Security Controls Assurance Lead Jobs

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a passionate Senior Cheat Software Engineer. As a Senior Cheat Software Engineer you’ll work closely with other engineering and product teams to research and implement solutions that mitigate threats to the player experience while staying ahead of evolving attack vectors. This is a full-time, permanent and in-office position based in Rockstar’s state-of-the-art game development studio in Dundee, Scotland. WHAT WE DO The Rockstar Games Cheat Software Engineering Team supports the entire cheat lifecycle including discovery, technical breakdown, reproduction, root cause analysis and remediation. We strive to understand the threat landscape affecting our titles and the gaming industry as a whole to maintain and continuously update our knowledge. We independently assess our applications, services, and builds to identify potential vulnerabilities and design flaws and work with development teams to remediate. RESPONSIBILITIES Reverse engineer, analyse, debug, and document application behaviours. Develop, fine-tune, and support anti-cheat measures and in-game abuse prevention systems. Drive root cause analysis efforts behind internally and publicly identified vulnerabilities. Collaborate with cross-functional teams to improve security controls and detection. Support the active development of internal tooling and anti-cheat solutions. Identify gaps in anti-cheat capabilities and detection&

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a passionate Senior Cheat Software Engineer. As a Senior Cheat Software Engineer you’ll work closely with other engineering and product teams to research and implement solutions that mitigate threats to the player experience while staying ahead of evolving attack vectors. This is a full-time, permanent and in-office position based in Rockstar’s state-of-the-art game development studio in Edinburgh, Scotland. WHAT WE DO The Rockstar Games Cheat Software Engineering Team supports the entire cheat lifecycle including discovery, technical breakdown, reproduction, root cause analysis and remediation. We strive to understand the threat landscape affecting our titles and the gaming industry as a whole to maintain and continuously update our knowledge. We independently assess our applications, services, and builds to identify potential vulnerabilities and design flaws and work with development teams to remediate. RESPONSIBILITIES Reverse engineer, analyse, debug, and document application behaviours. Develop, fine-tune, and support anti-cheat measures and in-game abuse prevention systems. Drive root cause analysis efforts behind internally and publicly identified vulnerabilities. Collaborate with cross-functional teams to improve security controls and detection. Support the active development of internal tooling and anti-cheat solutions. Identify gaps in anti-cheat capabilities and detecti

About the Team Governance, Risk, and Compliance (GRC) is foundational to Security delivering mission outcomes at OpenAI. We’re excited about building creative solutions to ambiguous security requirements and delivering new technologies to mission critical customers. The GRC team provides security and engineering expertise to ensure our customers’ most critical and stringent requirements are met. We are technical in what we build but are operational in how we do our work, and are committed to obtaining, expanding, and maintaining Authorizations to Operate (ATOs) for critical systems while fostering a collaborative and execution-driven culture. About the Role Our technologies support some of the most important and impactful work in the world, including our strategic and high-impact customers in the public sector. As a GRC Program Manager, you’ll play a pivotal role in achieving US government (USG) ATOs and compliance frameworks, including but not limited to FedRAMP and Department of War (DoW),for OpenAI products and support agency-specific ATOs for systems deployed in highly regulated and secure environments. You’ll work closely with engineers, internal stakeholders, and external assessors to design, document, and implement security controls that meet stringent compliance requirements. Your creativity and execution-focused approach will be critical in navigating complex challenges while maintaining the trust of our stakeholders. We’re looking for people who bring: Proven experience in obtaining and maintaining a FedRAMP ATO and agency specific ATOs in highly restricted environments, within government or regulated sectors. A deep understanding of USG security frameworks and policies (e.g., NIST, RMF, FedRAMP). Ability to communicate technical concepts to diverse audiences, including engineers and non-technical stakeholders. Exceptional technical program management skills, with the ability to multitask and deliver large complex programs under pressure. This role is base

