Security Risk Consultant Jobs

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. The Event Security Specialist serves as the lead security professional who plans, coordinates, and carries out security operations. These operations support corporate events, executive engagements, leadership meetings, and other high-profile activities throughout Micron’s global footprint. The role is responsible for conducting event risk assessments, developing security plans, coordinating security resources, supporting executive protection requirements, managing incident response, and helping protect attendees, company assets, and sensitive information. As a Technical Surveillance Countermeasures (TSCM) Authority, the individual will conduct technical security inspections of meeting venues, executive spaces, boardrooms, and conference facilities. They will also support inspections at hotels and other locations where sensitive discussions may occur. The role will deploy as required in support of executive events and strategic business activities. Responsibilities: Event Security - Serve as the primary security lead for corporate events, executive engagements, and high-profile company functions. Conduct event security risk assessments and develop practical mitigation strategies. Develop comprehensive security plans, emergency response procedures, and operational security documentation. Coordinate with executive protection personnel, venue management, event organizers, law enforcement, and third-party security providers. Support site surveys, protective advances, route analysis, and venue as

Head - Security is responsible for leading the site security operations in alignment with the organization's business objectives and Security Strategy Roadmap. Responsible for safeguarding the company's infrastructure, ensuring the safety of employees and stakeholders, and protecting designated individuals. The Head - Security is tasked with preventing and addressing fraud and misconduct, conducting detailed security risk assessments, and managing security-related automation and infrastructure projects to protect both tangible and intangible assets. Source: Adani Group | Job ID: 59892

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Seattle, Washington D.C., Raleigh, London, and Amsterdam. The Platform Security team (PlatSec) defends Plaid against attackers. We own laptop security, cloud security, AI security, detection and response, and red teaming. Right now we're in growth mode. AI has expanded Plaid's attack surface faster than most security teams can adapt, and we're building the guardrails, identity controls, and detection systems to keep pace without slowing the business down. If you like solving problems nobody's solved yet, this is that team. About the role You'll be Plaid's first line of defense on AI security. You'll review new AI technologies to find security risks before they ship, then design and implement the controls that close them. You'll build the guardrails, identity management, and detection systems that let Plaid use AI aggressively without getting burned. Responsibilities Review AI systems and integrations for security risk before and after deployment. Design and deploy guardrails, sandboxes, and other controls that contain what AI agents can do. Build or implement systems to track and manage AI identities, so we know what access every AI has been granted and can balance risk with agility. Detect and mitigate prompt injection across Plaid's AI

At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. The InfoSec team protects Affirm’s systems and data from evolving threats. We manage security risk, monitor vulnerabilities, and enforce protective controls across the company. The team leads incident response, compliance, identity and access management, and employee training. Our goal is to ensure that security is built into every system and decision at Affirm. We maintain a secure, trustworthy environment so the business can operate and grow with confidence. In this role, you'll build and run Affirm's end-to-end security review process for enterprise AI/LLM systems evaluating architecture, prioritizing AI-specific risks, and designing the controls and guardrails that let Affirm adopt AI safely, partnering across Security, Legal, Privacy, Compliance, IT, and Engineering to make it scalable and repeatable. What you’ll do You will lead and continuously improve Affirm's enterprise AI security review process evaluating the architecture, data flows, permissions, and design of internal AI tools, agentic/MCP-based systems, and AI features — and embed security requirements into the design phase. You will threat model AI/LLM-based systems and their data flows for risks such as prompt injection, insecure output handling, excessive agency, tool-permission abuse, data poisoning, and sensitive-data exposure, and drive remediation. You will review source code, system prompts, agent configurations, and tool/permission manifests (e.g., MCP definitions), and help tool owners build security-focused test cases and red-team/eval scenarios to verify requirements before launch. You will design and build security guardrails and tooling for AI systems permission boundaries, authn/authz for agentic tools and MCP servers, data-handling controls, logging/monitoring, and policy-as-code (Python, IaC) — to enforc

