Security Engineer

• Define and own Crossmint's security strategy, including roadmap prioritization, risk posture, and security investment decisions.
• Operate fluidly across scope levels: board-level risk briefings one hour, hands-on threat model review the next.
• Establish and maintain a security program that scales with the company, not one that creates drag on product velocity.
• Report to co-founders on security posture, risk landscape, and program progress.
• Maintain deep technical fluency across cloud security (AWS primary), application security, CI/CD security, and endpoint and corporate IT.
• Review architecture decisions, new product features, and infrastructure changes for security implications before they ship.
• Conduct or lead threat modeling exercises across product and infrastructure domains.
• Step in as a hands-on practitioner during incidents, complex vulnerability analysis, or high-stakes security reviews where direct expertise is required.
• Own security's relationship with auditors, regulators, and compliance frameworks including SOC 2 Type II, DORA, and MiCA-related security requirements.
• Lead audit preparation cycles: scope definition, evidence readiness, control documentation, and auditor-facing communication.
• Maintain audit-ready posture year-round, not as a sprint before each audit window.
• Partner with the Compliance function to ensure security controls satisfy both regulatory requirements and practical risk management objectives.
• Manage and develop the Senior DevSecOps Engineer, with the expectation of growing the security team over time.
• Serve as the internal authority on security for Engineering, Product, Compliance, Legal, and People Ops.
• Drive security awareness and culture across the company without creating friction that slows down product teams.

Head of Security

• Provides prompt, efficient and friendly customer service by maintaining a safe and secure store environment for customers and employees.
• The retail security officer patrols and monitors premises, and, if needed, apprehends theft suspects in compliance with Hy-Vee's standards and guidelines.
• Exhibiting respect, concern and patience in all customer and employee interactions.
• Monitors the store property, as well as customer and employee activities, for potential theft of assets or damage to assets on Hy-Vee's property.
• Takes appropriate action to prevent theft; apprehends individuals engaged in theft activity.
• Contacts and coordinates with local law enforcement regarding known offenders or suspicious persons observed during duties, parking lot accidents, notifies fire department or ambulance services in case of emergency, maintains public safety within the store.
• Reports unsafe conditions inside and outside of the store to management.
• Reports any internal theft suspicions and observations to Loss Prevention Area Manager.
• Accurately completes all incident reports.
• Assists Loss Prevention with investigations.

Retail Security Officer

• Supervise and support Security Team Members during assigned shifts.
• Ensure all applicable company policies, gaming regulations, and legal requirements are consistently enforced.
• Assist with investigations involving guests, team members, incidents, and property-related matters.
• Identify, assess, and respond to potential safety and security risks.
• Protect company assets, guests, and team members through proactive security measures.
• Detain individuals when probable cause exists and coordinate with law enforcement and gaming officials when necessary.
• Maintain and monitor company-wide key control procedures.
• Prepare accurate reports and documentation regarding incidents and investigations.
• Respond to emergencies and provide leadership during critical situations.

Security Supervisor – Swing Shift

• Establish and maintain deep, consultative relationships with customer executives and security leaders, serving as their primary trusted advisor on cybersecurity matters
• Identify and uncover opportunities where GuidePoint Security solutions can address customer cybersecurity needs and business objectives
• Provide expert guidance on cybersecurity strategy, risk management, and security program development tailored to each customer's unique environment
• Represent GuidePoint Security as a subject matter expert in the cybersecurity community through speaking engagements, publications, and industry events
• Partner closely with sales, delivery, and product teams to ensure seamless customer experiences and drive solution alignment
• Stay current on emerging threats, industry trends, and regulatory requirements affecting customers in the region, and proactively communicate relevant insights to customers
• Serve as a senior resource and mentor to colleagues, contributing to the development of best practices, methodologies, and advisory frameworks across the organization

Strategic Security Advisor – Northeast Region

• Under the direction of the Lead Security Officer, is responsible for the performance of all security and safety duties as assigned.
• Provide armed, uniformed Security presence throughout SPHP campuses.
• Senior Security Officers will assess threats, provide immediate response to, and mitigate offenses against public order, life and safety of colleagues, staff, patients, visitors and others on and within the buildings and grounds of SPHP.
• Offenses or events requiring investigation and thorough reporting will be made and submitted to Lead Security Officer and other SPHP Leadership.
• Coordination with law enforcement agencies based on threat assessment and offenses.
• Pick up hours as the need arises, at our Acute care facilities, other than primary work location.

