Security Controls Assurance Lead Jobs

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role We're looking for a Principal Software Engineer to join Platform Infrastructure - Application Networking and set where Elastic Cloud application networking goes next. This work covers Ingress, security controls, private connectivity, and DNS management — the path every interaction with Elasticsearch, Kibana, and the broader Elastic stack takes. You will drive the technical vision, architecture, and design of these systems, not just execute against an existing roadmap . This is a Principal-level role for an engineer who has designed high-performance, scalable networking platforms and can drive technical initiatives across organizations. Elastic is investing in the reliability, security, and reach of Elastic Cloud; you will hold a high bar for those qualities while other engineering teams rely on what this platform provides. What You Will Be Doing Set the technical direction for major application networking initiatives, owning designs from proposal through general availability. Lead the development of Ingress, private connectivity, DNS, and security controls on a large scale for Elastic Cloud. Continuously identify and address issues related to performance, reliability, and operability. Lead multi-quarter, cross-organizational projects that other Elastic engineering teams rely on, and guide these projects through to d

United States – Remote Clearance: Ability to obtain and maintain a Public Trust LTS is seeking a Senior Front-End Agentic AI Engineer to own the experience layer of an AI platform built for one of the most consequential legacy systems still running in production today. Our platform enables engineers to ask questions in plain English and receive explainable, verifiable answers traced directly back to the exact lines of source code. Rather than replacing engineers, we're building AI that helps them understand decades of complex software faster, with complete transparency and confidence. We're building an AI-native engineering platform supporting the modernization of mission-critical healthcare systems serving millions of Veterans nationwide. Every response generated by the platform must be explainable, traceable, and trustworthy. The front end is where that trust is earned. The platform is designed for deployment across federal enterprise environments and is being engineered to align with FedRAMP security controls, Zero Trust principles, and federal compliance requirements. When an engineer asks a question about a decades-old codebase, your interface determines whether they trust the answer or close the tab. You'll own that experience from end to end. The product has executive sponsorship, committed users, a clearly defined mission, and a customer who knows exactly what success looks like. Our engineering team is intentionally small. Every engineer has significant ownership, meaningful influence over product direction, and the opportunity to help define how engineers interact with AI. We don't simply build AI-powered software—we build software with AI. This is not another chatbot. Using AI agents, LLMs, parallel workflows, and model-assisted development is simply how we engineer. What You’ll Do: Own the end-to-end front-end experience for an enterprise-scale Agentic AI platform. Design intuitive interfaces that transform complex AI reasoning into experiences engineers

SDLC Engineer A Career with Point72’s Technology Team As Point72 reimagines the future of investing, our Technology group is constantly improving our company’s IT infrastructure, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts experimenting, discovering new ways to harness the power of open-source solutions, and embracing enterprise agile methodology. We encourage professional development to ensure you bring innovative ideas to our products while satisfying your own intellectual curiosity. What You’ll Do • Provide expert technical support for our enterprise Software Development Life Cycle (SDLC) platforms including Jenkins, GitHub, Bitbucket, and AWS-based CI/CD pipelines • Support and optimize our artifact management solutions (Artifactory) and static code analysis tools (SonarQube) • Partner directly with business teams and development clients to address SDLC platform challenges and deliver effective solutions • Implement and maintain security controls across our development toolchain and infrastructure • Develop automation solutions to eliminate toil and enhance developer productivity • Troubleshoot complex build, deployment, and integration issues across our development environments • Contribute to continuous improvement of our AWS-based development infrastructure • Maintain documentation and knowledge base for supported platforms and tools What’s Required • 5+ years of experience in software engineering, DevOps, or SRE roles • Strong technical expertise in AWS services and cloud-native architectures • Experience with container technologies (Docker, ECS, EKS) and container orchestration • Deep understanding of Git workflows, branching strategies, and version control best practices • Strong hands-on programming/scripting skills (Python, Go, or similar), with ability to debug and build automation for CI/CD pipelines • Experience with infrastructure as code (Terraform, CloudFormation) in AWS environments •