At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most. The InfoSec team protects Affirm’s systems and data from evolving threats. We manage security risk, monitor vulnerabilities, and enforce protective controls across the company. The team leads incident response, compliance, identity and access management, and employee training. Our goal is to ensure that security is built into every system and decision at Affirm. We maintain a secure, trustworthy environment so the business can operate and grow with confidence. In this role, you'll build and run Affirm's end-to-end security review process for enterprise AI/LLM systems evaluating architecture, prioritizing AI-specific risks, and designing the controls and guardrails that let Affirm adopt AI safely, partnering across Security, Legal, Privacy, Compliance, IT, and Engineering to make it scalable and repeatable. What you’ll do You will lead and continuously improve Affirm's enterprise AI security review process evaluating the architecture, data flows, permissions, and design of internal AI tools, agentic/MCP-based systems, and AI features — and embed security requirements into the design phase. You will threat model AI/LLM-based systems and their data flows for risks such as prompt injection, insecure output handling, excessive agency, tool-permission abuse, data poisoning, and sensitive-data exposure, and drive remediation. You will review source code, system prompts, agent configurations, and tool/permission manifests (e.g., MCP definitions), and help tool owners build security-focused test cases and red-team/eval scenarios to verify requirements before launch. You will design and build security guardrails and tooling for AI systems permission boundaries, authn/authz for agentic tools and MCP servers, data-handling controls, logging/monitoring, and policy-as-code (Python, IaC) — to enforc

The Zonal Lead - Security-Tx is responsible for managing security operations across the cluster in alignment with business objectives and the Security Strategy Roadmap. This includes safeguarding infrastructure to ensure business continuity, fostering a secure environment for employees and stakeholders, and enhancing the security of designated protected. The role oversees fraud and misconduct prevention through a structured framework for detection, response, and continuous improvement. By conducting detailed security risk assessments, the Security Lead identifies, mitigates, and eliminates potential threats while ensuring the protection of tangible and intangible assets within the cluster. Source: Adani Group | Job ID: 55870

For over 20 years, Smartsheet has empowered teams to manage work seamlessly and scale solutions smarter. Now, in our most ambitious chapter yet, we are uniting human teams with AI agents. By orchestrating the work agents do best, automating manual tasks and uncovering insights at scale, we create the space for people to focus on what truly matters: judgment, creativity, and big thinking. That is magic at work, and it’s what we show up for every day. AI is reshaping what product security can accomplish, both as a target and as a tool. We're looking for a Principal Security Engineer to own the highest-leverage application security work at Smartsheet: leading threat modeling and product security reviews across a modern SaaS platform used by millions of customers, serving as the team's technical authority on AI security risk, and setting the technical standard for application security practice across the engineering organization. This is the most senior individual contributor role on the Application Security team. The expectation is not just depth: it is reach. You will engage product and engineering leadership directly, drive security requirements rather than advisory recommendations, and build team capability over time. If you are a security engineer who thinks upstream, builds threat models that generate concrete test scenarios and can translate technical findings into architecture decisions and business outcomes, this role is built for you. This role reports to the Manager, Application Security and can be based in our Bellevue, WA office or remotely from anywhere in the US where Smartsheet is a registered employer. You Will: Lead Threat Modeling and Product Security Reviews: Own threat modeling and product security review as the team's primary upstream capability: build models from architecture and data-flow artifacts, derive concrete abuse cases and test scenarios, and drive security requirements into designs before they ship. Define and lead the product secu

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking an experienced Governance, Risk, and Compliance (GRC) Engineer focused on European Union and United Kingdom information security and financial services regulation to help scale compliance for SpaceXSI and xMoney. As we expand deeper into regulated EU/UK markets, maintaining a robust, transparent, and technically sound information security GRC program is critical. You will architect the systems and processes that automate trust — a pragmatic operator who understands that GRC exists to enable the business, balancing rigorous standards with the velocity of a high-growth company. The ideal candidate brings hands-on experience with frameworks such as DORA, the EU AI Act, NIS2, and related EU/UK information security and operational resilience obligations, plus GRC engineering skills: Compliance-as-Code, continuous evidence collection, and deep partnership with engineering so controls are designed into the platform rather than bolted on after the fact. This role may also include additional tasks and responsibilities as needed to support the team and evolving business priorities. This position may require occasional travel. RESPONSIBILITIES: Own and evolve