Senior Security Officer – Per Diem

• Own and execute the end-to-end onboarding journey, from post-signature handoff through onboarding completion
• Lead technical deployment, configuration, integrations, and feature activation, ensuring alignment with best practices
• Deliver structured onboarding sessions and product training for customers and partners
• Drive fast time-to-value, ensuring customers reach meaningful product adoption early
• Identify onboarding risks (technical, operational, or engagement-related) and proactively drive resolution
• Act as an escalation point during onboarding, coordinating with Support, Product, and R&D where required
• Ensure onboarding milestones, risks, and progress are clearly tracked and communicated
• Support ongoing security posture improvements, ensuring customers are configured in line with best practices and recommended security standards
• Partner with Success Managers to ensure continuity between onboarding and long-term customer success
• Educate both customers and internal stakeholders on secure configurations, optimal feature usage, and risk reduction practices
• Contribute to customer adoption and retention initiatives by reinforcing value beyond onboarding
• Identify configuration gaps, adoption gaps, or risk exposures, and support remediation efforts
• Provide structured feedback to Product, R&D, and internal teams based on real customer usage and onboarding insights
• Contribute to the definition and optimisation of onboarding frameworks, playbooks, and best practices
• Help standardise and improve customer journey processes across onboarding and early lifecycle stages
• Share insights and trends to support data-driven improvements in onboarding success and customer outcomes
• Collaborate across teams to drive operational clarity, consistency, and scalability

Technical Onboarding – Security Specialist

• Collaborating with leading tech professionals to strengthen and protect economic, financial and payments systems
• Operating the DevSecOps program according to standards and policies
• Partnership with peers in FRB Kansas City and other Reserve Banks across the System
• Building relationships with development teams
• Identifying, implementing, and supporting security across the organization
• Assessing maturity of development teams’ DevSecOps practices against an existing framework
• Implementing secure continuous integration and continuous delivery (CI/CD) pipelines

Information Security Specialist

• Have direct account management and revenue generation responsibility for the U.S. Department of Defense and departments/branches, other U.S. security agencies (CIA, NSA, etc.), NATO, and AUKUS.
• Develop and execute a client-driven franchise strategy to drive profitable growth and expands wallet share in the security and defense space
• Lead analysis of market trends to identify growth opportunities and lead co-development of segment specific solutions in partnership with key industry groups, regional partners, investment banking, markets, and product partners
• Drive thought leadership and engage in policy development for key themes related to security and defense
• Represent Citi and increase brand visibility at key global events
• Develop senior trusted advisor relationships with key clients and countries
• Ensure ethical conduct and transparency in all business practices
• Understand and effectively manage the heightened role of franchise risk associated with the security and defense business
• Have a broad, strategic mindset to connect the public sector defense initiative to all parts of the firm from industry groups to government relations and second line of defense to achieve success for the firm as well as the clients and the countries being served
• Develop materials for executive consumption to build consensus and ensure that key partners in the organization are well-briefed on trends and challenges
• Participate in initial triage of opportunities to match client demands with appropriate Citi teams
• Work with government relations on messaging and relationship development

Managing Director – Head of Security and Defense, Public Sector Banking

• Ensure safety and security of guests, team members, and company property.
• Complete detailed incident and investigative reports in a timely manner.
• Provide excellent customer service to guests in all interactions.
• Assist with the secure transfer of money and chips from the casino floor.
• Patrol assigned areas to maintain a safe environment.
• Enforce casino policies, procedures, and compliance with NRGC regulations.
• Stand assigned post for extended periods as required.
• Communicate effectively with supervisors regarding daily activities and incidents.
• Respond promptly to emergency situations and backup calls.
• Control access to restricted or secure areas of the facility.
• Maintain clear radio communication throughout assigned shift.

Security Officer

• Secure APIs by implementing robust access control mechanisms, OAuth, JWT, and configuring API gateway security to ensure authenticated and authorized access.
• Develop reusable security design patterns addressing common cybersecurity challenges, ensuring consistency and best practices across diverse technology stacks and business domains.
• Craft clear, actionable security standards and policies, aligning them with industry best practices and regulatory requirements while ensuring adaptability to emerging technologies.
• Lead the design and innovation of security architectures, integrating advanced technologies to protect against evolving threats while enabling business agility and growth.
• Collaborate with key stakeholders to align security initiatives with business objectives, ensuring broad support and integration at all levels.

