Security Engineer

• Lead Secure Development Lifecycle practices, integrating threat modeling, static/dynamic analysis, fuzz testing, and formal verification into the development process.
• Work with R&D Engineering to define hardware security architecture, including trust zones, hardware root of trust (HRoT), and secure microcontroller protections.
• Implement memory safety strategies to mitigate buffer overflows, side-channel attacks, and execution vulnerabilities in real-time operating systems (RTOS) and bare-metal firmware.
• Respond to customer cybersecurity questionnaires and contractual language for post-market medical devices under your responsibility as necessary.

Principal Med Device Security Engineer

• The Workday Security Developer III is responsible for performing system analysis and designing to include requirements, specifications, configuration, documentation, testing, and development of security roles and policies within Workday.
• Conducts highly complex work, without supervision and with extensive latitude for independent judgment.
• Serves as a liaison between TSG groups, clients, and vendors and as a mentor to others on the team and in the department.
• Design, configure, and maintain Workday security for HCM, Payroll, Financials, Recruiting, Learning, and other Workday modules.
• Perform security analysis, troubleshooting, and root cause analysis for access-related issues.
• Collaborate with HR, Finance, Supply Chain, Internal Audit, Compliance, and business stakeholders to gather and implement security requirements.

Workday Security Developer

• Design and implement cybersecurity solutions
• Provide technical expertise and support for cybersecurity solutions
• Lead technical assessments of systems and applications to ensure compliance
• Develop project scope requirements and support model creation
• Collaborate closely with cross functional IT teams

Cybersecurity Engineer II

• Owning our compliance program end to end: driving our annual SOC 2 Type 2 audits from evidence collection through auditor walkthroughs, and running Vanta as our governance home base year-round.
• Completing security questionnaires, addendums, and AI risk assessments for the IT and security teams at our hospital clients — and making sure they understand we're doing the right thing. (Health systems ask great, hard questions. You'll have great answers.)
• Running real BCDR tests and treating them like live incidents to find the gaps before the gaps find us.
• Coordinating annual pen tests and driving remediation of findings within SLA.
• Managing security across our stack: AWS, Heroku, Cloudflare, Google Workspace, GitHub, and our communication tools.
• Administering our laptop fleet for a fully remote team — imaging, shipping, MDM enrollment, inventory, and end-of-life — so every machine is encrypted, managed, and remotely wipeable.
• Running access reviews and enforcing least privilege: pruning admin lists, enforcing SSO and 2FA, and tuning password policies.
• Ensuring new employees get access to everything they need on day one, and departing ones are locked out the same day — partnering with HR and Finance on a tight onboarding/offboarding loop through Rippling and Google.
• Evaluating and securing AI tooling — from how our team uses Claude and MCP servers to partnering with engineering on customer questions about AI risk, bias testing, and model governance.
• Doing vendor management and procurement reviews, and finding savings while you're at it.
• Staying on top of the rapidly evolving AI threat landscape and adapting our defenses and team training as fast as the attackers adapt theirs.
• Playing professor and educating our team on everything security.
• Advising leadership on security matters during project planning, and working with our full stack engineers to ship improvements you identify.
• Being the savior in the event of a security incident — leading response, analysis, and the write-up afterward.
• Supporting co-workers when they manage to put their computers in a bad place. (They should enjoy talking to you, and you to them!)

