Security Engineer

• Advise on and assess the security posture of AI/ML systems, including LLMs, GenAI pipelines, and model serving infrastructure
• Lead threat modeling exercises specific to AI workloads
• Advise internal teams on securely integrating SaaS AI services and APIs
• Evaluate and recommend controls for data ingestion pipelines, RAG architectures, and vector databases
• Serve as a trusted security advisor bridging business stakeholders, AI/ML engineers, IT operations, and information security teams
• Continuously track emerging AI security research, adversarial techniques, regulatory developments, and vendor security advisories
• Produce and maintain security architecture documentation, risk assessments, control frameworks, and guidelines tailored to the organization's AI environment
• Contribute to the development of a long-term AI security strategy
• Develop and deliver training and awareness content for technical and non-technical stakeholders on AI-specific risks

AI Security Engineer

• Lead and manage Security Analysts responsible for security operations center (SOC) activities and security administration
• Oversee daily security monitoring, event triage, escalation handling, and incident response coordination
• Establish team priorities, assign work, and ensure timely completion of operational security tasks and remediation activities
• Develop and report on security operations metrics, trends, and performance indicators
• Oversee administration of security tools, including monitoring platforms, endpoint protection, vulnerability management, and access controls
• Manage user access administration, privileged access review support, and periodic access validation processes
• Ensure security controls are functioning effectively and that issues are tracked, escalated, and remediated
• Maintain team procedures, runbooks, and documentation for security operations and incident response
• Support the implementation, tuning, and effectiveness of security tools and monitoring capabilities
• Lead incident detection and response activities, including escalation to leadership when appropriate
• Coordinate with IT and system owners on containment, remediation, recovery, and lessons learned
• Monitor emerging threats and vulnerabilities and direct team focus accordingly
• Support audit readiness, assessments, and operational response exercises
• Manage, coach, and develop Security Analysts, including performance management and career development
• Promote consistency in investigation, documentation, escalation, and communication practices
• Partner with the CISO on staffing, workload planning, and operational maturity initiatives
• Collaborate with Audit, Risk, Compliance, and IT teams on control validation and issue remediation
• Support third-party reviews and audit follow-up activities
• Escalate material risks, control gaps, and resource concerns to the CISO
• Ensure alignment with organizational policies, standards, and regulatory requirements

Information Security Manager

• Provides technical expertise and leadership to internal business clients for their Cybersecurity related projects and initiatives
• Responsible for oversight and communication of the cybersecurity programs
• Collaborate with lines of business and internal IT groups in evaluating and gathering technical requirements
• Research clients’ requirements to develop potential technical solutions
• Communicate and document potential solutions, impact analysis, benefits/risks, implementation requirements, and recommended approach
• Oversee and conduct various analysis to guide program strategy
• Make recommendations regarding cybersecurity related projects and initiatives
• Consults with business leaders on the development of policies, processes and practices
• Maintains cybersecurity collaboration and knowledge platforms (Teams/SharePoint) and designs automation solutions

Senior Cybersecurity Program Strategist

• Oversee the Attack Surface Management program from the technical perspective
• Regularly identify and catalog all assets, including new and existing ones
• Coordinate with various stakeholders to ensure a comprehensive understanding of the attack surface
• Serve as a subject matter expert for application development and infrastructure teams
• Analyze organization's cyber defense policies/configurations
• Participate in the creation of effective and efficient processes to drive successful reduction of risk
• Research and advocate for new security solutions and technologies
• Establish communications related to threats, vulnerabilities, processes and security risks across a Global landscape

Associate Web Application Security Specialist, Attack Surface Management

• Participate in Governance Program Development
• Collaborate with team members to gather input and communicate project status to senior leadership across IT and Finance.
• Support the creation and refinement of governance processes that are repeatable and scalable.
• Assist in evaluating projects for potential SOX impacts by reviewing scope, objectives, and planned changes.
• Help track the completion of required deliverables throughout the project lifecycle.
• Contribute to readiness assessments for project launches, ensuring all compliance requirements are met.
• Work with team members to efficiently assess ongoing projects for changes that may affect SOX controls.
• Help identify and document the volume and risk associated with these changes.
• Support the preparation and organization of necessary documentation for external auditors, both before and after project launches.
• Ensure that all required materials are complete, accurate, and submitted on time.
• Engage with external specialists as needed to support large or complex projects with high-risk control concerns.
• Facilitate effective communication and coordination between internal teams and third-party experts.
• Identify opportunities to enhance governance processes and reduce the risk of control gaps.
• Participate in team discussions to share best practices and lessons learned.

