Security Engineer

• Define and own Crossmint's security strategy, including roadmap prioritization, risk posture, and security investment decisions.
• Operate fluidly across scope levels: board-level risk briefings one hour, hands-on threat model review the next.
• Establish and maintain a security program that scales with the company, not one that creates drag on product velocity.
• Report to co-founders on security posture, risk landscape, and program progress.
• Maintain deep technical fluency across cloud security (AWS primary), application security, CI/CD security, and endpoint and corporate IT.
• Review architecture decisions, new product features, and infrastructure changes for security implications before they ship.
• Conduct or lead threat modeling exercises across product and infrastructure domains.
• Step in as a hands-on practitioner during incidents, complex vulnerability analysis, or high-stakes security reviews where direct expertise is required.
• Own security's relationship with auditors, regulators, and compliance frameworks including SOC 2 Type II, DORA, and MiCA-related security requirements.
• Lead audit preparation cycles: scope definition, evidence readiness, control documentation, and auditor-facing communication.
• Maintain audit-ready posture year-round, not as a sprint before each audit window.
• Partner with the Compliance function to ensure security controls satisfy both regulatory requirements and practical risk management objectives.
• Manage and develop the Senior DevSecOps Engineer, with the expectation of growing the security team over time.
• Serve as the internal authority on security for Engineering, Product, Compliance, Legal, and People Ops.
• Drive security awareness and culture across the company without creating friction that slows down product teams.

Head of Security

• This is a professional position which markets employment and training programs; serves individuals who are unemployed and/or seeking new jobs; provides counseling services to individuals with vocational needs by determining interests, aptitudes, and training; refers individuals to appropriate private and/or public agencies for aid assistance or training; and secures employer cooperation in the placement of referred candidates.
• Promotes, develops, and facilitates training opportunities and labor exchange services within a One Stop environment.
• Plans, coordinates, and implements a marketing plan which includes a system to contact employers, community-based organizations, and civic organizations on a regularly scheduled basis to ensure that they are aware of services available through the One Stop facility.
• Provides assisted core services to individuals as required but is not limited to: Assisting applicants in obtaining appropriate employment by evaluating skills, work experience, abilities, and education; referring applicants to appropriate available job openings; contacting employers to develop jobs aligned with applicants; vocational or career objectives; and providing in depth counseling to individuals having difficulty choosing an occupational field.
• Selects, notifies, and meets with recently unemployed persons for the Priority Reemployment Planning Program.
• Meets with selected candidates; provides orientation on services available; reviews resumes; and advises on practices to assist individuals gain employment.
• Provides information on services available; explains the importance of completing the resume, background information, and virtual recruiter portion of the state's job website.
• Also assists individuals with unemployment benefits issues to aid in handling the extensive number of calls and inquiries.
• Directs and participates in applicant screening, selection, and evaluation; provides information and prepares correspondence to applicants and employers; coordinates with and refers clients to other community based organizations for supportive services.
• Acts as complaint specialist for the Fort Myers Center. Process complaints, maintains logs, and assists clients with filing complaints for Migrant Seasonal Farmworkers Apparent violations, and the One-Stop Wagner-Peyser Complaint System Log.

Employment Security Representative I

• Direct the daily execution of Application Security and Cloud Security functions.
• Establish technical priorities, decision frameworks, and operating expectations.
• Architect and deploy defensive controls for AI-enabled capabilities.
• Assess software, services, dependencies, and infrastructure for weaknesses.
• Raise resilience of AWS footprint across identity boundaries and configurations.
• Expand automation for cloud and platform assurance.
• Set approach for risk-based prioritization for addressing issues.
• Define secure engineering expectations for design, build, test, and release activities.
• Shape secure implementation patterns for new platform capabilities.
• Run deep technical reviews for major initiatives.
• Guide authentication and authorization decisions for business workflows.
• Unify application and cloud control strategies.
• Coordinate with Corporate Security for shared capabilities.
• Improve detection, validation, and testing approaches.

