Security Controls Assurance Lead Jobs

Location: Doha | Practice Area : Technology & Engineering | Type: Permanent The Role Capco is looking for a Security Consultant to help our clients identify, assess, and manage cybersecurity threats and technology risks across complex environments. You’ll work with security, technology, risk, architecture, and business teams to deliver structured threat and risk assessments that support informed decision-making and effective security controls. This is an opportunity to work on complex cybersecurity challenges within financial services, helping clients understand their threat landscape, identify vulnerabilities and control gaps, and strengthen their overall security and technology risk posture. What You’ll Do Assess existing security controls and evaluate their effectiveness against identified cyber and technology risks. Identify potential threats, vulnerabilities, control gaps, and risk scenarios, documenting findings and recommending proportionate remediation actions. Conduct regular data, threat and risk assessments and recommend corrective actions to improve security posture. Work with security, architecture, engineering, risk, and business stakeholders to embed threat and risk assessment activities throughout technology change and delivery. Conduct threat and risk assessments across infrastructure, cloud environments, technology platforms, and business services. Produce clear risk assessments, reports, and recommendations that support governance, remediation planning, risk acceptance, and informed decision-making. What We’re Looking For Strong experience in cybersecurity risk assessment, threat assessment, technology risk, information security, or related disciplines. Practical knowledge of threat modelling, vulnerability assessment, security controls, risk assessment methodologies, and remediation planning. Experience assessing applications, infrastructure, cloud services, or technology solutions against security and risk requirements. Strong understanding

RDQ227R1175 While candidates in the listed location(s) are encouraged for this role, candidates in other locations will be considered. About Databricks Databricks is the data and AI company. More than 12,000 organizations worldwide — including Comcast, Condé Nast, Grammarly, and over 50% of the Fortune 500 — rely on the Databricks Data Intelligence Platform to unify and democratize data, analytics and AI. Databricks is headquartered in San Francisco, with offices around the globe and was founded by the original creators of Lakehouse, Apache Spark™, Delta Lake and MLflow. About the Team The Continuous Monitoring (ConMon) team at Databricks builds and operates the engineering infrastructure that keeps Databricks' security control posture visible, measurable, and defensible at all times. We build automation that continuously assesses whether security controls are actually working across cloud environments, SaaS platforms, identity systems, and enterprise applications — surfacing drift, coverage gaps, and control failures as they happen rather than at the next audit. Our work sits at the intersection of security engineering and GRC: we turn control requirements into code, evidence collection into automation, and security posture into intelligence that drives decisions. The ConMon team also maintains security tooling and scanning infrastructure to aid control evaluation. This includes scanning for secret leaks, asset vulnerabilities, and SAST. As Databricks' security program, cloud footprint, and regulatory obligations all scale, the Continuous Monitoring team is responsible for ensuring the company's control posture is always verifiable, always current, and never a surprise. The Role Databricks is looking for a Senior Manager to lead the Continuous Monitoring team. You will own the engineering function that measures whether Databricks' security controls are working — across cloud infrastructure, identity, SaaS, and enterprise systems — and turns that measurement into so

Our Global Structure Deliveroo is now part of DoorDash, bringing together teams with even greater reach, scale, and ambition. Depending on your role, you may collaborate with teammates, systems, and leaders across DoorDash and Wolt. Together, we’re unlocking new possibilities as one global team. About the Role As a Senior Enterprise Security Engineer, you will lead the design and operation of security controls that protect our internal networks, workforce identities, endpoints and corporate systems. You will be working globally with security teams across US, EU and APAC, delivering against our goals and objectives - reducing risk and maturing controls. As a Senior, you will operate with a high degree of autonomy. You will define technical direction, make architectural decisions, and deliver complex security initiatives end-to-end. You will be expected to balance risk reduction with usability, ensuring controls are robust without impeding employee productivity. This role focuses on Identity and Access Management (IAM), Endpoint security (EDR), Network Security, logging and detection engineering, and secure SaaS enablement. You will work closely with IT, Legal, Privacy, Engineering and business stakeholders to embed security as a default practice across the organisation. Security controls will be aligned to recognised frameworks such as the CIS Critical Security Controls and the NIST Cybersecurity Framework (CSF). Key Responsibilities Architecture & Control Implementation: Design, deploy, and maintain core corporate security controls, including phishing-resistant MFA, Just-In-Time (JIT) access, strict role-based access control (RBAC), zero-trust architectures, device and identity bound proofing and modern network isolation. Tooling Ownership: Serve as the technical owner for a broad suite of corporate security systems, managing deployments, configurations, and API integrations for tools across the corporate environment. Technical Leadership: Lead and implement the