Principal Application Security Architect

• Maintain a visible security presence
• Respond to routine and emergency incidents
• Patrol facilities and prevent unauthorized access or disturbances
• Monitor entrances and exits, assist and screen visitors
• Provide respectful, courteous interactions with patients, staff, and visitors

Security Guard – Full-Time, Days/Nights

• Perform Cloud Infrastructure Engineering in AWS and Kubernetes-based production environments, including inspecting pod health, reviewing logs, diagnosing restarts, and helping determine root cause or escalation paths.
• Use monitoring and logging tools such as Datadog, Grafana, Humio, ELK, or similar platforms to investigate incidents, search logs, and validate system behavior.
• Contribute Python scripts and small automation workflows for repetitive tasks, log parsing, remediation support, or operational efficiency.
• Participate in an on-call rotation supporting the company’s Hosted AI Platform, providing structured triage, communication, documentation, and resolution or hand-off as needed.
• Read and make targeted, well-reviewed changes to Infrastructure-as-Code and platform configuration, including Terraform and Kubernetes manifests, to strengthen guardrails and reduce operational risk.
• Support security reviews for new services and major infrastructure changes, helping identify misconfigurations and recommending practical mitigations that fit how teams build and operate.
• Collaborate with partners across Security, IT, Platform Engineering, Legal, Risk, and Investigations, building strong working relationships and practicing clear, empathetic communication.

Senior Security Engineer, Platform Security

• Responsible for leading and delivering complex business and technical projects, including project planning and execution spanning multiple organizations.
• Engage in cross-organizational business and/or technology influence during the full project lifecycle of large complex innovative programs.
• Define high level technical requirements and design, work with engineering teams, product owners and/or business stakeholders to ensure projects are successful.
• Own and manage multiple aspects of multiple interrelated project workstreams independently.
• Enforcing EWS specific product and project lifecycle process from discovery to post deployment process.
• Report on project tracking including results, metrics, test, and deployment management activities to stakeholders.
• Prepare detailed project plans for all phases of the project as well as status reporting regarding project and program milestones.
• Monitor projects on an ongoing basis, evaluate progress, proactively work with the project team to mitigate risks, and resolve issues as they arise.
• Communicate ideas effectively, both verbally and in writing, to all types of audiences including Senior leadership.

Lead Technical Program Manager – Security

• Develop, maintain, and execute a firm-wide information security strategy aligned to Manatt's business objectives, growth agenda, and risk appetite.
• Serve as the primary security advisor to the CIO, COO, executive leadership, and firm governance bodies; present security posture and program updates to senior stakeholders and the board as required.
• Build and lead a high-performing information security team, including hiring, mentoring, and professional development.
• Define and manage the information security program budget, balancing investment in tooling, staffing, and managed services.
• Own the firm's information security risk management program, including risk assessment, treatment, and continuous monitoring.
• Ensure compliance with applicable legal and regulatory frameworks including HIPAA/HITECH, state privacy laws, ABA cybersecurity guidelines, and client security requirements.
• Lead responses to client security questionnaires, RFPs, and third-party audits; serve as the primary security point of contact for client due diligence inquiries.
• Provide security leadership and oversight for the firm's cloud transformation and data center migration initiatives, including Azure cloud security architecture and governance.
• Establish and enforce security standards and controls aligned to CIS Benchmarks and industry best practices across endpoint, network, cloud, and application layers.
• Partner with IT and engineering teams to embed security into the system development lifecycle, AI/LLM adoption initiatives, and enterprise technology deployments.
• Oversee the implementation and management of security tooling including endpoint protection, SIEM/SOAR, identity and access management, DLP, and vulnerability management.
• Lead the firm's security operations function, ensuring 24/7 threat monitoring, detection, and response capabilities.
• Own the incident response program, including playbooks, tabletop exercises, and coordination with legal, HR, and executive leadership during security events.
• Manage relationships with external security partners, MSSPs, and legal counsel in connection with security incidents and breach notification obligations.
• Oversee vulnerability and patch management programs in coordination with IT operations.
• Advise on and govern the secure adoption of AI and generative AI tools, including LLM-based legal technology platforms, ensuring appropriate data handling, access controls, and residency requirements.
• Stay abreast of the evolving threat landscape as it pertains to professional services, legal, and healthcare-adjacent industries; translate threat intelligence into actionable program improvements.
• Lead the firm's security awareness and training program, fostering a security-conscious culture across attorneys, business professionals, and leadership.
• Partner with HR and firm management to communicate policies and expectations around acceptable use, data handling, and security hygiene.

