Security Controls Assurance Lead Jobs

Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Applicants must be authorized to work for any employer in the U.S. without sponsorship. We are unable to provide sponsorship for work visas of any kind at the time of hire, or at any point during employment. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, J-1, etc Your Role: As an AI Security Engineer on Tenable's Information Security team, you will help shape and mature our approach to securing AI both within Tenable's products and across the enterprise. AI introduces a new class of risk at the intersection of application security, cloud risk, and data governance, and you will be on the front lines of defining how we assess, test, and address it. You will apply hands-on AI engineering experience alongside deep product security and application security skills to design security controls for AI systems, lead assessments, and help engineering teams ship AI features securely. You will establish security standards for responsible AI use, influence decisions across the organization, and build tooling that raises our security posture. This role is ideal for a practitioner who has spent

Leidos has an exciting opportunity for Cyber Security Engineer—Technical Lead in our Intel Security Sector's Analysis Solutions Business Area . Our talented team is at the forefront in Security Engineering, Computer Network Operations (CNO), Mission Software, Analytical Methods and Modeling, Signals Intelligence (SIGINT), and Cryptographic Key Management. At Leidos , we offer competitive benefits , including Paid Time Off, 11 paid Holidays, 401K with a 6% company match and immediate vesting, Flexible Schedules, Discounted Stock Purchase Plans, Technical Upskilling, Education and Training Support, Parental Paid Leave, and much more. Join us and make a difference in National Security! Job Summary This role is responsible for protecting the customer’s information systems and networks from potential cyber-attacks. The Cyber Security Engineer– Technical Lead will serve in a hands-on “player-coach" capacity, dedicating approximately 75% of time to direct technical engineering, troubleshooting, and implementation work, while providing technical leadership and coordination across the security team. The candidate must display an excellent understanding of technology and utilization of Firewalls (Security Groups), VPNs, Data Loss Prevention (DPS), IDS/IPS, Web-Proxy, Security tools, and Security Audits. Candidate will work directly with Team leads, developers, operations personnel, and other Technical Leads throughout a DevSecOps life cycle both on policy and technical implementation of technologies. This is not a supervisory management role. Success in this position is measured by individual technical contribution and resolution of complex security issues, in addition to technical leadership impact. Primary Responsibilities: Plan, implement, manage, monitor, and upgrade security controls and tools used to protect enterprise systems and networks, while identifying opportunitie

Your wellbeing, our mission. Join a company shaping a healthier world. GET TO KNOW US At Wellhub we're revolutionizing workplace wellness. Our platform connects employees worldwide to the best partners for fitness, mindfulness, therapy, nutrition, and sleep—all in one simple subscription. Headquartered in NYC with team members in Europe, North America and South America, we’re on a mission to make every company a wellness company. We believe work should be fulfilling, inspiring, and balanced. Here, you’ll find a team that values wellbeing, collaboration, and different perspectives, where passion and creativity push boundaries to create real impact. Your contributions will help shape a healthier, more balanced world for you and millions of people globally. Join us in redefining the future of wellbeing! THE OPPORTUNITY We are hiring a Cloud Security Engineer for the InfoSec team in Brazil ! We are looking for an experienced security engineer to lead our cloud security strategy across multi-cloud environments (AWS & GCP). You will drive our Zero Trust architecture, embed a Shift-Left security culture within engineering teams, secure containerized and serverless workloads, and pioneer security controls for emerging Artificial Intelligence deployments—including Agentic AI systems, Model Context Protocol (MCP), Retrieval-Augmented Generation (RAG) architectures, AI guardrails, and mitigations against OWASP Top 10 for LLMs and MITRE ATLAS framework threats. This position is for the Cloud Security team. The Cloud Security Engineer is responsible for designing, implementing, and managing security measures in cloud computing environments to protect data, applications, infrastructure, and services against potential threats and vulnerabilities. YOUR IMPACT Architect and govern cloud security controls across AWS and GCP environments following Zero Trust principles; Embed automated security testing and threat modeling directly into CI/CD pipelines to champi