About Supabase Supabase is an open source Firebase alternative. We give developers a Postgres database, authentication, instant APIs, edge functions, and real-time subscriptions — all in one platform. We are building the infrastructure layer for the next generation of applications. Corporate IT at Supabase reports into the Security organization. Identity and endpoint hygiene are treated as security controls, not administrative overhead. You will work with a small, senior team with direct access to engineering leadership and a mandate to automate everything. About the Role You will work directly with our IDM/MDM Lead to own the day-to-day operations of our identity and endpoint stack — Okta, Slack, Iru (MDM), and the integrations that tie them together. This role is equal parts identity management and endpoint operations, with a strong expectation that you automate what you repeat and document what you automate. This role provides follow-the-sun IT and identity coverage alongside our IDM/MDM Lead on the West Coast. Fully remote, with a strong preference for candidates based in EST or APAC. What You’ll Own Identity & Access Management Administer Okta day-to-day: user provisioning, group management, SSO application configuration, and MFA policy enforcement. Own joiner-mover-leaver (JML) workflows — ensure access is granted on day one, adjusted on role change, and fully revoked on departure with no manual gaps. Maintain and improve Okta lifecycle automation, reducing manual provisioning toil and closing the window between HR events and access changes. Audit access regularly: identify stale accounts, over-provisioned roles, and orphaned app assignments before they become incidents. Support FIDO2/WebAuthn and YubiKey deployment for privileged access across the organization. Endpoint Management & MDM Administer Iru (formerly Kandji) MDM for macOS fleet: device enrollment, configuration profiles, compliance baselines, and policy enforcement. Ensure all managed endpo

SDLC Engineer A Career with Point72’s Technology Team As Point72 reimagines the future of investing, our Technology group is constantly improving our company’s IT infrastructure, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts experimenting, discovering new ways to harness the power of open-source solutions, and embracing enterprise agile methodology. We encourage professional development to ensure you bring innovative ideas to our products while satisfying your own intellectual curiosity. What You’ll Do Provide expert technical support for our enterprise Software Development Life Cycle (SDLC) platforms including Jenkins, GitHub, Bitbucket, and AWS-based CI/CD pipelines Support and optimize our artifact management solutions (Artifactory) and static code analysis tools (SonarQube) Partner directly with business teams and development clients to address SDLC platform challenges and deliver effective solutions Implement and maintain security controls across our development toolchain and infrastructure Develop automation solutions to eliminate toil and enhance developer productivity Troubleshoot complex build, deployment, and integration issues across our development environments Contribute to continuous improvement of our AWS-based development infrastructure Maintain documentation and knowledge base for supported platforms and tools What’s required 5+ years of experience in software engineering, DevOps, or SRE roles Strong technical expertise in AWS services and cloud-native architectures Experience with container technologies (Docker, ECS, EKS) and container orchestration Deep understanding of Git workflows, branching strategies, and version control best practices Strong hands-on programming/scripting skills (Python, Go, or similar), with ability to debug and build automation for CI/CD pipelines Experience with infrastructure as code (Terraform, CloudFormation) in AWS environments Hands-on experience with CICD solutio

Leidos is seeking a Principal Network Engineer – Wireless to lead engineering, deployment, and modernization of a large-scale, geographically distributed enterprise wireless network supporting a Department of Defense environment. The engineer will provide technical leadership for Aruba wireless architecture, RF performance, secure network access, integration, troubleshooting, and transition to operations. The environment includes Aruba AOS 10, Aruba Central On-Premises, distributed Aruba ClearPass, Cisco ISE coexistence, certificate-based 802.1X authentication, Comply-to-Connect enforcement, wireless intrusion detection and prevention, and enterprise monitoring. The engineer will collaborate with network, identity, cybersecurity, and operations teams to deliver secure, reliable wireless services at scale. Clearance Requirements Active DoD Secret clearance; ability to obtain additional access if required by the assigned environment. Primary Responsibilities Wireless Architecture and Deployment Design, deploy, configure, and optimize enterprise Aruba wireless infrastructure, including access points, gateways, management platforms, redundancy, and lifecycle upgrades. Engineer and sustain Aruba Central On-Premises and AOS 10 configurations, provisioning workflows, high availability, and enterprise configuration standards. Lead RF design, site surveys, channel and power planning, capacity analysis, roaming optimization, and wireless QoS for voice and mission-critical applications. Network Access Control and Security Integrate Aruba ClearPass and Cisco ISE with 802.1X/EAP-TLS, RADIUS, certificate-based authentication, endpoint profiling, and Comply-to-Connect policies. Engineer wireless security controls, including network segmentation, WPA3, WIDS/WIPS, secure guest access, an

