Security And Compliance Analyst Jobs

At Asana, security is foundational to our mission of helping teams work together effortlessly. Our Security organization protects Asana’s employees, users, and customers by proactively addressing threats, enabling secure product development, and embedding security into the fabric of how we operate. We partner closely with Engineering, Product, IT, Legal, and Compliance to build and maintain trust at scale. We are seeking a Director of Security Engineering to lead and grow our Security Engineering organization as Asana continues to grow globally. This role is pivotal in translating high-level security strategy into technical reality, ensuring our infrastructure is resilient by design and our internal security tooling is world-class. This is a leadership role with accountability for people management, technical mentorship, and the delivery of high-impact security initiatives across a complex, high-growth SaaS environment. This role is based in our San Francisco office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements. What you’ll achieve Build security by construction, design and default throughout all of Asana’s products and infrastructure. Accelerate the development lifecycle by building and owning frameworks, interfaces, services and libraries that solves security problems and frees other Asanas to focus. Be the voice of the customer in driving security features in our products and making those product features a differentiator for Asana. Lead and mentor a multi-disciplinary engineering team, fostering a culture of technical excellence, psychological safety, and high accountability. Own the security engineering roadmap, ensuring high-quality and high-ve

About Capco Capco is a global business and technology consultancy specializing in the financial services and energy industries. We bring together industry knowledge, technology expertise, and an innovative mindset to support clients in complex transformation initiatives. At Capco, you will be part of a collaborative and entrepreneurial environment where you can work alongside experienced professionals, expand your expertise, and contribute to impactful projects across the financial services industry. The Role We are looking for an experienced Cryptography & Key Management Security Engineer with strong expertise in cryptographic technologies, PKI, Hardware Security Modules (HSMs), and secrets management. This is a specialist role for security professionals who enjoy combining hands-on operational responsibilities with security advisory and strategic project work . As a Cryptography & Key Management Security Engineer, you will support complex and business-critical security environments within the financial services sector. You will contribute to the secure management of cryptographic keys, digital certificates, and application secrets while helping organizations strengthen their cryptographic capabilities and prepare for future security challenges. You will collaborate with security specialists, architects, application teams, infrastructure experts, and other stakeholders to translate security and regulatory requirements into secure, scalable, and operationally feasible solutions. What You Will Do Manage the lifecycle of cryptographic keys, digital certificates, and application secrets , including rotation, renewal, revocation, and access management. Operate, monitor, and support Hardware Security Module (HSM) infrastructures and other cryptographic platforms. Help ensure high availability, operational stability, and compliance of security-critical infrastructure. Support and execute cryptographic key ceremonies . Investigate and resolve incident

Gong harnesses the power of AI to transform how revenue teams win. The Gong Revenue AI Operating System unifies data, insights, and workflows into a single, trusted system that observes, guides, and acts alongside the world’s most successful revenue teams. Powered by the Gong Revenue Graph, AI-powered intelligence, specialized agents, and trusted applications, Gong helps more than 5,000 companies around the world deeply understand their teams and customers, automate critical sales workflows, and close more deals with less effort. For more information, visit www.gong.io. At Gong, you will join a company built on innovative products, ambitious goals, and passionate people. We are shaping the future of revenue intelligence and we want people who are excited to build what comes next. You will work with a team that dreams big, moves fast, and cares deeply about the craft and about each other. Here, transparency and trust are core to how we operate, and every person has the opportunity to make a visible impact. If you want to grow, stretch, and do work that truly matters, Gong is the place to do the best work of your career. This is a high-visibility, high-impact role at the center of Gong’s security and compliance story. As our Senior GRC Security Lead, you will be the architect of foundational programs we are building — Gong’s first-ever Common Controls Framework, standing up a formal risk process and register, implementing a GRC tooling ecosystem, and owning the full policy, standards, and exceptions management lifecycle. This is not a role for someone looking to inherit a mature program. It’s a role for a builder — someone who thrives in ambiguity, operates with urgency, and finds energy in creating order from complexity. You will work directly with Legal, Sales, Engineering, Customer Audit teams, and executive stakeholders, and your fingerprints will be visible across everything Gong builds for compliance and trust for years to come. RESPONSIBILITIES Design and imple

