Principal Security And Compliance Analyst Jobs

Drata is building the trust layer between great companies - automating compliance, managing risk, and helping organizations prove trust continuously as they scale. We're Dratanauts: a global crew of 600+ professionals united by a culture that rewards integrity, ownership, and raising the bar, no matter where in the world we're working from. Why Join the Drata Team? At Drata, you're not maintaining legacy compliance software - you're building the agentic AI platform defining what trust looks like for the next generation of companies. Here's what makes the work itself worth showing up for: Problems without a playbook: You'll work at the edge of AI and security, building agentic governance, continuous compliance, and real-time trust verification to solve problems that don't have an established answer yet. You're writing it as you go. Real ownership, not just process: Our values center on owning outcomes and raising the bar, not checking boxes. You're expected to have opinions and back them. A seat at the table: Your perspective is unique and valued. Open debate and diverse viewpoints are built into how decisions actually get made here, at every level. Growth at rocketship speed: Drata is scaling fast, which means scope grows fast too. High performers get more ownership, visibility, and experience. A crew, not just coworkers: Dratanauts consistently describe a "come as you are" culture with sharp, curious people—the kind of team that makes hard problems genuinely fun to solve. See what they say here and follow us on LinkedIn for company news, employee stories, and career updates. Job Summary: We’re looking for a Principal Product Manager, Agentic AI Platform to lead Drata’s Agentic AI strategy and execution. In this role, you will own a multi-year AI vision that spans product lines and influences company-level strategy, building AI-native experiences that help customers get real GRC work done—not just chat with their data. You’ll sit in the AI Pillar , working across Pr

Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. About the Opportunity We are looking for a Principal AI Engineer to lead the architecture and deployment of large-scale, LLM-powered conversational Chatbot systems serving both enterprise and consumer use cases. This is a hands-on technical role focused on building intelligent, autonomous chatbot systems operating in real-time crypto environments. You will define the technical vision and own end-to-end delivery of production-grade conversational AI platforms. What You’ll Be Doing Lead the design, development, and lifecycle management for conversational Chatbots products for enterprise and consumer use cases. Drive experimentation, simulations, and continuous learning pipelines for Chatbot performance optimization. Design multi-level intent routing, classifier training, and fallback strategies. Building dialogue quality evaluation systems. Drive automated bad-case discovery, A/B testing, and continuous iteration loops. Ensure system scalability, security, and regulatory compliance of AI-powered solutions in the crypto exchange domain. What We Look For In You PhD or Master's in Computer Science, AI, Machine Learning, or related field with at least 10 years of industry experience . Deep understanding

Strength in Trust OneTrust’s mission is to enable innovation through the responsible use of data and AI. We believe that ensuring data is trusted shouldn’t slow teams down—it should accelerate what’s possible. This led us to develop the first technology platform for responsible data use in 2016. Today, with AI representing the latest and most impactful expansion of data yet, OneTrust is once again redefining what responsible innovation looks like. OneTrust, the AI‑Ready Governance Platform™, unifies regulatory intelligence, automation, and connected governance workflows so businesses can continue to move at the speed of AI while ensuring good governance to prevent data misuse at scale. Trusted by thousands of organizations worldwide, OneTrust is shaping the future where trusted data becomes a transformative force for business and society. Principal PM AI Governance - Runtime Governance About OneTrust OneTrust helps organizations operationalize trust through privacy, security, data governance, and responsible technology adoption. As AI governance becomes a board-level and regulatory priority, customers increasingly need structured ways to understand AI systems, assess risk, monitor behavior, and demonstrate compliance over time. The Challenge We are looking for a Principal PM to help shape the future of our AI Governance product with a specific focus on observability and enforcement across AI systems. This role is for a product manager who can connect strategy, execution, and technical depth to help us build the right platform capabilities for the next generation of governed AI. You will help run squad activities and drive clarity across product, engineering, design, and go-to-market stakeholders to ensure we are building capabilities that are durable, differentiated, and ready for where AI governance is heading next. The ideal candidate brings a strong product mindset along with a background in cybersecurity, SIEM and

