Security Engineer

• Lead the strategic maturation of DigitalOcean’s compliance framework including multiple ISO standards
• Manage cross-functional projects for compliance certifications
• Conduct annual and ad-hoc risk assessments
• Design and implement controls to meet compliance standards
• Author and maintain security policies reflecting current regulatory landscapes

Senior Security Engineer

• Manage and lead various initiatives to assist Solutions Consultants (SCs), Domain Consultants (SCs), and Enablement team using AI and Public Cloud Service Providers (CSPs)
• Spearhead the architectural design of sophisticated, multi-product lab environments
• Act as a key consultant to Sales Engineering and Learning & Enablement organizations
• Build foundational, "golden-image" proof-of-concepts for new product integrations
• Define modular "building block" solutions for lab users
• Collaborate closely with lab engineers to scale designs for hundreds of concurrent users
• Drive AI solutions and integrate AI/ML technologies into architectural designs
• Identify opportunities to create AI solutions, promoting an

Network Security Lab Architect

• Engineer Zero‑Trust access controls for workforce and service identities
• Develop and implement pipelines using RBAC and ABAC standards
• Include device and posture checks and risk‑adaptive policies for critical services and high-risk scenarios
• Harden privileged access
• Migrate administrators to right‑size entitlements and eliminate long‑lived elevated access across prioritized platforms (e.g., Entra ID, Privileged Access Management)
• Participate in tool POCs and deployments for SaaS security posture monitoring
• Define baselines for M365, Slack, GitHub, Workday, and Google
• Build remediation runbooks and posture success measurements
• Instrument identity metrics collection and tracking by standardizing log schemas for authentication, authorization, and entitlement changes
• Publish dashboards showing privilege drift, misconfigurations, and access sprawl
• Coordinate risky events with security alert procedures
• Author implementation guides and reference architecture that supports a multi‑year strategy passionate about measuring risk reduction over time

• Design and implement security controls and tooling across Sift’s infrastructure and applications (e.g., IAM policies, network controls, secrets management, endpoint protections, container and workload security).
• Embed with product and platform teams to perform security design reviews, threat modeling, and code or configuration reviews for new features and services.
• Improve the secure SDLC by integrating AI-powered scanning tools, security scanning (SAST/DAST, dependency and container scanning) into CI/CD, and by developing guardrails, templates, and best practices for engineers.
• Own or co-own vulnerability management workflows, from discovery and triage through remediation, including defining SLAs, coordinating with service owners, and tracking closure.
• Develop automation (scripts, services, integrations) to detect misconfigurations, anomalous activity, or policy violations, and to reduce manual operational work for the security team.
• Participate in security incident response (on-call rotation or escalation), including investigation, containment, root cause analysis, and long-term fixes.
• Contribute to security documentation and standards, ensuring we have clear, actionable guidance for engineers on topics like authentication, authorization, data encryption, and key management.
• Support audits and assessments (e.g., SOC 2, customer security questionnaires) by providing technical details and evidence of control design and effectiveness.
• Mentor other engineers on secure design and implementation practices through pairing, reviews, training sessions, and written guidance.

• Work closely and effectively with senior management to keep them well informed of upcoming commitments and responsibilities
• Manage a very active calendar of appointments.
• Arrange sophisticated and detailed travel plans, itineraries, and agendas; compile documents for travel-related meetings.
• Compose and prepare draft documents and correspondence that are sometimes confidential.
• Successfully complete tasks and critical aspects of deliverables such as assisting in strategic planning, workforce estimates, and other annual planning activities.
• Establish relationships with team members.
• Help plan, run, and execute large events. Manage and facilitate meetings.
• Demonstrate proactive approaches to problem-solving with strong decision-making capability.

