Security Engineer

• Identify potential threats and vulnerabilities in enterprise environments
• Lead technical teams conducting penetration testing, red team, and purple team exercises
• Apply offensive security analysis to enhance other cybersecurity areas
• Oversee delivery of offensive security engagements
• Collaborate with security and business teams
• Deliver clear, concise, and actionable reports and support to technical and executive audiences
• Mentor senior and junior analysts
• Build a collaborative and trust-based team culture
• Enhance team skillsets and capabilities
• Monitor emerging cyber threat trends and technologies
• Represent EY in industry groups, conferences, and events
• Plan and execute internet, intranet, wireless, web application, cloud, social engineering, and physical penetration testing
• Develop and execute red team scenarios
• Analyze penetration testing results and report findings, exploitation procedures, risks, and recommendations
• Manage testing projects using established methodologies, tools, and rules of engagement

EY cybersecurity consulting manager leading penetration testing and red team engagements

Cyber Attack & Penetration Testing Manager – Consulting

EY cybersecurity consulting manager leading penetration testing, red team, and purple team engagements. Advising clients through actionable offensive-security findings and mentoring technical teams.

• Manage and continuously modernize Sompo’s Information Security program for global operations
• Maintain alignment with external and corporate requirements
• Manage security for more than 7,000 users, hundreds of developers and IT staff, more than 10,000 network devices, and 75+ physical and cloud locations
• Maintain technical security controls across all systems and processes, including malicious activity prevention and detection, encryption, data loss prevention and detection, activity/audit logging, and adversarial simulation
• Detect, report, and escalate vulnerabilities to operational teams
• Maintain organization-wide vulnerability data for periodic and threat-driven real-time reporting
• Operate an efficient, instrumented, and evolving security alerting function
• Maintain an efficient and tested incident response procedure capable of handling events of any scale
• Participate in the systems development lifecycle to ensure alignment with the information security program
• Establish a communications program covering emerging threats, policy changes, achievements, and security recommendations
• Lead and manage a hybrid team of direct reports, matrix reports, managed services, and specialist contractors

Information Security Officer modernizing Sompo’s global insurance security program

Information Security Officer

Information Security Officer modernizing Sompo’s global insurance security program. Managing enterprise controls, vulnerabilities, incident response, and security teams across hybrid US operations.

• Develop and deliver a comprehensive Cybersecurity program for GM Financial
• Protect GMF information, applications, and infrastructure from threats while meeting statutory and regulatory requirements
• Work with IT departments, architects, data custodians, and governance groups to develop and update cybersecurity controls, requirements, processes, and procedures
• Determine security requirements through standards research, vulnerability analyses, risk assessments, architecture and design reviews, integration analysis, and cost estimates
• Define business and functional requirements for security solutions and initiatives
• Recommend and implement security policy and practice changes based on regulatory and financial-services cybersecurity developments
• Provide engineering and development input for application firewall configuration
• Manage cybersecurity control assessments for systems containing customer or sensitive information, internally hosted or cloud-based
• Assess and communicate security risks associated with development practices
• Drive security maturity across the organization
• Assist with developing, reviewing, and updating the Cybersecurity Strategy
• Plan security systems and requirements for LANs, WANs, VPNs, routers, firewalls, network devices, and PKIs
• Monitor adherence to architecture, application design, development, and testing standards
• Partner with stakeholders to minimize security and privacy risks in deployed solutions
• Mentor team members on security issues
• Collaborate on cybersecurity and privacy education and training programs
• Promote information security awareness

Cybersecurity Architect shaping GM Financial’s auto-finance security strategy and technology landscape

Cybersecurity Architect

Cybersecurity Architect shaping GM Financial’s auto-finance security strategy and technology landscape. Designing controls, assessing risks, and protecting critical systems, applications, and data.

