Security Engineer

• Safeguard organization's digital assets and ensure information systems' confidentiality, integrity, and availability.
• Identify and mitigate security vulnerabilities.
• Monitor security incidents.
• Contribute to developing security policies and procedures.

Cybersecurity Engineer

• Lead security architecture, implementation, and maintenance of our cloud-based data platform, applications and medical devices.
• Establish security review processes for all new products and features.
• Guide security features through the complete product lifecycle.
• Prototype security requirements and educate the broader engineering team on secure coding best practices.
• Work cross-functionally with internal software, hardware, quality, and regulatory teams.

• Serve as primary technical POC for all security assessments, vulnerability assessments, and analyses of alternatives under the contract
• Lead assessment planning and coordination at FAA facilities nationwide, including developing System Security Assessment Test Plans and managing pre- and post-assessment activities
• Personally lead complex or high-visibility assessment events
• Ensure all assessments use the three NIST 800-53A methods (Examine, Interview, Test) and produce compliant SARs
• Develop and maintain vulnerability scanning strategies including Tactics, Techniques, and Procedures (TTPs)
• Evaluate and recommend scanning tools and configurations for NAS and Mission Support environments
• Conduct risk translation from assessment findings and develop draft Plans of Action and Milestones (POAMs) with actionable remediation guidance
• Lead regression assessment activities to validate that patches, fixes, and configuration changes mitigate previously identified vulnerabilities
• Attend all Program Management Reviews and report on assessment status, deliverable timelines, and technical issues
• Mentor and develop junior assessment staff
• Build a team culture where analysts take ownership of their assigned systems and drive assessments to completion independently
• Coordinate with NAS system owners, FAA facility staff, AIT/AIS, and ACG to schedule assessments and resolve access and logistical issues
• Ensure assessment work in NAS operational environments follows safety protocols.

Security Assessment Lead

• Serve as a trusted security advisor to system owners, business owners, and technical teams
• Guide systems through the Risk Management Framework (RMF) and support their Authority to Operate (ATO)
• Develop and maintain authorization documentation, continuous monitoring strategies, contingency planning, and security guidance
• Ensure client systems remain compliant with federal cybersecurity requirements
• Support authorization package development while maintaining appropriate independence from formal Security Control Assessment (SCA) and Final Assessment Report (SAR) validation activities
• Create foundational system documentation, including Boundary Scope Memorandums (BSM), System Architecture diagrams, and Authorization Boundary and Network Diagrams (ABND)
• Validate technical evidence, including configuration artifacts, scan reports, and system documentation, to ensure compliance
• Develop and maintain system-level Contingency Plans (CP), Incident Response Plans (IRP), and Continuous Monitoring (ConMon) Plans
• Facilitate RMF training sessions, office hours, and user guidance

Mid-Level Information System Security Officer – System Owner Support

• Support security design and installation projects throughout the Bay Area
• Manage all aspects of the project from initial engagement through project completion
• Manage multiple projects and scopes of work
• Identify project schedule, scope parameters, and oversee security design and implementation per client design requirements and standards
• Manage early project initiation activities and develop project security scope, schedule, critical deliverables, and requirements
• Manage scheduling, status, and tracking of critical project tasks, issues, and deliverables
• Prepare, issue, and manage Request for Proposal (RFP) documents for security systems installation scope
• Evaluate RFP responses and prepare evaluation reports

