Security Engineer

• Communicate with customers via chat, email, and phone
• Compare traffic signatures and attributes including IP addresses, cookie variations, HTTP headers, and JavaScript footprints to determine what is good traffic and what is malicious
• DDoS mitigation for OSI layers 3,4, & 7: advise customers on how to filter malicious traffic using Cloudflare tools like Magic Transit, Network Firewall, WAF, IP reputation lists, packet inspection, blocklisting, allowlisting, and rate limiting
• Work with Engineering and Operations teams to mitigate attacks, suggest steps to mitigate, and apply the appropriate mitigation when applicable
• Work with Engineering and Product teams to improve products and tools

Network Security Support Engineer

• Act as an information security subject matter expert during cross-functional audit engagements, representing the Security team in walkthrough meetings with auditors and regulators
• Serve as the internal liaison (proxy) between and the Security organization to ensure audits are managed effectively and consistently
• Create and maintain a central repository of audit evidence artifacts required for compliance with SOC 2, PCI DSS, SOX, and other global regulatory standards
• Perform security risk and control assessments against common frameworks to ensure compliance with Stripe's Information Security Policy and Standards and applicable regulations (e.g., ISO 2700x, PCI DSS, SOX, NIST, COBIT)
• Support control owners with guidance on security control design and redesign to ensure continued compliance and effectiveness
• Facilitate security compliance support for Stripe's legal entities with regulatory obligations, and collaborate with cross-functional stakeholders to track and report on control remediation efforts
• Support broader GRC team program initiatives, including policy writing, security awareness training, and third-party security risk assessments

Program Manager, Security GRC

• Cyber Risk Assessments and Implement security protocols
• Provide in-person and/or remote/hybrid technical security engineering solutions to meet customer’s cybersecurity requirements
• Participate in change control boards as a voting member and Evaluate security impacts with design changes
• Validate software integrity and acquisition
• Develop appropriate policy in accordance with DoD regulations and industry best practices
• Oversee security tool efficacy as dictated by the customer (i.e. ACAS, ESS, STIG, SIEM, Back-up/Restoral, ICAM)
• Conduct vulnerability scans on a weekly basis in accordance with DAF TASKORDS and DoD regulations
• Stay updated with the latest DoD regulations, emerging cybersecurity trends
• Develop and implement custom detection techniques to identify new and emerging threats
• Report findings to stakeholders and assist in the creation of actionable security recommendations
• Collaborate with SOC analysts and incident response teams to investigate, remediate, and escalate security incidents
• On-call and/or evening or weekend hours may be required, as needed, for emergent issues
• SCA and ATO engagement and eMass package creation and management

Information Systems Security Manager – ISSM

• The Cybersecurity Risk and Compliance Manager is a key role in ASSA ABLOYs strategy to accelerate the organization’s cyber resilience.
• The newly created position will report to ASSA ABLOY America’s Division CISO and will be accountable for the divisional Cyber Risk and Compliance program.
• The role will build strong alliances with all functions and sub-groups across the division to help in the process of identifying, analyzing, quantifying, and treating risks.
• In addition, this role will be responsible to define, measure, and report on Information security compliance within the operation of an ISMS, providing relevant KPIs and KRIs.
• Establish divisional cyber risk governance
• Build divisional risk management culture and methodologies
• Maintain divisional cyber risk register
• Establish and execute risk assessment and management with business functions
• Build and maintain Cyber Risk and Compliance Reporting dashboards and reports for stakeholder groups
• Definition, monitoring and reporting of Key Risk indicators and relevant Key performance indicators
• Create, modify and implement divisional policies and directives based on Information security standards ISO27001 and NIST
• Develop deep coalitions with business partners to anchor Information Security into Policy framework
• Collaborate with corporate counsels and HR departments to monitor enforcement of standards and regulations
• Review policies periodically to identify hidden risks or non-conformity issues
• Develop and oversee control systems to prevent or deal with violations of legal guidelines and internal policies
• Evaluate the efficiency of controls and improve them continuously.

