Security Engineer

• Owns and manages the development of InfoSec engineering designs and implementation.
• Identifies security issues and risks and develops mitigation plans in accordance with standards for cloud implementations.
• Architect, design, implement, support, and evaluate security-focused tools and services.
• Oversee assessment and mitigation of system security threats/risks throughout the program life cycle.
• Implements security designs—including hardware, software, data, and procedures—and verifies compliance with security requirements.
• Support the implementation and maintenance of secure cloud environments while working closely with engineering, development, and program teams.
• Contribute to strengthening the overall security posture of cloud-based systems by supporting security engineering activities, implementing security controls, and ensuring compliance with applicable federal and DoD cybersecurity standards.

Cloud Information Systems Security Engineer II

• Architect and lead the implementation of an Integrated Management System (IMS)
• Manage cross-functional projects for compliance certifications
• Lead annual and ad-hoc risk assessments
• Author and maintain enterprise-level security policies

Senior Security Engineer

• Use your deep technology and security expertise to lead strategic conversations and demonstrate the value of Workday’s platform.
• Translate complex technical and risk concepts into clear business outcomes for both technical and non-technical stakeholders across healthcare, higher education, and state and local government organizations.
• Lead discussions on Workday’s SaaS architecture with a particular emphasis on security, cybersecurity controls, identity and access management, data protection, disaster recovery and business continuity, and data privacy and compliance (including HIPAA and the protection of PHI/PII).
• Articulate how Workday’s integration frameworks, analytics, and AI/ML capabilities support secure, compliant, and resilient operations.
• Deliver high-impact presentations that show how Workday’s architecture and delivery model help customers strengthen their security posture, reduce risk, and achieve better business outcomes.
• Build trusted relationships with CIOs, CISOs, security and compliance leaders, enterprise architects, and business executives.
• Mentor others by sharing best practices and repeatable patterns from your customer engagements.
• Provide expert guidance to sales and deal teams on how to differentiate with Workday technology from a security, resiliency, and compliance perspective, including alignment to relevant industry standards and frameworks.

Senior/Principal Enterprise Architect – Security

• Provide multi-discipline security support for one or more of the customer’s Special Access Programs (SAPs)
• Provide “day-to-day” multi-discipline analysis for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities
• Ensure strict adherence to the provisions of the NISPOM, its Supplement, the DoD Overprint, DCID, ICD, and SAP policy
• Assist in developing and executing approved policies and procedures for safeguarding Special Access Program (SAP), Sensitive Compartmented Information (SCI) and collateral data in support of US military operations
• Provide day-to-day security support that includes continuous assessment of procedures to identify shortfalls and provide appropriate recommendations for revising and improving security policies, procedures, and systems
• Identify vulnerabilities, threats, and risks to test, training, and operational activities
• Assist in developing, implementing, and training the Operations Security program
• Assist in providing contractor and subordinate facility assistance and oversight
• Brief all levels of personnel, both in the government and senior civilian services, on a variety of security related topics
• Conduct and document SAP facility compliance reviews, follow-on facility reviews, and facility close-outs

Program Security Representative, I

• Responsible for assessing and monitoring system compliance, auditing, security plan development, and delivering information systems security education and awareness.
• Assists in investigating information system security violations and preparing reports specifying corrective and preventative actions.
• Responsible for reviewing and approving configuration management requests within delegated authority, conducting technical and administrative security assessments, and performing security sustainment activities including hardware and software change management, account management, media protection, and file transfer reviews.
• Support the integration of new cybersecurity processes, procedures, and tools, assists with the creation and maintenance of cybersecurity documentation, and ensures audit records are collected and analyzed in accordance with approved security plans.
• Develop, update, and/or review Risk Management Framework (RMF) documentation to include the System Security Plan (SSP), Security Control Traceability Matrix (SCTM), Plan of Action and Milestone (POA&M), Risk Assessment Report (RAR), as assigned by the ISSM.

