Security Controls Assurance Lead Jobs

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Stripe Security team is dedicated to improving the security of Stripe and its users. Our users trust us with some of their most sensitive information, and we make security a first-class consideration in everything we do. Security concerns are ever-evolving, creating an extremely dynamic environment for the Security team. The Security Governance, Risk, and Compliance (SGRC) team at Stripe provides security governance, risk management, and compliance capabilities to allow Stripe to make strategic security decisions, measure our risk and control posture, and represent Stripe Security to internal and external entities. The successful operation of our organization accelerates Stripe by optimizing the communication and expectations of our security program. What you’ll do We're looking for a Security GRC Program Manager with deep expertise in security compliance to serve as the primary interface between Stripe's Security organization and external auditors, regulators, and compliance stakeholders. In this role, you'll represent the Security team in audit engagements, articulate how Stripe's security controls are designed and how they operate, and ensure that compliance obligations across a complex global regulatory landscape are met with consistency and rigor. In this role, you will act as a proxy between external entities like regulators and auditors, and our internal security teams, ensuring consistency in compliance responses and helping main

About Taskrabbit: Taskrabbit is a marketplace platform that conveniently connects people with Taskers to handle everyday home to-do’s, such as furniture assembly, handyman work, moving help, and much more. At Taskrabbit, we want to transform lives one task at a time. As a company we celebrate innovation, inclusion and hard work. Our culture is collaborative, pragmatic, and fast-paced. We’re looking for talented, entrepreneurially minded and data-driven people who also have a passion for helping people do what they love. Together with IKEA, we’re creating more opportunities for people to earn a consistent, meaningful income on their own terms by building lasting relationships with clients in communities around the world. Taskrabbit is a hybrid company with employees distributed across the US and EU and a Built In — Best Places to Work (2022, 2023, 2024, 2025) continually ranked across multiple national and regional categories. Join us at Taskrabbit, where your work will be meaningful, your ideas valued, and your potential unleashed! This role operates on a hybrid schedule requiring two days of in-office collaboration per week. About the Role Reporting to the Infrastructure Director of Engineering, you are a pragmatic security leader who acts as a business enabler rather than a gatekeeper. You thrive in a high-velocity, non-regulated environment where you must define "what good looks like" from scratch and drive security progress with a blend of strong planning skills and strong cross-functional partnerships. You are a technical player-coach who manages the "how" behind engineering initiatives, providing direct guidance to a lean team which needs to navigate trade-offs between quality, depth, and delivery volume. You are just as comfortable planning core initiatives as you are writing a proposal for security program improvements. You have a proven track record of seamlessly integrating security controls within the Software Development Life Cycle (SDLC). Abo

Everpure (NYSE: P) has evolved from storage pioneer to data platform, closing fiscal 2026 with $3.7 billion in revenue, its first billion-dollar quarter, and accelerating growth into FY27. Our strategic agenda spans the companies defining the next era of technology - hyperscalers, AI labs, the AI hardware supply chain, data platform providers, and the broader AI ecosystem. This type of work—work that changes the world—is what the tech industry was founded on. So, if you're ready to seize the endless opportunities and leave your mark, come join us. THE ROLE As a Security-Focused AI Software Engineer on our Digital Product and AI Platform team, you will champion secure-by-design principles to safeguard production backend microservices and cutting-edge AI architectures. Collaborating closely with engineering, product management, cloud infrastructure, and security teams, you will architect, build, and operate resilient systems that power enterprise AI capabilities. By embedding automated security controls, threat modeling, and proactive vulnerability management directly into the development lifecycle, you will ensure our digital platform remains performant, trustworthy, and protected at scale. WHAT YOU'LL DO Drive Application Security & Secure SDLC: Champion end-to-end security practices across the engineering team by conducting threat modeling, secure design reviews, and vulnerability remediations, ensuring all digital products and APIs adhere to least-privilege, robust authentication, and strict data protection standards. Architect Secure AI & Microservices: Design, build, and deploy production-grade backend services and Agentic AI workflows in Python on AWS, integrating LLMs, retrieval-augmented generation (RAG) pipelines, and microservices with enterprise platforms. Establish AI Guardrails & Governance: Implement safeguards—including output validation, automated prompt testing, fallback mechanisms, rate limiting, and human-in-the-loop workflows—to ensure

