Security Engineer

• Responsible for delivering design and system configuration for SAP S/4HANA Security, ensuring the implementation of robust access control and authorization frameworks across business units.
• The candidate is accountable for translating business and compliance requirements into secure role designs, managing user access, Segregation of Duties (SoD) controls, and supporting data migration, testing, audit readiness, and post-go-live activities, while aligning with SAP security best practices and project timelines.
• Being part of the Global IT team and responsible for SAP S/4HANA Security design, ensuring roles and authorization concepts are designed, built, tested, and deployed in alignment with SAP best practices and compliance standards.
• Facilitate and support workstream managers, Solution Architects, and business leads from requirement gathering through solution design, with a strong focus on access control, Segregation of Duties (SoD), and integration across Finance, PM, BRIM and other functional modules.
• Analyse business and audit requirements related to user access, role design, privileged access (FFID), and compliance mandates, ensuring secure and appropriate system access.
• Design and configure SAP security components such as single roles, master roles, derived roles, organizational level restrictions, and user provisioning processes, while coordinating with technical teams for enhancements and automation.
• Responsible for creating and maintaining role design documentation, security specifications, and supporting GRC-related objects including access risk analysis, mitigation controls, and firefighter IDs (FFID).
• Perform user administration activities including user creation, role assignment, troubleshooting authorization issues, and ensuring compliance with security policies.
• Execute and support security lifecycle activities including role build, testing (unit/SIT/UAT), audit validation, migration, cutover, go-live, and hyper care support.
• Support incident management and change requests related to SAP security, ensuring timely resolution and minimal business disruption.

SAP S/4 HANA Security Expert

• Serve as a frontline expert in responding to customer-driven assessments, vendor risk questionnaires, and RFP requirements
• Own the end-to-end process of receiving, triaging, and responding to customer-issued security questionnaires
• Draft clear, accurate, and professionally worded responses that address customer concerns around data security, privacy, access controls, and compliance posture
• Leverage AI-powered tools to draft, refine, and quality-check customer risk assessment responses
• Communicate complex security concepts clearly to technical and non-technical audiences
• Collaborate with SMEs across the Thomson Reuters enterprise to ensure accurate questionnaire completion
• Participate in periodic reviews of completed questionnaires to identify trends, gaps, and improvement opportunities

Technical Analyst – Customer Assurance, Information Security

• ISMS management and compliance. Manage and maintain the Information Security Management System, ensuring ongoing compliance with ISO 27001, GDPR, HIPAA, and other applicable frameworks.
• Cybersecurity assessments and risk remediation. Conduct cybersecurity assessments and audits; triage and drive remediation of identified risks in collaboration with engineering teams.
• Policies and documentation. Author and maintain cybersecurity policies, procedures, and controls documentation to support Cybersecurity and Governance requirements.
• Technical security operations. Support cybersecurity operations and IT on technical security tooling, firewalls, networking, endpoint protection, and SIEM.
• Security questionnaires and third-party vetting. Respond to bids, tenders, and third-party security vetting.
• Security culture and awareness. Champion a security first culture across the organisation: create awareness programs, run training, and embed security-by-design thinking into how teams work.
• Data security and governance. Support data security and data governance initiatives across the organisation.
• Demonstrably AI-forward. Uses AI in their own workflows and can point to concrete automations they have built or commissioned to take work out of IT and operations.

Cybersecurity Engineer

• Collaborate with skilled professionals who literally move the world, every day
• Work in a supportive environment to develop your skills
• Gain access to world-class learning programs to accelerate your career goals
• Find yourself welcome in our diverse and inclusive culture, where you are valued for who you are and rewarded for what you bring
• Take ownership of a problem, even if no one else is willing to do so
• Have excellent communication and documentation skills
• Explain complex solutions to other engineers, end users, developers and management