Physical Security Project Manager

• Serve as the organization’s primary security leader and trusted advisor, performing many of the responsibilities typically associated with a CISO while partnering with executive leadership on security strategy and execution.
• Develop, implement, and maintain pragmatic, right-sized security policies, standards, and best practices working with the developers as customers.
• Manage relationships with external vendors, consultants, and auditors.
• Lead all Corporate IT functions supporting a fully remote global workforce.
• Manage identity and access management, endpoint management, collaboration platforms, SaaS applications, and the employee technology lifecycle (onboarding, offboarding, provisioning).
• Establish scalable IT processes that support employee productivity and business continuity, and drive continuous improvement of IT service delivery and employee experience.
• Drive pending infrastructure decisions, including VPN strategy, password management, tooling platform consolidation, and certificate lifecycle automation.
• Partner closely with Engineering and Platform teams to remove technical blockers and improve operational effectiveness, including CI/CD, automation, and cloud platform reliability.
• Identify opportunities to leverage AI and automation to eliminate manual processes and operational toil across the organization.
• Evaluate and implement AI-enabled tools that improve productivity, support operations, engineering workflows, security monitoring, and business processes.
• Establish governance and best practices for responsible AI usage within the company.
• Partner with the COO and leadership team to manage IT, infrastructure, security, and cloud-related budgets, including AI tooling spend.
• Monitor and optimize spending across cloud providers, SaaS platforms, security tools, and technology vendors.

Director, IT Security – Compliance

• Conduct unarmed foot and/or vehicle patrol (interior and/or exterior).
• Control access and egress.
• Monitor closed-circuit televisions and alarm systems.
• Compose reports, deter criminal activity, and misconduct.
• Perform other duties as specified in post orders.
• Patrol exterior grounds of the facility.
• Provide access control for gates ensuring only authorized personnel are permitted.
• Manage traffic flow at gates to ensure no disruption in business operations.
• Maintain access log.
• Monitor cameras after normal working hours.
• Notify DPR personnel of any issues.
• Observe and report any suspicious activity.
• Maintain awareness of surroundings to promote physical security and safety.
• Watch for irregular or unusual conditions that may create security concerns or safety hazards.
• Observe departing personnel to protect against theft of company property.
• Ensure that authorized removal of property is conducted within appropriate client requirements.
• Contribute to communication and awareness of security policies and issues as needed.
• Warn violators of rule infractions, such as loitering, smoking or carrying forbidden articles.
• Permit authorized persons to enter property and monitor entrances and exits.

Data Center Security Officer

• Executes DoW/DLA cybersecurity processes to authorize information systems, maintain authorization of information systems, and serve as a Subject Matter Expert (SME) for systems undergoing the authorization process.
• Update and track POA&M entries by documenting findings, logging remediation actions, and keeping milestone dates current to ensure issues move toward closure.
• Proven ability to work independently and collaboratively with minimal oversight
• Ability to generate clear, accurate, and audit-ready cybersecurity reports, including vulnerability summaries, compliance status updates, and risk findings for technical and leadership audiences
• Performs a DOD cybersecurity process while either authorizing an information system or serving as a SME for an information system undergoing authorization.
• Determines the applicable severity value for an identified vulnerability (e.g., non-compliant security control) and determines the possible ramifications on the system’s current or future authorization.
• Brief senior management on the progress or results of an information system undergoing the Risk Management Framework (RMF) process.

Cybersecurity Assessment & Authorization Subject Matter Expert – SME

• Own end-to-end security for every server in the bare metal fleet, from supply chain and provisioning through hardening, operation, and secure decommissioning.
• Design and maintain hardened golden OS images with automated vulnerability scanning, patch pipelines, and configuration-drift detection.
• Define and enforce the BMC security model (access control, credential rotation, audit logging, firmware integrity) for one of the most under-defended surfaces in the industry.
• Partner with network engineering on micro-segmentation, IDS/IPS, and firewall architecture, applying zero-trust from the top-of-rack up.
• Implement data-at-rest encryption, key management, and secure storage access at fleet scale, and build the automation that makes secure-by-default the path of least resistance.
• Lead threat modeling and security reviews for new hardware platforms and network designs, and respond to incidents touching the physical fleet.

Information Security Engineer – Bare Metal

• Provide one-on-one consultations to assess SSI eligibility.
• Evaluate household composition, countable income, resource levels, deeming, and state-specific variations.
• Explain SSI application steps, documentation requirements, and pathways, including CAL, TERI, Presumptive Disability, Disabled Adult Child, and 1619(b).
• Manage cases from creation to closure with accurate documentation.
• Maintain expert-level knowledge of SSI regulations, Medicaid eligibility rules, POMS guidance, and SSA processes.
• Meet or exceed FEDlogic QA quality standards and participate in internal improvement initiatives.
• Any other duties as assigned by leadership.

