Security Controls Assurance Lead Jobs

About the Role As a Hardware Security Engineer Intern, you’ll contribute to building open, transparent, and secure AI systems. You’ll have the opportunity to work on projects that safeguard corporate assets by implementing and operating preventative and reactive security controls while collaborating with teams and stakeholders across the company. We’re looking for an intern that is interested in building AI-assisted security apps. Responsibilities Help design, prototype, and assess security solutions for AI infrastructure across hardware, firmware, operating systems, and cloud services, working with components like BMCs, TPMs, secure boot chains, and device and workload identity systems. Support secure platform lifecycle work such as device onboarding, provisioning, inventory, and configuration validation. Build automation and internal tools in Python, Bash, or similar languages to collect platform telemetry, detect configuration drift, or support incident investigations. Prototype AI-assisted security tools for tasks like asset classification, anomaly detection, or detection-and-response workflows. Research an emerging area such as confidential computing, remote attestation, or hardware roots of trust, and share your findings with the team. Own a well-scoped project from start to finish with mentorship from experienced engineers, delivering clean, well-documented code and presenting your results at the end of the internship. Requirements Bachelor’s degree (or equivalent) in Electrical Engineering, Computer Science, Software Engineering, or a related field, earned or expected by Summer 2028 Foundational understanding of computer architecture, operating systems, networking, embedded systems, digital logic, or electronics Strong programming skills with a proficiency in Python or bash Exposure to building AI-assisted applications Preferred Qualifications Prior security engineering experience through internships, hackathons, or projects Coursework, projects, resea

The Platform team creates the technology that enables Spotify to learn quickly and scale easily, enabling rapid growth in our users and our business around the globe. Spanning many disciplines, we work to make the business work; creating the infrastructure, tooling, frameworks, and capabilities needed to welcome a billion customers. At Spotify, security helps make innovation possible. Our Enterprise Security team protects the systems and technology that support our employees and the more than 700 million people who use Spotify. We're looking for a Security Engineer to help strengthen our enterprise security across identity, devices, networks, and AI-powered tools. You'll build practical solutions, work with teams across the business, and help us create a secure environment where people can do their best work. What You'll Do Improve enterprise security by identifying risks and implementing solutions that protect Spotify while supporting a great employee experience. Design and build security tools, integrations, and automation to make security processes more effective and scalable. Analyze security data to identify gaps, understand emerging risks, and guide improvements. Implement security controls across identity and access management, enterprise applications, endpoints, and cloud-based services. Assess security risks associated with AI tools and agents, and help develop safeguards that support responsible adoption. Collaborate with IT, infrastructure, and security teams to strengthen security across devices, networks, and enterprise systems. Evaluate and improve enterprise security technologies, including managed browsers and device security tools. Share your expertise and work with colleagues across technical and non-technical teams to make security practices clear, practical, an

RDQ427R608 While candidates in the listed location(s) are encouraged for this role, candidates in other US locations will be considered. --- About the Team The Enterprise Security team at Databricks is responsible for securing the corporate environment, including the SaaS platforms, internal tools, integrations, automation workflows, and AI-adjacent systems that Databricks employees and operations depend on. We work at the intersection of enterprise architecture, security engineering, and business enablement, partnering with IT, Engineering, Legal, Privacy, and Procurement to surface risk early, set enforceable security standards, and enable the business to operate securely at scale. The Role As a Sr. Security Engineer on the Enterprise Security team, you turn security requirements into working protections across Databricks' enterprise environment. You implement, integrate, test, and improve security controls across enterprise applications, identity, endpoint, network, SaaS, and data-security systems. You bring strong hands-on engineering experience, developing automation and reusable capabilities that strengthen preventive controls, improve security coverage, and reduce repetitive manual work. You work closely with security domain leads, IT, and platform owners to translate approved security designs into practical implementations. Your focus is on delivering reliable controls, automating recurring security checks and workflows, and continuously validating that protections remain effective as enterprise systems evolve. The Impact You Will Have Security Control Engineering & Implementation Implement and improve preventive security controls across enterprise systems, translating approved security requirements into tested, operational protections. Partner with security domain leads, IT, and platform owners to implement access, configuration, endpoint, network, and data-protection guardrails. Develop reusable technical implementations and secure configuration patter

