Security Engineer

• Leads and manages programs supporting secure software delivery capabilities
• Develops and maintains schedules, deliverables, and engagement plans
• Coordinates activities across engineering, Product Security, and supporting organizations
• Provides user support and engagement for internal customers
• Identifies and drives process improvements to enhance efficiency, scalability, and service delivery
• Communicates program status, risks, and issues
• Supports adoption of security-related capabilities such as code signing, certificates, keys, and related controls

Senior Engineering Program Manager, Product Security

• Security Architecture Reviews
• Perform holistic tabletop reviews covering both technical and non-technical risk across OT environments, without engaging in high-risk manual or automated activity
• Analyze for areas of negative impact, high risk, and single points of failure (SPOF) within sensitive, legacy networks
• Apply structured judgment to identify where risk is concentrated and where controls are missing
• Adapt review depth and approach to the operational realities of each client environment
• OT Risk Identification & Assessment
• Identify vulnerabilities and weaknesses across Operational Technology environments, including Industrial Control Systems (ICS), SCADA, and field devices
• Assess legacy and sensitive networks where conventional testing methods carry unacceptable operational risk
• Distinguish between theoretical and operationally relevant risk to keep findings actionable
• Prove impact where appropriate, exercising restraint where the environment demands it
• Client Advisory & Program Improvement
• Support OT clients with security program improvements, identifying which critical controls are needed
• Refine testing scope collaboratively as engagements proceed and the environment becomes clearer
• Translate technical findings into guidance that clients can act on across both technical and leadership audiences
• Build client confidence through credibility, clear communication, and operational awareness
• Methodology & Continuous Improvement
• Contribute to the maturity of Packetlabs' OT testing methodology and practice
• Stay current on OT threats, attack techniques, and defensive controls
• Share knowledge with the broader team to minimize blind spots and strengthen collective capability
• Help raise the standard of OT security work across the firm

Ethical Hacker – OT Security Consultant

• Maintain Hybrid Infrastructure Integrity
• Ensure the operational integrity of cloud and on-premises infrastructure throughout its lifecycle, including patching, version control, and system upgrades.
• Establish and enforce security as code principles throughout the environment in alignment with OCC/Security Standards.
• Manage ongoing critical cloud service rollouts and automation
• Lead end-to-end deployment of mission-critical cloud services while developing and maintaining automation pipelines that streamline provisioning, configuration, and compliance enforcement across cloud environments.
• Assist in the deployment of new technologies and infrastructure aligned with security strategy
• Partner with architecture and engineering teams to evaluate, pilot, and deploy emerging cloud technologies, ensuring all implementations adhere to established security frameworks, organizational risk tolerance, and long-term strategic vision.
• Support, grow, and advance current processes and tools
• Continuously assess existing security processes and toolsets, driving improvements that mature the organization's cloud security posture through automation, documentation, and operational efficiency.
• Develop and implement system improvements that expand automated integrations and accelerate detection and remediation of functional and technical issues.
• Demonstrate in-depth knowledge of security controls and standards across cloud security, architecture, and security testing
• Apply expertise in industry frameworks (CIS, NIST CSF, CSA CCM) to design, implement, and validate security controls spanning cloud architecture, identity and access management, data protection, and security testing including vulnerability assessments and penetration testing.
• Manage multiple complex projects simultaneously under strict deadlines
• Prioritize and execute across a dynamic portfolio of concurrent security initiatives, consistently delivering high-quality outcomes on time while maintaining rigorous attention to detail and adherence to organizational standards.
• Serve as primary point of contact across cross-functional teams
• Act as the central liaison between security, engineering, operations, and business stakeholders throughout the full project lifecycle. Ensure alignment, clear communication, and accountability at every stage.

