Security Controls Assurance Lead Jobs

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As a Product Manager II within Coinbase’s Identity organization and Platform group, you'll own the strategy and execution for enterprise identity and multi-user experiences across Coinbase's business products. This team is responsible for some of the highest-traffic, most security-critical surfaces at Coinbase, including sign-in, authentication, account management, and organization administration. You'll define how business customers manage users, roles, permissions, and security controls across Coinbase's growing product portfolio, directly shaping how enterprises adopt and scale on our platform. What you’ll do: Own the product roadmap for enterprise identity and multi-user capabilities, including role-based access control, organization management, SSO/SAML, domain claiming, and provisioning (SCIM, JIT). Drive the strategy for authentication, authorization, and account-security experiences that serve both consumer and business customers at scale. Lead cross-functional launches by coordinating engineering, design, security, legal, privacy, CX, and international stakeholders through complex delivery milestones. Partner with Security and Engineering to identify vulnerabilities, define mitigations, and establish operational guardrails for privileged-access workflows. Shape the long-term platform vision for identity primitives that unlock new business verticals and integ

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a Software Engineer on the Account Authentication Team, you will help authenticate and authorize Roblox's user base, setting the foundation for every other feature on our platform. You will build the authentication and security controls that meet each user's needs, along with just-in-time friction that adapts to each user's unique risk profile, all while scaling to 1 billion active users. This is a rare opportunity to sit at the convergence of security, user experience, and scale. You'll join Roblox's Safety organization, whose mission is to become the leader in civil immersive online communities by detecting, removing, and preventing problematic accounts, content, and behavior, and by keeping accounts secure and free from compromise. The team draws on a broad tech spectrum, including machine learning, classifiers, experimentation, automation, and AI-powered filters, partnering with product teams to shape the roadmap, build safety products, and measure impact on our community of users and developers. You Will: Own the design, implementation and landing of features that make Roblox more secure and more accessible for users of all ages on all platforms. Collaborate cross-organizationally w

Network & IT Support First Principles Engineer & Senior Team Member We’re hiring for our Network & IT Support team , but we’re not looking for someone whose idea of a good day is closing 20 tickets. In fact, we’d rather you prevent those 20 tickets from being created in the first place. Our team is small. Two people support close to 300 employees across Manila, Canada, and a 24-hour operation. That means we need engineers who think differently. When the same issue happens for the third time, we don't want you to become faster at fixing it. We want you to ask why it's happening at all - and eliminate it. When you see repetitive manual work, we expect you to ask whether it can be automated. When equipment, Wi-Fi, network infrastructure, endpoints, access, or security controls are likely to become problems, we want you checking them before employees discover the problem for you. When something breaks at 2 AM and you're the person on shift, we need you to be able to investigate incomplete information, form your own hypotheses, eliminate possibilities, make sound decisions, and restore operations without waiting for someone senior to tell you what to do. And when everything is working? Don't wait for the next ticket. Look at the environment and ask: What could fail next? What keeps repeating? What are we doing manually that shouldn't be manual? What can I simplify, automate, standardize, document, monitor, or permanently eliminate? That's what ownership means here. We're hiring at two levels: ✨ FPE / First Principles Engineer • This is our leadership-level individual contributor. We need someone who can look beyond individual incidents and own the health and direction of the entire function - identify systemic weaknesses, prioritize improvements, design better processes and architecture, automate repetitive work, establish standards, use data to find patterns, and make the engineers around them more effective. You shouldn't need someone to continuously

POSITION SUMMARY The Consultant is responsible for supporting the Consulting Services Team in delivering cybersecurity, privacy, and compliance services across a diverse portfolio of client engagements. This role operates as a flexible, deployable resource, contributing to multiple concurrent or sequential engagements based on business needs. This role requires proactive initiative to study, ask questions, and rapidly learn the organization’s solutions, methodologies, and delivery standards. Consultants must be comfortable transitioning between engagements, adapting quickly to new client environments, and delivering value immediately. Consultants focus on executing client deliverables, enhancing service quality, and improving project efficiency under the guidance of senior team members. They are expected to develop broad subject matter expertise, contribute to process improvements, and build trusted relationships across a variety of clients and internal teams. SPECIFIC JOB RESPONSIBILITIES Serve as a deployable consulting resource, supporting multiple client engagements across varying industries, with a focus on healthcare. Adapt quickly to new client environments, priorities, and team structures while maintaining high-quality delivery. Support the execution of cybersecurity and compliance consulting engagements under senior leadership guidance. Work closely with clients to collect data, conduct risk assessments, gap analyses, and document findings. Assist in evaluating client security postures, including vulnerability management, compliance alignment, and risk exposure. Develop and contribute to recommendations aligned with industry frameworks such as NIST, ISO 27001, CIS Controls, and HIPAA. Support clients in designing and implementing security controls, policies, and procedures.

