Security Engineer

• Advise on and assess the security posture of AI/ML systems, including LLMs, GenAI pipelines, and model serving infrastructure
• Lead threat modeling exercises specific to AI workloads
• Advise internal teams on securely integrating SaaS AI services and APIs
• Evaluate and recommend controls for data ingestion pipelines, RAG architectures, and vector databases
• Serve as a trusted security advisor bridging business stakeholders, AI/ML engineers, IT operations, and information security teams
• Continuously track emerging AI security research, adversarial techniques, regulatory developments, and vendor security advisories
• Produce and maintain security architecture documentation, risk assessments, control frameworks, and guidelines tailored to the organization's AI environment
• Contribute to the development of a long-term AI security strategy
• Develop and deliver training and awareness content for technical and non-technical stakeholders on AI-specific risks

AI Security Engineer

• Owns and manages the development of InfoSec engineering designs and implementation.
• Identifies security issues and risks and develops mitigation plans in accordance with standards for cloud implementations.
• Architect, design, implement, support, and evaluate security-focused tools and services.
• Oversee assessment and mitigation of system security threats/risks throughout the program life cycle.
• Implements security designs—including hardware, software, data, and procedures—and verifies compliance with security requirements.
• Support the implementation and maintenance of secure cloud environments while working closely with engineering, development, and program teams.
• Contribute to strengthening the overall security posture of cloud-based systems by supporting security engineering activities, implementing security controls, and ensuring compliance with applicable federal and DoD cybersecurity standards.

Cloud Information Systems Security Engineer II

• Lead the strategic maturation of DigitalOcean’s compliance framework including multiple ISO standards
• Manage cross-functional projects for compliance certifications
• Conduct annual and ad-hoc risk assessments
• Design and implement controls to meet compliance standards
• Author and maintain security policies reflecting current regulatory landscapes

Senior Security Engineer

• Architect and lead the implementation of an Integrated Management System (IMS)
• Manage cross-functional projects for compliance certifications
• Lead annual and ad-hoc risk assessments
• Author and maintain enterprise-level security policies

• The Vice President, Enterprise Infrastructure & Security serves as the Bank’s senior technology leader responsible for the architecture, engineering, and operational integrity of enterprise infrastructure and security platforms.
• Ensure stability, resilience, security, and regulatory compliance of the Bank’s core technology environment supporting critical business operations, customer channels, and regulatory obligations.
• Provide executive leadership across enterprise infrastructure domains including network, server, cloud, identity, endpoint, and security technologies.
• Ensure infrastructure platforms are designed, implemented, and operated in a secure, resilient, and highly available manner consistent with regulatory expectations.

VP, Enterprise Infrastructure & Security

• Continuously monitor Claude and ChatGPT product roadmaps, release notes, and vendor communications to anticipate platform changes before they land
• Translate upcoming features into proactive configuration, policy, and enablement decisions not reactive scrambles
• Maintain active relationships with Anthropic and OpenAI account teams; flag ToS updates, data processing agreement changes, and acceptable use policy shifts before they become surprises
• Provide expert-level administration of AI console environments across both platforms
• Manage Claude and ChatGPT organizational settings files using Git, version-controlled, reviewed, and deployed like the infrastructure they are
• Own API key lifecycle management and secrets hygiene for all AI integrations
• Manage SSO/SCIM provisioning for AI platforms; ensure access is tight, auditable, and clean
• Develop token tracking and financial dashboards so leadership actually knows what AI costs us by team, by use case, by month
• Build anomaly detection on AI spend; if something spikes, you catch it before accounting does
• Produce regular usage trend reports and ROI framing for leadership that goes beyond "we use AI a lot"
• Build and maintain internal MCP servers that extend AI capabilities into our workflows securely
• Be the in-house subject matter expert on agentic AI builds such as architecture, risk, failure modes, and the parts that go sideways in ways no one anticipated
• Identify and mitigate prompt injection risks in internal AI-powered tools
• Ensure no sensitive or regulated data (PII, PCI, PHI) flows into AI prompts. Architect the guardrails, not just the policy
• Maintain awareness of AI-specific incident response options; when something goes wrong with an AI integration, you're in the room
• Serve as IT Engineering's primary liaison to the AI Adoption Committee bringing operational grounding to adoption decisions
• Participate actively in the AI Working Group; connect platform capabilities to how the company actually uses them
• Partner closely with the Governance & Trust team, who leads AI policy and governance. Your job is to be their technical counterpart by implementing, informing, and flagging issues, not owning the policy itself

