Security Engineer

• Driving security risk management and action across assigned lines of business and supporting technologies
• Representing the Chief Information Security Officer (CISO) on business-line-specific security matters
• Maintaining key stakeholder relationships up to the Management Committee level
• Operating as trusted security advisors, bridging business and technology organizations while monitoring changes in the business, technology, and threat landscape
• Clearly communicating, translating, and prioritizing security requirements in support of business operations and strategic initiatives
• Elevating business-specific risks, needs, and insights back into the Information Security organization
• Improving the effectiveness and value of security programs by ensuring risks are proactively identified, assessed, and addressed
• Partnering closely with business line risk teams, technology leaders, and control functions to drive measurable improvements in security posture
• Leading the reporting, governance, and execution of key security metrics and performance targets across business lines
• Maintaining a strong understanding of the technical and process controls that protect the Bank’s systems and information from cyber threats, including malware and other attack vectors
• Providing leadership across the BISO function, influencing strategic direction, mentoring and coaching peers, and promoting consistency in execution and best practices across the enterprise

Business Information Security Officer

• Define and execute the cybersecurity vision, strategy, and multi-year roadmap
• Provide leadership for cybersecurity operations including EDR, vulnerability management, incident response, and threat detection
• Drive standardization and optimization of the security tool stack across managed and augmented clients
• Formalize and maintain governance, risk, and compliance frameworks including SOC2 alignment
• Lead enterprise incident response strategy, ensuring readiness and effective remediation
• Act as executive escalation point for major security incidents and client-impacting events
• Own budgeting, forecasting, and resource planning for the security function
• Lead risk assessments and ensure mitigation strategies are implemented
• Build, mentor, and develop a high-performing cybersecurity team
• Foster a culture of security awareness and continuous improvement
• Collaborate cross-functionally with Engineering, Consulting, Product, and Project teams
• Represent cybersecurity in executive forums and client discussions in partnership with the CISO and executive leadership

Director of Cybersecurity

• Lead all facility-related responsibilities and security operations across the organization
• Oversee facility management, leasing, and compliance
• Manage personnel clearances, secure facilities, and physical security programs
• Ensure compliance with all government security requirements and regulations
• Conduct regular security assessments and implement improvements

Facility Security Officer

• Develop, configure, and manage security policies to ensure the protection of data
• Compliance with regulations and prevention of security threats
• Work closely with security teams, network engineers, and application administrators
• Implement and enforce policies that align with the organization’s security strategy and business goals
• Implements and supports security solutions and technologies to protect data/assets from unauthorized access
• Provides project leadership, security oversight, and risk management on security projects
• Sets security design guidelines, frameworks, and models
• Works to identify new security issues and risks and develops mitigation plans
• Helps identify and document security objectives
• Participates in projects that develop new intellectual property
• Trains/mentors members of the team
• Builds relationships and trust across the organization
• Evaluates and recommends new and emerging security products and technologies
• Supports acquisition and vendor risk assessment due diligence
• Leads the building, deployment, and maintenance of security tools utilized by the insider threat program
• Proactively seeks solutions to mitigate risk and clearly communicate risks to the appropriate stakeholders
• Monitor the performance and availability of the Netskope platform using tools like Prometheus, Grafana
• Develop and maintain incident response processes for handling system outages, performance degradation, or security incidents
• Participate in on-call rotations to provide 24/7 support for critical issues
• Conduct root cause analysis (RCA) post-incident to identify systemic issues and implement corrective measures to prevent recurrence
• Design and implement strategies for platform scalability to support growth in users, traffic, and security demands
• Work with security teams to ensure the Netskope platform is secure by regularly performing vulnerability assessments
• Develop and maintain disaster recovery (DR) and business continuity plans to ensure the Netskope platform can recover from catastrophic failures

Senior Info Security Engineer – Netskope ZTNA Platform

• Monitor and triage alerts across various security tools
• Validate alert severity, business impact, affected assets, containment status, and escalation requirements.
• Coordinate security events from initial triage through containment, documentation, closure, and post-incident follow-up.
• Support daily dashboard review, security ticket queues, alert quality checks, and operational reporting.
• Develop, tune, and maintain detection logic in security tools.
• Reduce false positives and alert noise by reviewing recurring detections.
• Assist with incident response for endpoint, identity, cloud, email, and suspicious activity events.
• Support security operations across various Microsoft security tools.
• Create and maintain security runbooks and knowledge base articles.

