It Security Engineer Jobs

CAPCO POLAND *We are looking for Poland based candidate. Capco is a fully independent, global management and technology consultancy. For 25 years we have combined innovative thinking with deep industry knowledge to deliver business consulting, digital transformation and technology services to Finance and Energy markets. Our collaborative and efficient approach helps clients reduce costs and manage risk and regulatory change while increasing revenues. We are thinkers, innovators, and disruptors. We are small enough to care but large enough to matter. As an IT Security Analyst , you will play a key role in supporting a large-scale Secrets & Credential Management initiative. You will analyze current-state environments, identify control gaps, and define robust, scalable security requirements. Working across technical and business teams, you will help ensure that sensitive credentials are governed, controlled, and aligned with regulatory and operational expectations. Key Responsibilities: Conduct end-to-end analysis of secrets and credential management practices across applications, infrastructure, and platforms Identify, classify, and document secrets, including ownership, usage, storage, lifecycle stage, and associated risks Assess control gaps (e.g., unmanaged credentials, hardcoded secrets, weak auditability) and define remediation approaches Define functional and non-functional requirements for centralized secrets management solutions Facilitate workshops with stakeholders to gather requirements, validate findings, and support governance activities Required Skills and Experience: At least 5 years of experience in a similar role. At least 2 years of experience in working with IAM projects. Experience in IT security analysis, security requirements engineering, or security governance within complex environments Strong understanding of IAM, PAM, least privilege, and secure access governance principles Knowledge of credential types (passwords, SSH

Who we are: Sardine is the leading agentic risk platform for fighting financial crime. Our integrated solution unifies data across risk teams to help organizations stop fraud in real time, prevent AI-driven attacks, and automate fraud and AML operations. Sardine’s platform is strengthened by one of the fastest-growing fraud consortiums in the market, spanning more than 6 billion profiled devices, 800 million consumers, and 3 million businesses worldwide. Leading companies including FIS, GoDaddy, Intuit, Edward Jones, ZoomInfo, and Checkout.com rely on Sardine to secure and grow trust in their products. Our culture: We hire talented, self-motivated individuals with extreme ownership and high growth orientation. We value performance and not hours worked. We believe you shouldn't have to miss your family dinner, your kid's school play, friends get-together, or doctor's appointments for the sake of adhering to an arbitrary work schedule. We're a remote-first team spread across time zones, so no office to report to - work from wherever helps you do your best work. Just a couple of things to keep in mind: pay is based on where you're located, and you'll need to keep a home base in the country you're hired in. So while we love the "coffee shop today, mountains tomorrow" life, this isn't a passport-optional, work-from-anywhere-on-Earth kind of remote - think flexible within your country, not borderless. Location: Remote - United States The role Sardine makes risk and payment decisions for banks and fintechs. Our customers audit us closely, and application security is a large part of what they examine. Money moves through this platform, so real adversaries study it. Your job is to find what they would find, especially authorization flaws and business logic abuse, and then make the whole class of bug go away. The application security team is small. The estate is large: Go, Node.js, Python, Ruby, and Java services running on multi-cloud and Kubernetes. That ratio shapes the wo

Security isn't just a checkbox at Delight.ai. It's the foundation everything else is built on. If you believe security should accelerate how people work, not slow them down, keep reading. The Company Sendbird is on a mission to build the AI workforce of tomorrow. For over a decade, we built the infrastructure behind conversations—chat, voice, video, messaging APIs—and became the #1 CPaaS platform for in-app communications. 4,000+ brands trust us. 7 billion messages flow through our platform every month. 300 million monthly active users. We powered conversations for DoorDash, Match Group, Noom, Yahoo Sports, Rakuten, and thousands of others. We were good at what we did. Really good. We also saw it early: AI would fundamentally reshape how businesses talk to customers. The infrastructure we'd spent a decade building would become commoditized. The value would move up the stack—into intelligence, into experience, into outcomes. In December 2024, we made the full strategic pivot to AI-first customer experience. By February 2025, we'd launched our AI agent for enterprise CX—built on a decade of conversation data, now with intelligence on top. And in November 2025, we rebranded to Delight.ai. The Product Delight.ai is the AI concierge for customer experience. Most AI agents forget you the moment the conversation ends. Ours doesn't. Delight.ai builds memory over time, learns preferences, and connects context across every channel—chat, SMS, email, voice, WhatsApp—without losing the thread. We're building AI that makes customers feel understood, seen, and remembered. The Role As part of the march towards our vision of building a powerful user engagement platform, we are assembling a world-class security team to protect our customers' data and earn their trust. Specifically, we need a Security Engineer who can help improve the security posture of our product and cloud infrastructure. What you will do Work with Engineering teams to help build secure products and infrastructure

