Security Risk Analyst Jobs

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Security Incident Response team is responsible for triaging and assessing the severity of incoming security alerts, responding with initial containment measures and escalating as needed to incident responders for further investigation and resolution. They analyze a variety of data sources to identify potential threats, collect requirements for operational enhancements to detection and response systems, and generally scale security processes. From external attacks to insider threats, our goal is to respond with speed and precision, remediate, and support the incident postmortem process. The team is distributed globally and regularly coordinates with stakeholders in North America, Europe, and Asia. What you’ll do You will leverage your security incident response experience to improve capabilities at Stripe. You will manage and coordinate the entire incident response process, developing and implementing incident response plans, conducting risk assessments, establishing procedures, leading workstreams, and ensuring timely and effective resolution. You will also act as incident commander, collaborating with various internal stakeholders, performing post-incident analysis and reporting, and making continuous improvements to Stripe’s security engineering and incident response function. Responsibilities Lead and coordinate security incident response activities and workstreams as the incident response manager (IRM) Analyze and inv

The Product Security team is responsible for conducting structured security analyses of Zoox products and applying security standards judiciously throughout the System Development Life Cycle at Zoox. The ideal candidate for this team will have a robust background in systems engineering, coupled with a demonstrated passion and expertise in cybersecurity. In this role, you will: Perform Risk Assessment by quantifying security related safety risks, collaborating with cross functional teams particularly safety teams to ensure alignment with safety and security objectives while supporting risk-informed engineering decisions. Drive verification of quantified risks by fuzzing real world scenarios in simulator environments. Write design proposals and drive execution while proactively communicating risks to partner teams. Proactively identify opportunities to roll up risk metrics into various company wide frameworks. Interface with a multitude of engineering teams within Product Security as well as across software and hardware engineering. Build and maintain a strong understanding of the underlying engineering constraints and factor that understanding into the analysis and recommendations.

The Product Security team is responsible for conducting structured security analyses of Zoox products and applying security standards judiciously throughout the System Development Life Cycle at Zoox. The ideal candidate for this team will have a robust background in systems engineering, coupled with a demonstrated passion and expertise in cybersecurity. In this role, you will: Perform Risk Assessment by quantifying security related safety risks, collaborating with cross functional teams particularly safety teams to ensure alignment with safety and security objectives while supporting risk-informed engineering decisions. Drive verification of quantified risks by fuzzing real world scenarios in simulator environments. Write design proposals and drive execution while proactively communicating risks to partner teams. Proactively identify opportunities to roll up risk metrics into various company wide frameworks. Interface with a multitude of engineering teams within Product Security as well as across software and hardware engineering. Build and maintain a strong understanding of the underlying engineering constraints a

Key Responsibilities : 4–7 years of experience in Fraud Risk Management, Trust & Safety, or Risk Engineering, ideally in fintech, payments, or banking Hands-on experience building or operating real-time fraud detection and transaction monitoring systems Strong understanding of risk scoring, rules engines, and/or ML-based fraud detection approaches Experience working with payment flows, UPI, wallets, or similar transaction-heavy systems Familiarity with regulatory requirements around fraud and risk controls — NPCI, RBI, sanctions/watchlist screening, suspicious-transaction reporting, and comparable regimes Proficiency in Python or a similar language; comfortable working with SQL and large transactional datasets Strong analytical mindset, with the ability to translate emerging fraud patterns and typologies into actionable detection logic Comfortable owning a control that only works if someone actually works it — the review queue and escalation path are real from the day you’re behind them Experience with UPI/TPAP ecosystems or NPCI-regulated payment products is a plus Experience with case management tools and fraud investigation workflows is a plus Exposure to machine learning-based risk models in production, including model governance and drift monitoring, is a plus Prior experience supporting statutory or regulatory audits related to fraud or risk controls is a plus

Shape the Future with Dun & Bradstreet At Dun & Bradstreet, we believe data has the power to create a better tomorrow. As a global leader in business decisioning data and analytics, we help companies worldwide grow, manage risk, and innovate. Since 1841, businesses have trusted us to turn uncertainty into opportunity. We’re a diverse, global team that values creativity, collaboration, and bold ideas. Are you ready to make an impact and help shape what’s next? Join us! Explore opportunities at dnb.com/careers. The Senior AI Security Engineer is responsible for defining, designing, and advancing enterprise-wide security strategies and architectures for AI, GenAI, and machine learning platforms. This role leads the development of secure AI systems at scale by embedding advanced security principles across the AI lifecycle and driving the adoption of standardized, security-by-design practices. The Senior AI Security Engineer partners with engineering, platform, and risk leadership to proactively address emerging AI threats, strengthen organizational security posture, and ensure resilient, compliant, and scalable AI deployments. This role operates with significant autonomy and influences security direction across multiple teams and domains.

