Security Engineer

• Advise on and assess the security posture of AI/ML systems, including LLMs, GenAI pipelines, and model serving infrastructure
• Lead threat modeling exercises specific to AI workloads
• Advise internal teams on securely integrating SaaS AI services and APIs
• Evaluate and recommend controls for data ingestion pipelines, RAG architectures, and vector databases
• Serve as a trusted security advisor bridging business stakeholders, AI/ML engineers, IT operations, and information security teams
• Continuously track emerging AI security research, adversarial techniques, regulatory developments, and vendor security advisories
• Produce and maintain security architecture documentation, risk assessments, control frameworks, and guidelines tailored to the organization's AI environment
• Contribute to the development of a long-term AI security strategy
• Develop and deliver training and awareness content for technical and non-technical stakeholders on AI-specific risks

AI Security Engineer

• Oversee multi-site security operations to ensure compliance with established departmental and operational procedures
• Operational responsibilities include access control, investigations, fire protection, emergency response, incident management and business continuity
• Directly manage the onsite security team to ensure all required security services are delivered as defined in SOPs and Global Security Operations Procedures
• Ensure the accurate identification, tracking and monitoring of problem situations
• Be a liaison to all site departments, local law enforcement and other emergency service providers
• Work in close collaboration with the Global Security Operations Center (GSOC) to monitor internal and external threats to the business, introduces mitigation strategies, and escalates incidents to senior leadership

Manager, Security & Incident Management

• Enhance dynamic team providing Security Steward Services for the CDC
• Hands-on experience with maintaining programs of record using GRC tools
• Conduct Risk Management Framework processes for management and compliance
• Support tasks associated with achieving an Authority to Operate (ATO)
• Perform continuous monitoring, system auditing, and security policy development
• Collaborate with customers and program office members

Security Steward

• Executes Internal Security Controls through compliance assessment reviews and self-inspections
• Identifies deficiencies, develops and implements corrective action
• Conducts administrative inquiries in accordance with operating procedures
• Conducts Communication Security (COMSEC) duties and responsibilities
• Protects government and company information from unauthorized disclosures
• Develops and administers security education procedures and physical controls
• Contributes to enterprise Integrated Product Team (IPT)
• Provides innovation and creativity into security awareness training
• Completes tasks toward long-range goals and objectives
• Oversees Sub-Contractor Management to ensure compliance with regulations

Senior Information Security Compliance Specialist

• Provides technical expertise and leadership to internal business clients for their Cybersecurity related projects and initiatives
• Responsible for oversight and communication of the cybersecurity programs
• Collaborate with lines of business and internal IT groups in evaluating and gathering technical requirements
• Research clients’ requirements to develop potential technical solutions
• Communicate and document potential solutions, impact analysis, benefits/risks, implementation requirements, and recommended approach
• Oversee and conduct various analysis to guide program strategy
• Make recommendations regarding cybersecurity related projects and initiatives
• Consults with business leaders on the development of policies, processes and practices
• Maintains cybersecurity collaboration and knowledge platforms (Teams/SharePoint) and designs automation solutions

Senior Cybersecurity Program Strategist

• Assess security architecture across enterprise systems and AWS cloud environments
• Evaluate how AWS environments are governed, provisioned, operated, and consumed
• Analyze architecture within AWS IL4 (or similar regulated environments)
• Identify security gaps across: System design, Cloud configurations, Policy enforcement, Operational processes
• Evaluate alignment with: AWS Well-Architected Framework, DoD and federal security guidance, Zero Trust and defense-in-depth principles
• Provide target-state architecture recommendations
• Support identification of policy, operational, and technical deficiencies

AWS Cloud Security Architect – Top Secret

• Assess enterprise security tools such as SIEM platforms, IDS/IPS solutions, Vulnerability management systems
• Evaluate AWS-native security services including AWS GuardDuty, AWS Macie, AWS Inspector
• Conduct configuration reviews against CIS Benchmarks and AWS Well-Architected Framework
• Review logging and monitoring configurations to ensure adequate coverage and visibility
• Support or perform vulnerability assessments and penetration testing to validate tool effectiveness
• Analyze tool integration and data flow between systems
• Identify gaps, redundancies, and opportunities for optimization
• Provide recommendations to improve tooling effectiveness and coverage

