on day one, and departing ones are locked out the same day — partnering with HR and Finance on a tight onboarding/offboarding loop through Rippling and Google.
• Evaluating and securing AI tooling — from how our team uses Claude and MCP servers to partnering with engineering on customer questions about AI risk, bias testing, and model governance.
• Doing vendor management and procurement reviews, and finding savings while you're at it.
• Staying on top of the rapidly evolving AI threat landscape and adapting our defenses and team training as fast as the attackers adapt theirs.
• Playing professor and educating our team on everything security.
• Advising leadership on security matters during project planning, and working with our full stack engineers to ship improvements you identify.
• Being the savior in the event of a security incident — leading response, analysis, and the write-up afterward.
• Supporting co-workers when they manage to put their computers in a bad place. (They should enjoy talking to you, and you to them!)

Senior IT/Security Engineer – AI-native

• Lead and manage a team of ~8–10 engineers responsible for authentication, API security, and web security platform delivery
• Drive team productivity, accountability, and output optimization
• Establish clear ownership, priorities, and expectations across the team
• Build and enforce structured intake processes for work requests from digital/application teams
• Transition the team from ad hoc tracking (email/spreadsheets) to formal workflow management (e.g., ServiceNow)
• Define SLAs, prioritization models, and delivery timelines
• Implement tracking, reporting, dashboards, and performance metrics
• Ensure consistent visibility into work status, throughput, and delivery outcomes
• Partner closely with Digital, Application Development, and Business teams
• Translate business requests into structured, actionable work for the team
• Act as a liaison between technical teams and business stakeholders
• Ensure clear communication of delivery timelines, risks, and outcomes
• Oversee delivery and configuration across key platforms including: IBM Verify Identity Access (formerly WebSEAL / ISVA), IBM DataPower (API management layer), Authentication and access management solutions
• Ensure secure, scalable support of customer-facing applications
• Guide the team in implementing changes, enhancements, and configurations
• Drive continuous improvement in how work is executed and delivered
• Introduce governance, quality control, and accountability frameworks
• Improve consistency in documentation, intake, and delivery practices

IT Security Manager – Authentication & Authorization

• Help define and evolve the vision for NinjaOne’s endpoint management and security capabilities.
• Contribute to and own key parts of the endpoint management and security roadmap.
• Drive product direction for features to identify security gaps, and remediate or protect against them.
• Work closely with engineering, design, support, and other stakeholders to bring new capabilities from concept to delivery.
• Engage with customers, MSPs, and internal teams to understand how endpoint management and security features are used in practice.
• Write clear product requirements, define workflows and edge cases, and ensure features are delivered to a high standard.
• Ensure capabilities work cohesively across NinjaOne and enable other product areas to build on top of them effectively.

Product Manager – Endpoint Management, Security

• Responsible for oversight of executive protection teams and activities within a specific geographic region and the health, safety, and physical security of all attendees at Bank of America sponsored or hosted events
• Develop and implement comprehensive security plans and protocols
• Direction of activities to ensure safety and security of the senior management team and bank events
• Delivery of threat analysis across various platforms with cross-functional teams
• Create a safe and secure business environment for employees, clients, and stakeholders
• Manage ongoing incidents, medical conditions, and/or event-related investigations
• Develop strong partnerships with key business stakeholders, and local and federal law enforcement agencies

Executive Protection, Events Security Manager II – Major Events

• Delivers routine work independently, in accordance with established procedures and guidelines, in a timely manner and meets deadlines appropriately.
• Applies expanded knowledge obtained from the role in increasingly more complex situations and continues to acquire more knowledge to apply in role.
• Reviews and interprets disability insurance policies with specific attention to provisions related to other income and/or offsets.
• Contacts and educates claimants eligible for SSDI benefits.
• Explains both the differences and coordination between the disability policy/benefits and the SSA's benefits/adjudication.
• Provides initial guidance and continues on-going communication with claimants regarding their SS responsibilities and follow-up items until a final determination is made.
• Accurately posts SS offsets in applicable system(s).
• Develops and maintains working relationships with SSDI vendors and/or claimant attorneys.
• Works closely with internal benefits/claims teams; regularly providing information and updates regarding Social Security eligibility and determinations.
• Takes initiative to investigate issues and identify root causes; recommends solutions to improve operational effectiveness.
• Maintains and updates knowledge of SSDI guidelines and departmental policies & procedures.

