It Systems And Security Engineer Jobs

As a DevOps Engineer (GCP) at Particle41, you will play a crucial role in enhancing our software development and IT operations processes. The ideal candidate will have a strong background in both software development and IT operations, with a focus on automating and streamlining processes to achieve efficient and reliable software delivery for our customers. You will work closely with development and operations teams of our customers to build, deploy, and maintain critical systems, ensuring the reliability and scalability of the customers' infrastructure. Responsibilities: Collaboration and Communication: Work closely with software developers, system administrators, and other stakeholders to understand the requirements and objectives of projects. Collaborate on the design, implementation, and maintenance of continuous integration and delivery pipelines. Create and maintain comprehensive documentation for systems, processes, and configurations. Automation and Tooling: Design, implement, and manage automation processes for software build, deployment, and configuration. Evaluate, select, and implement tools and technologies to enhance the efficiency of the development and deployment processes. Infrastructure Management: Manage and maintain GCP infrastructure to ensure scalability, reliability, and security. Implement infrastructure as code (IaC) using tools such as Terraform, Deployment Manager, and others. Establish and maintain CI/CD pipelines to automate the software delivery process, including build, test, and deployment phases. Monitoring and Performance: Develop and implement monitoring solutions using Cloud Monitoring and Cloud Logging to ensure the health and performance of systems and applications. Proactively identify and address issues related to system performance, reliability, and scalability. Security and Compliance: Implement and maintain security best practices in infrastruct

About Eudia: Eudia is redefining the future of legal work with AI-powered Augmented Intelligence, enabling Fortune 500 legal teams to move faster, manage risk more effectively, and unlock new business value. Backed by $105M in Series A funding led by General Catalyst, we’re building a category-defining platform that blends AI-driven automation with human expertise, transforming legal from a cost center into a strategic growth driver. At Eudia, we move fast. Unlike traditional enterprise software, our teams ship solutions in days, not months—delivering real impact for some of the world’s largest companies, including Cargill, Coherent, DHL, and Duracell. We’re solving one of the most complex, unsolved challenges in AI: bringing trust, accuracy, and security to legal automation. We’re a team of builders, operators, and problem-solvers who are passionate about reshaping an industry that has long been resistant to change. If you’re looking for a place where you’ll be challenged, take ownership from day one, and work alongside some of the brightest minds in AI and legal —we’d love to meet you. The Role We are hiring a Security GRC Engineer to build and scale the technical backbone of our security and compliance program. This is not a traditional compliance seat. You will take a control requirement, trace it into the system that implements it, work with Engineering to get it right, and automate the evidence that proves it works. You will operate across SOC 2, ISO 27001, HIPAA, and AI governance, and you will partner with our ISSM on public-sector and FedRAMP-related work rather than owning it. You will own real systems and processes, not just documents, and you will have real room to decide how the program gets built. We are small and lean, so we value a bias to action. A working control that ships beats a perfect policy that does not. What You’ll Do Translate requirements from SOC 2, ISO 27001, HIPAA, and customer security assessments into

At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. The InfoSec team protects Affirm’s systems and data from evolving threats. We manage security risk, monitor vulnerabilities, and enforce protective controls across the company. The team leads incident response, compliance, identity and access management, and employee training. Our goal is to ensure that security is built into every system and decision at Affirm. We maintain a secure, trustworthy environment so the business can operate and grow with confidence. In this role, you'll build and run Affirm's end-to-end security review process for enterprise AI/LLM systems evaluating architecture, prioritizing AI-specific risks, and designing the controls and guardrails that let Affirm adopt AI safely, partnering across Security, Legal, Privacy, Compliance, IT, and Engineering to make it scalable and repeatable. What you’ll do You will lead and continuously improve Affirm's enterprise AI security review process evaluating the architecture, data flows, permissions, and design of internal AI tools, agentic/MCP-based systems, and AI features — and embed security requirements into the design phase. You will threat model AI/LLM-based systems and their data flows for risks such as prompt injection, insecure output handling, excessive agency, tool-permission abuse, data poisoning, and sensitive-data exposure, and drive remediation. You will review source code, system prompts, agent configurations, and tool/permission manifests (e.g., MCP definitions), and help tool owners build security-focused test cases and red-team/eval scenarios to verify requirements before launch. You will design and build security guardrails and tooling for AI systems permission boundaries, authn/authz for agentic tools and MCP servers, data-handling controls, logging/monitoring, and policy-as-code (Python, IaC) — to enforc