Lead Associate Principal, Security Engineering

• Lead the scoping, planning, conducting, and reporting of various Security assessments
• Collaborate with other Security teams to assess risk and requirements for new technology onboarding and PoCs
• Assist with oversight of the Security Observation Risk Tracking process
• Develop and enhance Security Assurance processes including automation enhancements
• Document process flow enhancements and work with Security Business Operations to develop and enhance Security Assurance processes
• Assist Security Analysts, transferring technical and risk management knowledge
• Partner with IT department to disseminate, train, and provide guidance against the Security requirements

Lead Associate Principal, Security Assurance

• Maintain a deep understanding of the security aspects of Hypori's product/system architecture and implementation patterns; collaborate with engineering teams on threat models; participate in design and architecture reviews; and engage across scrum teams to surface and address application security, privacy, and compliance concerns.
• Be the go-to AppSec expert for software engineering, security, and compliance teams. Mentor engineers on application security principles, secure design patterns, and secure coding practices; grow security capability and awareness through thought leadership and active engagement.
• Develop and maintain software security patterns to enable security/compliance/privacy-by-default engineering, such as: secure coding and configuration standards, code snippets/templates for Infrastructure as Code, hardening of containerized applications, etc.
• Lead automation and integration of vulnerability management tooling – including SAST, DAST, and SCA tools – across artifact repositories, container registries, and other components of development and build pipelines.
• Perform security-focused code reviews on request, providing targeted guidance on security-sensitive components and implementation decisions.
• Triage vulnerability and compliance testing results for technical implications, validate their applicability, determine exposure in a system/component context, and generate user stories for remediation efforts.
• Contribute to technical compliance strategies and hardening across cloud infrastructure, development/QA environments, and system components (such as FIPS-validated crypto configurations and network segmentation); implement quality gates and security test suites across development and build pipelines.
• Actively contribute to the success of Hypori’s Security Champions program.
• Participate in Engineering on-call rotations to provide application security expertise during incident triage and response.
• Protect intellectual property, user data, and system integrity by (a) adhering to Hypori's policies and procedures for secure software development and (b) following best practices for secure product design, implementation, and deployment of development, build, test, production, and other environments.

Senior Software Engineer – Application & Cloud Security

• Executes Internal Security Controls through compliance assessment reviews and self-inspections
• Identifies deficiencies, develops and implements corrective action
• Conducts administrative inquiries in accordance with operating procedures
• Conducts Communication Security (COMSEC) duties and responsibilities
• Protects government and company information from unauthorized disclosures
• Develops and administers security education procedures and physical controls
• Contributes to enterprise Integrated Product Team (IPT)
• Provides innovation and creativity into security awareness training
• Completes tasks toward long-range goals and objectives
• Oversees Sub-Contractor Management to ensure compliance with regulations

Senior Information Security Compliance Specialist

• Own and evolve enterprise data security architecture across Databricks, Azure Data Lake, and enterprise reporting platforms
• Design and enforce fine-grained data access controls (RBAC, ABAC, row/column-level security) using Unity Catalog and governed tagging frameworks
• Architect identity and access management (IAM) patterns integrating Okta, Microsoft Entra ID, SailPoint, and privileged access platforms
• Define and implement PHI/PII protection strategies, including tokenization, encryption, de-identification, and masking across environments
• Establish secure data sharing and multi-tenant access models for external customers, partners, and embedded analytics
• Lead architecture for data rights, entitlements, and consent-based access controls, ensuring compliance with contractual and regulatory requirements
• Build and operationalize security controls aligned to SOX ITGC, including logical access controls, change management, and audit evidence frameworks
• Design audit-ready security architectures supporting HIPAA, SOC 2 Type II, and FedRAMP compliance requirements
• Partner with engineering, SRE, and platform teams to embed security into CI/CD pipelines, platform onboarding, and development standards
• Define and govern data classification, tagging, and lineage-aware security policies across medallion architectures
• Evaluate and recommend enterprise security tooling and governance platforms
• Produce architecture artifacts (decision records, control matrices, audit evidence) consumable by internal and external auditors