Who are we? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! Why This Role? Ready to build AI agents that revolutionize enterprise security? The North Security team is looking for a Senior Software Engineer to create autonomous systems that handle the complex, critical tasks security practitioners face every day. Your Role: As a Senior Software Engineer focused on agentic security, you'll build intelligent systems that empower security teams. Your responsibilities will include: Build autonomous security agents that perform alert triage, secure code reviews, threat modeling, and vulnerability assessment Develop agent orchestration systems that help security practitioners automate repetitive security tasks Design and implement agent security controls to ensure our AI agents can safely interact with sensitive enterprise data Create the security infrastructure that allows agents to operate in high-trust environments with stringent deployment requirements Ship production-ready agent capabilities that run efficiently in resource-constrained environments Research and implement novel security patterns for AI agent systems, sometimes requiring custom solutions where standard libraries fall short C

InfraSec operates on a preventative, enabling model: rather than acting as a manual approval gatekeeper or compliance auditor, we develop automated guardrails and platform capabilities. We integrate security directly into the platform runtime, CI/CD, and Infrastructure-as-Code (IaC) workflows so engineering teams can operate securely at scale without friction. This role can be based out of our office or remotely in the United States. What You’ll Do Harden hosts and containerized workloads using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon) Secure containerized infrastructure across multi-cloud environments via RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection Build and manage automated services for Cloud Security Posture Management (CSPM), workload identity, vulnerability management, and access controls across AWS, Azure, and GCP Write production-quality code and leverage Infrastructure-as-Code (Terraform) to version, test, and deploy security controls as code Build real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture at Atlas scale Lead initiatives across their full lifecycle; from threat modeling and architectural design to implementation, rollout, and long-term production reliability What We’re Looking For Minimum Qualifications: 10+ years in SRE, Infrastructure Engineering, or Cloud Security Engineering A track record of operating at Staff or Principal scope: defining technical direction, resolving cross-team ambiguity, and personally championing initiatives from conception to delivery Strong coding skills in Go (Golang), Python, C, C++, or Rust Proven track record of building and operating large-scale distributed systems or cloud platform infrastructure Hands-on experience using Terraform, CloudFormation, or Ansible for automated infrastructure provisioning Demonstrated experience owning infrastructure in Linux,

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Role As a Technical Program Manager for Security, you'll drive execution of high-stakes programs that span security engineering, infrastructure, and cross-functional teams across Anthropic. You'll be responsible for the strategy, planning, and execution of technical security programs that enable Anthropic to meet its Responsible Scaling Policy (RSP) commitments while building towards a security posture that scales with our rapid growth. This role sits at the intersection of Security Engineering, Security Compliance, Infrastructure, Product, Research, Policy, and more. This role demands someone who thrives in ambiguity, makes well-reasoned decisions under pressure, and can translate complex security requirements into executable programs with compressed timelines. Responsibilities: Own end-to-end security program execution for RSP security readiness – Drive security workstreams from requirements interpretation through implementation, coordinating across Security Engineering, Infrastructure, Research, and Compliance teams to ensure we meet RSP commitments on aggressive timelines Coordinate complex multi-team deployments – Manage security control rollouts and migrations, like endpoint hardening and egress reduction that require careful change management across engineering organizations Make real-time technical trade-off decisions – Balance competing constraints between security controls, research velocity, and operational feasibility during fast-moving program cycles Build program structure for emerging security domains – Create program charters, establish roles and timelines, develop communication strategies, and define success

