Information Security Lead Auditor Jobs

At Qualia, we've built the leading B2B real estate technology that transforms the home buying and selling experience into a simple, secure, and enjoyable process. Our SMB and Enterprise products bring together users from across the real estate ecosystem---homebuyers and sellers, lenders, title and escrow agents, and real estate agents---onto a single shared digital closing platform, providing greater clarity and transparency to real estate transactions. Today, through our business customers across the country, millions of consumers use Qualia to close on homes every year. WHAT YOU'LL WORK ON As the Information Security Engineering Manager, you'll lead the team that owns that mission. This is a player/coach role reporting to the Head of Information Security: you'll manage a team of talented security engineers—setting direction, unblocking their work, and growing their careers—while staying hands-on enough to review a detection, step into an incident, or ship an automation yourself. Because purchasing a home is often the largest financial transaction of our users' lives, the stakes for getting security right are real. Our Information Security team doesn't rely on assumptions—we identify where they've been made, assess the risk, and communicate it clearly to the business. We define what "normal" looks like across our products, customers, employees, and assets, and we own the detection and response when something deviates from that baseline. Your mandate is to scale the team's impact faster than its headcount. That means making automation and AI-assisted workflows the default across detection, triage, investigation, and response—so every engineer covers more surface area with higher signal—while preserving the pragmatic, business-first judgment that protects the company without standing in the way of its growth. Security at Qualia isn't siloed—it touches every team and every product. You'll be as comfortable digging into an alert with an engineer as you are briefing an

At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. Remote US The Director, Information Technology & Security will serve as a key member of the Bank's Management Team, serving as the Chief Information Security Officer, and will be responsible for establishing and leading the Bank's information security and cybersecurity programs. As the Bank prepares to launch as a de novo Industrial Loan Company (ILC), this leader will design and implement an enterprise-wide security framework that meets FDIC and state regulatory expectations, supports the Bank's risk appetite, and protects customer and institutional data. This is a blended leadership role requiring both high-level strategic influence and deep technical execution. You will lead the development of information security governance, technical controls, and oversight of infrastructure and engineering, ensuring a strong and scalable security posture from inception. This leader must be a practitioner at heart—willing to "roll up their sleeves" to lead the technical build phase, collaborate closely with engineering on architecture, and ensure security is integrated into every aspect of the Bank's systems and operations. What You’ll Do Oversee infrastructure design and IT Engineering Information Security Program Development Design, implement, and maintain a comprehensive Information Security Program consistent with FDIC guidance (e.g., FIL-66-2019, FIL-13-2021) and the Interagency Guidelines Establishing Information Security Standards. Develop and oversee policies, standards, and procedures governing cybersecurity, data protection, and incident response. Ensure alignment with the Bank’s overall risk management and governance frameworks. Provide regular reporting to executive management and the Board on the Bank’s security posture, emerging risks, and mitigation efforts. Lead the technical

About the role: This is an opportunity to join K's critical InfoSec team as a Senior Security Engineer - AppSec and operate with foresight in protecting our infrastructure, applications, cloud security, and customer trust. As a lean team, we span across multiple areas such as AppSec, CloudSec, SecOps, ITSec, and Compliance and apply it towards reading and interpreting architecture, or planning and building out net new security solutions. You will have the autonomy to define and implement cutting-edge security solutions across our entire technical ecosystem, ensuring our innovative work remains robust and compliant against evolving global threats. This role is crucial for establishing and maintaining a world-class security posture, particularly within the sensitive and highly regulated healthcare technology space. What you will do: Lead the development and implementation of robust application security protocols throughout the entire Software Development Lifecycle (SDLC). Partner with engineering teams to incorporate security into architecture, design, development, testing and deployment Perform hands-on security testing of web applications, APIs, cloud-native services and supporting infrastructure Build and improve automated security testing within CI/CI pipelines, including static analysis, dependency scanning, secrets detection, container scanning and dynamic testing Evaluate effectiveness of application security tools, improve tooling output quality and reduce unnecessary findings and developer friction Develop secure coding standards with developer-focused documentation Contribute application security expertise to vulnerability management, during security incidents/investigations and post-incident reviews Evaluate third party applications, libraries and APIs and integrations for security risk Ensure adherence to relevant healthcare regulatory and compliance requirements (e.g., HIPAA, GDPR, etc.) across all product lines and systems. What we're looking for: 4+ yea