Gong harnesses the power of AI to transform how revenue teams win. The Gong Revenue AI Operating System unifies data, insights, and workflows into a single, trusted system that observes, guides, and acts alongside the world’s most successful revenue teams. Powered by the Gong Revenue Graph, AI-powered intelligence, specialized agents, and trusted applications, Gong helps more than 5,000 companies around the world deeply understand their teams and customers, automate critical sales workflows, and close more deals with less effort. For more information, visit www.gong.io. At Gong, you will join a company built on innovative products, ambitious goals, and passionate people. We are shaping the future of revenue intelligence and we want people who are excited to build what comes next. You will work with a team that dreams big, moves fast, and cares deeply about the craft and about each other. Here, transparency and trust are core to how we operate, and every person has the opportunity to make a visible impact. If you want to grow, stretch, and do work that truly matters, Gong is the place to do the best work of your career. We’re looking for an experienced, multidisciplinary Security Engineer with a strong technical foundation and the ability to learn and own new technologies and domains from the ground up.You’ll join Corporate Security Engineering within Gong’s Cyber Defense organization, You’ll design, implement, and mature the security controls that protect Gong’s business applications, workforce, and corporate environment. You’ll work closely with Cyber Defense, IT, DRE, R&D, People, Legal, and GRC to embed security controls at scale. Our strategy is AI-first and built on identity-centric controls, Zero Trust principles, and scalable automation. You’ll Own The security posture of Gong’s corporate technology stack, including AI security, identity, DLP and insider risk, EDR, MDM, browser security, SSPM/CASB, network security, and email and collaboration security. Z

The Security Operations (SecOps) Engineer is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats across the organisation’s infrastructure, cloud services, endpoints, identities, and business applications. The role supports continuous improvement across security monitoring, vulnerability management, incident response, governance, and operational security controls. Working closely with IT, engineering, and business stakeholders, the SecOps Engineer helps protect organisational assets, data, and services while supporting compliance with internal policies, security standards, and regulatory requirements. Building innovative solutions; enabling safer workplaces for everyone. We’ll create a safer working world, building software to support a global network of responsible buyers, suppliers and partners. We take the pain out of compliance for over 50,000 organisations globally, helping them protect their people, their operations, and the planet. Keeping our network of hiring clients, suppliers, and contractors compliant with the standards that matter most, from health and safety and sustainability to ethical behaviour by building best in class solutions. The tech we build today, will create a better tomorrow. • Monitor and investigate security alerts and incidents. • Conduct threat hunting activities using SIEM, EDR, and cloud security platforms. • Manage vulnerability scanning, assessment, prioritisation, and remediation tracking. • Develop and maintain security monitoring rules and detection logic. • Support incident response investigations and forensic activities. • Administer security platforms such as Microsoft Defender XDR, Sentinel, Entra ID, and vulnerability management tools. • Review and improve security configurations across cloud and on-premises systems. • Support third-party risk assessments and supplier security reviews. • Assist with ISO 27001, SOC, Cyber Essentials, GDPR, and other compliance activities. • Develop se

The Security Operations (SecOps) Engineer is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats across the organisation’s infrastructure, cloud services, endpoints, identities, and business applications. The role supports continuous improvement across security monitoring, vulnerability management, incident response, governance, and operational security controls. Working closely with IT, engineering, and business stakeholders, the SecOps Engineer helps protect organisational assets, data, and services while supporting compliance with internal policies, security standards, and regulatory requirements. Building innovative solutions; enabling safer workplaces for everyone. We’ll create a safer working world, building software to support a global network of responsible buyers, suppliers and partners. We take the pain out of compliance for over 50,000 organisations globally, helping them protect their people, their operations, and the planet. Keeping our network of hiring clients, suppliers, and contractors compliant with the standards that matter most, from health and safety and sustainability to ethical behaviour by building best in class solutions. The tech we build today, will create a better tomorrow. • Monitor and investigate security alerts and incidents. • Conduct threat hunting activities using SIEM, EDR, and cloud security platforms. • Manage vulnerability scanning, assessment, prioritisation, and remediation tracking. • Develop and maintain security monitoring rules and detection logic. • Support incident response investigations and forensic activities. • Administer security platforms such as Microsoft Defender XDR, Sentinel, Entra ID, and vulnerability management tools. • Review and improve security configurations across cloud and on-premises systems. • Support third-party risk assessments and supplier security reviews. • Assist with ISO 27001, SOC, Cyber Essentials, GDPR, and other compliance activities. • Develop se