Work Flexibility: Hybrid Position Summary The Network Security Engineer is responsible for designing, reviewing, implementing, and supporting enterprise network security architectures to protect the organization’s infrastructure, applications, and external connectivity from cybersecurity threats. This role combines strong network security engineering and architecture expertise with hands-on cybersecurity operations experience. The ideal candidate can independently assess network security risks, design appropriate security controls, and support security investigations in collaboration with Cybersecurity, SOC, and Incident Response teams. The role focuses on securing Internet-facing applications, DMZs, extranets, third-party connectivity, network segmentation, and enterprise security boundaries. This is a cybersecurity-focused engineering position, not primarily a network infrastructure support or firewall administration role. What will you do: Design, review, and implement secure network architectures for enterprise, cloud, hybrid, and remote environments. Evaluate and secure DMZs, extranets, Internet-facing applications, third-party connections, and external access pathways. Identify network security risks and define appropriate technical controls, including firewall policies, segmentation, access restrictions, encryption, monitoring, and compensating controls. Establish and maintain security zones, network segmentation, and trust boundaries to reduce unauthorized access and lateral movement. Engineer and manage enterprise security technologies, including Next-Generation Firewalls (NGFW), VPN, IDS/IPS, Network Access Control (NAC), and related perimeter security solutions. Investigate suspicious network activity and support cybersecurity incident response by analyzing firewall

The mission of The New York Times is to seek the truth and help people understand the world. That means independent journalism is at the heart of all we do as a company. It’s why we have a world-renowned newsroom that sends journalists to report on the ground from nearly 160 countries. It’s why we focus deeply on how our readers will experience our journalism, from print to audio to a world-class digital and app destination. And it’s why our business strategy centers on making journalism so good that it’s worth paying for. About the Role, Mission or Department Overview The Senior Engineer, Cybersecurity is a hands-on contributor who designs, builds, and operates security controls and services that protect The Times' systems, data, and users. As a member of the Security Architecture team, you will own complex initiatives end-to-end, drive measurable risk reduction, and collaborate across product engineering and enterprise technology with technical depth, operational rigor, and clear communication aligned with business outcomes. Who are we? Cybersecurity helps prevent The Times from becoming news. Our teams work to protect the news makers, their support staff, the platforms they rely on every day, as well as all of The Times' products and services, and our readers who consume them. This role reports to the Director of Engineering, Cybersecurity. Responsibilities: Create an environment that favors context, not control. Empower product engineers and ensure they have the relevant information and tools to deliver secure products and services. Design, implement, and operate security controls and services (e.g., identity and access management, secrets management, endpoint/agent hardening, network segmentation, detection, and response automation) that meet reliability, security, scalability, and observability standards. Partner with product and platform teams to integrate security into architecture and developer workflows while articulating business impact and tradeoff

About the Team The Privacy Engineering team builds secure, reliable systems that help OpenAI meet its legal obligations while protecting user data. We partner closely with Legal and engineering teams across OpenAI to support lawful data access requests and other critical legal workflows. Our work turns complex, high-stakes processes into auditable and dependable technical systems with clear human oversight and strong privacy and security controls. About the Role We’re looking for a full-stack Software Engineer to build the internal tools and data pipelines that power lawful data access request workflows and Legal Operations. You will work across product and data systems to make authorized retrieval and case handling accurate, efficient, and auditable. This role is well suited to someone who enjoys translating ambiguous operational requirements into durable systems, cares deeply about sensitive-data handling, and wants to improve both technical reliability and the day-to-day experience of the people operating these workflows. In this role, you will: Design, build, and operate backend systems and workflow tooling for the full lifecycle of lawful data access requests, from intake and scoping through authorized retrieval, review, preparation, and audit. Build reliable data pipelines and interfaces across products and data stores so authorized teams can locate and handle the right records accurately and reproducibly. Implement least-privilege access, approval gates, provenance, audit trails, data minimization, and safe failure modes for sensitive workflows. Partner with Legal and Legal Operations to translate legal and operational requirements into clear technical designs and intuitive operator experiences. Identify responsible automation opportunities that reduce repetitive work while preserving human review, judgment, and accountability. Own production systems through testing, observability, incident response, documentation, and continuous reliability improvements. Hel

