Security Engineer

• Recruit, coach, and retain a high-performing team of Domain Consultants; provide mentorship, career development, and technical enablement.
• Set the strategy and standards for hands-on Proof of Value (PoV) and technical validation engagements across the team.
• Align technical resources to theater and regional sales priorities and forecast technical wins.
• Aggregate real-world field feedback and partner directly with Product Management and Engineering.
• Guide discussions on emerging AI threats and model vulnerabilities.

Manager, Domain Consulting – AI Security

• Lead and develop the Security Engineering team by providing technical leadership, coaching, mentorship, and performance management while fostering a culture of continuous improvement and security awareness.
• Develop, implement, and maintain enterprise security strategies, policies, standards, and controls that align with business objectives and regulatory frameworks including ISO 27001, SOC 2, NIST, and GDPR.
• Lead security operations, including incident response, threat detection, vulnerability management, security monitoring, root cause analysis, and continuous improvement of the organization's security posture.
• Design, implement, and manage security technologies including SIEM, endpoint detection and response (EDR), firewalls, web application firewalls (WAF), identity and access management (IAM), and cloud security controls across AWS and GCP environments.
• Partner cross-functionally with Engineering, Infrastructure, Product, Legal, HR, and IT teams to integrate security into system design, change management, application development, and enterprise risk management while monitoring security metrics, supporting audits, and driving ongoing compliance initiatives.

Security Manager

• Collaborate across R&D and cloud hosting teams to strategically improve the security posture of business-critical multi-tier solutions in legacy, hybrid cloud, and public cloud environments. Includes tactical refactoring, environment promotion, and Secure by Default deployment and configuration to maintain security consistency if not parity between all environments.
• Collaborate in the planning of evolutionary paths for secure architectures and systems incorporating and aligning dependent third-party architectures as well as the adoption of new technologies while maintaining a robust and consistent security posture. Includes employing specific security compensating controls, defense in depth, and security posture aspects in support of Secure by Design, Secure by Default (deployment and configuration), and Zero Trust Architectural principles.
• Work with development teams providing security assessment and hardening of products spanning the SDLC and development pipelines left/early-shifted wherever possible. Includes performing periodic secure design, threat modeling, code reviews, or direct verification to identify and triage issues assessing the security risk and recommending remediation steps for vulnerabilities and weaknesses.
• Collaborate with Product Management stakeholders to ensure security implementations are consistent with business objectives, customer requirements, and applicable global regulations.
• Identify, train, and partner with Security Champions in place with product R&D teams. Help champions assess and gauge risk to identify security gaps or seams in the products and integrated solutions.
• Create and maintain secure engineering documentation, guidance, or training collateral supporting with PSO standards, policies, and procedures.
• Collaborate with other teams within security to identify new tools and processes to integrate into the Secure SDLC.
• Recommend and promote software security policies, standards, and procedures that can improve the global SAS security posture.
• Mentor and coach within the Product Security Office and other Security Architects aligned with your security breadth and building depth via subject matter expertise.
• Ensure all applicable security policies and processes are followed to support the organization's secure software development goals.

Senior Application Security Architect

• Define the Vision: Develop and champion a holistic, end-to-end strategy for NetFlow security monitoring, ensuring every feature is secure, robust, and intuitive from day one.
• Lead with Impact: Inspire, mentor, and grow a high-performing team of engineers—empowering them to push boundaries, solve big problems, and deliver exceptional results.
• Drive Automation and Innovation: Build and scale automated testing pipelines, leveraging the latest tools and technologies to maximize speed, coverage, and confidence in every release.
• Champion Security and Quality: Integrate cutting-edge security, threat monitoring, and incident response into wireline and mobility data flows, protecting our platform and customers against emerging risks.
• Collaborate Across AT&T: Partner with the SOC, product, and security teams to embed quality and security at every stage of development and communicate insights to business and technical leaders.
• Make a Measurable Difference: Use data-driven approaches to continuously improve processes, tools, and team performance—translating feedback and lessons learned into lasting platform excellence.
• Elevate the User Experience: Balance rigorous security with human-centered design, ensuring our solutions are as usable as they are safe.