Cybersecurity Risk and Compliance Manager

• Implement and maintain Signal Energy’s cybersecurity program, policies, standards, and procedures.
• Operationalize execution of cybersecurity initiatives aligned with recognized frameworks (e.g., NIST, CIS).
• Coordinate and track cybersecurity program activities, milestones, and deliverables.
• Oversee and coordinate security operations activities, including vulnerability management, incident response, and security monitoring.
• Manage 3rd party vendors providing cybersecurity services and supporting the cybersecurity program.
• Partner with IT Infrastructure, Systems Administration, and Digital Product teams to embed security into systems and workflows.
• Support identity and access management governance, including access reviews and role-based access controls.
• Manage cybersecurity risk assessments, control testing, and remediation tracking.
• Support audit activities, including control validation and evidence collection.
• Drive vendor risk management and third-party security assessments.
• Contribute to security awareness, training, and communication efforts across the organization.
• Maintain cybersecurity documentation, metrics, and executive-ready reporting.

Cybersecurity Program Lead

• Lead a team of security engineers and analysts protecting Lakeshore across vulnerability management, incident detection and response, and identity and access management
• Shape security strategy while partnering across the business to reduce risk and develop a sustainable security program
• Drive execution of multi-year security initiatives, translating strategy into execution and maintaining progress amid shifting priorities
• Partner with senior stakeholders/leadership to develop and maintain information security policies, procedures, GRC, and plans
• Evaluate security technologies and controls, overseeing implementation and continuous improvement efforts to strengthen security posture
• Identify the root causes of technical and operational problems, leading the team to sustainable solutions

IT Security Manager

• Maintain inventory and documentation of OT hardware and software assets, including physical and virtual systems within manufacturing environments.
• Support user access management, system permissions, and security controls for OT applications and production systems.
• Assist with implementing secure configurations, cybersecurity standards, and best practices for industrial systems.
• Partner with IT and plant teams to support system updates, network security, troubleshooting, and improvements to manufacturing technology infrastructure.
• Monitor and support OT security tools, including antivirus, anti-malware solutions, vulnerability management, and system protection measures.
• Assist with backup procedures and recovery strategies for critical production equipment, including PLCs, HMIs, and other factory devices.
• Support cybersecurity assessments, testing activities, incident response, and remediation efforts within manufacturing environments.
• Collaborate with cross functional teams to ensure compliance with company cybersecurity policies and physical security requirements.
• Identify opportunities to improve OT security processes, system reliability, and operational efficiency.

Operational Technology Security Assistant

• Support the National Security team with strengthening coalitions and policy development and analysis
• Monitor and analyze policy and legal trends and conduct research for internal use
• Draft internal and external-facing communications and research products
• Provide administrative and project management support to advocacy, legal, and communications projects.

