Security Engineer

• Advise on and assess the security posture of AI/ML systems, including LLMs, GenAI pipelines, and model serving infrastructure
• Lead threat modeling exercises specific to AI workloads
• Advise internal teams on securely integrating SaaS AI services and APIs
• Evaluate and recommend controls for data ingestion pipelines, RAG architectures, and vector databases
• Serve as a trusted security advisor bridging business stakeholders, AI/ML engineers, IT operations, and information security teams
• Continuously track emerging AI security research, adversarial techniques, regulatory developments, and vendor security advisories
• Produce and maintain security architecture documentation, risk assessments, control frameworks, and guidelines tailored to the organization's AI environment
• Contribute to the development of a long-term AI security strategy
• Develop and deliver training and awareness content for technical and non-technical stakeholders on AI-specific risks

AI Security Engineer

• Participate in Governance Program Development
• Collaborate with team members to gather input and communicate project status to senior leadership across IT and Finance.
• Support the creation and refinement of governance processes that are repeatable and scalable.
• Assist in evaluating projects for potential SOX impacts by reviewing scope, objectives, and planned changes.
• Help track the completion of required deliverables throughout the project lifecycle.
• Contribute to readiness assessments for project launches, ensuring all compliance requirements are met.
• Work with team members to efficiently assess ongoing projects for changes that may affect SOX controls.
• Help identify and document the volume and risk associated with these changes.
• Support the preparation and organization of necessary documentation for external auditors, both before and after project launches.
• Ensure that all required materials are complete, accurate, and submitted on time.
• Engage with external specialists as needed to support large or complex projects with high-risk control concerns.
• Facilitate effective communication and coordination between internal teams and third-party experts.
• Identify opportunities to enhance governance processes and reduce the risk of control gaps.
• Participate in team discussions to share best practices and lessons learned.

Lead Cybersecurity, SOX Governance

• Production Pilots (Design & Execution)
• Partner with internal teams and Application teams to design, plan, execute, and assess production quantum security pilots across all layers of the technology stack.
• Infrastructure Scaling
• Coordinate with multiple teams (network, cryptography, optical, and adjacent domains) to scale successful quantum security infrastructure pilots globally, including solutions spanning PKI, symmetric cryptography (AES), MACsec, IPsec, and related controls.
• Enterprise Application Rollout
• Drive enterprise‑wide rollout of proven quantum security application‑layer solutions in partnership with CIOs and application teams across all lines of business for critical enterprise applications.
• R&D and Proof‑of‑Concept Support
• Provide sustained technical leadership during R&D and PoC phases, including solution design, experimental implementation, testing, and invention across multiple technology layers.
• Act as an advisor to leadership to develop or influence security solutions for applications, network, information security, database, operating systems, or web technologies for highly complex business and technical needs across multiple groups
• Lead the strategy and resolution of highly complex and unique security challenges requiring in-depth research and evaluation across multiple areas of the enterprise, delivering quantum security solutions that are long-term, large-scale and require vision, creativity, innovation, advanced analytical and inductive thinking.
• Translate advanced technology experience, an in-depth knowledge of the organizations tactical and strategic business objectives, the enterprise technological environment, the organization structure, and strategic technological opportunities and requirements into technical engineering solutions.
• Provide vision, direction, and expertise to leadership on implementing innovative and significant security and data protection solutions.
• Maintain knowledge of industry best practices and new technologies and recommends innovations that enhance security operations and posture or provide a competitive advantage to the organization.
• Strategically engage with all levels of professionals and managers across the enterprise and serve as an expert advisor to leadership.
• Demonstrate proficiency in using AI‑assisted development and analysis tools (e.g., GitHub Copilot and approved code‑centric agents).
• Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting.
• Apply strong technical judgment when validating and integrating AI‑assisted outputs into solutions.
• Understand and account for model limitations, security risks, and operational considerations.
• Apply AI responsibly in development and production environments.
• Ensure AI usage aligns with security, compliance, privacy, and ethical standards.