At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. The InfoSec team protects Affirm’s systems and data from evolving threats. We manage security risk, monitor vulnerabilities, and enforce protective controls across the company. The team leads incident response, compliance, identity and access management, and employee training. Our goal is to ensure that security is built into every system and decision at Affirm. We maintain a secure, trustworthy environment so the business can operate and grow with confidence. In this role, you'll build and run Affirm's end-to-end security review process for enterprise AI/LLM systems evaluating architecture, prioritizing AI-specific risks, and designing the controls and guardrails that let Affirm adopt AI safely, partnering across Security, Legal, Privacy, Compliance, IT, and Engineering to make it scalable and repeatable. What you’ll do You will lead and continuously improve Affirm's enterprise AI security review process evaluating the architecture, data flows, permissions, and design of internal AI tools, agentic/MCP-based systems, and AI features — and embed security requirements into the design phase. You will threat model AI/LLM-based systems and their data flows for risks such as prompt injection, insecure output handling, excessive agency, tool-permission abuse, data poisoning, and sensitive-data exposure, and drive remediation. You will review source code, system prompts, agent configurations, and tool/permission manifests (e.g., MCP definitions), and help tool owners build security-focused test cases and red-team/eval scenarios to verify requirements before launch. You will design and build security guardrails and tooling for AI systems permission boundaries, authn/authz for agentic tools and MCP servers, data-handling controls, logging/monitoring, and policy-as-code (Python, IaC) — to enforc

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As an Insider Threat Detection Engineer, you are responsible for protecting Palantir's people, data, and most sensitive assets across the globe. Your technical expertise is matched by your integrity and genuine passion for security. You work well on a team, are highly motivated, and thrive on solving problems and taking on new challenges. Your team serves as a critical line of defense, responsible for the 24/7 prevention, detection, and investigation of security events and active threats across Palantir's environment. This role focuses on all aspects of Detection and Response with a strong emphasis on identifying and mitigating insider risks. Your work will directly impact the success of Palantir's mission by making it difficult for adversaries — both external and internal — to compromise our global network. Core Responsibilities Engineer and automate end-to-end detection and investigation workflows, continuously improving Detection and Response infrastructure Develop alerting and detection strategies to identify malicious or anomalous behavior, including new and novel defensive techniques that adapt to evolving adversary tactics and tradecraft Dissect network, host, memory, and other artifacts originating from multiple operating systems and applications. Investigate security events and active attacks across the enterprise, uncovering sophisticated threats and identifying patterns of behavior that indicate insider risk Influence and inform security controls designed to safeguard Palantir's most critical assets Partner closely with other members of the Information Security team to lead changes in the company

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As an Insider Threat Detection Engineer, you are responsible for protecting Palantir's people, data, and most sensitive assets across the globe. Your technical expertise is matched by your integrity and genuine passion for security. You work well on a team, are highly motivated, and thrive on solving problems and taking on new challenges. Your team serves as a critical line of defense, responsible for the 24/7 prevention, detection, and investigation of security events and active threats across Palantir's environment. This role focuses on all aspects of Detection and Response with a strong emphasis on identifying and mitigating insider risks. Your work will directly impact the success of Palantir's mission by making it difficult for adversaries — both external and internal — to compromise our global network. Core Responsibilities Engineer and automate end-to-end detection and investigation workflows, continuously improving Detection and Response infrastructure Develop alerting and detection strategies to identify malicious or anomalous behavior, including new and novel defensive techniques that adapt to evolving adversary tactics and tradecraft Dissect network, host, memory, and other artifacts originating from multiple operating systems and applications. Investigate security events and active attacks across the enterprise, uncovering sophisticated threats and identifying patterns of behavior that indicate insider risk Influence and inform security controls designed to safeguard Palantir's most critical assets Partner closely with other members of the Information Security team to lead changes in the company