About the Team Enterprise Security protects the systems, identities, devices, and services that enable OpenAI's employees to work securely and effectively. We partner across IT and Security to understand risk, build practical defenses, and support a rapidly evolving technical environment. About the Role We are looking for an Enterprise Security Engineer with a focus on vulnerability management, novel vulnerabilities, and zero-day response. You will investigate vulnerabilities and security weaknesses across networks, endpoints, and SaaS, prioritize them in the context of real exposure, and drive remediation through verified outcomes. You will also build security capabilities and automation, use AI agents to solve practical problems, and help shape how enterprise security operates as agents become a larger part of everyday work. This role is open to candidates in San Francisco, CA, and to remote candidates in the United States. In this role, you will: Discover, investigate, and prioritize vulnerabilities and misconfigurations across enterprise systems, including novel vulnerabilities and zero-days with incomplete information and no established playbook. Translate technical findings into clear attack paths, business impact, and actionable remediation. Develop and validate emergency mitigations when patches are unavailable, coordinate with system owners, vendors, and incident responders, and drive durable fixes through verified closure. Improve asset visibility, ownership, vulnerability data quality, and reporting. Build and operate security tools and integrations using code, APIs, automation, and AI agents. Design controls for agent access, execution, and accountability. Contribute across endpoint, network, identity, and SaaS security, and support incident investigations when needed. You might thrive in this role if you: Have independently investigated novel or emerging vulnerabilities and driven enterprise remediation from uncertain initial reports through mitigation

About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role: We are looking for an IT Systems Engineer to build and secure the identity and access management (IAM) and mobile device management (MDM) systems for employees who build agents and internal tools every day. You will design access and device policies that let them ship quickly without exposing company data, and automate the work with scripts, API integrations, and AI tooling alongside our IT and Security engineers. This is a hybrid role based in San Francisco, New York City, or Austin, with three days a week in the office. What you’ll do: Configure Okta, including application integrations, single sign-on (SSO), multi-factor authentication (MFA), groups, access policies, and automated provisioning Build onboarding, role-change, and offboarding automation that keeps employee access current Configure and maintain MDM for device enrollment, software deployment, patching, encryption, and compliance controls Build scripts, API integrations, and automation across Okta, MDM, Google Workspace, Slack, and IT service management systems, using AI to write and troubleshoot code and reviewing its output before it ships Partner with Security on least-privilege access that lets employees connect agents and internal tools to company systems safely, along with device security standards and access reviews, and serve as the escalation point for complex identity and device issues What you need: 7+ years of hands-on IT systems engineering experience, with deep expertise in either IAM or MDM and working knowledge of the other Administered Okta and integra

About AlphaSense: The world’s most sophisticated companies rely on AlphaSense to remove uncertainty from decision-making. With market intelligence and search built on proven AI, AlphaSense delivers insights that matter from content you can trust. Our universe of public and private content includes equity research, company filings, event transcripts, expert calls, news, trade journals, and clients’ own research content. The acquisition of Tegus by AlphaSense in 2024 advances our shared mission to empower professionals to make smarter decisions through AI-driven market intelligence. Together, AlphaSense and Tegus will accelerate growth, innovation, and content expansion, with complementary product and content capabilities that enable users to unearth even more comprehensive insights from thousands of content sets. Our platform is trusted by over 6,000 enterprise customers, including a majority of the S&P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us! About the Role AlphaSense's GRC function is making a deliberate investment in automation and engineering, and we need a Senior GRC Engineer to lead that charge. You will design and build the technical automation that powers our compliance testing, evidence collection, risk monitoring, and GRC platform integrations—and you will own the governance architecture for how AI and agentic systems are built and deployed at AlphaSense. You sit at the intersection of security engineering and compliance operations. You are not just AI-curious; you are AI-native in practice: you use LLMs and agents for real substantive work—analysis, drafting, automation, code, investigation—and you apply rigorous judgment about where AI creates leverage, where it introduces risk, and where a human must remain in the loop. The goal is continuous compliance infrastructure that generat