• Own end-to-end cybersecurity execution across all Diagnostics operating companies globally
• Translate Danaher's global cyber strategy, policies, and standards into measurable outcomes
• Serve as the platform's senior cybersecurity executive and single accountable face of cyber to executive and operational leaders
• Build, lead, and develop a globally distributed Platform Security Team
• Partner with the six DIS Global Services pillars in a matrixed model
• Own the Diagnostics Platform's cyber risk register, technical risk management, vulnerability management prioritization, remediation delivery, architecture review execution, integration and remediation engineering, and platform architecture standards
• Lead platform cyber assurance, including customer security questionnaires, audit response, and cybersecurity certification programs
• Coordinate with central Product Security on FDA premarket cybersecurity, postmarket vulnerability management, SBOM, and PSIRT operations
• Drive cyber diligence, integration, and day-1 through steady-state onboarding for acquired business units
• Lead data protection, AI security governance coordination, application security engineering, secrets management, and MFA coordination
• Secure OT and manufacturing plant environments across global manufacturing sites
• Run the platform cyber PMO across multiple time zones, including cadence, RAG reporting, resource loading, initiative execution, KPI/posture reporting, and continuous improvement

Leading cybersecurity for Danaher's global diagnostics and connected medical-device businesses

Platform Information Security Officer, Diagnostics Platform

Platform Information Security Officer leading global cybersecurity across Danaher Diagnostics operating companies. Securing regulated medical devices, clinical data, manufacturing environments, and enterprise systems.

• Design, build, and operate automated security scanners and developer guardrails across the software development lifecycle
• Identify and reduce risk across source code, open source dependencies, secrets, software supply chains, AI/LLM tools, edge/CDN environments, and developer workflows
• Apply security best practices to enhance and optimize systems
• Partner with engineering, platform, and security teams on security initiatives and cross-functional projects
• Analyze and resolve complex security challenges using standard and alternative approaches
• Build and operate scanning and guardrail capabilities across source control, CI/CD, package ecosystems, and developer platforms
• Tune SAST, SCA, and supply chain controls; investigate gaps and false positives; improve remediation guidance
• Write and review code, APIs, detection rules, and automation that process findings and enforce security policy
• Troubleshoot integrations with developers, platform engineers, and security teams
• Evaluate AI/LLM tools and help define appropriate security controls
• Use metrics and feedback to improve reliability, coverage, performance, adoption, and remediation outcomes

Senior Product Security Engineer securing PayPal’s global digital payments platform

Senior Product Security Engineer

Senior Product Security Engineer building security scanners and developer guardrails for PayPal’s global payments platform. Improving software supply-chain, AI/LLM, and application security across engineering workflows.

• Conduct application and cloud security assessments to identify risks and vulnerabilities
• Collaborate with security and development teams to integrate security testing into the SDLC
• Support vulnerability management and prioritize findings
• Support development of cloud security architecture aligned with industry standards and best practices
• Conduct security assessments and assist with threat modeling
• Assist with penetration testing, remediation, and security controls implementation
• Maintain security documentation and reports
• Support incident response and investigate application security incidents
• Promote security awareness and established security best practices across cross-functional teams
• Conduct educational exercises on security best practices, phishing, and social engineering
• Improve security tools, dashboards, and monitoring resources for product security

Cybersecurity Engineer securing Business Wire’s applications, cloud, and IT systems

Cybersecurity Engineer

Cybersecurity Engineer securing Business Wire’s applications, cloud, and IT systems. Integrating security testing, vulnerability management, incident response, and security awareness practices.

• Serve as the primary legal advisor to Global IT Information Security leadership on cybersecurity governance, regulatory compliance, enforcement matters, and enterprise risk management initiatives
• Lead the development and enhancement of cybersecurity legal frameworks, policies, standards, governance processes, and internal controls supporting global operations
• Advise business and functional leaders on cybersecurity considerations related to strategic initiatives, technology transformation efforts, and operational risk management
• Support cybersecurity incident preparedness and response activities, including regulatory inquiries, investigations, audits, enforcement actions, and litigation matters
• Conduct cybersecurity legal due diligence for mergers, acquisitions, divestitures, and other business development activities, including integration and separation planning
• Counsel stakeholders on third-party cybersecurity risk, supply chain resilience, and contractual risk mitigation strategies
• Partner with product security, privacy, compliance, communications, and business counsel teams on secure-by-design initiatives and enterprise cybersecurity programs
• Monitor global cybersecurity regulatory, enforcement, and litigation developments and provide actionable guidance
• Serve as a trusted legal advisor across a global healthcare technology organization
• Travel primarily to Medtronic facilities to support business and legal priorities

Cybersecurity legal counsel advising Medtronic’s global healthcare technology operations

Global IT Cyber Security Legal Counsel

Cybersecurity legal counsel advising Medtronic’s Global IT and information security teams. Guiding regulatory compliance, incident response, transactions, and cyber-risk governance across healthcare technology operations.

