Security Engineer

• Develop and maintain a multi-year roadmap for Platform Security capabilities including certificate lifecycle management, PKI infrastructure, secrets management, token security, and cryptographic compliance (FIPS 140-3, TLS modernization)
• Manage strategic decisions to ensure the highest impact from security engineering investments in a dynamic and fast-paced environment
• Lead product strategy for secure-by-default foundation services
• Drive security strategy for AI agent workloads and runtime environments
• Partner closely with engineering, architecture, compliance, and product teams to deliver security-critical outcomes
• Drive product development end-to-end
• Influence direction and elevate standards through clear roadmap narratives, technical proposals, and risk-impact evaluations
• Champion a platform-wide security culture focused on resilience, crypto-agility, and continuous improvement

Senior Staff Product Manager – Platform Security

• Design and implement cybersecurity solutions
• Provide technical expertise and support for cybersecurity solutions
• Lead technical assessments of systems and applications to ensure compliance
• Develop project scope requirements and support model creation
• Collaborate closely with cross functional IT teams

Cybersecurity Engineer II

• Owning our compliance program end to end: driving our annual SOC 2 Type 2 audits from evidence collection through auditor walkthroughs, and running Vanta as our governance home base year-round.
• Completing security questionnaires, addendums, and AI risk assessments for the IT and security teams at our hospital clients — and making sure they understand we're doing the right thing. (Health systems ask great, hard questions. You'll have great answers.)
• Running real BCDR tests and treating them like live incidents to find the gaps before the gaps find us.
• Coordinating annual pen tests and driving remediation of findings within SLA.
• Managing security across our stack: AWS, Heroku, Cloudflare, Google Workspace, GitHub, and our communication tools.
• Administering our laptop fleet for a fully remote team — imaging, shipping, MDM enrollment, inventory, and end-of-life — so every machine is encrypted, managed, and remotely wipeable.
• Running access reviews and enforcing least privilege: pruning admin lists, enforcing SSO and 2FA, and tuning password policies.
• Ensuring new employees get access to everything they need on day one, and departing ones are locked out the same day — partnering with HR and Finance on a tight onboarding/offboarding loop through Rippling and Google.
• Evaluating and securing AI tooling — from how our team uses Claude and MCP servers to partnering with engineering on customer questions about AI risk, bias testing, and model governance.
• Doing vendor management and procurement reviews, and finding savings while you're at it.
• Staying on top of the rapidly evolving AI threat landscape and adapting our defenses and team training as fast as the attackers adapt theirs.
• Playing professor and educating our team on everything security.
• Advising leadership on security matters during project planning, and working with our full stack engineers to ship improvements you identify.
• Being the savior in the event of a security incident — leading response, analysis, and the write-up afterward.
• Supporting co-workers when they manage to put their computers in a bad place. (They should enjoy talking to you, and you to them!)

Senior IT/Security Engineer – AI-native

• Drive technical projects from ideation to delivery, including managing complex project schedules, removing roadblocks, and keeping processes running smoothly.
• Identify and operationalize the metrics and key performance indicators necessary to track progress, and drive issue resolution & mitigation at a granular level across the organization.
• Create and operationalize processes to transform the effectiveness of the organization with respect to meeting business goals.
• Drive effective communication, collaboration and commitment across multiple stakeholders and disparate groups with competing priorities
• Work with teams to identify and handle our top risks and drive decisions to align leadership on the right level of risk for each project.
• Facilitate productive meetings from small (3-5 people) to large (100 people or more).

Senior Technical Program Manager – Security & Identity

• Help define and evolve the vision for NinjaOne’s endpoint management and security capabilities.
• Contribute to and own key parts of the endpoint management and security roadmap.
• Drive product direction for features to identify security gaps, and remediate or protect against them.
• Work closely with engineering, design, support, and other stakeholders to bring new capabilities from concept to delivery.
• Engage with customers, MSPs, and internal teams to understand how endpoint management and security features are used in practice.
• Write clear product requirements, define workflows and edge cases, and ensure features are delivered to a high standard.
• Ensure capabilities work cohesively across NinjaOne and enable other product areas to build on top of them effectively.

