IT Systems & Security Engineer (CedD225)

Location: Remote (U.S.) Clearance: Ability to obtain and maintain a Public Trust Salary Range: 100K – 120K LTS is seeking a skilled and mission-focused Cyber Security Engineer to support a major modernization initiative within the Department of Veterans Affairs (VA) health portfolio. This role will support cybersecurity engineering, risk management, and security modernization efforts across enterprise healthcare systems and infrastructure environments supporting Veteran healthcare operations nationwide. The ideal candidate will possess strong experience securing complex federal IT systems, supporting cloud and hybrid environments, and implementing cybersecurity solutions aligned with federal compliance frameworks and Zero Trust initiatives. This individual will work closely with infrastructure, application, integration, and DevSecOps teams to ensure modernization efforts are designed and deployed with security at the forefront. What You’ll Do: • Support cybersecurity engineering for the pilot, including cloud security, RMF/ATO support, compliance documentation, and continuous monitoring. • Secure AWS-based environments through identity and access management, encryption, logging, monitoring, network security, vulnerability management, and configuration hardening. • Configure, monitor, and support AWS security services such as AWS Network Firewall, Security Hub, GuardDuty, CloudWatch, CloudTrail, Inspector, and related capabilities. • Support security planning for an AWS Commercial Cloud environment with consideration for future migration to AWS GovCloud or another VA-approved hosting environment. • Assist with ATO planning, control implementation, evidence collection, compliance reporting, and approval workflows. • Work within eMASS, ServiceNow GRC, or similar risk management systems to support ATO artifacts, information assurance tasking, POA&M tracking, and security documentation. • Develop and maintain SSPs, POA&Ms, SOPs, risk assessments, control n

Bloomreach is building the world’s premier agentic platform for personalization .We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the entire customer journey. We're taking autonomous search mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses. We’re making conversational shopping a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey. We're designing the future of autonomous marketing , taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do. And we're building all of that on the intelligence of a single AI engine — Loomi — so that personalization isn't only autonomous…it's also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora. Senior Staff Security Engineer The Senior Staff Security Engineer owns current and target-state data architectures and reporting while also designing, implementing, and monitoring cloud (AWS/GCP) infrastructure security controls; deploying, securing, configuring, and operating SIEM and other security resources; identifying, triaging, and remediating infrastructure and web vulnerabilities; leading incident triage and external-researcher engagement; mentoring junior staff; and helping shape secure, scalable approaches for AI-enabled tooling, automation, and emerging product capabilities. Role summary and core responsibilities 6+ years of relevant experience Candidates must demonstrate proficiency in cloud security, network security, URL filtering, common security frameworks, and CVE lifecycle management Prac

At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. The InfoSec team protects Affirm’s systems and data from evolving threats. We manage security risk, monitor vulnerabilities, and enforce protective controls across the company. The team leads incident response, compliance, identity and access management, and employee training. Our goal is to ensure that security is built into every system and decision at Affirm. We maintain a secure, trustworthy environment so the business can operate and grow with confidence. In this role, you'll build and run Affirm's end-to-end security review process for enterprise AI/LLM systems evaluating architecture, prioritizing AI-specific risks, and designing the controls and guardrails that let Affirm adopt AI safely, partnering across Security, Legal, Privacy, Compliance, IT, and Engineering to make it scalable and repeatable. What you’ll do You will lead and continuously improve Affirm's enterprise AI security review process evaluating the architecture, data flows, permissions, and design of internal AI tools, agentic/MCP-based systems, and AI features — and embed security requirements into the design phase. You will threat model AI/LLM-based systems and their data flows for risks such as prompt injection, insecure output handling, excessive agency, tool-permission abuse, data poisoning, and sensitive-data exposure, and drive remediation. You will review source code, system prompts, agent configurations, and tool/permission manifests (e.g., MCP definitions), and help tool owners build security-focused test cases and red-team/eval scenarios to verify requirements before launch. You will design and build security guardrails and tooling for AI systems permission boundaries, authn/authz for agentic tools and MCP servers, data-handling controls, logging/monitoring, and policy-as-code (Python, IaC) — to enforc