Staff Security Engineer

• Design and implement security controls across networks, systems, and applications to protect against internal and external threats
• Lead vulnerability management efforts, including scanning, analysis, remediation, and reporting
• Monitor and respond to security incidents, conduct root cause analysis, and implement corrective actions
• Manage and optimize security tools such as SIEM, EDR, firewalls, DLP, and identity access management systems
• Manage security awareness training programs
• Lead security engagements for ongoing penetration tests (internal, external, web app, cloud, and AI)
• Collaborate with infrastructure and application teams to ensure secure architecture and configurations
• Support compliance initiatives related to GLBA, SOX, FFIEC, NIST, and other mortgage industry regulations
• Conduct risk assessments and security reviews for new technologies, vendors, and projects
• Develop and maintain security documentation, including policies, procedures, and technical standards
• Mentor junior security staff and contribute to security awareness training across the organization
• Stay current on emerging threats, vulnerabilities, and regulatory changes impacting the mortgage industry

Senior Information Security Engineer

• The Principal Cybersecurity Architect is responsible for driving enterprise-wide technology security strategy and providing technical expertise to business areas and project teams with an emphasis on implementation of innovative, leading-edge security technology solutions.
• Proven Track Record of accomplishments and experience leading the design and deployment of AI Architectures (both On-Premise and Public Cloud) and driving and deploying Secure Cloud Adoption on an enterprise scale from Foundational Security Controls to Cloud migrations.
• Extensive experience migrating from a large scale onprem datacenter to the cloud while maintaining the proper levels of security, compliance and regulatory adherence.
• Bridging gaps between data scientists, engineers, AI Architects, Cloud Architects, Data Protection professionals, legal, and executive teams.
• Promoting secure-by-design principles across AI and Cloud initiatives.
• Leading security teams and establishing governance frameworks for AI and Public Cloud adoption.

Principal Cloud and AI Security Architect

• Responsible for designing, implementing, and supporting enterprise network decryption solutions across hybrid on-premise and cloud environments
• Ensures secure visibility into encrypted traffic
• Helps maintain compliance with enterprise security standards, policies, and regulatory requirements
• Partners with infrastructure and security teams to deliver secure, scalable, and well-architected network security solutions
• Supports system and network architecture support for information security and network decryption technologies
• Supports development and execution of risk assessment methodologies
• Supports development of requirements, system architecture, and technical design of network security and decryption solutions
• Supports development of strategies for discovery, evaluation and response to emerging network and encrypted traffic threats
• Develops security incident response plans and operational support strategies
• Provides trouble resolution and serves as point of technical escalation on complex network, certificate, and decryption-related issues
• Creates presentations and seeks IT management approval
• Designs & engineers comprehensive network decryption solutions based on business requirements and defined technology standards

