Security Engineer

• Advise on and assess the security posture of AI/ML systems, including LLMs, GenAI pipelines, and model serving infrastructure
• Lead threat modeling exercises specific to AI workloads
• Advise internal teams on securely integrating SaaS AI services and APIs
• Evaluate and recommend controls for data ingestion pipelines, RAG architectures, and vector databases
• Serve as a trusted security advisor bridging business stakeholders, AI/ML engineers, IT operations, and information security teams
• Continuously track emerging AI security research, adversarial techniques, regulatory developments, and vendor security advisories
• Produce and maintain security architecture documentation, risk assessments, control frameworks, and guidelines tailored to the organization's AI environment
• Contribute to the development of a long-term AI security strategy
• Develop and deliver training and awareness content for technical and non-technical stakeholders on AI-specific risks

AI Security Engineer

• Build and run detection: write, tune, and respond to Python-based rules to catch anomalous activity and improve signal-to-noise.
• Partner with our Infrastructure team to secure GCP + cloud networking and improve Kubernetes security.
• Strengthen application security and help make pragmatic upgrades (e.g., Next.js, dependencies).
• Improve security through code + automation (guardrails, checks, remediation workflows).
• Own vulnerability management end-to-end: identify, prioritize, and drive fixes to closure in coordination with codeowners.
• Help build a strong security culture through clear guidance, training, and partnership with engineers.
• Develop technical and policy frameworks to guide ambitious and safe AI adoption company-wide.
• Collaborate closely with engineering on secure product design and technical implementation.

Founding Security Engineer

• Gather and handle forensic evidence in accordance with Rules of Evidence and perform forensic analysis of digital information
• Monitor, detect and report indicators of misuse, abuse, data spillage, insider threat, and security violations
• Identify acceptable use policy infractions
• Review event logs to determine events of interest
• Monitor for fraud, waste and abuse, including inappropriate content, Illegal Activity, Productivity Loss and Non-Compliant Activity, as well as Identity Leakage (PII)
• Prepare case evidence and incident reports
• Work on special projects as assigned

Cyber Security, Insider Threat Analyst

• Plans, coordinates, and implements the organization’s information security.
• Analyzes requirements and potential solutions for technical and economic feasibility.
• Design optimized firewall and IPS rule structure and ensures standards are maintained.
• Monitors and maintains health of all firewalls/IPS and recommends improvements.
• Develops and maintains documentation of firewall/IPS procedures.
• Develops and maintains complex schematics relating to network security.
• Researches, evaluates, recommends, designs, tests, and implements new network security technologies.
• Displays expert knowledge of current security tools and practices.
• Under general guidance, provides support to network engineers.

Senior Network Security Engineer – Firewall/IPS

• Define and execute the vision for the Protective Services practice in the United States and Canada, ensuring alignment with regional and global strategic objectives.
• Direct the delivery of comprehensive security services, including executive protection, event security, workplace violence response, technical surveillance countermeasures (TSCM), travel risk management programs, operational crisis management (including evacuations and natural disaster response/recovery), and security training programs.
• Oversee budgeting, forecasting, and financial performance for the Protective Services practice, ensuring profitability and cost efficiency.
• Drive growth by building and maintaining a robust pipeline of engagements through client relationships and market expansion.
• Ensure effective and streamlined business operations, including compliance with local, state and national security regulations, human resources statutes, and legal and risk management guidelines.
• Represent the organization as an industry leader by contributing to panels, conferences, and published insights.
• Foster a collaborative culture across practices and geographies to maintain a OneFirm approach while delivering exceptional client services.
• Proven knowledge and hands-on experience with protective intelligence and the integration of protective services with GSOC capabilities, reflecting the evolution of protective services into a more intelligence-driven, proactive discipline.
• Demonstrated ability to design, build, and lead programmatic engagements across operational security including executive protection and protective intelligence ensuring alignment with organizational risk posture and operational objectives.

Director, Operational Security – Protective Services

• The tech writer produces proposal content, technical content for various technical topics and approaches/solutions.
• Develops proposal task response content responsive to solicitation requirements.
• Coordinates through our proposal manager with some direct client interaction.
• Work is by project and hourly.