Social Security Disability Benefits Expert

• Oversee all information assurance and cybersecurity compliance activities for a federal government IT program
• Manage DoD RMF authorization packages
• Direct vulnerability remediation
• Serve as the S-ISSO for enterprise systems
• Lead a team of security professionals ensuring the continuous security posture of a mission-critical environment

Cybersecurity SME

• Lead and manage global service teams to deliver exceptional customer service and operational performance.
• Oversee global services teams including Custom Solutions, Project Engineering Services (PES), field services, multiple levels of Technical Support, and strategic operations to ensure seamless service delivery.
• Develop and implement service strategies that align with business objectives and enhance customer satisfaction.
• Drive continuous improvement initiatives to optimize service delivery, reduce costs, and increase efficiency.
• Collaborate with cross-functional teams including sales, offering management, engineering, and operations to ensure seamless service integration.
• Manage relationships with key customers and partners to foster long-term service partnerships.
• Ensure compliance with industry standards and company policies in all service activities.
• Align service strategies and execution plans with Regional General Managers to support regional business goals and customer needs.
• Facilitate regular communication and collaboration with Regional GMs to synchronize service initiatives and share best practices.
• Execute and support the offering strategy by ensuring service delivery aligns with product and market positioning.
• Focus on key performance indicators (KPIs) including Service Level Agreements (SLAs), utilization rates, and productivity enhancements to drive operational excellence.
• Monitor, analyze, and report on SLA adherence, resource utilization, and productivity metrics, implementing corrective actions as needed.
• Create and develop internal team competencies and skill sets to enable migration towards connected, outcome-based offerings.
• Identify skill gaps and implement training and development programs to build capabilities in digital technologies, data analytics, and connected services.
• Champion a culture of innovation and continuous learning to support transformation towards outcome-based service models.
• Serve as the single point of escalation for customer issues, ensuring timely resolution and maintaining a strong customer focus throughout all service interactions.
• Build and maintain strong customer relationships by understanding their needs and delivering solutions that exceed expectations.
• Introduce AI in all aspects of service delivery to augment internal staff capabilities and enhance overall customer experience.
• Partner with IT teams in support of various tools and processes to streamline operational efficiency for Services personnel.

Senior Director, Global Services – Security & Access Solutions

• Lead the design, build, and ongoing operation of security operations and risk programs
• Define and operationalize security KRIs, KPIs, and health metrics
• Establish a consistent measurement framework, dashboarding model, and reporting taxonomy
• Prepare and present regular business reviews for security leadership
• Build the operating cadence for security team leadership
• Establish a common organizational framework for security team OKRs
• Partner across Security, Engineering, Product, Infrastructure, Privacy, Legal, Compliance, and Operations
• Drive root-cause analysis and remediation governance
• Create and maintain a portfolio view of security initiatives, risks, dependencies, and commitments
• Define standard methods for risk intake, issue tracking, exception handling, escalation thresholds, and verified closure
• Improve the rigor of security operations by identifying opportunities for workflow simplification
• Develop executive-ready briefing materials, scorecards, and narratives
• Monitor program performance over time and recommend changes to operating models