Lead Cybersecurity, SOX Governance

• Conduct innovative research in cyber security
• Participate in active offensive security operations
• Perform vital work to validate that findings have been remediated
• Develop and present in-depth reports that provide a narrative of your activity
• Communicate results to lines of business based on inherit risks
• Work with the leadership team to identify opportunities and process improvements
• Participate in purple teaming

Cyber Security Research Engineer – Validation Red Team

• Own end-to-end planning and scheduling of multiple concurrent engagements
• Serve as the central coordination point for offensive engagements
• Act as the primary liaison between the offensive team and stakeholders
• Manage the output of offensive security operations by overseeing the identification, documentation, and closure of findings
• Maintain and improve engagement processes to ensure consistency and quality across operations

Offensive Security Engagement Coordinator

• Lead a division or segment of sales professionals in the Insurance & Security Brokers verticals
• Drive new-to-bank client acquisition while deepening wallet share across existing clients
• Deliver end-to-end Treasury Management and Payments solutions
• Hire, develop, lead and hold accountable a team of high performing sales professionals
• Assist with the design of new services and the development of sales strategy
• Ensure regular performance result updates are provided to appropriate stakeholders
• Create and maintain cost-effective programs for the division
• Coordinate strategy, tactics and sales approach with relationship management and functional partners

Treasury Management Vertical Leader – Insurance & Security Brokers

• Define and execute the cybersecurity vision, strategy, and multi-year roadmap
• Provide leadership for cybersecurity operations including EDR, vulnerability management, incident response, and threat detection
• Drive standardization and optimization of the security tool stack across managed and augmented clients
• Formalize and maintain governance, risk, and compliance frameworks including SOC2 alignment
• Lead enterprise incident response strategy, ensuring readiness and effective remediation
• Act as executive escalation point for major security incidents and client-impacting events
• Own budgeting, forecasting, and resource planning for the security function
• Lead risk assessments and ensure mitigation strategies are implemented
• Build, mentor, and develop a high-performing cybersecurity team
• Foster a culture of security awareness and continuous improvement
• Collaborate cross-functionally with Engineering, Consulting, Product, and Project teams
• Represent cybersecurity in executive forums and client discussions in partnership with the CISO and executive leadership

Director of Cybersecurity

• Design, develop, and deploy Policy-Based Access Control (PBAC) policies to enable fine-grained and dynamic authorization
• Work closely with business, security, and application teams to understand business requirements and translate them into scalable, secure authorization policies
• Author, test, deploy, and manage policies in PBAC platforms; experience with PlainID is highly preferred
• Lead policy lifecycle management, including documentation, versioning, change tracking, and governance
• Diagnose and resolve issues with existing authorization policies and implementations, improving stability and performance
• Design and integrate authorization solutions using RESTful APIs
• Work extensively with SQL, including schema design, DDL operations, and data analysis to support IAM use cases
• Deploy, manage, and support IAM workloads on Azure infrastructure, with strong hands-on experience in Azure Kubernetes Service (AKS)
• Demonstrate a solid understanding of networking concepts, including secure API communication, authentication flows, and cloud networking fundamentals
• Implement secure DevOps practices using GitHub, GitHub Actions, and CI/CD pipelines for policy and application deployments
• Develop PowerShell and shell scripts to automate IAM processes, enhance operational efficiency, and reduce manual effort
• Ensure all IAM and authorization solutions align with organizational security standards, compliance requirements, and best practices

Senior Cybersecurity Engineer

• Serve as a cross-functional engineering lead responsible for improving interoperability, integration, and cloud operational effectiveness across enterprise security technologies.
• Partner with platform engineering teams to improve platform integration, telemetry quality, logging consistency, detection coverage, automation capabilities, operational scalability, and overall cloud security readiness.
• Work across a broad security technology stack including endpoint detection and response (EDR), email security platforms, SIEM and log management systems, secure browser technologies, cloud security platforms, IDS/IPS, DLP, WAF, firewalls, and AI security and automation platforms.
• Perform cloud security capability mapping and cross-platform gap analysis to identify visibility gaps, detection gaps, telemetry deficiencies, redundant tooling, integration weaknesses, logging inefficiencies, and automation opportunities.
• Develop engineering strategies that enhance interoperability and readiness across cloud and enterprise security platforms.
• Optimize SIEM ingestion pipelines, cloud logging strategies, event normalization, telemetry enrichment, and routing mechanisms to improve detection fidelity, signal-to-noise ratio, data quality, cost efficiency, visibility, and platform scalability.
• Build redundancy strategies across cloud and enterprise security controls to increase resiliency and reduce single points of failure.
• Ensure security tooling integrations are validated, optimized, and aligned with enterprise cloud security engineering standards and best practices.
• Drive automation initiatives to reduce engineering maintenance overhead and improve operational consistency across security platforms.
• Coordinate technical initiatives across AI Engineering, Log Management Engineering, Security Platform Engineering, and Engineering Systems Maintenance to ensure alignment and execution.
• Develop enterprise engineering standards and integration patterns for telemetry, logging architectures, event normalization, alert enrichment, automation workflows, and platform interoperability.
• Partner with Security Operations, Infrastructure Engineering, Architecture, and Cloud Engineering teams to align solutions with enterprise operational security requirements.
• Develop and maintain automation tooling using Python, PowerShell, APIs, infrastructure-as-code, and orchestration platforms.
• Lead technical assessments and onboarding of new cloud security technologies, integrations, and engineering enhancements.
• Ensure alignment of cloud security technologies with regulatory, audit, governance, and operational requirements.
• Provide technical leadership and guidance across platform integration, optimization initiatives, and engineering strategy execution.
• Communicate integration strategy, engineering priorities, and optimization roadmaps to stakeholders and leadership.
• Maintain awareness of emerging technologies including AI-driven security, telemetry engineering practices, detection engineering advancements, and integration methodologies.
• Drive engineering simplification and operational efficiency through consolidation, automation, telemetry optimization, and integration standardization.

