Security Engineer

• Provides prompt, efficient and friendly customer service by maintaining a safe and secure store environment for customers and employees.
• The retail security officer patrols and monitors premises, and, if needed, apprehending theft suspects in compliance with Hy-Vee's standards and guidelines.
• Exhibiting respect, concern and patience in all customer and employee interactions.
• Monitors the store property, as well as customer and employee activities, for potential theft of assets or damage to assets on Hy-Vee's property.
• Takes appropriate action to prevent theft; apprehends individuals engaged in theft activity.
• Contacts and coordinates with local law enforcement regarding known offenders or suspicious persons observed during duties, parking lot accidents, notifies fire department or ambulance services in case of emergency, maintains public safety within the store.
• Reports unsafe conditions inside and outside of the store to management.
• Reports any internal theft suspicions and observations to Loss Prevention Area Manager.
• Accurately completes all incident reports.
• Assists Loss Prevention with investigations.
• Reports to work when scheduled and works expected number of hours.
• Maintains attendance, dress code and grooming standards according to set guidelines.
• Ensures operation of equipment by completing preventive maintenance requirements, following manufacturer’s instructions, troubleshooting malfunctions and calling for repairs.
• Makes recommendations to Directors regarding loss prevention best practices.
• Attends and participates in store security-related meetings.
• Adheres to Hy-Vee's policies, procedures and individual store guidelines; maintains high ethical standards.

Retail Security Officer

• Provides prompt, efficient and friendly customer service by maintaining a safe and secure store environment for customers and employees.
• The retail security officer patrols and monitors premises, and, if needed, apprehends theft suspects in compliance with Hy-Vee's standards and guidelines.
• Exhibiting respect, concern and patience in all customer and employee interactions.
• Monitors the store property, as well as customer and employee activities, for potential theft of assets or damage to assets on Hy-Vee's property.
• Takes appropriate action to prevent theft; apprehends individuals engaged in theft activity.
• Contacts and coordinates with local law enforcement regarding known offenders or suspicious persons observed during duties, parking lot accidents, notifies fire department or ambulance services in case of emergency, maintains public safety within the store.
• Reports unsafe conditions inside and outside of the store to management.
• Reports any internal theft suspicions and observations to Loss Prevention Area Manager.
• Accurately completes all incident reports.
• Assists Loss Prevention with investigations.

• Find new and creative ways to break technology through either Red Team or Purple Team operations
• Plan, scope, and implement large scale covert operations that have sophisticated goals and significant impact
• Develop new adversary tools, techniques, or methodologies
• Threat Hunting opportunities to partner with the teams Threat Hunters, using our special adversarial talents to discover and eradicate threats
• Engagement in all phases of Red Team security operations
• Work within the Red Team to perform physical exploitation, network exploitation and social engineering assessments against authorized targets
• Perform network reconnaissance and open-source intelligence gathering
• Configure and safely utilize attack tools, tactics, and procedures against authorized targets
• Develop scripts, tools, or methodologies to enhance red teaming capabilities
• Effectively communicate findings and strategy to client stakeholders including technical staff, executive leadership, and legal counsel
• Provide risk-appropriate and pragmatic recommendations to correct identified flaws, vulnerabilities and misconfigurations

Senior Penetration Testing – Red Team

• Join a high-impact security engineering team at the forefront of enterprise cryptography, where you’ll design, build, and scale critical encryption and key management solutions that protect some of the organization’s most sensitive data.
• Work across Linux, Windows, and automation frameworks to harden systems, optimize performance, and drive secure architecture forward—while partnering with engineering and operations teams to deliver resilient, scalable solutions.
• Actively mentor and develop team members by providing technical guidance, sharing best practices, and fostering a culture of continuous learning and security excellence.

Lead Security Encryption Engineer

Senior Red Operation, Team Penetration Testing Analyst

• Support security control assessment activities
• Gather and organize assessment evidence
• Document security control implementation
• Conduct security testing and evaluations
• Assist with vulnerability scans and analysis
• Create of assessment reports and briefings
• Maintain assessment documentation and tracking sheets
• Lead security control interviews
• Prepare assessment deliverables
• Applying NIST security controls and frameworks
• Support continuous monitoring activities
• Assist with security documentation review
• Contribute to Plans of Action and Milestones (POA&Ms) development
• Participate in team meetings and technical discussions