At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. The InfoSec team protects Affirm’s systems and data from evolving threats. We manage security risk, monitor vulnerabilities, and enforce protective controls across the company. The team leads incident response, compliance, identity and access management, and employee training. Our goal is to ensure that security is built into every system and decision at Affirm. We maintain a secure, trustworthy environment so the business can operate and grow with confidence. In this role, you'll build and run Affirm's end-to-end security review process for enterprise AI/LLM systems evaluating architecture, prioritizing AI-specific risks, and designing the controls and guardrails that let Affirm adopt AI safely, partnering across Security, Legal, Privacy, Compliance, IT, and Engineering to make it scalable and repeatable. What you’ll do You will lead and continuously improve Affirm's enterprise AI security review process evaluating the architecture, data flows, permissions, and design of internal AI tools, agentic/MCP-based systems, and AI features — and embed security requirements into the design phase. You will threat model AI/LLM-based systems and their data flows for risks such as prompt injection, insecure output handling, excessive agency, tool-permission abuse, data poisoning, and sensitive-data exposure, and drive remediation. You will review source code, system prompts, agent configurations, and tool/permission manifests (e.g., MCP definitions), and help tool owners build security-focused test cases and red-team/eval scenarios to verify requirements before launch. You will design and build security guardrails and tooling for AI systems permission boundaries, authn/authz for agentic tools and MCP servers, data-handling controls, logging/monitoring, and policy-as-code (Python, IaC) — to enforc

At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. The InfoSec team protects Affirm’s systems and data from evolving threats. We manage security risk, monitor vulnerabilities, and enforce protective controls across the company. The team leads incident response, compliance, identity and access management, and employee training. Our goal is to ensure that security is built into every system and decision at Affirm. We maintain a secure, trustworthy environment so the business can operate and grow with confidence. In this role, you'll build and run Affirm's end-to-end security review process for enterprise AI/LLM systems evaluating architecture, prioritizing AI-specific risks, and designing the controls and guardrails that let Affirm adopt AI safely, partnering across Security, Legal, Privacy, Compliance, IT, and Engineering to make it scalable and repeatable. What you’ll do You will lead and continuously improve Affirm's enterprise AI security review process evaluating the architecture, data flows, permissions, and design of internal AI tools, agentic/MCP-based systems, and AI features — and embed security requirements into the design phase. You will threat model AI/LLM-based systems and their data flows for risks such as prompt injection, insecure output handling, excessive agency, tool-permission abuse, data poisoning, and sensitive-data exposure, and drive remediation. You will review source code, system prompts, agent configurations, and tool/permission manifests (e.g., MCP definitions), and help tool owners build security-focused test cases and red-team/eval scenarios to verify requirements before launch. You will design and build security guardrails and tooling for AI systems permission boundaries, authn/authz for agentic tools and MCP servers, data-handling controls, logging/monitoring, and policy-as-code (Python, IaC) — to enforc

Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. Reporting to the Director of Global Vulnerability Management, you will serve as a Senior Security Research Engineer and technical lead within SIE’s Global Vulnerability Management team. You will lead complex work that advances our Threat Exposure Management capability and supports our transition to a Continuous Threat Exposure Management operating model, while remaining directly engaged in vulnerability research, analysis, security validation, prioritization, and remediation support. You will partner across Information Security, engineering, technology, and business teams to improve how SIE discovers, prioritizes, validates, and mobilizes action on security risks. You will translate annual TEM goals into defined workstreams, delivery plans, success measures, and repeatable operating practices that improve visibility, decision-making, remediation outcomes, and program scale. Responsibilities Lead complex Global Vulnerability Management workstreams that advance SIE’s Threat Exposure Management capability and transition toward a Continuous Threat Exposure Management operating model across discovery, prioritization, validation, and mobilization. Translate annual TEM goals into defined delivery plans, milestones, success measures, dependencies, and repeatable operating