Opportunity Overview: We’re looking for a Compliance Analyst to help our team ensure our compliance processes are consistent, scalable, and sustainable as the organization grows. Our team provides centralized ownership and management of the compliance programs by collaborating cross functionally across the organization. You’ll also partner closely with IT and People Operations to ensure the organization operates in accordance with legal, regulatory, and ethical standards. What you’ll do: Support execution of HITRUST, HIPAA, and SOC 2 readiness, certification, and re-certification activities. Assist in remediation of identified deficiencies of gap assessments.. Implement and monitor security controls aligned with HITRUST CSF and related standards. Provide guidance on HITRUST frameworks, MyCSF tool usage, and best practices. Collaborate with IT, security, and compliance teams to ensure smooth certification processes. Prepare and present audit findings and compliance reports to leadership. Support internal training programs to strengthen compliance awareness. Required Qualifications: Education : Bachelor’s degree in Information Security, Risk Management, or related field. Experience : 2 + years in compliance, Access control, ISO or HITRUST-related projects. Preferred Skills Familiarity with GRC tools and cloud security. Knowledge of major compliance frameworks (SOC 2, ISO 27001, GDPR, NIST, HIPAA). Strong analytical, communication, and stakeholder management skills. ISMS roles and responsibilities ( Entry to 5 yrs) Fair understanding of Information Security practices. Align to the organization policies and procedures. Ensure to get updated with ISMS roles as assigned by the department/process heads. Ability to commute/relocate: Hyderabad, Telangana: Reliably commute or planning to relocate before starting work (Preferred) Interview Process*: Connect with Talent Acquisition Meet with the Hiring Manager Behavioral Interview(s) Case Study Interview

Information Systems Security Officer - Journeyman Location: Customer Site – Columbia, MD (CANX1) Job Type: Full Time Clearance Required: Active TS/SCI with CI Polygraph About SIXGEN SIXGEN delivers agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. Position Overview SIXGEN is seeking an Information Systems Security Officer (ISSO) - Journeyman to support the USCYBERCOM J6 C4 & Cyber Directorate. The selected candidate will help implement and maintain enterprise cybersecurity programs, ensure compliance with DoD security requirements, and protect critical information systems through effective risk management and security engineering practices. Responsibilities Plan, implement, upgrade, and monitor security measures to protect computer networks and information systems. Ensure appropriate security controls are implemented to safeguard digital assets and critical infrastructure. Respond to cybersecurity incidents, security breaches, and malware events. Apply cybersecurity policies, principles, and best practices across IT and cybersecurity services. Develop and design security solutions that maintain the confidentiality, integrity, and availability of enterprise information. Identify, plan, and document improvements to existing security controls. Develop recommendations and courses of action (COAs) to address complex cybersecurity challenges. Interpret cybersecurity requirements and assist with cybersecurity and IT budget planning. Plan and coordinate the installation of new or modified security hardware, operating systems, and software. Support Cybersecurity Vulnerability Management by assessing, tracking, and implementing required system and network remediation efforts. Guide

The DevSecOps Engineer – AI Labs is responsible for implementing security practices within the DevOps pipeline, ensuring secure, efficient, and scalable cloud and on-premise infrastructure. Reporting to the Lead - DevSecOps, this role focuses on deploying and automating security controls, monitoring infrastructure for vulnerabilities, optimizing CI/CD security, and supporting FinOps cost optimization efforts. The position requires hands-on experience in security automation, cloud security tools, and DevOps best practices, ensuring AI-driven applications remain secure, compliant, and cost-efficient. Source: Adani Group | Job ID: 44279