Information Security Advisor – Network Decryption Engineer

• Develop, maintain, and execute a firm-wide information security strategy aligned to Manatt's business objectives, growth agenda, and risk appetite.
• Serve as the primary security advisor to the CIO, COO, executive leadership, and firm governance bodies; present security posture and program updates to senior stakeholders and the board as required.
• Build and lead a high-performing information security team, including hiring, mentoring, and professional development.
• Define and manage the information security program budget, balancing investment in tooling, staffing, and managed services.
• Own the firm's information security risk management program, including risk assessment, treatment, and continuous monitoring.
• Ensure compliance with applicable legal and regulatory frameworks including HIPAA/HITECH, state privacy laws, ABA cybersecurity guidelines, and client security requirements.
• Lead responses to client security questionnaires, RFPs, and third-party audits; serve as the primary security point of contact for client due diligence inquiries.
• Provide security leadership and oversight for the firm's cloud transformation and data center migration initiatives, including Azure cloud security architecture and governance.
• Establish and enforce security standards and controls aligned to CIS Benchmarks and industry best practices across endpoint, network, cloud, and application layers.
• Partner with IT and engineering teams to embed security into the system development lifecycle, AI/LLM adoption initiatives, and enterprise technology deployments.
• Oversee the implementation and management of security tooling including endpoint protection, SIEM/SOAR, identity and access management, DLP, and vulnerability management.
• Lead the firm's security operations function, ensuring 24/7 threat monitoring, detection, and response capabilities.
• Own the incident response program, including playbooks, tabletop exercises, and coordination with legal, HR, and executive leadership during security events.
• Manage relationships with external security partners, MSSPs, and legal counsel in connection with security incidents and breach notification obligations.
• Oversee vulnerability and patch management programs in coordination with IT operations.
• Advise on and govern the secure adoption of AI and generative AI tools, including LLM-based legal technology platforms, ensuring appropriate data handling, access controls, and residency requirements.
• Stay abreast of the evolving threat landscape as it pertains to professional services, legal, and healthcare-adjacent industries; translate threat intelligence into actionable program improvements.
• Lead the firm's security awareness and training program, fostering a security-conscious culture across attorneys, business professionals, and leadership.
• Partner with HR and firm management to communicate policies and expectations around acceptable use, data handling, and security hygiene.

Director of Information Security

• Responsible for defining, governing, and evolving the enterprise security architecture
• Ensure technology solutions are secure, scalable, compliant, and aligned with business and risk objectives
• Serve as the architectural authority for security design
• Provide leadership, governance, and strategic direction across cybersecurity initiatives
• Define and maintain the enterprise security architecture, including principles, standards, reference architectures, and design patterns
• Provide architectural oversight and approval for security designs across cloud, application, infrastructure, data, and AI platforms
• Lead threat modeling and architecture risk assessments
• Collaborate with teams to translate security requirements into implementable designs
• Establish and enforce security architecture governance
• Lead and develop a team of security architects and senior engineers

Senior Manager, Security Architecture

• Lead threat modeling, hardening and operation of security services
• Define and implement security standards and automated security controls
• Partner with cross-functional teams to embed secure design practices
• Lead technical direction and roadmap execution for assigned area
• Maintain high Operational Excellence to minimize downtime
• Participate in on-call rotation to respond to events
• Manage lifecycle of product and cloud security vulnerabilities
• Influence secure adoption of LLMs and AI tools
• Mentor and coach earlier career engineers

Staff Security Engineer – Proactive Security

• Define and execute the cybersecurity vision, strategy, and multi-year roadmap
• Provide leadership for cybersecurity operations including EDR, vulnerability management, incident response, and threat detection
• Drive standardization and optimization of the security tool stack across managed and augmented clients
• Formalize and maintain governance, risk, and compliance frameworks including SOC2 alignment
• Lead enterprise incident response strategy, ensuring readiness and effective remediation
• Act as executive escalation point for major security incidents and client-impacting events
• Own budgeting, forecasting, and resource planning for the security function
• Lead risk assessments and ensure mitigation strategies are implemented
• Build, mentor, and develop a high-performing cybersecurity team
• Foster a culture of security awareness and continuous improvement
• Collaborate cross-functionally with Engineering, Consulting, Product, and Project teams
• Represent cybersecurity in executive forums and client discussions in partnership with the CISO and executive leadership

Director of Cybersecurity

• Design, develop, and deploy Policy-Based Access Control (PBAC) policies to enable fine-grained and dynamic authorization
• Work closely with business, security, and application teams to understand business requirements and translate them into scalable, secure authorization policies
• Author, test, deploy, and manage policies in PBAC platforms; experience with PlainID is highly preferred
• Lead policy lifecycle management, including documentation, versioning, change tracking, and governance
• Diagnose and resolve issues with existing authorization policies and implementations, improving stability and performance
• Design and integrate authorization solutions using RESTful APIs
• Work extensively with SQL, including schema design, DDL operations, and data analysis to support IAM use cases
• Deploy, manage, and support IAM workloads on Azure infrastructure, with strong hands-on experience in Azure Kubernetes Service (AKS)
• Demonstrate a solid understanding of networking concepts, including secure API communication, authentication flows, and cloud networking fundamentals
• Implement secure DevOps practices using GitHub, GitHub Actions, and CI/CD pipelines for policy and application deployments
• Develop PowerShell and shell scripts to automate IAM processes, enhance operational efficiency, and reduce manual effort
• Ensure all IAM and authorization solutions align with organizational security standards, compliance requirements, and best practices