About the Team The Privacy Engineering team builds secure, reliable systems that help OpenAI meet its legal obligations while protecting user data. We partner closely with Legal and engineering teams across OpenAI to support lawful data access requests and other critical legal workflows. Our work turns complex, high-stakes processes into auditable and dependable technical systems with clear human oversight and strong privacy and security controls. About the Role We’re looking for a full-stack Software Engineer to build the internal tools and data pipelines that power lawful data access request workflows and Legal Operations. You will work across product and data systems to make authorized retrieval and case handling accurate, efficient, and auditable. This role is well suited to someone who enjoys translating ambiguous operational requirements into durable systems, cares deeply about sensitive-data handling, and wants to improve both technical reliability and the day-to-day experience of the people operating these workflows. In this role, you will: Design, build, and operate backend systems and workflow tooling for the full lifecycle of lawful data access requests, from intake and scoping through authorized retrieval, review, preparation, and audit. Build reliable data pipelines and interfaces across products and data stores so authorized teams can locate and handle the right records accurately and reproducibly. Implement least-privilege access, approval gates, provenance, audit trails, data minimization, and safe failure modes for sensitive workflows. Partner with Legal and Legal Operations to translate legal and operational requirements into clear technical designs and intuitive operator experiences. Identify responsible automation opportunities that reduce repetitive work while preserving human review, judgment, and accountability. Own production systems through testing, observability, incident response, documentation, and continuous reliability improvements. Hel

About the Team The Privacy Engineering team builds secure, reliable systems that help OpenAI meet its legal obligations while protecting user data. We partner closely with Legal and Engineering teams across OpenAI to support lawful data access requests and other critical legal workflows. Our work turns complex, high-stakes processes into auditable and dependable technical systems with clear human oversight and strong privacy and security controls. About the Role We’re looking for a full-stack Software Engineer to build the internal tools and data pipelines that power lawful data access request workflows and Legal Operations. You will work across product and data systems to make authorized retrieval and case handling accurate, efficient, and auditable. This role is well suited to someone who enjoys translating ambiguous operational requirements into durable systems, cares deeply about sensitive-data handling, and wants to improve both technical reliability and the day-to-day experience of the people operating these workflows. This role is based in San Francisco, CA, with two additional locations under consideration: London, UK, and Dublin, Ireland. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees. In this role, you will: Design, build, and operate backend systems and workflow tooling for the full lifecycle of lawful data access requests, from intake and scoping through authorized retrieval, review, preparation, and audit. Build reliable data pipelines and interfaces across products and data stores so authorized teams can locate and handle the right records accurately and reproducibly. Implement least-privilege access, approval gates, provenance, audit trails, data minimization, and safe failure modes for sensitive workflows. Partner with Legal and Legal Operations to translate legal and operational requirements into clear technical designs and intuitive operator experiences. Identify responsible automation o

About the Team OpenAI’s Client Platform Engineering team builds and operates the platforms that make employee devices secure, reliable, and easy to use. Our work spans device posture and trust, onboarding, application delivery, operating-system updates, fleet telemetry, and employee-facing remediation. We partner with Security, IT, Research, Applied, and specialized engineering teams to reduce friction while protecting OpenAI’s systems and data. About the Role As a Client Platform Engineer , You will build and own agentic solutions that automate OAI fleet operations and reduce employee friction, with measurable outcomes and reliability. You will develop first-party software, integrate commercial and open-source tools, and own changes from design and testing through deployment and production operations. Your work will improve security, reliability, and the employee experience. We’re looking for people who are passionate about automation, endpoint security, and building scalable solutions that improve employee experience. You should have deep experience securing and managing Linux fleets at scale, with strong software engineering skills to automate security controls and fleet operations across environments with different compliance requirements. Your problem-solving mindset and attention to detail will be key to success in this role. In this role, you will: Build the platforms that help employees do their best work on devices they can trust. Own the design, development, deployment, and operation of secure Linux endpoint management systems across environments with different compliance requirements. Create magical employee experiences by building agentic workflows with OpenAI products and models that use fleet telemetry to anticipate issues, guide remediation, and design friction out of everyday work. Make new hires productive from day one, using OpenAI products to simplify device setup, software delivery, and onboarding support. Build secure, reliable workflows with sc