Senior Cyber Security Engineer – IAM

• Develop and execute a strategic sales plan to achieve and exceed quarterly and annual revenue targets within the assigned territory.
• Manage the entire sales cycle, from prospecting and qualification to negotiation and closing significant enterprise deals.
• Identify and target key decision-makers and influencers within target accounts, establishing strong relationships with C-level executives, security leaders, and cloud architects.
• Conduct compelling product presentations and solution demonstrations tailored to specific customer needs and technical requirements, often in collaboration with Sales Engineering.
• Become a trusted advisor to customers, demonstrating a deep understanding of CNAPP, cloud security best practices (AWS, Azure, GCP), DevSecOps, and relevant industry regulations in India.
• Maintain a strong pulse on the competitive landscape and emerging market trends in cloud-native security across the Indian market.
• Effectively translate complex technical concepts into clear business value propositions for both technical and non-technical audiences.
• Work closely with marketing, product, and sales engineering teams to ensure a coordinated and successful go-to-market strategy in India.
• Accurately forecast sales opportunities and maintain comprehensive, up-to-date records of all sales activity in the CRM (e.g., Salesforce).
• Attend industry conferences, seminars, and networking events to promote Upwind Security’s brand and generate leads.

Account Executive

Commercial Account Executive – ANZ

• Guardrail Architecture: Design and implement systemic safeguards (e.g., NeMo Guardrails, Llama Guard) to prevent prompt injection, jailbreaks, and PII leakage.
• Compliance Strategy: Align AI deployments with internal data privacy policies and emerging global regulations (e.g., EU AI Act, GDPR).
• Risk Assessment: Lead red-teaming exercises and vulnerability assessments on enterprise LLMs and RAG systems.
• Monitoring Systems: Establish comprehensive observability dashboards to track hallucination rates, toxicity, and bias in production models.

Senior Manager, GenAI Governance, Security

• Code, Design, architect, engineer, and operate cutting-edge DDoS solutions to provide protection across multiple substrates.
• Partner with other engineering teams and executives to develop short- and long-term security, product, and service strategies.
• Collaborate with other teams to solve security problems with minimal disruption to other business functions.
• Drive continuous improvement of policies, procedures, and technology.
• Interact with industry experts, partners, internal staff, and auditors.
• Work effectively as part of a geographically distributed team.
• Occasional travel is required (domestic and international).

Networking/Security Software Engineer – SMTS

• Provide strategic direction for the Enterprise Security Strategy at JLL by educating self and others in new security threats across the entire spectrum of JLL applicable technologies.
• Provide strong technical leadership in all aspects of security including end point protection, network security, firewalls, application, and cloud security.
• Provide guidance, governance, and oversight of multiple security efforts in parallel.
• Analyze and communicate benefits and risks associated with IT investments and participates in Regional IT governance and decision making, adhering to standards.
• Ensure applications, processes, and procedures of the Enterprise Application team comply with JLL standards including security policies, change management, SOC2 and other critical business requirements.

Senior Security Architect

• Analyze, build, and maintain Enterprise SAP Security Roles
• Participate in Change Management Processes
• Engage in peer reviews of SAP Security role Changes
• Use Information Security tools for analysis
• Understand and apply knowledge of security system parameters
• Follow routine techniques to resolve issues
• Support SoD/SOX reviews and initiatives

Consultant – SAP Security

• Providing subject‑matter expertise in SAP Security and GRC, leading design, implementation, and support activities across SAP On‑Premise applications such as S/4HANA and GTS, as well as cloud solutions including BTP, IBP, and Ariba
• Partnering closely with SAP process owners, functional teams, and technical stakeholders to understand business requirements, proactively identify risks, and deliver secure, compliant, and scalable solutions
• Leading complex incident resolution and problem management, including root‑cause analysis and preventive control enhancements across SAP Security and GRC domains
• Owning role design, remediation, and optimization, ensuring adherence to least‑privilege principles, segregation of duties (SoD), and audit requirements
• Managing SAP GRC activities end‑to‑end, including Fire Fighter administration and log reviews, GRC workflow management, access risk analysis, mitigation controls, and compliance reporting
• Driving audit and compliance initiatives, supporting SOX and internal/external audits through evidence preparation, control testing, and continuous control improvement
• Leading or contributing to the implementation and enhancement of the full SAP GRC suite, ensuring solutions meet design standards, quality benchmarks, and regulatory obligations
• Mentoring junior analysts and providing technical guidance, helping build team capability and ensuring consistent delivery of high‑quality security services
• Demonstrating strong written and verbal communication skills, effectively influencing stakeholders, documenting designs, and presenting security risks and recommendations to leadership