Principal Engineer – Quantum Security

• Lead, mentor, and develop a team of penetration testers, fostering strong technical depth, hands-on expertise, and continuous skill development across application, network, and cloud domains.
• Own and evolve the penetration testing program, including methodologies, tooling, quality assurance practices, reporting standards, and risk-based prioritization of testing activities.
• Drive delivery of high quality, hands on testing across enterprise applications, APIs, infrastructure, and cloud environments, ensuring assessments are technically rigorous and aligned to real-world exploitability.
• Establish and enforce engineering-centric testing standards, ensuring consistency, reproducibility, and depth across both internal and third-party executed assessments.
• Oversee and coordinate testing performed by external providers, including scoping, execution expectations, and technical validation of results to ensure quality and accuracy.
• Ensure regulator and audit ready outputs, including clear documentation, evidence-based findings, and reporting that ties technical vulnerabilities to business and risk impact.
• Partner with engineering, infrastructure, and architecture teams to drive effective remediation, validate fixes, and improve secure design and development practices.
• Integrate emerging technologies and techniques into the program, including AI/LLM-focused testing approaches and assurance of enterprise AI deployments (e.g., prompt injection, model abuse, data exposure).
• Track, analyze, and communicate program metrics, including coverage, risk trends, vulnerability recurrence, and remediation performance, providing clear insights to senior leadership.
• Continuously improve program maturity, balancing technical depth with scalability, consistency, and alignment to evolving threats, technologies, and regulatory expectations.

Penetration Testing Manager

• Partner with CIOs, senior leadership, and technology stakeholders to assess and communicate cybersecurity risk in business terms.
• Serve as the primary cybersecurity advisor to the business, interpreting enterprise policies and providing actionable guidance.
• Identify, assess, and document security risks across products, applications, and third-party relationships.
• Deliver executive-level risk dashboards and metrics that provide transparency into the business’s security posture.
• Collaborate with the broader Cybersecurity and Risk organizations to ensure security strategies are pragmatic, risk-based, and aligned with both business priorities and technical capabilities.
• Promote awareness of regulatory and industry obligations through targeted training and awareness campaigns.
• Ensure security risk and controls assessments are conducted at appropriate intervals based on evolving threats and business changes.
• Guide technology teams in adopting enterprise cybersecurity tools, capabilities, and controls.

Cybersecurity, Technology Risk Officer

• Partner with engineering and other cross-functional teams (cloud, console, pump, etc.) to drive successful adherence to J&J Heart Recovery's product security program.
• Deliver documentation for pre-market development activities including security plans, architecture and data flow diagrams, threat models, requirements, SBOM, and risk documentation.
• Define and implement key management infrastructure (PKI, HSMs, TPMs, and secure enclave integration) for device identity, authentication, and software signing.
• Monitor and drive post-market vulnerability management activities, with adherence to strict timelines.
• Support compliance certification activities, such as SOC2, FedRAMP, ISO 27001, etc.
• Identify, research, evaluate, and integrate new compliance requirements and industry standards/trends into the product security program.
• Guide teams to make decisions that balance business needs with security objectives.

Lead Product Security Engineer

• Partner with engineering and other cross-functional teams (cloud, console, pump, etc.) to drive successful adherence to J&J Heart Recovery's product security program.
• Deliver documentation for pre-market development activities including security plans, architecture and data flow diagrams, threat models, requirements, SBOM, and risk documentation.
• Define and implement key management infrastructure (PKI, HSMs, TPMs, and secure enclave integration) for device identity, authentication, and software signing.
• Monitor and drive post-market vulnerability management activities, with adherence to strict timelines.
• Support compliance certification activities, such as SOC2, FedRAMP, ISO 27001, etc.
• Identify, research, evaluate, and integrate new compliance requirements and industry standards/trends into the product security program.
• Guide teams to make decisions that balance business needs with security objectives.
• Thinks across organizational boundaries and empathizes with customers, both internal and external.
• Perform other related duties and responsibilities, as assigned.