Information System Security Officer, eWAN

• Lead, mentor, and develop a team of penetration testers, fostering strong technical depth, hands-on expertise, and continuous skill development across application, network, and cloud domains.
• Own and evolve the penetration testing program, including methodologies, tooling, quality assurance practices, reporting standards, and risk-based prioritization of testing activities.
• Drive delivery of high quality, hands on testing across enterprise applications, APIs, infrastructure, and cloud environments, ensuring assessments are technically rigorous and aligned to real-world exploitability.
• Establish and enforce engineering-centric testing standards, ensuring consistency, reproducibility, and depth across both internal and third-party executed assessments.
• Oversee and coordinate testing performed by external providers, including scoping, execution expectations, and technical validation of results to ensure quality and accuracy.
• Ensure regulator and audit ready outputs, including clear documentation, evidence-based findings, and reporting that ties technical vulnerabilities to business and risk impact.
• Partner with engineering, infrastructure, and architecture teams to drive effective remediation, validate fixes, and improve secure design and development practices.
• Integrate emerging technologies and techniques into the program, including AI/LLM-focused testing approaches and assurance of enterprise AI deployments (e.g., prompt injection, model abuse, data exposure).
• Track, analyze, and communicate program metrics, including coverage, risk trends, vulnerability recurrence, and remediation performance, providing clear insights to senior leadership.
• Continuously improve program maturity, balancing technical depth with scalability, consistency, and alignment to evolving threats, technologies, and regulatory expectations.

Penetration Testing Manager

• Provide multi-disciplined security support to a customer’s facility and organization
• Classification reviews of inbound and outbound correspondence
• Assist in maintaining a document accountability database and associated correspondence
• Process inbound and outbound classified mail and receipt records
• Perform destruction of classified materials
• Maintain various daily logs for document control
• Conduct entry and exit inspections
• Assist with researching, processing, filing, and maintaining inbound and outbound visit notices
• Maintain personnel security files

Activity Security Representative II

• Check identification of all visitors, and ensure all are sponsored and properly cleared via JPAS or a local database
• Determine visitor’s need to enter the building, log visitors in, issue visitor badges and notify hosts of visitor arrivals
• Ensure visitors are not introducing any prohibited items (cell phones, pagers, jump drives, PDAs, etc)
• Perform and/or assist government employees with inspecting bags and hand-carried items
• Receive packages from outside agencies (UPS, Fed Ex, etc) and distribute in accordance with facility standard operating procedures
• Check assigned personnel and ensure they have and are displaying authorized access badges
• Perform emergency procedures for bomb threat, active shooter, force protection, Anti-Terrorism, fire evacuation and other emergency situations in accordance with emergency procedures checklists
• Account for all logs, instructions, equipment and badges at the beginning and end of each scheduled work day
• Assist with personnel, information, program security and entry control functions
• Denies introduction of prohibited materials such as explosives, weapons, electronic devices, or other items specified by the Accrediting Official (AO) or designee
• Conducts random inspections of all site areas to ensure no prohibited materials have been brought on to the site
• Ensures that all suspicious materials or incidents be brought to the attention of the site security manager (SSM) or construction surveillance technician (CST)
• Maintains control and operates in Secure Storage Area (SSA) established by the assigned construction company within the construction site footprint where they will store construction materials and equipment that will be used for the project
• Screens all non-cleared workers, vehicles, and equipment entering or exiting the project site
• Follow and enforce customers’ Standard Operating Procedures (SOP)
• Perform miscellaneous administrative support functions as directed by the contractor site lead and/or the Senior Security Representative
• Shall conduct inspections of materials being delivered for utilization in construction of secure spaces and document the results of findings

Security Administration – Visitor Control

• Check identification of all visitors, and ensure all are sponsored and properly cleared via DISS or a local database
• Determine visitor’s need to enter the building, log visitors in, issue visitor badges and notify hosts of visitor arrivals
• Ensure visitors are not introducing any prohibited items (cell phones, pagers, jump drives, PDAs, etc.)
• Perform and/or assist government employees with inspecting bags and hand-carried items
• Receive packages from outside agencies (UPS, Fed Ex, etc.) and distribute in accordance with facility standard operating procedures
• Check assigned personnel and ensure they have and are displaying authorized access badges
• Perform emergency procedures for bomb threat, active shooter, force protection, Anti-Terrorism, fire evacuation and other emergency situations in accordance with emergency procedures checklists
• Account for all logs, instructions, equipment and badges at the beginning and end of each scheduled work day
• Assist with personnel, information, program security and entry control functions
• Denies introduction of prohibited materials such as explosives, weapons, electronic devices, or other items specified by the Accrediting Official (AO) or designee
• Conducts random inspections of all site areas to ensure no prohibited materials have been brought on to the site
• Ensures all suspicious materials or incidents be brought to the attention of the site security manager (SSM) or construction surveillance technician (CST)
• Maintains control and operates in Secure Storage Area (SSA) established by the assigned construction company within the construction site footprint where they will store construction materials and equipment that will be used for the project
• Screens all non-cleared workers, vehicles, and equipment entering or exiting the project site
• Follow and enforce customers’ Standard Operating Procedures (SOP)
• Perform miscellaneous administrative support functions as directed by the contractor site lead and/or the Senior Security Representative
• Shall conduct inspections of materials being delivered for utilization in construction of secure spaces and document the results of findings