CAPCO POLAND *We are looking for candidates willing to relocate to the Middle East - Qatar for the duration of the project. At Capco Poland, we’re not just another consultancy - we’re the spark behind digital transformation in the financial world. As a global leader in technology and management consulting, we thrive on helping clients tackle the toughest challenges across banking, payments, capital markets, wealth, and asset management. Our secret? A culture that’s fast, flexible, and fiercely entrepreneurial. We move quickly, think creatively, and always put our people first. We’re passionate about growth - both for our clients and ourselves - and that means attracting the very best talent to join us on this exciting journey. We’re proud to be: • Trailblazers in banking, payments, capital markets, wealth, and asset management • Champions of an agile, nimble, and innovative work environment • Dedicated to building a team of top-notch professionals who share our drive and vision The Role Capco is looking for a Security Consultant to help our clients identify, assess, and manage cybersecurity threats and technology risks across complex environments. You’ll work with security, technology, risk, architecture, and business teams to deliver structured threat and risk assessments that support informed decision-making and effective security controls. This is an opportunity to work on complex cybersecurity challenges within financial services, helping clients understand their threat landscape, identify vulnerabilities and control gaps, and strengthen their overall security and technology risk posture. The engagement is expected to run for one year and requires relocation to the Middle East for its duration . You will collaborate with client and project teams to deliver the agreed data engineering scope and project outcomes. What You’ll Do Assess existing security controls and evaluate their effectiveness against identified cyber and technology risks

We’re building a world of health around every individual — shaping a more connected, convenient and compassionate health experience. At CVS Health®, you’ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger – helping to simplify health care one person, one family and one community at a time. Position Summary The Senior Security Engineer – Akamai & Edge Security Services designs, implements, administers, and optimizes security controls that protect enterprise web applications, APIs, and internet-facing services. This role provides senior technical expertise in Web Application Firewall (WAF), bot protection, DDoS mitigation, API security, DNS security, certificate management, and related edge security technologies. The position partners with application, cloud, infrastructure, network, and security teams to strengthen the enterprise digital perimeter, respond to security threats, troubleshoot complex issues, and continuously improve security controls and operational processes. The role participates in a rotating on-call schedule, approximately one week every six weeks, with occasional after-hours support for critical incidents and emergency changes. Key Responsibilities: Security Engineering & Administration Administer and optimize Akamai security tec

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the team Secure Frameworks is the team in Anthropic's Security Engineering org that builds shared security libraries and frameworks the rest of the company builds on. We collaborate closely with teams and leaders across Anthropic to own critical security foundations, including workload identity and authorization, cryptographic frameworks, and the centralized access proxy that secures traffic to internal applications. Our mission is to make the secure thing easy and the easy thing secure by helping Anthropic engineers get secure behaviour by default and preventing entire classes of vulnerabilities through careful design. We own what we ship, help customers adopt better security practices and at times we work embedded directly in research, infrastructure or product teams. About the role You will design, build and run security foundations used across Anthropic's fleet, from threat model through production, on-call and adoption. Much of the work is greenfield: our infrastructure is growing quickly and the timelines are compressed, so you will help define the architecture rather than inherit it. Depending on your strengths you will focus on one or two of the areas below and contribute across the rest. Build critical security foundations including cryptographic frameworks, mTLS infrastructure, secure serialization, and authorization systems, designed to prevent entire classes of vulnerabilities Partner with product, research, infrastructure, and other security teams to ensure frameworks integrate smoothly with lower-layer security controls Scope, design and build security services and libraries end-to-end, maintain t