A Career with Point72’s Technology Team As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications. As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity—all while delivering real business impact for our multi-billion-dollar global business. What you’ll do Engineer resilient network security solutions that protect Point72’s global technology environment and support our firm’s investment teams Own the configuration, maintenance, and continuous improvement of Palo Alto firewall infrastructure across enterprise and perimeter environments Design firewall policies that balance strong security controls with reliable connectivity for business-critical applications and users Troubleshoot complex network security issues through root-cause analysis, coordinated remediation, and clear communication with affected stakeholders Partner with infrastructure, application, and security teams to integrate network security requirements into new platforms and service deployments Strengthen network segmentation practices to reduce risk, improve visibility, and support secure connectivity across internal and external environments Monitor firewall performance and security posture to identify tuning opportunities, capacity ne

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. We are hiring a Senior Software Engineer for our Cloud Security team. This team reduces risk to Snowflake at scale through software-defined controls rather than one-off fixes, building the platforms and pipelines that make entire classes of problems go away. You won't just find problems; you'll ship the systems that improve and verify the security posture of Snowflake products across 600+ million assets and three cloud providers (AWS, Azure, and GCP), with a growing focus on using AI to reason over posture data at a scale humans can't. AS A SENIOR SOFTWARE ENGINEER AT SNOWFLAKE, YOU WILL: Build solutions and services that operate, protect, and govern our security posture across 600+ million assets and three clouds (AWS, Azure, GCP). Automate security controls across cloud environments, including core primitives: IAM, detection and monitoring, configuration management, and data protection. Build real-time security monitoring, logging, and alerting, using Snowflake technologies to make Snowflake more secure. Define and maintain security baselines, policies, and standards for public cloud platforms. Design and operate continuous, AI-augmented pipelines that ingest posture and telemetry across hundreds of millions of assets, score risk, and automatically surface the highest-imp

At Ripple, we’re building a world where value moves like information does today. It’s big, it’s bold, and we’re already doing it. Through our crypto solutions for financial institutions, businesses, governments and developers, we are improving the global financial system and creating greater economic fairness and opportunity for more people, in more places around the world. And we get to do the best work of our career and grow our skills surrounded by colleagues who have our backs. If you’re ready to see your impact and unlock incredible career growth opportunities, join us, and build real world value. THE WORK: As a Senior Staff Security Engineer focused on AI Security, you will be Ripple's deepest technical expert at the intersection of artificial intelligence and security. This is a purpose-built, high-impact individual contributor role that spans two critical mandates: securing AI systems that Ripple builds and operates, and harnessing AI to make Ripple's security function faster, smarter, and more scalable. You will lead the technical strategy for AI security across the agentic SDLC, define and operationalize guardrails for LLM and agentic AI adoption, and build AI-powered security tooling in close partnership with the broader organization to embed AI security into how Ripple operates every day. You will also shape Ripple's external posture on AI security, contributing to industry standards, regulatory discussions, and Ripple's published security practices. WHAT YOU’LL DO: Drive the AI Security technical strategy and roadmap, defining how Ripple secures its AI systems, governs agentic workflows, and embeds security controls into the AI development lifecycle from day one. Design and implement security controls for LLM-integrated and agentic AI systems, including sandboxing, identity and permission scoping, runtime monitoring, and containment of autonomous agent actions that exceed authorized scope. Own AI security across the Controlled Agentic SDLC, establ

