Security Officers Jobs

About us Sierra is the leading platform for customer-facing AI agents, working with many of the world's biggest brands — including The GAP, Rocket Mortgage, SoFi, Sutter Health, and SoftBank — to transform how they serve customers and grow their businesses. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia. We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and a commitment to balancing Family along the way. These values are the foundation of our work, and we are committed to upholding them in everything we do. Our co-founders are Bret Taylor and Clay Bavor . Bret currently serves as Board Chair of OpenAI. Previously, he was co-CEO of Salesforce (which had acquired the company he founded, Quip) and CTO of Facebook. Bret was also one of Google's earliest product managers and co-creator of Google Maps. Before founding Sierra, Clay spent 18 years at Google, where he most recently led Google Labs. Earlier, he started and led Google’s AR/VR effort, Project Starline, and Google Lens. Before that, Clay led the product and design teams for Google Workspace. What you'll do Own independent audits and regulatory programs including ISO 42001, PCI DSS, NIST 800-53, FedRAMP, HIPAA, and related frameworks. Drive scope definition, readiness assessments, auditor engagement, remediation planning, and executive level reporting. Develop a strong working understanding of Sierra’s Conversational AI Platform, model providers, and cloud architecture. Partner with Platform and Agent Engineering to design and operationalize controls across multi cloud environments, infrastructure, inference and data platforms. Build a centralized and evolving security controls library mapped to compliance, regulatory and customer requirements. Continuously assess control effectiveness, identify gaps, prioritize risk, and drive remediation that

About us Sierra is the leading platform for customer-facing AI agents, working with many of the world's biggest brands — including The GAP, Rocket Mortgage, SoFi, Sutter Health, and SoftBank — to transform how they serve customers and grow their businesses. We are primarily an in-person company based in San Francisco, with growing offices across North America, Europe, and Asia. We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and a commitment to balancing Family along the way. These values are the foundation of our work, and we are committed to upholding them in everything we do. Our co-founders are Bret Taylor and Clay Bavor . Bret currently serves as Board Chair of OpenAI. Previously, he was co-CEO of Salesforce (which had acquired the company he founded, Quip) and CTO of Facebook. Bret was also one of Google's earliest product managers and co-creator of Google Maps. Before founding Sierra, Clay spent 18 years at Google, where he most recently led Google Labs. Earlier, he started and led Google’s AR/VR effort, Project Starline, and Google Lens. Before that, Clay led the product and design teams for Google Workspace. Security Engineer Security Engineering builds the foundations that let Sierra deliver powerful AI agents while protecting customer data and trust. We partner across product and platform to make security, privacy, and safety core product capabilities and secure defaults. What you’ll do Our work spans several security domains. You’ll go deep where your strengths and interests are strongest, with opportunities to explore new areas alongside the team. Build the Foundations of Trust. Design and ship systems and controls that make Sierra secure by default — spanning product security, infrastructure security, enterprise security, identity, and detection and response. You’ll work across all layers of our platform to identify risk, strengthen architectures, and buil

RDQ226R605 This role can be based remotely anywhere in the United States. About Databricks Databricks is the data and AI company. More than 12,000 organizations worldwide — including Comcast, Condé Nast, Grammarly, and over 50% of the Fortune 500 — rely on the Databricks Data Intelligence Platform to unify and democratize data, analytics and AI. Databricks is headquartered in San Francisco, with offices around the globe and was founded by the original creators of Lakehouse, Apache Spark™, Delta Lake and MLflow. About the Team The Agentic Security Engineering team is a horizontal, shared services engineering team that makes every Databricks security function AI-native — building the AI agents, "personas," and shared platform that security teams across the org (Detection & Response, Threat Intelligence, Vulnerability & Product Security, Red Team, GRC, and Continuous Monitoring) build on to operate at machine speed, safely and reliably. We leverage AI to transform how security is done. The Role As Staff Security Software Engineer , you own a major technical workstream designing and shipping production-grade AI agents and the platform capabilities that power them, with reliability, observability, and safe-by-default security as first-class requirements. You set the standards for how agents are built and operated and co-build with partner security teams. Example use cases you'll enable, led by AI threat detection at scale (alert triage and false-positive reduction, fleet-scale anomaly detection), extend to threat hunting, vulnerability management, product security, red team/offensive testing, and GRC/assurance use cases. The Impact You Will Have Agentic Security Engineering Architecture Design, ship, and operate production AI agents/personas that security teams depend on, starting with AI threat detection at scale. Build and harden the shared platform so any security team can ship agents safely and reliably — i.e., sandboxing, scoped least-privilege identity, obs