• Lead all facility-related responsibilities and security operations across the organization
• Oversee facility management, leasing, and compliance
• Manage personnel clearances, secure facilities, and physical security programs
• Ensure compliance with all government security requirements and regulations
• Conduct regular security assessments and implement improvements

Facility Security Officer

• Partner with Security Compliance Regulatory Affairs to execute a unified security regulatory strategy that balances long-term global trends with Twilio’s immediate operational needs.
• Monitor, identify, and prioritize new and evolving cybersecurity regulations (including telecom-specific mandates); translate complex requirements into actionable business impacts.
• Manage weekly compliance-focused operating rhythm, triaging regulatory developments and escalating critical security risks to senior leadership.
• In partnership with cyber legal counsel, define the "scope of applicability" for new regulations to ensure Twilio’s responses and decisions are precise, efficient, and aligned with how we actually build products.
• Collaborate with Go-To-Market teams to leverage Twilio’s security compliance posture as a differentiator, identifying opportunities to drive revenue through trust.
• Project manage non-security stakeholders to ensure the timely collection of evidence, support, and information required for successful regulatory filings and audits, working closely with the Security Compliance Regulatory Affairs team to facilitate and align on response.

Senior Security Regulatory Compliance Manager

• Lead investigation and response activities for confirmed and escalated cyber security incidents in accordance with established playbooks and service level targets.
• Perform analysis of suspicious activity across endpoint, network, identity, email, cloud, application, and system log sources.
• Analyze, investigate, and correlate data from SIEM/SOAR, EDR, firewall, proxy, intrusion detection/prevention, email security, and other monitoring platforms to drive accurate incident response.
• Document investigations, findings, actions taken, and escalation details in the case management system with clear, complete, and timely notes.
• Create full summary reports of events of interest to drive after action and lessons learned activities.
• Follow shift handoff procedures and communicate open issues, emerging threats, and significant events to team members and incident handlers.
• Contribute to continuous improvement by identifying recurring false positives, process gaps, and opportunities to improve alert quality, runbooks, and analyst efficiency and perform live response activities, including remote and onsite system analysis and evidence collection.
• Drive containment, eradication, and recovery actions in coordination with infrastructure and technology teams.
• Collaborate with Tier 1 analysts to improve detection and response capabilities and provide guidance on escalation quality and partner with security engineering teams to ensure effective operation and tuning of security tools and detection capabilities.

Cybersecurity Incident Responder

• The Principal Consultant, acting as a technical advisor, is tasked with developing, mentoring, and training the Professional Services team, including overseeing their onboarding and maintaining up to date expertise on service offerings.
• This role supports Delivery Management and Resource Management in achieving delivery Theatre objectives and revenue targets, while also handling client escalations by liaising between the delivery team and other Tenable functions.
• Additionally, the Principal Consultant focuses on advancing Tenable Subk partners through training and certification onboarding and seeks opportunities to enhance the Professional Services structure through training tutorials and the creation of new methodologies.
• This role also includes some client billable work, shared with the responsibilities outlined.

Principal Security Consultant

• Support the design, build, and maintenance of SAP security and authorization concepts across ECC and SAP S/4HANA systems
• Design and maintain SAP roles in accordance with GxP, SOX, and Genmab internal control frameworks
• Perform SAP user administration including provisioning, de-provisioning, emergency access, and periodic access reviews
• Configure, support, and operate SAP GRC and Pathlock solutions for access control and segregation of duties monitoring
• Support SAP S/4HANA and SAP Fiori security, including catalogs, groups, and roles
• Support security integration with SAP bolt-on applications such as BlackLine
• Participate in internal and external audits by preparing evidence, reports, and explanations related to SAP access controls
• Support system validation activities including impact assessments, risk assessments, and change documentation
• Maintain SAP security documentation such as role concepts, procedures, and control descriptions
• Work in close coordination with SAP Center of Excellence (CoE) team members, including technical and functional SAP teams, for all security and access requirements
• Coordinate day-to-day SAP security activities with external consultants providing additional capacity through the Application Management Service (AMS) team

Manager, SAP Security

• Review Front Door and Jira documentation submitted to and created by team
• Lead the advancement of AI-driven threat detection by defining, developing, and operationalizing algorithms that scale across enterprise telemetry, meet detection quality standards, and integrate with Cyber Operations workflows
• Analyze data feeds and provide feedback to the data ingest team regarding feed readiness. Document and capture feed information as part of feed onboarding process
• Working with analysts (and other SMEs) as well as Focus Area Leads based on Work Plan, research threat scenarios determine data sets required, develop algorithms for threat detection
• Testing and onboarding alarms via team’s processes. This includes micro-playbook development and other SOAR related activities
• Grow knowledge of Cybersecurity. Team processes, and Systems