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a Senior Identity Security Engineer on Palantir's Identity Security team, you will own the security posture of the identity infrastructure that Palantirians, customers, and services rely on every day. The Identity Security team is responsible for all identity types at Palantir - workforce, customer, workload, and agentic - giving you the rare ability to architect, threat model, and drive security outcomes across the full identity surface. You will help shape the technical direction for identity security at Palantir, reduce standing access, lead identity threat modeling, and contribute to the next generation of identity primitives including agent identity, JIT-native governance, and unified policy enforcement across workforce and customer IAM. As part of Palantir's best-in-class Information Security organization, you will research, architect, and scale solutions that help Palantir stay ahead of a dynamic identity threat landscape. Core Responsibilities Own the day-to-day identity security posture across corporate, production, customer, and US Government identity planes Drive the rollout of agent identity infrastructure - short-lived credentials, lifecycle bound to a human principal, controlled workload onboarding Architect authentication, federation, and authorization systems - including SAML, OIDC, and policy-driven access control models (RBAC, ABAC, policy-as-code) - across workforce and workload identity Scale non-human identity patterns across service, workload, and agent populations - short-lived credentials, mTLS, identity-based networking Drive adoption of just-in-time access patterns across the identi

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a Senior Identity Security Engineer on Palantir's Identity Security team, you will own the security posture of the identity infrastructure that Palantirians, customers, and services rely on every day. The Identity Security team is responsible for all identity types at Palantir - workforce, customer, workload, and agentic - giving you the rare ability to architect, threat model, and drive security outcomes across the full identity surface. You will help shape the technical direction for identity security at Palantir, reduce standing access, lead identity threat modeling, and contribute to the next generation of identity primitives including agent identity, JIT-native governance, and unified policy enforcement across workforce and customer IAM. As part of Palantir's best-in-class Information Security organization, you will research, architect, and scale solutions that help Palantir stay ahead of a dynamic identity threat landscape. Core Responsibilities Own the day-to-day identity security posture across corporate, production, customer, and US Government identity planes Drive the rollout of agent identity infrastructure - short-lived credentials, lifecycle bound to a human principal, controlled workload onboarding Architect authentication, federation, and authorization systems - including SAML, OIDC, and policy-driven access control models (RBAC, ABAC, policy-as-code) - across workforce and workload identity Scale non-human identity patterns across service, workload, and agent populations - short-lived credentials, mTLS, identity-based networking Drive adoption of just-in-time access patterns across the identi

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As a Senior Identity Security Engineer on Palantir's Identity Security team, you will own the security posture of the identity infrastructure that Palantirians, customers, and services rely on every day. The Identity Security team is responsible for all identity types at Palantir - workforce, customer, workload, and agentic - giving you the rare ability to architect, threat model, and drive security outcomes across the full identity surface. You will help shape the technical direction for identity security at Palantir, reduce standing access, lead identity threat modeling, and contribute to the next generation of identity primitives including agent identity, JIT-native governance, and unified policy enforcement across workforce and customer IAM. As part of Palantir's best-in-class Information Security organization, you will research, architect, and scale solutions that help Palantir stay ahead of a dynamic identity threat landscape. Core Responsibilities Own the day-to-day identity security posture across corporate, production, customer, and US Government identity planes Drive the rollout of agent identity infrastructure - short-lived credentials, lifecycle bound to a human principal, controlled workload onboarding Architect authentication, federation, and authorization systems - including SAML, OIDC, and policy-driven access control models (RBAC, ABAC, policy-as-code) - across workforce and workload identity Scale non-human identity patterns across service, workload, and agent populations - short-lived credentials, mTLS, identity-based networking Drive adoption of just-in-time access patterns across the identi

