Security Engineer

• Design and implement security controls across networks, systems, and applications to protect against internal and external threats
• Lead vulnerability management efforts, including scanning, analysis, remediation, and reporting
• Monitor and respond to security incidents, conduct root cause analysis, and implement corrective actions
• Manage and optimize security tools such as SIEM, EDR, firewalls, DLP, and identity access management systems
• Manage security awareness training programs
• Lead security engagements for ongoing penetration tests (internal, external, web app, cloud, and AI)
• Collaborate with infrastructure and application teams to ensure secure architecture and configurations
• Support compliance initiatives related to GLBA, SOX, FFIEC, NIST, and other mortgage industry regulations
• Conduct risk assessments and security reviews for new technologies, vendors, and projects
• Develop and maintain security documentation, including policies, procedures, and technical standards
• Mentor junior security staff and contribute to security awareness training across the organization
• Stay current on emerging threats, vulnerabilities, and regulatory changes impacting the mortgage industry

Senior Information Security Engineer

• Supports the Cybersecurity functional line for the Hill CEDC IT Operations & Maintenance contract at Hill AFB
• Ensures the security, compliance, and operational integrity of information systems supporting mission-critical operations
• Responsible for implementing and maintaining cybersecurity controls, supporting Risk Management Framework (RMF) activities, monitoring system security posture
• Manages vulnerabilities and ensures compliance
• Manages the full RMF lifecycle including system categorization, security control selection, implementation, assessment, authorization, and continuous monitoring
• Maintains ACAS, HBSS, and SCAP compliance posture
• Monitors information systems for compliance with applicable cybersecurity policies, standards, and regulations
• Conducts vulnerability assessments and coordinate remediation efforts with system owners and technical teams
• Reviews security configurations, system changes, and architecture modifications to ensure compliance with approved security baselines
• Supports security authorization activities, continuous monitoring programs, and cybersecurity inspections
• Analyzes security alerts, findings, and incidents and coordinates corrective actions as required
• Assists with implementation and validation of Security Technical Implementation Guides (STIGs) and other security requirements
• Maintains Plan of Action and Milestones (POA&M) documentation and tracks remediation efforts through completion
• Supports audit readiness activities by maintaining cybersecurity documentation, evidence, and traceability records

Information Systems Security Officer

• Cloud security design & implementation
• Contribute to and maintain cloud security reference architectures, standards, and implementation patterns for IaaS, PaaS, containers/Kubernetes, and serverless workloads
• Partner with engineering and platform teams to apply approved security patterns in new and existing cloud workloads
• Help implement and operate secure cloud landing zone controls including account/project structures, network segmentation, IAM boundaries, logging, and policy guardrails
• Implement least-privilege IAM for workforce and workload identities
• Apply encryption, key management, tokenization, and data handling standards for sensitive data including payment and healthcare data
• Participate in threat modeling and security design reviews for cloud services and applications
• Ensure required cloud audit logs, telemetry, and security signals are enabled and flowing to centralized monitoring
• Help define and maintain cloud hardening baselines, container/image standards, and configuration compliance controls
• Partner with GRC and audit teams to map technical cloud controls to compliance frameworks

Staff Cloud Security Specialist

• Thoroughly scope engagements through assessing the client’s operations and business processes, gathering key business and functional requirements, and making recommendations to optimize Proofpoint technologies
• Provide strategic program design solutions that allow clients to identify, protect, monitor, and manage their most protected data, and people
• Work with the broader Professional Services, Support, Engineering, and Product teams to address customer concerns and manage escalations
• Work closely with your corresponding sales organization to ensure customer needs are met and customer satisfaction continues to rank high
• Present updates to management identifying risks, challenges, and proposed solutions

Senior Professional Services Consultant – Data Security

• Lead all facility-related responsibilities and security operations across the organization
• Oversee facility management, leasing, and compliance
• Manage personnel clearances, secure facilities, and physical security programs
• Ensure compliance with all government security requirements and regulations
• Conduct regular security assessments and implement improvements