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! As a Compliance Engineer at Figma, you will play a critical role in designing, implementing, and testing security controls across multiple compliance frameworks, including FedRAMP, SOC 2, ISO 27001, and NIST. You will collaborate closely with security, infrastructure, and product engineering teams to translate regulatory requirements into effective technical controls, evaluate control effectiveness, and identify opportunities to improve security and compliance processes. You will also help advance Figma’s compliance engineering capabilities by leveraging automation, machine-readable control definitions (JSON), APIs, and AI-assisted development tools to streamline control testing, evidence collection, and continuous monitoring. This role combines deep security compliance expertise with technical problem-solving to build scalable, repeatable, and effective compliance practices. This is a full time role that can be held from one of our US hubs or remotely in the United States. What you’ll do at Figma: Develop and verify technical security controls that satisfy multiple compliance frameworks Collaborate with security, infrastructure, and product engineering teams to translate compliance requirements into effective technical controls Design and execute control testing procedures to assess control performance, surface gaps, and verify that remediation is complete Establish repeatable control assessments and continuous monitoring processes to evaluate compliance effectiveness Translate security require

RDQ227R1178 As a Staff Technical Program Manager within the Security Assurance Team, you will help lead high-visibility security compliance implementation initiatives. Reporting directly to the Senior Director, you will serve as a strategic catalyst for these programs, ensuring seamless execution and alignment with Databricks’ global security objectives. You will navigate a complex, cloud-native landscape, collaborating with Security, Engineering, Internal Audit, Corporate Operations, and other teams, to assure successful completion of highly cross-functional projects that enable the growth of our business and safeguard our customers. This role requires an active Top Secret Clearance, the ability to access and work within a SCIF environment, and residence within the Washington, DC metropolitan area. The impact you will have: Drive Project Outcomes: Adopt an ownership mindset to manage the end-to-end delivery of work required for new security certifications, federal authorizations, and compliance initiatives that expand Databricks’ reach across regulated and government markets. Accelerate Execution: Act as a force multiplier by proactively identifying and neutralizing project blockers, reducing friction, and maintaining high velocity in a cloud-native environment. Orchestrate Cross-Functional Decision Making: Navigate complex technical and compliance trade-offs, driving consensus across Engineering, IT, Product, and Security teams to reach timely resolutions. Optimize Delivery Methodologies: Continuously refine project frameworks to maximize effectiveness, ensuring that security initiatives are both rigorous and agile. Precision Program Management: Masterfully oversee project lifecycles—including milestones, dependencies, and risk mitigation—while providing executive-level transparency through accurate status reporting. Build Strategic Partnerships: Forge deep, collaborative relationships with Security Assurance Team subject matter experts and te

Location: United States – Remote Clearance: Ability to obtain and maintain a Public Trust Salary Range: 152K - 184K LTS is seeking a highly skilled Senior Agentic AI Security Engineer to ensure our AI systems are secure, trustworthy, resilient, and governed responsibly. You'll design safeguards that protect AI agents, retrieval pipelines, prompts, tools, memory, and model interactions from misuse while ensuring every AI response remains explainable, auditable, and aligned with enterprise security and compliance requirements. This role focuses on securing AI systems, not simply securing infrastructure. The Agentic AI platform is designed to help engineers understand, analyze, and modernize one of the most consequential legacy software systems still operating today. Our platform enables engineers to ask questions in plain English and receive explainable, verifiable answers traced directly back to decades of production source code. Rather than replacing engineers, we're building AI that accelerates engineering through transparency, traceability, and intelligent reasoning. We're building an AI-native engineering platform supporting the modernization of mission-critical healthcare systems serving millions of Veterans nationwide. The platform is designed for deployment across federal enterprise environments and is being engineered to align with FedRAMP security controls, Zero Trust principles, and federal compliance requirements. You'll work alongside AI architects, software engineers, platform engineers, cybersecurity engineers, and product leaders to embed AI security into every stage of development from experimentation through production deployment. We’re building an AI platform where security, transparency, and trust are foundational, not afterthoughts. What You’ll Do: Secure Agentic AI Systems Design and implement security controls for autonomous and multi-agent AI systems. Secure agent orchestration, tool execution, memory, and external integrations. Identify and mi