• You will be the operating second to the CISO and own the bank-entity scope of Mercury's 2LOD Information Security program.
• Keep the program examiner-ready by maintaining coherent policy architecture and evidenced controls
• Own the examiner-ready narrative and coordinate the evidence for OCC, FFIEC, FDIC, and FRB examiner inquiries.
• Lead remediation of identified FFIEC IT control deficiencies to ensure charter readiness.
• Manage relationships with internal audit and external assessors.
• Coach and grow the GRC sub-team while running a recurring training cadence.
• Ensure third-party risk evidence holds up to bank-grade scrutiny.

Deputy Chief Information Security Officer

• We are seeking a highly motivated Senior Security Engineer with a strong passion for Identity and Access Management (IAM) to join our Enterprise Security & Infrastructure (ESI) organization.
• The ideal candidate brings hands-on experience designing, engineering, implementing, and supporting enterprise-scale identity solutions across hybrid environments (on-premises and cloud).
• This role requires a deep understanding of modern identity technologies, along with the ability to secure and optimize identity platforms that support critical business operations.
• A successful engineer in this role will maintain awareness of new security and identity trends, research, evaluate, design, and recommend technical security solutions for the enterprise.
• This role is critical in ensuring the secure, efficient, and compliant management of identities and access across the organization, helping to protect enterprise assets while enabling business productivity.
• The Senior Security Engineer, Identity & Access Management is responsible for designing, implementing, and maintaining secure, scalable IAM solutions across hybrid environments, while driving modernization toward Zero Trust and cloud-based identity models.
• This role focuses on engineering automated identity processes, strengthening access governance and privileged access controls, and integrating AI-enabled capabilities to enhance security and operational efficiency.
• The engineer partners closely with cross-functional teams to assess and mitigate identity-related risks, implements monitoring and automated response for identity threats, and contributes to technology evaluation and innovation.
• Additionally, the role ensures compliance with regulatory requirements, supports audit readiness, and establishes standards and best practices to continuously improve enterprise identity security.

Senior Security Engineer – Identity and Access Management

• Work closely with client executives and management teams to understand their businesses and assist in identifying and managing financial and operational risks within their business systems to ensure technology risks are managed
• Develop in-depth knowledge of clients’ businesses and industries by having direct client interaction while working on multiple aspects of an engagement
• Think independently and strategically about your clients’ business, systems and risks providing recommendations for business and process improvements based upon knowledge gained relative to the client’s operations, processes and business objectives
• Provide strategic business advice to clients by assisting in the implementation of new processes and controls that address key risks
• Assess, manage and optimize information technology risk across a wide range of areas, IT general controls, financial account and auditing, IT strategy and governance, IT regulatory and compliance requirements and business continuity
• Review clients' processes and controls against industry frameworks, identifying gaps in design and execution, and communicating issues and recommendations to clients
• Assist in the development of audit programs and the execution of internal audits and IT control assessments in the areas of: IT strategy and governance IT operations, business process, key reports (IPE), automated controls ITGC and application controls Regulatory and compliance requirements, specifically Sarbanes Oxley
• Assist in drafting comprehensive executive summaries and final reports for delivery to the client, documenting and reviewing engagement work papers in accordance with industry-accepted internal audit methodologies
• Act as a valued business advisor, build relationships and communicate effectively with the client to provide superior client service
• Continue to develop your knowledge and experience working with a variety of technology environments, platforms, applications and tools/utilities
• Demonstrate the desire to continually grow, learn and develop skills and knowledge through external and internal education, training and cross-training opportunities to maximize personal contribution to the organizational goals and ongoing career development
• Utilize your entrepreneurial skills to network and build strong relationships internally and externally with clients
• Enjoy friendships, social activities and team outings that encourage a work-life balance