Cybersecurity Tech Writer – Part Time

• Design, develop, and deploy Policy-Based Access Control (PBAC) policies to enable fine-grained and dynamic authorization
• Work closely with business, security, and application teams to understand business requirements and translate them into scalable, secure authorization policies
• Author, test, deploy, and manage policies in PBAC platforms; experience with PlainID is highly preferred
• Lead policy lifecycle management, including documentation, versioning, change tracking, and governance
• Diagnose and resolve issues with existing authorization policies and implementations, improving stability and performance
• Design and integrate authorization solutions using RESTful APIs
• Work extensively with SQL, including schema design, DDL operations, and data analysis to support IAM use cases
• Deploy, manage, and support IAM workloads on Azure infrastructure, with strong hands-on experience in Azure Kubernetes Service (AKS)
• Demonstrate a solid understanding of networking concepts, including secure API communication, authentication flows, and cloud networking fundamentals
• Implement secure DevOps practices using GitHub, GitHub Actions, and CI/CD pipelines for policy and application deployments
• Develop PowerShell and shell scripts to automate IAM processes, enhance operational efficiency, and reduce manual effort
• Ensure all IAM and authorization solutions align with organizational security standards, compliance requirements, and best practices

Senior Cybersecurity Engineer

• Lead all facility-related responsibilities and security operations across the organization
• Oversee facility management, leasing, and compliance
• Manage personnel clearances, secure facilities, and physical security programs
• Ensure compliance with all government security requirements and regulations
• Conduct regular security assessments and implement improvements

Facility Security Officer

• Define, develop, and continually advance EIP's long-term cybersecurity strategy, ensuring alignment with corporate goals and evolving risk landscapes.
• Develop and present executive and board-level materials, articulating cybersecurity vision, strategic priorities, maturity metrics, and progress against objectives.
• Leverage deep experience in healthcare and/or financial services to inform strategy and ensure compliance with sector-specific regulatory frameworks (e.g., HIPAA, PCI DSS, SOX).
• Lead the strategic integration of AI into cybersecurity operations, ensuring secure adoption, risk mitigation, and compliance.
• Architect and execute initiatives to advance cybersecurity program maturity, talent development, and operational excellence.
• Direct the allocation of resources and investment in cybersecurity capabilities, controls, and technologies based on risk, business value, and strategic impact.
• Drive a security-centric culture through enterprise change management strategies, maximizing adoption of strategic priorities and minimizing resistance across a matrixed organization.
• Provide consultative expertise to EIP department leaders, project teams, and cross-functional partners to ensure strategic alignment and integration of cybersecurity priorities at every stage of project and program lifecycles.

Principal Cybersecurity Strategist

• Manage a focused set of key U.S. Defense and Intelligence Community accounts, developing and executing comprehensive account plans
• Lead Defense and Intelligence customers through their AI adoption journey, from consideration to successful deployment
• Partner with solutions and research engineering to build and execute complex defense customer programs and projects
• Own and manage a National Security Community consumption revenue target
• Oversee revenue forecasting and reporting
• Analyze key Defense and Intelligence account metrics and provide insights to internal and external stakeholders
• Closely monitor the national security landscape (agencies, policies, competitors, partners, etc.) to inform product roadmaps and corporate strategies
• Collaborate cross-functionally with solutions, product engineering, government affairs, marketing, communications, business operations, people operations, finance, product management, and engineering
• Support the recruitment and onboarding of team members focused on defense and intelligence accounts
• Foster the development of our company culture within the National Security Community practice

Government Account Director – National Security

• Provide advisory support and oversight for security-related changes within the GBAM environment
• Collaborate closely with Risk teams, supporting their activities
• Conduct routine liaison and coordination across risk partners and technology groups