About the Role As a Security Engineer at K Health, you will serve as a foundational force in securing our healthcare technology ecosystem. Reporting directly to the Director of Security, this is a deeply hands-on individual contributor role focused primarily on Security Operations (SecOps) and IT Security projects. You will be responsible for building, automating, and maintaining our security controls while acting as a key responder to security incidents. If you thrive in a fast-paced environment where you are empowered to own your domain, automate repetitive tasks, and directly safeguard patient and organizational data, this role is for you. What You Will Do Design, implement, and maintain hands-on SecOps workflows, threat detection, and incident response procedures across our corporate and cloud infrastructure. Build low-code and custom automations (using tools like Torq) to streamline security alerts, routine IT security tasks, and incident triage. Administer, optimize, and manage key security and endpoint management tools, including Sumo Logic, Jamf, Intune, Slack Enterprise, CrowdStrike, and related platforms. Maintain and support continuous compliance with SOC2 and HIPAA security controls, actively participating in audit preparation, evidence gathering, and control enforcement. Partner with cross-functional IT and engineering teams to harden systems, enforce zero-trust endpoint policies, and secure employee workflows. Conduct root-cause analysis on security incidents and proactively implement preventative security measures to eliminate recurring risks. What We Are Looking For Experience: 3–5 years of dedicated hands-on experience in Security Operations, IT Security, or System Administration with a strong security focus. Incident Response: Proven background in actively detecting, investigating, and remediating security incidents in a modern cloud/hybrid environment. Technical Depth: Deep foundational IT background spanning endpoint administration (macOS/Windows

About the Team At DoorDash we’re building the industry’s most scalable and reliable delivery network to support our three-sided marketplace of consumers, merchants, and Dashers. Security Engineering is paramount to the success of our business, and DoorDash Security aspires to be one the world’s most admired Security Engineering team. We are committed to building the world's most trusted on-demand, logistics engine for delivery! We're expanding our team of great minds to help us secure and maintain a 24x7, no downtime, global infrastructure system that powers DoorDash’s multi-sided marketplace of consumers, merchants, and drivers. About the Role Our Proactive Security Engineering team is looking for a Staff Security Engineer, Proactive Security to execute on Dasher Security Product Engineering following a forward deployed engineering Pod model.You will be a part of our inclusive, collaborative forward deployed engineering team responsible for building “paved road” Security Product controls directly into our Dasher products to ensure a safe, secure and resilient delivery network. This is not a classic Product Security role performing reviews and operating platform products, this is a forward deployed model where we operate in Pods that focus on domain code bases to build and ship Dasher Security Products focusing on application hardening, anti-app reversing, and payment security in our global Dasher ecosystem.This is a US remote position reporting directly to the Manager of our Proactive Security Engineering team. You’re excited about this opportunity because you will… Lead the technical direction and roadmap for hardening of Dasher Security Products at DoorDash. Partner cross-functionally with Product Engineering, Legal, Security Engineering Platform, Data teams and XFN partners to build “paved road” proactive security controls that enable secure by design AI products into DoorDash eco-system. Examples of Dasher Security Products this team will focus on i