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Senior Software Engineer, Security Engineering Okta is The World’s Identity Company. We free everyone to safely use any technology, anywhere, on any device or app. Our flexible and neutral products, Okta Platform and Auth0 Platform, provide secure access, authentication, and automation, placing identity at the core of business security and growth At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box - we’re looking for lifelong learners and people who can make us better with their unique experiences. Join our team! We’re building a world where Identity belongs to you. We are looking for a Senior Software Engineer that will join the Auth0 Security Engineering organization. In this role, you will join a team of Software Engineers dedicated to building and managing services that secure the platform that Auth0 runs on. You will be instrumental in expanding our platform security controls and architecting custom workflows in a scalable, reliable manner. What You Will Do Service Development: Build, maintain, and operate platform security services and controls using Python, Node.js, or Golang. Security Automation: Build and contribute to our security automation initiatives for custom tooling. Container Security: Provide technical support and engineering solutions for securing Kubernetes (K8s) and containerized workloads, including runtime security, network policies, and admissio

About the role We are looking for a Sr. Full Stack Application Security Engineer with deep expertise in mobile application security to join our Product Security team. This role is hands-on and impact driven. You will work directly with mobile, backend, and platform engineering teams to identify, prevent, and remediate security issues across our iOS, Android, API, and backend systems. You will operate close to the code and close to the product. That means reviewing architectures across the stack, influencing secure design decisions early, and helping teams ship features safely without slowing delivery. This role is for someone who understands how modern distributed systems and mobile apps are built, deployed, and attacked in real-world environments. While mobile application security is a core focus, you will be part of a team that owns security posture across the full application stack including APIs, backend services, identity and authentication flows, and CI/CD pipelines. In this role, you can expect to Build and improve security capabilities, automation, and guardrails for mobile applications and backend/API services Perform application or API/backend penetration testing Identify, triage, and help remediate vulnerabilities across Chime products Partner closely with engineering and product teams to embed security into the development lifecycle across mobile apps, APIs, and backend services Perform architecture and code reviews across the stack (iOS/Android, APIs, backend) with a focus on secure data storage, authentication, authorization, secure communication, and session/token handling Leverage AI to accelerate security workflows (e.g., code review support, triage, threat modeling), and partner with teams building AI-enabled features to define and implement production-grade AI security controls To thrive in this role, you have 5+ years of experience in application security, with strong hands-on experience across both mobile and backend systems Ha

Everpure (NYSE: P) has evolved from storage pioneer to data platform, closing fiscal 2026 with $3.7 billion in revenue, its first billion-dollar quarter, and accelerating growth into FY27. Our strategic agenda spans the companies defining the next era of technology - hyperscalers, AI labs, the AI hardware supply chain, data platform providers, and the broader AI ecosystem. This type of work—work that changes the world—is what the tech industry was founded on. So, if you're ready to seize the endless opportunities and leave your mark, come join us. THE ROLE As a Security Engineer for Application Security within the Global Information Security Office (GISO), your mission is to embed seamless, scalable security practices directly into the software development lifecycle at Everpure. In this highly collaborative role, you will partner closely with global development, platform, and security teams to design standardized controls that empower our engineers. By building intelligent automation and tooling integrations, you will ensure our engineering pipelines consistently operate with both uncompromising security and exceptional speed. WHAT YOU'LL DO Implement and integrate critical application security controls (such as SAST, DAST, SCA, and secrets scanning) within CI/CD pipelines and Git-based workflows to proactively secure Everpure's software supply chain. Develop and maintain scalable automation scripts to streamline complex security checks, significantly improving tooling efficiency and driving consistent security adoption across engineering platforms. Exercise independent judgment in analyzing moderately difficult security issues, guiding development teams to effectively identify, troubleshoot, and remediate vulnerabilities in modern application environments. Drive the standardization of secure coding best practices and track key AppSec metrics to actively elevate the overall maturity of our global secure development operations. WHAT YOU BRING A strong foundation in a