About the Team OpenAI’s Corporate Security (CorpSec) team protects our people, places, and operations so that employees can safely pursue our mission to ensure that artificial general intelligence benefits all of humanity. The team partners across the company to enable a secure, resilient, and trusted environment that supports both safety and innovation. We operate in dynamic, high-visibility environments, including dense urban offices and major events where discretion, credibility, and sound judgment are essential. The Corporate Security team works closely with Real Estate & Workplace, Legal, Communications, HR, IT, and external partners to maintain a proactive and people-first security posture. About the Role The Security Operations Manager owns day-to-day physical security operations and end-to-end security programs across assigned sites. The role is accountable for vendor performance, staffing and training plans, incident readiness, and recurring operational improvements that protect OpenAI’s people, facilities, and business activities. The ideal candidate combines hands-on operational leadership with independent program ownership, sound judgment, and strong cross-functional partnerships. They anticipate risks, resolve competing operational priorities, build repeatable procedures, and coordinate effective incident responses while escalating material risks and resource decisions through established channels. This role reports to the Senior Security Operations Manager and will include both domestic and international travel in support of Event Security, and other CorpSec ongoing and developing initiatives. In this role you will: Office Security : Security Operations & Program Ownership: Own security operating plans and program outcomes across assigned sites, including guard coverage, staffing and training plans, access control, visitor management, post orders, and emergency readiness. Set clear expectations for contracted providers and review staffing, sche

About Ema Ema builds AI Employees for HR, IT and Finance. Our AI Employees take on the busy work across the employee experience, from recruiting, onboarding and benefits to IT support, invoice processing and payroll, so people can spend their time on work that needs them. Founded by former executives from Google, Coinbase, Flipkart, and Okta, our team includes engineers from premier tech companies and graduates of Stanford, MIT, UC Berkeley, CMU, and IITs. We are backed by industry leading investors including Accel, Naspers/Prosus, Creaegis, Section32, and angels like Sheryl Sandberg and Dustin Moskovitz. Headquartered in Silicon Valley and with offices in London, Bangalore and Vancouver, Ema is at the frontier of what Agentic AI can do in production. We ship real systems that run real business processes at scale. Ema builds AI agents that act on sensitive enterprise data and systems. You’ll make sure the agents, and the platform they run on, are secure by design. You’ll build security controls for autonomous agents operating across multi-tenant enterprise environments, including cloud, on-prem and air-gapped deployments. You’ll solve zero-trust problems where the code isn’t static logic but non-deterministic models making live API calls against sensitive customer data. Our agents orchestrate 100+ LLMs, call third-party tools through MCP, execute code in sandboxes and drive headless browsers, and each of those is an attack surface you’ll help define. Role Overview What you’ll own AI and agent security Threat model new AI agent features before launch: direct and indirect prompt injection, jailbreaks, data exfiltration through agent outputs, and over-privileged tool use Design guardrails for agentic workflows: least-privilege tool and connector scopes, human-in-the-loop approvals for high-risk actions, and output filtering Enforce tenant and data isolation across retrieval (RAG), context stores, and model calls, so no customer’s data leaks into another’s context Secur