Director of Information Security

• Lead a division or segment of sales professionals in the Insurance & Security Brokers verticals
• Drive new-to-bank client acquisition while deepening wallet share across existing clients
• Deliver end-to-end Treasury Management and Payments solutions
• Hire, develop, lead and hold accountable a team of high performing sales professionals
• Assist with the design of new services and the development of sales strategy
• Ensure regular performance result updates are provided to appropriate stakeholders
• Create and maintain cost-effective programs for the division
• Coordinate strategy, tactics and sales approach with relationship management and functional partners

Treasury Management Vertical Leader – Insurance & Security Brokers

• Enforce all rules, regulations and instructions required to provide absolute protective security
• Control all points of vehicle and personnel access to prevent unauthorized entry
• Responsible for the badging of visitors, contractors and vendors
• Providing Security escorts
• Conduct searches of personnel and access vehicles to detect unauthorized materials
• Conduct regular foot and mobile patrols to ensure security of the facility
• Foster a strong working relationship with local law enforcement
• Responsible for checking company property removed from premises
• Inspect fire extinguishers, Self Contained Breathing Apparatus, Automatic Electronic Defibrillators, eye wash stations and first aid supplies
• Provide crowd control for special events sponsored by NYPA
• Attend training to become an active participant in the Emergency Response Team and respond to emergencies on site
• Conduct inspections of security intrusion alarm systems and associated security duties as required.

Security Guard

• Own and unify the platform and infrastructure that powers our core products and services.
• Treat our engineers as your customers—build the tooling, paved roads, and self-service workflows that let them ship quickly and safely.
• Own CI/CD and release automation, keeping the path to production fast, reliable, and observable.
• Own feature-flag, configuration, and secrets infrastructure, along with the reliability of our background-job, caching, and queue systems (Celery, Redis, RabbitMQ).
• Improve observability and operational health across services through structured logging, error monitoring, and APM, and share in the on-call rotation for platform and infrastructure services.
• Own the platform's security guardrails—secrets management, IAM and access control, PCI/PII data handling, and vulnerability management.
• Own and automate compliance and audit readiness (PCI-DSS, SOC 2, partner security reviews), coordinating external auditors and making the process repeatable.
• Set technical direction for platform and security, driving toward infrastructure-as-code over time.

Senior Platform & Security Engineer

• Design and maintain high-signal detections across cloud, identity, endpoints, and SaaS environments.
• Build and improve the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety.
• Develop tooling and automation that accelerate triage, enrichment, investigation, and detection authoring, including LLM-based workflows where useful.
• Translate threat intelligence and adversary TTPs into durable detections, telemetry requirements, and response improvements.
• Participate in investigations, incident response, and postmortems that drive long-term security improvements.
• Define and track key metrics such as coverage, MTTD, and alert quality to guide investment decisions.
• Participate in a shared on-call rotation for incident response.

Security Engineer – Detection and Response

• Design, develop, and deploy Policy-Based Access Control (PBAC) policies to enable fine-grained and dynamic authorization
• Work closely with business, security, and application teams to understand business requirements and translate them into scalable, secure authorization policies
• Author, test, deploy, and manage policies in PBAC platforms; experience with PlainID is highly preferred
• Lead policy lifecycle management, including documentation, versioning, change tracking, and governance
• Diagnose and resolve issues with existing authorization policies and implementations, improving stability and performance
• Design and integrate authorization solutions using RESTful APIs
• Work extensively with SQL, including schema design, DDL operations, and data analysis to support IAM use cases
• Deploy, manage, and support IAM workloads on Azure infrastructure, with strong hands-on experience in Azure Kubernetes Service (AKS)
• Demonstrate a solid understanding of networking concepts, including secure API communication, authentication flows, and cloud networking fundamentals
• Implement secure DevOps practices using GitHub, GitHub Actions, and CI/CD pipelines for policy and application deployments
• Develop PowerShell and shell scripts to automate IAM processes, enhance operational efficiency, and reduce manual effort
• Ensure all IAM and authorization solutions align with organizational security standards, compliance requirements, and best practices

Senior Cybersecurity Engineer

• Lead seamless onboarding experiences and technical implementation plans tailored to each client's environment.
• Partner with customers to define success metrics, ensure adoption, and deliver measurable business outcomes.
• Own strategic account plans for a portfolio of enterprise customers, fostering long-term partnerships and aligning Nagomi's capabilities to customer objectives.
• Maintain high retention rates by proactively addressing risks, and drive expansion ARR through upsell and cross-sell opportunities.
• Build and maintain relationships with executive stakeholders, conducting business reviews to showcase ROI.
• Partner with Sales on solution alignment during the pre-sales process for assigned accounts.
• Serve as the customer's voice within Nagomi, providing actionable feedback to influence product enhancements.
• Collaborate closely with internal teams to deliver timely solutions to complex client needs.

See all jobs on JobTailor