Senior Security Tooling Engineer – Top Secret

• Have direct account management and revenue generation responsibility for the U.S. Department of Defense and departments/branches, other U.S. security agencies (CIA, NSA, etc.), NATO, and AUKUS.
• Develop and execute a client-driven franchise strategy to drive profitable growth and expands wallet share in the security and defense space
• Lead analysis of market trends to identify growth opportunities and lead co-development of segment specific solutions in partnership with key industry groups, regional partners, investment banking, markets, and product partners
• Drive thought leadership and engage in policy development for key themes related to security and defense
• Represent Citi and increase brand visibility at key global events
• Develop senior trusted advisor relationships with key clients and countries
• Ensure ethical conduct and transparency in all business practices
• Understand and effectively manage the heightened role of franchise risk associated with the security and defense business
• Have a broad, strategic mindset to connect the public sector defense initiative to all parts of the firm from industry groups to government relations and second line of defense to achieve success for the firm as well as the clients and the countries being served
• Develop materials for executive consumption to build consensus and ensure that key partners in the organization are well-briefed on trends and challenges
• Participate in initial triage of opportunities to match client demands with appropriate Citi teams
• Work with government relations on messaging and relationship development

Managing Director – Head of Security and Defense, Public Sector Banking

• Executes Internal Security Controls through performance of compliance assessment reviews and self-inspections
• Identifies deficiencies, develops and implements corrective action
• Conducts administrative inquiries on personnel, processes and situations
• Conducts Communication Security (COMSEC) duties
• Protects government, intellectual, third party and company information from unauthorized disclosures
• Develops, implements and administers security education, procedures and physical controls
• Contributes to enterprise Integrated Product Team (IPT)
• Provides innovation and creativity into Personnel Security
• Oversees Sub-Contractor Management

• Owning and maintaining a fully compliant industrial security program under NISPOM (32 CFR Part 117) and DCSA requirements
• Managing the full personnel security clearance lifecycle including submissions, reinvestigations, access verifications, and changes
• Overseeing SCIF access, operations, and compliance
• Serving as the primary liaison with DCSA, IC security authorities, and Government Security Representatives
• Supporting needs related to classified material handling, storage, transmission, and destruction meet all regulatory standards
• Supporting the Cape team through security training and problem solving
• Working alongside Finance and Federal Go-to-Market to ensure that invoices and billing are accurately reported in WAWF and IPP, while maintaining audit-ready records
• Tracking contract billing milestones and resolving WAWF discrepancies or rejections in coordination with Finance.

Facility Security Officer

• Serve as the subject matter expert guiding projects and technical investigative teams to protect a large enterprise
• Strategize and implement technology best practices for risk mitigation associated with analysis of security operations center alerts and cases
• Engage with internal teams and cyber/technology industry partners to ensure threats from external actors are evaluated and mitigated where appropriate
• Understand the business drivers, and associate culture of the enterprise and partner with relevant stakeholders to ensure regulatory compliance, data protection, and associate protection are in place
• Collaborate with engineering and other teams to drive automation for analysis efficiency, containment, and remediation activities
• Advocate for change, and excel at partnering with various cross functional stakeholders
• Collaborate with other CSOC leaders to deliver a continuous monitoring and response capability
• Use data across CSOC operations to drive decisions, with emphasis on resource allocation, threat mitigation, and associate development
• Serve as the technical advisor for the Senior Director

Director, Information Security Office – AI/ML

• Act as an Information Security point of contact for a business function within the Card line of business
• Coordinate and execute proactive Information Security consulting to the business and technology teams covering Infrastructure Security, Resiliency, Data Security, Network Architecture and Design, and User Access Management
• Serve as an expert in Capital One’s Information Security capabilities, solutions, policies, procedures and standards
• Leverage strong technical acumen and be security SME reviewing architecture, providing risk mitigation solutions and driving overall risk management
• Partner closely with engineers, product managers, and other cross-functional partners to help break down complexity and organizational silos to problem solve
• Influence customers to leverage security capabilities and solutions to shift and integrate security to the left in the development processes
• Escalate and manage cyber security risk
• Provide ad hoc support on special Information Security hot topics for the business
• Provide regular updates to executive leadership with your line of business on the overall Information Security health and risk environment

Senior Lead Information Security Consultant – AI

• Oversee day-to-day execution of classified cybersecurity programs, ensuring compliance with customer requirements, Boeing standards, and applicable regulations
• Coordinate with cross-functional stakeholders to deliver integrated cyber solutions for classified customers
• Provide direct leadership, mentorship, and career development for senior/craft-level classified cybersecurity staff
• Perform performance reviews and recommend promotions, assignments, and training
• Ensure continuous improvement of processes, technical practices, and documentation for classified programs; drive adoption of cyber best practices and lessons learned across the region
• Act as liaison to other senior managers and the leadership team to align division priorities, share best practices, and coordinate cross-business unit initiatives
• Represent the business unit in customer engagements, audits, program reviews, and classified briefings as authorized