Location: United States – Remote Clearance: Ability to obtain and maintain a Public Trust LTS is seeking a Senior Agentic AI Software Engineer to build the intelligence behind the platform—the autonomous agents, orchestration layers, retrieval pipelines, reasoning workflows, and backend services that transform complex legacy software into actionable engineering knowledge. The Agentic AI platform is designed to help engineers understand, analyze, and modernize one of the most consequential legacy software systems still operating today. Our platform enables engineers to ask questions in plain English and receive explainable, verifiable answers traced directly back to decades of production source code. Rather than replacing engineers, we're building AI that accelerates engineering through transparency, traceability, and intelligent reasoning. We're building an AI-native engineering platform supporting the modernization of mission-critical healthcare systems serving millions of Veterans nationwide. Every response generated by the platform must be explainable, grounded in evidence, and trusted by engineers responsible for maintaining software that millions of people quietly depend on every day. The platform is designed for deployment across federal enterprise environments and is being engineered to align with FedRAMP security controls, Zero Trust principles, and federal compliance requirements. The product has executive sponsorship, committed users, and a customer investing in long-term modernization. Our engineering team is intentionally small. Every engineer has meaningful ownership, significant technical influence, and the opportunity to help define how AI transforms software engineering. We don't simply build AI-powered software—we build software with AI. This is not another chatbot. Using LLMs, autonomous agents, AI-assisted development, parallel workflows, and model-driven engineering is simply how we work. What You’ll Do: Build Intelligent Agentic Systems Design,

ABOUT BASETEN Baseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F , led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to to ship AI products. PRODUCT AT BASETEN Product at Baseten is a nascent function. Our company today has a strong engineering culture, is heavily customer-obsessed, and moves fast. We're building the product function now, and you'd be one of the people who defines it. You'll work directly with our founders and with some of the best systems and infrastructure engineers in the world, and you'll set the standard for what product looks like here. You earn trust by being technical, finding the truth in front of customers, building great cross-functional relationships, and shipping great product experiences. THE ROLE The largest, most demanding Enterprises are starting to run on Baseten and they come with a range of security, compliance, and procurement requirements. Today that readiness is assembled deal-by-deal. You'll own the enterprise-readiness surface end to end and turn it into product: the deployment options customers can choose and buy, compliance posture they can trust, access and security controls their IT teams require, and the billing and spend controls their finance teams expect. What does a complete Baseten Enterprise Product offering look like? RESPONSIBILITIES Drive the Enterprise Readiness customer experience end to end: Partner with GTM and Enterprise Engineering to make "enterprise-ready" a platform-wide capability, not a deal-by-deal scramble. Outcome: readiness becomes a supported, priced product instead of bespoke work asse

A Career with Point72's Technology Team As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications. As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity—all while delivering real business impact for our multi-billion-dollar global business. WHAT YOU'LL DO Build and operate high-performance network platforms that support low-latency trading systems and critical business applications Design and deploy scalable campus, data center, and wide-area network architectures to meet growth and availability targets Implement and manage network security controls, firewall policies, and segmentation to protect sensitive systems and data, strengthening our defensive posture Automate network provisioning, configuration, and validation using scripting and infrastructure-as-code techniques to reduce manual work and accelerate deployments Troubleshoot and resolve complex network incidents, perform root-cause analysis, and drive post-incident improvements to increase reliability and reduce recurrence Partner with application, security, and operations teams to optimize network performance for latency-sensitive and high-throughput workloads Lead network upgrade, capacity planning, and vendor coordination projects from design through te

SDLC Engineer A CAreer with point72’s Technology team As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications. As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity—all while delivering real business impact for our multi-billion-dollar global business. What you’ll do Provide expert technical support for our enterprise Software Development Life Cycle (SDLC) platforms Support and optimize our artifact management solutions and static code analysis tools Partner directly with business teams and development clients to address SDLC platform challenges and deliver effective solutions Implement and maintain security controls across our development toolchain and infrastructure Develop automation solutions to eliminate toil and enhance developer productivity Troubleshoot complex build, deployment, and integration issues across our development environments Contribute to continuous improvement of our development infrastructure Maintain documentation and knowledge base for supported platforms and tools What’s REQUIRED 5+ years of experience in software engineering, DevOps, or SRE roles Strong technical expertise in AWS services and cloud-native architectures Experience with container technologies, such as Docke