Product Manager – Endpoint Management, Security

• Design and implement cybersecurity solutions, upgrades, enhancements
• Provide technical expertise and support for cybersecurity solutions
• Serve as subject matter expert in compliance of secure baseline configurations
• Initiate technical assessments of systems and applications
• Author new cybersecurity standards and procedures
• Serve as technical leader for cybersecurity projects
• Identify threats and develop suitable defense measures
• Lead root-cause analysis on Cyber systems

Cybersecurity Engineer III

• Lead the design and management of security technologies, including but not limited to firewalls, proxy systems, logging, and other security devices
• Provide security technology expertise to the organization; participate in and consult on projects
• Advise other IS teams on best practices for security design
• Execute tasks related to tickets and service requests for advanced to complex activities
• Oversee the maintenance of security systems, including firewalls, proxy systems, logging, and other security devices, and vendor provided services
• Analyze business needs; partner with leaders across the organization in order to research and recommend solutions which balance business need and risk mitigation
• Define, build, and review reports on information security system performance and event anomalies
• Author and serve as subject matter expert to define requirements and standards for information security
• Monitor and continually review existing systems to ensure they are designed to comply with established standards and to empower business operations
• Lead the planning for and support of disaster recovery and business continuity initiatives
• Conduct product and vendor research, and present recommendations to management
• Manage relations with vendors and equipment suppliers, including installation and repair of services
• Perform work in alignment with the organization’s mission, vision, and values

Information Security Engineer III

• Collaborate across the company to guide the direction of platform security and develop a long-term roadmap for a flexible HW Root of Trust solution that will be integrated into our products, working with hardware, software, research and marketing teams.
• Research, design, and develop architecture solutions meeting internal and external security requirements and standards.
• Review architectural, microarchitectural and verification specifications published by internal teams to ensure all IPs align with platform security requirements.
• Work with customers, partners to identify and address security issues and threats.

Senior Security Architect – Hardware

• Provide independent assessments of information security risks, controls, and processes across technology environments, applications, infrastructure, and third-party relationships
• Evaluate the design and effectiveness of security controls against established frameworks, regulatory requirements, and industry best practices
• Identify, analyze, and communicate cybersecurity risks, vulnerabilities, control weaknesses, and emerging threats to risk and business stakeholders
• Support governance and oversight of security domains including identity and access management, vulnerability management, cloud security, application security, data protection, and cybersecurity operations
• Conduct risk assessments for new technologies, projects, systems, and business initiatives to evaluate potential security and operational risks
• Provide effective challenge to first-line security practices, risk decisions, control implementations, and remediation strategies
• Monitor and assess information security metrics, key risk indicators (KRIs), control effectiveness measures, and trends to identify emerging risks and opportunities for improvement
• Support development and maintenance of information security risk management policies, standards, methodologies, and governance processes
• Participate in regulatory examinations, internal audits, risk reviews, and compliance assessments by preparing analysis, documentation, and responses to requests
• Partner with Technology, Information Security, Compliance, Enterprise Risk, Internal Audit, and business stakeholders to strengthen risk management practices and improve control maturity
• Prepare reporting and presentations that communicate technical risks, control gaps, and security trends to a variety of audiences
• Support oversight of third-party technology providers and critical vendor security risk management activities
• Stay current on cybersecurity threats, regulatory developments, emerging technologies, and industry practices to evaluate potential impacts to the organization.

Senior Information Security Engineer

• Support security compliance reviews across North American studios
• Support client security questionnaires and audit requirements
• Track remediation actions and security gaps
• Ensure local alignment with global security policies and processes
• Review vulnerability scan results and support remediation
• Support incident response and threat mitigation
• Utilize security tools to detect and analyze threats
• Support security assessment of third-party vendors
• Perform vendor risk reviews and ensure compliance with Virtuos security requirements
• Track remediation of vendor-related security findings and risks
• Work with local IT teams on security implementation
• Support global security initiatives and new technology deployment
• Contribute to continuous improvement of security processes
• Support security awareness and training programs
• Identify, track, and report information security risks
• Participate in business continuity and disaster recovery exercises

IT Security Specialist

• Architect the AI Technical Strategy: Partner with enterprise account teams to own and execute the technical sales strategy, driving complex, high-value AI security opportunities from discovery to close.
• Deliver Compelling, High-Impact Demos & POVs: Configure and present tailored, outcome-driven demonstrations of Zscaler’s AI security platform that resonate with both deep-tech practitioners and C-level executives. When needed, take customers through successful demos and POVs to validate Zscaler’s ability to securely enable enterprise AI.
• Serve as a Subject Matter Expert: Act as the field authority on modern AI patterns (such as RAG, agents, and prompt workflows), advising clients on how to prevent sensitive data exposure and unsanctioned AI usage.
• Scale the Field Motion: Collaborate with Product and Engineering to inject real-world customer feedback into the product roadmap, while building reusable demo assets and enablement playbooks to upscale our global sales force.
• Enable Those Around You: Develop reusable demos, technical assets, competitive positioning, and enablement content to help scale Zscaler’s AI field motion while sharing best practices and training with enterprise account teams