Location: New York City or San Francisco - 4 days in office About the Role We are looking for a highly technical Senior Security Engineer who thrives on building security capabilities from the ground up. This role is ideal for someone who enjoys solving complex security challenges through engineering, automation, and AI rather than relying solely on commercial tools. You will help build, scale, and continuously evolve the next generation of security capabilities across our cloud-native SaaS platform, with a strong focus on AI security, automation, and scalable security operations. We are looking for engineers who enjoy solving security problems across multiple domains rather than specializing exclusively in a single area. You will join a highly technical Security Engineering team that values innovation, ownership, and building scalable security solutions. This is a hands-on engineering role for builders, innovators, and problem-solvers who want to create security solutions that operate at scale. What You’ll Do Security Engineering Design, build, and maintain security platforms, services, APIs, automation, and internal tooling. Develop solutions that streamline Cloud vulnerability management, Network Security, Detection engineering, Incident response, access governance, and security operations. Use software engineering principles to build detections-as-code, security workflows, internal platforms, and scalable security services that enable the organization to move faster while remaining secure. Leverage AI extensively to accelerate investigations, automate workflows, improve decision making, and reduce operational overhead. AI & LLM Security Design and implement security controls for AI applications, LLM-powered services, agents, and AI development workflows. Build guardrails and security tooling to identify and mitigate risks such as prompt injection, data leakage, model misuse, excessive permissions, insecure plugins, and unsafe AI interacti

Location: New York City or San Francisco - 4 days in office About the Role We are looking for a highly technical Senior Security Engineer who is passionate about protecting data across modern SaaS, cloud, endpoint, and analytics environments. This role is ideal for someone who enjoys solving complex data security challenges through engineering, automation, and AI rather than relying solely on commercial tools. You will help build, scale, and continuously evolve Sigma’s data security capabilities across SaaS applications, cloud platforms, endpoints, collaboration tools, AI systems, and data warehouses. You will be joining a dynamic and highly technical Security Engineering team at Sigma. This is a hands-on engineering role for builders, innovators, and problem-solvers who want to create scalable security solutions that protect the organization's most critical asset - data. What You'll Do Design, build, and maintain security platforms, services, APIs, automation, and internal tooling that protect Sigma's data across cloud, SaaS, endpoint, and analytics environments. Develop scalable solutions for data discovery, classification, governance, access controls, monitoring, and protection using modern engineering practices and automation. Build and mature capabilities around CASB, DLP, DSPM, SSPM, insider risk, and data access governance to reduce the risk of unauthorized access, sharing, or exposure of sensitive information. Build and maintain DLP controls and tooling across multiple cloud, OS environments and decentralized datasets, implementing and tuning prevention capabilities that protect against sophisticated data security incidents. Drive automation across DLP engineering and operations by leveraging LLMs, agentic AI, and an automation-first mindset to streamline workflows, reduce manual effort, and scale data protection coverage. Design and implement security controls across SaaS applications, collaboration platforms, endpoints, and business-critical

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The role As a Staff Enterprise Security Engineer at SoFi, you will serve as the subject matter expert for Data Loss Prevention (DLP) while driving engineering across broader enterprise security domains—including email security, endpoint protection, network defense, and phishing simulation. Sitting within the Enterprise Security team, this role balances technical focus on data protection with hands-on architecture, operation, and automation of foundational IT and corporate security controls. We seek security leaders who combine technical mastery in tool administration (e.g., Zscaler, Proofpoint, Sentra, CrowdStrike) with systems thinking to mitigate risk across diverse threat vectors. In this role, you will define risk mitigation strategies and build clear technical roadmaps—accelerating security delivery while maintaining safety, correctness, and data protection. What you’ll do Lead end-to-end delivery and architecture for enterprise security capabilities: enterprise zero-trust networks, endpoint security, and SaaS posture management. Frame complex security challenges: clarify security requirements, threat models, failure modes, and success metrics while proposing clear architectural options and tradeoffs. Design for scale and resilience: establish secure baseline configurations, automate security gu