Senior IT/Security Engineer – AI-native

• Responsible for implementation of J&J’s enterprise Product Security strategy and framework throughout the Heart Recovery portfolio of medical devices and supporting platforms.
• Provide technical expertise and strategic leadership in securing Impella heart pump technologies, next-generation cardiac support systems, and connected medical devices.
• Deliver security architecture, cryptographic controls, embedded system protections/controls, and threat mitigation techniques to ensure robust, regulatory-compliant security across the product lifecycle.
• Support heart recovery throughout a new product’s development phases.
• Review product security requirements and recommend security design solutions.
• Complete Quality documentation, threat modelling, coordinate third-party penetration testing, software architecture review and design recommendations, code analysis and other security testing work as needed.
• Monitor for new vulnerabilities, assisting with patching and remediation plans, as well as responding to customer security questionnaires and reviewing security language within contractual agreements as needed.
• Drive alignment to J&J Product Security’s overarching framework.
• Define and implement secure boot, firmware integrity validation, and anti-tamper mechanisms to protect Heart Recovery Device firmware against unauthorized modification.
• Enforce cryptographic protocols for data-at-rest and data-in-transit, ensuring compliance with FDA cybersecurity requirements, NIST 800-175, FIPS 140-3, and IEC 62443.
• Define and implement key management infrastructure (PKI, HSMs, TPMs, and secure enclave integration) for device identity, authentication, and software signing.
• Develop real-time vulnerability assessment techniques for detecting security flaws in wireless communications (Bluetooth LE, NFC, Wi-Fi, 5G, proprietary RF) used in Heart Recovery’s medical devices.
• Implement Zero Trust security for device-to-cloud connectivity, integrating mTLS and continuous authentication models into clinical applications.
• Oversee secure OTA (over-the-air) update mechanisms, ensuring firmware rollbacks, code signing, and supply chain integrity validation.
• Lead Secure Development Lifecycle practices, integrating threat modeling, static/dynamic analysis, fuzz testing, and formal verification into the development process.
• Work with R&D Engineering to define hardware security architecture, including trust zones, hardware root of trust (HRoT), and secure microcontroller protections.
• Implement memory safety strategies to mitigate buffer overflows, side-channel attacks, and execution vulnerabilities in real-time operating systems (RTOS) and bare-metal firmware.
• Respond to customer cybersecurity questionnaires and contractual language for post-market medical devices under your responsibility as necessary.

Principal Medical Device Security Engineer

• The Principal Product Security Engineer will be responsible for implementation of J&J’s enterprise Product Security strategy and framework throughout the Heart Recovery portfolio of medical devices and supporting platforms.
• This role will join Abiomed, part of Johnson & Johnson MedTech, to provide technical expertise and strategic leadership in securing Impella heart pump technologies, next-generation cardiac support systems, and connected medical devices.
• This role is responsible for delivering security architecture, cryptographic controls, embedded system protections/controls, and threat mitigation techniques to ensure robust, regulatory-compliant security across the product lifecycle.
• Specific responsibilities include supporting heart recovery throughout a new product’s development phases, review product security requirements and recommend security design solutions, complete Quality documentation, threat modelling, coordinate third-party penetration testing, software architecture review and design recommendations, code analysis and other security testing work as needed.
• Additionally, this position will have post market responsibilities for Heart Recovery marketed devices include monitoring for new vulnerabilities, assisting with patching and remediation plans, as well as responding to customer security questionnaires and reviewing security language within contractual agreements as needed.
• Drive alignment to J&J Product Security’s overarching framework.
• Support the Product Security strategy and objectives within Heart Recovery
• Define and implement secure boot, firmware integrity validation, and anti-tamper mechanisms to protect Heart Recovery Device firmware against unauthorized modification.
• Enforce cryptographic protocols for data-at-rest and data-in-transit, ensuring compliance with FDA cybersecurity requirements, NIST 800-175, FIPS 140-3, and IEC 62443.
• Define and implement key management infrastructure (PKI, HSMs, TPMs, and secure enclave integration) for device identity, authentication, and software signing.
• Develop real-time vulnerability assessment techniques for detecting security flaws in wireless communications (Bluetooth LE, NFC, Wi-Fi, 5G, proprietary RF) used in Heart Recovery’s medical devices.
• Implement Zero Trust security for device-to-cloud connectivity, integrating mTLS and continuous authentication models into clinical applications.
• Oversee secure OTA (over-the-air) update mechanisms, ensuring firmware rollbacks, code signing, and supply chain integrity validation.
• Lead Secure Development Lifecycle practices, integrating threat modeling, static/dynamic analysis, fuzz testing, and formal verification into the development process.
• Work with R&D Engineering to define hardware security architecture, including trust zones, hardware root of trust (HRoT), and secure microcontroller protections
• Implement memory safety strategies to mitigate buffer overflows, side-channel attacks, and execution vulnerabilities in real-time operating systems (RTOS) and bare-metal firmware.
• Respond to customer cybersecurity questionnaires and contractual language for post-market medical devices under your responsibility as necessary.

