Security Lead Jobs

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Replit’s ecosystem is powered by an expanding array of external services and essential AI model partners. As our lead for Security Vendor Risk & Contract Reviews, you will architect and execute a risk management program focused on substantive evaluation rather than just processing checklists. You’ll analyze SOC 2 documentation, security assessments, and system architectures to determine actual risk profiles, collaborating with our Legal team to secure necessary contractual protections. This role reports to the Head of Security GRC and involves high-impact partnerships across Legal, Engineering, and Product teams. What You'll Do Run substantive third-party risk management (TPRM), independently evaluating real risk, not just processing questionnaire responses Review SOC 2 reports, pen test findings, and architecture documentation to form an independent view of vendor risk, extending the same rigor to AI/model providers Partner with Legal on vendor and AI contract terms, including DPAs, subprocessor agreements, and AI-specific provisions Review contracts for non-standard security language when flagged by Legal or deal desk, and recommend redlines Maintain the vendor and AI/model risk register, feeding findings into the company's master risk register Enable sales through maturing the customer trust program Build the capability for continuous monitoring of vendor ecosystem Required Skills & Experience 8+ years in third-party/vendor risk management, security risk, or a related GRC role Demonstrated ability to independently assess vendor risk rather than relying on questionnaire responses alone, fluent in reading SOC 2 reports, ISO certificates, pen test summaries, and architecture documentation Experi

Distinguished Technologist - Principal Architect, Platform Security and Firmware Systems Description - HP is seeking a senior technical leader to serve as a lead architect for hardware rooted Platform Root of Trust for HP's commercial PC platform. In this role, you will be responsible for envisioning, defining, and driving the architecture of hardware, firmware, software, and cloud-integrated security capabilities that protect HP commercial PCs from current and emerging threats. You will also work across the hardware and security architecture teams, collaborate with HP's Security Research Labs, Firmware (BIOS) team, our security business that creates and deploys industry leading enterprise security and manageability solutions, product management, manufacturing, supply chain, customer enablement, and field organizations to create cohesive system solutions that deliver unique customer value. This position requires deep expertise in embedded systems, platform firmware, hardware, security, device manageability, and PC system architecture. The role also requires the ability to translate complex technical capabilities into customer-relevant value propositions and to influence internal and external stakeholders without relying solely on formal authority. Responsibilities Serve as principal architect for HP Endpoint Security Controller roadmap, associated hardware and firmware based capabilities, cryptographic identity, attestation, secure communication, event logging, and future controller generations. Define and evolve HP Sure Start architecture and related firmware resilience capabilities, including hardware-enforced firmware authenticity, recovery, update, and protection mechanisms. Drive secure BIOS and firmware configuration management strategies, including HP Sure Admin ecosystem capabilities, key management, zero-touch provision

Most security assurance work is reactive: a customer asks, a team scrambles, an answer goes out. This role exists to end that cycle. As a Senior Staff Analyst, you’ll own a named portfolio of our most significant customers from a security perspective, and get ahead of what they need — their regulatory environment, their audit calendar, their risk appetite, their control expectations — well enough to have the evidence ready before the request arrives. You’ll lead customer security audits hands-on, sit across from customer security teams as a peer rather than a form-filler, and build account security plans that make the next assessment predictable instead of painful. This is deliberately a hands-on senior individual contributor role. You’ll spend your time in audits, in customer conversations, and in the detail of controls and evidence — not in a management chain. If you’ve got deep SOC 2 and ISO 27001 knowledge, real technical range across cloud architecture, identity and vulnerability management, and the presence to hold a room with a sceptical CISO, this is a portfolio you can genuinely own. Here’s a breakdown of what you’ll do (not all of it, just the important stuff): Own a portfolio of strategic accounts as their dedicated security point of contact, building durable relationships with their security, risk, compliance and procurement teams. Lead customer security audits and assessments hands-on — scoping, preparing evidence, running the sessions, defending control design and driving findings to closure with internal owners. Build and maintain an account security plan for each account: their frameworks and regulators, audit and reassessment cycles, known concerns, open items and the roadmap commitments they care about. Anticipate requirements before they’re raised, tracking regulatory change, industry expectations and each account’s compliance calendar so documentation and evidence are staged in advance. Act