Senior SAP Security Analyst

• Collaborate with several SAP Process teams and technical teams to understand their requirements
• Support issue fixes and incident resolution in SAP On-Premise Application like S/4, GTS and public cloud solutions like BTP, IBP and Ariba
• Handle other regular Security activities like role design and fixes, supporting audit activities, analyzing and supporting Fire Fighter user administration and log reviews, GRC Workflow activities
• Develop and implement full suite of SAP GRC products
• Implement solutions that meet minimum required design documentation, quality standards, and SOX compliance

SAP Security Associate Analyst

• Architect and Lead SentinelOne Deployments: Design and implement SentinelOne, Proofpoint, Guardicore, VPN and DLP security solutions for a wide range of infrastructure and endpoints, ensuring scalable, resilient, and effective protection.
• Integration & Automation: Integrate with other security solutions and automation using APIs.
• Security Policy Management: Define, optimize, and enforce security policies.
• Threat Detection & Incident Response: Collaborate with SOC and IR teams to tune detections and assist in the response to threats.
• Cross-Platform Expertise: Provide deep technical expertise in handling endpoint security for heterogeneous systems.
• Technical Leadership & Documentation: Serve as the subject matter expert and produce architectural diagrams and best practices guides.
• Collaboration & Training: Partner with IT, DevOps, and security teams and provide training on security tools and hygiene.
• Continuous Improvement: Stay updated on emerging threats and recommend enhancements.

Senior Cybersecurity – Endpoint Security, Infrastructure Security

• Responsible for the security and compliance of systems related to our Government Certifications program, to include FIPS, Common Criteria, ITSAR, etc.
• Comfortable leading technical discussions across multi-functional engineering teams and third party auditors
• Support the continuous improvement of the Red Hat environments through automation and maturation of processes
• Support the downstream integration of open-sourced projects; collaborate to develop and implement Red Hat specific capabilities from the upstream
• Research and analyze new tools, technologies and services for technical suitability within a containerized environment
• Serve as an evangelist of security and compliance both inside Red Hat and externally, with partners or within the open-source community

Product Security Engineer – GRC

• Design, configure, and maintain scalable Workday security architecture, including role-based, user-based, and intersection security groups.
• Define and enforce governance standards for Workday security configuration and ongoing maintenance.
• Continuously evaluate and optimize security models to align with organizational and regulatory requirements.
• Manage and administer domain security policies, business process security policies, and proxy access.
• Implement and maintain segmented and least-privilege access models across Workday modules.
• Ensure role assignments are aligned with job responsibilities and organizational hierarchy.
• Partner with GRC, Legal, and Audit teams to ensure adherence to regulatory frameworks (e.g., SOX, GDPR).
• Lead and execute User Access Reviews (UARs), ensuring timely remediation of identified issues.
• Support internal and external audits by providing documentation, audit evidence, and remediation plans.
• Implement and maintain Segregation of Duties (SoD) controls and monitoring processes.
• Configure and review security for inbound and outbound Workday integrations.
• Ensure secure authentication and authorization mechanisms for integrations (e.g., API users, ISUs, certificates).
• Investigate, troubleshoot, and resolve Workday security-related incidents and access issues.
• Collaborate with HR, Payroll, Finance, and IT teams to gather security and reporting requirements.
• Build and support Workday security reports and dashboards.
• Provide guidance on least-privilege access design and security best practices.

Senior Manager, Workday Security

• Partner with engineering and data science teams to design and review AI architectures, including agentic and multi‑agent systems, for security, privacy, and regulatory compliance.
• Perform security reviews of AI/ML systems, including model lifecycle, data pipelines, inference APIs, agent orchestration layers, and third‑party AI services.
• Identify and mitigate risks such as: Data leakage and model exploitation, Prompt injection and indirect prompt manipulation, Agent autonomy risks (over‑permissioned agents, unsafe tool use, uncontrolled action execution), Insecure model deployment and inference exposure.
• Support threat modeling and risk assessments for AI and agent‑driven workflows, assisting teams in implementing practical mitigations.
• Contribute to and operationalize AI and agentic AI security standards, guidelines, and secure design patterns used across the company.
• Evaluate AI platforms, agent frameworks, and vendors to ensure alignment with security, privacy, and compliance requirements.
• Support responsible AI practices related to explainability, oversight, auditability, and controlled autonomy, in collaboration with legal, compliance, and risk partners.
• Act as a trusted security advisor to teams adopting AI, LLM‑based agents, and workflow‑oriented AI systems.
• Participate in design reviews and working sessions focused on secure AI and agent deployment.
• Provide guidance on secure use of generative AI, internal AI platforms, and agent‑based tools interacting with company systems and data.
• Stay current on AI and agentic AI security threats, vulnerabilities, and best practices.
• Recommend improvements to tooling, processes, and controls to strengthen AI security posture.
• Contribute to internal documentation, training materials, and security enablement related to AI and agent usage.