Claims Examiner II – Social Security

• Under general supervision, this position supports the organization's threat management efforts by assessing risk, conducting investigations, and informing mitigation actions to protect employees, operations, and facilities.
• Provide consultative support to Human Resources and business partners in high-risk situations (e.g., threats of harm, employee relations matters, protective orders), offering structured, risk-based guidance.
• Identify and direct the implementation of process improvements that significantly improve quality across the team, department and business unit for their assigned area(s) of responsibility.
• Contribute to the development and refinement of security policies and practices; provide input and recommendations based on case insights and emerging trends.
• Deliver training on threat recognition, reporting, and de-escalation techniques, tailor content for different audiences and delivery channels.
• Coordinate with law enforcement, legal counsel, Human Resources, and other stakeholders during investigations and response activities; escalate complex or enterprise-impacting situations to the AVP.
• Assess threats and vulnerabilities by analyzing behavioral indicators, patterns in data, and known risk factors; develop risk-informed recommendations to strengthen security measures.
• Document investigations thoroughly and accurately in the case management system, ensuring consistency, quality, and audit readiness.
• Serve as a subject matter expert in threat assessment and investigations, handling complex cases and recommending mitigation actions within established frameworks.

Senior Workplace Safety & Security Investigator

• Set product security architecture direction for assigned portfolios
• Own and evolve the Application Security Blueprint
• Influence roadmaps and operating models for secure engineering
• Manage security architecture governance and threat modeling
• Define API security architectures and service-to-service security controls
• Mentor engineers and architects to elevate secure design skills

AVP, Product Security Architect

• Support the maintenance of a Security Engineering control library, including mapping controls to enterprise risks and applicable frameworks (e.g., NIST/FFIEC/PCI as applicable).
• Draft, update, and publish control documentation and supporting materials, including control narratives, standards, procedures, and job aids.
• Coordinate evidence expectations by documenting required artifacts, partnering with engineering teams to locate /collect evidence, and tracking retention needs.
• Support integration of control requirements into Security Engineering initiatives by helping manage plans, milestones, dependencies, and deliverables.
• Establish and maintain program execution artifacts such as meeting notes, action logs, RAID logs, status reporting, and milestone tracking.
• Partner with GRC and Risk stakeholders to clarify control intent, support control health discussions, and ensure alignment of documentation and deliverables.
• Assist with periodic control reviews by coordinating inputs, tracking issues/findings, and supporting remediation action tracking.
• Identify opportunities to improve consistency and efficiency in control documentation and evidence collection (e.g., templates, automation ideas, tooling enhancements) and raise recommendations to program leads.
• Prepare materials for stakeholder updates and assist in communicating progress, risks, and blockers to appropriate audiences.
• Perform other duties and/or special projects as assigned.

AVP, Security Engineering Controls Program Analyst

• Lead application security design across web, mobile, and AWS cloud-native systems.
• Administer and optimize SAST/SCA tools (e.g., Checkmarx, Snyk).
• Triaging vulnerabilities, and guiding remediation aligned to OWASP Top Ten.
• Secure cloud environments (especially AWS Lambda, API Gateway, IAM, S3).
• Support runtime and application-layer protections.
• Partner with release and change management to ensure secure, stable production deployments.
• Provide security input in architecture and project planning.

Application Security Consultant

• Provide engineering support for our Zero Trust infrastructure across a large enterprise
• Work with developers, application owners, and security to design, support and implement Zero Trust solutions
• Develop automation work streams using APIs and various programming tools
• Off hours work required for deployments and on-call rotation in support of night shift teams
• Report to Lead Director, Security Access services

Senior Security Engineer – Zero Trust

• Lead and mentor the application security team and a group of senior cloud security engineers
• Define and execute the organization’s application and cloud security strategy
• Partner with engineering, DevOps, and architecture teams to embed security into all stages of development
• Establish security KPIs, metrics, and reporting for executive leadership
• Drive secure SDLC practices including threat modeling, code reviews, and security testing
• Oversee implementation of SAST, DAST, SCA, and API security tools
• Develop and maintain secure coding standards and developer training programs
• Lead vulnerability management and remediation efforts for applications
• Design and enforce security controls across cloud platforms (AWS, Azure, GCP)
• Ensure secure configuration and governance of cloud environments (IAM, networking, storage, containers)
• Implement and manage CSPM, CWPP, and CIEM solutions
• Oversee container and Kubernetes security practices
• Align security practices with frameworks such as NIST, ISO 27001, SOC 2, and CIS benchmarks
• Conduct risk assessments and support audits and regulatory requirements
• Support incident response related to application and cloud threats
• Drive root cause analysis and continuous improvement efforts