Executive Assistant

• Build and run detection: write, tune, and respond to Python-based rules to catch anomalous activity and improve signal-to-noise.
• Partner with our Infrastructure team to secure GCP + cloud networking and improve Kubernetes security.
• Strengthen application security and help make pragmatic upgrades (e.g., Next.js, dependencies).
• Improve security through code + automation (guardrails, checks, remediation workflows).
• Own vulnerability management end-to-end: identify, prioritize, and drive fixes to closure in coordination with codeowners.
• Help build a strong security culture through clear guidance, training, and partnership with engineers.
• Develop technical and policy frameworks to guide ambitious and safe AI adoption company-wide.
• Collaborate closely with engineering on secure product design and technical implementation.

Founding Security Engineer

• Executes Internal Security Controls through compliance assessment reviews and self-inspections
• Identifies deficiencies, develops and implements corrective action
• Conducts administrative inquiries in accordance with operating procedures
• Conducts Communication Security (COMSEC) duties and responsibilities
• Protects government and company information from unauthorized disclosures
• Develops and administers security education procedures and physical controls
• Contributes to enterprise Integrated Product Team (IPT)
• Provides innovation and creativity into security awareness training
• Completes tasks toward long-range goals and objectives
• Oversees Sub-Contractor Management to ensure compliance with regulations

Senior Information Security Compliance Specialist

• Lead by performing in-depth and high-quality security assessments of emerging technology (AI tooling, agentic platforms, etc.) including architecture and design reviews, code reviews, and penetration tests.
• Provide guidance to team members and prospective suppliers on Salesforce security requirements including remediation advice and potential feature enhancements.
• Threat model common attacker methods to develop appropriate mitigation techniques, providing guidance that balances security requirements with functional requirements.
• Develop automated processes and support improvement of tooling to identify and solve problems at scale.
• Collaborate with engineering teams and business partners to drive solutions through a secure development lifecycle.
• Define and develop technical security standards and guidelines with business partners.
• Research new technologies, emerging threats, and vulnerabilities for strategic planning and process improvements.
• Use your writing and presentation skills to communicate at all levels in the organizations.
• Possess the ability to communicate concisely, clearly, and intelligently to partners from a variety of backgrounds, including those who are non-technical.

Senior Product Security Engineer – Enterprise Security, Security AI

• Executes Internal Security Controls through performance of compliance assessment reviews and self-inspections
• Identifies deficiencies, develops and implements corrective action
• Conducts administrative inquiries on personnel, processes and situations
• Conducts Communication Security (COMSEC) duties
• Protects government, intellectual, third party and company information from unauthorized disclosures
• Develops, implements and administers security education, procedures and physical controls
• Contributes to enterprise Integrated Product Team (IPT)
• Provides innovation and creativity into Personnel Security
• Oversees Sub-Contractor Management

• Lead implementation and sustainment of DFARS/NIST SP 800-171 and Cybersecurity Maturity Model Certification (CMMC) controls for systems handling Controlled Unclassified Information (CUI)
• Develop and maintain security documentation (including System Security Plans and POA&Ms)
• Coordinate audits and remediation with program stakeholders and assessors
• Drive ongoing monitoring to protect CUI in accordance with DFARS 252.204-7012 and CMMC requirements
• Leads a team of ISSOs performing cybersecurity governance work on CUI, DFARS, and CMMC systems
• Performs security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards
• Oversees configuration management of assigned systems; auditing systems to ensure security posture integrity
• Conducts risk assessments and investigations, execute appropriate risk mitigations, and oversee incident response activities
• Conducts periodic hardware/software inventory assessments
• Serves as organization spokesperson on advanced projects and programs
• Acts as advisor to management and customers on advanced technical research studies
• Interfaces with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements.

Cybersecurity – Information System Security Manager

• Leading and managing Q-Systems (with a focus on security) for design, pre-construction, and construction activities across the portfolio
• Interacting daily with Facilities, Contractors, Designers, Engineers, Commissioning Agents, Vendors, and Data Center Operations staff
• Ensuring critical facility operation systems are designed and implemented per our basis of design documents

