Security Engineer

• Own and evolve enterprise data security architecture across Databricks, Azure Data Lake, and enterprise reporting platforms
• Design and enforce fine-grained data access controls (RBAC, ABAC, row/column-level security) using Unity Catalog and governed tagging frameworks
• Architect identity and access management (IAM) patterns integrating Okta, Microsoft Entra ID, SailPoint, and privileged access platforms
• Define and implement PHI/PII protection strategies, including tokenization, encryption, de-identification, and masking across environments
• Establish secure data sharing and multi-tenant access models for external customers, partners, and embedded analytics
• Lead architecture for data rights, entitlements, and consent-based access controls, ensuring compliance with contractual and regulatory requirements
• Build and operationalize security controls aligned to SOX ITGC, including logical access controls, change management, and audit evidence frameworks
• Design audit-ready security architectures supporting HIPAA, SOC 2 Type II, and FedRAMP compliance requirements
• Partner with engineering, SRE, and platform teams to embed security into CI/CD pipelines, platform onboarding, and development standards
• Define and govern data classification, tagging, and lineage-aware security policies across medallion architectures
• Evaluate and recommend enterprise security tooling and governance platforms
• Produce architecture artifacts (decision records, control matrices, audit evidence) consumable by internal and external auditors

Senior Data Security Architect

• Driving security risk management and action across assigned lines of business and supporting technologies
• Representing the Chief Information Security Officer (CISO) on business-line-specific security matters
• Maintaining key stakeholder relationships up to the Management Committee level
• Operating as trusted security advisors, bridging business and technology organizations while monitoring changes in the business, technology, and threat landscape
• Clearly communicating, translating, and prioritizing security requirements in support of business operations and strategic initiatives
• Elevating business-specific risks, needs, and insights back into the Information Security organization
• Improving the effectiveness and value of security programs by ensuring risks are proactively identified, assessed, and addressed
• Partnering closely with business line risk teams, technology leaders, and control functions to drive measurable improvements in security posture
• Leading the reporting, governance, and execution of key security metrics and performance targets across business lines
• Maintaining a strong understanding of the technical and process controls that protect the Bank’s systems and information from cyber threats, including malware and other attack vectors
• Providing leadership across the BISO function, influencing strategic direction, mentoring and coaching peers, and promoting consistency in execution and best practices across the enterprise

Business Information Security Officer

• Define, architect, and support enterprise security tools in partnership with Information Security and IT teams.
• Mentor more junior members of the team.
• Contribute to and enhance the bank's perimeter security program.
• Define security requirements for new technology implementations and assess security solutions against those requirements.
• Design and implementation of selected technologies.
• Serve as a security consultant and architect on projects.
• Conduct security research and threat modeling, make recommendations to the IS/IT teams and oversee their implementation.
• Conduct risk assessments to evaluate the effectiveness of existing controls.

Principal Information Security Engineer

• Ensure that Huntington’s identity & access management services are designed to be compliant with security and privacy standards and other industry standards and practices.
• Alter security standards and settings to evolve with emerging threats in the mainframe space.
• Work with other IBM Related Huntington Mainframe teams to complete application installs/decommissions
• Work with Portfolio Manager deliver IAM projects and key milestones.
• Consult with business units when implementing access for new systems.
• Other duties as assigned

IS Technical Specialist – RACF Security Engineer

• Responsible for designing, implementing, and supporting enterprise network decryption solutions across hybrid on-premise and cloud environments
• Ensures secure visibility into encrypted traffic
• Helps maintain compliance with enterprise security standards, policies, and regulatory requirements
• Partners with infrastructure and security teams to deliver secure, scalable, and well-architected network security solutions
• Supports system and network architecture support for information security and network decryption technologies
• Supports development and execution of risk assessment methodologies
• Supports development of requirements, system architecture, and technical design of network security and decryption solutions
• Supports development of strategies for discovery, evaluation and response to emerging network and encrypted traffic threats
• Develops security incident response plans and operational support strategies
• Provides trouble resolution and serves as point of technical escalation on complex network, certificate, and decryption-related issues
• Creates presentations and seeks IT management approval
• Designs & engineers comprehensive network decryption solutions based on business requirements and defined technology standards