Senior Cybersecurity – SIEM

• Act as Security Partner in US Northeast to support the Account Management and Business Development teams
• Win significant new logos and strengthen current partnerships
• Elevate Workforce Resilience programs and security consulting solutions
• Coordinate with Business Development Managers and Account Managers
• Act as subject matter expert during complex new business opportunities
• Provide input to Security Consulting and Managed Services solution design
• Develop and Drive Consulting & Solutions Growth
• Collaborate on solution design
• Actively participate and contribute to the distribution strategy
• Advocate for US Northeast clients and provide local market insight

Security Director

• Directs all facets of physical security across GAF, GAF Energy, SIPLAST, SGI, and Standard Logistics sites within the eastern United States.
• Supervises the Regional Physical Security Lead in Dallas, TX, maintaining direct responsibility for their activities and providing high-level oversight for all western region plants.
• Manages the GAF Headquarters Security Coordinator located in Parsippany, NJ and has direct oversight of the responsibilities of this position, Guard Force Management, Access Control, collaboration with Executives, and VIP visitations.
• Provide strategic governance and oversight for the enterprise-wide, intelligence-driven, and risk-based corporate security program.
• This role is accountable for executing the strategy to proactively mitigate systemic security risks—including Terrorism, Violent/Property Crime, Political Instability, and Civil Disorder—across all personnel, critical processes, technology, facilities, and operational footprints.
• The primary focus is to manage the enterprise security resilience framework to reduce the Total Cost of Risk (TCoR) by enforcing standards for prevention, incident response, crisis management, and recovery capabilities across all Company Companies and sites.
• Manage an integrated corporate physical security ecosystem, ensuring that risk, vulnerability, and threat management, security technology, and operational processes function collaboratively to deliver intelligence-led, risk-managed security operations, and apply effective controls across all company facilities to minimize the impact of security events.
• Direct and oversee the OpCo’s Physical Security Assessment and Audit Program. This includes defining and enforcing adherence to the physical security assessment methodology, which focuses on perimeter protection, access control, CCTV systems, and security culture.
• The Director is responsible for tracking the development and ensuring the timely implementation of site-specific security improvement plans derived from audit findings, in coordination with Plant and site leaders.
• Apply access control measures based on risk and consistent with the principle that all employees, visitors, and guests have the right to be safe in their work environment.
• As directed by the Global Head of Security, provide guidance and direction relating to physical security to Plant Managers and site leaders in accordance with the physical security plan.
• Develops Physical Security policies and SOPs for all locations in harmony with the strategy set by the Global Head of Security.
• For plants having a contracted guard force, provide the Regional Physical Security Lead and the Plant Managers with guidance and direction relating to guard force duties, access control, post orders, guard SOPs, and uniform standards.
• Review and adjust the guard post orders as needed.
• As needed, train the contracted guard force on all access control procedures, troubleshooting techniques, and contingency plans.
• Assists the plant managers in coordinating with the contractor’s management to resolve issues.
• Ensure the guard force spend is both cost-effective and operationally effective.
• Improve the security culture through the implementation of a security awareness program: • Define security awareness objectives and minimum standards. • Coordinate Security Awareness course development, which includes workplace violence and active shooter response training. • Develop training delivery solutions.
• Leads the physical security enhancement projects at selected plants. Works with both the contractor and plant team to ensure a smooth and well-coordinated project that is completed on time and within budget.
• Acts as a point of contact to the main vendors dealing with all hardware security issues. Works with the vendors to develop acceptable Solutions.
• Assists selected plants and other sites across the OpCo’s in troubleshooting and fixing identified problems with security technology, including Genetec, CCTV video cameras, access control card readers, sensors, and security lighting.
• In conjunction with the Global Head of Security, develops and implements security policies, protocols, and procedures across all locations.
• Conducts threat and risk assessments of selected regional plants whenever requested by the plant manager and/or when an incident has occurred.
• Identify any new mitigation measures needed to reduce the level of risk to the plant, its operations, and its Employees.
• Plan and coordinate security operations at selected regional plants during periods of increased risk, including coordination of armed security support with the vendor (as approved by the Global Head of Security).
• Is able to deploy to a plant location on short notice during times of increased risk levels.
• Assists in the development and implementation of contingency plans for access if there is a technology failure at selected plants and sites.
• Conduct strike security planning for all unionized (7) plant locations. Coordinates with the Regional Physical Security Lead, security contractors, attends meetings with the plant management team, provides a strike security plan, and oversees all deployment of security officers if required.
• Ensures all OpCo Plants and sites have well-developed and rehearsed contingency plans for non-fire events, including active threat, and other emergencies.
• Develops security employee protection programs in accordance with State Laws, if applicable.
• Continued development and oversight of a DSR (Designated Security Representative) program where local employees at all plants and sites are selected to assist the Physical Security Department as ancillary support.
• Investigate all security incidents as directed.
• Develops reports for OpCo management and the Global Head of Security on plant and other sites' security status. Keeps the Global Head of Security informed on all physical security-related issues affecting the plants or other sites.
• Uses the security incident reporting system for analysis of patterns and trends to determine potential changes in the risk profile of a given facility/site. Use this data to determine appropriate mitigation measures.