IT Audit, Cybersecurity & Risk Consultant – SOC Focus

• Develop and execute an enterprise-wide technology strategy that supports organizational growth, operational efficiency, and long-term scalability.
• Provide executive guidance on technology investments, modernization priorities, and digital transformation initiatives.
• Establish enterprise standards for system architecture, resilience, performance, and service continuity.
• Ensure technology programs are aligned with business needs, compliance obligations, and strategic objectives.
• Lead technology integrations for new lines of business as they are added.
• Identify data security, identity consolidation and systems rationale across multiple environments.
• Lead enterprise system implementations, including CRM, ERP/finance, CLM, member platforms, and program management systems.
• Direct system design, configuration, workflow mapping, and cross-functional adoption.
• Oversee integration strategy using APIs, middleware, automation frameworks, and MDM principles to maintain a single source of truth.
• Govern change management, system sustainability, documentation, and operational performance across all major platforms.
• Build and maintain secure and scalable data environments, including an enterprise data lake, data warehouses, and reporting ecosystems.
• Define and enforce data governance standards covering taxonomy, metadata, lineage, retention, and quality.
• Ensure data architecture supports analytics, forecasting, reporting, and emerging AI-enabled capabilities.
• Strengthen data visibility, consistency, and reliability across business functions.
• Lead the company’s cybersecurity program, including policy development, identity and access controls, vulnerability management, and continuous monitoring.
• Ensure compliance with federal frameworks, including NIST 800-171, CUI handling, DFARS requirements, CMMC readiness, and FedRAMP-aligned controls.
• Develop systems and processes to manage Classified Data as required.
• Own technology and cybersecurity risk management in alignment with federal and contractual requirements.
• Oversee incident response, audit preparation, third-party security evaluations, and remediation planning.
• Serve as the primary liaison with auditors, compliance consultants, and government technology representatives.
• Lead all IT operations, including service delivery, helpdesk support, cloud environments, on-premise infrastructure, network administration, and device management.
• Implement ITIL-aligned processes for change control, ticket management, escalation, and operational workflow management.
• Ensure reliable uptime, strong SLAs, and frictionless employee access to technology services.
• Maintain business continuity, disaster recovery readiness, and long-term infrastructure modernization plans.
• Manage relationships with technology vendors, SaaS providers, MSPs, and system integrators.
• Oversee contract evaluation, renewal strategy, licensing optimization, and cost management.
• Establish a framework for build-versus-buy decisions and long-term platform lifecycle management.
• Ensure vendor solutions meet performance, compliance, and security requirements.
• Assess talent and identify gaps, Build, mentor, and lead high-performing teams across IT operations, security, data architecture, systems administration, and enterprise applications.
• Promote a culture of accountability, transparency, documentation, and continuous improvement.
• Strengthen cross-functional engagement and drive organization-wide adoption of technology and security practices.
• Provide coaching, development, and clear expectations to ensure operational excellence and professional growth.

Vice President – Technology and Security

• Support security control assessment activities
• Gather and organize assessment evidence
• Document security control implementation
• Conduct security testing and evaluations
• Assist with vulnerability scans and analysis
• Create of assessment reports and briefings
• Maintain assessment documentation and tracking sheets
• Lead security control interviews
• Prepare assessment deliverables
• Applying NIST security controls and frameworks
• Support continuous monitoring activities
• Assist with security documentation review
• Contribute to Plans of Action and Milestones (POA&Ms) development
• Participate in team meetings and technical discussions