Senior AI Security Engineer

• Devising and engaging mitigation strategies to prevent real time attacks, using Akamai products & platform
• Performing advanced analysis to identify attacks and threats to customer's digital properties and/or their business network
• Communicating with customers regarding challenges and providing updates and results on your mitigation and analysis
• Innovating around tooling development & product enhancement.
• Being a good advocate to customer centricity during day-to-day operations & incidents

Security Architect – Day Shift

• Serve as a lead technical expert and mentor within the security engineering team
• Drive the implementation of advanced security controls
• Guide technical decisions and provide subject matter expertise
• Ensure excellent customer service for internal and external customers
• Manage troubleshooting of Prisma Access for secure remote connectivity
• Design, evaluate and implement security related solutions
• Ensure team adherence to established change control processes
• Collaborate with systems and network engineers
• Lead the incident response team
• Validate security control coverage based on emerging cyber threat intelligence
• Participate in 24x7 on-call rotation

Lead Engineer – Security

• Assess AI systems, tools, and use cases for security, privacy, data protection, IP, and misuse risks, including generative and traditional AI.
• Support AI risk classification, intake reviews, and control validation aligned to enterprise AI governance frameworks.
• Monitor risks related to data leakage, prompt misuse, model drift, third‑party AI exposure, and unauthorized AI usage (AI Shadow IT).
• Partner with Security Operations to support AI‑related incident analysis, reporting, and lessons‑learned activities.
• Support execution of the enterprise AI Governance Policy, including tracking compliance, approvals, and exceptions.
• Assist with regulatory readiness (e.g., AI regulations, data protection laws), translating requirements into governance artifacts, tracking, and evidence.
• Maintain AI inventories, risk registers, metrics, and dashboards to support audit and leadership reporting.
• Help operationalize security‑by‑design and privacy‑by‑design principles across the AI lifecycle.
• Analyze AI usage data, monitoring signals, and security controls to identify trends, gaps, and emerging risks.
• Develop executive‑ready insights and summaries for leadership, risk committees, and audit reviews.
• Track governance KPIs such as AI coverage, risk posture, control adoption, policy compliance, and remediation progress.
• Support continuous improvement by identifying recurring issues and recommending governance enhancements.
• Partner with Legal, Privacy, IT, Product Security, Procurement, and OpCo teams to evaluate AI tools, vendors, and use cases.
• Support education and awareness efforts by translating governance requirements into clear guidance for business and technical teams.
• Contribute to standard work, playbooks, and templates supporting AI governance at scale.

AI Analyst – Security & Governance

• Support end to end SOC alerts workflow.
• Assist in operationalizing the Regular Incident Response Plan and Major Incident Response Plan across teams.
• Work with SOC tools and automation with Google SecOps as the primary SIEM, SOAR, Google Threat Intelligence, Gemini AI integrations and Jira as the authoritative system of record.
• Collaborate with our managed SOC provider (Tier 1) to ensure quality triage, correct escalations, and reduced false positives.
• Investigate alerts, implement playbooks, support incident response activities, and contribute to operational improvements within the SOC.
• Active participation in SOC alert lifecycle: Alert Ingestion → Triage → Routing → Investigation → Determination → Reporting.
• Support incident response coordination during security incidents.
• Ensure strict adherence to Perforce’s Incident Response Policies for regular incidents.
• Support the implementation and tuning of Google SecOps (Chronicle SIEM + SOAR + case management) as the primary detection and workflow platform.
• Execute predefined SOC playbooks aligned with IRP/MIRP guidelines.
• Participate in RCA and post incident reviews.

See all jobs on JobTailor