Director, Physical Security

• Interpret architecture diagrams and controls to enhance the security of new and existing systems
• Develop application and system cybersecurity designs to meet specific operational needs and environmental factors
• Determine the impacts if vulnerabilities or exploited or a system is compromised
• Determine the application teams’ lifecycle support requirements
• Implement application cybersecurity policies using policy as code, automation, and documented and verified manual procedures
• Implement automated measures to determine the effectiveness of system cybersecurity measures
• Develop cybersecurity risk profiles for systems
• Work with developers to create system prototypes using UAT and prototype models
• Determine if hardware, operating systems, and software adequately addresses a system’s cybersecurity requirements
• Design and ensure implementation of system backup and failover capabilities
• Create system testing and validation procedures and documentation
• Develop system security design documents
• Develop system recovery and continuity plans
• Test recovery and continuity plans

Advanced Defensive Applications Security Engineer

• Architect, build and maintain high-volume, high-fidelity security data management in Snowflake system supporting Pipeline (ETL, etc.) SIEM, SOAR, UEBA and detection engineering use cases
• Lead the ingestion, normalization, enrichment, and correlation of raw security telemetry, including logs, events, metrics, alerts, config, scanning and other data types using snowflake technology such as cortex and grid.
• Define and enforce data standards, schemas, and normalization frameworks across security data sources.
• Leverage SQL, Python, PowerBI and other interfaces in Snowflake to design the right solution for data analytics, including reporting and other metrics using Snowflake cortex and grid solution.
• Partner with Security Operations, Threat detection, GRC and other engineering teams to translate security requirements into scalable data solutions.
• Serve as a technical authority and mentor, influencing data engineering, security analytics and platform strategy.
• Drive continuous improvement in data reliability, performance, and cost efficiency.
• Manage Data Governance with various reporting and quality checks.
• Research and look for opportunities to adopt the best practices and industry standards
• Identify opportunities to enhance the current baseline processes and configuration
• Produce engineering, integration and process related documentation.
• Manage vendor relationships to drive roadmap, solution design, implementation and troubleshooting
• Able to conduct the POC of new features to develop new solutions

Senior Snowflake Engineer, Security Data Platform

• Lead technical discovery sessions to understand customer business drivers, networking environments, and security requirements
• Design and articulate scalable SASE and Zero Trust architectures incorporating secure SD‑WAN, SSE, identity‑based access, and firewall technologies
• Deliver high‑impact product demonstrations, workshops, and proof‑of‑concepts showcasing HPE Aruba Networking SASE, including SD‑WAN, ZTNA, SWG, CASB, and DEM use cases
• Position and integrate solutions across the broader HPE + Juniper networking and security portfolio, including next‑generation firewalls and data‑center‑to‑cloud security designs
• Support sales pursuits by responding to RFPs, RFIs, and security questionnaires with clear, technically accurate documentation and diagrams
• Collaborate closely with account managers, specialist peers, partners, and services teams to drive successful deal outcomes
• Present confidently to both technical audiences and executive stakeholders, including security leaders and architects
• Provide field feedback to product management and engineering teams to influence roadmap and solution enhancements
• Travel across the Eastern U.S. to support customer meetings, partner engagements, workshops, and industry events