Security Technical Program Manager

• Owning our compliance program end to end: driving our annual SOC 2 Type 2 audits from evidence collection through auditor walkthroughs, and running Vanta as our governance home base year-round.
• Completing security questionnaires, addendums, and AI risk assessments for the IT and security teams at our hospital clients — and making sure they understand we're doing the right thing. (Health systems ask great, hard questions. You'll have great answers.)
• Running real BCDR tests and treating them like live incidents to find the gaps before the gaps find us.
• Coordinating annual pen tests and driving remediation of findings within SLA.
• Managing security across our stack: AWS, Heroku, Cloudflare, Google Workspace, GitHub, and our communication tools.
• Administering our laptop fleet for a fully remote team — imaging, shipping, MDM enrollment, inventory, and end-of-life — so every machine is encrypted, managed, and remotely wipeable.
• Running access reviews and enforcing least privilege: pruning admin lists, enforcing SSO and 2FA, and tuning password policies.
• Ensuring new employees get access to everything they need on day one, and departing ones are locked out the same day — partnering with HR and Finance on a tight onboarding/offboarding loop through Rippling and Google.
• Evaluating and securing AI tooling — from how our team uses Claude and MCP servers to partnering with engineering on customer questions about AI risk, bias testing, and model governance.
• Doing vendor management and procurement reviews, and finding savings while you're at it.
• Staying on top of the rapidly evolving AI threat landscape and adapting our defenses and team training as fast as the attackers adapt theirs.
• Playing professor and educating our team on everything security.
• Advising leadership on security matters during project planning, and working with our full stack engineers to ship improvements you identify.
• Being the savior in the event of a security incident — leading response, analysis, and the write-up afterward.
• Supporting co-workers when they manage to put their computers in a bad place. (They should enjoy talking to you, and you to them!)

Senior IT/Security Engineer – AI-native

• Lead the information security program across application security, cloud security, security operations, and GRC, serving as the operational leader responsible for refining and driving the information security roadmap into executed outcomes.
• Own the security operations function, including detection and response, threat intelligence, incident management, and SOC maturity, ensuring the organization can rapidly identify, contain, and recover from security events.
• Drive the application security program, embedding secure development practices, code analysis tooling, and vulnerability management into the SDLC in close partnership with product and platform engineering teams.
• Establish and mature cloud security capabilities, defining and enforcing security standards across cloud environments including architecture review, configuration management, workload protection, and cloud-native detection and response.
• Oversee governance, risk, and compliance activities, including regulatory and framework alignment (SOC 2, ISO 27001, NIST, HITRUST, or similar), risk assessment processes, policy lifecycle management, and audit coordination.
• Partner with Internal Platform teams to define and implement appropriate security guardrails within the environment.
• Build and maintain the organization's security risk register, providing the stakeholders with clear, data-informed visibility into the threat landscape, control gaps, and residual risk across the enterprise.
• Collaborate cross-functionally with engineering, IT, legal, and privacy stakeholders to embed security into organizational processes and decision-making rather than operating as a gatekeeping function.
• Define and track security KPIs and program metrics — such as mean time to detect/respond, vulnerability remediation SLAs, and compliance posture — to measure program effectiveness and define target risk postures across applications.
• Lead, develop, and scale a high-performing security organization, managing team leads across multiple disciplines, investing in professional development, and building a culture that balances security rigor with operational pragmatism.

Director of Information Security

• Design, build and implement scalable, repeatable processes that integrate security, governance, and risk management into the AI lifecycle, ensuring consistency and auditability.
• Support the development, implementation, and continuous improvement of the organization's AI Governance program, with a focus on cybersecurity and risk management.
• Identify and mitigate AI-specific risks (e.g., model abuse, prompt injection, data leakage, model theft), embedding security and governance into AI development, deployment, and third-party usage.
• Support issue management activities by tracking AI-related risks, findings, and remediation actions.
• Prepare governance reports, metrics, dashboards, and presentations for management and governance committees.
• Participate in internal audits, regulatory examinations, and control assessments related to AI systems and AI governance practices.
• Contribute to the development of AI testing, validation, and monitoring requirements designed to identify security, compliance, and operational concerns.
• Monitors information security trends internal and external to the bank and keeps leadership informed.