OKX will be prioritising applicants who have a current right to work in Singapore, and do not require OKX's sponsorship of a visa About OKX At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. OKX is part of OKG, a group that brings the value of Blockchain to users around the world, through our leading products OKX, OKX Wallet, OKLink and more. About the team This frontend team builds and supports core platforms that enable both internal operations and customer-facing experiences at OKX. We develop the BOSS (Business Operation Support System) Middle Platform, which provides foundational capabilities such as business gateways, Identity & Access Management (IAM), efficiency components, and security controls—helping business teams operate more effectively and securely. In parallel, we deliver the Customer Genius product suite, focused on customer support solutions including chatbots and automation tools that improve service efficiency and user experience. Responsibilities: Architect, develop and maintain frontend solutions with performance, scalability and continuous integration in mind. Leverage AI coding agents and tools (e.g., Claude Code, Cursor) to accelerate development, improve code quality, and automate repetitive tasks across the team's workflow. Design and maintain reusable AI extens

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position: Senior Red Team Operator Job Type: Full Time Location: Hybrid (onsite 1/x week) -Washington D.C. Clearance Requirements: None Travel: Up to 10% ABOUT THE TEAM SIXGEN supports cyber and intelligence missions by serving government and commercial organizations as they overcome global cybersecurity challenges. You’ll work with our highly skilled operators conducting research and assessments based on real-world threats. You’ll simulate adversaries and malicious actors and report details and actionable findings on critical assets and infrastructures. Using innovative processes, tools, and techniques, you’ll predict and overcome cybersecurity vulnerabilities. Your successes will be supported by our diverse team of experienced, technical talent. WHAT YOU'LL DO Simulate real-world cyberattacks to assess and challenge the effectiveness of security controls and incident response capabilities. Conduct reconnaissance, exploitation, and post-exploitation activities using adversary tactics, techniques, and procedures (TTPs). Develop and use custom tools and methods to evade detection and maintain stealth during engagements. Collaborate with blue and purple teams to improve detection, response, and overall security posture. Document findings and deliver clear, actionable reports to technical and executive stakeholders. REQUIRED QUALIFICATIONS US Citizen with the ability to obtain a Public Trust clearance. CRTO certification. CRTL, OSEP, OSCE, OSEE, GXPN, and/or GPEN are preferred, but not required. Extensive Red Team Experience: Minimum 6 years of hands-on technical red te

SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape. POSITION OVERVIEW Position: Red Team Operator Job Type: Full Time Location: On-site 1x/week in Washington DC Clearance Requirements: None, but Public Trust preferred Travel: None ABOUT THE TEAM SIXGEN supports cyber and intelligence missions by serving government and commercial organizations as they overcome global cybersecurity challenges. You’ll work with our highly skilled operators conducting research and assessments based on real-world threats. You’ll simulate adversaries and malicious actors and report details and actionable findings on critical assets and infrastructures. Using innovative processes, tools, and techniques, you’ll predict and overcome cybersecurity vulnerabilities. Your successes will be supported by our diverse team of experienced, technical talent. WHAT YOU'LL DO Simulate real-world cyberattacks to assess and challenge the effectiveness of security controls and incident response capabilities. Conduct reconnaissance, exploitation, and post-exploitation activities using adversary tactics, techniques, and procedures (TTPs). Develop and use custom tools and methods to evade detection and maintain stealth during engagements. Collaborate with blue and purple teams to improve detection, response, and overall security posture. Document findings and deliver clear, actionable reports to technical and executive stakeholders. REQUIRED QUALIFICATIONS US Citizen with the ability to obtain a Public Trust clearance. CRTO certification (or ability to earn within 3 months of hire). OSCP and/or GPEN certifications. Technical experience (4+ years each): Hands on red tea

About the Team At DoorDash we’re building the industry’s most scalable and reliable delivery network to support our three-sided marketplace of consumers, merchants, and Dashers. Security is paramount to the success of our business, and DoorDash Security aspires to be the world’s most admired security team. We are committed to building the world's most trusted on-demand, logistics engine for delivery! We're expanding our team of great minds to help us secure and maintain a 24x7, no downtime, global infrastructure system that powers DoorDash’s multi-sided marketplace of consumers, merchants, and dashers. About the Role Our Security Engineering team is looking for an Engineering Manager, Proactive Security to set and lead the technical direction for Security Product Engineering at DoorDash globally. You will be a part of our inclusive, collaborative global team responsible for building “paved road” Security Product controls directly into our Customer, Merchant and Dasher products to ensure a safe, secure and resilient delivery network. This is a US remote position reporting directly to the Director of our Security Engineering team. You’re excited about this opportunity because you will… Set and execute the technical vision for Security Product Engineering Pods, Bug Bounty and Vuln Management teams, ensuring alignment with DoorDash business objectives. Lead the overall Security Product Engineering, Bug Bounty and Mythos era Vulnerability Management direction and roadmap execution. Coach and mentor highly skilled engineers as a “player-coach” leaning in to understand Customer, Merchant and Dasher security problems at the lowest level and lead the team to build the right proactive controls. Success is not measured in shipping code, it's measured in annihilating and improving classes of vulnerabilities. Partner cross-functionally with Product Engineering, Legal, Security Engineering Platform, Data teams and XFN partners to build “paved road” proactive sec