• Assist in streamlining critical projects between the GSS Team and the Global Safety & Security Center to improve processes and documentation
• Learn and understand existing technology platforms to identify and develop future protocols and best practices
• Support the integration of new technologies, including global travel security assessment and incident management tools
• Analyze current social media platform rules and regulations to enhance open source intelligence research capabilities
• Review case management platforms and determine future roadmaps and standard operating procedures
• Assist in developing and improving KPI and metric reporting using Power BI and Salesforce
• Research countries and cities worldwide to support Global Travel Security Services
• Review GSS training content and materials and recommend improvements

Global Safety & Security Co-op supporting TJX’s workplace safety, travel security, and incident-management operations

Global Safety & Security Co-op

Global Safety & Security Co-op supporting TJX’s workplace safety, travel security, and incident-management operations. Improving security technology, reporting, documentation, and training for the global off-price retailer.

• Own Truliant’s security architecture
• Ensure security is integrated into IT projects, systems, and day-to-day decisions
• Design and implement secure architectures, configurations, policies, and controls for technology projects
• Implement and manage safeguards including firewalls, intrusion detection and prevention, encryption, identity management, and monitoring
• Assess vulnerabilities and emerging threats
• Develop mitigation strategies
• Lead incident response from investigation and containment through remediation and post-incident review
• Partner with IT teams, business units, and external partners
• Integrate security and communicate risk clearly
• Support audits and compliance
• Build employee security awareness
• Improve risk management practices
• Maintain incident response plans
• Review security information
• Align security practices with evolving technologies, threats, and regulatory requirements

Cyber Security Architect securing Truliant Federal Credit Union’s financial technology and member information

Cyber Security Architect

Cyber Security Architect securing Truliant Federal Credit Union’s financial technology and member information. Designing architectures, leading incident response, and supporting regulatory compliance.

• Support the enterprise Vulnerability Management program across workstations, servers, cloud workloads, and other infrastructure
• Identify, analyze, validate, prioritize, track, and remediate vulnerabilities across the enterprise
• Administer, configure, maintain, troubleshoot, and optimize the Tanium platform and modules
• Develop Tanium sensors, questions, packages, actions, computer groups, dashboards, and reports
• Administer and optimize Tanium Comply for vulnerability and configuration assessment
• Configure vulnerability assessments and compliance scans
• Support patch and vulnerability remediation using Tanium Patch and Deploy or integrated endpoint-management technologies
• Develop patch deployment groups and maintenance windows
• Track patch deployment status, failures, exceptions, and remediation progress
• Maintain endpoint asset visibility and identify unmanaged, stale, duplicate, or non-compliant devices
• Develop scripts and automation using PowerShell, Python, APIs, or similar technologies
• Integrate Tanium with SIEM/XDR, vulnerability management, ITSM, CMDB, and other enterprise security platforms
• Support Cybersecurity Operations during vulnerability-related incidents and emerging threats
• Query enterprise endpoints during incident investigations and support emergency containment or remediation
• Develop vulnerability dashboards, metrics, KPIs, executive reporting, and actionable security information
• Collaborate with Cybersecurity Operations, IT Infrastructure, application owners, cloud teams, system owners, and business stakeholders

Cybersecurity Engineer securing AeroVironment’s autonomous defense systems through Tanium and vulnerability management

Senior Cybersecurity Engineer

Cybersecurity Engineer administering Tanium and reducing vulnerability risk for AeroVironment’s autonomous defense technology. Driving endpoint visibility, patch remediation, security automation, and incident response.