Information Security Advisor – Network Decryption Engineer

• Partner with CIOs, senior leadership, and technology stakeholders to assess and communicate cybersecurity risk in business terms.
• Serve as the primary cybersecurity advisor to the business, interpreting enterprise policies and providing actionable guidance.
• Identify, assess, and document security risks across products, applications, and third-party relationships.
• Deliver executive-level risk dashboards and metrics that provide transparency into the business’s security posture.
• Collaborate with the broader Cybersecurity and Risk organizations to ensure security strategies are pragmatic, risk-based, and aligned with both business priorities and technical capabilities.
• Promote awareness of regulatory and industry obligations through targeted training and awareness campaigns.
• Ensure security risk and controls assessments are conducted at appropriate intervals based on evolving threats and business changes.
• Guide technology teams in adopting enterprise cybersecurity tools, capabilities, and controls.

Cybersecurity, Technology Risk Officer

• As a Senior Account Manager here at Honeywell, you will be responsible for managing and growing key customer accounts, ensuring customer satisfaction, and driving revenue growth.
• You will act as the primary point of contact for clients, developing strong relationships and understanding their business needs to provide tailored solutions.
• In this role, you will impact Honeywell’s market presence and revenue by fostering long-term partnerships with clients and delivering exceptional account management and business development strategies.
• Note that this role requires travel up to 50% domestically.

Senior Account Manager – BMS/Fire/Security/SaaS

• Lead the design, implementation, and continuous improvement of the enterprise Secure Software Development Lifecycle (Secure SDLC) and Product Security program
• Drive implementation of a world-class enterprise Product Security and Secure SDLC control framework within the existing IT Target Operating Model
• Develop and track Product Security KPIs/KRIs
• Ensure alignment of security controls across teams
• Oversee execution of threat modeling and design security reviews for high-risk applications and APIs
• Integrate security signals from various security teams to produce holistic application risk views
• Drive risk-based prioritization by providing inputs into Agile backlogs
• Facilitate collaboration across various security functions and the Chief Software Engineering organization

Director, Product Security

• Provides technical expertise on the development and support of all activities, processes, and tools needed to protect information assets
• Implements holistic risk and control analysis including strategic mitigation planning and execution
• Utilizes industry-leading tools and solutions to enhance the security posture for the company
• Demonstrated presentation development; tailors the message as needed; comfortable presenting to all levels

Senior Info Security Consultant

• Cloud Security Engineering
• Serve as the primary security engineering resource on cloud-focused initiatives.
• Design and implement secure architectures across public and hybrid cloud environments.
• Partner with engineering teams to embed security throughout the software development lifecycle.
• Evaluate and implement cloud security controls and best practices.
• CSPM & Security Tooling
• Support and enhance Cloud Security Posture Management (CSPM) capabilities.
• Engineer, deploy, and maintain enterprise security tools and platforms.
• Develop automation to improve cloud security monitoring, remediation, and compliance reporting.
• Configure and optimize cloud security policies and controls.
• DevSecOps & Automation
• Integrate security controls into CI/CD pipelines and DevOps workflows.
• Collaborate with development teams to implement Infrastructure as Code (IaC) security practices.
• Leverage tools such as Jenkins, GitHub, Terraform, and cloud-native security services.
• Promote secure development and deployment standards across engineering teams.
• Security Consulting & Governance
• Advise Product Owners, Principal Engineers, and technical leadership on security architecture and operational considerations.
• Assist in the development and maintenance of security standards, procedures, and guidelines.
• Participate in security reviews, threat assessments, and risk mitigation activities.
• Support ongoing compliance and regulatory initiatives.
• Operations & Incident Support
• Participate in Information Security operational activities.
• Support monitoring, maintenance, and optimization of security platforms.
• Participate in on-call rotations supporting enterprise security operations.
• Assist with security investigations and cloud security incident response activities.