Development Program Manager, Q Systems Security

• Drive Project Outcomes: Adopt an ownership mindset to manage the end-to-end delivery of work required for new security certifications, federal authorizations, and compliance initiatives.
• Accelerate Execution: Act as a force multiplier by proactively identifying and neutralizing project blockers, reducing friction, and maintaining high velocity.
• Orchestrate Cross-Functional Decision Making: Navigate complex technical and compliance trade-offs, driving consensus across Engineering, IT, Product, and Security teams.
• Optimize Delivery Methodologies: Continuously refine project frameworks to maximize effectiveness, ensuring security initiatives are rigorous and agile.
• Precision Program Management: Oversee project lifecycles—including milestones, dependencies, and risk mitigation—while providing executive-level transparency through accurate status reporting.
• Build Strategic Partnerships: Forge deep, collaborative relationships with Security Assurance Team subject matter experts and technical stakeholders.

Staff Security Assurance Engineer

• Conduct analysis of security alerts, incidents, and threat intelligence to identify potential risks and assess impact to systems and business operations.
• Lead and support cybersecurity incident response activities, including detection, investigation, containment, eradication, recovery, and post-incident review.
• Serve as Incident Commander during cybersecurity incidents, coordinating multi-functional response efforts, driving decision-making, managing communications, and ensuring timely resolution of security events.
• Conduct proactive investigations to identify emerging threats, validate security controls, and improve detection and response capabilities.
• Develop and implement response procedures and mitigation strategies to reduce organizational risk.
• Collaborate with internal technology teams and business partners to investigate security events and drive remediation efforts.
• Partner closely with network, cloud, infrastructure, and application teams to investigate security incidents impacting enterprise and telecommunications environments.
• Document incident findings, root cause analysis, response actions, and lessons learned in accordance with company policies and regulatory requirements.
• Communicate incident status, technical findings, and remediation recommendations to leadership and key collaborators.
• Contribute to continuous improvement of detection and response capabilities through process enhancements, tuning opportunities, automation, and knowledge sharing.
• Monitor evolving threat activity and apply industry standards to improve organizational resilience.
• Provide technical guidance and mentoring to peers and junior team members.
• Participate in cybersecurity initiatives and projects assigned by management.
• Participate in an on-call rotation to provide after-hours support for cybersecurity incident escalations originating from the Security Operations Center (SOC).

Senior Engineer, Cybersecurity – Threat Response

• Oversee day-to-day execution of classified cybersecurity programs, ensuring compliance with customer requirements, Boeing standards, and applicable regulations
• Coordinate with cross-functional stakeholders to deliver integrated cyber solutions for classified customers
• Provide direct leadership, mentorship, and career development for senior/craft-level classified cybersecurity staff
• Perform performance reviews and recommend promotions, assignments, and training
• Ensure continuous improvement of processes, technical practices, and documentation for classified programs; drive adoption of cyber best practices and lessons learned across the region
• Act as liaison to other senior managers and the leadership team to align division priorities, share best practices, and coordinate cross-business unit initiatives
• Represent the business unit in customer engagements, audits, program reviews, and classified briefings as authorized

Senior Manager, Information Security Governance

• Gather and handle forensic evidence in accordance with Rules of Evidence and perform forensic analysis of digital information
• Monitor, detect and report indicators of misuse, abuse, data spillage, insider threat, and security violations
• Identify acceptable use policy infractions
• Review event logs to determine events of interest
• Monitor for fraud, waste and abuse, including inappropriate content, Illegal Activity, Productivity Loss and Non-Compliant Activity, as well as Identity Leakage (PII)
• Prepare case evidence and incident reports
• Work on special projects as assigned

Cyber Security, Insider Threat Analyst

• Define and drive a multi-year application security strategy aligned to Snap’s product roadmap and company priorities
• Identify systemic product security risks and assume direct ownership of high-impact initiatives that reduce risk at scale across Snap’s application ecosystem
• Establish scalable practices for secure design reviews, threat modeling, code review, and security testing (SAST, DAST, SCA, fuzzing, etc.)
• Lead application security architecture reviews for high-risk or high-impact product initiatives
• Drive automation-first approaches that increase security coverage while minimizing friction for engineering teams
• Influence senior engineering leadership and executives on security strategy, risk tradeoffs, and investment decisions
• Recruit and develop high-caliber security engineers and managers; build an inclusive, high-performing team culture