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As an Information Security Engineer, you are responsible for the security of Palantir’s people and infrastructure around the globe. Your technical expertise is second only to your integrity and real passion for security and technology in general. Our ideal candidate works well on a team, is highly motivated, and enjoys solving problems and taking on new challenges. In this role, you’ll be the first line of defense for protecting Palantir. Your team is responsible for the 24/7 prevention, detection, and investigation of security events and active attacks across our entire infrastructure. Your work will directly impact the success of Palantir's mission as you seek to make it challenging for our adversaries and protect our global network. Core Responsibilities Build, run, and own infrastructure and automation to detect, contain, and eradicate security threats. Develop alerting and detection strategies to identify malicious or anomalous behavior. Develop new and novel defensive techniques to identify or counteract changes in adversary techniques and tactics. Dissect network, host, memory, and other artifacts originating from multiple operating systems and applications. Investigate enterprise-wide operations to uncover sophisticated and undetected threats. Partner closely with other members of the Information Security team to lead changes in the company's network defense posture. What We Value Broad exposure to multiple security subject areas, including a strong background in forensics or threat intelligence. Deep exposure in Incident Response or Detection Engineering. Desire to furt

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As an Information Security Engineer, you are responsible for the security of Palantir’s people and infrastructure around the globe. Your technical expertise is second only to your integrity and real passion for security and technology in general. Our ideal candidate works well on a team, is highly motivated, and enjoys solving problems and taking on new challenges. In this role, you’ll be the first line of defense for protecting Palantir. Your team is responsible for the 24/7 prevention, detection, and investigation of security events and active attacks across our entire infrastructure. Your work will directly impact the success of Palantir's mission as you seek to make it challenging for our adversaries and protect our global network. Core Responsibilities Build, run, and own infrastructure and automation to detect, contain, and eradicate security threats. Develop alerting and detection strategies to identify malicious or anomalous behavior. Develop new and novel defensive techniques to identify or counteract changes in adversary techniques and tactics. Dissect network, host, memory, and other artifacts originating from multiple operating systems and applications. Investigate enterprise-wide operations to uncover sophisticated and undetected threats. Partner closely with other members of the Information Security team to lead changes in the company's network defense posture. What We Value Broad exposure to multiple security subject areas, including a strong background in forensics or threat intelligence. Deep exposure in Incident Response or Detection Engineering. Desire to furt

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. The Role As an Information Security Engineer, you are responsible for the security of Palantir’s people and infrastructure around the globe. Your technical expertise is second only to your integrity and real passion for security and technology in general. Our ideal candidate works well on a team, is highly motivated, and enjoys solving problems and taking on new challenges. In this role, you’ll be the first line of defense for protecting Palantir. Your team is responsible for the 24/7 prevention, detection, and investigation of security events and active attacks across our entire infrastructure. Your work will directly impact the success of Palantir's mission as you seek to make it challenging for our adversaries and protect our global network. Core Responsibilities Build, run, and own infrastructure and automation to detect, contain, and eradicate security threats. Develop alerting and detection strategies to identify malicious or anomalous behavior. Develop new and novel defensive techniques to identify or counteract changes in adversary techniques and tactics. Dissect network, host, memory, and other artifacts originating from multiple operating systems and applications. Investigate enterprise-wide operations to uncover sophisticated and undetected threats. Partner closely with other members of the Information Security team to lead changes in the company's network defense posture. What We Value Broad exposure to multiple security subject areas, including a strong background in forensics or threat intelligence. Deep exposure in Incident Response or Detection Engineering. Desire to furt

CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 43 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences. We are seeking a Senior Product Security Engineer to serve as a technical leader and strategic contributor within our Product Security team. This role goes beyond execution — you will drive the evolution of CLEAR’s application security posture by influencing architecture, shaping security engineering processes, and mentoring team members in security and engineering. You’ll lead security initiatives across the organization and help embed security into every stage of our software development lifecycle. What you'll do: Drive security strategy and implementation across all CLEAR products and engineering teams, ensuring consistent protection of customer and business-critical assets. Partner with engineering leadership to align application security initiatives with company-wide technology and product roadmaps, balancing innovation with risk mitigation. Provide technical leadership across CLEAR’s application security initiatives, guiding architecture, design, and development to meet high security standards. Serve as a trusted advisor to cross-functional teams — including Engineering, DevOps, Product, GRC, and IT — enabling secure-by-design practices across the organization. Design and drive implementation of scalable automated security controls and testing frameworks integrated into CLEAR’s CI/CD pipelines. Lead complex threat modeling, architecture reviews, and risk assessments across high-value systems and platforms, driving meaningful security outcomes. Engage with CLEAR's customers to provide insight and support their fraud and ident

About Ramp Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $200B in annualized spend flows in and out of 70,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. As Ramp’s founding Privacy engineer, you will build a privacy program that powers Ramp’s growth while earning trust from customers and prospects. What You’ll Do Build privacy-focused application primitives and integrate them into our existing products Partner with other engineering teams to design and deploy solutions which are inherently privacy-centric and secure Improve, implement, and deploy data retention and anonymization strategies across our environment Track shifting legal standards (alongside with Ramp’s Privacy Counsel) and update Ramp systems and processes to match What You Need Minimum of 4 years of experience building software Minimum of 2 years of experienced focused on platform, privacy, and/or security Desire to work in a fast-paced environment, continuously grow, and master your craft Ability to turn business and product ideas into engineering solutions Nice-to-Haves Working knowledge of data-protection legal requirements Experience with Python (Flask), React, and AWS (ECS, as well as other core services) Benefits available to all

U.S. Person status required, as defined by ITAR (22 CFR 120.15). Active DoD Secret clearance required (minimum); Top Secret eligibility required. About the Role Systems Technology, Inc. (STI) is seeking a Facility Security Officer / IT Security Administrator to serve as the company's designated FSO of record and to manage the classified IT systems that support our NISPOM-governed defense programs. This is a hands-on, dual-hatted role at a growing facility — you'll run day-to-day industrial security operations (classified document control, personnel security, foreign visit processing) while also owning the security posture of the IT systems and networks that touch controlled and classified information. What You'll Do Security Operations & Program Execution Serve as STI's Facility Security Officer of record, executing daily collateral security operations under NISPOM (32 CFR Part 117) Maintain classified document control, accountability, and safeguarding procedures Support classified facility operations and any Restricted Areas Personnel Security & Onboarding Process personnel security clearance requests and maintain records in DISS/NISS Facilitate new hire security onboarding and deliver initial and annual security training/briefings Foreign Visits & External Engagements Process, disclose, and host foreign visits in accordance with NISPOM Coordinate with program and engineering teams to ensure compliant execution of visits and classified meetings Technology Control & IT Security Own and administer Technology Control Plans (TCPs) and ITAR/EAR compliance controls for controlled technical data Manage security configuration, access control, and monitoring for IT systems handling classified or export-controlled information Serve as (or support) the Information System Security Officer/Manager (ISSO/ISSM) function for accredited classified IT systems Administer user accounts, permissions, and audit logging on classified and controlled networks in coor