At Ripple, we’re building a world where value moves like information does today. It’s big, it’s bold, and we’re already doing it. Through our crypto solutions for financial institutions, businesses, governments and developers, we are improving the global financial system and creating greater economic fairness and opportunity for more people, in more places around the world. And we get to do the best work of our career and grow our skills surrounded by colleagues who have our backs. If you’re ready to see your impact and unlock incredible career growth opportunities, join us, and build real world value. THE WORK: As a Senior Staff Security Engineer focused on AI Security, you will be Ripple's deepest technical expert at the intersection of artificial intelligence and security. This is a purpose-built, high-impact individual contributor role that spans two critical mandates: securing AI systems that Ripple builds and operates, and harnessing AI to make Ripple's security function faster, smarter, and more scalable. You will lead the technical strategy for AI security across the agentic SDLC, define and operationalize guardrails for LLM and agentic AI adoption, and build AI-powered security tooling in close partnership with the broader organization to embed AI security into how Ripple operates every day. You will also shape Ripple's external posture on AI security, contributing to industry standards, regulatory discussions, and Ripple's published security practices. WHAT YOU’LL DO: Drive the AI Security technical strategy and roadmap, defining how Ripple secures its AI systems, governs agentic workflows, and embeds security controls into the AI development lifecycle from day one. Design and implement security controls for LLM-integrated and agentic AI systems, including sandboxing, identity and permission scoping, runtime monitoring, and containment of autonomous agent actions that exceed authorized scope. Own AI security across the Controlled Agentic SDLC, establ

Warning: Fraudulent Job Adverts Beware of fraudulent activities claiming to represent Insurify. We are not associated with any entities soliciting personal information or payment. The safety of our job seekers is a top priority, and we actively work to prevent such incidents. Insurify will never request sensitive information or payment during the hiring process. Be cautious of text-only interviews, interviews conducted through Microsoft Teams, or suspicious offer letters. Why us? Insurify is one of America’s fastest-growing MIT FinTech startups and has been recognized as one of Inc. 5,000’s fastest-growing private companies in America in 2025, 2024, 2023, 2022 and 2021, Forbes Fintech 50 List for 2023, 2022, and 2021, Forbes Next Billion Dollar Startups of 2022 global and Top 100 InsurTech company. We’re changing the way millions of people compare, buy and manage insurance with artificial intelligence, technology, and superior product design. Our company vision is to be recognized as the preeminent and most trusted digital agent for insurance comparison, purchase, and management. Our team is critical to achieving our vision and fostering the right culture is essential to our team’s success. Join us if you like $1.3 Trillion market opportunity MIT alumni founders Female-led startup $130M total funding Strong leadership team with experience from many successful startups around the world Insurify is hiring an IT Security Engineer to help design and enforce security controls to protect systems, data, and infrastructure while ensuring alignment with regulatory and industry standards. This role will be working cross-functionally across the org on long-term projects as Insurify continues to scale. This is a hybrid position that requires candidates to be able to come into our Cambridge, MA office . How you will make an impact Configure, troubleshoot, and maintain security infrastructure software and hardware, including SIEM, DLP, anti-malware, and intrusion resp

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a Principal Security Software Engineer in the Enterprise Security team, you will advance Roblox's Enterprise Security strategy by building the systems and integrations that protect Roblox's corporate infrastructure. Where traditional security engineers evaluate and deploy vendor solutions, you will design and build production-grade security software - Identity and Access governance, policy enforcement engines, and security integrations that scale with Roblox's business. You'll partner with security professionals across InfoSec and work cross-functionally with Corporate Engineering, DevOps, and Product teams to drive security initiatives. You will: Build identity and access systems : Design, implement, and own integrations across Roblox's IAM ecosystem, including SSO federation, SCIM provisioning/deprovisioning pipelines, OAuth 2.0 authorization servers, and token lifecycle management. Lead security automation : Develop production-quality tools and services that enforce security policies at scale, replace manual workflows, and surface actionable signals Drive secure-by-design implementations : Partner with Corporate Engineering, DevOps, and product teams to embed security controls in