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. The Logistics Security Program Manager plays a critical role in creating, applying, and improving Micron’s high-value logistics security efforts. This role centers on protecting high-value and high-risk shipments by defining risk-based security controls, boosting cargo-level visibility, tracking carrier and third-party logistics provider performance, and leading responses to customer concerns throughout global transportation networks. The program manager partners with Global Security, Supply Chain, Procurement, Logistics, Legal, Risk, and external logistics providers to ensure Micron operates a scalable, auditable, and response-ready model for high-value shipments. This role specifically covers program management in the Americas and Europe. Responsibilities: Serve as the subject matter expert for high-value logistics security, coordinating global transportation lanes, carriers, freight forwarders, and 3PL partners. Develop and uphold risk-focused logistics security frameworks and control strategies for valuable and sensitive shipments spanning various regions, routes, and transportation methods. Establish security requirements for carriers and logistics providers, including tracking, geofencing, chain of custody, tamper detection, monitoring, addressing critical issues, recovery, and compliance controls. Partner with Procurement, Logistics, Global Security, Legal, and business collaborators to integrate security requirements into contracts, operating procedures, supplier

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a talented Game Security Analyst who possesses a passion for player security. As a Game Security Analyst you will be a frontline defender committed to ensuring our games and services remain secure and enjoyable by protecting against cheaters, exploits, and account compromise. In this dynamic role you'll work closely with other engineering and product teams to detect, analyze, and mitigate threats to the player experience and stay ahead of evolving attack vectors. This is a full-time, permanent and in-office position based in Rockstar’s unique game development studio in the heart of Dundee, Scotland. WHAT WE DO The Game Security team is responsible for protecting our players, our games, and intellectual property from malicious actors. We work across multiple disciplines to detect, deter, and disrupt threats impacting the player experience. We work closely with other teams to enforce, support, and improve security solutions. RESPONSIBILITIES Analyze and respond to threats including cheats, exploits, account takeovers, and intellectual property (IP) abuse. Fine-tune and support anti-cheat measures and in-game abuse prevention systems. Perform security assessments of game features and enforcement policies. Investigate security incidents, analyze telemetry, and recommend mitigations related to cheating and fraud. Collaborate with cross-functional teams to improve security controls and detection. Monitor cheat trends, automate detection and enforcement workflows, and enhance account security posture. REQUIREMENTS 3+ years professi

About the team: The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information. About the role: Rubrik is hiring a Senior Manager to lead our Security Operations Center, including our FedRAMP-authorized environment. Incident response sits at the core of what the SOC does, alongside detection and monitoring, and this role owns all of it. You'll inherit a SOC that has already grown a lot in scale and maturity, and your job is to take it further: stronger detection and incident response, broader coverage as our environment gets more complex, and a real strategy for AI in the SOC. Driving our AI SOC transformation is a core part of this role. You'll be the one setting the strategy for how AI enables the SOC: scaling coverage beyond what headcount alone could support, reducing alert fatigue on L1 analysts, and giving analysts more room to focus on complex investigations and incident response. You'll also own SOC leadership for our FedRAMP environment: same detection, incident response, and operational rigor, applied to the teams and processes inside that compliance boundary. What you'll do: Team Leadership & Development- Hire, train, mentor, and evaluate SOC analysts across both commercial and FedRAMP-scoped teams. Build a culture of collaboration, ownership, and continuous learning within the SOC. Keep an eye on signal quality and analyst experience so analysts are working rea