Security Control Assessor

• Lead onboarding and migration of applications onto Akamai CDN and WAF platforms.
• Configure, maintain, and support Akamai edge security and content delivery services.
• Implement and tune WAF policies, security controls, caching rules, and traffic management configurations.
• Work closely with application, network, cloud, and security teams to ensure secure and optimized application delivery.
• Troubleshoot complex Layer 1–7 issues involving DNS, TLS/SSL, HTTP/HTTPS, CDN behavior, caching, and origin connectivity.
• Support production incidents, root cause analysis, and operational escalations.
• Participate in on-call rotation and support maintenance activities during off-hour change windows.
• Develop technical documentation, runbooks, operational procedures, and audit artifacts.
• Collaborate with vendors and internal stakeholders on application onboarding and security initiatives.
• Support security assessments, audits, remediation activities, and compliance requirements.
• Provide technical guidance and mentoring to engineering teams.

WAF/CDN Security Architect

• Own a meaningful slice of our defensive infrastructure end-to-end.
• Design, execute, and follow through on security awareness programs and phishing simulations.
• Participate in Endpoint Detection & Response rollout and ongoing operations.
• Revamp our network protections for Zero Trust network access and DNS security.
• Manage and operate our EASM platform, including continuous monitoring, finding triage, and remediation coordination.
• Coordinate with our third-party penetration testing partner for scoping, logistics, findings review, and remediation tracking.
• Monitor and respond to security alerts across our stack — SIEM, EDR telemetry, and related tooling.
• Own relevant SOC 2 controls and participate in vendor evaluations, new tooling assessments, and ad hoc projects.

• Support the design, implementation, and operation of security controls across endpoints, networks, cloud, and identity
• Partner closely with Security Operations, Infrastructure, and Application teams to reduce risk, respond to threats, and improve security posture
• Help define, implement, and maintain secure Azure configurations and guardrails
• Support cloud security posture management (CSPM) improvements by reviewing findings, validating risk, and partnering with engineering teams on remediation
• Assist in managing Azure Web Application Firewall (WAF) policies, including rule tuning, exception handling, and change coordination
• Support Azure Front Door configurations and security controls, including routing rules, TLS/certificate considerations, and integration with WAF policies
• Monitor and investigate cloud security alerts and signals
• Contribute to vulnerability management in cloud workloads by helping prioritize fixes
• Work with application and platform teams to enable secure deployment patterns
• Assist with incident response activities involving cloud services by gathering evidence
• Maintain clear documentation for cloud security configurations, standards, and operating procedures
• Assist with security assessments for third parties and new technologies.

Associate Cloud Security Engineer

• Own and operate application security tooling, including SAST, DAST, and software composition analysis, ensuring tools are tuned, effective, and aligned to business risk
• Embed application security into CI/CD pipelines and development workflows to support shift‑left security while minimizing developer friction
• Perform secure code reviews and validate vulnerabilities for exploitability, impact, and remediation feasibility
• Define and maintain secure coding standards, guidance, and reusable security patterns for development teams
• Establish guardrails and review expectations for AI‑assisted and AI‑generated code, reducing unowned and unmanaged application risk
• Partner with development teams to triage findings, reduce false positives, and drive effective remediation
• Apply risk‑based decision making aligned to organizational risk appetite and compliance frameworks (NIST, HIPAA, SOC 2)
• Support application threat modeling and identification of architectural security gaps
• Collaborate with cloud, platform, and identity teams to ensure applications integrate securely with enterprise services
• Contribute to audit readiness, evidence collection, and regulatory support related to application security controls
• Reduce single‑points‑of‑failure by documenting processes, mentoring others, and improving program resiliency

Senior Applications Security Engineer

• Develop, train and monitor best security practices including application, infrastructure, and endpoint security, vulnerability management, system configuration, and monitoring.
• Build and monitor security tools - EDR, SIEM, DLP, CASB, ZTNA
• Identify and drive remediation of high-impact vulnerabilities across the corporate attack surface
• Define and enforce secure configuration baselines across macOS, Windows, Linux, and mobile device fleets
• Partner with IT to build security into device provisioning, identity lifecycle, and offboarding workflows
• Conduct threat hunting exercises to identify new risks
• Incident detection and response - from triage through containment, eradication, forensics, and post-mortem
• Conduct security reviews for new corporate tooling, vendor integrations, and IT infrastructure changes
• Establish metrics and reporting that reflect real security posture
• Assist with security and compliance audits.