Senior Security Engineer, AI Platform

• Design, build, and maintain secure CI/CD pipelines with security gates that catch issues before they reach production.
• Systematically, consistently and automatically capture the risk exposure of Chainguards products.
• Implement and enforce software supply chain security controls: signed artifacts, SBOMs, provenance attestation (SLSA, Sigstore / Cosign).
• Proactively identify emerging customer security needs, and build solutions to meet these.
• Lead security architecture reviews and threat models for Kubernetes-based workloads running on GCP and AWS.
• Harden container images, Kubernetes cluster configurations, and cloud IAM postures — minimising attack surface across our product stack.
• Define and drive adoption of baseline security standards: pod security standards, network policies, workload identity, secrets management.
• Evaluate and operationalise CNAPP / CSPM tooling to maintain continuous visibility into cloud-native risk.

Senior Product Security Engineer

• Manage and lead various initiatives to assist Solutions Consultants (SCs), Domain Consultants (SCs), and Enablement team using AI and Public Cloud Service Providers (CSPs)
• Spearhead the architectural design of sophisticated, multi-product lab environments
• Act as a key consultant to Sales Engineering and Learning & Enablement organizations
• Build foundational, "golden-image" proof-of-concepts for new product integrations
• Define modular "building block" solutions for lab users
• Collaborate closely with lab engineers to scale designs for hundreds of concurrent users
• Drive AI solutions and integrate AI/ML technologies into architectural designs
• Identify opportunities to create AI solutions, promoting an

Network Security Lab Architect

• Support security design and installation projects throughout North America
• Manage all aspects of the project from initial engagement through project completion, including multiple projects and scopes of work
• Identify project schedule, scope parameters, and oversee security design and implementation per client design requirements and standards
• Manage early project initiation activities and develop project security scope, schedule, critical deliverables, and requirements
• Manage scheduling, status, and tracking of critical project tasks, issues, and deliverables
• Prepare, issue, and manage Request for Proposal (RFP) documents for security systems installation scope
• Evaluate RFP responses and prepare evaluation reports, to include evaluation criteria, scoring, and recommendation details
• Perform security site evaluations of potential client properties and review proposed design concepts
• Collaborate with client owner and user group stakeholders to define use cases and verify functional requirements, and produce a security functional specification for the project

Physical Security Project Manager

• Conduct security control assessments for commercial and government customers to determine the overall effectiveness of the controls and the vulnerability state of components, applications and databases residing within a system boundary.
• Develop, document and review System Rules of Engagement (ROE), Security Assessment Plans (SAPs) and Security Assessment Reports (SARs).
• Conduct kick-off meetings, develop associated schedules and resource plans to complete the assessments.
• Responsible for quality control on the assessment and associated deliverables.
• Develop practical and risk-based approaches for security control implementation and vulnerability remediation.
• Review and provide feedback system boundaries, common controls, the security categorization of information systems, applicable security control baseline based on system categorization.
• Review cyber/system/network security body of evidence and documentation for accuracy and completeness.
• Lead Post Assessment Meetings with the customer.
• Provide Plan of Action and Milestones (POA&M) support to ensure mitigations are completed or the teams are working to mitigate all vulnerabilities in a timely fashion and within customer policy timelines.
• Perform continuous monitoring to ensure implemented security controls remain functional throughout the lifecycle of the information system.
• Perform other duties as assigned.

Cybersecurity Assessor – CMMC

• Oversee multi-site security operations to ensure compliance with established departmental and operational procedures
• Operational responsibilities include access control, investigations, fire protection, emergency response, incident management and business continuity
• Directly manage the onsite security team to ensure all required security services are delivered as defined in SOPs and Global Security Operations Procedures
• Ensure the accurate identification, tracking and monitoring of problem situations
• Be a liaison to all site departments, local law enforcement and other emergency service providers
• Work in close collaboration with the Global Security Operations Center (GSOC) to monitor internal and external threats to the business, introduces mitigation strategies, and escalates incidents to senior leadership