Senior Cybersecurity Engineer

• Directs staff and initiatives that support risk management programs, to include governance support, risk oversight, risk infrastructure development, analysis of regulatory environment, and adherence to enterprise operational and compliance policies and procedures.
• Reviews, communicates, and recommends the development of risk policies and procedures in partnership with senior leaders and regulatory partners to ensure appropriateness and adequacy versus industry best practices and regulatory requirements.
• Directs the oversight of risk through its life cycle and use, manages the review and assessment of state and federal regulatory requirements and associated business impacts.
• Provides operational and compliance risk oversight for USAA, its affiliates, and USAA partnerships with external companies.
• Partners with key stakeholders such as, federal/state regulatory agencies and business leaders to oversee the formulation of stress test plans, identification, quantification, and aggregation of risks using analytical methodologies, to include key and emerging risks, including risks associated with new or modified products, services, distribution channels, regulations and/or third-party operations.
• Directs teams in the development of risk dashboards and reporting formats in alignment with risk appetite/profile and/or regulatory requirements.
• Proactively identifies strategic and tactical regulatory solutions by providing risk and compliance subject matter expertise for CoSA project/process/product initiatives.
• Builds and manages a high performing team of risk professionals through recruitment, training, coaching, performance management and related managerial activities.

Director, Risk and Compliance Management – Information Security

• Manage security projects and facilitate Scrum methodologies
• Lead and align with internal platforms and external vendors
• Oversee security assessments and compliance requirements

Security Project Manager – Scrum Master

• Lead all facility-related responsibilities and security operations across the organization
• Oversee facility management, leasing, and compliance
• Manage personnel clearances, secure facilities, and physical security programs
• Ensure compliance with all government security requirements and regulations
• Conduct regular security assessments and implement improvements

Facility Security Officer

• Engineers, implements and monitors security measures for the protection of computer systems, networks and information.
• Identifies and defines system security requirements.
• Designs computer security architecture and develops detailed cyber security designs.
• Prepares and documents standard operating procedures and protocols.
• Configures and troubleshoots security infrastructure devices.
• Develops technical solutions and new security tools to assist in mitigating security vulnerabilities and automating repeatable tasks.
• Leads IT groups and business units as necessary in troubleshooting compatibility issues between security tools and business or productivity programs.
• Performs analysis of suspected malicious code and other software or programs and provides written or verbal analysis to management.
• Analyzes client and customer needs as required and provides clear and concise reports to leadership.
• Works closely with management on assigned projects from inception through implementation ensuring adequate internal communication and user involvement is maintained.
• Configuration and management of endpoint detection and response (EDR) policies.
• Integration with Microsoft 365 Defender and Microsoft Entra ID for threat analytics and identity protection.
• Monitoring and responding to security alerts, incidents, and automated investigations.
• Implementation of attack surface reduction rules, antivirus policies, and device control settings.
• Deployment and management of Application Allowlisting, Ringfencing™, and Storage Control policies.
• Configuration of Elevation Control and Network Access Control to enforce Zero Trust principles.
• Analysis of policy violations and threat events to continuously improve endpoint security posture.
• Collaboration with IT and security teams to align ThreatLocker policies with organizational risk tolerance and compliance requirements.
• Strong understanding of Zero Trust architecture, endpoint hardening, and real-time threat mitigation strategies.