Information Security Engineer – CSPM Specialist

• Lead all facility-related responsibilities and security operations across the organization
• Oversee facility management, leasing, and compliance
• Manage personnel clearances, secure facilities, and physical security programs
• Ensure compliance with all government security requirements and regulations
• Conduct regular security assessments and implement improvements

Facility Security Officer

• lead the delivery of Cyber technology solutions leveraging partnerships with other technology teams
• collaborate with internal business partners to proactively address ongoing customer needs
• foster a collaborative environment with focus on continuous improvement
• accountable for build and delivery of strategic planning of Cyber products and services
• evaluate technology and set standards
• recommend and implement improvements to established business processes
• create comprehensive project plans
• remove any impediments and track overall project performance
• analyze the successful completion of business short-term and long-term goals
• own and lead enterprise security engineering domains including Identity & Access Management (IAM), Network Security, Data Security, and Security Platform Engineering
• define and execute the security engineering roadmap across authentication, authorization, segmentation, data protection, and security tooling
• build, mentor, and scale high-performing engineering teams
• partner cross-functionally with IT, infrastructure, application teams, and GRC

Senior IT Director, Cyber Security Engineering

• Provides subject matter expertise when applying security concepts
• Leverages technical knowledge and industry experience to design, build, and maintain technology solutions
• Responsible for deliverables related to project timelines
• Responsible for working with architecture to take high level architectural designs and determine the specifics around implementation details (ex: sizing) integration details, onboarding and operationalization
• Evaluates patches, updates, and ongoing maintenance
• Determines impacts to existing solutions when new standards are implemented
• Utilizes change control and other governance processes to ensure alignment of solutions
• Develops detailed implementation, configuration, design, and engineering documentation
• Build and implement solutions
• Works with operational partners to enable transition and day-to-day supportability
• Provides engineering support to existing technology in a production environment and collaborating with other groups as required
• Seeks opportunities to grow a broad knowledge base to complement specific subject matter expertise

Security Engineer – Cryptographic Engineer, Post Quantum Cryptography

• Serve as a trusted technical advisor to the Enterprise Cyber Focal Lead, translating cyber strategy into scalable, high-impact technical solutions.
• Design, build, and implement complex cyber solutions leveraging AI/ML to improve threat detection, vulnerability management, risk prioritization, and automation.
• Lead end-to-end solution architecture, including design reviews, implementation, and operational readiness for cyber platforms and tooling.
• Apply full-stack application development expertise to build secure, resilient, and performant cyber applications and services.
• Architect and deliver solutions using AWS cloud services, following cloud-native, well-architected, and security principles.
• Apply hands-on AI/ML capabilities (GCP preferred) to build and operationalize intelligent cyber capabilities (e.g., analytics, anomaly detection, automation, decision support).
• Partner with data, AI, and platform teams to ensure solutions are scalable, secure, and production-ready.
• Own and lead application vulnerability management from a technical standpoint, including tooling, integrations, automation, and remediation workflows.
• Act as a trusted partner to Security, Platform, Reliability and Software Engineers, enabling secure, reliable, and resilient application delivery.
• Define, promote, and enforce application security best practices, including secure coding, dependency management, secrets handling, logging, and monitoring.

Senior Security Engineer

• Be a security thought leader within Rockwell Automation through educating internal personnel and influencing proper security development techniques and tools.
• Provide guidance to senior levels of management regarding product security risk and exposure.
• Drive the process for managing vulnerabilities and their resolution.
• Provide periodic metrics demonstrating our vulnerability posture.
• Drive the proper application of security principles and techniques with product groups.
• Research current security trends in Industrial Control Systems, software, embedded systems, hardware design, cloud-to-edge, and application security and collaborate with security experts to ensure proper security requirements are put in place.
• Participate and provide critical analysis in security exception reviews and then advocate/review those exceptions with senior management.
• Interact with Digital Trust on security initiatives that the product groups need to participate in.
• Represents the business unit for customer presentations and meetings with regards to security.
• Position requires an understanding of security in the IT and automation markets, competitive offerings, and customer needs to provide direction and implementation in Rockwell Automation control system products and services.