Senior Manager, Cybersecurity – Application and Cloud Security

• responsible for the strategy, governance, and execution of enterprise security operations
• protecting more than 19,000 colleagues across domestic and international locations.
• ensures the safety of colleagues, clients, facilities, and assets while enabling business operations in complex and evolving threat environments.
• oversee Physical Security, Executive Protection, Protective Intelligence, Travel Risk Management, Guard Force Management, and Global Security Operations.
• partner closely with business leadership, cybersecurity, legal, risk, human resources, employee relations, business resiliency management, and regional leadership teams.
• act as primary liaison with local/state/federal law enforcement and international equivalents as needed.
• design and govern the enterprise security strategy aligned with The Hartford’s risk priorities, policies, standards, and applicable regulations.
• serve as the senior advisor to executive leadership on security risk and geopolitical developments; represent security at the executive leadership level, providing strategic risk assessments and briefings.
• lead and develop a high-performing team (corporate security managers, analysts, investigators, and/or vendor resources).
• create a culture of preparedness and accountability through communications, education and training for employees and leaders (workplace violence awareness, active threat, suspicious activity reporting, travel safety).
• produce regular reporting on security KPIs, incident trends, risk assessments, and program maturity.
• drive continuous improvement through audits, tabletop exercises, lessons learned, technology enhancements and external perspectives on best practices and emerging trends.
• oversee security program protecting offices, employees, and operations.
• lead global security operations centers (GSOC) and direct vendor and guard force management; ensure performance metrics, SLAs, and compliance.
• own strategy for security technology platforms (access control, video management, analytics, mass notification, duress systems).
• implement enterprise-wide physical security standards and technologies including access control, video surveillance, and security systems.
• partner with Real Estate/Facilities on safe workplace design, site risk assessments, and security requirements for new sites and renovations.
• design and manage executive protection strategy and program (threat assessments, protective intelligence, logistics, secure transportation, and event security).

Head of Corporate Security

• Assess the current design and codebase to identify areas in need of improvement
• Work with members of project teams to resolve security issues
• Conduct threat modeling for new and existing applications
• Perform security testing such as static code analysis, pentesting, and dynamic application security testing
• Apply a cybersecurity background to perform code analysis when resolving false positives and provide remediation recommendations
• Establish application security requirements based on company standards and industry best practices
• Test and evaluate security tools, and products

IT Application Security Architect

• independently execute cybersecurity audit testing, including performing detailed test procedures, evaluating control design and operating effectiveness, and documenting results in accordance with audit standards and methodology
• own assigned audit areas end-to-end, including walkthroughs, evidence collection, validation, and workpaper documentation, ensuring accuracy, completeness, and audit defensibility
• perform testing procedures to assess key cybersecurity domains, including cloud security (Azure & GCP), network security, data protection, application security, and third-party/vendor risk management
• identify control gaps, document exceptions, and contribute to the development of audit findings and recommendations
• collaborate with Audit Managers and team members to support audit execution, validate control effectiveness, and ensure timely completion of deliverables
• leverage data analytics and emerging technologies (e.g., AI tools) to enhance audit testing procedures, coverage, and efficiency
• develop clear, concise, and well-supported workpapers and documentation
• effectively communicate audit results, issues, and risks to audit team members and management
• stay current on cybersecurity risks, trends, tools, and techniques and apply insights to audit testing and risk identification

Senior Analyst, IT Corporate Audit – Cybersecurity

• The Vice President, Enterprise Infrastructure & Security serves as the Bank’s senior technology leader responsible for the architecture, engineering, and operational integrity of enterprise infrastructure and security platforms.
• Ensure stability, resilience, security, and regulatory compliance of the Bank’s core technology environment supporting critical business operations, customer channels, and regulatory obligations.
• Provide executive leadership across enterprise infrastructure domains including network, server, cloud, identity, endpoint, and security technologies.
• Ensure infrastructure platforms are designed, implemented, and operated in a secure, resilient, and highly available manner consistent with regulatory expectations.

VP, Enterprise Infrastructure & Security

• Oversee implementations and consultative engagements for the Proofpoint Data Security products
• Develop new services, implement best practices, and assist in customer escalations as needed
• Align client business priorities with data protection strategies
• Assess client operations and business processes, gathering requirements, and recommending optimized Proofpoint solutions
• Provide strategic program design solutions to help clients identify, protect, monitor, and manage sensitive data and users
• Collaborate with Professional Services, Support, Engineering, and Product teams to resolve customer concerns and escalations
• Partner with the sales organization to ensure customer needs are met and satisfaction remains high
• Present updates to management, highlighting risks, challenges, and proposed solutions

Senior Professional Services Consultant – Data Security

• Provide engineering support for Email Security infrastructure across a large enterprise
• Work with developers, application owners, end-users and security to provide support towards Secure Email solutions
• Troubleshoot and resolve mail flow related issues in a complex environment
• Off hours work is required for deployments and on-call rotation in support of major incidents

Security Engineer jobs in Connecticut

See all jobs on JobTailor