Facility Security Officer

• Support security control assessment activities
• Gather and organize assessment evidence
• Document security control implementation
• Conduct security testing and evaluations
• Assist with vulnerability scans and analysis
• Create of assessment reports and briefings
• Maintain assessment documentation and tracking sheets
• Lead security control interviews
• Prepare assessment deliverables
• Applying NIST security controls and frameworks
• Support continuous monitoring activities
• Assist with security documentation review
• Contribute to Plans of Action and Milestones (POA&Ms) development
• Participate in team meetings and technical discussions

Security Control Assessor

• Evaluate and support changes to our Threat Analysis environment
• Analyze needs and create and support internal tools where appropriate
• Support a team researching new and past threats, including malware, exploit kits, and vulnerabilities

Security Software Engineer

• Develop and execute an enterprise-wide strategy for information security and data management that aligns with business goals
• Serve as a key advisor to the CEO and Board of Directors on cybersecurity risks, data privacy regulations, and emerging technology trends
• Establish and maintain the enterprise security vision, strategy, and program to ensure information assets and technologies are adequately protected.
• Direct the development and implementation of security policies, standards, and procedures (e.g., NIST, ISO 27001, SOC2)
• Partner with Risk, Compliance, and Internal Audit teams to meet regulatory requirements (e.g., FFIEC, PCI DSS, SOX, GDPR where applicable)
• Lead incident response planning and execution to minimize the impact of security breaches for the bank
• Oversee continuous monitoring and threat hunting to identify vulnerabilities before they are exploited
• Define the roadmap for data management, including data architecture, data quality standards, and master data management (MDM) for the bank
• Establish a data governance framework to ensure data is accurate, consistent, and accessible across the bank
• Collaborate with business units to identify opportunities for data-driven innovation and improved decision-making
• Ensure the organization meets all regulatory requirements for data protection and privacy (e.g., GDPR, CCPA, HIPAA)
• Implement "Privacy by Design" principles into all new products, services, and internal processes.
• Manage third-party risk assessments and ensure vendors comply with the organization’s security and data standards
• Maintain technology controls to support business continuity, disaster recovery, and operational resilience

Chief Information Security Officer

• Define and mature enterprise information security strategy, policies, and standards
• Own and evolve Shaw’s Information Security Program and SOC 2 Type II compliance
• Serve as primary security representative for clients, auditors, and executives
• Lead risk identification, mitigation, and enterprise security roadmap
• Oversee access controls, third-party risk, and security readiness exercises
• Present security posture, risks, and compliance status to leadership and external stakeholders
• Oversee 24/7 SOC operations and incident response lifecycle
• Manage threat detection, monitoring, vulnerability management, and remediation
• Lead response to authentication threats, phishing, and unauthorized access events
• Maintain and enhance security tooling across the stack
• Drive network, cloud, and infrastructure hardening initiatives
• Lead enterprise AI security strategy and rollout
• Design and enforce AI governance framework
• Ensure reliability, patching, identity governance, and cloud operations
• Maintain enterprise risk register and mitigation tracking
• Lead client/vendor security assessments and regulatory readiness
• Monitor regulatory developments
• Lead, mentor, and develop InfoSec and Service Ops teams
• Engage with executive leadership on security and AI risk strategy
• Partner with DevOps, Cloud, and Implementation teams

Information Security Officer

• Define and mature enterprise information security strategy, policies, and standards
• Own and evolve Shaw’s Information Security Program and SOC 2 Type II compliance
• Serve as primary security representative for clients, auditors, and executives
• Lead risk identification, mitigation, and enterprise security roadmap
• Oversee access controls, third-party risk, and security readiness exercises (DR, incident tabletop)
• Present security posture, risks, and compliance status to leadership and external stakeholders
• Hold named accountability for security representations in client agreements
• Oversee 24/7 SOC operations (via partner) and incident response lifecycle
• Manage threat detection, monitoring, vulnerability management, and remediation
• Lead response to authentication threats, phishing, and unauthorized access events
• Maintain and enhance security tooling across the stack
• Drive network, cloud, and infrastructure hardening initiatives
• Lead enterprise AI security strategy and rollout
• Represent AI security posture to clients, auditors, and leadership
• Provide leadership oversight to Service Operations (infrastructure, endpoints, support)