At Jamf, we believe in an open, flexible culture based on respect and trust. Our track record and thriving work environment all stem from the freedom we grant ourselves to get the job done right. We take pride in helping tens of thousands of customers around the globe succeed with Apple. The secret to our success lies in our connectivity, while operating with a high degree of flexibility. Work-life balance remains our priority while feeling connected is important to maintain our strong culture, achieve our goals, and thrive as #OneJamf. What you'll do at Jamf: The Security Risk & Compliance Analyst (Analyst) is responsible for ensuring that Jamf ‘s security controls, policies, and procedures are implemented in accordance with applicable laws, regulations, and industry standards. Reporting to the Director of Security Risk & Compliance, the Analyst will support the activities and improvements across the entire scope of Jamf’s Security Risk & Compliance program. You may be required to work periodically at a Jamf office or collaborative work location with other Jamf employees in your area for certain events or moments that matter. What you can expect to do in this role : Conduct risk assessments in accordance with established methodology. Collaborate with team members to evaluate cyber risk and treatment plans, and follow up to ensure appropriate action is taken to mitigate risk. Support maintenance of security policies to ensure compliance with relevant laws, regulations, and industry standards. Collaborate with teams across Jamf to ensure security policies are consistently implemented. Participate in monitoring efforts to ensure compliance with the security-related policies and procedures. Participate in external audits to ensure Jamf’s ongoing maintenance of its security certifications (i.e., ISO 27001, ISO 27701, SOC2 Type 2, StateRAMP). Support the vendor risk management function for evaluating Jamf’s

We are dedicated to ensuring proactive elimination of entire classes of security risk by engineering the core libraries, platforms and frameworks that provide secure guardrails for all Asanas. We are looking for a Senior Software Engineer to join our new Security Development team. This team is focused on building durable, secure-by-default solutions to protect Asana's infrastructure and product. Instead of acting as gatekeepers, we build guardrails that empower engineering teams to move quickly and safely. You will be responsible for engineering preventative controls at scale, focusing on building platforms and frameworks that eradicate systemic risks. This role is based in our San Francisco office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements. What you’ll achieve: Design, build, and maintain secure-by-default frameworks, libraries, and platforms to eliminate entire classes of vulnerabilities. Engineer and improve core security services, including our access control frameworks, secrets management infrastructure, and AWS permissions systems. Develop and own the platform for vulnerability remediation, creating tooling that empowers engineering teams to address risks efficiently. Partner with product and infrastructure teams to architect and implement foundational security controls for Asana including cloud networking, and compute infrastructure. Partner with product teams to effectively offer recommendations for how to secure projects at all phases of implementation (design, development, launch, and/or incidents) Influence engineering initiatives through design reviews, communicating security principles, and helping teams make sound security trad

We are dedicated to ensuring proactive elimination of entire classes of security risk by engineering the core libraries, platforms and frameworks that provide secure guardrails for all Asanas. We are looking for a Senior Software Engineer to join our new Security Development team. This team is focused on building durable, secure-by-default solutions to protect Asana's infrastructure and product. Instead of acting as gatekeepers, we build guardrails that empower engineering teams to move quickly and safely. You will be responsible for engineering preventative controls at scale, focusing on building platforms and frameworks that eradicate systemic risks. This role is based in our San Francisco office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements. What you’ll achieve: Design, build, and maintain secure-by-default frameworks, libraries, and platforms to eliminate entire classes of vulnerabilities. Engineer and improve core security services, including our access control frameworks, secrets management infrastructure, and AWS permissions systems. Develop and own the platform for vulnerability remediation, creating tooling that empowers engineering teams to address risks efficiently. Partner with product and infrastructure teams to architect and implement foundational security controls for Asana including cloud networking, and compute infrastructure. Partner with product teams to effectively offer recommendations for how to secure projects at all phases of implementation (design, development, launch, and/or incidents) Influence engineering initiatives through design reviews, communicating security principles, and helping teams make sound security trad

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role We're looking for an Operating Systems Security Engineer to harden and secure the OS layer of our infrastructure. You'll be responsible for designing and implementing OS-level security controls, from kernel hardening to runtime protection, ensuring our systems can withstand sophisticated attacks while maintaining the performance required for AI model training. This is a hands-on role where you'll work with cutting-edge hardware and implement novel security solutions for environments that don't exist anywhere else in the world. You'll need to balance extreme security requirements with the operational needs of researchers training models at unprecedented scale. Key responsibilities Design and implement hardened OS configurations for AI workloads across diverse hardware platforms Minimize attack surfaces by removing as many unnecessary components as possible from kernelspace and userspace Develop kernel security policies using SELinux, AppArmor, and custom Linux Security Modules and runtime enforcement mechanisms Implement and maintain full-disk encryption solutions for diverse storage systems Build security infrastructure for AI systems, research environments, and production services Create OS-level attestation and integrity monitoring systems Apply security patches, develop patches for custom kernel modules, and kernel hardening configurations Design secure boot processes and trusted execution environments Work with container teams to ensure proper workload isolation at the kernel level Design privilege separation and mandatory access control policies Implement secure update mechanisms for OS components Build tooling for