About the team: The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information. About the role: Rubrik is seeking a Senior Manager to oversee the Enterprise Security services function. In this role, you will be responsible for ensuring that Rubrik's Corporate Enterprise IT technologies are designed and implemented to the highest possible security standards. You will partner with a variety of stakeholders across the business to improve the security posture of SaaS applications, integrations, identity and access operations, ensure corporate endpoints are secured, wireless networks are designed and implemented securely, IOT devices are securely managed, and regularly audit for compliance to Enterprise Security standards. What you'll do: ● Design and implement security standards across Identity (Okta), Endpoint (Windows, MacOS, Linux), Secrets Management (Vault, Lastpass) and Business Applications (Salesforce, Glean, etc). ● Partner with IT and other organizations to improve the security posture of enterprise applications, integrations, and access to sensitive and business data. ● Actively participate in evaluation, development, and management of security and compliance policies within IT management systems such as JAMF, inTune, etc. ● Analyze and harden existing applications, infrastructure, automation, and deployment processes: CircleCI, Github workflows, Tines, Zapier, etc. ● W

Location: Remote (U.S.) Clearance: U.S. Citizen or Permanent Resident Required with the ability to obtain a Public Trust Salary Range: 110K – 125K LTS is seeking a Senior Security RMF Engineer to join a cybersecurity transformation surge team supporting the VA.gov Platform. This role will serve as the bridge between VA security/RMF requirements and the engineers responsible for implementing those requirements across VA.gov. The Senior Security / RMF Engineer must understand how security controls are implemented in modern cloud infrastructure and software delivery environments and be able to translate control deficiencies, authorization requirements, and security risks into actionable engineering work.This is not intended to be a documentation-only compliance role. This individual will work closely with DevSecOps engineers and the existing VA.gov Platform ATO/security team to assess the current security posture, address gaps in VA.gov's Critical Controls, support ATO/cATO readiness, improve authorization artifacts, and automate evidence and control assessment wherever possible. The PWS specifically describes the desired model as one in which ATO/RMF documentation confirms security rather than defines it, with success measured through risk reduction and security outcomes rather than paperwork completeness. What You’ll Do: Assess VA.gov Platform compliance with the 18 Critical Controls identified by VA and help establish a baseline of current implementation and remaining gaps. Perform security reviews, gap analyses, and risk assessments across VA.gov Platform infrastructure, pipelines, applications, and component systems. Support ongoing ATO and cATO readiness for the VA.gov Platform authorization boundary. Develop, update, and maintain RMF and authorization artifacts, including System Security Plans (SSPs), control narratives, POA&Ms, Business Impact Analyses (BIAs), Privacy Threshold Analyses (PTAs), and supporting evidence. Evaluate identified

Location: Doha, Qatar | Practice Area : Technology & Engineering | Type: Permanent The Role Capco is looking for an AI Security Consultant to help our clients identify, assess, and manage security risks associated with AI technologies and AI-enabled solutions. You’ll work across data, security, technology, risk, and business teams to embed appropriate security controls throughout the lifecycle of AI systems. This is an opportunity to work at the intersection of AI, data, and cybersecurity within financial services, helping clients adopt AI securely while protecting sensitive information, strengthening governance, and managing emerging security risks. What You’ll Do Assess security risks associated with AI systems, models, data pipelines, and supporting technology environments. Conduct AI security assessments and secure AI architecture reviews. Define and implement security controls, standards, and guardrails across the AI lifecycle, from design and development through deployment and ongoing operation. Identify and assess AI-specific threats and vulnerabilities, including risks relating to data exposure, model access, prompt manipulation, and misuse. Deliver cybersecurity advisory services supporting enterprise AI adoption. Support clients in securing AI-enabled products, platforms and data ecosystems. Work with data, security, architecture, engineering, risk, and business teams to embed security-by-design into AI solutions and delivery processes. Support AI security governance, risk assessments, control testing, monitoring, incident response, and remediation activities. What We’re Looking For Strong experience in cybersecurity, information security, AI security, data security, or related technology risk disciplines. Practical understanding of AI and machine learning environments and the security risks associated with models, data, applications, and supporting infrastructure. Experience applying security controls, threat modelling, risk assessment, identity and a