• Design, pilot, and implement logging and alerting systems for endpoints, infrastructure, networks, and cloud environments
• Build tools and devise automation strategies to improve threat hunting and intrusion response
• Investigate events generated by the alerting pipeline and triage potential incidents
• Use AI tools and high-velocity engineering workflows to design and ship scalable services
• Uphold rigorous standards for code correctness, security, and production-ready quality
• Collaborate with multiple Snap Inc. teams during incidents and drive response efforts
• Identify, analyze, fingerprint, and build threat intelligence on adversary tactics, techniques, and procedures spanning APTs and cybercrime

Security Engineer protecting Snapchat through threat detection, incident response, and security automation

Security Engineer, Level 5 – Detection & Response

Security Engineer protecting Snap’s Snapchat ecosystem through threat detection and incident response. Building automated security tooling across endpoints, networks, cloud infrastructure, and operating systems.

• Design, pilot, and implement logging and alerting systems to detect malicious activity on endpoints, infrastructure, networks, and cloud environments
• Build tools and devise automation strategies to improve threat hunting and intrusion response
• Investigate events generated by the alerting pipeline and triage potential incidents
• Use AI tools and high-velocity engineering workflows to design and ship scalable services while maintaining code correctness, security, and production-ready quality
• Work closely with multiple Snap Inc. teams during incidents and drive response efforts
• Identify, analyze, fingerprint, and build threat intelligence on adversary tactics, techniques, and procedures for sophisticated threat actors, including APTs and cybercrime

Security Engineer protecting Snap’s Snapchat ecosystem through threat detection and incident response

Security Engineer protecting Snap’s Snapchat ecosystem through threat detection and incident response. Building detection systems, automating investigations, and analyzing sophisticated cyber threats.

• Report to the Senior Director of Security and Aviation within the Corporate Security Department
• Coordinate the security program in an area to maximize asset recovery and deterrence
• Investigate criminal activity directed against company assets or reputation
• Administer asset protection programs during normal and emergency conditions
• Conduct and manage investigations supporting asset protection and safe and secure workplace policies
• Develop and conduct security training and awareness for employees
• Present the strategic direction of the security program to senior management
• Conduct law enforcement liaison
• Support FPL storm restoration efforts
• Perform NERC CIP Facility Service Reviews
• Perform other job-related duties as assigned

Area Security Manager protecting Florida Power & Light assets through investigations and security programs

Area Security Manager

Area Security Manager protecting Florida Power & Light assets through investigations, training, and asset protection programs. Based at NextEra Energy’s Juno Beach corporate office with 25% Florida travel.

• Deliver cyber extortion readiness engagements for retained enterprise customers, including executive briefings, technical workshops, and cross-functional training sessions
• Design and facilitate tabletop exercises reflecting realistic cyber extortion conditions, operational disruption, ambiguous early facts, and executive decision points
• Curate and continuously improve customer-facing playbooks, decision frameworks, readiness checklists, and workshop materials
• Conduct research and forensic data analysis to support advisory deliverables and customer insights
• Synthesize lessons learned from case trends and interpret forensic outputs and artifacts into actionable readiness recommendations
• Support customer due diligence requests, RFP/RFI questionnaires, and contract/security exhibit reviews with internal stakeholders
• Collaborate with case management, subject-matter experts, and other stakeholders to keep readiness guidance grounded in real-world incident behavior and recovery constraints
• Report to the Senior Director, Field CISO within the Cyber Readiness and Advisory Services team as an individual contributor

Field Security Advisor helping Veeam protect enterprise data through cyber extortion readiness and advisory services

Field Security Advisor

Field Security Advisor helping Veeam, a data resilience and security company, prepare Global 2000 customers for cyber extortion. Designing tabletop exercises, advisory content, and executive workshops.