About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role: We're looking for a Security Engineer to join our Cloud Security Engineering team. In this role, you'll help strengthen the security of our platform by building and improving the controls that protect our infrastructure. You'll play a key role in making security a core part of how we build, deploy, and scale our systems, while helping the company grow securely and confidently. You'll report to the Security Operations Manager, and this is a hybrid or fully remote within the United States. If you're based within commuting distance of our SF or NY offices, the role includes in-office anchor days on Monday, Tuesday, and Friday. What you will do: Design and implement scalable security controls across our cloud-native platform. Harden infrastructure components using infrastructure-as-code, policy enforcement, and service isolation. Build secure by default infrastructure and code CI/CD pipelines. Collaborate with platform and infrastructure teams to integrate security best practices into architecture and workflows. Stay ahead of cloud security trends and adopt cutting-edge technologies to enhance platform resilience. Conduct threat modeling, risk analysis, and mitigation planning for critical systems. Drive improvements in monitoring, detection, and incident response at the platform level. Build, deploy and maintain relevant tooling. About you: 8+ years of experience in infrastructure or platform security roles. Deep understanding of secure cloud infrastructure (AWS/GCP), identity and access management, and system hardening. Proficient wi

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. We are looking for a Software Engineer II to join the Auth0 Security Engineering organization. You'll help build and maintain the security guardrails for our multi-cloud environment, implementing security and compliance standards as programmatic, code-driven policies. What You Will Do Cloud Security Controls: Implement and maintain organization-wide controls (SCPs, Azure Policy) balancing protection with developer experience. Identity & Access Management (IAM): Build and update templates and permission boundaries that govern how services and humans interact with our cloud, applying the principle of least privilege. Infrastructure & Network Security: Contribute to the security standards for VPC architecture, edge networking, and cross-account connectivity. System Design: Help build systems and processes that validate the security posture of the platform, enforcing our security policies and surfacing actionable feedback for engineering teams. Growth & Collaboration: Partner with teammates across the organization, share what you learn, and continually deepen your security expertise. What You Bring Cloud & Infrastructure Experience: 3+ years of experience in software engineering or information security, with hands-on exposure to cloud-native environments, Kubernetes (EKS, AKS), and cloud security concepts. Policy & Automation: Experience building or maintaining automated controls and infrastructure-as-code, ideally within Terraform workflows

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role The Security Engineering team's mission is to safeguard our AI systems and maintain the trust of our users and society at large. Whether we're developing critical security infrastructure, building secure development practices, or partnering with our research and product teams, we are committed to operating as a world-class security organization and keeping the safety and trust of our users at the forefront of everything we do. Responsibilities: Build security for large-scale AI clusters across multiple clouds and bare-metal data centers, including IAM, network segmentation and encryption controls Design and implement network security controls: default-deny ingress and egress, segmentation between research, training and production environments, private connectivity across clouds and data centers, cloud firewall policy and mTLS with service identity Ship these controls as secure defaults using infrastructure as code and GitOps workflows, so new clusters, VPCs and data center links inherit the right boundaries Build visibility into network traffic and boundary drift, with detection for exfiltration paths and automated remediation where it is safe to do so Design secure-by-design development workflows and CI/CD pipelines across our services, with expertise in Kubernetes security, container orchestration and identity management Threat model and assess risk for complex multi cloud and networked environments, and join infrastructure networking, cluster and data center teams at design time so topology, routing and firewall decisions carry our security requirements from day one Mentor engineers and contribute to hiring and growt