Senior Manager, Information Security Governance

• Define and execute a Firm-wide cybersecurity strategy aligned with NIST CSF, NIST AI RMF 1.0, ISO 27001, and SOC 2 frameworks
• Own and continuously mature the Firm's Information Security Management System (ISMS)
• Lead ISO 27001 gap analysis and establish a roadmap toward certification
• Develop, maintain, and enforce security policies, standards, procedures, and governance structures
• Define and track key risk indicators (KRIs), metrics, and reporting frameworks
• Serve as the Firm's executive owner of AI security and governance
• Design and implement a scalable AI governance framework, including acceptable use standards, risk-tiering criteria, and data handling controls
• Own the Firm's vendor risk management program, including intake, risk-tiering, assessment, and continuous monitoring
• Own the Firm's SOC 2 Type II program, including control maintenance, evidence collection, and auditor engagement
• Provide executive oversight of security architecture across Microsoft 365 and Azure

Information Security Director – ISD

• The Financial Management Consultant will help our clients to identify, evaluate, and solve some of their most complex challenges, assisting them in achieving their strategic goals and objectives to fulfill their mission.
• We help our clients transform their business processes, improve efficiency of operations, evaluate and improve internal controls, strengthen policies and controls, increase transparency and performance management, and comply with Federal laws and regulations.
• The nature of our projects can be fluid and requires self-motivated individuals that are willing to develop solutions on their own or in a team of highly skilled professionals.
• Project team members are provided the opportunity to interact with our clients’ senior management, as well as the opportunity to enhance their skills in the area of technical competency, business development, client service, leadership, project management, and people development.
• This role will support a Government agency within the homeland security enterprise with opportunities to expand your support to other national security-related organizations.
• Supporting internal controls over financial reporting (ICOFR) in line with OMB Circular A-123 for a range of financial and business process.
• Supporting the development and execution of corrective action plans and broader remediation strategies designed to address internal control and audit deficiencies and strengthen financial processes.
• Providing a broad range of financial statement audit and audit risk management and remediation support that support the agency's goals to maintain a clean audit opinion and improve internal controls.
• Assessing the impact of new guidance on financial operations and supporting the implementation of new guidance when applicable.
• Applying a variety of analytical, problem-solving, and reporting skills and techniques.
• Documenting and evaluating business processes and making recommendations for process improvements.
• Producing a variety of communications from informal email interactions with clients to formal memos, issue papers, presentations, executive briefings, and others.
• Conducting research to investigate client problems and work collaboratively with your team to formulate and recommend solutions.
• Assisting clients in analyzing projects and programs to identify risks and help develop, apply, and monitor mitigations Supporting clients in collecting and analyzing data, producing models and visualizations, and draw conclusions from the data to improve decision-making.
• Analyzing and helping to develop and/or improve policies and procedures for a variety of programs and operational needs.

Defense & Security, Financial Management Consultant

• Assessing financial implementations against audit readiness criteria, including system architecture, business process design, customizations, data quality, interfaces, cutover readiness, and reporting
• Reviewing to‑be process documentation and risk control matrices to identify nonstandard or outdated processes and recommend standardized solutions
• Identifying opportunities to modernize workflows to strengthen automation, improve efficiency, strengthen internal controls, and enhance audit readiness
• Analyzing and assessing financial system modernization impacts throughout the lifecycle of the program
• Analyzing and reviewing legacy and migrated financial, accounting, and reporting data
• Collaborating with clients, project team members, and stakeholders to support data validation, reconciliation, and issue resolution
• Supporting ongoing migration activities by adapting analyses and deliverables as requirements and priorities evolve