Our Global Structure Deliveroo is now part of DoorDash, bringing together teams with even greater reach, scale, and ambition. Depending on your role, you may collaborate with teammates, systems, and leaders across DoorDash and Wolt. Together, we’re unlocking new possibilities as one global team. Join us in our mission to transform the way people shop and eat, where impact, innovation, and growth drive everything we do. Our Information Security team enables innovation at speed—securely. As digital guardians of DoorDash, Deliveroo, and Wolt, we safeguard our systems and the data of our employees, customers, riders, and partners. We defend against emerging cyber threats and embed security into every facet of the business. From building resilient defenses and responding to incidents to empowering teams with security knowledge, we are trusted partners protecting these global brands from the inside out. About the Role The Senior Security Operations Centre Specialist offers a unique opportunity to shape our global Security Operations strategy across a global footprint of DoorDash, Deliveroo, and Wolt. This role provides the platform to optimize our technology and AI investments while pioneering new methods to protect our data, people, and partners. As we expand, your specialist capabilities will be essential to our continued success. What you’ll be doing Work in a 24/7 global security operations centre, including scheduled night and weekend shifts. Lead the triage and investigation of security alerts, including phishing, malware, network attacks, security hygiene and privacy related incidents within specified SLAs. Mentor a team of SOC Specialists, providing the necessary guidance and feedback to deliver a best-in-class security service to the business. Lead the development and continuously improve operational documentation, processes and playbooks Build and manage autonomous AI runbooks to automate and scale our alert triage capabilities. Lead incident response and escala

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The role As a Staff Enterprise Security Engineer at SoFi, you will serve as the subject matter expert for Data Loss Prevention (DLP) while driving engineering across broader enterprise security domains—including email security, endpoint protection, network defense, and phishing simulation. Sitting within the Enterprise Security team, this role balances technical focus on data protection with hands-on architecture, operation, and automation of foundational IT and corporate security controls. We seek security leaders who combine technical mastery in tool administration (e.g., Zscaler, Proofpoint, Sentra, CrowdStrike) with systems thinking to mitigate risk across diverse threat vectors. In this role, you will define risk mitigation strategies and build clear technical roadmaps—accelerating security delivery while maintaining safety, correctness, and data protection. What you’ll do Lead end-to-end delivery and architecture for enterprise security capabilities: enterprise zero-trust networks, endpoint security, and SaaS posture management. Frame complex security challenges: clarify security requirements, threat models, failure modes, and success metrics while proposing clear architectural options and tradeoffs. Design for scale and resilience: establish secure baseline configurations, automate security gu

About the team The Information Security organization advances the overall state of security at Rubrik through purposeful initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our systems, provides awareness education to teams on security best practices for data protection, and ensures data sharing relationships with third parties in order to securely protect Rubrik information.3 About the role We are looking for an experienced and technically deep Identity and Access Management (IAM) Engineer to execute technical strategy across our entire Identity and Access Security management program. This domain spans a broad and increasingly complex set of disciplines, including Identity Governance & Administration (IGA), Access Management, Privileged Access Management (PAM), Non-Human Identity (NHI) security, and the emerging space of Agentic Identity security. This is fundamentally a hands-on role. You will be expected to personally design systems from the ground up and build automation that scales across a large and diverse application portfolio. At the same time, this role carries significant cross-functional weight: you will be partnering closely and continuously with Information Security, IT, Engineering and the many application-owning teams distributed across the company, driving the identity security initiatives in alignment with the overall business objectives. What you'll do Solution Design Design and build IAM solutions — including configurations, integrations, and workflows — that align with evolving business requirements, security policies and regulatory requirements (eg., SOX, GDPR). Application Onboarding & Integration Lead the onboarding of applications into IAM platforms