Drata is building the trust layer between great companies - automating compliance, managing risk, and helping organizations prove trust continuously as they scale. We're Dratanauts: a global crew of 600+ professionals united by a culture that rewards integrity, ownership, and raising the bar, no matter where in the world we're working from. Why Join the Drata Team? At Drata, you're not maintaining legacy compliance software - you're building the agentic AI platform defining what trust looks like for the next generation of companies. Here's what makes the work itself worth showing up for: Problems without a playbook: You'll work at the edge of AI and security, building agentic governance, continuous compliance, and real-time trust verification to solve problems that don't have an established answer yet. You're writing it as you go. Real ownership, not just process: Our values center on owning outcomes and raising the bar, not checking boxes. You're expected to have opinions and back them. A seat at the table: Your perspective is unique and valued. Open debate and diverse viewpoints are built into how decisions actually get made here, at every level. Growth at rocketship speed: Drata is scaling fast, which means scope grows fast too. High performers get more ownership, visibility, and experience. A crew, not just coworkers: Dratanauts consistently describe a "come as you are" culture with sharp, curious people—the kind of team that makes hard problems genuinely fun to solve. See what they say here and follow us on LinkedIn for company news, employee stories, and career updates. Job Summary: As Drata scales, we want our security and GRC leadership to be able to meet our customers’ needs in more places at once—in strategic customer conversations, on stage at industry events, and in the broader conversations happening across our security and GRC communities. We’re looking for a Field Chief Information Security Officer to join Drata’s Security & GRC organization, repo

Skeletons, lasers, tattoo buses — the Torq brand grabs attention like nothing else in cybersecurity. And we're growing like crazy, backed by Series D funding, 200% employee growth, and 300% revenue growth. Fueling Torq's momentum is our game-changing AI SOC platform, backed by a team and culture that makes Torq one of Forbes' Best Startup Employers in America, and a Business Insider 'startup to bet your career on'. Life at Torq is all gas, no brakes. We're a team of relentless, collaborative go-getters pushing the boundaries of what's possible for security automation. Every role is an essential driver of Torq's success as the AI-native autonomous SecOps platform of choice for security teams across the Fortune 500. Over the past year, we've built one of the fastest-growing Enterprise Sales organizations in EMEA. Now we're looking for a hands-on Regional Sales Director to lead our Western Europe business across the UK, Ireland, France, Benelux, and Northern Europe. This isn't a role for someone who wants to manage from behind a dashboard. We're looking for a leader who enjoys being in the field, building pipeline alongside the team, partnering with customers, and helping experienced Enterprise sellers win bigger. Location: London, UK (preferred) What you'll do Lead, coach, and develop a team of Enterprise Account Executives across Western Europe. Own the regional sales strategy and execution to achieve ambitious growth targets. Drive pipeline generation, forecasting, operational excellence, and accurate sales execution. Partner closely with customers, Sales Engineers, Marketing, and Channel teams to accelerate strategic opportunities. Support the team throughout complex enterprise sales cycles, from prospecting to closed deals. Identify new business opportunities and expand Torq's presence across the region. Recruit, hire, and develop top-performing Enterprise sales talent. Represent Torq at customer meetings, executive briefings, and industry events. Foste

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Okta’s Sales Development Representatives are high energy professionals that drive the demand, awareness, and interest for our market-leading cloud Security solutions. You will partner and collaborate closely with members of our Account Executive and Marketing teams to generate qualified sales leads, set meetings, and yield new deal opportunities. We're looking for professionals with strong organizational and follow up skills who work well in a team What you'll do: Uncover and approach prospects to generate new business opportunities to fuel the sales pipeline Help create and prioritize strategic target account lists within a defined territory Research and build new and existing accounts (i.e.: adding contacts, emails, strategic calling) Conduct high-level conversations with Senior Executives in prospect accounts Evangelize Okta and the On-Demand mode Achieve monthly quotas of qualified opportunities and closed business Who you are: Previous prospecting experience Experience in working to sales targets, KPIs or under time pressure would be a plus Salesforce.com experience Excellent written/verbal communication skills Strong problem-solving skills Highly motivated, driven and self-starting individual who is goal orientated Ability to work in a fast-paced, team environment Ability to understand customer needs and meet that need with a successful product sale Excellent time management/organizational skills A passion for the Tech/ Saas indust