• Lead and manage a team of ~8–10 engineers responsible for authentication, API security, and web security platform delivery
• Drive team productivity, accountability, and output optimization
• Establish clear ownership, priorities, and expectations across the team
• Build and enforce structured intake processes for work requests from digital/application teams
• Transition the team from ad hoc tracking (email/spreadsheets) to formal workflow management (e.g., ServiceNow)
• Define SLAs, prioritization models, and delivery timelines
• Implement tracking, reporting, dashboards, and performance metrics
• Ensure consistent visibility into work status, throughput, and delivery outcomes
• Partner closely with Digital, Application Development, and Business teams
• Translate business requests into structured, actionable work for the team
• Act as a liaison between technical teams and business stakeholders
• Ensure clear communication of delivery timelines, risks, and outcomes
• Oversee delivery and configuration across key platforms including: IBM Verify Identity Access (formerly WebSEAL / ISVA), IBM DataPower (API management layer), Authentication and access management solutions
• Ensure secure, scalable support of customer-facing applications
• Guide the team in implementing changes, enhancements, and configurations
• Drive continuous improvement in how work is executed and delivered
• Introduce governance, quality control, and accountability frameworks
• Improve consistency in documentation, intake, and delivery practices

IT Security Manager – Authentication & Authorization

• Own and optimize the Elastic Security platform (Elasticsearch, Kibana, Fleet, Logstash, Elastic Agents)
• Design and maintain ingestion pipelines for cloud, endpoint, network, and application telemetry
• Improve telemetry quality, data retention, performance, and investigation workflows
• Integrate SIEM workflows with SOAR and automation tooling
• Build and maintain a Detection-as-Code pipeline using Git-based workflows and CI/CD automation
• Develop, test, tune, and maintain high-fidelity detections using Elastic Security, EQL, and KQL
• Reduce alert noise through tuning, enrichment, suppression, and exception handling
• Map detections to MITRE ATT&CK and drive detection coverage strategy
• Assist with complex alert escalations and perform initial incident scoping
• Translate incident learnings into improved detections and telemetry coverage
• Partner with other teams to improve logging and visibility

Senior Security Engineer – Elastic SIEM, Detection Engineering

• Own and evolve GameChanger's multi-year security and technology strategy, including prioritization, resourcing decisions, alignment to business and parent company goals, and communication of security investments and tradeoffs to technical and executive leadership.
• Lead, mentor, and grow a team of security and technology operations professionals, including setting priorities, coaching teammates, managing performance, creating opportunities for growth and impact, and creating an environment to support autonomy and ownership.
• Own the direction and delivery for all key areas of information security, including product and application security, cloud security, AI security, security operations, vulnerability management, and governance, risk, and compliance functions.
• Evaluate and mitigate risks across infrastructure, product, and corporate environments.
• Set direction for AI security and governance as part of a secure SDLC and corporate environment, including the secure adoption of AI tooling, the security of AI-enabled product features, and AI usage governance, partnering with AI enablement and governance stakeholders across the company.
• Lead the governance, risk, and compliance program, including internal assessments (for example, NIST CSF 2.0), external assessments, and clear risk reporting to leadership.
• Own the security operations and incident response program for the GameChanger environment, including detection, on-call, escalation, and coordination with our parent-company security function.
• Own internal technology operations, including the technology support function for our remote-first workforce and the systems and endpoints employees rely on to do their work.
• Manage the BISO relationship with DSG, including decision rights, shared-services integration, and the partnership with the DSG CISO.
• Lead the cross-departmental security steering committee and represent security and technology in executive forums, building alignment and buy-in for key initiatives.
• Educate and influence the broader company on security principles, threats, and practices.

Director, Information Security – Technology

• Design and implement cybersecurity solutions, upgrades, enhancements
• Provide technical expertise and support for cybersecurity solutions
• Serve as subject matter expert in compliance of secure baseline configurations
• Initiate technical assessments of systems and applications
• Author new cybersecurity standards and procedures
• Serve as technical leader for cybersecurity projects
• Identify threats and develop suitable defense measures
• Lead root-cause analysis on Cyber systems

Cybersecurity Engineer III

• Design, build, and deploy agentic AI workflows and intelligent autonomous playbooks to automate Tier-1/2 alert triage, context enrichment, and incident response.
• Develop and tune complex detection logic across SIEM, EDR/XDR, and cloud platforms, focusing on behavioral analytics and anomaly detection.
• Utilize Python to build custom security tools, integrate disparate security APIs, and maintain high-quality, reusable codebases for security orchestration (SOAR).
• Lead threat hunting initiatives and serve as a Tier-3 escalation resource for complex, high-severity security incidents.
• Analyze attacker tactics, techniques, and procedures (TTPs) to map coverage against the MITRE ATT&CK framework and proactively close gaps.
• Secure cloud environments (AWS, Azure, or GCP), with a specific focus on auditing, monitoring, and protecting production AI/LLM pipelines and workloads.
• Mentor junior team members, conduct code reviews for automation scripts, and promote robust software engineering best practices within the security team.