Security Control Assessor

• Define and lead the company’s IT strategy, ensuring internal systems, infrastructure, and technology operations operate efficiently and scale effectively
• Establish long-term operational roadmaps for enterprise systems, endpoint management, networking, collaboration platforms, and employee technology experience
• Drive modernization and optimization of internal technology ecosystems through automation, integration, and operational design
• Lead strategic planning for IT architecture, business continuity, disaster recovery, and operational resilience
• Establish operational standards, governance models, and lifecycle management practices across enterprise technology systems
• Oversee enterprise technology vendors, procurement strategy, and platform investments to ensure operational efficiency, scalability, and cost effectiveness
• Ensure internal technology operations support organizational productivity, security, and long-term business objectives
• Define and lead the company’s enterprise cybersecurity and risk management strategy
• Establish scalable security governance frameworks, policies, and operational controls that protect company systems, data, and users
• Oversee enterprise compliance and certification programs and other applicable security and regulatory standards
• Partner with executive leadership to proactively identify, assess, and mitigate operational and cybersecurity risks
• Lead organizational security strategy across identity management, endpoint security, access governance, incident response, and third-party risk management
• Ensure the company maintains audit readiness and operational compliance through scalable controls, processes, and documentation practices
• Drive company-wide security awareness and risk management practices that strengthen organizational resilience
• Define and lead the company’s enterprise AI enablement strategy, driving adoption of AI technologies across business functions to improve operational scale, efficiency, and decision-making
• Partner with executive leadership to identify high-impact opportunities for AI, automation, and intelligent workflow transformation across the organization
• Establish governance frameworks, operational standards, and best practices for responsible and secure AI usage
• Drive modernization of internal systems and workflows through AI-powered tooling, automation, and process redesign
• Evaluate and implement emerging technologies that improve organizational effectiveness and reduce operational friction
• Partner cross-functionally to ensure AI initiatives align with business priorities, security standards, and long-term operational strategy
• Promote organization-wide AI fluency and enablement through tooling, education, and operational guidance
• Define the strategy for employee technology experience across a distributed workforce, ensuring scalable, secure, and efficient operational support
• Oversee initiatives that improve employee productivity, onboarding experiences, collaboration, and operational enablement through technology and automation
• Oversee operational support for remote employees and a small onsite office environment, ensuring alignment with company standards and business continuity needs
• Define the strategic roadmap for enterprise technology, cybersecurity, and internal operational systems
• Serve as a key cross-functional leader partnering with Product, Engineering, Finance, Legal, People, and executive leadership to align technology investments with company priorities
• Lead organizational planning for enterprise systems, operational scalability, security posture, and AI transformation initiatives
• Build, mentor, and develop high-performing teams while fostering a culture of innovation, accountability, and operational excellence

Director of IT – Cybersecurity

• Serve as the technical bridge between global standards and component-level implementation
• Translate requirements into concrete implementation plans
• Coordinate across internal development teams and suppliers worldwide to deliver compliant, high-quality solutions
• Verify component implementations through review and testing, ensuring conformance to requirements
• Identify and analyze technical issues, propose resolution, and provide clear and timely reporting on status and risk
• Contribute to the evolution of global standards by proposing improvements grounded in component-level experience.

Cyber Security Engineer II

• Lead onboarding and migration of applications onto Akamai CDN and WAF platforms.
• Configure, maintain, and support Akamai edge security and content delivery services.
• Implement and tune WAF policies, security controls, caching rules, and traffic management configurations.
• Work closely with application, network, cloud, and security teams to ensure secure and optimized application delivery.
• Troubleshoot complex Layer 1–7 issues involving DNS, TLS/SSL, HTTP/HTTPS, CDN behavior, caching, and origin connectivity.
• Support production incidents, root cause analysis, and operational escalations.
• Participate in on-call rotation and support maintenance activities during off-hour change windows.
• Develop technical documentation, runbooks, operational procedures, and audit artifacts.
• Collaborate with vendors and internal stakeholders on application onboarding and security initiatives.
• Support security assessments, audits, remediation activities, and compliance requirements.
• Provide technical guidance and mentoring to engineering teams.