Sr. Security Engineer, Corporate Security At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. Lyft connects people to transportation to change the way we live and get around our communities. Lyft’s engineering team is growing rapidly, and we are looking for Security Engineers to help us scale. Come be part of a new team at Lyft focused on enabling and empowering engineering teams to deliver at scale. Our drivers and passengers entrust Lyft with their personal information and travel details to get where they're going and expect us to keep that data safe. Lyft's security team leads efforts across the company to ensure our systems are secure and worthy of our users' trust. The security team designs and builds Lyft's security architecture, consult with other teams as they build and launch new products and features, proactively plans for the unexpected, and responds to incidents that occur. Our work affects the entire company and takes place at all levels of the stack, from infrastructure to web application security, as well as mobile apps, IT, and autonomous vehicles. We try to approach security from a software engineering standpoint. We believe in scaling security through automation and tooling and we ship frequently. Check out our blog posts at https://eng.lyft.com/tagged/security to learn more about some of the things we’ve built. We're looking for an engineer to own the security of the systems Lyft employees rely on every day: identity, endpoints, and the data that moves between them. Corporate Security sits where security meets IT, so the work spans detection engineering, platform operations, and the automation that ties them together. We'd rather write code than file tickets, and we measure ourselves on control coverage and time-to-remediate. If you want real ownership over how security works at company scale, this is that role. Responsibiliti

Location Details: At GoDaddy the future of work looks different for each team. Some teams work in the office full-time, others have a hybrid arrangement (they work remotely some days and in the office some days) and some work entirely remotely. This is a remote position, so you’ll be working remotely from your home. You may occasionally visit a GoDaddy office to meet with your team for events or meetings. This position is not eligible to be performed in Alaska, Mississippi, North Dakota, or the Virgin Islands. GoDaddy is not currently considering candidates for this role in California, Seattle, or NYC. Join Our Team... We are seeking a highly skilled Senior Security Engineer to join our advanced Security Operations team. This role is focused on leading complex incident response and forensic investigations across Windows, macOS, Linux, and AWS environments while helping modernize security operations through automation and AI-driven capabilities. The ideal candidate is a hands-on security expert with deep AWS security expertise, strong threat detection and digital forensic skills, and experience leveraging AI and machine learning technologies to improve detection, response, and operational efficiency. You will play a key role in protecting critical assets, conducting high-impact investigations, mentoring team members, and driving the evolution of our security program against sophisticated and emerging threats. What You'll Get to Do... Lead high-priority incident response and forensic investigations, serving as the primary escalation point for advanced analysis, containment, recovery, root cause determination, and executive-level reporting. Drive threat detection and response across AWS, Windows, macOS, Linux, and endpoint security platforms, leveraging services such as GuardDuty, Security Hub, Detective, CloudTrail, IAM, VPC Flow Logs, and SentinelOne. Conduct malware analysis, host and cloud forensics, evidence collection, and threat hunting activi

Location: Remote (U.S.) Clearance: Ability to obtain and maintain a Public Trust Salary Range: 100K – 120K LTS is seeking a skilled and mission-focused Cyber Security Engineer to support a major modernization initiative within the Department of Veterans Affairs (VA) health portfolio. This role will support cybersecurity engineering, risk management, and security modernization efforts across enterprise healthcare systems and infrastructure environments supporting Veteran healthcare operations nationwide. The ideal candidate will possess strong experience securing complex federal IT systems, supporting cloud and hybrid environments, and implementing cybersecurity solutions aligned with federal compliance frameworks and Zero Trust initiatives. This individual will work closely with infrastructure, application, integration, and DevSecOps teams to ensure modernization efforts are designed and deployed with security at the forefront. What You’ll Do: • Support cybersecurity engineering for the pilot, including cloud security, RMF/ATO support, compliance documentation, and continuous monitoring. • Secure AWS-based environments through identity and access management, encryption, logging, monitoring, network security, vulnerability management, and configuration hardening. • Configure, monitor, and support AWS security services such as AWS Network Firewall, Security Hub, GuardDuty, CloudWatch, CloudTrail, Inspector, and related capabilities. • Support security planning for an AWS Commercial Cloud environment with consideration for future migration to AWS GovCloud or another VA-approved hosting environment. • Assist with ATO planning, control implementation, evidence collection, compliance reporting, and approval workflows. • Work within eMASS, ServiceNow GRC, or similar risk management systems to support ATO artifacts, information assurance tasking, POA&M tracking, and security documentation. • Develop and maintain SSPs, POA&Ms, SOPs, risk assessments, control n