Senior Manager, Security Engineering – Application Security

• Collaborating with Research Fellows, other (Senior) Research Analysts, Data Scientists, and Center leadership to develop and execute research proposals.
• Conducting analyses of data sets to derive insights and present findings in graphical and written formats.
• Supporting research tasks like analyzing data and preparing appropriate data presentations, completing literature reviews, conducting research interviews, identifying and analyzing additional data and information sources from non-academic sources.
• Contributing to and coauthoring written publications under the supervision of Research Leads.
• Attending DC briefings and events and providing summaries to relevant staff.
• Developing and helping to deliver presentations and briefs for policy-making audiences on topics related to emerging technologies, specifically, Artificial Intelligence (AI), Machine Learning (ML), National Security, and associated policy considerations.
• Monitoring trends and developments in AI, ML, and national security policy.
• Supporting research with data-focused analytic tasks, such as identifying and evaluating data sources; preparing relevant datasets for analysis and executing appropriate analytic methodologies to extract information from those datasets; and generating data presentations and graphics suitable for reports, briefs and other CSET products with guidance from members of the Data Science Team.
• Supporting grant proposals and funder reports.
• Contributing to CSET’s organizational development, including contributing to internal working groups, seminars, and discussions.
• Upholding CSET’s mission, vision and values.

Research Analyst, Security and Emerging Technology

• Plans, coordinates, and implements the organization’s information security.
• Analyzes requirements and potential solutions for technical and economic feasibility.
• Design optimized firewall and IPS rule structure and ensures standards are maintained.
• Monitors and maintains health of all firewalls/IPS and recommends improvements.
• Develops and maintains documentation of firewall/IPS procedures.
• Develops and maintains complex schematics relating to network security.
• Researches, evaluates, recommends, designs, tests, and implements new network security technologies.
• Displays expert knowledge of current security tools and practices.
• Under general guidance, provides support to network engineers.

Senior Network Security Engineer – Firewall/IPS

• Design and implement security architectures for space and ground system segments, including satellite bus software, ground station networks, mission operations centers, and communication link infrastructure
• Develop and maintain System Security Plans (SSPs), security architecture documentation, and risk assessment packages
• Integrate cybersecurity monitoring, auditing, and recovery measures across all system segments
• Define security requirements for inter-satellite links, ground-to-space uplinks, and user terminal interfaces
• Implement and maintain controls across multiple concurrent frameworks
• Evaluate and recommend encryption solutions for data in transit and at rest across all system segments
• Support security control assessments and ISO 27001 surveillance audits
• Coordinate security activities with information security architects, ISSOs, and the Cybersecurity GRC team

Senior Principal Systems Security Engineer

• Build, mentor, and grow a high-performing team of security engineers
• Set technical direction and establish clear standards for engineering excellence and ownership
• Partner in hiring, performance management, and career development
• Define and execute the security roadmap for infrastructure, remote access/ZTNA, endpoint, and M&A
• Design and implement security controls across cloud, production, and corporate infrastructure
• Develop tools and systems to improve security posture and operational efficiency
• Conduct security architecture and design reviews for systems and applications
• Partner across infrastructure, IT, product, and security teams to reduce risk while enabling velocity

See all jobs on JobTailor

Senior Security Engineer

Network Security Lab Architect

Senior Security Engineer

Senior Security Engineer

Executive Assistant

Founding Security Engineer

Senior Information Security Compliance Specialist

Senior Product Security Engineer – Enterprise Security, Security AI

Senior Information Security Compliance Specialist

Cybersecurity – Information System Security Manager

Development Program Manager, Q Systems Security

Staff Security Assurance Engineer

Senior Engineer, Cybersecurity – Threat Response

Senior Manager, Information Security Governance

Cyber Security, Insider Threat Analyst

Senior Manager, Security Engineering – Application Security

Research Analyst, Security and Emerging Technology

Senior Network Security Engineer – Firewall/IPS

Senior Principal Systems Security Engineer

Manager, Enterprise Security Engineering