InfraSec operates on a preventative, enabling model: rather than acting as a manual approval gatekeeper or compliance auditor, we develop automated guardrails and platform capabilities. We integrate security directly into the platform runtime, CI/CD, and Infrastructure-as-Code (IaC) workflows so engineering teams can operate securely at scale without friction. This role can be based out of our office or remotely in the United States. What You’ll Do Harden hosts and containerized workloads using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon) Secure containerized infrastructure across multi-cloud environments via RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection Build and manage automated services for Cloud Security Posture Management (CSPM), workload identity, vulnerability management, and access controls across AWS, Azure, and GCP Write production-quality code and leverage Infrastructure-as-Code (Terraform) to version, test, and deploy security controls as code Build real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture at Atlas scale Lead initiatives across their full lifecycle; from threat modeling and architectural design to implementation, rollout, and long-term production reliability What We’re Looking For Minimum Qualifications: 10+ years in SRE, Infrastructure Engineering, or Cloud Security Engineering A track record of operating at Staff or Principal scope: defining technical direction, resolving cross-team ambiguity, and personally championing initiatives from conception to delivery Strong coding skills in Go (Golang), Python, C, C++, or Rust Proven track record of building and operating large-scale distributed systems or cloud platform infrastructure Hands-on experience using Terraform, CloudFormation, or Ansible for automated infrastructure provisioning Demonstrated experience owning infrastructure in Linux,

Location Details: United States, Remote At GoDaddy the future of work looks different for each team. Some teams work in the office full-time; others have a hybrid arrangement (they work remotely some days and in the office some days) and some work entirely remotely. This is a remote position, so you’ll be working remotely from your home. You may occasionally visit a GoDaddy office to meet with your team for events or meetings. This position is not eligible to be performed in Alaska, Mississippi, North Dakota, or the Virgin Islands. Join our team At GoDaddy, we are seeking an exceptional Principal Compliance Engineer - PKI with deep technical expertise to define requirements and guide the evolution of our Certificate Authority (CA) platform. Reporting to GoDaddy's Vice President Engineering Partners, you will translate industry standards into technical requirements, define specifications for compliance automation, and provide technical guidance for next-generation cryptographic systems. This role combines technical leadership with strategic requirements development, focusing on post-quantum cryptography readiness, certificate lifecycle automation, and CA infrastructure resilience. What you'll get to do... Technical Standards & Requirements Leadership Actively participate in standards bodies such as the IETF, representing GoDaddy in working groups for TLS and related SSL standards CA Infrastructure & Systems Requirements Conduct deep-dive technical assessments of CA infrastructure, identifying architectural gaps, security vulnerabilities, and performance bottlenecks Define technical requirements for the evolution of certificate issuance pipelines, HSM integrations, and cryptographic key management systems Specify requirements for automated testing frameworks for compliance validation, including CT

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. The Technical Program Management Team The Engineering Technical Program Management Team’s mission is to enable Okta to deliver on key strategic goals by bringing groups together across Engineering, Security, Legal, Compliance, Product Management, and Customer Support. Engineering TPMs drive prioritization, planning, execution, and ensure transparency while managing success criteria. The Principal Technical Program Manager, Engineering Opportunity As a Principal Technical Program Manager in the Engineering TPM Team, you will partner with various groups across Okta to build and deliver key Engineering initiatives. You will be the point person for clarifying strategic level goals and outlining the execution plans to achieve them. You will work within and across teams to prioritize and execute on key objectives. Employing both a strategic and tactical approach is a requirement in this role. You will not only have strong TPM experience, but also experience implementing complex efforts within Engineering or Infrastructure in a SaaS and agile environment. *This position requires the ability to access Impact Level 4 & 5 (IL4 and IL5) data, as defined by the Department of Defense (DoD) Cloud Computing Security Requirements Guide. As a condition of employment for this position, the successful candidate must be able to submit documentation establishing U.S. Person status (e.g. a U.S. Citizen, National, Lawful Permane

OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visa. Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About the Opportunity We are seeking a Principal Engineer with a deep expertise in autonomous AI agent architecture and deployment, to spearhead the design, development, and optimization of intelligent agent systems on our global crypto exchange platform. This is a senior role requiring a hands-on AI science background combined with strategic oversight, technical direction, and cross-functional collaboration. You will work at the cutting edge of AI and crypto, designing AI agents that can autonomously reason, act, and evolve in complex, real-time environments such as trading, security, compliance, and customer interaction. What You’ll Be Doing Lead the design, development, and lifecycle management of autonomous AI agents tailored to crypto exchange operations (e.g., customer assistant, trading bots, risk detection agents, fraud prevention agents, etc.). Architect multi-agent systems (MAS) and frameworks to support goal-directed, reasoning, planning, and reinforcement-lear

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary CVS Health is seeking a Principal Software Engineer to lead the design and delivery of enterprise-scale Generative AI solutions that power next-generation healthcare experiences. This role goes beyond hands-on coding—you will define technical strategy, establish architectural standards, and guide multiple teams in building secure, scalable, and cost-effective AI platforms across AWS (Bedrock) and Google Cloud (Vertex AI API). You will partner with product, security, compliance, and enterprise architecture teams to ensure solutions meet business objectives, regulatory requirements, and performance goals. The ideal candidate combines deep technical expertise with leadership skills—capable of influencing cross-org architecture decisions, mentoring engineering teams, and driving responsible AI practices in production. Key Responsibilities Lead end-to-end platform delivery of highly scalable, secure AI services and applications leveraging AWS Bedrock (Foundation Models, Knowledge Bases, Agents, Guardrails) and Google Cloud Vertex AI (Gemini via Vertex AI API, Agent Builder, Vector Search, Search & Grounding) Architect and implement Retrieval-Augmented Generation (RAG) solutions, integrating proprietary data from sources like Amazon S3 and Google Cloud Storage/BigQuery, and using Bedrock Knowledge Bases and/or Vertex AI Search & Groundi

Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. About the Opportunity We are seeking a Principal Engineer with a deep expertise in autonomous AI agent architecture and deployment, to spearhead the design, development, and optimization of intelligent agent systems on our global crypto exchange platform. This is a senior role requiring a hands-on AI science background combined with strategic oversight, technical direction, and cross-functional collaboration. You will work at the cutting edge of AI and crypto, designing AI agents that can autonomously reason, act, and evolve in complex, real-time environments such as trading, security, compliance, and customer interaction. What You’ll Be Doing Lead the design, development, and lifecycle management of autonomous AI agents tailored to crypto exchange operations (e.g., customer assistant, trading bots, risk detection agents, fraud prevention agents, etc.). Architect multi-agent systems (MAS) and frameworks to support goal-directed, reasoning, planning, and reinforcement-learning-based agents. Collaborate with product, engineering, business, and operation teams to define agent roles and measurable KPIs. Drive experimentation, simulations, and continuous learning pipelines for agent performance optimization. Stay ahead of the curve

OUR MISSION At Redwood, we empower our customers with lights-out automation for their mission-critical business processes. ABOUT US Redwood Software is the leader in full stack automation fabric solutions for mission-critical business processes. With the first SaaS-based composable automation platform specifically built for ERP, we believe in the transformative power of automation. Our unparalleled solutions empower you to orchestrate, manage and monitor your workflows across any application, service or server — in the cloud or on premises — with confidence and control. CORE VALUES One Team. One Redwood Make Your Own Weather Obsess over Customer Success Work the Problem Be Curious Own the Outcome Respect Each Other YOUR IMPACT We are looking for a Principal Engineer, Products & Platforms to join our Product engineering team to provide technical leadership across Redwood’s Workload Automation Platform, defining architecture, driving modernization, and influencing engineering strategy across multiple teams. You will be instrumental in the design, development, and enhancement of our platform, building high-quality, scalable, and secure software that powers enterprise data exchange for more than 1,000 customers worldwide. As a Principal Engineer, you will: Technical Leadership & Architecture: Define the path forward for complex engineering problems, establish best practices, lead design review and technology decisions, and mentor the team to excel, while driving the architecture, security, compliance, and observability of our Java/Spring Boot microservices. Platform and Infrastructure Ownership: Drive the deep understanding, architecture, and evolution of our core platform and infrastructure, focusing on resilience, communication between components, and scalability. Cross-Team Collaboration: Facilitate and drive cross-team collaboration with Product, QA, and other engineering groups to ensure end-to-end alignment and successful product deliv

