Principal Security And Compliance Analyst Jobs

About Decagon Decagon is the leading conversational AI platform empowering every brand to deliver concierge customer experiences. Our technology enables industry-defining enterprises like Avis Budget Group, Block’s Cash App and Square, Chime, Oura Health, and Hunter Douglas to deploy AI agents that power personalized, deeply satisfying interactions across voice, chat, email, SMS, and every other channel. We’re building a future where customer experiences are being redefined from support tickets and hold music to faster resolutions, richer conversations, and deeper relationships. We’re proud to be backed by world-class investors who share that vision, including a16z, Accel, Bain Capital Ventures, Coatue, and Index Ventures, along with many others. We’re an in-office company, driven by a shared commitment to excellence and velocity. Our values — Just Get It Done, Invent What Customers Want, Winner’s Mindset, and The Polymath Principle — shape how we work and grow as a team. About the Team The Security Engineering team at Decagon protects the platform that powers the most advanced conversational AI agents for enterprise customers across voice, chat, email and SMS. We build the security foundations that enable Decagon's AI agents to handle sensitive customer data with complete trust while defending against sophisticated, AI-enabled threats at massive scale. Our mission is to secure magical support experiences, ensuring that AI agents and human agents can collaborate safely to help users resolve their issues while maintaining the highest standards of security and privacy. About the Role Join Decagon as a Governance, Risk, and Compliance Manager and play a critical role in securing customer trust as we scale to serve Fortune 500 and international enterprises. Working closely with the head of security and compliance, you'll be responsible for the day-to-day execution of our compliance program and customer security engagements. This is a high-impact role where you'll direct

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. We are looking for a Software Engineer II to join the Auth0 Security Engineering organization. You'll help build and maintain the security guardrails for our multi-cloud environment, implementing security and compliance standards as programmatic, code-driven policies. What You Will Do Cloud Security Controls: Implement and maintain organization-wide controls (SCPs, Azure Policy) balancing protection with developer experience. Identity & Access Management (IAM): Build and update templates and permission boundaries that govern how services and humans interact with our cloud, applying the principle of least privilege. Infrastructure & Network Security: Contribute to the security standards for VPC architecture, edge networking, and cross-account connectivity. System Design: Help build systems and processes that validate the security posture of the platform, enforcing our security policies and surfacing actionable feedback for engineering teams. Growth & Collaboration: Partner with teammates across the organization, share what you learn, and continually deepen your security expertise. What You Bring Cloud & Infrastructure Experience: 3+ years of experience in software engineering or information security, with hands-on exposure to cloud-native environments, Kubernetes (EKS, AKS), and cloud security concepts. Policy & Automation: Experience building or maintaining automated controls and infrastructure-as-code, ideally within Terraform workflows

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Customers increasingly use AI agents like Claude Code, Codex, Cursor, and internal Slack agents to run their business processes, and security and compliance work is no exception. For those agents to do that work, they need access to Vanta’s trust graph and intelligence layer. Vanta is building for that world: security and compliance products that customers can use through Vanta, through third-party agent platforms, and inside their own internal tools. As Senior Product Manager, Agent Ecosystem, you will own Vanta’s external agent surfaces: MCP, CLI, and plugins in marketplaces like Claude Code, Codex, and ChatGPT. Your job is to make Vanta the trusted compliance layer that agents rely on. You will define the strategy, ship the products, and own the outcomes. What you’ll do as a Senior Product Manager, Agent Ecosystem at Vanta: Own the strategy and roadmap for Vanta’s agent ecosystem products. Define how agents discover, access, and safely use Vanta capabilities, partnering with the platform teams that own APIs and authentication. Hold outcome parity as a product principle: work a customer can complete in Vanta should be possible through MCP, CLI, and plugin surfaces too. Lead marketplace and plugin launches, aligning product, engineering, legal, security, and go-to-market around each one. Partner with engineering and design to ship secure, reliable developer products. Build the developer-facing marketing motion: external agent documentation and customer stories that show what MCP and CLI users have unlocked. Partner with the product partnerships and alliances team on co-marketing with agent platforms like Anthropic and OpenAI,