• Lead onboarding and migration of applications onto Akamai CDN and WAF platforms.
• Configure, maintain, and support Akamai edge security and content delivery services.
• Implement and tune WAF policies, security controls, caching rules, and traffic management configurations.
• Work closely with application, network, cloud, and security teams to ensure secure and optimized application delivery.
• Troubleshoot complex Layer 1–7 issues involving DNS, TLS/SSL, HTTP/HTTPS, CDN behavior, caching, and origin connectivity.
• Support production incidents, root cause analysis, and operational escalations.
• Participate in on-call rotation and support maintenance activities during off-hour change windows.
• Develop technical documentation, runbooks, operational procedures, and audit artifacts.
• Collaborate with vendors and internal stakeholders on application onboarding and security initiatives.
• Support security assessments, audits, remediation activities, and compliance requirements.
• Provide technical guidance and mentoring to engineering teams.

WAF/CDN Security Architect

• Monitor and investigate alerts across Microsoft Defender (Defender for Endpoint, Defender for Identity, Defender for Office 365) and associated security platforms
• Analyze Entra ID (Azure AD) sign-in logs, audit logs, and risky sign-in activity to identify potential account compromise or misuse
• Respond to security incidents involving endpoints, identities, email, and collaboration platforms
• Tune and optimize detection rules, alert thresholds, and signal-to-noise ratios within SIEM and Microsoft security tools
• Perform log analysis and basic threat hunting using tools such as Microsoft Sentinel, Defender Advanced Hunting, and audit logs
• Implement and validate Conditional Access policies, MFA enforcement, and identity protection controls
• Support endpoint security through Intune and Defender for Endpoint, including policy enforcement, device compliance, and response actions
• Collaborate with IT to harden Microsoft 365 configurations (Exchange Online, SharePoint, Teams) and reduce attack surface
• Support vulnerability management by identifying gaps and coordinating remediation across systems and endpoints
• Maintain clear and audit-ready documentation of incidents, controls, and response activities
• Assist with eDiscovery, audit requests, and compliance-related investigations when required
• Identify gaps in monitoring, coverage, or controls and recommend improvements to security architecture

Security Engineer – Microsoft 365 Security, Detection

• Maintain and enhance security related tooling with the team including Security Log Aggregation, AV, Development Buildtime and Cloud Runtime tooling.
• Automate detections throughout our tooling stack leveraged to uncover security events and attacks against our systems.
• Implement, iterate, and operate security automation aimed at supporting our engineers during their building processes, reducing the time it takes to remediate discovered vulnerabilities.
• Perform vulnerability assessments and ad hoc security reviews to identify and prioritize potential security risks and vulnerabilities
• Partner closely with engineers to perform security reviews that support our software and infrastructure engineers early in their engineering process
• Participate in incident response activities, including investigation, containment, and recovery efforts

Security Engineer II

• Own day-to-day operation of Liftoff's SIEM (Panther) — log source ingestion, detection content, and the alert investigation pipeline.
• Lead Liftoff's adoption of AI-augmented SOC tooling (e.g. Prophet, Dropzone, or equivalent) as a multi-year modernization investment.
• Triage incoming security alerts and drive timely investigation and remediation with stakeholders across Engineering and IT.
• Lead incident response — investigation, containment, and post-incident review — and mature processes and runbooks so response becomes predictable and repeatable.
• Build tooling and automation that detects active threats, enriches alerts, and reduces manual investigation toil.
• Partner with Engineering and IT to make detection and response self-service where possible — clear log-onboarding paths, documented detection proposals, accessible runbooks — so security scales without becoming a bottleneck.
• Close the feedback loop between the team's offensive and proactive findings and detection coverage.
• Partner across the security team on cloud, infrastructure, and application security work alongside your detection and response focus — every engineer on this team covers breadth beyond their primary focus.
• Participate in the Security team's on-call rotation and incident response.