Senior Security Engineer – North Carolina, Florida, South Carolina Preferred

• Support the secure adoption of artificial intelligence across BlueCross BlueShield of South Carolina
• Translate AI risk, security, privacy, and compliance requirements into practical architecture patterns
• Review systems for potential improvements and present recommendations
• Establish application architecture direction for change sheets and project efforts
• Ensure business objectives are met using approved architecture principles
• Provide architectural guidance on assigned efforts
• Serve as a key decision maker for architectural decisions

Senior AI Security Architect

• Design and implement enterprise security architectures aligned with RMF (NIST Risk Management Framework) requirements
• Define and enforce security design principles across applications, infrastructure, and cloud environments
• Develop and maintain access control models , including RBAC, ABAC, identity governance, and least privilege strategies
• Ensure integration of security practices into DevOps pipelines (DevSecOps), including automated testing, code scanning, and secure deployment
• Work within SAFe Agile frameworks , participating in planning, architecture reviews, and continuous improvement initiatives
• Utilize Azure DevOps (ADO) for backlog management, CI/CD pipelines, and governance of secure development practices
• Conduct system security architecture reviews , threat modeling, and risk assessments
• Effectively collaborate with development, infrastructure, and business teams to embed security into system lifecycles
• Define and implement security controls , ensuring compliance with regulatory and organizational requirements
• Support Authority to Operate (ATO) processes and ensure proper documentation and RMF artifact development
• Provide guidance on secure system integration and cloud security architecture
• Monitor evolving threat landscapes and adjust security architecture accordingly
• Develop and maintain security standards, policies, and architecture documentation

Cybersecurity Architect

• Communicate with prospective and existing clients to understand their security needs and develop engagement plans to satisfy their requirements.
• Lead and perform cloud and infrastructure technical security assessments (Microsoft 365, Microsoft Azure, Google Workspace, AWS, Active Directory, etc.)
• Translate organizational security documentation into operational practices.
• Perform hands-on keyboard remediation activities in response to security-focused assessments.
• Develop detailed reports with actionable recommendations to address security gaps and ensure remediation efforts align with organization needs and service level objectives.
• Understand and apply security framework controls aligning to industry frameworks such as NIST, CIS, ISO, or MITRE ATT&CK.
• Design, evaluate, and implement secure network architectures.
• Provide assessments of emerging technology to facilitate solutions and recommendations for future architectural requirements that are cost effective and reduce risk while enhancing security.
• Document and present findings and recommendations to clients, including C-Suite and board-level executives, in a professional manner.
• Maintain relationships with clients post-assessment in order to assist and advise as they continue to build and improve their security.
• Create, collaborate, and/or assist in maintaining internal tooling to enhance or assist in performing duties, as appropriate.
• Train and mentor other employees in order to build the company's overall capacity and capability.
• Perform business development tasks from the initial call with a referral or repeat client, through the proposal stage, and finally, to contract execution.

• Support agencies with information security program implementation and compliance initiatives.
• Conduct interviews with business owners, technical teams, administrators, and third-party stakeholders to gather security and compliance requirements.
• Develop, document, and maintain security policies, procedures, and governance artifacts.
• Track and monitor Information Security implementation plans and remediation activities.
• Perform compliance assessments against established security frameworks and control standards.
• Review agency documentation and provide recommendations to strengthen security posture and compliance readiness.
• Analyze existing business processes and identify opportunities for improvement and risk reduction.
• Assist in developing corrective action plans (CAP) and Plans of Action & Milestones (POA&M).
• Support multiple concurrent security and compliance initiatives while maintaining project timelines.
• Prepare reports, findings, and compliance status updates for leadership and stakeholders.
• Ensure alignment with state security standards, regulatory requirements, and industry best practices.

Information Security Compliance Consultant

• Produces employee and guest badges, identification cards, and security reader cards.
• Processes security information and data for employment records, security clearances, and property control.
• Collects and submits electronic fingerprints, handprints and optical reading into systems.
• Maintains lock and key records.
• Processes visit authorizations for employees and guests to gain access to restricted areas.
• Verifies accuracy of information prior to issuing clearances.
• Maintains controlled security documents and information.
• Handle a firearm safely.
• Monitor security cameras and review footage.
• Perform routine security audits and roaming tours.
• Investigate security violations and establish preventative measures.