Associate Director, Cybersecurity – Data Acquisition

• Design, develop, and operate secure, AI‑enabled cybersecurity platforms as a hands‑on individual contributor
• Build and maintain full‑stack applications, including backend services, APIs, integrations, and web‑based user interfaces
• Architect and deploy cloud‑native solutions aligned to enterprise public cloud and security standards
• Integrate AI/ML capabilities into cybersecurity platforms while implementing strong AI security controls
• Implement DevSecOps practices, CI/CD pipelines, and infrastructure‑as‑code for secure, repeatable deployments
• Support design and development of test automation for building End-To-End test cases and repeatable regression tests
• Support production operations, troubleshooting, and incident resolution across application, cloud, and security layers
• Collaborate with architecture, governance, risk, and platform teams to deliver compliant, scalable solutions
• Contribute to proof‑of‑concepts, lab testing, documentation, and reusable patterns to accelerate innovation

Full Stack Developer, AI Security

• Identify, assess, and document controls and risks across Network and Security Architecture, maintaining a proactive approach to emerging threats and vulnerabilities
• Continuously evaluate emerging security threats impacting networking operations and proactively recommend mitigations and enhancements to existing controls
• Drive efforts around Issues Management and Remediation in line with the Technology Risk Management program
• Partner with and advise key stakeholders across technology, business, and risk partners to identify, assess, respond, and monitor key risks to keep AT&T and our customers safe and resilient
• Support Tech Risk teams responsible for risk monitoring, periodic controls testing, evidence collection, remediation, and audit readiness efforts

Network Security Architecture Risk Lead

• Lead security architecture, risk remediation, control design, technology assessment, and roadmap development
• Collaborate with Information Security, Information Technology, Global Managed Services, DevOps, and other teams as needed to design, promote, and implement information security solutions, tools, and automation that support the continuous compliance of information systems and assets
• Partner with leadership to define strategy and roadmap for the organization
• Work collaboratively with stakeholders to identify, evaluate, and recommend best-fit solutions and lead implementation efforts where appropriate
• Provide security consultation to internal clients and represent Information Security in CAB, ARB, and related governance forums
• Lead the development and maturation of the Vulnerability Management program
• Ensure written procedures exist for information security controls and processes and that they are consistently followed
• Define security strategy, standards, product requirements, and practical control expectations for enterprise and product environments
• Review Itron product architectures, deployment models, emerging technologies, and security products for risk, fit, and readiness
• Support AI governance initiatives through security requirements, risk review processes, and control expectations for AI-enabled solutions
• Manage risk remediation issues and action plans from documentation through resolution, ensuring accountability and effective execution
• Translate threat intelligence and emerging vulnerability trends into actionable security requirements and control improvements
• Maintain current knowledge of information security issues, threats, technologies, and industry best practices
• Identify and implement process improvement opportunities across security controls, including logging, monitoring, incident response, vulnerability management, and penetration testing
• Lead, mentor, and develop a team of information security professionals while fostering a collaborative, agile, and innovative culture.

Senior Manager, Information Security

• The Workday Security Developer III is responsible for performing system analysis and designing to include requirements, specifications, configuration, documentation, testing, and development of security roles and policies within Workday.
• Conducts highly complex work, without supervision and with extensive latitude for independent judgment.
• Serves as a liaison between TSG groups, clients, and vendors and as a mentor to others on the team and in the department.
• Design, configure, and maintain Workday security for HCM, Payroll, Financials, Recruiting, Learning, and other Workday modules.
• Perform security analysis, troubleshooting, and root cause analysis for access-related issues.
• Collaborate with HR, Finance, Supply Chain, Internal Audit, Compliance, and business stakeholders to gather and implement security requirements.

Workday Security Developer

• Engineer and deploy security controls for AI/ML and Generative AI systems, including model-level, data-level, and platform-level protections
• Implement AI guardrails and safety controls (e.g., prompt injection defenses, content safety filters, policy enforcement, model access controls)
• Support secure AI platform onboarding for internal teams, ensuring alignment with Truist AI Security Standards and Review Processes
• Perform technical security assessments of AI systems and cloud-hosted AI services
• Design and implement Infrastructure as Code (IaC) using Terraform and CloudFormation
• Build and maintain CI/CD pipelines (GitLab) for security tooling, guardrails, and configuration-as-code
• Automate operational workflows using Python and scripting to reduce manual security operations
• Engineer secure, scalable cloud environments supporting AI workloads across AWS and Azure
• Implement and integrate cloud security tooling (e.g., Wiz) to provide visibility and control over AI assets
• Secure containerized and orchestrated workloads supporting AI pipelines (ECS, EKS, Kubernetes)
• Partner with AI platform teams, application engineers, cloud security, and governance stakeholders to embed security into AI delivery
• Contribute to the evolution of enterprise AI security standards, patterns, and reference architectures
• Support incident response, threat modeling, and remediation activities related to AI systems