RDQ327R177 While candidates in the listed location(s) are encouraged for this role, candidates in other US locations will be considered. The Security Field Engineering team helps data teams solve the world's toughest problems by empowering customers to understand the security of the Databricks platform and by helping account teams address questions that come up during security reviews. Reporting to the Head of Security Field Engineering, you will meet with customers to answer questions, train other Databricks team members, build customer-facing content such as slide decks, white papers, and maybe write code that customers can use. Our team prioritizes scale -- we'd rather spend an hour building a doc than be in ten hours of meetings, rather deliver agent skills and knowledge base articles than be the rock star answering all the questions. If you want high growth, autonomy, and to touch all elements of security, look no further. The impact you will have: You will be viewed as a security expert as you work with field teams and customers to understand architectures, address concerns and handle compliance questions Your contributions may come in multiple ways, including customer interactions, scalable slides or white paper creation, internal enablement, process improvement, automation, or technical leadership—no one excels in every area, but all are valuable When you’re on the call, you will be directly appreciated. When you’re not, your impact will be felt across the company through the enablement, collateral, knowledge management, and systems you build You might not come from an assurance team, but you’ll come up to speed with common security and compliance regimes to save customers hours of effort and months of uncertainty You will identify customer pain points and work with product management and product marketing will improve our product and our messaging You will contribute to internal-facing services and automation that make life easier for our field staff

The Head OT Cybersecurity is responsible for overseeing and leading the organization’s operational technology (OT) cybersecurity strategy, ensuring the security and integrity of critical infrastructure, industrial control systems (ICS), and operational environments. This senior leadership role will drive the development, implementation, and maintenance of OT cybersecurity policies, standards, and practices to protect OT assets from cyber threats. The Head OT Cybersecurity will also oversee incident response, risk management, and compliance efforts while collaborating with cross-functional teams to secure the organization’s OT environments. Source: Adani Group | Job ID: 52021

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a Senior Security Software Engineer for Infrastructure Security you will be a part of the Information Security organization and report to the Senior Manager of Infrastructure Security. You will help shape the future of Platform Security at Roblox. We work closely with Production IAM, Network Security, and Cloud Security at Roblox. You Will: Identify security gaps and threats in our cloud and on premise infrastructure, partnering with Governance Risk and Compliance teams to create standards and policies along the way. This will help Roblox meet regulatory and compliance requirements. Harden our infrastructure by introducing secure by default configurations, designs and guardrails for all developers at Roblox. Own and drive solutions that enable Roblox engineers to design, build, and use infrastructure securely at scale. Work closely with other InfoSec teams (AppSec, D&R, GRC, CorpSec, CloudSec, NetSec) and partner with engineering teams across Roblox, specifically the Infrastructure organization, to ensure the secure outcomes of security and product driven initiatives. You Have: 5+ years of experience writing code and/or relevant technical experience. Experience with

P-1528 As a Staff Security Assurance Engineer within the Security Assurance Team, you will help lead high-visibility security compliance implementation initiatives. Reporting directly to the Senior Director, you will serve as a strategic catalyst for these programs, ensuring seamless execution and alignment with Databricks’ global security objectives. You will navigate a complex, cloud-native landscape, collaborating with Security, IT, Engineering, Internal Audit, Corporate Operations, and other teams, to assure successful completion of highly cross-functional projects that enable the growth of our business and safeguard our customers. This role requires an active Top Secret Clearance, the ability to access and work within a SCIF environment, and residence within the Washington, DC metropolitan area. The impact you will have: Drive Project Outcomes: Adopt an ownership mindset to manage the end-to-end delivery of work required for new security certifications, federal authorizations, and compliance initiatives that expand Databricks’ reach across regulated and government markets. Accelerate Execution: Act as a force multiplier by proactively identifying and neutralizing project blockers, reducing friction, and maintaining high velocity in a cloud-native environment. Orchestrate Cross-Functional Decision Making: Navigate complex technical and compliance trade-offs, driving consensus across Engineering, IT, Product, and Security teams to reach timely resolutions. Optimize Delivery Methodologies: Continuously refine project frameworks to maximize effectiveness, ensuring that security initiatives are both rigorous and agile. Precision Program Management: Masterfully oversee project lifecycles—including milestones, dependencies, and risk mitigation—while providing executive-level transparency through accurate status reporting. Build Strategic Partnerships: Forge deep, collaborative relationships with Security Assurance Team subject matter experts and technical stakeholders