About Ramp Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $200B in annualized spend flows in and out of 70,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. About the Role The Product Security team helps make Ramp the most secure place for our customers to collect, manage, and put to work their business’ financial information. Our work centers in three areas: Ramp builds products with an eye for security Ramp detects and responds to threats before they cause harm Security powers Ramp’s growth Check out our Engineering Blog for more on our tech stack, mission and values! What You’ll Do Build security-focused application primitives and integrate them into our existing products Design and deploy platform-level mitigations to common security issues Lead remediation of prioritized issues across our technology stack: collaborating with other engineers to triage and fix vulnerabilities discovered internally, through penetration testing, and through our bug bounty program Partner with engineering teams to design and deploy solutions which are inherently secure Champion the use of tooling (linters, static analysis, posture assessment scanners, query inspectors, etc.) which help Ramp engineers build secure system

About the Team The OpenAI Risk & Audit team is building an enterprise risk capability for a company operating at the frontier of AI. We help leaders identify, understand, and manage the risks that matter most while enabling responsible innovation and durable growth. We are developing a modern enterprise risk management (ERM) program and the technology foundation that powers it. Our work connects risk strategy, governance, compliance, and assurance with high-quality data, automated workflows, continuous monitoring, and AI-enabled analysis. We partner across Finance, Security, Legal, Engineering, Product, People, Operations, and Internal Audit, and provide clear reporting to senior leadership and the Board. We aim to make risk ownership practical, decision-useful, and embedded in how OpenAI builds and scales. About the Role As the Head of Enterprise Risk Management, you will help build and lead an integrated ERM program and the ERM platform that supports it. You will establish common risk language, governance, and decision processes while translating them into scalable systems, data products, and workflows. You will own enterprise risk assessments, maintain a centralized risk register, develop risk appetite and key risk indicators, and help leaders evaluate significant changes such as new products, markets, partnerships, major systems, and strategic investments. This is a hands-on leadership role at the intersection of risk, operations, and technology. You will work with technical and business teams to connect source systems, improve data quality, automate evidence and control monitoring, and use AI to surface emerging risks and accelerate analysis. You will also help create a strong risk culture, coordinate assurance across the three lines, and communicate complex issues with clarity and sound judgment. This is an opportunity to build a next-generation capability from the ground up. This role is based in San Francisco, CA. We use a hybrid work model of 3 days in

Our vision is to transform how the world uses information to enrich life for all. Join an inclusive team passionate about one thing: using their expertise in the relentless pursuit of innovation for customers and partners. The solutions we build help make everything from virtual reality experiences to breakthroughs in neural networks possible. We do it all while committing to integrity, sustainability, and giving back to our communities. Because doing so can fuel the very innovation we are pursuing. Physical Security Specialist Mission Statement To protect Micron's people, assets, facilities, operations, and intellectual property through effective security operations, risk management, investigations, security technology, and continuous improvement initiatives that enable a safe, secure, and resilient business environment. Position Overview The Physical Security Specialist is responsible for supporting and executing physical security programs across assigned facilities and operations. This role serves as a subject matter expert in security operations, investigations, risk management, security technology, and incident response. The successful candidate will independently manage security initiatives, conduct investigations, assess risks, oversee contract security providers, and collaborate with business stakeholders to develop and implement security solutions that protect people, assets, and intellectual property. The role requires strong analytical, operational, and communication skills, along with the ability to leverage emerging technologies, including Artificial Intelligence (AI), to improve security effectiveness and operational efficiency. Key Responsibilities Security Operations<