Manager, Security & Incident Management

• Own and evolve the enterprise vulnerability management program, including governance, operating model, and stakeholder alignment
• Define and execute an integrated roadmap for vulnerability management and security risk reduction initiatives
• Establish accountability, SLAs, and execution standards across security, engineering, and infrastructure teams
• Lead cross-functional risk reduction initiatives; manage timelines, dependencies, and escalation to ensure delivery
• Drive prioritization based on risk exposure, business impact, and regulatory requirements
• Align security, infrastructure, cloud, and application teams on remediation and risk reduction priorities
• Lead risk acceptance and exception processes, including analysis, approvals, and lifecycle management
• Maintain risk registers, treatment plans, and exception tracking aligned to business and compliance objectives
• Ensure appropriate risk segmentation across commercial and government environments
• Translate vulnerability and risk data into actionable insights for leadership decision-making
• Deliver executive-level reporting on risk posture, remediation performance, and program progress
• Define and track metrics to measure risk reduction effectiveness and execution performance
• Ensure audit readiness through complete, traceable documentation and remediation evidence
• Support regulatory and government requirements, including POA&M tracking and control validation
• Partner with GRC and audit stakeholders to meet contractual and compliance obligations​

Security & Risk Management Program Manager

• Lead and manage Security Analysts responsible for security operations center (SOC) activities and security administration
• Oversee daily security monitoring, event triage, escalation handling, and incident response coordination
• Establish team priorities, assign work, and ensure timely completion of operational security tasks and remediation activities
• Develop and report on security operations metrics, trends, and performance indicators
• Oversee administration of security tools, including monitoring platforms, endpoint protection, vulnerability management, and access controls
• Manage user access administration, privileged access review support, and periodic access validation processes
• Ensure security controls are functioning effectively and that issues are tracked, escalated, and remediated
• Maintain team procedures, runbooks, and documentation for security operations and incident response
• Support the implementation, tuning, and effectiveness of security tools and monitoring capabilities
• Lead incident detection and response activities, including escalation to leadership when appropriate
• Coordinate with IT and system owners on containment, remediation, recovery, and lessons learned
• Monitor emerging threats and vulnerabilities and direct team focus accordingly
• Support audit readiness, assessments, and operational response exercises
• Manage, coach, and develop Security Analysts, including performance management and career development
• Promote consistency in investigation, documentation, escalation, and communication practices
• Partner with the CISO on staffing, workload planning, and operational maturity initiatives
• Collaborate with Audit, Risk, Compliance, and IT teams on control validation and issue remediation
• Support third-party reviews and audit follow-up activities
• Escalate material risks, control gaps, and resource concerns to the CISO
• Ensure alignment with organizational policies, standards, and regulatory requirements

Information Security Manager

• Define and own Crossmint's security strategy, including roadmap prioritization, risk posture, and security investment decisions.
• Operate fluidly across scope levels: board-level risk briefings one hour, hands-on threat model review the next.
• Establish and maintain a security program that scales with the company, not one that creates drag on product velocity.
• Report to co-founders on security posture, risk landscape, and program progress.
• Maintain deep technical fluency across cloud security (AWS primary), application security, CI/CD security, and endpoint and corporate IT.
• Review architecture decisions, new product features, and infrastructure changes for security implications before they ship.
• Conduct or lead threat modeling exercises across product and infrastructure domains.
• Step in as a hands-on practitioner during incidents, complex vulnerability analysis, or high-stakes security reviews where direct expertise is required.
• Own security's relationship with auditors, regulators, and compliance frameworks including SOC 2 Type II, DORA, and MiCA-related security requirements.
• Lead audit preparation cycles: scope definition, evidence readiness, control documentation, and auditor-facing communication.
• Maintain audit-ready posture year-round, not as a sprint before each audit window.
• Partner with the Compliance function to ensure security controls satisfy both regulatory requirements and practical risk management objectives.
• Manage and develop the Senior DevSecOps Engineer, with the expectation of growing the security team over time.
• Serve as the internal authority on security for Engineering, Product, Compliance, Legal, and People Ops.
• Drive security awareness and culture across the company without creating friction that slows down product teams.