Product Security Lead

• Partner with the broader enterprise Dealer Tire security teams to continuously monitor, evaluate, and harden the collective security posture across all consumer-facing digital applications.
• Serve as the principal subject matter expert (SME) for all cloud installations, consumer data privacy safeguards, PII protection, and PCI compliance requirements and provide high-level technical blueprinting and structural signoffs for annual SOC 2 and PCI security lifecycles.
• Review complex pull requests, infrastructure scripts, and third-party vendor integrations to ensure alignment with master architecture guidelines.
• Identify, prototype, and champion the introduction of cutting-edge tech stacks, edge-computing practices, and optimization methods that drive organizational value.
• Function as an elite advisory consultant to the SRE, Core Systems, and DevOps management layers as needed for Infrastructure.

Principal Architect – Security, Performance

• Join a high-impact security engineering team at the forefront of enterprise cryptography, where you’ll design, build, and scale critical encryption and key management solutions that protect some of the organization’s most sensitive data.
• Work across Linux, Windows, and automation frameworks to harden systems, optimize performance, and drive secure architecture forward—while partnering with engineering and operations teams to deliver resilient, scalable solutions.
• Actively mentor and develop team members by providing technical guidance, sharing best practices, and fostering a culture of continuous learning and security excellence.

Lead Security Encryption Engineer

• Develops and implements security standards, procedures, and guidelines for multiple platforms and diverse system environments
• Facilitates system access, operations, and maintenance at KeyBank
• Identifies and analyzes security risks, communicates risks to appropriate parties and ensures mitigation to enable risk-based business decision making
• Understands security and technology strategies, related security controls and processes, and general business/financial knowledge
• Strong security, networking, risk management, and technical skills

Information Security Consultant

• Serve as a senior individual contributor responsible for leading and advancing the organization’s cybersecurity governance, risk management, and maturity initiatives
• Drive complex, cross-functional initiatives that embed secure, compliant, and scalable practices into technology, data, and AI solutions
• Design and implement governance frameworks, control structures, and engineering-enabled solutions that enhance the effectiveness, consistency, and automation of risk assessments, RCSAs, and control monitoring
• Act as both a governance and technical authority, partnering closely with engineering, data, and risk teams
• Own and lead cybersecurity governance initiatives spanning risk identification, control design, policy management, and maturity improvement
• Drive execution of cybersecurity Risk & Control Self‑Assessments (RCSAs)
• Partner with technology, security, and risk teams to drive improved and sustained maturity gains
• Maintain traceability between risks, controls, assessment results, and remediation activities
• Lead the development, maintenance, and rationalization of cybersecurity policies, standards, and procedures in alignment with industry best practices
• Design, document, and maintain cyber risk statements, control descriptions, and control narratives suitable for audits and regulatory exams
• Track and report on control performance, risk posture, and remediation progress using defined metrics and governance forums
• Manage complex projects requiring coordination across IT, Information Security, ERM, Privacy, and Audit
• Act as a trusted advisor to senior leaders on risk posture, maturity trends, and program health
• Develop and maintain automation solutions to improve efficiency of risk assessments, control testing, and evidence collection
• Drive integration of AI and automation into RCSA, CRI assessments, and risk reporting processes to improve scalability, consistency, and accuracy

Principal Engineer I, Cyber IT Security Governance

• Monitor and triage alerts across various security tools
• Validate alert severity, business impact, affected assets, containment status, and escalation requirements.
• Coordinate security events from initial triage through containment, documentation, closure, and post-incident follow-up.
• Support daily dashboard review, security ticket queues, alert quality checks, and operational reporting.
• Develop, tune, and maintain detection logic in security tools.
• Reduce false positives and alert noise by reviewing recurring detections.
• Assist with incident response for endpoint, identity, cloud, email, and suspicious activity events.
• Support security operations across various Microsoft security tools.
• Create and maintain security runbooks and knowledge base articles.

See all jobs on JobTailor