Business Information Security Officer – Global Banking and Markets

• Process incoming/outgoing visitor access requests (VARs)
• Create and maintain strong client relationship
• Participate in annual self-inspections
• Maintain personnel security records through ISMS
• Process foreign travel requests
• Process EQIP requests
• Conduct initial and annual refresher training
• Maintain document control
• Investigate and report security violations
• Issue courier cards and maintain accountability
• Maintain/Update access list for all facilities
• Interface and upload documents to SECCEN
• Coordinate SCI Indoctrinations for both military personnel and contractors
• Conduct thorough debriefings for personnel who have had access to SCI
• Ensure individuals understand their ongoing responsibility to protect classified information
• Review and explain non-disclosure agreements
• Address any questions or concerns about handling sensitive information post-access
• Collect any remaining classified materials or access credentials
• Document the completion of the exit process
• Stay up-to-date with the latest SCI handling procedures and regulations
• Ensure all debriefs and exit briefs comply with federal guidelines and USCG policies
• Maintain accurate records of all debriefing and exit briefing sessions
• Clearly explain complex security concepts and requirements
• Answer questions professionally and authoritatively
• Adapt communication style to various levels of personnel

Personnel Security Specialist

• Build and sustain substantive relationships with state and major metropolitan homeland security advisors, emergency management directors, CISOs, election security officials, law enforcement and public safety leaders, and other relevant stakeholders.
• Develop and execute a strategy for policy engagement on state and local risks from advanced AI, including AI-enabled cyber attacks, threats to critical infrastructure, election-related deception or interference, criminal misuse, and biological threats.
• Represent OpenAI in engagements with governors' and mayors' offices, state and municipal agencies, relevant associations, and policy organizations on AI-related security and resilience issues.
• Identify opportunities for beneficial state and local uses of AI, including improved cyber defense, disaster preparedness and response, threat analysis, and resilient public services.
• Draft crisp policy briefs, strategy memos, stakeholder materials, and responses to inquiries on the national security and public safety implications of advanced AI.
• Coordinate closely with OpenAI's State and Local Government team and relevant internal partners, including policy, partnerships, legal, security, preparedness, communications, and public sector teams.
• Track state and local policy developments, operational priorities, and emerging concerns affecting the responsible deployment and governance of AI in homeland security and public safety contexts.

National Security Lead, State and Local Government

• Serve as a senior technical-policy advisor to the National Security Policy team on frontier AI safety and governance issues, including CBRN, cyber, autonomous agents, automated AI R&D, evaluations, risk thresholds, and societal resilience.
• Act as a cross-functional connector between National Security Policy and internal teams including Safety Systems, Preparedness, Alignment, Research, Security, Legal, and Product Policy.
• Drive OpenAI’s engagement with national AI institutes, the Frontier Model Forum, third-party evaluators, research organizations, and other technical governance bodies.
• Develop proactive policy strategies that help governments and other institutions prepare for and react to increasingly capable AI systems, including responsible national security adoption, defensive acceleration, democratic oversight, and societal resilience.
• Represent OpenAI externally with sound judgment, integrity, and credibility in sensitive engagements with policymakers, technical experts, civil society, and national security stakeholders.
• Translate technical realities into clear policy products, including memos, briefs, talking points, government responses, strategy documents, and internal decision materials.
• Build and sustain trusted relationships with AI safety researchers, technical policy experts, think tanks, standards bodies, civil society organizations, and current or former government officials.
• Help OpenAI identify emerging technical-policy opportunities, pressure-test novel ideas, and determine which initiatives are most important to advance the mission.