Technical Lead / Platform Solution Architect Mission Value: Serve as the technical authority across a complex, multi-vendor AI and software platform, helping the government team make sound architecture decisions, resolve cross-platform integration challenges, and establish repeatable patterns that accelerate mission delivery. Role Description Defense Unicorns is seeking a senior Technical Lead / Platform Solution Architect to embed with a government team and serve as the go-to technical subject matter expert across the platform architecture. This individual will connect the mission, engineering, security, data, AI, and vendor perspectives into a coherent technical approach and become a trusted technology advisor to the mission hero. The role is intentionally hands-on and strategic. The Technical Lead will work across Kubernetes/OpenShift, GitLab and CI/CD, AI/agent infrastructure, enterprise data services, cloud infrastructure, security controls, and integration patterns. They will guide technical decisions, challenge assumptions, identify architectural risks early, and help the team move from prototype to operational capability. The ideal candidate can move fluently between executive-level mission conversations and deep technical discussions with engineers and OEM teams. Responsibilities Own the end-to-end technical architecture and serve as the primary technical SME across the platform ecosystem. Become a trusted technology advisor to the mission hero, translating mission objectives into pragmatic technical choices and providing clear recommendations, tradeoffs, and risk assessments. Create and maintain the architectural “big picture” across application, platform, AI, data, networking, security, identity, and integration layers. Lead technical integration across commercial and government technologies, including Kubernetes/OpenShift, GitLab, AI/ML services, enterprise data platforms, and supporting security tooling.Identify architectural dependencies, integration r

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. As the Senior Leader of AI Strategic Enablement for Micron’s EnableAI initiative, you will serve as the coordination point for AI enablement efforts within the Enterprise Infrastructure and Security team. In this capacity, you will oversee agile technical enablement and delivery — composed of engineers, data scientists, and security specialists—tasked with delivering robust AI solutions that address core business challenges. Your primary responsibility is to implement AI solutions that can be used by the larger Micron workforce, ensuring that both efficiency and security are foundational to every deployment. By aligning technical innovation with strategic business objectives, you will elevate AI from functional capability to a source of sustained competitive advantage, serving as the driving force behind the organization’s enablement strategy! Responsibilities: Lead agile technical delivery teams to unify and scale AI efforts, aiming to deliver a robust portfolio of enterprise AI solutions across the enterprise. Integrate automated security controls into Micron's AI ecosystem (CI/CD pipelines, sensitive data classification, identities, etc.). Position security as an enabler, ensuring solutions are “secure by design”. Convert business challenges into actionable technical strategies, focusing on rapid, high-impact solutions that yield clear returns and avoid unnecessa

We are looking for a Senior Network Engineer to take ownership of key areas of MongoDB's global network infrastructure. You'll design, deploy, and troubleshoot network and VPN solutions, including Palo Alto Prisma Access at global scale, partner with InfoSec to harden network security, and mentor engineers across the team. This role combines deep hands-on networking expertise with the judgment to prioritize and communicate risk and strategy to stakeholders. What You’ll Do Own the design, deployment, and operation of MongoDB's global network infrastructure Cisco Meraki, including routers, switches, firewalls,access points and IOT sensors Lead the rollout and ongoing management of Palo Alto Prisma Access as MongoDB's SASE , in partnership with InfoSec Administer and evolve MongoDB's network authentication stack, including RADIUS implementations (EAP-TLS, PAP, RadSec and Mac Authentication), ensuring secure and reliable network access Partner with InfoSec to implement and continuously improve network security controls, including VLAN configuration, firewall rules, DNS, DHCP, and IDS/IPS solutions Design and deploy network infrastructure for new and existing global office sites, partnering with Real Estate, workplace, AV, and Physical Security teams Serve as a senior technical escalation point (L3) for complex network issues across the organization Build automation to reduce manual network operations work and improve reliability and observability Act as a technical advisor for MongoDB's relationships with ISPs, hardware, low voltage cabling and other network vendors Mentor engineers across the team and contribute to a culture of technical excellence and self-service Responsibilities Ensure MongoDB's global network infrastructure and VPN remain fault tolerant, reliable, secure, and scalable as the company grows Reduce risk and technical debt across network, security and remote access solutions Communicate network strategy, risk, and incidents clearly to technical and non