Senior Data Security Architect

• Setting the technical vision and architecting, implementing, and operating scalable, highly available PKI and secrets management services for the enterprise.
• Owning design decisions that shape internal trust models, cryptographic architectures, and access patterns for the most sensitive data and systems.
• Defining, implementing, and continuously improving policies, processes, and controls for the full lifecycle of keys, certificates, and secrets across diverse platforms.
• Influencing and aligning engineering, infrastructure, and leadership teams to deliver robust, observable, and compliant cryptographic systems.
• Mentoring and developing engineers, raising the bar for technical excellence, and driving consistent best practices for cryptographic and secrets management across the organization.
• Advising senior leadership on long-term security architecture strategy, trade-offs, and investment priorities related to identity, PKI, and secrets management.
• Providing operational leadership, including participation in on-call rotations for global, mission-critical services and driving post-incident improvements.
• Leading HSM strategy, including architecture, platform selection, appliance consolidation, and multi-year roadmap planning in alignment with enterprise security and compliance goals.

Staff Cybersecurity Engineer – PKI, Secrets Management

• Responsible for installing and maintaining security systems
• Install Access Control Panels & Systems
• Install various access control devices
• Install cable pathway systems (cable trays, cable racks, J-hooks or D-rings)
• Install, terminate, test, label and document horizontal, backbone and other cables
• Dress and route cable into closets and control rooms
• Perform other duties as required
• Fire stop various types of cable penetrations

Security Installer

• Establish and communicate a clear vision, mission, and multiyear roadmap for OT and embedded systems cybersecurity engineering and assurance programs.
• Lead and inspire teams of industry professionals, fostering a culture that is energetic, collaborative, resilient, and outcome driven.
• Serve as a change leader, guiding teams and stakeholders through evolving security, regulatory, and business landscapes.
• Build, deploy, and continuously improve enterprise scale OT security controls and assurance programs across industrial manufacturing facilities.
• Oversee security risk assessments, architecture design reviews, control testing, and assurance activities for factories and connected products.
• Leverage AI driven and automated capabilities to perform security control assessments, enhance visibility, and significantly accelerate assurance activities.
• Build trusted partnerships with internal business, engineering, product, and operations leaders.
• Ensure alignment with and application of relevant industry standards and frameworks, including NIST Cybersecurity Framework (CSF) and others.

Senior Manager, Cybersecurity Engineering – Factory & Product Assurance

• Lead the SIEM team with functional responsibility for end-to-end, scalable ingestion, enrichment, correlation, search performance, and detection content that increases enterprise visibility and response readiness.
• Lead the advanced analytics team across detection engineering, anomaly detection, and AI/ML-assisted analytics to improve prioritization, surface earlier risk signals, and automate manual work.
• Own the roadmap for SIEM, analytics, and log data platforms, with clear accountability for availability, ingest health, data quality, and detection effectiveness.
• Ensure alignment with security policies, controls, and regulatory requirements; partner with GRC and audit to maintain audit readiness, evidence collection, and remediation plans.
• Build, coach, and inspire a high-performing multidisciplinary team with clear expectations, strong operating rhythms, and a culture of ownership and continuous improvement.
• Hire, onboard, and manage performance for the team (goals, coaching, feedback, and development plans).
• Plan team capacity and on-call coverage, and establish runbooks, incident/problem management rhythms, and service reporting.
• Develop business cases and manage budgets for owned products and services, tracking KPIs that connect investment to risk reduction and service outcomes.
• Lead vendor relationships and platform partnerships to maximize service quality, support internal SLA expectations, and keep the team aligned to emerging threats, tools, and industry best practices.
• Lead the team in continuous innovation and process efficiencies.
• Equip incident responders with high-fidelity telemetry and analytics and continuously raise the bar on data quality and detection performance.