National Security Policy Specialist – Contract

• Own the full clearance lifecycle in DISS: initiation, SF-86 submission, status tracking, reinvestigation scheduling, and final adjudication follow-through for all Aalyria personnel.
• Review and advise employees on SF-86 preparation; ensure accurate and complete disclosure prior to submission, serve as the primary point of contact for clearance processing questions.
• Administer the SCI access program: coordinate indoctrination nominations with government security representatives, manage indoctrination and debriefing documentation, and maintain access records across all authorized compartments.
• Coordinate SAP access nominations and debriefings with Program Security Officers (PSOs); track access eligibility, briefing status, and debriefing requirements per program.
• Administer the security briefing and education program: conduct initial security briefings, annual refreshers, program-specific indoctrinations, and debriefings for departing personnel, maintain complete and audit-ready briefing records.
• Run the foreign contact and foreign travel reporting program: receive, review, and document employee reports; coordinate with the FSO on escalation decisions; submit to DCSA as required under NISPOM.
• Identify, document, and report adverse information to DCSA in accordance with NISPOM requirements; maintain a full audit trail of reporting actions and disposition.
• Support the insider threat program: maintain required records, submit reports through appropriate channels, and coordinate with the Insider Threat Program Senior Official (ITPSO) on referral and disposition actions.
• Process and track visit authorization requests (VARs) and incoming visit certifications; maintain a current visit log and coordinate access for all incoming cleared visitors.
• Maintain complete, reconciled employee access records across all classification levels, network domains, and program accesses, in audit-ready condition at all times.
• Serve as designated AFSO of record; perform FSO responsibilities in the FSO's absence and maintain current DCSA designation documentation.
• Manage day-to-day physical security operations: access control record maintenance, security container accountability, combination change tracking, and end-of-day security checks.
• Administer the classified document control and destruction program; maintain destruction certificates, document inventories, and chain of custody records.
• Conduct periodic self-inspections and security posture reviews; document findings, corrective actions, and closure status.
• Support DCSA security reviews, facility vulnerability assessments, and annual reviews; coordinate document production, records access, and personnel availability.
• Manage the key and lock program for all classified spaces; maintain accountability records for all controlled keys and combinations.
• Review incoming DD-254s for accuracy and completeness; coordinate with FSO and Contracts on classification guidance questions and safeguarding requirement interpretation.
• Maintain the facility's NISPOM-required security management files, DISS records, and contract security documentation, organized and current for unannounced review.
• Develop, maintain, and deliver the security education and awareness training calendar; track completion and maintain training records for all cleared personnel.
• Support classified contract administration: safeguarding requirement implementation, classification guide maintenance, and disposition instruction compliance.

Facility Security Officer

• Own and advance Strava's security governance, strategy and risk management programs, leading a small team to help execute them
• Build a repeatable process that turns risk signals (threat models, bugs, vulnerabilities, incidents, vendor assessments) into one prioritized risk view with defined risk acceptance thresholds and escalation paths
• Own the AI and third-party risk management process — delivering risk insights that matter, not rubber-stamping compliance
• Establish a security steering committee with relevant stakeholders to ensure alignment on risk tolerance and prioritization
• Establish a multi-year, actionable security strategy, roadmap and investment priorities
• Deliver regular, executive- and board-ready risk reporting
• Partner across Engineering, Trust & Safety, Legal, AI Enablement, and other business functions, representing security in cross-functional planning and risk reviews
• Identify and implement opportunities to use AI and automation to improve efficiency of risk workflows
• Continuously evolve the risk methodology as new data sources, attack patterns, and business priorities emerge

Senior Manager, Cybersecurity Strategy & Risk

• Own the product strategy for this market: who we're building for, what problems we solve, how we're differentiated
• Lead market and customer discovery with developers, engineering leaders, and security teams to find real signal
• Test hypotheses around buyers, pricing, and packaging — iterate fast
• Build and drive the roadmap, translating customer insight into a prioritized backlog
• Partner with sales and leadership to shape GTM: positioning, pricing, and the sales motion for a new buyer
• Define what success looks like and track the signals that tell us the market bet is working

Product Manager, Developer Security

• Develop and execute a comprehensive global security strategy aligned with business objectives.
• Lead and support Regional Security Managers, Facility Security Managers, and technical specialists.
• Drive compliance with the Risk-Based Security Program and governance standards.
• Build strong partnerships with executive leadership, Legal, HR, EHSS, and Caterpillar Global Security.
• Conduct enterprise-wide security risk assessments and threat analyses.
• Identify significant security risks and implement mitigation strategies.
• Design and oversee multi-layered approaches to employee, facility, information, and asset protection.
• Monitor emerging global risks, industry trends, and security technologies.
• Collaborate on and implement investigative strategies while maintaining attorney-client privilege and confidentiality.
• Collect and analyze facts within approved investigative scopes.
• Review allegations and establish investigative requirements.
• Lead complex internal investigations and forensic reviews.
• Partner with Legal, HR, and Compliance leaders on policy violations and security concerns.
• Lead development and execution of global crisis management and emergency response programs.
• Establish and strengthen Regional Incident Management Teams.
• Coordinate crisis response and executive communications.
• Develop tabletop exercises and preparedness programs.
• Lead workplace violence prevention, threat assessment, and response programs.
• Promote security awareness and training initiatives.
• Ensure employee safety, travel security, and duty-of-care compliance.
• Direct physical security programs for offices, manufacturing sites, and warehouses.
• Conduct physical security audits and assessments.
• Maintain relationships with law enforcement, government agencies, and emergency responders.