At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. The InfoSec team protects Affirm’s systems and data from evolving threats. We manage security risk, monitor vulnerabilities, and enforce protective controls across the company. The team leads incident response, compliance, identity and access management, and employee training. Our goal is to ensure that security is built into every system and decision at Affirm. We maintain a secure, trustworthy environment so the business can operate and grow with confidence. In this role, you'll build and run Affirm's end-to-end security review process for enterprise AI/LLM systems evaluating architecture, prioritizing AI-specific risks, and designing the controls and guardrails that let Affirm adopt AI safely, partnering across Security, Legal, Privacy, Compliance, IT, and Engineering to make it scalable and repeatable. What you’ll do You will lead and continuously improve Affirm's enterprise AI security review process evaluating the architecture, data flows, permissions, and design of internal AI tools, agentic/MCP-based systems, and AI features — and embed security requirements into the design phase. You will threat model AI/LLM-based systems and their data flows for risks such as prompt injection, insecure output handling, excessive agency, tool-permission abuse, data poisoning, and sensitive-data exposure, and drive remediation. You will review source code, system prompts, agent configurations, and tool/permission manifests (e.g., MCP definitions), and help tool owners build security-focused test cases and red-team/eval scenarios to verify requirements before launch. You will design and build security guardrails and tooling for AI systems permission boundaries, authn/authz for agentic tools and MCP servers, data-handling controls, logging/monitoring, and policy-as-code (Python, IaC) — to enforc

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a Security Systems Engineer at Palantir, you are responsible for implementing, designing, and maintaining the physical security systems that ensure the protection of Palantir’s people, assets, intellectual property, and reputation. You lead research and evaluations for the latest technology, security infrastructure, policies, procedures, systems, and applications, looking for easy-to-use capabilities that reduce button clicks and ultimately give time back to the operator. You will be collaborating with technical teams to develop and maintain end-to-end project plans and ensure on-time delivery. Your technical expertise is second only to your integrity and genuine passion for security and technology. As a member of the Global Security and Investigations team, you work with security professionals, architects, lawyers, and software and network engineers to deliver a safe and secure environment for your fellow employees. Palantir is a global company, so you'll lead physical security projects all over the world. You'll work hard to break down barriers between teams by communicating your knowledge and goals effectively across time zones and other physical and virtual barriers. *Please note this role is NOT for cyber security or information security positions* Core Responsibilities Design and oversee the technical aspects of your projects from conception to full deployment. Systems naturally break and need maintenance. You'll work with vendors and end users to find the best solutions for a problem, in the shortest possible time. Leverage both system and software engineering skills in order to address the needs of all teams within Globa

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a Security Systems Engineer at Palantir, you are responsible for implementing, designing, and maintaining the physical security systems that ensure the protection of Palantir’s people, assets, intellectual property, and reputation. You lead research and evaluations for the latest technology, security infrastructure, policies, procedures, systems, and applications, looking for easy-to-use capabilities that reduce button clicks and ultimately give time back to the operator. You will be collaborating with technical teams to develop and maintain end-to-end project plans and ensure on-time delivery. Your technical expertise is second only to your integrity and genuine passion for security and technology. As a member of the Global Security and Investigations team, you work with security professionals, architects, lawyers, and software and network engineers to deliver a safe and secure environment for your fellow employees. Palantir is a global company, so you'll lead physical security projects all over the world. You'll work hard to break down barriers between teams by communicating your knowledge and goals effectively across time zones and other physical and virtual barriers. *Please note this role is NOT for cyber security or information security positions* Core Responsibilities Design and oversee the technical aspects of your projects from conception to full deployment. Systems naturally break and need maintenance. You'll work with vendors and end users to find the best solutions for a problem, in the shortest possible time. Leverage both system and software engineering skills in order to address the needs of all teams within Globa