Senior Corporate Security Engineer

• Provide legal advice to the organization on complex legal issues for artificial intelligence (AI), privacy and cybersecurity, as well as serving as the primary attorney for AI guidance and governance.
• Provide guidance within assigned practice area(s) to in-house constituents.
• Work on complex legal issues where analysis requires identification and evaluation of multiple factors.
• Manage legal matters provided to a number of in-house constituents within practice area(s).
• Exercise independent judgment regarding legal advice with limited supervision of more senior attorneys.
• Negotiate discrete disputes within practice area(s).
• Review and draft documents and templates within practice area(s).
• Serve as the primary legal advisor for enterprise AI guidance and governance, counseling on responsible AI, AI risk management, and legal/regulatory compliance across the AI lifecycle (use case intake, development, procurement, deployment, monitoring, and retirement).
• Advise on AI-related risk issues, including automated decision-making, bias/fairness, transparency/notice, explainability, human oversight, and consumer disclosures, and help establish legally appropriate guardrails.
• Negotiate and advise on contracts and provisions related to AI, privacy, and cyber security, including AI and cloud services, software licensing, data processing agreements, and AI development contracts.
• Develop and maintain guidance and governance documentation related to AI, privacy, and cyber security, including policies, standards, procedures, frameworks, playbooks, and approval workflows for AI and privacy use cases.
• Conduct legal research, monitor, review and analyze proposed legislation, assess applicability and operational impacts, and assist business in understanding the requirements and impact.
• Coordinate legal matters handled by outside counsel.
• May provide input into the selection of outside counsel from preselected counsel list.
• Participate in and may lead departmental and cross-functional working groups in identified areas of legal expertise or development.
• May manage and/or mentor junior attorneys or paralegals and help scale legal support for AI, privacy and cybersecurity legal reviews and governance.

Senior Counsel – AI, Privacy & Security

• Drive end to end execution of security assessments that include: Creating assessment questionnaires
• Conduct kickoffs, review assessment responses, and identify risks/control gaps from a risk management perspective
• Perform risk scoring exercise and maintain risks in the risk register
• Track implementation (and adherence) of security requirements across engineering groups/teams
• Collaborate with partner teams to build continuous monitoring capabilities/reports for security requirements
• Validate compliance to security requirements and drive compliance sign off process for upcoming releases
• Coordinate with partner teams on security scope and finalize implementation requirements
• Support strategy and roadmap development for existing and emerging cybersecurity certification and/or regulatory requirements for internal/external audit needs
• Support risk management process enhancements
• Support the development and ongoing maintenance of Standard Operating Procedures (SOPs)
• Work with assigned groups to ensure security compliance
• Create and maintain risk dashboards using Power BI or similar tools and report to leadership
• Socialize risks/control gaps with service owners
• Support certification and audit preparation efforts for internal and external regulatory requirements.
• Drive execution of Security Compliance frameworks (NIST, SDLC, etc.)

Project Manager – Compliance Security Assessments

• Provide security Incident Response (IR) services for customers
• Advise on and deploy security technical solutions
• Perform internal and external security assessments
• Lead Incident Response cases from beginning to end
• Perform forensic analysis during cybersecurity incident responses
• Manage projects as HBS is awarded with many large projects

Information Security Engineer

• YOU will implement security improvements by assessing current customer requirements and environment; evaluating trends; developing security architecture and requirements, and design architecture artifacts, plans, and policies.
• YOU will support and develop Risk Management Framework (RMF) assessment documentation and conduct cybersecurity controls validation testing resulting in the Authorization to Operate (ATO) decision.
• YOU will perform analysis on cybersecurity collected data and test results.
• YOU will conduct cybersecurity audits and perform compliance evaluations to ensure appropriate implementation and continuous compliance of the security posture of the product system.
• YOU will collaborate with engineering disciplines to minimize cybersecurity threats to the deployed designs/products.

See all jobs on JobTailor

Retail Security Officer

Retail Security Officer

Senior Penetration Testing – Red Team

Lead Security Encryption Engineer

Senior Red Operation, Team Penetration Testing Analyst

Security Control Assessor

WAF/CDN Security Architect

Security Engineer

Associate Cloud Security Engineer

Senior Applications Security Engineer

Senior Corporate Security Engineer

Senior Counsel – AI, Privacy & Security

Project Manager – Compliance Security Assessments

Information Security Engineer

Principal Cybersecurity Engineer – Onsite