About the role We are seeking an experienced and detail-oriented Information Security and Cloud Security Auditor to join our team. The ideal candidate will have 3-7 years of expertise in data security and privacy control implementation, internal auditing, third-party risk management, cybersecurity governance, and cloud security (banking sector preferred). This role will be responsible for conducting comprehensive IT and cloud security audits, ensuring compliance with regulatory requirements, and enhancing our information security policies and procedures. Key Responsibilities -Conduct IT and cloud security audits across various domains, including IT General Controls (ITGC), Information Security Controls, Cloud Security, Network Security, Vulnerability Management, and Vendor Risk Assessments. -Assess compliance with relevant laws, regulations, industry standards, and organizational policies across both on-premises and cloud environments. -Develop and enhance information security and cloud security policies and procedures in alignment with industry best practices. -Maintain thorough documentation of audit findings, risk assessments, security measures, working papers, audit program checklists, and evidence for internal and external reporting. -Validate ITGC, cloud security, and application-specific controls and manage audit documentation, risk assessments, evidence gathering, and control testing. -Follow up on audit findings and ensure timely closure of non-compliance and security issues identified during audits. -Manage and oversee third-party risk assessments and audits, ensuring robust security controls are implemented across traditional and cloud-based service providers. -Lead and participate in the development, migration, and implementation of security controls and policies for network and cloud security solutions. -Conduct risk-based security assessments of internal, vendor, and third-party hosted environments, covering both traditional IT infrastructure and cloud

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role Replit is the agentic software creation platform that enables anyone to build applications using natural language. As we scale to support millions of developers and enterprise organizations, maintaining a robust, transparent, and technically sound Governance, Risk, and Compliance (GRC) program is critical. We are looking for a GRC Engineer to serve as a key technical contributor for our compliance and risk management ecosystem. You will architect the systems and processes that automate trust, partnering deeply across the organization. We need a pragmatic operator who understands that GRC exists to enable the business—balancing rigorous standards with the velocity of a high-growth startup. What You'll Do Technical Excellence & Architecture Technical Depth: Act as a technical subject matter expert for the GRC team. You will drive quality, technical depth, and operational efficiency in our security controls. Program Architecture: Own the technical vision for Replit’s GRC program, moving the team from manual workflows toward "Compliance-as-Code" and automated evidence collection. Thought Leadership: Champion a culture of security and privacy across the company, educating teams on why controls exist rather than just enforcing them. Cross-Functional Collaboration Engineering & Architecture: Partner with Architects and Engineering Leads to "bake in" compliance requirements early in the design phase. You will translate complex technical implementations into narratives that satisfy frameworks without slowing down development. Legal & Privacy: Work closely with Legal Counsel to interpret and implement requirements for Privacy (GDPR, CCPA) and emerging AI-specific regulations (e.g., EU AI Act). Sales &a

Summary: The Senior SecOps Engineer at Showpad will play a crucial role within the Security Operations team, collaborating with various departments, including Engineering, Product, and other business units. This position focuses on identifying, managing, and mitigating cybersecurity risks, particularly in cloud-native environments, to enhance security capabilities. The ideal candidate will possess solid experience in SecOps practices and a deep understanding of modern security methodologies. Responsibilities: Manage cybersecurity operations, including tasks related to application, hardware, and cloud infrastructure security. Act as the key cybersecurity contact for internal teams regarding daily practices, company-wide initiatives, and the Showpad product. Ensure development teams adopt and implement best practices in software security development. Enable development teams by providing CI/CD processes that integrate security and quality tooling. Manage and improve our CNAPP solution. Oversee and manage cybersecurity operations, ensuring continuous monitoring and protection of cloud infrastructure and applications. Manage and respond to events related to vulnerability programs, endpoint protection, user behavior analytics, firewalls, IDS/IPS, and external threat intelligence. Collaborate with internal teams to ensure security best practices and policies are adhered to across the organization. Develop and maintain security controls and automation strategies within CI/CD pipelines. Monitor and assess risks, manage vulnerabilities, and implement appropriate security measures. Required Skills: Proven experience in information security, with a background in security operations, application security, or related roles. Skilled in identifying, analyzing, and handling phishing attempts and other social engineering threats. Strong knowledge of modern web application security practices and frameworks. In-depth understanding of the Secure Software Development Life Cycle (