Principal AI Security Specialist

• Lead application security design across web, mobile, and AWS cloud-native systems.
• Administer and optimize SAST/SCA tools (e.g., Checkmarx, Snyk).
• Triaging vulnerabilities, and guiding remediation aligned to OWASP Top Ten.
• Secure cloud environments (especially AWS Lambda, API Gateway, IAM, S3).
• Support runtime and application-layer protections.
• Partner with release and change management to ensure secure, stable production deployments.
• Provide security input in architecture and project planning.

Application Security Consultant

• Serve as the Operational Technology (OT)/Industrial Control Systems (ICS) security analyst to design secure system architectures for critical infrastructure
• Implement network segmentation, access controls, and intrusion detection systems
• Define, develop, integrate, design and maintain security technical controls in a variety of IT/OT environments and systems
• Define security product specifications, tools and techniques for intrusion detection, intrusion prevention, configuration hardening, and access methods
• Review design data elements (threat models, data flow diagrams, requirements, etc.) along with known vulnerabilities associated with OT systems and create designs and recommendations that lower or eliminate security risk
• Engage in root cause analysis for incidents, identifying and implementing corrective actions to prevent future occurrences
• Design and review network architectures for OT environments, including routing protocols, VLANs, and subnetting
• Implement cybersecurity measures to protect OT networks from internal and external threats
• Monitor network traffic for anomalies and respond to security incidents
• Develop and enforce security policies and procedures in line with industry standards
• Conduct/participate regular network assessments and audits to identify vulnerabilities and areas for improvement
• Collaborate with teams to integrate OT and IT networks where applicable
• Maintain detailed documentation of network configurations, processes, and security protocols
• Work closely with cross-functional teams, including operations, engineering, and IT, to support network requirements
• Provide training and support to personnel on network best practices and cybersecurity awareness

Operational Technology Security Design Specialist – Senior

• Driving security risk management and action across assigned lines of business and supporting technologies
• Representing the Chief Information Security Officer (CISO) on business-line-specific security matters
• Maintaining key stakeholder relationships up to the Management Committee level
• Operating as trusted security advisors, bridging business and technology organizations while monitoring changes in the business, technology, and threat landscape
• Clearly communicating, translating, and prioritizing security requirements in support of business operations and strategic initiatives
• Elevating business-specific risks, needs, and insights back into the Information Security organization
• Improving the effectiveness and value of security programs by ensuring risks are proactively identified, assessed, and addressed
• Partnering closely with business line risk teams, technology leaders, and control functions to drive measurable improvements in security posture
• Leading the reporting, governance, and execution of key security metrics and performance targets across business lines
• Maintaining a strong understanding of the technical and process controls that protect the Bank’s systems and information from cyber threats, including malware and other attack vectors
• Providing leadership across the BISO function, influencing strategic direction, mentoring and coaching peers, and promoting consistency in execution and best practices across the enterprise

Business Information Security Officer

• Define and execute the cybersecurity vision, strategy, and multi-year roadmap
• Provide leadership for cybersecurity operations including EDR, vulnerability management, incident response, and threat detection
• Drive standardization and optimization of the security tool stack across managed and augmented clients
• Formalize and maintain governance, risk, and compliance frameworks including SOC2 alignment
• Lead enterprise incident response strategy, ensuring readiness and effective remediation
• Act as executive escalation point for major security incidents and client-impacting events
• Own budgeting, forecasting, and resource planning for the security function
• Lead risk assessments and ensure mitigation strategies are implemented
• Build, mentor, and develop a high-performing cybersecurity team
• Foster a culture of security awareness and continuous improvement
• Collaborate cross-functionally with Engineering, Consulting, Product, and Project teams
• Represent cybersecurity in executive forums and client discussions in partnership with the CISO and executive leadership

Director of Cybersecurity

• Lead all facility-related responsibilities and security operations across the organization
• Oversee facility management, leasing, and compliance
• Manage personnel clearances, secure facilities, and physical security programs
• Ensure compliance with all government security requirements and regulations
• Conduct regular security assessments and implement improvements