Senior Technical Advisor, National Security Policy – Global Affairs

• Responsible for the strategic leadership, implementation, monitoring, reporting, and continuous improvement of the PCAOB's information security program.
• Work with PCAOB leadership, divisions, and offices to oversee and mature the operations of a PCAOB-wide information security organization with a common goal in information security and cybersecurity risk.
• Provide leadership and foster collaboration with risk, compliance, and legal teams and business stakeholders to ensure a secure approach to innovation and the application of artificial intelligence (A.I.).
• Provide leadership and promote automation for configuration and deployment in support of Security Operations (SecOps); manage institution-wide information security processes by leading OT information security staff to maintain an effective information security program and implement associated priorities.
• Lead efforts to continually assess, evaluate, and make recommendations to management regarding the adequacy of the IT general and security controls for the PCAOB and technology systems which requires a proactive, hands-on approach.
• Develop, implement, and administer technical cybersecurity standards, as well as the suite of security services and tools, and align to existing PCAOB policies, frameworks, and procedures.
• Design and implement a tactical structure to address Security Operations Center (SOC) structures to better enable outage notifications, security risks/threats, or elevation of incidents that occur within the PCAOB environment.
• Establish annual and long-range cybersecurity and compliance goals, align with data and technology strategies, create and monitor Key Performance Indicators (KPI), and forge a multi-year information security roadmap.
• Proactively identify, assess, and prioritize IT risks to data and systems in coordination with OT portfolio management and OERM including internal/external threats, cyber-crimes, and vendor/third-party risks; partner with OERM or relevant stakeholders on the appropriate courses of action to mitigate or eliminate risk.
• Lead a technical team to proactively work with business units across the PCAOB to implement practices and ensure implementation of technological controls that meet agreed-on policies and standards for information security.
• Lead the development and implementation of effective frameworks, relevant policies, processes, and practices to secure protected and sensitive data in accordance with the PCAOB’s Information Sensitivity Classification ensuring compliance with relevant legislation and legal interpretation.
• Collaborate and coordinate with the CRO to identify, evaluate, and report on OERM organizational-level risk reports to the Board in areas such as legal and regulatory, IT, and cybersecurity risk, while supporting and advancing business objectives.
• Provide leadership supporting a team to streamline and maintain a modern compliance model for cybersecurity safeguards, including access controls, MFA, encryption, asset classification, change management, patch management, network segmentation, firewalls, detection technologies including network and endpoint security, insider threat protection, logging and network monitoring, and vulnerability management.
• Conduct and support regular internal and external security assessments, tabletop exercises, penetration tests, playbook development, and red/purple team exercises to proactively test the effectiveness of security controls including OT Security Program Assessments and corrective action plans.
• Keep abreast of security incidents and act as primary control point during significant information security incidents; convene a Security Incident Response Team (SIRT) as needed, or requested, in addressing and investigating security incidences that arise. This may require availability off hours, as applicable.
• Mature education and awareness programs and advise PCAOB leadership at all levels on security issues, best practices, and vulnerabilities.
• Examine impacts of new technologies on the PCAOB's overall information security; establish processes to review implementation of new technologies to ensure security compliance.
• Perform the full range of supervisory duties, including resource allocation plans, evaluating employee performance; making recommendations for appointment and promotion; hearing and resolving complaints; identifying development and training needs of employees; other related supervisory tasks.

Chief Information Security Officer

• Diagnose, prioritize, and drive security program maturity
• Assess the current state with clear eyes: identify what’s working, what’s underdeveloped, and what needs to be rebuilt
• Build a prioritized, multi-quarter roadmap that sequences risk reduction against business reality — without waiting to be handed a problem statement
• Establish governance, ownership, and metrics that make the portfolio legible and actionable across security leadership, engineering leadership, and executives
• Hold the line on outcomes — not activity or artifacts.
• Translate security requirements into engineering practice
• Make security by design the operating standard: shift-left practices, threat modeling, architecture review, and controls embedded into how teams plan and ship
• Own the intersection of what security requires and what engineering can build — and move both sides toward it, fluently
• Remove the blockers that sit between security intent and engineering execution
• Build the habits and structures that outlast any individual program or initiative
• Own the compliance surface without losing sight of real risk
• Translate HIPAA, financial controls, and governance requirements into resilient programs that reduce actual exposure and scale — not just satisfy milestone audits
• Sequence compliance investments against where the company is going, not just where it’s been
• Build the evidence frameworks, metrics, and operational readiness that hold up under real scrutiny at scale
• Shape the AI security framework before it becomes a crisis
• Synthesize Aledade posture about AI risk, guardrails, and governance as AI becomes embedded in how we work and what we build
• Build the scaffolding — principles, review processes, accountability structures — that gives others a framework to execute against
• Operate with conviction in a space where the industry is still writing the rules
• Drive alignment across a complex, high-stakes intersection
• Operate at the seam between security, engineering, compliance, legal, and finance — without owning any of the headcount
• Eliminate toil that crushes effectiveness of the subject matter experts around you by clearing the path, not walking it for them
• Surface what’s being normalized that shouldn’t be — the risks deferred, the gaps unnamed, the programs that exist only on paper
• Drive evidence-based decisions that stick — from architecture, through build, to the risk level with executives
• Full-stack program leadership: equally at home in an architecture review, a compliance audit, a risk conversation with the CTO, and a sprint planning session with an engineering team