Cybersecurity Manager – SIEM, Detection & Security Analytics

• Executes Internal Security Controls through performance of compliance assessment reviews and self-inspections
• Identifies deficiencies, develops and implements corrective action
• Conducts administrative inquiries on personnel, processes and situations
• Conducts Communication Security (COMSEC) duties
• Protects government, intellectual, third party and company information from unauthorized disclosures
• Develops, implements and administers security education, procedures and physical controls
• Contributes to enterprise Integrated Product Team (IPT)
• Provides innovation and creativity into Personnel Security
• Oversees Sub-Contractor Management

• Responsible for assessing and monitoring system compliance, auditing, security plan development, and delivering information systems security education and awareness.
• Assists in investigating information system security violations and preparing reports specifying corrective and preventative actions.
• Responsible for reviewing and approving configuration management requests within delegated authority, conducting technical and administrative security assessments, and performing security sustainment activities including hardware and software change management, account management, media protection, and file transfer reviews.
• Support the integration of new cybersecurity processes, procedures, and tools, assists with the creation and maintenance of cybersecurity documentation, and ensures audit records are collected and analyzed in accordance with approved security plans.
• Develop, update, and/or review Risk Management Framework (RMF) documentation to include the System Security Plan (SSP), Security Control Traceability Matrix (SCTM), Plan of Action and Milestone (POA&M), Risk Assessment Report (RAR), as assigned by the ISSM.

Information System Security Officer, eWAN

• Secure APIs by implementing robust access control mechanisms, OAuth, JWT, and configuring API gateway security to ensure authenticated and authorized access.
• Develop reusable security design patterns addressing common cybersecurity challenges, ensuring consistency and best practices across diverse technology stacks and business domains.
• Craft clear, actionable security standards and policies, aligning them with industry best practices and regulatory requirements while ensuring adaptability to emerging technologies.
• Lead the design and innovation of security architectures, integrating advanced technologies to protect against evolving threats while enabling business agility and growth.
• Collaborate with key stakeholders to align security initiatives with business objectives, ensuring broad support and integration at all levels.

Principal Application Security Architect

• Design and implement security controls across networks, systems, and applications to protect against internal and external threats
• Lead vulnerability management efforts, including scanning, analysis, remediation, and reporting
• Monitor and respond to security incidents, conduct root cause analysis, and implement corrective actions
• Manage and optimize security tools such as SIEM, EDR, firewalls, DLP, and identity access management systems
• Manage security awareness training programs
• Lead security engagements for ongoing penetration tests (internal, external, web app, cloud, and AI)
• Collaborate with infrastructure and application teams to ensure secure architecture and configurations
• Support compliance initiatives related to GLBA, SOX, FFIEC, NIST, and other mortgage industry regulations
• Conduct risk assessments and security reviews for new technologies, vendors, and projects
• Develop and maintain security documentation, including policies, procedures, and technical standards
• Mentor junior security staff and contribute to security awareness training across the organization
• Stay current on emerging threats, vulnerabilities, and regulatory changes impacting the mortgage industry

Senior Information Security Engineer

• Define and drive secure, end-to-end technology strategies that protect customer interactions across workplace products and platforms
• Enhance the security posture, address emerging threats, and deliver scalable, standards-based solutions across identity, authentication, authorization, fraud mitigation, and data privacy
• Provide technical vision and leadership for complex, multi-year initiatives, influencing product roadmaps
• Guide the secure integration of APIs and digital experiences, and align with enterprise security blueprints
• Advance Fidelity’s cybersecurity innovation, reduce complexity, and strengthen customer protection

VP, Security Architecture

• Serve as the subject matter expert guiding projects and technical investigative teams to protect a large enterprise
• Strategize and implement technology best practices for risk mitigation associated with analysis of security operations center alerts and cases
• Engage with internal teams and cyber/technology industry partners to ensure threats from external actors are evaluated and mitigated where appropriate
• Understand the business drivers, and associate culture of the enterprise and partner with relevant stakeholders to ensure regulatory compliance, data protection, and associate protection are in place
• Collaborate with engineering and other teams to drive automation for analysis efficiency, containment, and remediation activities
• Advocate for change, and excel at partnering with various cross functional stakeholders
• Collaborate with other CSOC leaders to deliver a continuous monitoring and response capability
• Use data across CSOC operations to drive decisions, with emphasis on resource allocation, threat mitigation, and associate development
• Serve as the technical advisor for the Senior Director