Facility Security Officer

• Develop, configure, and manage security policies to ensure the protection of data
• Compliance with regulations and prevention of security threats
• Work closely with security teams, network engineers, and application administrators
• Implement and enforce policies that align with the organization’s security strategy and business goals
• Implements and supports security solutions and technologies to protect data/assets from unauthorized access
• Provides project leadership, security oversight, and risk management on security projects
• Sets security design guidelines, frameworks, and models
• Works to identify new security issues and risks and develops mitigation plans
• Helps identify and document security objectives
• Participates in projects that develop new intellectual property
• Trains/mentors members of the team
• Builds relationships and trust across the organization
• Evaluates and recommends new and emerging security products and technologies
• Supports acquisition and vendor risk assessment due diligence
• Leads the building, deployment, and maintenance of security tools utilized by the insider threat program
• Proactively seeks solutions to mitigate risk and clearly communicate risks to the appropriate stakeholders
• Monitor the performance and availability of the Netskope platform using tools like Prometheus, Grafana
• Develop and maintain incident response processes for handling system outages, performance degradation, or security incidents
• Participate in on-call rotations to provide 24/7 support for critical issues
• Conduct root cause analysis (RCA) post-incident to identify systemic issues and implement corrective measures to prevent recurrence
• Design and implement strategies for platform scalability to support growth in users, traffic, and security demands
• Work with security teams to ensure the Netskope platform is secure by regularly performing vulnerability assessments
• Develop and maintain disaster recovery (DR) and business continuity plans to ensure the Netskope platform can recover from catastrophic failures

Senior Info Security Engineer – Netskope ZTNA Platform

• Monitor and triage alerts across various security tools
• Validate alert severity, business impact, affected assets, containment status, and escalation requirements.
• Coordinate security events from initial triage through containment, documentation, closure, and post-incident follow-up.
• Support daily dashboard review, security ticket queues, alert quality checks, and operational reporting.
• Develop, tune, and maintain detection logic in security tools.
• Reduce false positives and alert noise by reviewing recurring detections.
• Assist with incident response for endpoint, identity, cloud, email, and suspicious activity events.
• Support security operations across various Microsoft security tools.
• Create and maintain security runbooks and knowledge base articles.

• You will be the operating second to the CISO and own the bank-entity scope of Mercury's 2LOD Information Security program.
• Keep the program examiner-ready by maintaining coherent policy architecture and evidenced controls
• Own the examiner-ready narrative and coordinate the evidence for OCC, FFIEC, FDIC, and FRB examiner inquiries.
• Lead remediation of identified FFIEC IT control deficiencies to ensure charter readiness.
• Manage relationships with internal audit and external assessors.
• Coach and grow the GRC sub-team while running a recurring training cadence.
• Ensure third-party risk evidence holds up to bank-grade scrutiny.

Deputy Chief Information Security Officer

• We are seeking a highly motivated Senior Security Engineer with a strong passion for Identity and Access Management (IAM) to join our Enterprise Security & Infrastructure (ESI) organization.
• The ideal candidate brings hands-on experience designing, engineering, implementing, and supporting enterprise-scale identity solutions across hybrid environments (on-premises and cloud).
• This role requires a deep understanding of modern identity technologies, along with the ability to secure and optimize identity platforms that support critical business operations.
• A successful engineer in this role will maintain awareness of new security and identity trends, research, evaluate, design, and recommend technical security solutions for the enterprise.
• This role is critical in ensuring the secure, efficient, and compliant management of identities and access across the organization, helping to protect enterprise assets while enabling business productivity.
• The Senior Security Engineer, Identity & Access Management is responsible for designing, implementing, and maintaining secure, scalable IAM solutions across hybrid environments, while driving modernization toward Zero Trust and cloud-based identity models.
• This role focuses on engineering automated identity processes, strengthening access governance and privileged access controls, and integrating AI-enabled capabilities to enhance security and operational efficiency.
• The engineer partners closely with cross-functional teams to assess and mitigate identity-related risks, implements monitoring and automated response for identity threats, and contributes to technology evaluation and innovation.
• Additionally, the role ensures compliance with regulatory requirements, supports audit readiness, and establishes standards and best practices to continuously improve enterprise identity security.

Security Engineer jobs in Oregon

See all jobs on JobTailor