Principal Cloud Security

• Establish and execute an enterprise information security strategy and operating model aligned with business objectives and risk appetite.
• Continuously assess and strengthen Genworth’s cyber and technology risk posture in support of enterprise resilience and growth.
• Define short‑ and long‑term cybersecurity goals, success measures, and investment priorities aligned to business strategy.
• Define and operationalize a shared accountability model for cybersecurity risk, ensuring clear decision rights across the CISO, CIO, and technology/service owners.
• Ensure security is embedded early in technology strategy, roadmaps, and delivery, with integrated planning across engineering, infrastructure, and application teams.
• Drive consistency and scale in control execution, reducing late-stage rework, fragmentation, and reliance on exception-based decisioning.
• Own enterprise information security governance, policies, standards, and controls.
• Lead regulatory engagement related to cybersecurity and represent the enterprise in examinations and audits.
• Oversee internal and external IT compliance efforts and remediation activities.
• Serve as a strategic advisor to executive leadership and the Board of Directors on cyber risk, threat trends, and program effectiveness.
• Own Board‑level cybersecurity governance, including regular reporting on cyber risk posture, material threats, incidents, and progress against enterprise risk tolerance.
• Communicate cyber risk in a decision-ready format, clearly articulating recommendations, tradeoffs, risk levels, and required actions, enabling timely and informed leadership decisions.
• Provide executive oversight of security operations, vulnerability management, incident response, and crisis management.
• Lead enterprise response efforts during cybersecurity incidents, ensuring decisiveness, transparency, and cross‑functional coordination.
• Stay ahead of emerging threats, technologies, and industry trends to proactively adapt security capabilities.
• Lead, develop, and inspire a high‑performing information security organization.
• Champion a culture of security awareness, accountability, ethical behavior, and continuous improvement across the enterprise.
• Build trust‑based relationships with internal and external stakeholders to influence outcomes in complex and high‑stakes environments.

Chief Information Security Officer

• Directs staff and initiatives that support risk management programs, to include governance support, risk oversight, risk infrastructure development, analysis of regulatory environment, and adherence to enterprise operational and compliance policies and procedures.
• Reviews, communicates, and recommends the development of risk policies and procedures in partnership with senior leaders and regulatory partners to ensure appropriateness and adequacy versus industry best practices and regulatory requirements.
• Directs the oversight of risk through its life cycle and use, manages the review and assessment of state and federal regulatory requirements and associated business impacts.
• Provides operational and compliance risk oversight for USAA, its affiliates, and USAA partnerships with external companies.
• Partners with key stakeholders such as, federal/state regulatory agencies and business leaders to oversee the formulation of stress test plans, identification, quantification, and aggregation of risks using analytical methodologies, to include key and emerging risks, including risks associated with new or modified products, services, distribution channels, regulations and/or third-party operations.
• Directs teams in the development of risk dashboards and reporting formats in alignment with risk appetite/profile and/or regulatory requirements.
• Proactively identifies strategic and tactical regulatory solutions by providing risk and compliance subject matter expertise for CoSA project/process/product initiatives.
• Builds and manages a high performing team of risk professionals through recruitment, training, coaching, performance management and related managerial activities.