WAF/CDN Security Architect

• Actively participate in the Identity Field Center of Excellence to deliver value to clients by aligning Optiv services with our key technology partner solutions (SailPoint, Saviynt, Ping, Okta, Cisco, CyberArk, BeyondTrust, and Delinea-to name a few).
• Maintain advanced knowledge of the client’s security environment, business operations, security needs, and risk appetite.
• Identify their security concerns and how they correlate to Optiv’s strategic solutions across the assigned domain and holistic cybersecurity programs.
• Identify cross-sell and upsell opportunities across clients and Optiv's partner relationships.
• Qualify leads and partner with internal colleagues to determine scope, proposal management, and follow through to closure.
• Collaborate with service delivery to ensure the team has necessary supporting domain specialty materials that present a consistent and comprehensive approach.
• Effectively work with multiple client personas across the security leadership team, as well as other relevant personas to develop security strategy and define roadmaps to execute on security strategy aligned business goals, budgetary spend, and metrics based on return of investment.
• Participate in account planning, forecasting, and pipeline management activities.

Senior Cybersecurity Advisor – Identity Security

• Maintain and enhance security related tooling with the team including Security Log Aggregation, AV, Development Buildtime and Cloud Runtime tooling.
• Automate detections throughout our tooling stack leveraged to uncover security events and attacks against our systems.
• Implement, iterate, and operate security automation aimed at supporting our engineers during their building processes, reducing the time it takes to remediate discovered vulnerabilities.
• Perform vulnerability assessments and ad hoc security reviews to identify and prioritize potential security risks and vulnerabilities
• Partner closely with engineers to perform security reviews that support our software and infrastructure engineers early in their engineering process
• Participate in incident response activities, including investigation, containment, and recovery efforts

Security Engineer II

• Own day-to-day operation of Liftoff's SIEM (Panther) — log source ingestion, detection content, and the alert investigation pipeline.
• Lead Liftoff's adoption of AI-augmented SOC tooling (e.g. Prophet, Dropzone, or equivalent) as a multi-year modernization investment.
• Triage incoming security alerts and drive timely investigation and remediation with stakeholders across Engineering and IT.
• Lead incident response — investigation, containment, and post-incident review — and mature processes and runbooks so response becomes predictable and repeatable.
• Build tooling and automation that detects active threats, enriches alerts, and reduces manual investigation toil.
• Partner with Engineering and IT to make detection and response self-service where possible — clear log-onboarding paths, documented detection proposals, accessible runbooks — so security scales without becoming a bottleneck.
• Close the feedback loop between the team's offensive and proactive findings and detection coverage.
• Partner across the security team on cloud, infrastructure, and application security work alongside your detection and response focus — every engineer on this team covers breadth beyond their primary focus.
• Participate in the Security team's on-call rotation and incident response.

Security Engineer – Detection & Response

• Own a meaningful slice of our defensive infrastructure end-to-end.
• Design, execute, and follow through on security awareness programs and phishing simulations.
• Participate in Endpoint Detection & Response rollout and ongoing operations.
• Revamp our network protections for Zero Trust network access and DNS security.
• Manage and operate our EASM platform, including continuous monitoring, finding triage, and remediation coordination.
• Coordinate with our third-party penetration testing partner for scoping, logistics, findings review, and remediation tracking.
• Monitor and respond to security alerts across our stack — SIEM, EDR telemetry, and related tooling.
• Own relevant SOC 2 controls and participate in vendor evaluations, new tooling assessments, and ad hoc projects.