Role Description: We are seeking a Senior Technical Implementation Engineer to join Commercial Cyber Operations. This person will lead hands-on technical work across varied customer environments. Compliance Leads will own NIST SP 800-171 interpretation and assessment readiness; this engineer will design, implement, and validate the systems that support those requirements. Responsibilities: The listed responsibilities are not exhaustive and additional responsibilities may be assigned based on the evolving needs of the organization. We are seeking a dynamic individual who is able to adapt and take on new responsibilities as they arise. Assess unfamiliar customer environments and lead technical implementation plans with the Compliance Lead. Configure and secure Microsoft 365, GCC High, Azure, Entra ID, Active Directory, Google Workspace, Google Cloud Identity, and hybrid environments. Design, migrate, and operate endpoint-management programs across multiple mobile device management and unified endpoint management platforms, including Jamf and Microsoft Intune. Implement identity, multifactor authentication, least privilege, endpoint security, logging, vulnerability management, patching, backup, and recovery controls. Configure and troubleshoot Windows, macOS, iOS, Android, networks, firewalls, VPNs, segmentation, DNS, and secure remote access. Work directly with customer IT teams, service providers, and vendors to resolve complex technical issues. Validate completed work and produce clear configuration records, diagrams, evidence, and runbooks. Guide other implementation engineers and turn repeatable work into standards, scripts, and automation. Minimum Experience and Qualifications: Senior-level experience designing, administering, securing, and troubleshooting varied business IT environments. Strong hands-on experience with both Microsoft and Google environments, including Microsoft 365, Entra ID, Active Directory, and Google Workspace. Broad mobile device management

The IT Systems Engineering team builds the systems and processes that keep Asana running: endpoint management, identity, and the enterprise applications every Asana employee uses every day. As Manager of IT Applications and Client Platform Engineering, you’ll lead four engineers: two on client platform, two on applications. You report directly to the Head of IT Systems Engineering. This is a player/coach role: you set direction, run planning, and step in on escalations and architecture decisions while your engineers own most of the day-to-day. Your primary depth is in endpoint engineering; you have enough SaaS administration background to lead the apps side without micromanaging it. We’re looking for someone who knows endpoint work deeply and is ready to grow as a manager. Your title history matters less than technical foundation and how you work with people. This role is based in our San Francisco office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you’re interviewing for this role, your recruiter will share more about the in-office requirements. What you’ll achieve Lead and develop your team. Manage and mentor four engineers (two on CPE, two on Apps). Set priorities, clear blockers, and help each person grow. Own the client platform program. Set strategy and lead execution for Asana’s endpoint fleet: macOS, Windows, and mobile. This means MDM infrastructure, zero-touch deployment, software catalog, and OS lifecycle. We’re primarily an Apple shop with a growing Windows footprint. Strengthen endpoint security. Work with the Corporate Security team to harden our endpoint posture, respond to incidents, and build initiatives that connect security priorities and endpoints. Oversee the applications engineering function. Your Apps engineers manage the

About Us: AI needs a new infrastructure layer. We're building it at Modal. Every era of computing brought new workloads that previous infrastructure couldn't support: mainframes, databases, and the cloud. Each time, the company that rebuilt the layer underneath defined the decade. AI is no different, except it touches everything instead of one slice, and the window to build the layer underneath it is open right now. Our customers include category-defining companies like Ramp , Cognition, DoorDash, and Suno. They rely on Modal for instant GPU access, sub-second container starts, and native storage, so it's simple to serve low-latency inference, fine-tune models, and access production-ready sandboxes at scale. We've passed $1B in annualized run rate, up 15x from a year ago. In October 2026 we raised a $750M Series D led by Accel at a $15.75B valuation. Our team includes creators of popular open-source projects (e.g., Seaborn , Luigi ), academic researchers, international olympiad medalists, and experienced engineering and product leaders with decades of experience. The Role: We're looking for a Detection & Response Engineer to build the systems that help us identify, investigate, and respond to threats across our platform. This is an engineering role focused on automation. You'll build detections, investigation tooling, and response capabilities that scale with our infrastructure, using AI where it meaningfully improves signal, investigation speed, and operational effectiveness. You'll work closely with infrastructure, platform, and security engineers to ensure every incident makes the platform more resilient. What You'll Work On: Detection Engineering Design and build high-fidelity detections for attacks, abuse, and anomalous behavior across our infrastructure and production systems Continuously improve detections based on telemetry, threat intelligence, and lessons learned from incidents Improve visibility across cloud infrastructure, containers, identity system