At Freddie Mac, our mission of Making Home Possible is what motivates us, and it’s at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose. Position Overview: Are you eager to make an impact in a fast-paced, agile environment? Do you have strong experience in operational risk and controls, model risk, and reporting, along with analytical and interpersonal skills and knowledge of Single-Family Acquisitions (SFA) or mortgage markets? If you are curious, passionate about learning, and customer-focused, apply for the Operational Risk Senior Manager to help lead SFA Risk Management. Our Impact: As part of Freddie Mac’s Single Family Acquisitions (SFA) organization, Operational Risk Management (ORM) drives consistency, transparency, and effectiveness in nonfinancial risk across multiple domains, including People, Reporting, Transaction and Execution, Information, Technology, Third Party, Operational Resiliency, Model, and Physical Security and Safety Risks. This role will focus on Model risk including Model Development, Implementation, Performance, Use, and Governance risks. The role will also support Artificial Intelligence (AI) risk assessments. ORM integrates: Risk and control evaluations across the Single Family Acquisitions Division Management reporting Coordination and escalation management Your Impact: As a SFA ORM Senior Manager, each workday is unique. Your impact will focus on the following key activities: Evaluate and report on operational risks, controls, issues, and policies/procedures. Document operational risks and controls as part of risk an

Security Architect Location: London (Hybrid) | Practice Area: Technology & Engineering | Type: Permanent Safeguard the digital future of financial services. The Role We are looking for Security Architects to lead the design and implementation of secure, scalable solutions for some of the world’s leading financial institutions. You’ll play a critical role in shaping security strategy, informing architectural decisions, and embedding best practices across cloud and hybrid environments. This is a hands-on role with opportunities to mentor others and influence major change initiatives, using approved AI tools, automation and AI-enabled workflows where appropriate to improve the speed, quality and insight of security architecture activities. You’ll apply human judgement and responsible AI guardrails to ensure outputs are appropriately reviewed and escalated. What You’ll Do Develop enterprise security architecture strategies aligned with business and regulatory requirements, using approved AI-enabled tools where appropriate to accelerate research, analysis and insight Lead the design of secure systems, networks and applications across on-premise, cloud and hybrid environments Conduct threat modelling and risk assessments, define remediation strategies, and explore responsible AI and automation to improve the efficiency and quality of security analysis while maintaining human review Guide DevSecOps adoption by designing embedded security and controls within the SDLC, including appropriate guardrails, audit trails and escalation pathways for AI-enabled workflows Champion security awareness and mentor teams across engineering, architecture and delivery, encouraging responsible experimentation with approved AI tools where they can improve productivity and outcomes What We’re Looking For Extensive experience designing and implementing secure architectures across cloud and hybrid environments Experience designing solutions using Palo Alto, Microsoft or similar security ecos

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us! As a Security Scientist, you will leverage your data analysis skills and help identify and drive impactful projects to improve the safety and security of Figma's product, platform, and our IT systems. The mission of the Figma Security team is to help Figmates ship the most secure and safe product to our users. We are looking for security scientists with a strong grasp of security and anti-abuse fundamentals. You will partner closely with teams in Security Engineering as well as teams across the company to focus on systemic security and safety improvements and risk reduction. You will also apply your security expertise and analytical skills to support and participate in security design reviews and consulting, incident response, and risk management. This is a full time role that can be held from one of our US hubs or remotely in the United States. What you'll do at Figma: Collaborate cross-functionally across the company to understand existing security and anti-abuse problems and work with engineering, product, data science, and other teams on solutions Understand attacker and user behavior on the Figma platform and inside Figma through creation of new datasets, metrics, experimentation, etc., and guide strategy and decision making Build detections, tune signal quality, and measure coverage across Figma's products, platforms, and internal systems, turning attacker behavior into durable, data-driven detections Lead and support security investigations, developing the datasets, tooling, and analysis

About the opportunity Are you ready to take the next step in your career? As an ICT GRC - Risk & Compliance Manager, you will play a pivotal role in shaping how we manage IT risks in an increasingly AI-driven financial landscape. In this role, you’ll be at the forefront of risk management and compliance, ensuring our IT systems remain secure, resilient, and aligned with evolving regulations. You’ll work closely with tech, security, and compliance teams to strengthen risk frameworks, enhance resilience, and drive smarter decision-making. As AI and automation become essential in risk management, you’ll help explore and implement automation and AI-driven solutions to improve risk assessments, identify emerging threats, and streamline compliance processes. This is an opportunity to not just keep up with change, but to help shape it. If you're looking for a role where AI, automation, and ICT Risk and compliance intersect, and where your expertise can have a real impact, this is it. In this role you will Function as a key member of the bank's risk function (Second Line of Defense), reporting directly to the Deputy CISO and maintaining close collaboration with First Line of Defense teams on matters of ICT risk management. Actively engage in the ICT Risk Management process, encompassing proactive risk assessment, analysis, treatment plan identification, mitigation, and ongoing monitoring. Drive the maturity of the ICT Risk Management framework in adherence to DORA act. Proactively conduct risk assessments to identify ICT risks within the bank's IT infrastructure and propose appropriate mitigation strategies. Collaborate with cross-functional teams, including product, technology, security, and other First Line of Defense teams, to identify and implement risk treatment plans. Maintain the ICT risk register, ensuring the accuracy and completeness of ICT risks. Proactively report progress and updates to the team, providing detailed reports and presentations on the status of

