Security Engineer

• The Workday Security Developer III is responsible for performing system analysis and designing to include requirements, specifications, configuration, documentation, testing, and development of security roles and policies within Workday.
• Conducts highly complex work, without supervision and with extensive latitude for independent judgment.
• Serves as a liaison between TSG groups, clients, and vendors and as a mentor to others on the team and in the department.
• Design, configure, and maintain Workday security for HCM, Payroll, Financials, Recruiting, Learning, and other Workday modules.
• Perform security analysis, troubleshooting, and root cause analysis for access-related issues.
• Collaborate with HR, Finance, Supply Chain, Internal Audit, Compliance, and business stakeholders to gather and implement security requirements.

Workday Security Developer

• Design and implement cybersecurity solutions
• Provide technical expertise and support for cybersecurity solutions
• Lead technical assessments of systems and applications to ensure compliance
• Develop project scope requirements and support model creation
• Collaborate closely with cross functional IT teams

Cybersecurity Engineer II

• Owning our compliance program end to end: driving our annual SOC 2 Type 2 audits from evidence collection through auditor walkthroughs, and running Vanta as our governance home base year-round.
• Completing security questionnaires, addendums, and AI risk assessments for the IT and security teams at our hospital clients — and making sure they understand we're doing the right thing. (Health systems ask great, hard questions. You'll have great answers.)
• Running real BCDR tests and treating them like live incidents to find the gaps before the gaps find us.
• Coordinating annual pen tests and driving remediation of findings within SLA.
• Managing security across our stack: AWS, Heroku, Cloudflare, Google Workspace, GitHub, and our communication tools.
• Administering our laptop fleet for a fully remote team — imaging, shipping, MDM enrollment, inventory, and end-of-life — so every machine is encrypted, managed, and remotely wipeable.
• Running access reviews and enforcing least privilege: pruning admin lists, enforcing SSO and 2FA, and tuning password policies.
• Ensuring new employees get access to everything they need on day one, and departing ones are locked out the same day — partnering with HR and Finance on a tight onboarding/offboarding loop through Rippling and Google.
• Evaluating and securing AI tooling — from how our team uses Claude and MCP servers to partnering with engineering on customer questions about AI risk, bias testing, and model governance.
• Doing vendor management and procurement reviews, and finding savings while you're at it.
• Staying on top of the rapidly evolving AI threat landscape and adapting our defenses and team training as fast as the attackers adapt theirs.
• Playing professor and educating our team on everything security.
• Advising leadership on security matters during project planning, and working with our full stack engineers to ship improvements you identify.
• Being the savior in the event of a security incident — leading response, analysis, and the write-up afterward.
• Supporting co-workers when they manage to put their computers in a bad place. (They should enjoy talking to you, and you to them!)

Senior IT/Security Engineer – AI-native

• performing work on US Government classified environments
• delivering Business Critical Services to customers
• transforming current and future security architecture for customers
• training and mentoring other engineers
• helping customers reduce risk and adopt technology
• collaborating with Cisco Engineering to advocate for innovation

Customer Delivery Consulting Engineer – Security

• Lead the cybersecurity program: endpoint detection and response / managed detection and response, email and web security, identity and access management, vulnerability management, threat detection, and incident response
• Own IT governance, risk, and compliance
• Design a control framework synergistic across ITGC, SOC 2, ISO 27001, and NIST 800-171 / CMMC scopes
• Serve as the primary IT liaison to external auditors and readiness advisors
• Mature incident response and disclosure governance
• Establish data classification, retention, and encryption standards
• Partner on the IT/OT security boundary and with product security
• Report cybersecurity and compliance posture to leadership and governance bodies
• Lead, coach, and develop the cybersecurity and GRC team

Director, Cybersecurity, GRC

• Lead application security design across web, mobile, and AWS cloud-native systems.
• Administer and optimize SAST/SCA tools (e.g., Checkmarx, Snyk).
• Triaging vulnerabilities, and guiding remediation aligned to OWASP Top Ten.
• Secure cloud environments (especially AWS Lambda, API Gateway, IAM, S3).
• Support runtime and application-layer protections.
• Partner with release and change management to ensure secure, stable production deployments.
• Provide security input in architecture and project planning.