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! As the Federal Compliance Manager, you will collaborate with internal stakeholders and product engineering teams to document and implement control requirements, ensuring adherence to Figma's FedRAMP cloud security standards. Responsibilities include supporting the analysis and remediation of security control implementation review, penetration testing, and vulnerability scan results as well as contributing to Plans of Action and Milestones (POAM) reporting for authorizing agencies. Additionally, you will actively engage with security professionals on cross-department initiatives, participating in projects aimed at fortifying the company's overall security posture. This is a full time role that can be held from one of our US hubs or remotely in the United States. What you'll do at Figma: Engage with cross-functional collaborators across legal, sales, product/enterprise teams, 3PAO, sponsoring agency, and FedRAMP PMO Analyze information from disparate teams to tackle complex issues, manage risks, and resolve problems Assist in analyzing and preparing for both internal and external audits Identify and escalate technical and program risks to relevant stakeholders, tracking resolution through to closure Collaborate on developing automated capabilities for evidence collection, control validation, and process execution Maintain technical documentation (e.g., System Security Plan or SSP) with expertise in security controls, audits, technical architecture, operational processes, and security protocols Gui

About the Team OpenAI’s Agentic Data Science team helps shape how AI agents are built, deployed, and improved across our products. We partner with product, engineering, research, and security teams to define meaningful measures of success, understand how our systems behave in the real world, and translate evidence into better decisions. As AI agents become more capable, they can write and execute code, access sensitive systems, and complete increasingly complex tasks with greater autonomy. These capabilities create powerful opportunities to improve cybersecurity, but they also introduce risks that traditional security tools and processes were not designed to address. Meeting this moment requires new ways to measure security, evaluate defenses, and distinguish genuine risk reduction from friction that slows users down. About the Role We are looking for a senior data scientist to help define what effective cybersecurity looks like in the age of AI agents. You will work across OpenAI’s Security organization and cybersecurity product teams to measure emerging risks, improve internal security controls, and shape AI-powered security products. The problems are foundational: How do we know whether an agent’s security controls are effective? Which safeguards meaningfully reduce risk, and which create unnecessary friction? When an AI system identifies a potential vulnerability, how do we determine whether the finding is accurate, actionable, and ultimately resolved? How do we detect anomalous behavior or risky access when the systems themselves are changing rapidly? You will report into Data Science while partnering closely with Security, Cyber Product, Engineering, and Research. This is a high-ownership role for someone who can establish a new analytical discipline, operate across organizational boundaries, and turn ambiguous security challenges into measurable improvements. In This Role You Will Define how we measure AI-agent security. Establish metrics and evaluation frame

About Us OpenFX is on a mission to move money as freely as data, unrestricted by time zones, banking hours, or legacy systems. We are building the infrastructure that will power the next generation of cross-border payment systems for institutions. The team's execution has been exceptional, and we're scaling at a remarkable pace. Our stellar early team comes with experience in companies like J.P. Morgan, Goldman Sachs, FalconX, Paypal, Affirm, Polygon, Kraken, Nium & others. We're backed by Accel, Lightspeed, NfX and other top-tier investors. Role Overview We are looking for a Security & Compliance Engineer to turn regulatory requirements into real, running controls — and then prove to auditors that they work. This is a senior, hands-on role for someone who thrives in fast-paced, heavily regulated environments and knows how to make compliance provable in production rather than on paper. OpenFX is expanding across Europe in a heavily regulated financial environment. As we scale into EU markets, regulators, auditors, and enterprise partners expect provable, continuously operating security controls — not slide decks or one-off audits. Compliance requirements (DORA, GDPR, SOC 2, ISO 27001, and region-specific regulations) are increasing faster than our ability to operationalize them, and this role exists to close that gap. You will own the security controls and evidence that regulators and auditors care about, end to end — from translating regulatory language into concrete mechanisms through to audit walkthroughs and remediation. You will partner closely with Legal, Compliance, Risk, and engineering to ensure compliance is built into the platform rather than bolted on after the fact. This role is based in Amsterdam, Netherlands (EU/EEA). Key Responsibilities: Own audit-ready security controls Design, implement, and maintain technical and operational controls for DORA, GDPR, SOC 2, ISO 27001, and future regional requirements. Ensure controls are not just documente