About Ramp Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $200B in annualized spend flows in and out of 70,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. About the Role Ramp is hiring its first dedicated Physical Security Lead to build and run the program that protects our people, our leaders, our events, and our offices. Our footprint now spans a multi-floor New York headquarters, Ramp-managed offices, and a growing set of hubs across North America and Europe. Our leaders are increasingly visible on public stages. You'll own three areas in roughly equal measure: executive protection , event security , and office security (access control, cameras, guards, and building security). Your job is to turn a set of strong vendors and partner teams into one measurable, risk-based program. This is a high-ownership IC role on the Corporate Security team. It reports to the Director of IT & Corporate Security and is based at our NYC HQ. This is a physical security role; cybersecurity and information security are owned by other Ramp security teams. We aren't looking for a guard supervisor or a box-checker. We want someone who makes it safe for Ramp to move fast, host great events, and keep our leaders accessib

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Seattle, Washington D.C., Raleigh, London, and Amsterdam. About the team: The Security Governance, Risk, and Compliance (GRC) team is part of Plaid’s security organization, focused on enabling the business by proactively managing information security risks and maintaining effective controls. Our mission is to reduce the likelihood and impact of security risks while operating a robust assurance program that builds trust with our customers, consumers, and data partners.We partner closely across the company to ensure Plaid’s platform remains secure, resilient, and aligned with industry and regulatory expectations.Security risk management is how Plaid makes informed security trade-offs—we identify and analyze the risks that could materially affect the business, make sure the right owners decide what to do about them, and turn that picture into reporting leadership and the board can act on. About the role: You will run security risk assessments end-to-end within Plaid’s security risk management program—intake, scenario-based analysis, treatment decisions, and monitoring across security, infrastructure, and product risk. You will work with engineering SMEs and risk owners on risks ranging from over-privileged access and supply-chain gaps to pr

The mission of The New York Times is to seek the truth and help people understand the world. That means independent journalism is at the heart of all we do as a company. It’s why we have a world-renowned newsroom that sends journalists to report on the ground from nearly 160 countries. It’s why we focus deeply on how our readers will experience our journalism, from print to audio to a world-class digital and app destination. And it’s why our business strategy centers on making journalism so good that it’s worth paying for. About the Role The New York Times Company is looking for an experienced security leader to serve in a key leadership and operational role. You will lead the ongoing transition toward a unified global corporate security operation, directly managing a team of in-house and contract security professionals and working with senior executives and operational leads across the company. This is a high impact leadership role, and you will be measured by your ability to build a cohesive physical security architecture, improve how our colleagues work together, and ensure our corporate security program supports the company's growth. Responsibilities: You will lead Corporate Security programs, by: Design and implement a global security operations architecture:Scale operations across staff and offices in New York City, elsewhere in the U.S. and in 8 international offices and 33 international bureaus, ensuring consistent service delivery and operational resilience.Establish and maintain global governance frameworks to provide an application of corporate security standards across all offices, bureaus and regions, serving as the final point of escalation for operational policy decisions. Lead and develop a high-performing, globally distributed team:Ensure clear accountability, ownership and streamlined cross-functional support for internal clients.Developing a culture of professionalism, excellence, and innovation on your team by assessing, training, evaluatin

Who We Are Notion is the collaborative AI workspace where teams and agents think together . We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. About the Role: As a Global Security Program Manager on Notion’s Global Safety & Security team, you’ll help protect our people, workplaces, and operations across a distributed global portfolio. This role exists to bring greater consistency to physical security programs as Notion scales—strengthening technology, vendor operations, incident readiness, and local execution without losing the welcoming experience we want employees and guests to feel. You’ll work across Workplace, People, IT, Legal, business leaders, vendors, and building partners, balancing hands-on operations with repeatable program design. This is a remote role based in the United States, with travel to Notion offices, events, and other locations expected—up to 50% based on operational needs. A Great Tuesday: Review regional differences in access control or visitor management and turn them into clear priorities for the global parity project. Work with a vendor or building manager to resolve a security gap, balancing local context with global standards. Draft an incident update, using AI to improve clarity, then validate the details and judgment behind the message. C