Director, Information Security Office – AI/ML

• Act as an Information Security point of contact for a business function within the Card line of business
• Coordinate and execute proactive Information Security consulting to the business and technology teams covering Infrastructure Security, Resiliency, Data Security, Network Architecture and Design, and User Access Management
• Serve as an expert in Capital One’s Information Security capabilities, solutions, policies, procedures and standards
• Leverage strong technical acumen and be security SME reviewing architecture, providing risk mitigation solutions and driving overall risk management
• Partner closely with engineers, product managers, and other cross-functional partners to help break down complexity and organizational silos to problem solve
• Influence customers to leverage security capabilities and solutions to shift and integrate security to the left in the development processes
• Escalate and manage cyber security risk
• Provide ad hoc support on special Information Security hot topics for the business
• Provide regular updates to executive leadership with your line of business on the overall Information Security health and risk environment

Senior Lead Information Security Consultant – AI

• Implement industry leading security solutions by understanding client requirements through your savvy business and technical consulting skills
• Validate clients' existing architecture, identify gaps and assist the various business and technical teams with gathering their business use cases
• Provide a technical implementation plan and assist with the configuration of cloud discovery
• Work as a subject matter expert to deliver projects from initiation through to successful implementation
• Help the team better define protocols and maturing standard operating procedures in response to cyber threats
• Create and manage security Identity and Access Management workflows including but not limited to Microsoft Entra and CyberArk Privileged Access Management
• Deploy, troubleshoot, and maintain vulnerability management workflows using toolsets including but not limited to Tenable, Rapid7, and Defender Vulnerability Management
• Coordinate major security incident situations and provide internal communications via email in a timely manner
• Documenting remediation recommendations and use case recommendations to detect future risks
• Provide general support using Defender Vulnerability Management (Defender for Cloud) to identify, review and measure operational performance for clients
• Provide security guidance to team member across the organization how to best identify, contain and remediate security related incidents
• Understand complex issues across on premise, public and private cloud solutions and articulate the impact to higher tier team members
• Provide feedback and update client escalation procedures and documentation
• Diagnose, research, classify, resolve, and assign technical and procedural issues as outlined in support documentation
• Understand the business impact of issues that a customer reports; have a genuine concern for their situation and act appropriately

Security Consultant

• Lead the design and implementation of security solutions across Fullscript's applications, platforms, and AI-powered systems.
• Partner with engineering teams to embed security throughout the software development lifecycle, including architecture reviews, threat modeling, secure coding practices, and design reviews.
• Drive application security, product security, and vulnerability management initiatives from concept through implementation.
• Own complex security challenges that span multiple teams, balancing technical requirements, business priorities, and engineering constraints to deliver scalable solutions.
• Mentor engineers and security practitioners, raising the bar for secure software development and helping teams make sound security decisions.
• Influence technical strategy and security standards through hands-on engineering, technical leadership, and cross-functional collaboration.
• Stay ahead of emerging threats, security technologies, and AI-specific risks to help shape Fullscript's long-term security posture.

See all jobs on JobTailor

Senior Engineering Program Manager, Product Security

Ethical Hacker – OT Security Consultant

Lead Associate Principal, Security Engineering

Lead Associate Principal, Security Assurance

Senior Software Engineer – Application & Cloud Security

Senior Information Security Compliance Specialist

Senior Data Security Architect

Staff Cybersecurity Engineer – PKI, Secrets Management

Security Installer

Senior Manager, Cybersecurity Engineering – Factory & Product Assurance

Cybersecurity Manager – SIEM, Detection & Security Analytics

Senior Information Security Compliance Specialist

Information System Security Officer, eWAN

Principal Application Security Architect

Senior Information Security Engineer

VP, Security Architecture

Director, Information Security Office – AI/ML

Senior Lead Information Security Consultant – AI

Security Consultant

Staff Security Engineer