• Responsible for supporting the design, implementation, and oversight of Product Secure Development Lifecycle.
• Including aspects such as security requirements, secure architecture/design, risk assessment, threat models, security scanning, triage and vulnerability management, and product security validation/verification.
• Administers product security practices to product teams, technology, and security champions across the organization.
• Drive Product Security efforts to resolve challenges, enable automation, and impact organization security culture.
• Monitors information security best practices, standards, regulations, industry threats and risks for improvements to product security practices.
• Maintains a deep understanding of current issues in the realm of information security.
• Evaluates vulnerability impact and formulates and executes risk mitigation plans for product security.
• Member of the AspenTech Security Emergency Response Team (ASERT) providing expert analysis of security customer reported security incidents.
• Works with information resource owners during and after security incidents; work with product teams for analysis; recommends best practices and solutions.

Principal Product Security Engineer

• Interact with the customer to define SSE requirements, solutions, trades, costs, implementation, system impacts, and effectiveness
• Develop plans and estimates, task execution, project tracking, reporting, and risk identification and mitigation plans
• Ensure compliance with National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) controls
• Consult and assist program management with SSE architecture and issues
• Support the development of bids and proposals
• Define security development and test efforts implementation of security controls of networking devices, databases, operating systems, and hardware and software component
• Integrate cybersecurity development activities
• Develop top-level system requirements and flow down requirements and implementation concepts to subsystem Understanding, and compliance with, DoD technology release and export licensing policies

Principal Systems Security Engineer – Cyber

• Design, develop, and deploy Policy-Based Access Control (PBAC) policies to enable fine-grained and dynamic authorization
• Work closely with business, security, and application teams to understand business requirements and translate them into scalable, secure authorization policies
• Author, test, deploy, and manage policies in PBAC platforms; experience with PlainID is highly preferred
• Lead policy lifecycle management, including documentation, versioning, change tracking, and governance
• Diagnose and resolve issues with existing authorization policies and implementations, improving stability and performance
• Design and integrate authorization solutions using RESTful APIs
• Work extensively with SQL, including schema design, DDL operations, and data analysis to support IAM use cases
• Deploy, manage, and support IAM workloads on Azure infrastructure, with strong hands-on experience in Azure Kubernetes Service (AKS)
• Demonstrate a solid understanding of networking concepts, including secure API communication, authentication flows, and cloud networking fundamentals
• Implement secure DevOps practices using GitHub, GitHub Actions, and CI/CD pipelines for policy and application deployments
• Develop PowerShell and shell scripts to automate IAM processes, enhance operational efficiency, and reduce manual effort
• Ensure all IAM and authorization solutions align with organizational security standards, compliance requirements, and best practices

Senior Cybersecurity Engineer

Principal Systems Security Engineer – Anti-Tamper, Program Protection

• Leading and mentoring a team of threat intelligence analysts and security researchers
• Defining research priorities and intelligence strategy aligned with Akamai's security mission
• Driving cross-functional collaboration across security operations, product engineering, and executive leadership
• Translating complex threat intelligence into actionable insights for customers, product teams, and leadership

Senior Manager, Information Security

• Partner with engineering and other cross-functional teams (cloud, console, pump, etc.) to drive successful adherence to J&J Heart Recovery's product security program.
• Deliver documentation for pre-market development activities including security plans, architecture and data flow diagrams, threat models, requirements, SBOM, and risk documentation.
• Define and implement key management infrastructure (PKI, HSMs, TPMs, and secure enclave integration) for device identity, authentication, and software signing.
• Monitor and drive post-market vulnerability management activities, with adherence to strict timelines.
• Support compliance certification activities, such as SOC2, FedRAMP, ISO 27001, etc.
• Identify, research, evaluate, and integrate new compliance requirements and industry standards/trends into the product security program.
• Guide teams to make decisions that balance business needs with security objectives.