Atlas HXM is the global workforce platform built on compliance. We help companies determine how to engage each member of their workforce and then execute with accountability built in — direct Employer of Record (EOR), Agent of Record (AOR), payroll, and compliance capabilities backed by a decade of practitioner-led expertise. Recognized as a category Leader by NelsonHall and Everest Group, Atlas HXM builds Human Experience Management into everything we do, guided by our "For People, by People" principle. The future of work is borderless, and so are we. Our people are located around the globe — in the U.S., the UK, India, Colombia, China, and beyond. Diversity and belonging are not just values; they are who we are. We are also committed to making a positive impact. Through our Environment, Social, and Governance (ESG) impact initiative, we are addressing our environmental footprint and promoting social responsibility. Our impact program is central to our vision and culture, focusing on employee wellness, diversity, charitable work, and ethical corporate governance. Role Overview We are seeking a forward-thinking Senior Security Engineer, AI & DevSecOps to help shape the future of secure AI adoption across the organization. As part of the Information Security team, you will build and secure the platforms, processes, and governance that enable developers and business teams to safely leverage artificial intelligence. You'll work at the intersection of AI, application security, cloud security, and DevSecOps. This role is ideal for someone who thrives on emerging technologies, understands how modern platforms connect through APIs and automation, and can translate security requirements into scalable, developer-friendly solutions. Key Responsibilities Design and implement secure architectures for enterprise AI platforms, AI assistants, AI APIs, and AI-enabled applications. Build and maintain a secure AI sandbox environment supporting experimentation and responsibl

re you interested in working directly for a single sponsor while having the security and additional career opportunities that working for a global CRO can bring? Our team says it’s the best of both worlds…. ClinChoice is searching for a Regulatory Affairs Associate Consultant for 12 months Contract with possibility of extension to join one of our clients. ClinChoice is a global full-service CRO with a strong focus on quality, professional development, and supportive culture. As a client-facing role, we are looking for confident candidates with the ability to work independently whilst establishing a high-trust environment with the client’s counterparts. Regulatory Affairs Jr. Specialist Consultant / Especialista Jr. de Asuntos Regulatorios Location / Ubicación: Ciudad de México, México Position Summary / Resumen del puesto: Support the preparation, review and follow-up of regulatory submissions for medical devices, ensuring compliance with applicable regulations before health authorities such as COFEPRIS, enabling timely approvals and maintenance of product registrations. Apoyar en la preparación, revisión y seguimiento de trámites regulatorios para dispositivos médicos, asegurando el cumplimiento de la normativa aplicable ante la autoridad sanitaria COFEPRIS, facilitando la obtención y mantenimiento de los registros sanitarios. Key responsabilities / Responsabilidades principales: Prepare and compile regulatory documentation for COFEPRIS submissions (registrations, renewals, changes). Follow up on submissions with regulatory authority (COFEPRIS). Support interpretation of local and international regulations. Support coordination of requests and activities with cross-functional teams. Maintain updated regulatory files and databases. Preparar y compilar documentación regulatoria para sometimientos ante COFEPRIS (registros, renovaciones, modificaciones). Dar seguimiento a los trámites ante autoridad regulatoria (COFEPRIS). Apoyar en la interpretaci