Defense & Security, Financial System Implementation Consultant

• Performing rigorous audits/assessments of IT controls using industry-standard guidance and leading practices
• Performing walkthrough interviews and maintaining communication with a variety of client stakeholders, including system personnel such as system and database administrators
• Requesting, obtaining, reviewing, and analyzing a variety of artifacts to assist in executing IT controls testing such as security plans, SOPs, system screenshots, and system configuration settings
• Evaluating the design and operating effectiveness of IT controls using provided artifacts, industry-standard guidance, leading practices, and professional judgment
• Professionally documenting the results of IT controls test work in a consistent and high-quality manner that would allow a reviewer to repeat the test and reach the same conclusion
• Summarizing and communicating IT controls assessment results to a variety of client stakeholders, including senior leadership personnel
• Planning and executing day-to-day activities of IT controls assessments individually and for the team
• Working with client personnel to understand and analyze known IT control weaknesses, identify root causes, and develop detailed, robust remediation plans
• Providing subject matter expertise to client personnel on all matters relating to IT controls and responding to ad-hoc IT controls requests from client personnel
• Developing documents to support internal control assessment planning decisions and control identification
• Supporting the development of corrective action plans to resolve material weaknesses, significant deficiencies, and control deficiencies
• Reviewing financial system modernization production environment functionality and application controls to provide input regarding audit readiness.
• Assessing incremental financial system modernization efforts as well as in-production and in-development environments with regards to audit readiness and future risks
• Preparing presentations, briefing materials, standard operating procedures, frequently asked questions, guides, and white papers that effectively support organizational efforts to promote awareness and understanding of OMB A-123 and internal controls.

IT Risk and Controls Consultant

• Our professionals help our clients to identify, evaluate, and solve some of their most complex challenges, assisting them in achieving their strategic goals and objectives to fulfill their mission.
• We help our clients transform their business processes, improve efficiency of operations, evaluate and improve internal controls, strengthen policies and controls, increase transparency and performance management, and comply with Federal laws and regulations.
• The nature of our projects can be fluid and requires self-motivated individuals that are willing to develop solutions on their own or in a team of highly skilled professionals.
• Project team members are provided the opportunity to interact with our clients’ senior management, as well as the opportunity to enhance their skills in the area of technical competency, business development, client service, leadership, project management, and people development.
• This role will support a Government agency within the homeland security enterprise with opportunities to expand your support to other national security-related organizations.

Defense & Security Consultant, Internal Controls, Audit Remediation, Readiness, Risk Management

• Transforming Financial Management (FM) processes with analytics & automation using emerging technologies: Design, build, and support data visualization (e.g., PowerBI/Tableau), low/no-code solutions (e.g., SharePoint/Power Platform), and/or AI/ML solutions (e.g., Databricks/Python) to modernize financial workflows and drive data-driven decisions for finance, accounting, budget, or risk management offices.
• Identifying and delivering process improvements end-to end: Assess current-state processes, synthesize findings, recommend future-state solutions, and implement technical changes that optimize operations and reduce maintenance.
• Production support & continuous improvement: Perform maintenance on solutions; analyze root causes on issues that arise/maintenance issues; implement change requests to prevent recurrence.
• Risk, controls, and standards integration: Embed FM standards and federal policy requirements (audit readiness, operational integrity) into solution design in partnership with senior stakeholders.
• Communication & stakeholder engagement: Create trainings, user guides, SOPs; develop memos, briefings, and presentations; present solutions for iterative feedback to executives and process owners.
• Project planning & updates: Build realistic plans and provide regular task/status updates to senior clients to confirm shared understanding.
• Collaboration & teamwork: Supporting transformative initiatives by collaborating with team members to partner with senior stakeholders to modernize financial processes through innovative solutions.

Defense & Security, Financial Management Transformation

• Gather and handle forensic evidence in accordance with Rules of Evidence and perform forensic analysis of digital information
• Monitor, detect and report indicators of misuse, abuse, data spillage, insider threat, and security violations
• Identify acceptable use policy infractions
• Review event logs to determine events of interest
• Monitor for fraud, waste and abuse, including inappropriate content, Illegal Activity, Productivity Loss and Non-Compliant Activity, as well as Identity Leakage (PII)
• Prepare case evidence and incident reports
• Work on special projects as assigned

See all jobs on JobTailor

AI Security Engineer

Manager, Security & Incident Management

Security Steward

Senior Information Security Compliance Specialist

Senior Cybersecurity Program Strategist

AWS Cloud Security Architect – Top Secret

Senior Security Tooling Engineer – Top Secret

Managing Director – Head of Security and Defense, Public Sector Banking

Senior Information Security Compliance Specialist

Facility Security Officer

Director, Information Security Office – AI/ML

Senior Lead Information Security Consultant – AI

Senior Manager, Information Security Governance

Information Security Director – ISD

Defense & Security, Financial Management Consultant

Defense & Security, Financial System Implementation Consultant

IT Risk and Controls Consultant

Defense & Security Consultant, Internal Controls, Audit Remediation, Readiness, Risk Management

Defense & Security, Financial Management Transformation

Cyber Security, Insider Threat Analyst