Security Engineer – Detection & Response

• Own a meaningful slice of our defensive infrastructure end-to-end.
• Design, execute, and follow through on security awareness programs and phishing simulations.
• Participate in Endpoint Detection & Response rollout and ongoing operations.
• Revamp our network protections for Zero Trust network access and DNS security.
• Manage and operate our EASM platform, including continuous monitoring, finding triage, and remediation coordination.
• Coordinate with our third-party penetration testing partner for scoping, logistics, findings review, and remediation tracking.
• Monitor and respond to security alerts across our stack — SIEM, EDR telemetry, and related tooling.
• Own relevant SOC 2 controls and participate in vendor evaluations, new tooling assessments, and ad hoc projects.

• Collaborate with multiple teams to build and enhance complex software and security tooling that interacts with multiple systems, processes, and standards
• Help improve the availability, performance, scalability, and security of Adobe's security tools.
• Provide security analysis before and at build time across Adobe’s security tooling
• Keep elevated levels of Security and Compliance with the Adobe Standards, including engaging with Adobe product teams on their cloud deployment practices
• Enhance our development workflow to follow industry best practices by assisting in development of standards and leveraging automation
• Improve our development pipelines so that we can achieve faster and more reliable deploys
• Focus on DevSecOps tooling and strategy

Cloud Security Engineer

• Codify and execute the security roadmap for the organization, prioritizing the further hardening of critical systems (payment infrastructure, donor data stores, authentication flows, API integrations) and ensuring compliance with applicable laws (e.g., data privacy and security).
• Partner directly with PDE leadership to embed security controls into the development lifecycle: threat modeling, secure code review, vulnerability management, and CI/CD pipeline security tooling (SAST, DAST, SCA)
• Own the security incident response plan end-to-end: detection, containment, investigation, notification, remediation, and post-incident review
• Work with IT to drive identity and access management improvements, including role-based access controls, MFA enforcement, endpoint security, and session management
• Develop a deep understanding of fraud vectors in the fundraising and payments space—stolen cards, synthetic identities, friendly fraud, campaign abuse—and help us build systems that adapt as threats evolve.
• Manage vendor security risk assessments for third-party tools, integrations, and sub-processors, with continuous monitoring rather than annual check-ins
• Own the penetration testing program: vendor relationships, testing cadence, findings translation into engineering tickets, and remediation tracking to closure
• Develop and deliver security awareness training for all employees, with targeted modules for PDE, CX, and leadership audiences
• Lead SOC 2 Type II certification end-to-end: gap analysis, control design, evidence collection, remediation tracking, auditor coordination, and ongoing maintenance
• Build the roadmap toward ISO 27001 certification as the security program matures
• Serve as primary owner of our GRC platform (Vanta): driving task completion, monitoring compliance gaps, triaging findings, and ensuring remediation owners are accountable
• Manage all external auditor and certification body relationships
• Build and maintain evidence repositories that support continuous (not just point-in-time) compliance
• Prepare board-ready compliance status reports and risk summaries quarterly
• With the General Counsel’s guidance, own all required licenses, registrations, and regulatory filings across US jurisdictions, including state charitable fundraising platform registrations and other licenses
• Manage the Trust Center: content accuracy, access approvals, and customer-facing compliance documentation

Security and Compliance Manager

• Own and execute Slingshot’s cybersecurity strategy across enterprise, product, and operational environments.
• Lead readiness and implementation for CMMC, NIST SP 800-171, DFARS, and related government cybersecurity requirements.
• Establish and scale secure software development lifecycle (SDLC), application security, and DevSecOps practices.
• Design and oversee cloud security architecture across AWS/Azure/GovCloud environments.
• Drive audit readiness, including System Security Plans (SSPs), POA&Ms, and continuous monitoring programs.
• Partner with Product and Engineering to embed security into development without slowing delivery velocity. Build and operate security monitoring, detection, vulnerability management, and incident response capabilities.
• Lead executive-level incident response, including customer communication and regulatory reporting.
• Develop and enforce identity, access management, data protection, and logging strategies across systems.
• Oversee third-party/vendor risk management and supply chain security, including flowdown requirements.
• Partner with the Facility Security Officer (FSO) on classified programs, insider threat initiatives, and industrial security requirements.
• Ensure secure handling of CUI/FCI and readiness for customer audits and security questionnaires.
• Define and communicate cyber risk to executive leadership, board members, and customers.
• Support business development by enabling compliance required to win and execute government contracts.
• Build and scale a lean, high-performing security team aligned to company growth.