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. As the Assembly and Test (AT) IP Security Engineer, you will be part of the AT BISO (Business Information Security Officer) Organization. You will partner with Micron’s Enterprise Infrastructure and Security (EIS) and your business area (Assembly and Test) to implement security controls, reduce risk, and maintain business continuity. You will work within Assembly and Test organizations (and sites) to identify risks, help classify data and establish processes which are aligned to Micron’s security disciplines. You will serve as an ambassador for Assembly and Test Organization to protect Micron’s most sensitive data (Intellectual Property). You will institutionalize a security-first culture across AT operations and ensure compliance with micron’s security standards, whilst ensuring AT Business continuity Key Responsibilities Act as a Liaison with EIS team and AT business are to support roadmaps, strategies, and requirements to improve Micron’s security policies. Bridge security goals and commitments with articulated business needs driving towards a common set of goals and objectives Participate in defining clear goals and strategic initiatives to improve our security posture in line with Micron’s 7 Security Disciplines. Secure Data Handling: Help secure micron’s most Sensitive Data (Sensitive Data Protection Program), through Data Classification and Inventorization. Help define and implement Entitlement Policy Management System (EPMS) fo

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. As the Assembly and Test (AT) IP Security Engineer, you will be part of the AT BISO (Business Information Security Officer) Organization. You will partner with Micron’s Enterprise Infrastructure and Security (EIS) and your business area (Assembly and Test) to implement security controls, reduce risk, and maintain business continuity. You will work within Assembly and Test organizations (and sites) to identify risks, help classify data and establish processes which are aligned to Micron’s security disciplines. You will serve as an ambassador for Assembly and Test Organization to protect Micron’s most sensitive data (Intellectual Property). You will institutionalize a security-first culture across AT operations and ensure compliance with micron’s security standards, whilst ensuring AT Business continuity Key Responsibilities Act as a Liaison with EIS team and AT business are to support roadmaps, strategies, and requirements to improve Micron’s security policies. Bridge security goals and commitments with articulated business needs driving towards a common set of goals and objectives Participate in defining clear goals and strategic initiatives to improve our security posture in line with Micron’s 7 Security Disciplines. Secure Data Handling: Help secure micron’s most Sensitive Data (Sensitive Data Protection Program), through Data Classification and Inventorization. Help define and implement Entitlement Policy Management

About Forma.ai: Forma.ai is a Series B startup that's revolutionizing how sales compensation is designed, managed and optimized. We handle billions in annual managed commissions for market leaders like Edmentum, Stryker, and Autodesk. Our growth has been fuelled by our passion for fundamentally changing and shaping how companies use sales intelligence to drive business strategy. We’re welcoming equally driven individuals who are excited about creating something big! The Opportunity As a Staff Security Engineer, you will be a hands-on technical leader strengthening security across Forma's application, cloud infrastructure, development lifecycle, internal systems, and incident-response practices. Security today is shared across Engineering and DevOps. You'll work closely with both teams and have real room to shape how Forma approaches security as we grow. Depending on your interests and the needs of the business, the role could develop into a deeper individual-contributor position or help build a dedicated security team. You'll work directly with Engineering, DevOps, IT, Product, Legal, and Privacy to identify risks, design practical controls, automate security processes, and help teams ship secure and reliable software. What you'll do Cloud and infrastructure security Design and implement security controls across Forma's AWS environments, with a focus on IAM, least-privilege access, service identities, and account boundaries. Embed security requirements into Terraform and other Infrastructure as Code, and improve secrets, certificate, encryption-key, and credential management. Build automated checks for insecure configurations, excessive permissions, exposed resources, and configuration drift across Kubernetes, containers, serverless workloads, networking, and data services. Application, data, and AI security Run threat modelling and security architecture reviews for new products, services, APIs, data pipelines, and third-party integrations

