Security Controls Assurance Lead Jobs

APPLICATION AND WEB SECURITY SPECIALIST THE OPPORTUNITY The Application and Web Security Specialist will serve as a security consultant to Web and Application Developers. You will work with developers on identifying security risks within their applications and validating remediation. This role offers the opportunity to build solid relationships throughout the enterprise, with developers and vendors, while learning about the various technologies employed within our organization. There are other opportunities to serve included with this role that relate to other Security disciplines such as Threat Security, Vulnerability Management, and Event Correlation. THE TEAM The Information Security Team is responsible for the confidentiality of customer and employee information, ensuring the data stored and shared maintains integrity, all while making sure that all of this does not impact the availability of the entire Dillard’s enterprise. This team is expected to be high-performing. To meet this expectation, the team members are communicative and collaborative, always sharing knowledge and research. Members of this team should be able to understand what is expected of them and adjust on the fly, as priorities may change depending on the company's needs. If you are someone who sets a standard of excellence for yourself and you enjoy working alongside others who set the same standard and who genuinely want each of their peers to succeed, you may be the perfect addition to this team. WHAT YOU WILL DO Inspect and assess current solutions for Web and Application Security risks Architect and implement security controls within the Software Development Lifecycle (SDLC) Hold recurring cadences with development and security leadership to discuss findings and future paths for the company regarding application security posture Participate in vulnerability verification and assist development teams in remediation based on reports from scanners, along with manual application sec

Our vision is to transform how the world uses information to enrich life for all. Join an inclusive team passionate about one thing: using their expertise in the relentless pursuit of innovation for customers and partners. The solutions we build help make everything from virtual reality experiences to breakthroughs in neural networks possible. We do it all while committing to integrity, sustainability, and giving back to our communities. Because doing so can fuel the very innovation we are pursuing. As the Assembly and Test (AT) IP Security Engineer, you will be part of the AT BISO (Business Information Security Officer) Organization. You will partner with Micron’s Enterprise Infrastructure and Security (EIS) and your business area (Assembly and Test) to implement security controls, reduce risk, and maintain business continuity. You will work within Assembly and Test organizations (and sites) to identify risks, help classify data and establish processes which are aligned to Micron’s security disciplines. You will serve as an ambassador for Assembly and Test Organization to protect Micron’s most sensitive data (Intellectual Property). You will institutionalize a security-first culture across AT operations and ensure compliance with micron’s security standards, whilst ensuring AT Business continuity Key Responsibilities Act as a Liaison with EIS team and AT business are to support roadmaps, strategies, and requirements to improve Micron’s security policies. Bridge security goals and commitments with articulated business needs driving towards a common set of goals and objectives Participate in defining clear goals and strategic initiatives to improve our security posture in line with Micron’s 7 Security Disciplines. Secure Data Handling: Help secure micr

Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. We are looking for an inspirational and hardworking person to join the Platform Hosting Cloud Security Engineering team at SIE! You'll be joining a team of innovative engineers who are unified in their mission to make PlayStation the best and most secure gaming platform. This support is fulfilled by minimizing impact to the platform while ensuring security needs are met. This role is highly technical and requires a shown grasp of security principles and how they are applied to production environments. You will assist in the planning, design, development, testing, and management of security tools and processes that provide protection and visibility of our cloud environments. Key Responsibilities Design, architect, and implement security controls and frameworks for PlayStation Infrastructure Be responsible for the detection of security gaps, and lead efforts to mature security tooling and operational processes Work with product and platform teams to define system requirements, engineer, and implement cloud based security applications and controls Write code to automate security processes which seamlessly integrate into code builds and deployments, applying DevSecOps processes and tools Architect, develop, and deploy automation solutions that help audit, secure, and

Bloomreach is building the world’s premier agentic platform for personalization .We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the entire customer journey. We're taking autonomous search mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses. We’re making conversational shopping a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey. We're designing the future of autonomous marketing , taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do. And we're building all of that on the intelligence of a single AI engine — Loomi — so that personalization isn't only autonomous…it's also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora. About the Role You will serve as a trusted security partner to Engineering, DevOps, and IT, designing and hardening secure AWS environments, securing our containerized and Linux-based workloads, and protecting our corporate infrastructure and identity/access tooling — while partnering closely with our dedicated SOC team on detection and response. You will act as a key member of the Cloud Security team, owning cloud and corporate infrastructure security architecture, vulnerability remediation, and Splunk administration and data integration, in close partnership with the SOC team, which owns detection content, alerting, playbooks, and incident triage/response. Your Job Will Be (but not limited to) Design, implement, and monitor security controls across our AWS cloud infrastructure, applying platform-native s