SASE & Security Presales Specialist

• Manage and develop a team of individual contributors and managers in roles with moderate complexity and risk
• Maintain a broad awareness of the state of information security companywide
• Identify and recommend complex and innovative solutions addressing functions including vulnerability detection, threat data, network intrusion and development, and implementation of vulnerability mitigation strategies
• Identify security risks and solutions for networks and virtual private network applications, security tools, public key infrastructures, authentication and directory services, and access management services
• Identify, formulate, implement information security and Line of Business management
• Determine appropriate strategy for information security policy, standards and procedures for systems, applications and tools
• Set guidelines for compliance and risk management requirements for supported area and work with other stakeholders to implement key risk initiatives
• Advise more experienced management on issues with high, critical impact
• Collaborate and influence all levels of professionals including more experienced managers
• Lead team to achieve objectives
• Interface with Information Security Industry Leaders, Financial industry Leaders, Analysts and Regulators
• Manage allocation of people and financial resources for Information Security Analysis
• Develop and guide a culture of talent development to meet business objectives and strategy
• Own consistent execution and governance of highly visible, mandatory cyber risk and control functions across the Cyber Defense domain.
• Drive effective execution of risk assessments, control testing, and challenge activities across all three lines of defense
• Manage CDM issue management coordination, and control maturity progression
• Oversee control operation for processes which span CDM teams
• Produce recurring executive level reporting and leadership updates translating cyber risk, control health, metrics, and trends into clear business context.
• Coordinate and implement assigned projects and initiatives.
• Play key role in executing Risk and Control Self-Assessment activities in partnership with Risk Assessable Unit (RAU) owner and Control management teams.
• Ensure Cyber Defense compliance with enterprise policies, standards, metrics, risk treatments, and issue remediation expectations
• Build and sustain a culture of accountability, talent development, and continuous improvement across the team.
• Establish and track performance goals and operational metrics for self and team.
• Monitor team deliverables to ensure timeliness, quality, and alignment with expectations.
• Oversee resource allocations to ensure commitments align with strategic objectives.
• Maintain a broad awareness of the state of information security across the enterprise and industry.
• Influence and oversee changes to information security policies, standards, and procedures, ensuring alignment with Enterprise Risk Management and required functions including Business Continuity Planning (BCP).
• Advise leadership or executive management on issues with high impact on the company.
• Recommend mitigation strategies for identified security risks.
• Support internal and external audits, regulatory reviews, and third-party assessments.

Senior Information Security Manager – Cyber Defense Management

• Develop and maintain the enterprise IAM reference architecture aligned to Zero Trust, NIST and cloud security frameworks.
• Design end-to-end IAM solutions that support Single Sign-on (SSO), Multi-factor Authentications (MFA), Identity Federation (e,g., SAML, OIDC), and Role-Based Access Control (RBAC).
• Architect identity lifecycle process across workforce, customer, and third-party identities (joiner/mover/leaver).
• Define enterprise IAM roadmap, incorporating AI capabilities and automation and ensure alignment with broader cybersecurity, IT, and business strategies.
• Support the development of IAM standards, patterns, and guardrails for secure access across applications, APIs, cloud platforms, and infrastructure.
• Collaborate with teams to leverage AI and machine learning to improve access risk detection, behavioral analytics, and anomaly detection.
• Collaborate with data science and AI governance teams to define policies around ethical AI use in IAM processes.

See all jobs on JobTailor

AI Security Engineer

Lead Cybersecurity, SOX Governance

Principal Engineer – Quantum Security

Penetration Testing Manager

Cybersecurity, Technology Risk Officer

Lead Product Security Engineer

Lead Product Security Engineer

Facility Security Officer

Senior Security Regulatory Compliance Manager

Cybersecurity Incident Responder

Principal Security Consultant

Manager, SAP Security

Senior Cybersecurity – SIEM

Security Director

Director, Physical Security

Advanced Defensive Applications Security Engineer

Senior Snowflake Engineer, Security Data Platform

SASE & Security Presales Specialist

Senior Information Security Manager – Cyber Defense Management

Cybersecurity IAM Architect Fellow