Senior Associate, AI Security Engineer

• Help design, implement, test, and operate the controls that keep enterprise AI systems safe
• Focus on security engineering foundations required for AI-enabled applications, agents, and tool-integrated automations
• Implement security controls for AI and agentic systems and validate configurations
• Support adversarial test preparation and build monitoring logic
• Collaborate with AI platform teams, application engineers, cloud security, and governance stakeholders

Senior AI Security Engineer

• own and direct the cybersecurity design and analysis of multiple medical devices
• Demonstrate subject matter expert knowledge in state-of-the-art security principles
• Resolve difficult problems, from conception to final design with team input
• Plan, lead, and deliver project assignments in the evaluation, selection and adaptation of various cybersecurity engineering techniques, procedures, and criteria with minimal guidance
• Contributes to a cybersecurity vision that aligns with the organization's vision and strategic plan
• Utilizes solid understanding of device and system connectivity concepts in a medical device domain
• Provides direction to technical team members that are accountable for implementing cybersecurity, integration, and connectivity deliverables
• Exhibits creativity and innovation in completing divisional and cross-functional/business unit goals and objectives.

Principal Engineer, Product Cybersecurity

• Design and implement cybersecurity solutions
• Provide technical expertise and support for cybersecurity solutions
• Lead technical assessments of systems and applications to ensure compliance
• Develop project scope requirements and support model creation
• Collaborate closely with cross functional IT teams

Cybersecurity Engineer II

• Provide strategic and hands-on leadership for enterprise Endpoint Detection and Response (EDR), endpoint protection, and cloud workload security capabilities
• Administer, deploy, and maintain CrowdStrike Falcon sensors across enterprise endpoints, servers, virtual machines, and cloud workloads
• Engineer and optimize Falcon policies, including Prevention, EDR/XDR, Device Control, Firewall, USB, Identity Protection, and Zero Trust profiles
• Monitor sensor health, agent versioning, coverage gaps, and deployment failures; coordinate remediation with platform and endpoint teams
• Administer role‑based access control (RBAC), API keys, integrations, and logging pipelines for CrowdStrike Falcon

Associate Security Engineer – CrowdStrike Falcon

• As a Workday Security Analyst, you will be a strategic partner in our Workday ecosystem, balancing robust security with seamless user access.
• You will serve as a trusted collaborator to HR, IT, and Compliance teams, ensuring our data remains secure while empowering our global workforce to do their best work.
• Design and maintain robust, role-based security structures that prioritize the principle of the least privilege.
• Lead regular security audits and collaborate with partners to uphold the highest standards of data privacy, regulatory compliance, and segregation of duties.
• Stay ahead of the curve by supervising Workday releases and leading security enhancements that keep our environment efficient, scalable, and future-ready.
• Cultivate a culture of transparency by maintaining clear documentation and guiding multi-functional teams through security best practices and system updates.

Workday Security Administrator II

• Working closely with Wikimedia movement organizers to mitigate risks and define best practices.
• Strengthening the Foundation’s risk management approach.
• Leading risk assessments for community conferences and other events.
• Creating emergency response plans for physical security threats.
• Being on-call to review emergency alerts and ensuring response to threats.
• Briefing the Deputy General Counsel and senior leadership regularly.

Principal, Global Event Security and Risk Management

• Owning our compliance program end to end: driving our annual SOC 2 Type 2 audits from evidence collection through auditor walkthroughs, and running Vanta as our governance home base year-round.
• Completing security questionnaires, addendums, and AI risk assessments for the IT and security teams at our hospital clients — and making sure they understand we're doing the right thing. (Health systems ask great, hard questions. You'll have great answers.)
• Running real BCDR tests and treating them like live incidents to find the gaps before the gaps find us.
• Coordinating annual pen tests and driving remediation of findings within SLA.
• Managing security across our stack: AWS, Heroku, Cloudflare, Google Workspace, GitHub, and our communication tools.
• Administering our laptop fleet for a fully remote team — imaging, shipping, MDM enrollment, inventory, and end-of-life — so every machine is encrypted, managed, and remotely wipeable.
• Running access reviews and enforcing least privilege: pruning admin lists, enforcing SSO and 2FA, and tuning password policies.
• Ensuring new employees get access to everything they need on day one, and departing ones are locked out the same day — partnering with HR and Finance on a tight onboarding/offboarding loop through Rippling and Google.
• Evaluating and securing AI tooling — from how our team uses Claude and MCP servers to partnering with engineering on customer questions about AI risk, bias testing, and model governance.
• Doing vendor management and procurement reviews, and finding savings while you're at it.
• Staying on top of the rapidly evolving AI threat landscape and adapting our defenses and team training as fast as the attackers adapt theirs.
• Playing professor and educating our team on everything security.
• Advising leadership on security matters during project planning, and working with our full stack engineers to ship improvements you identify.
• Being the savior in the event of a security incident — leading response, analysis, and the write-up afterward.
• Supporting co-workers when they manage to put their computers in a bad place. (They should enjoy talking to you, and you to them!)