Bloomreach is building the world’s premier agentic platform for personalization .We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the entire customer journey. We're taking autonomous search mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses. We’re making conversational shopping a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey. We're designing the future of autonomous marketing , taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do. And we're building all of that on the intelligence of a single AI engine — Loomi — so that personalization isn't only autonomous…it's also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora. About the Role You will serve as a trusted security partner to Engineering, DevOps, and IT, designing and hardening secure AWS environments, securing our containerized and Linux-based workloads, and protecting our corporate infrastructure and identity/access tooling — while partnering closely with our dedicated SOC team on detection and response. You will act as a key member of the Cloud Security team, owning cloud and corporate infrastructure security architecture, vulnerability remediation, and Splunk administration and data integration, in close partnership with the SOC team, which owns detection content, alerting, playbooks, and incident triage/response. Your Job Will Be (but not limited to) Design, implement, and monitor security controls across our AWS cloud infrastructure, applying platform-native s

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. Key Responsibilities Lead technical delivery: Run agile delivery teams to unify and scale AI efforts, delivering a robust portfolio of enterprise AI solutions across Micron. Embed security by design: Integrate automated security controls into Micron's AI ecosystem (CI/CD pipelines, sensitive-data classification, identities), positioning security as an enabler. Translate strategy to impact : Convert business challenges into actionable technical strategies, focusing on rapid, high-impact solutions with clear returns and minimal delay. Establish enterprise architecture : Help define the enterprise AI architecture through a strategic roadmap, robust framework selection, and standardized, reusable development patterns for global deployment. Build and strengthen the team : Cultivate a premier AI engineering team, aligning skills across a distributed group, supporting around-the-clock delivery, and driving innovation through experimentation. Cultivate the program : Serve as spokesperson for Micron's IT Generative AI enterprise program with internal and external audiences, showcasing engineering accomplishments with strategic partners while reinforcing the unified enablement vision. Minimum Qualifications Experience: 10+ years in software engineering or IT, including senior leadership handling AI/ML or digital-transformation portfolios. Education: Bachelor's or master's degree in computer

Location Details: India, Remote At GoDaddy the future of work looks different for each team. Some teams work in the office full-time; others have a hybrid arrangement (they work remotely some days and in the office some days) and some work entirely remotely.​ This is a remote position, so you’ll be working remotely from your home. You may occasionally visit a GoDaddy office to meet with your team for events or meetings. Join our Team Do you want to be an Information Security Lead at GoDaddy? GoDaddy’s Security organization is looking for a Cloud Security Engineer. We work out large-scale and cross-company security challenges while ensuring that partnership with the development and operational communities remains front of mind. At GoDaddy, Security Engineers apply their strong hands-on technical skills to craft scalable solutions for multiple problems. You must communicate with GoDaddy Engineering teams, perform security assessments, prioritize security risks, and design. We, as a team, implement high-quality security engineering solutions! What you'll get to do... The Senior Cloud Network Security Engineer will play a crucial role in designing, building, and securing large-scale, distributed cloud environments that support GoDaddy Services. This role operates at the intersection of cloud infrastructure, security architecture, and engineering execution. The successful candidate will collaborate closely with service teams, security leaders, and compliance partners to embed security-by-design principles into cloud services and internal platforms. This position requires advanced technical expertise in cloud-native security controls. It also needs a strong understanding of threat models in hyperscale environments. Additionally, it involves influencing architecture decisions across multiple teams. The role demands hands-on engineering, good judgment in ambiguous situations, and proficiency at translating security requirements into scalable, automated solutions. Bui