Lead Product Security Engineer

• Deliver compelling technical presentations and live demonstrations of Tenable Enterprise products
• Manage enterprise software trials and Proof of Concept evaluations, mapping unique business values with customer business objectives
• Answer technical questions and provide consultative guidance on security best practices, compliance frameworks, and risk management
• Apply advanced technical skills to demonstrate the value and impact of Tenable’s solutions in solving real-world customer challenges
• Maintain and strengthen relationships with existing customers, while identifying and cultivating new strategic opportunities
• Present thought leadership content and represent Tenable at industry events, executive briefings, and customer-facing sessions
• Leverage strategic technical selling skills to engage key stakeholders, from engineers to CISOs, and influence decision-making
• Travel as needed (typically around 25%) to support key customer engagements, critical sales opportunities, and high-impact cybersecurity events
• Collaborate cross-functionally with product management and engineering to surface customer feedback and prioritize critical customer use cases
• Help shape future innovations by identifying gaps and contributing ideas for new product features and capabilities
• Deliver clear status reports for Proofs of Value (POVs) and active opportunities; this data is mission-critical for forecasting business health and ensuring alignment with territory and organizational growth goals
• Meet with prospective clients to discover what their biggest security challenges and highest priority business drivers are

Security Engineer – PreSales

• Partner with engineering and other cross-functional teams (cloud, console, pump, etc.) to drive successful adherence to J&J Heart Recovery's product security program.
• Deliver documentation for pre-market development activities including security plans, architecture and data flow diagrams, threat models, requirements, SBOM, and risk documentation.
• Define and implement key management infrastructure (PKI, HSMs, TPMs, and secure enclave integration) for device identity, authentication, and software signing.
• Monitor and drive post-market vulnerability management activities, with adherence to strict timelines.
• Support compliance certification activities, such as SOC2, FedRAMP, ISO 27001, etc.
• Identify, research, evaluate, and integrate new compliance requirements and industry standards/trends into the product security program.
• Guide teams to make decisions that balance business needs with security objectives.
• Thinks across organizational boundaries and empathizes with customers, both internal and external.
• Perform other related duties and responsibilities, as assigned.

• Monitor Azure cloud infrastructure for potential threats using SOC tools and technologies.
• Respond to Level 2 security incidents, coordinate with relevant teams to mitigate risks, and ensure timely resolution of security issues.
• Conduct detailed investigations in Aras SaaS of complex security incidents to determine root causes.
• Develop and refine SOC detection mechanisms in Azure.
• Collaborate with Product Security and Global Cloud Services teams to enhance overall security posture.
• Develop scripts or tools to automate response and mitigation processes.

Product Security Engineer

• Provide multi-disciplined security support to the customer’s facility and organization
• Process inbound and outbound classified mail and maintain associated correspondence
• Conduct entry and exit inspections and escort facility visitors
• Maintain personnel security files and assist with security awareness programs

Activity Security Representative – III

• Lead all facility-related responsibilities and security operations across the organization
• Oversee facility management, leasing, and compliance
• Manage personnel clearances, secure facilities, and physical security programs
• Ensure compliance with all government security requirements and regulations
• Conduct regular security assessments and implement improvements

See all jobs on JobTailor

Cloud Information Systems Security Engineer II

Senior Security Engineer

Senior/Principal Enterprise Architect – Security

Program Security Representative, I

Information System Security Officer, eWAN

Penetration Testing Manager

Activity Security Representative II

Security Administration – Visitor Control

Security Administration – Visitor Control

Principal Product Security Engineer

Principal Systems Security Engineer – Cyber

Senior Cybersecurity Engineer

Principal Systems Security Engineer – Anti-Tamper, Program Protection

Senior Manager, Information Security

Lead Product Security Engineer

Security Engineer – PreSales

Lead Product Security Engineer

Product Security Engineer

Activity Security Representative – III

Facility Security Officer