• Create and execute an information security strategy that aligns with DTNA's business objectives.
• Develop and enforce security policies, procedures, and guidelines.
• Identify and assess security risks and develop mitigation strategies.
• Conduct regular risk assessments and audits to ensure compliance with security standards and regulations.
• Lead the response to security incidents and breaches, including investigation and remediation.
• Develop and maintain an incident response plan and conduct regular drills.
• Ensure compliance with relevant laws, regulations, and industry standards (e.g., GDPR, HIPAA).
• Oversee the implementation of security controls and measures to meet compliance requirements.
• Promote a culture of security awareness within the organization.
• Develop and deliver security training programs for employees.
• Evaluate and implement new security technologies and solutions.
• Stay updated on the latest cybersecurity trends and threats.
• Lead and manage a team of security professionals.
• Provide mentorship and professional development opportunities for team members.
• Collaborate with other departments to ensure security measures are integrated into all business processes.
• Communicate security risks and strategies to senior management and the board of directors.
• Adapt and enforce the global cyber security strategy to the segment.
• Communicate segment demands to global cyber security.
• Ensure compliance with global cyber security solutions.
• Report consolidated cyber security status for the segment.
• Manage local security organization – collaboration between IT, OT, and Vehicle.
• Oversee strategy, governance, and supplier management.
• Manage cyber incident analysis and response, threat intelligence, and operations.
• Handle DLP response and security intelligence tool operations.
• Manage strategy and program management, policies, standards, and assessment.
• Oversee risk management and performance management.
• Manage enterprise and consumer IAM, IAM architecture, and specific IAM-related topics.

Cyber Security Manager

• Own and execute Slingshot’s cybersecurity strategy across enterprise, product, and operational environments.
• Lead readiness and implementation for CMMC, NIST SP 800-171, DFARS, and related government cybersecurity requirements.
• Establish and scale secure software development lifecycle (SDLC), application security, and DevSecOps practices.
• Design and oversee cloud security architecture across AWS/Azure/GovCloud environments.
• Drive audit readiness, including System Security Plans (SSPs), POA&Ms, and continuous monitoring programs.
• Partner with Product and Engineering to embed security into development without slowing delivery velocity. Build and operate security monitoring, detection, vulnerability management, and incident response capabilities.
• Lead executive-level incident response, including customer communication and regulatory reporting.
• Develop and enforce identity, access management, data protection, and logging strategies across systems.
• Oversee third-party/vendor risk management and supply chain security, including flowdown requirements.
• Partner with the Facility Security Officer (FSO) on classified programs, insider threat initiatives, and industrial security requirements.
• Ensure secure handling of CUI/FCI and readiness for customer audits and security questionnaires.
• Define and communicate cyber risk to executive leadership, board members, and customers.
• Support business development by enabling compliance required to win and execute government contracts.
• Build and scale a lean, high-performing security team aligned to company growth.

Chief Information Security Officer (CISO)

• Articulate value proposition to C-level decision-makers across multiple verticals to assess buying interest and improve consideration.
• Meet and exceed quarterly goals consisting of marketing-generated leads, qualified meetings, and activity metrics.
• Partner closely with sales teams in key GEOs and create account strategies together to drive penetration against very large businesses.
• Daily, integrated use of Salesforce.com, and additional applications to manage all lead data and ensure data integrity.
• Be involved in helping grow pipeline funnel through targeted marketing campaigns.
• Drive pipeline opportunities through an account-based marketing approach.
• Perform a variety of other marketing-related duties as assigned to improve the customer experience.

See all jobs on JobTailor

Business Information Security Officer

Director of Cybersecurity

Facility Security Officer

Senior Info Security Engineer – Netskope ZTNA Platform

Security Engineer

Deputy Chief Information Security Officer

Senior Security Engineer – Identity and Access Management

IT Audit, Cybersecurity & Risk Consultant – SOC Focus

Vice President – Technology and Security

Security Control Assessor

Director of IT – Cybersecurity

Cyber Security Engineer II

WAF/CDN Security Architect

Senior Cybersecurity Advisor – Identity Security

Security Engineer II

Security Engineer – Detection & Response

Security Engineer

Cyber Security Manager

Chief Information Security Officer (CISO)

Business Development Representative, Data Security