Location: United States – Remote Clearance: Ability to obtain and maintain a Public Trust Salary Range: 152K - 184K LTS is seeking a highly skilled Senior Agentic AI Security Engineer to ensure our AI systems are secure, trustworthy, resilient, and governed responsibly. You'll design safeguards that protect AI agents, retrieval pipelines, prompts, tools, memory, and model interactions from misuse while ensuring every AI response remains explainable, auditable, and aligned with enterprise security and compliance requirements. This role focuses on securing AI systems, not simply securing infrastructure. The Agentic AI platform is designed to help engineers understand, analyze, and modernize one of the most consequential legacy software systems still operating today. Our platform enables engineers to ask questions in plain English and receive explainable, verifiable answers traced directly back to decades of production source code. Rather than replacing engineers, we're building AI that accelerates engineering through transparency, traceability, and intelligent reasoning. We're building an AI-native engineering platform supporting the modernization of mission-critical healthcare systems serving millions of Veterans nationwide. The platform is designed for deployment across federal enterprise environments and is being engineered to align with FedRAMP security controls, Zero Trust principles, and federal compliance requirements. You'll work alongside AI architects, software engineers, platform engineers, cybersecurity engineers, and product leaders to embed AI security into every stage of development from experimentation through production deployment. We’re building an AI platform where security, transparency, and trust are foundational, not afterthoughts. What You’ll Do: Secure Agentic AI Systems Design and implement security controls for autonomous and multi-agent AI systems. Secure agent orchestration, tool execution, memory, and external integrations. Identify and mi

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. The Staff AI Security Engineer Opportunity Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. At Okta, we’re building the future of secure, enterprise-grade AI Agents. We’re looking for a Staff AI Security Engineer to join our dedicated Security team. In this role, you will define the technical vision, architecture, and hands-on security controls for AI models, agentic workflows, and autonomous systems across Okta. This is a senior individual contributor role for a hands-on engineer who can design scalable AI security infrastructure, mentor engineers, and partner with cross-functional teams to build secure "paved roads" for AI innovation. What you’ll be doing Secure AI Implementations: Design and deploy enterprise AI guardrails, gateways, and other controls to protect our agentic workflows from emerging threats Agent Hardening & Sandboxing: Establish security architectures for local and hosted agents to mitigate tool-calling, prompt injection, goal misalignment, and data exfiltration risks. Define Paved Roads & Secur

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As an Offensive Security Engineer within the Detection and Response team (DART), you'll engage in the offensive security assessments that strengthen our defense capabilities. Working closely with the larger InfoSec team, detection engineers, and external engineering partners, you'll identify security weaknesses, validate detection mechanisms, and provide actionable recommendations to enhance our security posture. You'll collaborate with various architecture and engineering teams to continuously validate and improve our security controls and detection capabilities, with a strong focus on developing repeatable testing frameworks and metrics-driven security improvements. You Have: 4+ years: of relevant professional experience in offensive security, with demonstrated experience in purple team exercises, breach attack simulation, and detection engineering collaboration. Development experience: proficiency in Python or Go for building security tooling and automation, including experience with SOAR platforms and configuration management. Security assessment expertise: performing full-stack security assessments of web applications, APIs, cloud infrastructure, and backend systems. Platform expertise

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a Senior Cloud Security Engineer, you will define and implement the security strategy and controls across our hybrid and multi-cloud environment. Embedded within the Platform Security team, you will operate with a high degree of autonomy, partnering closely with Infosec and Infrastructure teams to secure our cloud infrastructure. Your architectural decisions will directly impact the security of a global platform. You Will: Create Paved Roads: Build innovative services and tooling that make the secure path the easiest path, enabling developers to deploy faster and safer. Engineer Self-Healing Infrastructure: Architect and scale systems that monitor our cloud posture and automatically enforce a self-healing security baseline. Design Secure-by-Default Blueprints: Partner deeply with infrastructure teams to bake threat modeling and secure-by-default patterns into the core DNA of our cloud environments. Implement Effective Guardrails: Deploy organizational security controls that protect our developers without slowing them down. Advance Detections: Write and optimize detections tailored specifically to our footprint. You Have: 4+ years: of relevant professional experience. Experience writing a