We are looking for an Agentic AI Principal to act as a senior technical authority and trusted client advisor for complex agentic AI transformation in the UK and Ireland. Operating at Principal level, you will shape enterprise AI strategy, define agentic architecture blueprints, lead high-value C-suite engagements and guide complex programmes from opportunity through delivery. You will bring deep hands-on credibility in multi-agent systems, governance and safeguards, while setting reusable patterns and raising capability across teams. The role has particular focus on sovereign, compliant and production-grade agentic AI for regulated UK enterprise environments, including financial services and telecommunications. Job responsibilities Agentic AI Advisory & Strategy: Shape and solution complex UKI pursuits, working with account, commercial and delivery leaders to translate client needs into differentiated propositions, credible architectures and executable delivery approaches that support regional pipeline conversion. Design & Build Engineering: Set the architecture direction for complex, production-grade agentic AI systems, including multi-agent workflows, orchestration, tool use, memory, context strategy, retrieval, evaluation, observability and enterprise integration. Governance & Safeguards: Establish reusable patterns for observability, auditability, traceability and control of agentic systems, enabling teams to demonstrate safe and reliable behaviour in production. Principal-level leadership: Set reusable architecture patterns, engineering standards and governance practices across multiple teams and engagements, influencing the evolution of Thoughtworks’ agentic AI capability beyond an individual programme. Design solutions appropriate for regulated UK environments, including financial services and telecommunications, with strong consideration of data sovereignty, privacy, security, responsible AI and applicable regulatory requirements. Provide technic

Pontera is a fintech company on a mission to help people retire better. Our software platform enables retirement savers to get the help they need managing their 401(k) and other retirement plan accounts as part of a personalized strategy by their trusted financial advisor. Pontera is used by financial advisors across the nation– from SMB to Fortune 500 RIA firms, independent broker-dealers, plan custodians, and plan advisors. Backed by leading venture capital firms including ICONIQ Growth and Lightspeed Venture Partners, Pontera is built by talented individuals who share a dedication to helping people retire with greater security. Our team is fast-growing and driven to become one of the largest fintech companies in the world. Our culture is built on a people-first principle: in a complex and numbers-driven industry, we never lose sight of the people we serve and work alongside. That’s where you come in. DESCRIPTION As a Mid-Market Account Executive, you will lead the sales process for some of the fastest growing and disruptive Broker-Dealers and RIAs in the space (50+ financial advisors). You will be in a high-impact role with CEO-level visibility, tasked with bringing in clients capable of changing our company’s trajectory. This job is being made available at an incredibly important time in Pontera’s trajectory, and there are many reasons it’s a great opportunity: a product with an immediate, measurable revenue impact for the client (share of wallet growth), a massive addressable market, and dominant category leadership in professional 401(k) management. There is a ton of greenspace. And we are looking for someone with grit, resiliency, and professionalism to capture this incredible opportunity. RESPONSIBILITIES Lead multi-threaded sales processes across C-Suite, Compliance, InfoSec, Legal, and Field Leadership. You own the deal from initial conversation through negotiation and close. Map the buyers of our prospects. Understand the goals, pl

For over 20 years, Smartsheet has empowered teams to manage work seamlessly and scale solutions smarter. Now, in our most ambitious chapter yet, we are uniting human teams with AI agents. By orchestrating the work agents do best, automating manual tasks and uncovering insights at scale, we create the space for people to focus on what truly matters: judgment, creativity, and big thinking. That is magic at work, and it’s what we show up for every day. AI is reshaping what product security can accomplish, both as a target and as a tool. We're looking for a Principal Security Engineer to own the highest-leverage application security work at Smartsheet: leading threat modeling and product security reviews across a modern SaaS platform used by millions of customers, serving as the team's technical authority on AI security risk, and setting the technical standard for application security practice across the engineering organization. This is the most senior individual contributor role on the Application Security team. The expectation is not just depth: it is reach. You will engage product and engineering leadership directly, drive security requirements rather than advisory recommendations, and build team capability over time. If you are a security engineer who thinks upstream, builds threat models that generate concrete test scenarios and can translate technical findings into architecture decisions and business outcomes, this role is built for you. This role reports to the Manager, Application Security and can be based in our Bellevue, WA office or remotely from anywhere in the US where Smartsheet is a registered employer. You Will: Lead Threat Modeling and Product Security Reviews: Own threat modeling and product security review as the team's primary upstream capability: build models from architecture and data-flow artifacts, derive concrete abuse cases and test scenarios, and drive security requirements into designs before they ship. Define and lead the product secu