About the Team API Multicloud partners with cloud service providers (CSPs) to bring OpenAI’s frontier models and APIs into the cloud environments where developers and enterprises already build. We own the API end to end across CSP platforms, from API integration and request routing through inference execution, capacity management, and day-to-day operations. Our mission is to make these capabilities available broadly and safely while preserving the reliability and developer experience customers expect from OpenAI. Delivering that experience requires work across the stack: adapting API services and cloud-native integrations, bringing up model-serving environments, validating new releases, and operating the systems that connect customer requests to available capacity. We work directly with CSP engineering teams and partner closely with OpenAI’s inference, API, infrastructure, security, and Safety Systems teams. Together, we turn new model capabilities and partner requirements into dependable production services, with attention to performance, operational readiness, and efficient use of compute. Our work contributes to OpenAI’s AWS partnership , including the launch of Daybreak Red and Daybreak Blue on Amazon Bedrock . We’re building on that foundation to bring OpenAI’s API to additional CSPs. These efforts let customers use OpenAI capabilities within the cloud infrastructure, security controls, and workflows they already rely on. About the Role We’re looking for experienced infrastructure engineers to design, build, and operate the systems that run OpenAI’s API across CSP platforms. You’ll help establish the cloud deployment platform: configuring and launching model-serving environments, planning capacity, improving caching and utilization, and making new releases safe and repeatable. Working closely with inference engineers, you’ll connect advances in model serving to the infrastructure and operational practices needed to run them reliably in production. The role call

JOB TITLE Access and Identity Management - Business Analyst A CAREER WITH POINT72'S TECHNOLOGY TEAM As Point72 reimagines the future of investing, our Technology group is constantly improving our company’s IT infrastructure, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts experimenting, discovering new ways to harness the power of open source and AI solutions, and embracing enterprise agile methodology. We encourage professional development to ensure you bring innovative ideas to our products while satisfying your own intellectual curiosity. WHAT YOU'LL DO Translate business and security requirements into scalable, production‑ready AIM and IGA solutions that support firmwide operations Partner closely with business, Global Systems Administration, and technology stakeholders to deliver secure, efficient, and user‑friendly access solutions Analyze data to identify access trends, control gaps, and process inefficiencies, with a focus on automating manual processes and improving platform scalability Own requirements gathering, functional documentation, and user stories from ideation through UAT, deployment, and post‑release support Leverage tools such as SailPoint, JIRA, SQL, Splunk, and Power BI to support access governance, reporting, and operational insights Design and maintain dashboards and KPIs that measure access lifecycle performance, risk indicators, and user experience Support data‑driven decision making by validating data quality, ensuring consistency, and aligning metrics to business objectives Build deep domain expertise in identity governance, security controls, and investment‑driven technology platforms Contribute to a culture that prioritizes integrity, transparency, and the highest ethical standards WHAT’S REQUIRED 4+ years of experience as a Business Analyst supporting Access & Identity Management (AIM) and Identity Governance & Administration (IGA) initiatives

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role Data Infrastructure designs, operates, and scales secure, privacy-respecting systems that power data-driven decisions across Anthropic. Our mission is to provide data processing, storage, and access that are trusted, fast, and easy to use. We're looking for infrastructure engineers who thrive working at the intersection of data systems, security, and scalability. You'll tackle diverse challenges ranging from building financial reporting pipelines to architecting access control systems to ensuring cloud storage reliability. This role offers the opportunity to work directly with data scientists, analysts, and business stakeholders while diving deep into cloud infrastructure primitives. Responsibilities: Within Data Infra, you may be matched to critical business areas including: Data Governance & Access Control: Design and implement robust access control systems ensuring only authorized users can access sensitive data. Build infrastructure for permission management, audit logging, and compliance requirements. Work on IAM policies, ACLs, and security controls that scale across thousands of users and systems. Financial Data Infrastructure: Build and maintain data pipelines and warehouses powering business-critical reporting. Ensure data integrity, accuracy, and availability for complex financial systems, including third party revenue ingestion pipelines; manage the external relationships as needed to drive upstream dependencies. Own the reliability of systems processing revenue, usage, and business metrics. Cloud Storage & Reliability: Architect disaster recovery, backup, and replication systems for petabyte-sc