Bloomreach is building the world’s premier agentic platform for personalization .We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the entire customer journey. We're taking autonomous search mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses. We’re making conversational shopping a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey. We're designing the future of autonomous marketing , taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do. And we're building all of that on the intelligence of a single AI engine — Loomi — so that personalization isn't only autonomous…it's also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora. Senior Staff Security Engineer The Senior Staff Security Engineer owns current and target-state data architectures and reporting while also designing, implementing, and monitoring cloud (AWS/GCP) infrastructure security controls; deploying, securing, configuring, and operating SIEM and other security resources; identifying, triaging, and remediating infrastructure and web vulnerabilities; leading incident triage and external-researcher engagement; mentoring junior staff; and helping shape secure, scalable approaches for AI-enabled tooling, automation, and emerging product capabilities. Role summary and core responsibilities 6+ years of relevant experience Candidates must demonstrate proficiency in cloud security, network security, URL filtering, common security frameworks, and CVE lifecycle management Prac

Who We Are At MongoDB, we are building the future of data platforms with MongoDB Atlas; our fully managed, multi-cloud database service. The Infrastructure Security (InfraSec) team sits within Site Reliability Engineering (SRE) in the CTO organization. We are an engineering team dedicated to building the security infrastructure, primitives, and reusable controls that protect MongoDB Atlas across AWS, Azure, and Google Cloud (GCP). InfraSec operates on a preventative, enabling model: rather than acting as a manual approval gatekeeper or compliance auditor, we develop automated guardrails and platform capabilities. We integrate security directly into the platform runtime, CI/CD, and Infrastructure-as-Code (IaC) workflows so engineering teams can operate securely at scale without friction. This role can be based out of our New York City office or remotely in the eastern or central timezone. What You’ll Do Harden hosts and containerized workloads using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon) Secure containerized infrastructure across multi-cloud environments via RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection. Build and manage automated services for Cloud Security Posture Management (CSPM), workload identity, vulnerability management, and access controls across AWS, Azure, and GCP Write production-quality code and leverage Infrastructure-as-Code (Terraform) to version, test, and deploy security controls as code Build real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture at Atlas scale Lead initiatives across their full lifecycle; from threat modeling and architectural design to implementation, rollout, and long-term production reliability What We’re Looking For Minimum Qualifications: 5+ years in SRE, Infrastructure Engineering, or Cloud Security Engineering Strong coding skills in Go (Golang), Python, C, C++, or R

Who We Are At MongoDB, we are building the future of data platforms with MongoDB Atlas; our fully managed, multi-cloud database service. The Infrastructure Security (InfraSec) team sits within Site Reliability Engineering (SRE) in the CTO organization. We are an engineering team dedicated to building the security infrastructure, primitives, and reusable controls that protect MongoDB Atlas across AWS, Azure, and Google Cloud (GCP). InfraSec operates on a preventative, enabling model: rather than acting as a manual approval gatekeeper or compliance auditor, we develop automated guardrails and platform capabilities. We integrate security directly into the platform runtime, CI/CD, and Infrastructure-as-Code (IaC) workflows so engineering teams can operate securely at scale without friction. This role can be based out of our New York City office or remotely in the eastern or central timezone. What You’ll Do Harden hosts and containerized workloads using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon) Secure containerized infrastructure across multi-cloud environments via RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection. Build and manage automated services for Cloud Security Posture Management (CSPM), workload identity, vulnerability management, and access controls across AWS, Azure, and GCP Write production-quality code and leverage Infrastructure-as-Code (Terraform) to version, test, and deploy security controls as code Build real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture at Atlas scale Lead initiatives across their full lifecycle; from threat modeling and architectural design to implementation, rollout, and long-term production reliability What We’re Looking For Minimum Qualifications: 5+ years in SRE, Infrastructure Engineering, or Cloud Security Engineering Strong coding skills in Go (Golang), Python, C, C++, or R

Who are we? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! Role Overview Ready to build AI agents that revolutionize enterprise security? The North Security team is looking for a Senior Software Engineer to create autonomous systems that handle the complex, critical tasks security practitioners face every day. Key Responsibilities As a Senior Software Engineer focused on agentic security, you'll build intelligent systems that empower security teams. Your responsibilities will include: Build autonomous security agents that perform alert triage, secure code reviews, threat modeling, and vulnerability assessment Develop agent orchestration systems that help security practitioners automate repetitive security tasks Design and implement agent security controls to ensure our AI agents can safely interact with sensitive enterprise data Create the security infrastructure that allows agents to operate in high-trust environments with stringent deployment requirements Ship production-ready agent capabilities that run efficiently in resource-constrained environments Research and implement novel security patterns for AI agent systems, sometimes requiring custom solutions where standard libraries fal