Chief Information Security Officer (CISO)

• Team Leadership & Development: Mentoring, and growing security engineers. This includes running 1:1s, career development planning, performance reviews, and building a culture of continuous learning around evolving threats and technologies.
• Security Execution: Partnering with engineers on your team and the Sr. Director of Security and Integrity you’ll define and prioritize the team's quarterly and annual security initiatives, aligning them with business objectives and frameworks like NIST CSF, CIS Controls, or SOC 2. Translating risk assessments into actionable engineering work.
• Cross-Functional Collaboration: Partnering with Platform, SRE, Legal, IT, Compliance, and Product teams to embed security into the SDLC, incident response processes, and vendor management workflows.
• Incident Response & Preparedness: You’ll help the team to maintain the Security incident response program: runbooks, running tabletop exercises, on call schedules, and ensuring timely response to alerts and events.
• Product and Cloud Security: Drive product security practices and cloud security posture across our AWS infrastructure, ensuring secure architecture, configuration, and continuous monitoring of our production environments.
• Vulnerability & Risk Management: Overseeing application security testing (SAST, DAST, SCA), penetration testing programs (including bug bounty), and ensuring vulnerabilities are triaged, prioritized, and remediated within SLA.
• Corporate Security: Partnering with IT, you and the team will help ensure strong protections in corporate security including spam, EDR, and device security is mature and well executed.
• Vendor & Third-Party Risk: Helping the team evaluating security vendors, and overseeing third-party risk assessments.
• Budget & Resource Planning: In coordination with the other department managers; manage the security budget, justifying tooling spend, headcount requests.

Manager, Security Engineering

• Lead post-sale implementation of Proofpoint AI Security solutions, including configuration, integration, and deployment
• Design and execute onboarding plans aligned with customer use cases and AI adoption goals
• Integrate AI Security capabilities with enterprise environments (endpoints, SaaS, APIs, LLM platforms, and data systems)
• Ensure successful go-live and transition to steady-state operations
• Act as a trusted technical advisor to customers on AI security best practices
• Drive adoption of key platform capabilities, including AI usage visibility, agent governance, and policy enforcement
• Conduct regular technical check-ins, health reviews, and optimization sessions
• Help customers operationalize AI security policies and governance frameworks
• Troubleshoot complex technical issues across AI Security deployments
• Serve as the primary technical escalation point, working closely with Support and Engineering
• Reproduce issues, collect diagnostic data, and clearly communicate findings to engineering teams
• Advocate for timely resolution of customer-impacting issues
• Partner with Engineering to provide feedback on product gaps, bugs, and feature enhancements
• Collaborate with Product Management to influence roadmap based on customer needs
• Work with Customer Success Managers and Sales Engineers to ensure a seamless customer lifecycle
• Develop and share best practices, deployment guides, and technical documentation
• Enable customers on new features and evolving AI security capabilities
• Stay current on AI threats, agentic workflows, and emerging security trends

See all jobs on JobTailor

Senior Information Security Engineer

Information Systems Security Officer

Staff Cloud Security Specialist

Senior Professional Services Consultant – Data Security

Facility Security Officer

Security Control Assessor

Security Software Engineer

Chief Information Security Officer

Information Security Officer

Information Security Officer

WAF/CDN Security Architect

Security Engineer – Microsoft 365 Security, Detection

Security Engineer II

Security Engineer – Detection & Response

Security Engineer

Cloud Security Engineer

Security and Compliance Manager

Chief Information Security Officer (CISO)

Manager, Security Engineering

Staff Professional Services Consultant – AI Security Solutions