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Okta’s Sales Development Representatives are high energy professionals that drive the demand, awareness, and interest for our market-leading cloud Security solutions. You will partner and collaborate closely with members of our Account Executive and Marketing teams to generate qualified sales leads, set meetings, and yield new deal opportunities. We're looking for professionals with strong organizational and follow up skills who work well in a team What you'll do: Uncover and approach prospects to generate new business opportunities to fuel the sales pipeline Help create and prioritize strategic target account lists within a defined territory Research and build new and existing accounts (i.e.: adding contacts, emails, strategic calling) Conduct high-level conversations with Senior Executives in prospect accounts Evangelize Okta and the On-Demand mode Achieve monthly quotas of qualified opportunities and closed business Who you are: Previous prospecting experience Experience in working to sales targets, KPIs or under time pressure would be a plus Salesforce.com experience Excellent written/verbal communication skills Strong problem-solving skills Highly motivated, driven and self-starting individual who is goal orientated Ability to work in a fast-paced, team environment Ability to understand customer needs and meet that need with a successful product sale Excellent time management/organizational skills A passion for the Tech/ Saas indust

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Okta’s Sales Development Representatives are high energy professionals that drive the demand, awareness, and interest for our market-leading cloud Security solutions. You will partner and collaborate closely with members of our Account Executive and Marketing teams to generate qualified sales leads, set meetings, and yield new deal opportunities. We're looking for professionals with strong organizational and follow up skills who work well in a team What you'll do: Uncover and approach prospects to generate new business opportunities to fuel the sales pipeline Help create and prioritize strategic target account lists within a defined territory Research and build new and existing accounts (i.e.: adding contacts, emails, strategic calling) Conduct high-level conversations with Senior Executives in prospect accounts Evangelize Okta and the On-Demand mode Achieve monthly quotas of qualified opportunities and closed business Who you are: Previous prospecting experience Experience in working to sales targets, KPIs or under time pressure would be a plus Salesforce.com experience Excellent written/verbal communication skills Strong problem-solving skills Highly motivated, driven and self-starting individual who is goal orientated Ability to work in a fast-paced, team environment Ability to understand customer needs and meet that need with a successful product sale Excellent time management/organizational skills A passion for the Tech/ S

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Okta’s Sales Development Representatives are high energy professionals that drive the demand, awareness, and interest for our market-leading cloud Security solutions. You will partner and collaborate closely with members of our Account Executive and Marketing teams to generate qualified sales leads, set meetings, and yield new deal opportunities. We're looking for professionals with strong organizational and follow up skills who work well in a team What you'll do: Uncover and approach prospects to generate new business opportunities to fuel the sales pipeline Help create and prioritize strategic target account lists within a defined territory Research and build new and existing accounts (i.e.: adding contacts, emails, strategic calling) Conduct high-level conversations with Senior Executives in prospect accounts Evangelize Okta and the On-Demand mode Achieve monthly quotas of qualified opportunities and closed business Who you are: Previous prospecting experience</li&g

At Asana, security is foundational to our mission of helping humanity thrive by enabling the world's teams to work together effortlessly. Our security team protects Asana's employees, users, and customers by proactively addressing threats and fostering a culture of security throughout our product and operations. We are looking for a collaborative, innovative Group Tech Lead to join our security organization in Warsaw. This is a senior technical leadership role that sits at the intersection of offensive and defensive security — a true purple team visionary who will design and drive Asana's threat operations strategy from the ground up. You will set the long-term technical direction for how we detect, emulate, respond to, and continuously improve our defences against real-world adversaries. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland. What you’ll achieve Purple Team Strategy & Technical Leadership: Define and own the technical strategy for a fully integrated purple team function, bridging offensive (red team) and defensive (blue team) capabilities into a cohesive, intelligence-driven program. Adversary Emulation: Design and implement a structured adversary emulation programme based on real threat intelligence, ensuring red team exercises directly improve blue team detection and response playbooks while establishing continuous feedback loops. Security Maturity & Industry Standards: Lead Asana's security maturity journey, defining a roadmap that progressively advances capabilities toward frameworks and standards such as NIST CSF, ISO 27001, SOC 2, and MITRE ATT&CK maturity l