About the team: The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information. About the role: Rubrik is seeking a Senior Commercial Compliance Analyst to lead Commercial Audit and Certification Management. In this role, you will own Rubrik's portfolio of security certifications and coordinated audits end-to-end, from evidence collection through auditor management to final report delivery, ensuring audit readiness is continuous and audit findings are tracked to closure. What you'll do: Own the audit and certification calendar across Rubrik's active portfolio: SOC 1, SOC 2, ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001, CSA STAR Level 1 and Level 2, TISAX Level 1 and Level 2, HITRUST, HIPAA. Serve as the primary point of contact for external auditors and certification bodies, managing scoping, fieldwork, evidence requests, and remediation of findings through to closure. Maintain the mapping between compliance controls and underlying evidence sources so audit readiness is continuous rather than a point-in-time scramble. Drive coordinated audit strategy, consolidating overlapping evidence requests across frameworks to reduce duplicate work for control owners. Lead evaluation and scoping of emerging and planned certifications to support Rubrik's international and AI governance expansion. Manage the lifecycle of certifications end-to-end, including retirements and transiti

Who We Are Verkada is transforming how organizations protect their people and places with an integrated, privacy-sensitive AI-powered platform that includes solutions for video security, access control, air quality sensors, alarms, intercoms, and visitor management. We’ve got serious momentum in the market: more than 30,000 customers (including 100+ of the Fortune 500), a $5.8B valuation , more than $1 billion in annualized bookings, and backing from CapitalG, Sequoia Capital, General Catalyst, Felicis Ventures, Next47 and more. Physical AI is one of the most consequential technology shifts of our time, and Verkada is at the center of it. You can look at all kinds of communities to see our platform’s impact in the world. It's the retailer that uses our agentic AI to deter theft before it happens. The warehouse that uses AI-powered alerts to make sure its team is protected on the floor with proper PPE. The school that’s alerted to a threat in real-time and triggers a lockdown in seconds, not minutes. We’re rapidly scaling this impact: today, more than 2 million Verkada devices are deployed across 170+ countries. About the Role Build and lead the GRCA function within Verkada’s Security Team. Manage risks, scale and meet Verkada’s growing compliance needs. Curate information provided to customers about Verkada’s security practices. You'll build scalable, automated programs that enable rapid business growth while maintaining customer trust. As Verkada expands globally with increasing enterprise customers, this role is critical to meeting sophisticated security and compliance expectations that directly impact revenue and risk management. What You'll Do Work cross functionally with Security, IT, Engineering, Product and Legal to provide guidance on security controls implementation including: effectiveness, implementation and automation Research, build and maintain tooling for testing and continuous monitoring of security controls across multiple platforms incl

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the Role & Team The Cryptographic Services & Infrastructure team secures and manages cryptographic keys and enables Robinhood engineering teams to safely leverage core capabilities like encryption and decryption. Join a high-impact team responsible for protecting some of Robinhood's most sensitive financial and customer data! In this role, you will help build and operationalize Robinhood's new in-house card-processing service—a critical initiative that brings core capabilities in-house and offers meaningful ownership across software, infrastructure, security, and operations. While prior cryptography or security experience is highly preferred, we are excited to empower strong engineers with a passion for security to learn and grow their skills on the job. This role is based in our Bellevue, WA and Menlo Park, CA offices, with in-person attendance expected at least 3 days per week. At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams. What you'll do day-to-day Design, build, and maintain production services and infrastructure supporting key management, encryption, and decryption functions. Help architect, launch, and scale Robinhood’s new in-house card-processing environment to protect sensitive card, financial, and tax-related data. Write clean, maintainable production code and build operational tooling across software, infrastructure, and security controls. Collaborate with internal engineering teams to support migrations, drive adoption of