About the Role We are seeking an experienced Privacy Lead to establish, manage, and continuously enhance the organization's Privacy Program across business functions, products, technology platforms, and third-party ecosystems. The ideal candidate will possess deep expertise in privacy regulations including India's Digital Personal Data Protection Act (DPDP Act), GDPR, and privacy governance frameworks. The individual will partner closely with Legal, Compliance, Information Security, Product, Engineering, Risk, HR, and Business teams to ensure privacy-by-design principles are embedded into organizational processes and technology solutions. The Privacy Lead will serve as the subject matter expert for privacy governance, regulatory compliance, privacy risk management, data subject rights management, privacy impact assessments, and data protection controls. Key Responsibilities Privacy Governance & Strategy -Develop and execute the enterprise-wide Privacy Program and Privacy Governance Framework. -Define privacy policies, standards, procedures, and controls aligned with regulatory requirements. -Establish Privacy-by-Design and Privacy-by-Default principles across products and services. -Build privacy risk management and privacy control monitoring mechanisms. -Advise executive leadership on emerging privacy risks and regulatory developments. -Act as the organization's privacy subject matter expert for audits, inspections, and regulatory reviews. Regulatory Compliance Lead compliance initiatives for: -Digital Personal Data Protection Act (DPDP Act), India -GDPR (General Data Protection Regulation) -ISO 27701 Privacy Information Management System -RBI data governance and customer data protection requirements -Applicable privacy and data protection obligations relevant to the Banking, FinTech, Payments, and Technology sectors Responsibilities include: -Regulatory gap assessments -Compliance monitoring -Privacy control implementation -Privacy risk assessmen

Zoox is seeking a highly motivated, hands-on Lead AI Engineer to spearhead the end-to-end development and deployment of our Enterprise Gen AI and LLM initiatives, building agentic workflows, integrating enterprise data sources, and enforcing identity-aware security, that transform operations across Procurement, Supply Chain, Legal, Finance, HR and Manufacturing (MES). In this role, you will: Design and deploy production-grade LLM applications and intelligent agents capable of complex reasoning, secure tool usage and autonomous multi-step workflows. Architect enterprise data/tool integrations using MCP servers, establishing standardized, reusable connectors across Procurement, Supply Chain, Legal, Finance, HR and Manufacturing (MES). Enforce security guardrails via AI gateways - authentication, rate-limiting, logging and policy compliance for all model/agent traffic. Implement identity inheritance via SSO, ensuring agents act strictly within the requesting user's permissions & privileges (no privilege escalation, no standing overreach). Work with the Information Security team on access control (RBAC/ABAC) for agentic systems and establish observability standards for agent behavior and data access. Partner with cross-functional teams to build secure, code-driven AI automation. Qualifications: 10+ years in Data/Software Engineering, with 2+ years deploying GenAI/LLMs in production. Deep Python proficiency; experience with LangChain, LlamaIndex or provider-native orchestration (e.g., Claude Agent SDK, OpenAI Assistants/Agents SDK or hand-rolled). Hands-on experience building/integrating MCP servers or comparable connector frameworks. Experienced in AI gateway solutions (e.g. Cloudflare AI Gateway) for governing agent traffic. Working knowledge of SSO/identity federation (SAML, OIDC, OAuth 2.0) and propagating identity through agentic tool calls.

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block. The Role As a Principal Security Engineer focused on Software Security Engineering at Block, you will be a technical leader reporting to the CISO responsible for setting the bar for security excellence and driving the creation of innovative, world-class software solutions to complex security problems. You will work across Engineering and Information Security (InfoSec) to champion a "Secure by Design" culture, directly influencing the architecture of Block's core products and infrastructure. Your mandate is to provide deep technical expertise and strategic direction to ensure that security is enabling fast, secure innovation across the business. You Will Software Security Innovation : Deliver world-class and innovative software solutions to security problems, tackling Block's top risks such as technology fragmentation and security after-the-fact. Technical Strategy & Architecture : Define the multi-year technical strategy for software security at Block, guiding architectural decisions and ensuring alignment with engineering best practices. Cross-Cutting Solution Leadership : Identify and lead the development and implementation of common, high-leverage security solutions and infrastructure across Block's business units (Square, Cash App, TBD, etc.) to combat data sprawl and overpermissioning. Drive engineering excellence , specifically