About the Team The team’s mission is to accelerate the secure evolution of agentic AI systems at OpenAI. To achieve this, the team designs, implements, and continuously refines security policies, frameworks, and controls that defend OpenAI’s most critical assets—including the user and customer data embedded within them—against the unique risks introduced by agentic AI. About the Role As a Security Engineer on the Agent Security Team , you will be at the forefront of securing OpenAI’s cutting-edge agentic AI systems. Your role will involve designing and implementing robust security frameworks, policies, and controls to safeguard OpenAI’s critical assets and ensure the safe deployment of agentic systems. You will develop comprehensive threat models, partner tightly with our Agent Infrastructure group to fortify the platforms that power OpenAI’s most advanced agentic systems, and lead efforts to enhance safety monitoring pipelines at scale. We are looking for a versatile engineer who thrives in ambiguity and can make meaningful contributions from day one. You should be prepared to ship solutions quickly while maintaining a high standard of quality and security. We’re looking for people who can drive innovative solutions that will set the industry standard for agent security. You will need to bring your expertise in securing complex systems and designing robust isolation strategies for emerging AI technologies, all while being mindful of usability. You will communicate effectively across various teams and functions, ensuring your solutions are scalable and robust while working collaboratively in an innovative environment. In this fast-paced setting, you will have the opportunity to solve complex security challenges, influence OpenAI’s security strategy, and play a pivotal role in advancing the safe and responsible deployment of agentic AI systems. You’ll be responsible for: Architecting security controls for agentic AI – design, implement, and iterate on identity, netwo

About Datadog We're on a mission to build the best platform in the world for engineers to understand and scale their systems, applications, and teams. We operate at a high scale - trillions of data points per day — providing always-on alerting, metrics visualization, logs, and application tracing for tens of thousands of companies. Our engineering culture values pragmatism, honesty, and simplicity to solve hard problems the right way. The Opportunity We are looking for an experienced software engineer to join our CI/CD Security Team within our SDLC Security organization. We work at the intersection of security and engineering infrastructure to secure Datadog's continuous integration and continuous delivery systems. Our responsibilities include hardening pipelines, protecting credentials, and enforcing tightly scoped access controls. We also develop authorization and verification mechanisms to ensure that only trusted code and approved processes can reach production. In this role, you will shape and build a new security layer for our CI/CD infrastructure and drive its adoption across the engineering organization. You will solve challenging systems problems around trusted build provenance, secure secret delivery, and real-time policy enforcement at high throughput. The work sits directly in the critical path of software delivery, where strong security guarantees have to coexist with low latency, high reliability, and a seamless developer experience. You’ll join at an ideal time to make a big impact, as the need for robust software supply chain security is higher than ever. Datadog is growing rapidly, and AI-assisted development is increasing both the pace of software delivery and the amount of activity flowing through our CI/CD systems. Securing that scale without slowing engineers down requires strong software engineering fundamentals, thoughtful automation, and security controls designed to operate reliably at high throughput. At Datadog, we pla

About the Role As a Hardware Security Engineer, you’ll contribute to building open, transparent, and secure AI systems. You’ll have the opportunity to work on projects that safeguard corporate assets by implementing and operating preventative and reactive security controls while collaborating with teams and stakeholders across the company. We’re looking for an intern that is interested in building AI-assisted security apps. Responsibilities Design, prototype, and implement security solutions for AI infrastructure across hardware, firmware, operating systems, and cloud services, including BMCs, TPMs, secure boot chains, networking interfaces, and workload identity systems. Assess and improve the security posture of server and accelerator platforms, including firmware update processes, device identity, trusted execution, and hardware-backed cryptography. Support the secure platform lifecycle, from device onboarding, provisioning, and inventory through configuration validation and decommissioning. Build automation and internal tools in Python, Bash, or similar languages to collect platform telemetry, detect configuration drift, and support incident investigation. Build AI-assisted security applications for asset classification, anomaly detection, and detection-and-response workflows. Partner with IT and infrastructure teams to implement and enforce identity, access-control, endpoint, and privileged-access security practices. Research and evaluate emerging technologies such as confidential computing, remote attestation, hardware roots of trust, and secure device management. Write clean, well-documented code, technical designs, test plans, and security findings. Requirements Actively pursuing a degree in Electrical Engineering, Computer Science, Software Engineering, or a related field expected by Summer 2027 Foundational understanding of computer architecture, operating systems, networking, embedded systems, digital logic, or electronics Strong programming skills