Director, Risk and Compliance Management – Information Security

• Coordinate the creation of compliance controls during the onboarding of applications to access management
• As Compliance Manager, coordinates, creates and updates control procedure narratives in support of our required regulatory and compliance frameworks
• Coordinate quarterly control self-assessments
• Coordinate with teams to ensure application-specific control issues are identified, tracked, and addressed appropriately
• Partner with cross-functional teams to support compliance objectives, issue resolution, and process improvement efforts
• Lead and manage the special projects as needed, including communicating with stakeholders and validate project completion

Senior Technology, CyberSecurity Compliance Professional

• Build and lead a team of engineers and analysts focused on AI runtime protection and operational AI security controls
• Define and execute strategy for AI runtime security, including guardrails, behavioral attestation, and rogue agent detection
• Operationalize AI runtime controls across AI gateways, APIs, and production environments
• Partner with IT, platform engineering, and cybersecurity teams to integrate detection, response, containment, and kill-switch capabilities
• Build scalable security operations processes to enforce AI runtime protections in real time across deployed AI systems
• Drive integration of runtime telemetry into enterprise monitoring and incident response workflows
• Establish security standards and best practices for securing AI-enabled applications and agentic systems
• Collaborate across architecture, cloud, and engineering teams to embed AI security controls into enterprise platforms.

Senior Manager, AI Runtime Security

• Define and document secure development standards and patterns for modern application architectures (web, API, microservices), with guidance grounded in industry best practices such as OWASP and informed by broader frameworks (i.e. NIST, CIS Controls).
• Develop reusable patterns for common application scenarios such as secure APIs, service-to-service communication and front-end/back-end architecture.
• Translate complex security risks into clear, developer-focused guidance that can be easily adopted.
• Collaborate with engineers and architects during design discussions to provide guidance on secure application architecture and design decisions.
• Identify common security pitfalls early in the lifecycle.
• Promote secure-by-design and secure-by-default principles to enable efficient and secure development practices.
• Support the integration of authentication and authorization patterns within application architecture.
• Align application security practices with identity and access management, identity governance, and privileged access management solutions.
• Partner with Digital Identity Services, Cybersecurity Engineering, Product Security Testing, and other teams to provide application security guidance.

Cybersecurity Engineer – Application Security Enablement

• Lead all facility-related responsibilities and security operations across the organization
• Oversee facility management, leasing, and compliance
• Manage personnel clearances, secure facilities, and physical security programs
• Ensure compliance with all government security requirements and regulations
• Conduct regular security assessments and implement improvements

Facility Security Officer

• Define, develop, and continually advance EIP's long-term cybersecurity strategy, ensuring alignment with corporate goals and evolving risk landscapes.
• Develop and present executive and board-level materials, articulating cybersecurity vision, strategic priorities, maturity metrics, and progress against objectives.
• Leverage deep experience in healthcare and/or financial services to inform strategy and ensure compliance with sector-specific regulatory frameworks (e.g., HIPAA, PCI DSS, SOX).
• Lead the strategic integration of AI into cybersecurity operations, ensuring secure adoption, risk mitigation, and compliance.
• Architect and execute initiatives to advance cybersecurity program maturity, talent development, and operational excellence.
• Direct the allocation of resources and investment in cybersecurity capabilities, controls, and technologies based on risk, business value, and strategic impact.
• Drive a security-centric culture through enterprise change management strategies, maximizing adoption of strategic priorities and minimizing resistance across a matrixed organization.
• Provide consultative expertise to EIP department leaders, project teams, and cross-functional partners to ensure strategic alignment and integration of cybersecurity priorities at every stage of project and program lifecycles.

Principal Cybersecurity Strategist

• Serve as a trusted technical advisor to the Enterprise Cyber Focal Lead, translating cyber strategy into scalable, high-impact technical solutions.
• Design, build, and implement complex cyber solutions leveraging AI/ML to improve threat detection, vulnerability management, risk prioritization, and automation.
• Lead end-to-end solution architecture, including design reviews, implementation, and operational readiness for cyber platforms and tooling.
• Apply full-stack application development expertise to build secure, resilient, and performant cyber applications and services.
• Architect and deliver solutions using AWS cloud services, following cloud-native, well-architected, and security principles.
• Apply hands-on AI/ML capabilities (GCP preferred) to build and operationalize intelligent cyber capabilities (e.g., analytics, anomaly detection, automation, decision support).
• Partner with data, AI, and platform teams to ensure solutions are scalable, secure, and production-ready.
• Own and lead application vulnerability management from a technical standpoint, including tooling, integrations, automation, and remediation workflows.
• Act as a trusted partner to Security, Platform, Reliability and Software Engineers, enabling secure, reliable, and resilient application delivery.
• Define, promote, and enforce application security best practices, including secure coding, dependency management, secrets handling, logging, and monitoring.

Senior Security Engineer

• Join a high-impact security engineering team at the forefront of enterprise cryptography, where you’ll design, build, and scale critical encryption and key management solutions that protect some of the organization’s most sensitive data.
• Work across Linux, Windows, and automation frameworks to harden systems, optimize performance, and drive secure architecture forward—while partnering with engineering and operations teams to deliver resilient, scalable solutions.
• Actively mentor and develop team members by providing technical guidance, sharing best practices, and fostering a culture of continuous learning and security excellence.

See all jobs on JobTailor