TextNow is on a mission to make communications affordable and accessible for everyone. As a full MVNO operating our own mobile core network over LTE and 5G NSA, we have the unique advantage of controlling our network infrastructure end-to-end. We operate the HSS, PGW, and other critical network functions, giving us the flexibility to innovate and deliver exceptional service to millions of users. About the Role Join us in our mission to break down barriers to communication and free the flow of conversation for people everywhere. T extNow is looking for a new SecOps team member to secure, monitor , and enable automated response within our infrastructure. What You’ll Do Ensure Secure & Reliable Systems: Design, implement, and maintain security-focused infrastructure to protect TextNow’s services while ensuring reliability and scalability. Security Automation & Infrastructure as Code: Develop and enforce best practices using Terraform, Ansible, Crowdstrike , and AWS security tools , ensuring secure configurations, automated compliance checks, and infrastructure as code. Threat Detection & Incident Response: Participate in an on-call rotation to respond to security incidents, investigate vulnerabilities, and implement proactive measures to prevent future threats. Work closely with engineering teams to remediate security risks. Monitoring & Logging for Security: Improve observability by implementing security monitoring solutions, logging best practices, and alerting mechanisms to detect anomalies and suspicious activity. Access Control & Identity Management: Manage IAM roles, permissions, and policies to ensure least privilege access and enforce security controls across cloud and internal systems. Collaboration & Security Advocacy: Wo

TextNow is on a mission to make communications affordable and accessible for everyone. As a full MVNO operating our own mobile core network over LTE and 5G NSA, we have the unique advantage of controlling our network infrastructure end-to-end. We operate the HSS, PGW, and other critical network functions, giving us the flexibility to innovate and deliver exceptional service to millions of users. About the Role Join us in our mission to break down barriers to communication and free the flow of conversation for people everywhere. T extNow is looking for a new SecOps team member to secure, monitor , and enable automated response within our infrastructure. What You’ll Do Ensure Secure & Reliable Systems: Design, implement, and maintain security-focused infrastructure to protect TextNow’s services while ensuring reliability and scalability. Security Automation & Infrastructure as Code: Develop and enforce best practices using Terraform, Ansible, Crowdstrike , and AWS security tools , ensuring secure configurations, automated compliance checks, and infrastructure as code. Threat Detection & Incident Response: Participate in an on-call rotation to respond to security incidents, investigate vulnerabilities, and implement proactive measures to prevent future threats. Work closely with engineering teams to remediate security risks. Monitoring & Logging for Security: Improve observability by implementing security monitoring solutions, logging best practices, and alerting mechanisms to detect anomalies and suspicious activity. Access Control & Identity Management: Manage IAM roles, permissions, and policies to ensure least privilege access and enforce security controls across cloud and internal systems. Collaboration & Securi

Senior Space Red Team Operator SIXGEN's mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and leading technical capabilities to uncover vulnerabilities, protect vital systems, and strengthen operational resilience. POSITION OVERVIEW Position: Senior Space Red Team Operator Job Type: Full Time Location: Remote or Hybrid with travel to customer and test locations as required Clearance Requirement: Ability to obtain and maintain a U.S. Government security clearance; active Secret or higher preferred WHAT YOU'LL DO SIXGEN is seeking a hands-on Senior Space Red Team Operator to lead authorized adversarial assessments of space systems and the infrastructure that supports them. You will evaluate attack paths across spacecraft, payload, ground, cloud, mission-network, and operator environments; develop safe and repeatable test methods; and translate technical findings into clear mission risk and practical engineering improvements. This role is suited to an operator who can move comfortably between Linux hosts, cloud services, embedded targets, and customer briefings while maintaining disciplined authorization and mission-safety boundaries. Responsibilities include: Lead end-to-end red team assessments, penetration tests, and threat-informed adversary emulation against authorized space and mission systems. Develop assessment plans, attack paths, test cases, and Rules of Engagement that define objectives, authorization boundaries, safety controls, prohibited actions, and stop-work criteria. Assess Linux-based systems, embedded devices, flight and payload software, ground-station services, mission networks, cloud environments, and supporting applications for exploitable weaknesses. Research and validate vulnerabilities in firmware, operating systems, communications interfaces, authentication flows, APIs, containers,