MongoDB's Global Security Organization (GSO) is looking for a Principal Security Engineer. The GSO secures MongoDB's products, infrastructure, and the trust our customers place in us — spanning product security, corporate security, and risk, and working across engineering, go-to-market, and corporate development to keep security moving at the same speed as the business. The Principal Security Engineer will serve as a senior technical anchor for the team. This is a deep individual-contributor role that will stay hands-on with hard security and architecture problems, form sharp independent opinions, and know how to debate, align, and commit once GSO has made a call. Key topic areas will include collaborating with our product teams to ensure identity and permission models meet customer needs for our new autonomous agent platform and working with integration security teams to push the envelope on automated detection, reproduction, and remediation of security vulnerabilities via AI. What we need here is depth, judgment, and the ability to build up the bench of senior technical talent around you. This role can be based out of our NYC or Seattle office or remotely in the North America region. Responsibilities Maintain real technical depth in security and in MongoDB's product architecture — compute, network, and storage — deep enough to evaluate actual risk rather than apply generic best practice Form independent, well-reasoned opinions on security and architecture decisions, and voice them even when they cut against consensus or a leader's default plan Push teams to move faster when process or over-engineering is introducing complexity without reducing risk — and push teams to slow down when GTM pressure is outrunning a clear-eyed view of the risk Debate hard, then align, then commit: help the org land on the right call, then execute on it Seed and grow a working community of senior ICs embedded in security operations, product security, and enterprise sec

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block. The Role As a Principal Security Engineer focused on Software Security Engineering at Block, you will be a technical leader reporting to the CISO responsible for setting the bar for security excellence and driving the creation of innovative, world-class software solutions to complex security problems. You will work across Engineering and Information Security (InfoSec) to champion a "Secure by Design" culture, directly influencing the architecture of Block's core products and infrastructure. Your mandate is to provide deep technical expertise and strategic direction to ensure that security is enabling fast, secure innovation across the business. You Will Software Security Innovation : Deliver world-class and innovative software solutions to security problems, tackling Block's top risks such as technology fragmentation and security after-the-fact. Technical Strategy & Architecture : Define the multi-year technical strategy for software security at Block, guiding architectural decisions and ensuring alignment with engineering best practices. Cross-Cutting Solution Leadership : Identify and lead the development and implementation of common, high-leverage security solutions and infrastructure across Block's business units (Square, Cash App, TBD, etc.) to combat data sprawl and overpermissioning. Drive engineering excellence , specifically

What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection. Huntress now secures more than 5M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other. Reports to: Manager, Product Research Location: Remote, US Compensation Range: $200,000 to $230,000 base plus bonus and equity What You’ll Do: The Huntress Product Research team has the unique honor of waking up every morning knowing we’re going to make hackers regret targeting our partners and customers. As a Principal Product Researcher, we’re looking for someone who wants to pour all of their creativity into building and implementing simple solutions that are disproportionately effective at countering these constantly evolving threats. Competitive candidates have experience managing, deploying, and securing SMB environments utilizing a wide variety of security software, best practices, and automation tools. Familiarity with product management, incident response, social engineering, psychology, education, and managed service provider tools is an additional way to d

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. About the role: As a Principal Security Engineer on the Detection and Response (D&R) team at Roblox, you'll play a key role designing and developing effective custom security data pipeline systems, detection strategies and automations for response workflows to defend our critical assets from threat actors. You will also lead real-time incident response, actively investigate events and analyze threat actor techniques to prioritize emerging threats to ensure Roblox is equipped to mitigate and react to critical challenges. You will play a vital part to ensure the safety of our community and enterprise by proactively fostering a high-performing, inclusive security culture. This is a hybrid in-office role. You Will: Be a D&R authority! You will deliver robust detection & response capabilities: build new threat detection systems (keeping false positives low) while also automating processes with scripts, playbooks and orchestration tooling. Implement ETL pipelines : Design and develop customized data processing pipelines. Conduct security operations : Actively monitor security events and participate in on-call rotations to lead real-time incident response to contain and mitigate potent