Location: New York City or San Francisco - 4 days in office About the Role We are looking for a highly technical Senior Security Engineer who is passionate about protecting data across modern SaaS, cloud, endpoint, and analytics environments. This role is ideal for someone who enjoys solving complex data security challenges through engineering, automation, and AI rather than relying solely on commercial tools. You will help build, scale, and continuously evolve Sigma’s data security capabilities across SaaS applications, cloud platforms, endpoints, collaboration tools, AI systems, and data warehouses. You will be joining a dynamic and highly technical Security Engineering team at Sigma. This is a hands-on engineering role for builders, innovators, and problem-solvers who want to create scalable security solutions that protect the organization's most critical asset - data. What You'll Do Design, build, and maintain security platforms, services, APIs, automation, and internal tooling that protect Sigma's data across cloud, SaaS, endpoint, and analytics environments. Develop scalable solutions for data discovery, classification, governance, access controls, monitoring, and protection using modern engineering practices and automation. Build and mature capabilities around CASB, DLP, DSPM, SSPM, insider risk, and data access governance to reduce the risk of unauthorized access, sharing, or exposure of sensitive information. Build and maintain DLP controls and tooling across multiple cloud, OS environments and decentralized datasets, implementing and tuning prevention capabilities that protect against sophisticated data security incidents. Drive automation across DLP engineering and operations by leveraging LLMs, agentic AI, and an automation-first mindset to streamline workflows, reduce manual effort, and scale data protection coverage. Design and implement security controls across SaaS applications, collaboration platforms, endpoints, and business-critical

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block. The Role The First Line Risk Data Science team at Block helps our teams understand, measure, and manage the risks of building financial products that serve millions of customers. We turn complex control, customer, and product data into measurement systems that help teams identify emerging risks, evaluate control performance, and close the gaps that matter most. We’re looking for a Senior Data Scientist to build and scale control performance monitoring for new and existing controls. You’ll help develop our control monitoring platform as the central place for teams to understand risk exposure, investigate changes, and prioritize action. You’ll partner closely with risk, compliance, product, and engineering to build automated measurement into product governance, from defining risk guardrails before launch to monitoring risk outcomes and control effectiveness afterward. This role requires analytical rigor, hands-on building, and exceptional product judgment. You'll own control performance monitoring across a portfolio of controls and products, a large, multi-workstream scope, and be accountable for the long-term health and quality of the metrics and monitoring modules you build. You’ll measure success by the decisions your work improves, the material monitoring gaps it closes, and the risk management impact it delivers. You Will Define

MongoDB's Global Security Organization (GSO) is looking for a Director of Global Security Operations to build and lead GSO's first dedicated team in India. This is a foundational leadership role: your first mandate is to stand up a 20-person team from scratch. This team’s first mission will be extending US based teams in three different areas: Vulnerability management - AI driven detection, triage and workflow management of vulnerabilities from code to components to applications to infrastructure Launch readiness - shifting security analysis left to proactively address security needs as far upstream from product launch as possible Core enterprise security - projects focusing on improving protection against insider threats and and newly emerging AI Governance and Security needs We are looking to speak to candidates who are based in Gurugram for our hybrid working model. Who We Are GSO secures MongoDB's products, infrastructure, and the trust our customers place in us — spanning product security, corporate security, and risk, and working across engineering, go-to-market, and corporate development to keep security moving at the same speed as the business. Responsibilities Recruit, hire, and onboard a 20-person team including 3 managers - across vulnerability management, launch readiness, and core enterprise security Stand up the operating rhythms, tooling, and documentation the India team needs to work as a first-class part of GSO from day one Get new hires productively engaged quickly and working seamlessly with required stakeholders Actively manage matrix reporting, ensuring ambiguity doesn't slow the team down — resolve competing priorities between local and functional leadership before they become the team's problem Represent the India team's capacity, constraints, and growth needs back to GSO leadership Build the durable leadership bench and processes that let the India team operate as an accountable, outcome-owning part of GSO going forward Build and lead a