SonicWall is a cybersecurity forerunner with more than 30 years of expertise and is recognized as a leading partner-first company, ensuring our partners and their customers are never alone in the fight against cybercrime. With the ability to build, scale and manage security across the cloud, hybrid and traditional environments in real-time, SonicWall provides relentless security against the most evasive cyberattacks across endless exposure points for increasingly remote, mobile and cloud-enabled users. With its own threat research center, SonicWall can quickly and economically provide purpose-built security solutions to enable any organization—enterprise, government agencies and SMBs—around the world. For more information, visit www.sonicwall.com or follow us on Twitter , LinkedIn , Facebook and Instagram . Role Overview As our lead AI/ML Engineer , you will design, build, and scale the intelligence layer powering our next-generation security products. You will turn complex datasets—including configurations, security alerts, and raw network logs—into production-ready AI capabilities that drive automated analysis, reasoning, and intelligent recommendations. Key Responsibilities Architect AI Systems: Design and deploy robust Retrieval-Augmented Generation (RAG) pipelines, agentic workflows, and LLM applications tailored to parse and reason over security telemetry and unstructured logs. Model Development & Tuning : Train, fine-tune, and evaluate ML/DL models for pattern matching, anomaly detection, and classification across massive, heterogeneous security datasets. Ensure AI Trust & Alignment : Implement strict guardrails, evaluation frameworks, and safety alignment techniques to ensure all model outputs and recommendations are deterministic, safe, and highly accurate. Establish MLOps: Build and maintain scalable ML pipelines (from data preprocessing to model monitoring in production), collaborati

Lead Engineer – Cyber Security Full Stack Engineer — NCD-0375 Brooklyn Park, MN 55445. Apply via Workday.

For over 20 years, Smartsheet has empowered teams to manage work seamlessly and scale solutions smarter. Now, in our most ambitious chapter yet, we are uniting human teams with AI agents. By orchestrating the work agents do best, automating manual tasks and uncovering insights at scale, we create the space for people to focus on what truly matters: judgment, creativity, and big thinking. That is magic at work, and it’s what we show up for every day. Smartsheet's expansion into Asia-Pacific government markets depends on mastering two critical compliance frameworks: Australia's Information Security Registered Assessors Program (IRAP) and Japan's Information System Security Management and Assessment Program (ISMAP). Both are essential gatekeepers for federal/national government adoption in their respective markets. We're seeking a Sr. Security Engineer II to own both programs end-to-end—managing IRAP assessments and continuous assurance in Australia, and ISMAP registration and compliance in Japan. This is a specialized, high-impact role for someone with deep expertise in both frameworks and comfort operating within government compliance ecosystems across two distinct cultures and regulatory environments. You'll be the authority on APAC government security standards at Smartsheet, the trusted interface with assessors and government agencies, and the architect of compliance processes that keep us ahead of evolving requirements. This role is critical for capturing high-value government business across the Asia-Pacific region. You will: Own IRAP (Australia) program strategy and execution: Lead the overall roadmap for obtaining and maintaining IRAP authorizations, including assessment coordination, remediation, and authorization maintenance. Own ISMAP (Japan) program strategy and execution: Lead registration and compliance for Japan's government cloud certification program, managing the certification assessment process and maintaining registry status. Coordinate with region

Altana is the network for trusted trade. Our AI-powered product network empowers governments and businesses to build a more resilient and secure global economy while keeping trade flowing. The Role: Vertical Technology Lead, Policy & National Security Altana’s mission is to power a new era of globalization organized around trusted networks. Nowhere is that mission more consequential — or more demanding — than in the policy and national security community, where the questions our customers bring us are matters of sovereignty, security, and how a nation understands the networks it depends on. These are the hardest programs we run. The technical bar is high and it keeps rising: the biggest opportunities are won, kept, and expanded on the strength of the technical work itself — sometimes on technical capability alone. As these engagements grow, so does the machinery large government partners expect from a serious partner: program management, delivery cadence, contractual rigor, accreditation. Left unmanaged, that machinery swamps the very people whose job is to architect and build. We’re changing how we deliver so it doesn’t. Large and strategic accounts are staffed with dedicated Implementation Delivery Managers (IDMs) who carry the program, project, and delivery-management load — and, as an account grows more complex, we trade up the team to meet it. That frees the technical leadership of the vertical to do what only it can do: hold the architecture bar, win the technical argument, and drive the last mile of product where the mission needs something that doesn’t exist yet. As Vertical Technology Lead for Policy & National Security, you own the technical outcomes for the vertical end-to-end. You are the senior technical counterpart to the vertical’s commercial leadership — setting the technical approach that wins business, owning the solution architecture and delivery that turns wins into mission outcomes, and leading the team that does the work. This is a UK-b

Manager, Security Solutions (SSO) Product Lead — Kuala Lumpur, Malaysia. Apply via Workday.