• Lead the overall design of cybersecurity architecture, cybersecurity engineering, and business architecture
• Ensure organizational compliance with internal and external cybersecurity policies
• Contribute to the overall security vision and strategy
• Improve operational efficiencies and reliability within the cybersecurity tools ecosystem in a cloud-native environment
• Lead day-to-day management and execution of cybersecurity architecture and engineering functions across all divisions
• Partner with business leaders to identify opportunities and risks and develop solutions supporting U.S. FinTech’s mortgage securitization platform
• Design and implement company-wide cybersecurity architecture and engineering with second and third lines of defense
• Develop cybersecurity patterns enabling secure application design and development
• Manage external assessment activities and synthesize results into senior-level presentations
• Advise business, technology, and security teams on cyber risk management and information security best practices
• Serve as ambassador and senior technical advisor for enterprise cybersecurity
• Develop and refine standards with Engineering, Infrastructure, Application Development, and Data teams
• Monitor threat vectors and the cloud security tools ecosystem
• Prototype new security tools and technologies and optimize or consolidate existing tools
• Oversee deployment, integration, and initial configuration of new cybersecurity solutions and enhancements
• Lead knowledge-sharing initiatives across cybersecurity, technology, and business teams
• Create and maintain information security program performance metrics and communicate them to IT leadership
• Lead the identity and access management program, including identity lifecycle management, access governance, privileged access, and authentication controls

Senior Director securing U.S. FinTech’s cloud mortgage securitization platform

Senior Director – Information Security

Senior Director leading cybersecurity architecture, engineering, and identity governance for U.S. FinTech’s cloud mortgage securitization platform. Advising leaders and managing enterprise cyber risk.

• Support the design and implementation of cybersecurity solutions
• Fortify defenses against emerging threats and address technical challenges
• Collaborate with cross-functional teams and product teams
• Author and maintain security documentation
• Manage risk and remediate security issues
• Execute product security activities including threat modeling, security requirements definition, cyber test planning, and cyber risk assessments
• Coordinate with engineering and development program teams on SDLC practices, quality, and compliance
• Verify the correctness and completeness of cyber certification documentation and cybersecurity test activities
• Support continuous improvement activities for cybersecurity assurance metrics

Cybersecurity Architect/Engineer securing Honeywell Aerospace aviation products

Cyber Security Architect/Engineer I

Cybersecurity Architect/Engineer securing Honeywell Aerospace aviation products. Executing threat modeling, risk assessments, SDLC security, and cyber certification activities.

• Implement and maintain cybersecurity controls protecting systems, networks, and data
• Execute vulnerability management, including scanning support, prioritization, remediation coordination, and verification
• Support incident response through triage, containment coordination, root-cause analysis, and post-incident follow-up
• Perform security monitoring and threat detection by analyzing alerts, events, and indicators
• Advise on secure architecture, control selection, and implementation approaches
• Reinforce IT/OT separation, network segmentation, and operational security controls in industrial environments
• Administer or support NAC governance and access enforcement
• Conduct risk assessments, control reviews, framework alignment, and remediation tracking
• Support compliance through evidence collection, control validation, documentation, and governance participation
• Operationalize security standards, procedures, and control requirements
• Serve as a senior technical resource for vulnerability management, threat detection, and incident response coordination
• Lead technical incident analysis, containment recommendations, evidence review, and stakeholder coordination
• Perform security architecture reviews for systems and network changes
• Provide guidance on policy enforcement, operational security controls, and monitoring best practices

Senior cybersecurity engineer securing Hyundai Translead’s trailer-manufacturing IT and OT environments

Senior cybersecurity engineer securing Hyundai Translead’s trailer-manufacturing IT and OT environments. Leading threat detection, vulnerability management, incident response, segmentation, and compliance activities.

• Help government clients identify, evaluate, and solve complex challenges
• Design, develop, launch, and improve projects and programs aligned with strategic goals and missions
• Develop and implement performance metrics and measurement tools
• Analyze projects and programs, identify risks, and develop, apply, and monitor mitigations
• Document and evaluate business processes and recommend improvements
• Apply analytical, problem-solving, and reporting techniques
• Produce emails, memos, issue papers, presentations, executive briefings, and other communications
• Research client problems and formulate and recommend solutions collaboratively
• Collect and analyze data, produce models and visualizations, and draw conclusions to improve decision-making
• Analyze and develop or improve policies and procedures
• Assist with business development, proposals, white papers, and account meetings
• Participate in coaching and mentoring programs
• Assist in developing learning and development materials, courses, and presentations
• Support recruiting programs and initiatives
• Interact with senior client management and develop technical, business development, client service, leadership, project management, and people development skills

Entry-level Guidehouse consultant supporting government defense, diplomacy, and intelligence programs

Consulting Analyst – Defense, Diplomacy, Intelligence, Defense & Security

Entry-level Guidehouse consultant supporting government defense, diplomacy, and intelligence programs. Analyzing data, improving programs, and developing client solutions.