Application Security Consultant

• Lead and manage the design, pre-construction and construction activities on a given project
• Interact daily with Facilities, Contractors, Designers, Engineers, Commissioning Agents, Vendors, and Data Center Operations staff
• Provide program level support for network infrastructure deployments across the portfolio
• Coordinate with QTS network infrastructure and technology teams to ensure infrastructure meets the facility needs
• Support the Q-Systems team with network infrastructure coordination
• Manage port schedule creation for development projects
• Review project design to ensure compliance with QTS system standards and Basis of Design documents
• Create and communicate updates on development program & project status suitable for executive level reviews
• Implement and manage multi-phased site development plans to achieve time, budget, and quality standards
• Continuously update a campus master plan
• Write scopes of work for design, construction, commissioning services & participate in procurement and project cost estimates
• Evaluate and level pricing proposals for design, construction, and commissioning services
• Establish project schedules and manage teams to on-time completion
• Develop plans for product deployment and review/communicate plans with QTS staff involved
• Establish and maintain relationships serving as liaison with key QTS stakeholders
• Represent QTS Q-Systems interests as leader in OAC and low voltage meetings
• Review project implementations to ensure compliance with approved design documents, QTS system standards and Basis of Design documents
• Create & build relationships that enhance QTS's ability to be a leader in creating the World's Most Valuable Data Center Real Estate
• Work with the internal development team to enhance project management processes and protocols
• Develop relationship with QTS Facility Operations Technology teams to understand their needs and deliver technologies that support facility operations needs.

Development Program Manager – Security

• Develop, enhance and execute the third-party risk management program including onboarding, maintenance and ongoing monitoring, and offboarding of third-party suppliers.
• Identify and categorize third party vendors based on risk, understanding and prioritizing the risks.
• Establish and enforce key controls to mitigate the risk.
• Perform continuous monitoring that tracks and reassesses third parties.
• Ensure third party contractual compliance with Sentara policy and standards.
• Negotiate and maintain the information security exhibit with the vendors through the contracting process.
• Regularly interact with all levels of management to present and discuss third-party risk management.
• Conduct comprehensive risk assessments of third-party vendors based on risk.
• Manage a team of assessors for performing vendor assessments and vendor contracts negotiations.
• Analyze and prioritize risks based on their potential impact on the organization’s operations, data, and reputation.
• Develop and streamline the third-party risk management process.
• Identify and assess vulnerabilities within vendor systems, networks, and applications.
• Collaborate with cross-functional teams, including IT, security, and compliance, to develop and implement risk mitigation strategies.
• Prepare detailed third-party risk assessment reports, including findings, recommendations, and mitigation plans, for presentation to management.
• Maintain accurate and up-to-date documentation of third-party risk assessment activities, findings, and risk treatment plans.
• Assist in audits and assessments to demonstrate compliance with cybersecurity standards.

Manager – Cybersecurity Third Party Risk

• Lead implementation teams through complex technical solutions with Appian and tangential technologies
• Guides clients on Agile, QA, and governance for multi-app platform implementations
• Supports design, development, and test activities across multiple client projects
• Supports large scale implementation teams consisting of multiple development pods
• Guide clients on architecture design, platform scalability, configuration management, DevSecOps, and other program initiatives as needed to drive technical success
• Ensure solutions are built for scale and performance
• Create and document implementation best practices as well as knowledge base articles for internal enablement
• Provide thought leadership on process improvement
• Support internal solutions, infrastructure, and tools
• Mentorship, training, and enablement of resources

Principal Developer Consultant – National Security

• Lead all facility-related responsibilities and security operations across the organization
• Oversee facility management, leasing, and compliance
• Manage personnel clearances, secure facilities, and physical security programs
• Ensure compliance with all government security requirements and regulations
• Conduct regular security assessments and implement improvements

Security Engineer jobs in West Virginia

See all jobs on JobTailor