Healthcare is complex. We’re here to change that. RVO Health is a health technology company on a mission to make health easier to navigate, more accessible, and more affordable for everyone. Here, you'll help over 40 million people every month, with a team that genuinely cares about the work and each other. AT A GLANCE As part of our RVO Health Security team, you will play a major part in strategic initiatives that improve our security posture and protect our sensitive data. You will work in a collaborative Agile environment, working closely with the business, IT, and engineering teams. You will apply your skills in a highly dynamic, innovative, cloud-native environment with a strong security-minded culture. Where You'll Be Location: Denver, CO | Hybrid We believe great collaboration happens when we're together, solving problems, learning from each other, and connecting as a team. That's why we’re in our offices Tuesday through Thursday each week. You are welcome to work remotely Mondays and Fridays if you wish. Address: 1801 California St. Denver, CO 80202 What You’ll Do Design, implement, and maintain security controls and architectures to protect the company's cloud infrastructure, applications, and data from cyber threats. Improve our cloud security posture and vulnerability management program — pull-request scanning, triage and tracking of findings to closure across engineering teams, and coverage and license optimization. Build and enforce software supply chain controls across the developer toolchain — package, dependency, and extension guardrails, with enforcement thresholds tuned to reduce noise rather than generate it. Extend security into CI/CD pipelines, including the emerging problem of governing AI-authored code at the pipeline chokepoint. Build automation, internal tooling, and integrations against our developer platform and security stack so that security controls are self-service rather than ticket-driven. Partner with Platform & Software Enginee

Healthcare is complex. We’re here to change that. RVO Health is a health technology company on a mission to make health easier to navigate, more accessible, and more affordable for everyone. Here, you'll help over 40 million people every month, with a team that genuinely cares about the work and each other. AT A GLANCE As part of our RVO Health Security team, you will play a major part in strategic initiatives that improve our security posture and protect our sensitive data. You will work in a collaborative Agile environment, working closely with the business, IT, and engineering teams. You will apply your skills in a highly dynamic, innovative, cloud-native environment with a strong security-minded culture. Where You'll Be Location: Minneapolis, MN | Hybrid We believe great collaboration happens when we're together, solving problems, learning from each other, and connecting as a team. That's why we’re in our offices Tuesday through Thursday each week. You are welcome to work remotely Mondays and Fridays if you wish. Address: 11000 Optum Cir Eden Prairie, MN 55344 What You’ll Do Design, implement, and maintain security controls and architectures to protect the company's cloud infrastructure, applications, and data from cyber threats. Improve our cloud security posture and vulnerability management program — pull-request scanning, triage and tracking of findings to closure across engineering teams, and coverage and license optimization. Build and enforce software supply chain controls across the developer toolchain — package, dependency, and extension guardrails, with enforcement thresholds tuned to reduce noise rather than generate it. Extend security into CI/CD pipelines, including the emerging problem of governing AI-authored code at the pipeline chokepoint. Build automation, internal tooling, and integrations against our developer platform and security stack so that security controls are self-service rather than ticket-driven. Partner with Platform & Software

Healthcare is complex. We’re here to change that. RVO Health is a health technology company on a mission to make health easier to navigate, more accessible, and more affordable for everyone. Here, you'll help over 40 million people every month, with a team that genuinely cares about the work and each other. AT A GLANCE As part of our RVO Health Security team, you will play a major part in strategic initiatives that improve our security posture and protect our sensitive data. You will work in a collaborative Agile environment, working closely with the business, IT, and engineering teams. You will apply your skills in a highly dynamic, innovative, cloud-native environment with a strong security-minded culture. Where You'll Be Location: Charlotte Metro Area (Fort Mill, SC) | Hybrid We believe great collaboration happens when we're together, solving problems, learning from each other, and connecting as a team. That's why we’re in our offices Tuesday through Thursday each week. You are welcome to work remotely Mondays and Fridays if you wish. Office address: 1101 Red Ventures Dr Fort Mill, SC 29707 What You’ll Do Design, implement, and maintain security controls and architectures to protect the company's cloud infrastructure, applications, and data from cyber threats. Improve our cloud security posture and vulnerability management program — pull-request scanning, triage and tracking of findings to closure across engineering teams, and coverage and license optimization. Build and enforce software supply chain controls across the developer toolchain — package, dependency, and extension guardrails, with enforcement thresholds tuned to reduce noise rather than generate it. Extend security into CI/CD pipelines, including the emerging problem of governing AI-authored code at the pipeline chokepoint. Build automation, internal tooling, and integrations against our developer platform and security stack so that security controls are self-service rather than ticket-driven. Partner