• Serve as an independent 2nd Line-of-defense representing Corporate Information Security in the region
• Design and drive information security policies, standards, and processes
• Review and interpret CSOPs, SSOPs, and other information-security documents and directives
• Direct regional security teams in implementing and improving security standards and processes
• Communicate and coordinate information security strategy, programs, and services with business stakeholders
• Monitor and improve regional security posture and maturity
• Advise on least privilege, need-to-know, security-by-design, and security-by-default principles
• Ensure M&A projects and post-merger integrations comply with ZEISS security standards
• Review security concepts for central business-supporting functions and regional demands
• Address regional incident tickets and service requests
• Participate in security risk management and aggregation of first-line risks
• Support regional incident response and drive closure of gaps and vulnerabilities
• Collaborate with CIRT/SOC, CIT, regional IT, local IT, and Business IT during security incidents
• Serve as the primary escalation contact for regional information security topics
• Participate in CIDA for regional security incidents
• Conduct regional investigations, eDiscovery, and digital evidence gathering and analysis
• Coordinate litigation holds with HR and Legal
• Assess and approve regional information security requirements, with veto rights for critical risks
• Evaluate project risks and define security requirements, including for M&A integrations
• Guide local security assessments and conduct on-site compliance visits
• Support regulatory certifications and compliance, including CMMC, ISO 27001, TISAX, HIPAA, CyberEssentials, and NIS2
• Assess local regulatory requirements and advise on cybersecurity changes
• Monitor regional information security status, KPIs, and KRIs
• Identify business risks and mitigation strategies
• Coordinate physical and facility security topics with Corporate Health & Safety
• Support BISO review of information security contract amendments and security questionnaires
• Recommend regional security awareness initiatives and support Corporate InfoSec programs

Regional Information Security Officer securing ZEISS’s global optics and optoelectronics business

Regional Information Security Officer

Regional Information Security Officer overseeing cybersecurity governance, risk, compliance, and incident response for ZEISS’s optics and optoelectronics operations. Remote role based in White Plains, New York.

• Monitor, maintain, and support enterprise security technologies, including SIEM, IDS/IPS, vulnerability management, and malware protection solutions
• Respond to security incidents, alerts, and operational events according to established procedures
• Triage and manage requests from service management queues and engineering support mailboxes
• Configure, tune, and optimize security tools, policies, detections, and alerts
• Troubleshoot security infrastructure and support audit, compliance, and governance activities
• Support ITSM processes including incident, problem, and change management
• Analyze network traffic, authentication events, endpoint telemetry, and other security data to identify threats
• Develop and maintain security documentation, standards, procedures, and playbooks
• Collaborate with cross-functional teams to improve security posture and operational effectiveness
• Support Aerospace and Federal Government clients

Security Engineer supporting Capgemini’s enterprise cybersecurity operations for aerospace and federal clients

Security Engineer supporting Capgemini’s enterprise cybersecurity operations for aerospace and federal clients. Monitoring threats, responding to incidents, and optimizing security platforms.

Security Engineer jobs in United States

See all jobs on JobTailor

Cyber Attack & Penetration Testing Manager – Consulting

Information Security Officer

Cybersecurity Architect

Platform Information Security Officer, Diagnostics Platform

Senior Product Security Engineer

Cybersecurity Engineer

Global IT Cyber Security Legal Counsel

Global Safety & Security Co-op

Cyber Security Architect

Senior Cybersecurity Engineer

Security Engineer, Level 5 – Detection & Response

Security Engineer, Level 5 – Detection & Response

Area Security Manager

Field Security Advisor

Senior Director – Information Security

Cyber Security Architect/Engineer I

Senior Cybersecurity Engineer

Consulting Analyst – Defense, Diplomacy, Intelligence, Defense & Security

Regional Information Security Officer

Security Engineer