Security Support 4

• Lead application security design across web, mobile, and AWS cloud-native systems.
• Administer and optimize SAST/SCA tools (e.g., Checkmarx, Snyk).
• Triaging vulnerabilities, and guiding remediation aligned to OWASP Top Ten.
• Secure cloud environments (especially AWS Lambda, API Gateway, IAM, S3).
• Support runtime and application-layer protections.
• Partner with release and change management to ensure secure, stable production deployments.
• Provide security input in architecture and project planning.

Application Security Consultant

• Installing and servicing physical security systems/platforms, including CCTV, access control systems, intrusion detection, communications, and many other low-voltage systems.
• Diagnosing and troubleshooting system issues.
• Training/mentoring others within the team.
• Working as a valued team member on projects/installations to deliver quality results to our customers.
• Maintaining awareness of new and emerging technologies and their potential application on client engagements.
• Working with trades and subcontractors assigned to projects.
• Serving as a lead tech on smaller projects/installations.
• Respond to routine, scheduled, emergency, and after-hours service calls in a timely manner.
• Diagnose, troubleshoot, repair, and replace defective components in security systems.
• Perform preventive maintenance on installed systems and ensure optimal performance.
• Utilize strong troubleshooting skills to identify and resolve equipment and software issues.
• Analyze repair needs and provide effective solutions to customers.
• Complete accurate and detailed service reports for proper invoicing and job tracking by the end of each day.
• Ensure all work complies with federal, state, and local regulations, as well as company safety policies.
• Conduct system testing and checkout for new and existing installations.
• Collaborate with team members to improve service operations and customer satisfaction.
• Perform additional duties as assigned.

Advanced Security Technician

• Serve as the Operational Technology (OT)/Industrial Control Systems (ICS) security analyst to design secure system architectures for critical infrastructure
• Implement network segmentation, access controls, and intrusion detection systems
• Define, develop, integrate, design and maintain security technical controls in a variety of IT/OT environments and systems
• Define security product specifications, tools and techniques for intrusion detection, intrusion prevention, configuration hardening, and access methods
• Review design data elements (threat models, data flow diagrams, requirements, etc.) along with known vulnerabilities associated with OT systems and create designs and recommendations that lower or eliminate security risk
• Engage in root cause analysis for incidents, identifying and implementing corrective actions to prevent future occurrences
• Design and review network architectures for OT environments, including routing protocols, VLANs, and subnetting
• Implement cybersecurity measures to protect OT networks from internal and external threats
• Monitor network traffic for anomalies and respond to security incidents
• Develop and enforce security policies and procedures in line with industry standards
• Conduct/participate regular network assessments and audits to identify vulnerabilities and areas for improvement
• Collaborate with teams to integrate OT and IT networks where applicable
• Maintain detailed documentation of network configurations, processes, and security protocols
• Work closely with cross-functional teams, including operations, engineering, and IT, to support network requirements
• Provide training and support to personnel on network best practices and cybersecurity awareness

Operational Technology Security Design Specialist – Senior

• Supporting JJV throughout a new product’s development phases
• Review product security requirements and recommend security design solutions
• Help complete Quality documentation, threat modelling, penetration testing, software architecture review and design recommendations, code analysis and other security testing or work as needed.
• Post market responsibilities for JJV marketed devices include monitoring for new vulnerabilities, assisting with patching and remediation plans, as well as responding to all customer security questionnaires and reviewing security language within contractual agreements.
• Drive adherence to J&J Product Security’s overarching framework: Champion Product Security strategy and objectives within JJV
• Partner with internal organizations to enhance existing processes and policies
• Create and present Product Security metrics to management
• Responsible and accountable to implement and enforce Product Security governance model for JJV pre and post market medical devices.
• Perform automated code scanning and coordinate formal security testing.
• Respond to customer cybersecurity questionnaires and contractual language for all post-market medical devices.
• Other MedTech cybersecurity related duties as needed

Security Engineer jobs in South Carolina

See all jobs on JobTailor

Principal Med Device Security Engineer

Workday Security Developer

Cybersecurity Engineer II

Senior IT/Security Engineer – AI-native

Principal Medical Device Security Engineer

Principal Med Device Security Engineer

IT Security Manager – Authentication & Authorization

Senior Security Engineer – Elastic SIEM, Detection Engineering

Director, Information Security – Technology

Cybersecurity Engineer III

Senior Security Engineer – North Carolina, Florida, South Carolina Preferred

Senior AI Security Architect

Cybersecurity Architect

Security Engineer

Information Security Compliance Consultant

Security Support 4

Application Security Consultant

Advanced Security Technician

Operational Technology Security Design Specialist – Senior

Product Security Manager