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Seattle, Washington D.C., Raleigh, London, and Amsterdam. The Platform Security team (PlatSec) defends Plaid against attackers. We own laptop security, cloud security, AI security, detection and response, and red teaming. Right now we're in growth mode. AI has expanded Plaid's attack surface faster than most security teams can adapt, and we're building the guardrails, identity controls, and detection systems to keep pace without slowing the business down. If you like solving problems nobody's solved yet, this is that team. About the role You'll be Plaid's first line of defense on AI security. You'll review new AI technologies to find security risks before they ship, then design and implement the controls that close them. You'll build the guardrails, identity management, and detection systems that let Plaid use AI aggressively without getting burned. Responsibilities Review AI systems and integrations for security risk before and after deployment. Design and deploy guardrails, sandboxes, and other controls that contain what AI agents can do. Build or implement systems to track and manage AI identities, so we know what access every AI has been granted and can balance risk with agility. Detect and mitigate prompt injection across Plaid's AI

About AlphaSense: The world’s most sophisticated companies rely on AlphaSense to remove uncertainty from decision-making. With market intelligence and search built on proven AI, AlphaSense delivers insights that matter from content you can trust. Our universe of public and private content includes equity research, company filings, event transcripts, expert calls, news, trade journals, and clients’ own research content. The acquisition of Tegus by AlphaSense in 2024 advances our shared mission to empower professionals to make smarter decisions through AI-driven market intelligence. Together, AlphaSense and Tegus will accelerate growth, innovation, and content expansion, with complementary product and content capabilities that enable users to unearth even more comprehensive insights from thousands of content sets. Our platform is trusted by over 6,000 enterprise customers, including a majority of the S&P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us! About the Role We are building an AI Security and Governance capability and need an AI Security Analyst to be the front line for detecting, investigating, and containing risk across every AI tool, agent, and model touching AlphaSense's environment. You will monitor enterprise AI usage end to end, hunt for unauthorized ("shadow") AI and rogue agent activity, and turn raw AI telemetry into triaged findings the security and governance team can act on. Working alongside the Automation Engineer, Data Analyst, and Director, you will be a primary contributor to the evidence base underpinning our ISO 42001 certification and our broader AI risk posture. Key Responsibilities AI Tool Discovery & Shadow AI Monitoring Continuously monitor CASB/SWG, OAuth, and endpoint telemetry to discover unsanctioned AI tools, browser extensions, and API-level agents in u

Who are we? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! Why this role Enterprises hand Cohere their most sensitive data and put our models inside workflows they can't afford to get wrong. Securing that means working on problems the industry hasn't settled yet, what authorization means when an agent acts on a user's behalf, how to contain tools that consume untrusted input, and whether tenant boundaries hold when a model can be steered by the data it reads. The established playbooks only take you so far. We're hiring a Senior Product Security Engineer to work these problems alongside the engineers building the products, reviewing architecture and code, threat modeling before implementation, testing what ships, and turning what you learn into defaults other teams inherit. This is a hands-on engineering role, not an advisory one. What you’ll do Lead security reviews. Review architecture, code, and security-sensitive changes. Identify both individual vulnerabilities and the recurring design patterns behind them. Secure AI-powered products. Evaluate risks such as prompt injection, unsafe tool use, identity and delegation failures, excessive agency, data exposure, tenant isolation, and san