Global Security Manager

• Lead Secure Development Lifecycle practices, integrating threat modeling, static/dynamic analysis, fuzz testing, and formal verification into the development process.
• Work with R&D Engineering to define hardware security architecture, including trust zones, hardware root of trust (HRoT), and secure microcontroller protections.
• Implement memory safety strategies to mitigate buffer overflows, side-channel attacks, and execution vulnerabilities in real-time operating systems (RTOS) and bare-metal firmware.
• Respond to customer cybersecurity questionnaires and contractual language for post-market medical devices under your responsibility as necessary.

Principal Med Device Security Engineer

• The Workday Security Developer III is responsible for performing system analysis and designing to include requirements, specifications, configuration, documentation, testing, and development of security roles and policies within Workday.
• Conducts highly complex work, without supervision and with extensive latitude for independent judgment.
• Serves as a liaison between TSG groups, clients, and vendors and as a mentor to others on the team and in the department.
• Design, configure, and maintain Workday security for HCM, Payroll, Financials, Recruiting, Learning, and other Workday modules.
• Perform security analysis, troubleshooting, and root cause analysis for access-related issues.
• Collaborate with HR, Finance, Supply Chain, Internal Audit, Compliance, and business stakeholders to gather and implement security requirements.

Workday Security Developer

• Protects the organization's employees, patients, visitors, properties and all items of value
• Maintains general order of the local environment
• Detects, corrects, reports, investigates, manages, and mitigates safety and security hazards and violations
• Assists in Incident Command situations, psychiatric patient evaluations, duress alarms, and conflict situations
• Responds and assists with all medical emergencies within the scope of training
• Conducts patrols of buildings and property to deter criminal activity
• Maintains records and prepares incident reports accurately

Security Officer

• Serve as the primary information security advisor and point of contact for assigned GBAM, providing guidance on cybersecurity risks, policies, standards, and controls.
• Act as a subject matter expert in the development, implementation, and ongoing oversight of information security practices within the line of business.
• Provide independent risk-based challenge and advisory support for technology initiatives, strategic programs, and implementation changes across the GBAM environment.
• Influence and advocate for the prioritization of investments that strengthen the organization's security posture and reduce risk.
• Advise business and technology leadership on cybersecurity risk issues and recommend actions that support the bank’s broader risk management, regulatory, and compliance objectives.
• Collaborate with Risk, Technology, and Control partners to enhance security processes, governance frameworks, and risk management capabilities.
• Partner with the Global BISO organization to ensure GIS policies, standards, requirements, and strategic initiatives are communicated, understood, and effectively implemented.
• Establish and maintain strong relationships across business, technology, risk, and control functions to facilitate effective security risk management.
• Conduct routine coordination with risk partners and technology teams to address vulnerabilities, control gaps, and remediation activities, with a focus on issues identified as elevated risk.
• Drive remediation efforts for cybersecurity issues and support stakeholders in achieving sustainable solutions aligned with GIS standards, baselines, and control requirements.
• Support ad hoc security consultations, risk assessments, governance activities, and executive reporting as required.