Location Details: Remote, India At GoDaddy the future of work looks different for each team. Some teams work in the office full-time; others have a hybrid arrangement (they work remotely some days and in the office some days) and some work entirely remotely.​ This is a remote position, so you’ll be working remotely from your home. You may occasionally visit a GoDaddy office to meet with your team for events or meetings. Join Our Team... GoDaddy's Network Security Engineering and Operations team is searching for a Network Security Policy Engineer to coordinate the quality of network access rules within our hybrid environment. Do you enjoy unraveling the puzzle of application connectivity, determining what an application genuinely needs and crafting access that supports teams without broadening exposure? You will audit and control policies throughout our security zones in this role. Additionally, you will check connectivity requests against approved models and develop governance automation to expand with our environment! What you'll get to do... Audit firewall, segmentation, and zone-to-zone policy to find overly permissive, unused, shadowed, and drifted rules, and report on zone posture and risk Review connectivity requests from application and platform teams, and partner with them to redesign requests that don't fit approved patterns Write and maintain firewall rules, ACLs, routing, and segmentation changes with strong change-management rigor Manage temporary ACLs and policy exceptions fully, from designated owner and expiry to remediation Build automated checks that catch non-compliant policy before production, and replace manual governance work with repeatable jobs Your experience should include... 3+ years in network engineering, network security, or infrastructure operations supporting a large production environment Hands-on firewall policy experience on an enterprise platform such as Juniper SRX or Palo Alto Networks, including troubleshooting with

Location Details: Remote, India At GoDaddy the future of work looks different for each team. Some teams work in the office full-time; others have a hybrid arrangement (they work remotely some days and in the office some days) and some work entirely remotely.​ This is a remote position, so you’ll be working remotely from your home. You may occasionally visit a GoDaddy office to meet with your team for events or meetings. Join Our Team... GoDaddy's Network Security Engineering and Operations team is looking for a Network Security Automation Engineer to build and run the software that manages network security at scale. Are you equally comfortable reading a firewall rule base and a CI pipeline? In this role you'll own the internal APIs and risk engine behind our network policy management, automate our operational workflows, and find the problems nobody has filed a ticket for! Because this tooling holds privileged access to the network, the role requires real security judgment, not just software skills. What you'll get to do... Own and extend the internal APIs and services that drive network security policy management, including our risk calculation engine Automate operational workflows from request intake and validation through change execution, evidence capture and reporting Write, test and maintain production code, partnering with our SRE team on deployment, monitoring and release Integrate with firewalls, segmentation platforms, asset sources, ticketing and network detection tooling through their APIs Help stand up network detection and response capability and automate detection validation across NDR, IDS and IPS Your experience should include... 3+ years in network security, network engineering, infrastructure automation or a platform/tooling role, with tools and services you've built and shipped Strong Python proficiency, with tested, maintainable production code. Demonstrated network security depth: firewall policy, segmentation, ACLs and routing acro

Location Details: India, Remote At GoDaddy the future of work looks different for each team. Some teams work in the office full-time; others have a hybrid arrangement (they work remotely some days and in the office some days) and some work entirely remotely.​ This is a remote position, so you’ll be working remotely from your home. You may occasionally visit a GoDaddy office to meet with your team for events or meetings. Join Our Team The Network Security team is responsible for securing GoDaddy's global hybrid infrastructure across data centres, cloud, edge, and remote-access environments. We partner across Security, Infrastructure, Cloud, and Engineering teams to build scalable, resilient, and secure solutions that support the business. As a Principal Network Security Engineer, you'll act as a senior technical leader, helping define network security strategy, influence architecture across teams, and drive security outcomes at enterprise scale through technical expertise, systems thinking, and cross-functional leadership. What you'll get to do... Define and drive network security architecture across hybrid environments, including data centres, cloud, edge, and remote-access technologies Design trust boundaries, segmentation strategies, secure connectivity patterns, and network controls that reduce risk and improve security posture Lead complex technical initiatives, migrations, and architectural decisions while balancing security, reliability, performance, and operational requirements Establish scalable approaches for policy governance, automation, monitoring, telemetry, and security control validation Partner across engineering organizations to drive large-scale initiatives, mentor engineers, and influence technical direction through architecture reviews and technical leadership Your experience should include... 10+ years of experience in Network Security Engineering, Network Architecture, or Security Engineering, including ownership of enterprise-scale secu