Senior IT/Security Engineer – AI-native

• Provide Tier 3 operational support for SailPoint IdentityIQ and ISC.
• Work closely with IAM leadership, engineering, product, security, and compliance teams.
• Partner with application onboarding teams to validate entitlement catalogs and metadata.
• Communicate operational findings and AI‑assisted insights clearly to stakeholders.
• Support peer knowledge sharing and operational consistency without people‑management responsibility.
• Execute Tier 3 production support for SailPoint IdentityIQ (IIQ) and Identity Security Cloud (ISC).
• Build and operationalize AI‑assisted tools and workflows to improve access operations, incident response, and analysis.
• Reduce manual effort and operational friction through intelligent automation and AI‑assisted decision support.
• Support stable, auditable, and scalable IAM operations in a production environment.
• Collaborate closely with IAM leadership while remaining hands‑on in production operations.

Lead Cybersecurity, IAM Operations – SailPoint IdentityIQ

• Configure business operating environments securely using CIS best practices.
• Perform penetration testing and threat hunting to identify potential risks.
• Monitor for and respond to incidents in the Firm’s hybrid environment.
• Keep infrastructure current, making recommendations and continually improving security technologies.
• Analyze, design, and develop programs, shell scripts, tests, and infrastructure automation capabilities.
• Work with analysts and engineers across the organization to continually improve cyber resilience.
• Provide support to understand and develop system requirements and technical solutions for cybersecurity engineering based on system architectures (CIS Controls, MITRE ATT&CK Framework, and NIST Cyber Security Framework).
• Support the maturation of the enterprise architecture to align with the Firm’s information security and risks to the organizational operations, organizational assets, and individuals.
• Develop alternatives of system designs and/or architecture, which consider trade-offs between security requirements, functional/operational requirements, and cost.
• Identify and define the requirements of the overall security of the network.
• Plan, engineer, and monitor overall security implementation of network systems.
• Support in configuring and implementing network security tools.
• Test and provide solutions for system weaknesses, threats, and security issues.
• Research and identify latest suitable technologies and processes that will improve the overall security of the system.
• Regularly audit the existing network configuration and provide improvement recommendations.
• Other duties as assigned.

• Own and optimize the Elastic Security platform (Elasticsearch, Kibana, Fleet, Logstash, Elastic Agents)
• Design and maintain ingestion pipelines for cloud, endpoint, network, and application telemetry
• Improve telemetry quality, data retention, performance, and investigation workflows
• Integrate SIEM workflows with SOAR and automation tooling
• Build and maintain a Detection-as-Code pipeline using Git-based workflows and CI/CD automation
• Develop, test, tune, and maintain high-fidelity detections using Elastic Security, EQL, and KQL
• Reduce alert noise through tuning, enrichment, suppression, and exception handling
• Map detections to MITRE ATT&CK and drive detection coverage strategy
• Assist with complex alert escalations and perform initial incident scoping
• Translate incident learnings into improved detections and telemetry coverage
• Partner with other teams to improve logging and visibility

Senior Security Engineer – Elastic SIEM, Detection Engineering

• Provide advanced information security reporting and metrics strategy and implementation platform
• Engage and influence stakeholders within ICS and partners on net new or on material changes to reporting
• Leverage existing platforms (data lake, splunk, etc.) to generate insights
• Provide consulting on security risk assessment and research, and recommend remediation plans and strategies
• Support the development, maintenance, and optimization DLP rules and policies using techniques such as: Regular expressions, Keyword and dictionary‑based detection, Exact Data Match (EDM) / Indexed Data Match (IDM), Document fingerprinting, Machine‑learning classifiers, Classification labels and metadata
• Develop, maintain, and update reporting dashboards in Tableau and PowerBi.
• Assist an aid in other development efforts related to automation, AI prompts, and other non-DLP policy development efforts.

Security Engineer jobs in North Carolina

See all jobs on JobTailor