Principal Security Engineer Location: London (Hybrid) | Practice Area : Technology & Engineering | Type: Permanent Lead advanced security engineering initiatives that safeguard the future of digital finance The Role As a Principal Security Engineer at Capco, you’ll lead the design and implementation of secure systems and processes across cloud and on-premise platforms. You’ll collaborate closely with engineering and client teams to embed security-by-design principles throughout the SDLC, integrate automated security tooling, and ensure resilience against evolving cyber threats. You’ll also use approved AI tools and AI-enabled workflows where appropriate to improve the speed, quality and effectiveness of security engineering, while maintaining human judgement, responsible AI guardrails and appropriate review and escalation. What You’ll Do Design and implement enterprise-wide security controls and frameworks, using approved AI and automation where appropriate to improve security outcomes Embed security controls into CI/CD pipelines (SAST, SCA, DAST, container scanning) and enable secure SDLC practices Collaborate across teams to champion secure development practices and responsible use of AI-enabled security workflows Lead vulnerability assessments, code reviews and security audits across infrastructure and applications, maintaining appropriate human review, audit trails and escalation pathways Develop and evolve security standards, engineering patterns and data protection strategies What We’re Looking For Strong hands-on experience with Palo Alto, Microsoft or similar security ecosystems Deep understanding of cloud security for AWS, Azure or GCP platforms Proven expertise in secure coding, endpoint protection, SIEM and IAM Familiarity with frameworks and standards such as ISO 27001, NIST and OWASP, alongside an understanding of responsible AI, security guardrails and human-in-the-loop controls Proficiency in Python, Bash, PowerShell or Go for security automation

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a Principal Security Software Engineer in the Enterprise Security team, you will advance Roblox's Enterprise Security strategy by building the systems and integrations that protect Roblox's corporate infrastructure. Where traditional security engineers evaluate and deploy vendor solutions, you will design and build production-grade security software - Identity and Access governance, policy enforcement engines, and security integrations that scale with Roblox's business. You'll partner with security professionals across InfoSec and work cross-functionally with Corporate Engineering, DevOps, and Product teams to drive security initiatives. You will: Build identity and access systems : Design, implement, and own integrations across Roblox's IAM ecosystem, including SSO federation, SCIM provisioning/deprovisioning pipelines, OAuth 2.0 authorization servers, and token lifecycle management. Lead security automation : Develop production-quality tools and services that enforce security policies at scale, replace manual workflows, and surface actionable signals Drive secure-by-design implementations : Partner with Corporate Engineering, DevOps, and product teams to embed security controls in

About LastPass LastPass delivers Secure Access Essentials, helping individuals and organizations manage and protect access to AI, applications, and credentials straight from the browser. Trusted by more than 100,000 businesses and millions of users worldwide, LastPass blends strong security with everyday simplicity. From discovering unapproved AI and applications to reducing login friction and securing credentials across the business, LastPass delivers on its mission to give everyone seamless access to everything they need to work, move fast, and stay protected as their environments evolve. Curious about our products? Visit our website and try it free! We welcome new ideas, support your growth, and recognize your value, if this aligns with what you are looking for in your next career move, Join Us! LastPass is looking for a Principal Cloud Security Engineer: As a Principal Cloud Security Engineer at LastPass, you will partner with DevOps and CI/CD engineers and our Architects team to ensure security best practices are embedded across our cloud infrastructure. We are looking for an experienced security engineering leader with an ability to scale security and make the right trade-off decisions that enable us to offer secure, innovative solutions to customers. About the team: The Cloud Security team at LastPass is a collaborative group of talented cloud security engineers working in close partnership with our engineering, platform, and trust & security teams. We are on a mission to safeguard the privacy and security of our company and users' data, embedded directly in the heart of our product development. If you are passionate about complex problem solving and motivated by scale, then this is the role for you! Who will you work with? You will work closely with DevOps and CI/CD engineers, Cloud Architects, and cross-functional engineering teams across LastPass. You will also collaborate with our Trust & Security and Platform teams, acting as a key em