Here at Appian, our values of Intensity and Excellence define who we are. We set high standards and live up to them, ensuring that everything we do is done with care and quality. We approach every challenge with ambition and commitment, holding ourselves and each other accountable to achieve the best results. When you join Appian, you’ll be part of a passionate team dedicated to accomplishing hard things, together. Appian’s Information Security team operates at the heart of our Enterprise-Grade Orchestration ecosystem. We continuously evaluate the evolving cyber threat landscape, assess security risks, and enforce modern security frameworks. Our team ensures that Appian's cloud offerings and internal operations remain robust, compliant, and resilient so our global customers can innovate with total confidence. As an Information Security Intern at Appian, you won't just sit on the sidelines—you will actively contribute to live security operations, modern cloud architecture defense, and compliance automation. Working directly alongside industry experts at our vibrant McLean headquarters, you will gain hands-on exposure to cutting-edge cloud infrastructure, automated governance, and enterprise threat analysis, setting a solid foundation for a high-impact cybersecurity career. This internship is based at our headquarters in McLean, Virginia. Appian was built on a culture of in-person collaboration, which we believe is a key driver of our mission to be the best. Interns in this program are expected to be in the office 5 days a week to fully experience our culture, learn directly from peers and mentors, and contribute to projects in a collaborative environment. Being in the office provides more opportunities to connect, learn, and celebrate with the exceptional people across Appian. Applicants considered for Summer 2027 - Students Only What You’ll Do Execute continuous monitoring activities to ensure continuous alignment with internal security controls, industry regu

At Freddie Mac, our mission of Making Home Possible is what motivates us, and it’s at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose. Position Overview: Freddie Mac has an exciting and challenging opportunity for a Technical Lead of Security Architecture. The focus will be on improving security designs of existing and new solutions in both on-premise and cloud ecosystems. Our Impact: We are seeking a motivated individual who will play a role in our transformation into an Agile & DevOps focused organization with aspirations of being cloud native. The candidate should have a strong ability to adapt and apply Security expertise at scale as well as individual applications. The goal is to establish architectures that reduce risk while assisting application teams with deployment, all while maintaining operational stability. Your Impact: Set vision, lead and coach security architecture and automation teams accountable for designing and architecting cloud solutions and cloud security controls. Adopt and champion Agile methodologies to improve workflow velocity and leadership visibility into project timelines and efficiency. Maintain vigilance about current threat vectors and expertise of the ecosystem of cloud security-related tools. Develop security patterns to enable developers to design and build applications with appropriate security controls. Drive and adopt a culture driven by data where key performance indicators are gathered from top to bottom and fed to automated tooling to improve system reliability and performance. Standardize and auto

Location : Remote (U.S.) Other Considerations: U.S. Citizen or Permanent Resident required with the ability to obtain a Public Trust LTS is seeking a Cyber Security Analyst to support the Department of Veterans Affairs (VA) Health Portfolio. The Health PMO support contract provides IT program management, project management, technical management, financial management, functional planning, and documentation analysis in support of the Enterprise Program Management Office (EPMO) Enterprise Program Management Division (EPMD) Health Portfolio The VA Health Portfolio is focused on development and execution of quality IT projects that address the needs of Veterans and health care providers through management of health care information and sustainment of production software to keep the mission going. What You'll Do: This individual will support cybersecurity efforts across multiple projects within a portfolio setting and proactively monitor upcoming cyber priorities across the VA Health portfolio. Communicate and provide consultative support on the VA on matters related to system security certification & accreditation and Authority to Operate (ATO). Coordinate and lead security and privacy activities within project teams and develop security and privacy related artifacts. Review and identified system/applications security controls in accordance with NIST SP-800 53 Rev 4 guidance and VA Handbook 6500. Responsible for on time deliverables of assigned and related security and privacy artifacts. Must be able to identify and mitigate risks to the program. Demonstrated experience in a remote work environment. Ability to proactively communicate and coordinate with various internal and external project stakeholders, depending on needs. Identifying and communicate symptoms for process improvement. Ability to work independently with minimal guidance and supervision Support a team of other cyber security professionals Support Application development/maintenance and IT