Senior Technical Program Manager, Security

• We are seeking an experienced AWS Security engineer to design, implement and maintain security controls across AWS cloud environments.
• This role will focus on safeguarding cloud workloads, ensuring compliance with industry standards, and driving best practices in identity management, monitoring, and threat detection.
• Design and implement secure architectures within AWS using services such as IAM, KMS, CloudTrail, Config, and third-party tools/services like Sentry, Datadog etc.
• Implement and manage centralized logging, monitoring, and alerting solutions.
• Conduct threat modeling, vulnerability scanning, and penetration testing.
• Ensure AWS environments comply with security frameworks (CIS Benchmarks, NIST, HIPAA, FedRAMP, SOC 2 etc.) as applicable.
• Support incident detection, investigation and response within AWS workloads.
• Maintain and monitor audit trails across accounts and services.
• Work with compliance and risk teams to align security with regulatory requirements.
• Automate security controls and compliance checks with Infrastructure as Code (IaC) (Terraform, CloudFormation etc.).
• Integrate security into CI/CD pipelines, enabling secure build and deployment processes.
• Collaborate with DevOps/Engineering teams to implement “shift-left” security practices.

AWS Cloud Security Engineer

• Design, implement, and elevate security posture across clients’ cloud environments
• Conduct risk assessments and vulnerability testing of cloud-based systems
• Mentor the next generation of leaders
• Drive business growth and client engagement direction
• Develop enterprise cloud security strategies aligned with business objectives

Cloud Security Consultant, Director

• Coordinate activities with the Principal Security Engineer, Platform team, and Customer Operations team.
• Review web application artifacts of customer developed applications and provide customer feedback
• Primary face of the cybersecurity team to software development and mission success teams
• Assist with incident response plans to respond to application outages or downtime
• Conduct comprehensive assessments of cloud infrastructure, applications, and containerized environments to verify compliance with DISA STIGs, SRGs, and CIS Benchmarks.
• Author, review, and maintain high-quality security artifacts, including System Security Plans (SSP), Security Assessment Plans (SAP), and Security Assessment Reports (SAR).
• Monitor and report on the ongoing effectiveness of security controls, ensuring the platform maintains a robust and authorized security posture.
• Utilize automated scanning suites (e.g., Anchore, Trivy, Tenable) to identify vulnerabilities, distinguish true positives, and provide actionable remediation guidance to dev teams.
• Implement and manage technical workflows for SBOMs (Software Bill of Materials) to support modern, continuous authorization standards.
• Partner with DevOps and Software Engineering teams to translate complex NIST 800-53 controls into implementable technical requirements.

Cybersecurity Assessment Engineer

• Provide leadership and oversight for designated Information System Security Officers (ISSOs) and other cybersecurity personnel
• Direct and coordinate systems’ Authority to Operate (ATO) efforts and maintain compliance with FISMA, DHS 4300 Series, NIST, and applicable DHS directives
• Manage staff of 10 engineers including timecard and performance management
• Prepare all reports and required deliverables, attend client and staff meetings
• Train staff in new technologies, current tools, and FISMA, DHS 4300, NIST and FIPS requirements
• Ensure alignment with NIST and DHS standards
• Oversee the creation, update, review, and readiness of system Authority to Operate (ATO) packages
• Provide information security expertise and risk guidance to system development and operations teams throughout the System Engineering Lifecycle

See all jobs on JobTailor