Head of Security

• Engineer Zero‑Trust access controls for workforce and service identities
• Develop and implement pipelines using RBAC and ABAC standards
• Include device and posture checks and risk‑adaptive policies for critical services and high-risk scenarios
• Harden privileged access
• Migrate administrators to right‑size entitlements and eliminate long‑lived elevated access across prioritized platforms (e.g., Entra ID, Privileged Access Management)
• Participate in tool POCs and deployments for SaaS security posture monitoring
• Define baselines for M365, Slack, GitHub, Workday, and Google
• Build remediation runbooks and posture success measurements
• Instrument identity metrics collection and tracking by standardizing log schemas for authentication, authorization, and entitlement changes
• Publish dashboards showing privilege drift, misconfigurations, and access sprawl
• Coordinate risky events with security alert procedures
• Author implementation guides and reference architecture that supports a multi‑year strategy passionate about measuring risk reduction over time

• Leads and manages programs supporting secure software delivery capabilities
• Develops and maintains schedules, deliverables, and engagement plans
• Coordinates activities across engineering, Product Security, and supporting organizations
• Provides user support and engagement for internal customers
• Identifies and drives process improvements to enhance efficiency, scalability, and service delivery
• Communicates program status, risks, and issues
• Supports adoption of security-related capabilities such as code signing, certificates, keys, and related controls

Senior Engineering Program Manager, Product Security

• Design and implement security controls and tooling across Sift’s infrastructure and applications (e.g., IAM policies, network controls, secrets management, endpoint protections, container and workload security).
• Embed with product and platform teams to perform security design reviews, threat modeling, and code or configuration reviews for new features and services.
• Improve the secure SDLC by integrating AI-powered scanning tools, security scanning (SAST/DAST, dependency and container scanning) into CI/CD, and by developing guardrails, templates, and best practices for engineers.
• Own or co-own vulnerability management workflows, from discovery and triage through remediation, including defining SLAs, coordinating with service owners, and tracking closure.
• Develop automation (scripts, services, integrations) to detect misconfigurations, anomalous activity, or policy violations, and to reduce manual operational work for the security team.
• Participate in security incident response (on-call rotation or escalation), including investigation, containment, root cause analysis, and long-term fixes.
• Contribute to security documentation and standards, ensuring we have clear, actionable guidance for engineers on topics like authentication, authorization, data encryption, and key management.
• Support audits and assessments (e.g., SOC 2, customer security questionnaires) by providing technical details and evidence of control design and effectiveness.
• Mentor other engineers on secure design and implementation practices through pairing, reviews, training sessions, and written guidance.

• Enhance dynamic team providing Security Steward Services for the CDC
• Hands-on experience with maintaining programs of record using GRC tools
• Conduct Risk Management Framework processes for management and compliance
• Support tasks associated with achieving an Authority to Operate (ATO)
• Perform continuous monitoring, system auditing, and security policy development
• Collaborate with customers and program office members

Security Steward

• Design Unity Catalog permission models and ownership standards
• Provide technical support to customers including responding to questions, resolving issues, providing guidance and support as needed
• Interface with tracking system to prioritize tasks and document solutions
• Establish strong working relationships with internal customers insuring a solid understanding of the current business needs and future direction
• Define, document, and present solutions to proactively address the business needs
• Be the subject matter expert (SME) for the database environment, AlwaysOn architecture, SAN technologies
• Ensure the solutions meet the documented standards for naming, hardening, PCI, archiving and maintenance processes through formal processes, i.e. code and architecture reviews

Data Security/Governance Engineer

• Oversee implementations and consultative engagements for the Proofpoint Data Security products
• Develop new services, implement best practices, and assist in customer escalations as needed
• Align client business priorities with data protection strategies
• Assess client operations and business processes, gathering requirements, and recommending optimized Proofpoint solutions
• Provide strategic program design solutions to help clients identify, protect, monitor, and manage sensitive data and users
• Collaborate with Professional Services, Support, Engineering, and Product teams to resolve customer concerns and escalations
• Partner with the sales organization to ensure customer needs are met and satisfaction remains high
• Present updates to management, highlighting risks, challenges, and proposed solutions

See all jobs on JobTailor

AI Security Engineer

Cloud Information Systems Security Engineer II

Senior Security Engineer

Senior Security Engineer

VP, Enterprise Infrastructure & Security

Senior Security Engineer, AI Platform

Senior Product Security Engineer

Network Security Lab Architect

Physical Security Project Manager

Cybersecurity Assessor – CMMC

Manager, Security & Incident Management

Security & Risk Management Program Manager

Information Security Manager

Head of Security

Senior Security Engineer

Senior Engineering Program Manager, Product Security

Senior Security Engineer

Security Steward

Data Security/Governance Engineer

Senior Professional Services Consultant – Data Security