Information Security Officer – Global Banking & Markets

• Engineer and deploy security controls for AI/ML and Generative AI systems, including model-level, data-level, and platform-level protections
• Implement AI guardrails and safety controls (e.g., prompt injection defenses, content safety filters, policy enforcement, model access controls)
• Support secure AI platform onboarding for internal teams, ensuring alignment with Truist AI Security Standards and Review Processes
• Perform technical security assessments of AI systems and cloud-hosted AI services
• Design and implement Infrastructure as Code (IaC) using Terraform and CloudFormation
• Build and maintain CI/CD pipelines (GitLab) for security tooling, guardrails, and configuration-as-code
• Automate operational workflows using Python and scripting to reduce manual security operations
• Engineer secure, scalable cloud environments supporting AI workloads across AWS and Azure
• Implement and integrate cloud security tooling (e.g., Wiz) to provide visibility and control over AI assets
• Secure containerized and orchestrated workloads supporting AI pipelines (ECS, EKS, Kubernetes)
• Partner with AI platform teams, application engineers, cloud security, and governance stakeholders to embed security into AI delivery
• Contribute to the evolution of enterprise AI security standards, patterns, and reference architectures
• Support incident response, threat modeling, and remediation activities related to AI systems

Senior Associate, AI Security Engineer

• Help design, implement, test, and operate the controls that keep enterprise AI systems safe
• Focus on security engineering foundations required for AI-enabled applications, agents, and tool-integrated automations
• Implement security controls for AI and agentic systems and validate configurations
• Support adversarial test preparation and build monitoring logic
• Collaborate with AI platform teams, application engineers, cloud security, and governance stakeholders

Senior AI Security Engineer

• Accountable for the go-to-market product roadmap, strategy, and execution of product launches for our security portfolio.
• Lead the development and execution of GTM strategies pre and post launch for product features and updates for retention, acquisition, upsell and cross sell opportunities that drive engagement and adoption.
• Partner with our Audience and Vertical Marketing Manager to develop persona-based value proposition and messaging frameworks that will be leveraged both internally and externally for our security response portfolio to drive articulation positioning aligned to GTT’s KPIs.
• Work closely with Product Leaders to identify needs and sharpen product offerings based on competitive landscape and feedback from customers.
• Partner with our Storyteller to create new and manage existing marketing and sales enablement materials (sales documentation, product videos, website copy, blog posts, data sheets and whitepapers).
• Conduct product marketing data analysis by gathering and interpreting data and presenting it in a clear and actionable manner.
• Identify GTM success metrics and measure the results of your strategies and initiatives and continue to iterate to maximize results.
• Establish clear understanding of our client’s needs, product offerings, and competitive landscape in order to ensure product strategies align with market demand.

Product Marketing Manager, Security

• Work closely with client executives and management teams to understand their businesses and assist in identifying and managing financial and operational risks within their business systems to ensure technology risks are managed
• Develop in-depth knowledge of clients’ businesses and industries by having direct client interaction while working on multiple aspects of an engagement
• Think independently and strategically about your clients’ business, systems and risks providing recommendations for business and process improvements based upon knowledge gained relative to the client’s operations, processes and business objectives
• Provide strategic business advice to clients by assisting in the implementation of new processes and controls that address key risks
• Assess, manage and optimize information technology risk across a wide range of areas, IT general controls, financial account and auditing, IT strategy and governance, IT regulatory and compliance requirements and business continuity
• Review clients' processes and controls against industry frameworks, identifying gaps in design and execution, and communicating issues and recommendations to clients
• Assist in the development of audit programs and the execution of internal audits and IT control assessments in the areas of: IT strategy and governance, IT operations, business process, key reports (IPE), automated controls, ITGC and application controls, regulatory and compliance requirements, specifically Sarbanes Oxley
• Assist in drafting comprehensive executive summaries and final reports for delivery to the client, documenting and reviewing engagement work papers in accordance with industry-accepted internal audit methodologies
• Act as a valued business advisor, build relationships and communicate effectively with the client to provide superior client service
• Continue to develop your knowledge and experience working with a variety of technology environments, platforms, applications and tools/utilities
• Demonstrate the desire to continually grow, learn and develop skills and knowledge through external and internal education, training and cross-training opportunities to maximize personal contribution to the organizational goals and ongoing career development
• Utilize your entrepreneurial skills to network and build strong relationships internally and externally with clients

Security Engineer jobs in United States

See all jobs on JobTailor