Senior IT Security Engineering Advisor

• Lead investigation and response activities for confirmed and escalated cyber security incidents in accordance with established playbooks and service level targets.
• Perform analysis of suspicious activity across endpoint, network, identity, email, cloud, application, and system log sources.
• Analyze, investigate, and correlate data from SIEM/SOAR, EDR, firewall, proxy, intrusion detection/prevention, email security, and other monitoring platforms to drive accurate incident response.
• Document investigations, findings, actions taken, and escalation details in the case management system with clear, complete, and timely notes.
• Create full summary reports of events of interest to drive after action and lessons learned activities.
• Follow shift handoff procedures and communicate open issues, emerging threats, and significant events to team members and incident handlers.
• Contribute to continuous improvement by identifying recurring false positives, process gaps, and opportunities to improve alert quality, runbooks, and analyst efficiency and perform live response activities, including remote and onsite system analysis and evidence collection.
• Drive containment, eradication, and recovery actions in coordination with infrastructure and technology teams.
• Collaborate with Tier 1 analysts to improve detection and response capabilities and provide guidance on escalation quality and partner with security engineering teams to ensure effective operation and tuning of security tools and detection capabilities.

Cybersecurity Incident Responder

• Install and service physical security systems, including IP video and access control systems with electrified locking hardware
• Troubleshoot and resolve system issues efficiently
• Serve as the primary on-site customer interface
• Oversee subcontractors and coordinate with other trades
• Mentor junior technicians and ensure quality standards are met

Advanced Security Technician

• Participate in daily network, firewall, and operational support.
• Ability to troubleshoot network issues and failures and follow best practices and troubleshooting methodology to quickly assess current situations, find solutions, and implement changes to correct and/or update network topologies to ensure stability and functionality.
• Provide technical analysis of operational issues and remediations during troubleshooting efforts to ensure documentations and procedures are followed and updated during active events. This includes the ability to report to management.
• Stay up to date on emerging technologies and products, including attaining certifications and participation in industry events as appropriate.
• Work with various stake holders to lead problem solving, evolve system roadmap and take critical decisions.
• Provide clear communication with regular updates/reports to the management team.

Network Security Engineer

• Executes Internal Security Controls through performance of compliance assessment reviews and self-inspections to ensure compliance with government and company regulations/requirements
• Identifies deficiencies, develops and implements corrective action
• Conducts Administrative Inquiries on personnel, processes and situations in accordance with established operating procedures to determine non-compliance
• Conducts Communication Security (COMSEC) duties in compliance with government regulations/requirements
• Develops, implements and administers an Operational Security program and procedures to ensure compliance with government regulations/requirements
• Provides innovation into Personnel Security to assist in obtaining individual security clearances/accesses
• Oversees Physical Security duties within Boeing facilities to ensure compliance with regulations/requirements
• Completes tasks toward long-range goals and objectives
• Oversees Sub-Contractor Management to ensure compliance with government regulations/requirements

Senior Industrial Security Specialist

• Establishing annual projects and deliverables using company business goals and strategies
• Creating clear engineering diagrams, security analysis, whitepapers, system documentation, presentations, and other deliverables
• Presenting to diverse size groups and translating security technologies and concepts to a non-technical audience
• Planning, designing, implementing, and maintaining security-related technologies
• Participating in projects as required; analyzing, designing, developing, and implementing security solutions which protect the information assets while enabling business functionality
• Utilizing software and hardware tools, identifying and diagnosing problems affecting information security tools and systems, and providing 2nd and 3rd tier operational support
• Providing information security expertise and consulting to internal IT, business system owners, and other stakeholders
• Performing product and solution life cycle management ensuring capacity, integrity, and availability of all security systems
• Aligning technologies to support overall strategy and information security framework
• Ensuring new and existing products conform to information security policies, standards, and best practices
• Conducting research on emerging technologies in support of enterprise operations
• Reviewing new and existing system designs for compliance with security standards and best practices

See all jobs on JobTailor