AI Security Enablement – Governance

• Analyze and report organizational and system security posture trends, including monitoring activities related to database security risks
• Apply security policies and cybersecurity principles to ensure systems meet defined security objectives and requirements
• Assess access control implementations to ensure alignment with least privilege and need-to-know principles
• Evaluate configuration management, change management and release management processes for security compliance
• Assess and monitor cybersecurity practices associated with system implementation, testing and operational activities
• Assess the effectiveness of implemented security controls, including controls protecting databases and data stores, and identify areas requiring improvement
• Ensure systems security operations and maintenance activities are properly documented and kept current
• Implement security measures to resolve vulnerabilities, mitigate risks and support system confidentiality, integrity, availability, authentication and non-repudiation
• Support security testing of applications and systems, including identifying security deficiencies and supporting remediation or risk acceptance processes
• Conduct security architecture reviews, identify gaps and contribute to the development of security risk management plans
• Support Risk Management Framework (RMF) activities and related documentation, including lifecycle support plans, operational procedures and system documentation updates
• Collaborate with stakeholders to resolve security incidents, address vulnerabilities and ensure minimum security requirements are implemented across applications

Systems Security Administrator – Imperva

• Own and manage the complete security program for the project, ensuring alignment with State of Michigan security policies, standards, and contractual security requirements
• Serve as the primary security and compliance liaison to client stakeholders — fielding compliance inquiries, coordinating security reviews, and representing the delivery team in audit and assessment activities
• Facilitate compliance activities end-to-end: gathering evidence, maintaining security documentation and artifacts, tracking remediation items to closure, and reporting status to both internal leadership and state contacts
• Establish and enforce secure delivery practices across the project team, including access management, data handling procedures, and incident response protocols
• Motivate, guide, and coach project staff to ensure secure, accurate, efficient, and timely delivery of services — building a security-conscious culture rather than policing one
• Identify, assess, and communicate security risks proactively; escalate issues with clear remediation recommendations
• Maintain awareness of applicable regulatory and framework requirements (e.g., NIST 800-53, CJIS, HIPAA, IRS Pub 1075 — *confirm with client which frameworks govern this engagement*) and translate them into practical guidance for the team

Security Officer

• Configure and operate security scanning tools to effectively identify and analyze vulnerabilities
• Remediate infrastructure vulnerabilities as they appear and put in place process to preemptively avoid recurrence
• Triage, investigate, and escalate security alerts with remediation recommendations
• Document procedures, best practices, and technical security standards
• Collaborate with internal and external engineering teams to optimize alert rules and monitoring coverage
• Provide technical thought leadership regarding the security of networks and systems
• Identify scanning and monitoring gaps as well as ensuring all our dependencies are being fully audited
• Support debug/testing and remediation management to enhance infosec posture
• Participate in an after-hours on-call rotation to investigate and triage security alerts
• Develop a deep knowledge of organizational systems, environments, and security tools
• Ensure that products and services meet established security standards set by the company
• Monitor networks and systems for intrusions and implement protection and recovery methods
• Identify and advise on security risks associated with new development or system changes
• Assist in providing access to users and applications using our security standards and best practices

• Establish secure by design standards and the target state security architecture across product development
• Shift security left into product and engineering to reduce risk and cost
• Build a formal vulnerability management program encompassing both traditional vulnerability management and AI
• Enable secure AI adoption across our products and internal systems
• Define security architecture patterns that drive clarity with the business
• Own risk based prioritization, remediation SLAs, and executive reporting for enterprise vulnerability management
• Provide senior technical leadership and create clear, consistent standards across Product, Engineering, and Security
• Build proactive security leadership and trusted partnerships

Security Engineer jobs in United States

See all jobs on JobTailor

Cybersecurity Engineer

Security Engineer

Security Assessment Lead

Mid-Level Information System Security Officer – System Owner Support

Physical Security Project Manager

Director, IT Security – Compliance

Data Center Security Officer

Cybersecurity Assessment & Authorization Subject Matter Expert – SME

Information Security Engineer – Bare Metal

Social Security Disability Benefits Expert

Cybersecurity SME

Senior Director, Global Services – Security & Access Solutions

Security Technical Program Manager

Senior IT/Security Engineer – AI-native

Director of Information Security

AI Security Enablement – Governance

Systems Security Administrator – Imperva

Security Officer

Security Engineer

AVP – Product Security