Senior Product Manager, Identity Resilience Location: Bangalore About the Team The Identity Resilience team is Rubrik's fastest-growing business line, laser-focused on solving the most critical identity security challenges facing enterprises today. We operate as an entrepreneurial, "0-to-1" portfolio within Rubrik. As a product organization, we empower PMs to be central leaders who own the entire lifecycle - from board-level strategic vision to deep technical execution. On this team, you won’t just manage a backlog; you will be in the room with Fortune 500 CISOs, guiding engineering through complex architectural trade-offs, and architecting the macro go-to-market strategy. About the Role As a Senior Product Manager for Identity Resilience , you will be the strategic anchor and execution engine for Rubrik's Identity Protection portfolio. You will define how enterprises secure, audit, and rapidly recover their crown-jewel identity infrastructure (e.g., Active Directory, Entra ID, Okta, Ping, etc). This is a high-visibility, high-leverage role. You will partner deeply with Engineering, Design, and Go-To-Market (GTM) leadership to transform a rapidly evolving domain into a market-leading, multi-million dollar business line. Key Responsibilities Product Strategy & Vision: Own and evolve the multi-year product roadmap for enterprise identity protection, aligning technical capability with Rubrik's broader data security platform. 0-to-1 Execution: Lead the definition, design, and launch of next-generation features for workforce and customer identity platforms, driving products from early discovery to mainstream market adoption. Technical Leadership: Partner with Principal Engineers and Architects to navigate complex technical trade-offs in scale, security, and cloud/on-prem hybrid topologies. Customer & Market Discovery: Act as a trusted advisor to enterprise CISOs and IT executives, distilling complex customer pain points, compliance frameworks, and active threat v

OUR MISSION At Redwood, we empower our customers with lights-out automation for their mission-critical business processes. ABOUT US Redwood Software is the leader in full stack automation fabric solutions for mission-critical business processes. With the first SaaS-based composable automation platform specifically built for ERP, we believe in the transformative power of automation. Our unparalleled solutions empower you to orchestrate, manage and monitor your workflows across any application, service or server — in the cloud or on premises — with confidence and control. CORE VALUES One Team. One Redwood Make Your Own Weather Obsess over Customer Success Work the Problem Be Curious Own the Outcome Respect Each Other YOUR IMPACT We are looking for a Principal Engineer, Products & Platforms to join our Product engineering team to provide technical leadership across Redwood’s Workload Automation Platform, defining architecture, driving modernization, and influencing engineering strategy across multiple teams. You will be instrumental in the design, development, and enhancement of our platform, building high-quality, scalable, and secure software that powers enterprise data exchange for more than 1,000 customers worldwide. As a Principal Engineer, you will: Technical Leadership & Architecture: Define the path forward for complex engineering problems, establish best practices, lead design review and technology decisions, and mentor the team to excel, while driving the architecture, security, compliance, and observability of our Java/Spring Boot microservices. Platform and Infrastructure Ownership: Drive the deep understanding, architecture, and evolution of our core platform and infrastructure, focusing on resilience, communication between components, and scalability. Cross-Team Collaboration: Facilitate and drive cross-team collaboration with Product, QA, and other engineering groups to ensure end-to-end alignment and successful product delivery. AI Integration:

About Us: Paytm is India’s largest digital payments and financial services platform, leading the mobile QR revolution. We power millions of businesses and individuals, and we’re building scalable, resilient systems to serve half a billion Indians and beyond. Here at Paytm, technology isn't just about keeping up, it's about building the future. We believe the next generation of engineers must not only scale systems to billions but also leverage AI and GPT tools to accelerate innovation. Role Overview: We are seeking an experienced Data Protection and Privacy Manager, who will be responsible for overseeing the organization's data protection strategy and ensuring compliance with Indian laws such as the Information Technology Act, 2000, and the Personal Data Protection Bill. The DPPM will work closely with DPO and regulatory authorities to ensure that sensitive data is processed securely and ethically. This role is crucial in safeguarding our digital assets and maintaining compliance with industry standards and law. Key Responsibilities: 1. Legal Compliance: Ensure adherence to data protection laws, including local DPDPA, IT Act and international regulations like GDPR. 2. Policy Development: Formulate and implement data protection policies and guidelines across the organization. 3. Data Classification & Security: Well versed in managing the DSPM, DLP and PET technologies. 4. Data Breach Management: Investigate and report data breaches to relevant authorities within the stipulated timeframe. 5. Training & Awareness: Conduct training sessions for employees on data protection practices and raise awareness about privacy policies. 6. Impact Assessments: Perform Data Protection Impact Assessments (DPIA) to identify risks and recommend mitigation strategies. 7. Grievance Redressal: Act as the point of contact for data principals (individuals) for grievances related to data handling or privacy violations. 8. Recordkeeping: Maintain records of all data processing activities

POSITION SUMMARY Clearwater is seeking a skilled and experienced Senior Microsoft 365 and Azure Cloud Engineer to join our team. The ideal candidate will have a strong background in Microsoft 365 Configuration and Management and significant experience with Azure operational tools such as Entra ID and Intune. As an Engineer, you will play a crucial role in managing and maintaining our client’s M365 and Azure-based infrastructure, ensuring its reliability, security, and scalability. SPECIFIC JOB RESPONSIBILITIES M365 and Azure Client Operations Management: Microsoft Entra ID — day-to-day identity management: Conditional Access policies, SSPR, PIM (Privileged Identity Management), directory sync (Entra Connect / Cloud Sync), B2B/B2C configurations, app registrations, enterprise app management Microsoft Intune — device enrollment (BYOD + corporate), compliance policies, configuration profiles, app deployment, co-management with SCCM if applicable, Autopilot Microsoft Purview — data classification, sensitivity labels, DLP policies, insider risk management, communication compliance, audit log review Exchange Online — mail flow rules, connectors, hybrid config, anti-spam/anti-phishing policies (Defender for Office 365) SharePoint Online & OneDrive — permissions governance, external sharing controls, tenant-level configuration Microsoft Teams — policy management, governance (lifecycle, guest access, DLP integration) Microsoft 365 Defender / Defender XDR — incident response integration, alert triage, threat hunting basics Azure Operation Management: Azure IaaS/PaaS operations — Setup VMs, VNets, NSGs, storage accounts, Key Vault Entra ID integration with Azure resources – Setup RBAC, managed identities, configure service principals Azure Policy and Defender for Cloud – Perform and monitor compliance posture management Hybrid connectivity — Setup ExpressRoute, VPN Gateways, Azure Arc PowerShell / Microsoft Graph API — Enable Automation of both Azure and M365 worklo

A World-Changing Company Palantir builds the world’s leading software for data-driven decisions and operations. By bringing the right data to the people who need it, our platforms empower our partners to develop lifesaving drugs, forecast supply chain disruptions, locate missing children, and more. Core Responsibilities Develop automation and tooling for corporate and customer-facing identity platforms Build, secure, and manage geo-redundant containerized services (EKS and ECS) in AWS and Azure Scale the implementation of Single Sign-On (SSO) integrations across multiple Entra ID tenants using infrastructure-as-code frameworks Build tooling to standardize and scale operational workflows across AWS, Azure, and Google Cloud Platform (GCP) Extend the identity platform to non-human identities, treating workloads and AI agents as first-class principals with scoped, short-lived credentials Build the governance layer: an access graph that makes entitlements legible and a policy engine that makes authorization decisions enforceable and auditable Design token-issuance and federation flows that make least-privilege, ephemeral access the default Research and drive adoption of emerging authentication and session security standards (such as device-bound session credentials and continuous access evaluation) in collaboration with Security Engineers Pressure-test designs and partner with Identity Security Engineers to threat model implementations before they ship Partner with Security Compliance Engineers to build services that reduce the cost and complexity of compliance enforcement What We Value Technical proficiency in identity protocols (SAML, OIDC, OAuth 2.0, LDAP, Kerberos, FIDO2, WebAuthn) Experience managing identities and governance workflows on platforms such as Entra ID, Keycloak, AWS Cognito, or Okta Experience with policy engines and