Security Architect Location: London (Hybrid) | Practice Area: Technology & Engineering | Type: Permanent Safeguard the digital future of financial services. The Role We are looking for Security Architects to lead the design and implementation of secure, scalable solutions for some of the world’s leading financial institutions. You’ll play a critical role in shaping security strategy, informing architectural decisions, and embedding best practices across cloud and hybrid environments. This is a hands-on role with opportunities to mentor others and influence major change initiatives, using approved AI tools, automation and AI-enabled workflows where appropriate to improve the speed, quality and insight of security architecture activities. You’ll apply human judgement and responsible AI guardrails to ensure outputs are appropriately reviewed and escalated. What You’ll Do Develop enterprise security architecture strategies aligned with business and regulatory requirements, using approved AI-enabled tools where appropriate to accelerate research, analysis and insight Lead the design of secure systems, networks and applications across on-premise, cloud and hybrid environments Conduct threat modelling and risk assessments, define remediation strategies, and explore responsible AI and automation to improve the efficiency and quality of security analysis while maintaining human review Guide DevSecOps adoption by designing embedded security and controls within the SDLC, including appropriate guardrails, audit trails and escalation pathways for AI-enabled workflows Champion security awareness and mentor teams across engineering, architecture and delivery, encouraging responsible experimentation with approved AI tools where they can improve productivity and outcomes What We’re Looking For Extensive experience designing and implementing secure architectures across cloud and hybrid environments Experience designing solutions using Palo Alto, Microsoft or similar security ecos

The Platform team creates the technology that enables Spotify to learn quickly and scale easily, enabling rapid growth in our users and our business around the globe. Spanning many disciplines, we work to make the business work; creating the infrastructure, tooling, frameworks, and capabilities needed to welcome a billion customers. We are looking for a Backend Engineer II to join our Security Compliance Engineering team. You’ll help turn complex security, risk, and compliance requirements into scalable software solutions that make it easier for teams across Spotify to build and operate securely. You’ll work with engineers and partners across security to strengthen our technical Governance, Risk, and Compliance (GRC) capabilities. What You'll Do Design and build backend products, services, and infrastructure that strengthen Spotify’s technical security Governance, Risk, and Compliance strategy. Build scalable infrastructure and tooling that help apply regulatory requirements and security framework controls across Spotify’s distributed environment. Develop reliable services that automate security and compliance processes, reducing manual work and helping engineering teams understand and meet requirements. Work with security, engineering, and other partners to translate security and compliance requirements into practical technical solutions. Contribute to consistent engineering practices that address security, risk, and compliance requirements while supporting teams at scale. Own the quality of your work from design and development through deployment, operation, and continuous improvement. Who You Are You have experience developing backend software using an object-oriented programming

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the team Anthropic's Security Governance, Risk, and Compliance (GRC) team is the connective tissue that holds the company accountable to its security commitments. We translate regulatory, customer, and voluntary obligations into controls that teams act on, and give leadership a bird's-eye view of how well we're meeting them. We're building toward a fundamentally different kind of GRC: one that directs Claude, with the right humans in the loop, to challenge and evidence the performance of controls continuously rather than through periodic audits. Responsibilities: Serve as the security policy partner for AI agent governance, authoring the policies and standards for how agents are built, deployed, operated Define review and approval criteria when an agent may interact with sensitive or regulated data, and which actions require human approval as it relates to compliance frameworks Serve as the GRC reviewer within existing engineering approval workflows Define data governance requirements for agents, including least-privilege access, access reviews, and handling of regulated and sensitive data Monitor agent behavior over time and adapt governance requirements in partnership with cross-functional security, research and engineering teams Map agent security and data controls to AI governance frameworks (e.g., ISO 27001, ISO 42001, EU AI Act), strengthening Anthropic's certification efforts ensuring agent security is auditable Assess and document agent-related security and compliance risks, driving them to resolution with engineering owners Own the policy for agent-related risk acceptances and exceptions, including approval authority, d