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Staff Security Governance Engineer, you will be the individual contributor who owns how GitLab writes, maintains, communicates, and measures its security policies and standards. You will turn emerging regulations, including AI regulation, into clear requirements that engineering, product, and legal teams can act on, and you will use automation to keep governance lightweight and continuous rather than a point-in-time exercise. You will sit on the Security Governance team within Security Assurance and work closely with Security Compliance, Security Risk, and GRC Engineering. You will report to the Dire

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role GitLab's Security Risk function is responsible for reducing risk across the security division: third-party risk (TPRM), annual security risk assessments, quarterly risk reporting, and remediation of security findings. As a Senior Security Risk Engineer, you'll take ownership of risk identification, quantification, and remediation tracking across the business, and you'll be a driving force behind automating and modernizing how the team does this work using AI and scripting. Reporting to the Security Risk Manager, you will bring expertise on risk methodology, risk-based thinking, and AI-enablement. In

For over 20 years, Smartsheet has empowered teams to manage work seamlessly and scale solutions smarter. Now, in our most ambitious chapter yet, we are uniting human teams with AI agents. By orchestrating the work agents do best, automating manual tasks and uncovering insights at scale, we create the space for people to focus on what truly matters: judgment, creativity, and big thinking. That is magic at work, and it’s what we show up for every day. The Sr. Security Engineer I is a critical technical role focused on deal acceleration, platform security evangelism, and the development of security features and capabilities that enhance our customer security and governance capabilities. You will support security and compliance during sales motions and bridge communication between complex customer security requirements and technical product engineering. You will work directly with customer security leaders (security engineers through CISOs) to communicate and clarify product security posture and controls results (such as pen test results), and will work with Smartsheet engineering to build security features that meet real-world customer requirements. You will display product understanding through highly customized presentation demonstrations to customers and at conferences and events. This role reports to the Senior Director, GRC Engineering and can be based in our Bellevue, WA office or remotely from anywhere in the US where Smartsheet is a registered employer. You Will: Serve as a trusted advisor to enterprise customers, CISOs, CIOs, and guiding them on Smartsheet security, compliance, and risk management. Evaluate customer infrastructure diagrams and data flows, and how Smartsheet can help with automation without compromising security. Present scanning results (NIST 800-53 gaps, vulnerability scans, DAST/pen test, IaC scans) to customers including walking through remediations. Help customers interpret scan results and develop deviation rationales fo

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As a Senior Security Engineer on GitLab's Security Incident Response Team (SIRT), you will be on the frontline of protecting both GitLab.com and GitLab the company from security threats. You will lead high-impact incidents and investigations, drive continuous improvements in defense, detection and response capabilities, and help scale security operations through automation and intelligent workflows. Operating within a 24/7 global environment (follow the sun model), you will own incidents end-to-end - from detection and triage through containment, eradication, and recovery - while partnering cross-function

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. * Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As an Intermediate Security Engineer on GitLab's Security Incident Response Team (SIRT), you will be on the frontline of protecting both GitLab.com and GitLab the company from security threats. This role operates on a compressed 4-day work schedule, with a full-time week's hours condensed into four longer working days. Shifts run Sunday through Wednesday to provide 24/7/365 security coverage. Your primary focus will be detecting and responding to security incidents during your scheduled shifts. You'll work extensively with our incident response automation tools to investigate, analyze, and resolve securit