This is Adyen Adyen provides payments, data, and financial products in a single solution for customers like Meta, Uber, H&M, and Microsoft - making us the financial technology platform of choice. At Adyen, everything we do is engineered for ambition. For our teams, we create an environment with opportunities for our people to succeed, backed by the culture and support to ensure they are enabled to truly own their careers. We are motivated individuals who tackle unique technical challenges at scale and solve them as a team. Together, we deliver innovative and ethical solutions that help businesses achieve their ambitions faster. Senior Security Program Manager Adyen is looking for a Security Program Manager to join the Tech Regulatory team within the first line of defense. The Tech Regulatory team ensures that the platform is secure, reliable and compliant with all global regulatory requirements. As a Security Program Manager, you are responsible for ensuring that our products and services comply with security regulations and laws. You actively engage, bring together, and communicate with people from various teams to be successful in ensuring continued compliance of products and services and you manage multiple security compliance programs such as PCI-DSS and PCI 3DS. What you'll do Program Management: Manage programs across multiple domains - for example responsible for program managing the PCI-DSS and PCI 3DS certifications in addition to supporting security on regulatory requirements surrounding a broad set of security risk domains for example security detection and monitoring, data loss prevention, vulnerability management and three core operational risk domains as your team’s core anchor: Incident Management, Change Management, and Business Continuity Management Defining standards and ensuring frameworks withstand internal and external scrutiny Operational Design: Translate complex regulatory requirements into actionable operational program desig

Manage site security operations in harmony with business objectives and Security Strategy Roadmap at major sites. • Protect enterprise-wide infrastructure to ensure business continuity, creating a safe environment for all • Employees and stakeholders and ensuring enhanced security and personal safety of “designated protected” • Address fraud & misconduct through a well-established framework to prevent, detect, respond, and refine strategies and methodologies. • Identify potential threats and calibration of risks from detailed security risk assessments to eliminate, reduce or mitigate risks. • Responsible for ensuring security and protection of tangible and intangible assets, at the site • Responsible for managing security related automation and infrastructure projects Source: Adani Group | Job ID: 50710

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Replit’s ecosystem is powered by an expanding array of external services and essential AI model partners. As our lead for Security Vendor Risk & Contract Reviews, you will architect and execute a risk management program focused on substantive evaluation rather than just processing checklists. You’ll analyze SOC 2 documentation, security assessments, and system architectures to determine actual risk profiles, collaborating with our Legal team to secure necessary contractual protections. This role reports to the Head of Security GRC and involves high-impact partnerships across Legal, Engineering, and Product teams. What You'll Do Run substantive third-party risk management (TPRM), independently evaluating real risk, not just processing questionnaire responses Review SOC 2 reports, pen test findings, and architecture documentation to form an independent view of vendor risk, extending the same rigor to AI/model providers Partner with Legal on vendor and AI contract terms, including DPAs, subprocessor agreements, and AI-specific provisions Review contracts for non-standard security language when flagged by Legal or deal desk, and recommend redlines Maintain the vendor and AI/model risk register, feeding findings into the company's master risk register Enable sales through maturing the customer trust program Build the capability for continuous monitoring of vendor ecosystem Required Skills & Experience 8+ years in third-party/vendor risk management, security risk, or a related GRC role Demonstrated ability to independently assess vendor risk rather than relying on questionnaire responses alone, fluent in reading SOC 2 reports, ISO certificates, pen test summaries, and architecture documentation Experi

 Manage site security operations in harmony with business objectives and Security Strategy Roadmap at major sites  Protect enterprise wide infrastructure to ensure business continuity, creating a safe environment for all employees and stakeholders and ensuring enhanced security and personal safety of “designated protectees”  Address fraud & misconduct through a well-established framework to prevent, detect, respond, and refine strategies and methodologies.  Identify potential threats and calibration of risks from detailed security risk assessments to eliminate, reduce or mitigate risks.  Responsible for ensuring security and protection of tangible and intangible assets, at the site  Responsible for managing security related automation and infrastructure projects Source: Adani Group | Job ID: 52925

Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. About the Opportunity We are looking for a Security Operations Engineer who combines hands-on engineering skills with security operations expertise. You will be deeply involved in the operations and troubleshooting of both server-side and client-side components within our Zero Trust architecture, drive security risk governance initiatives, and leverage AI tools to continuously improve system stability and compliance. Key Responsibilities K8s Operations & Vendor Engagement: Develop deep expertise in K3s / Kubernetes, including version management and disaster recovery. Independently identify and reproduce system issues, proactively engage with vendors to drive root cause analysis and resolution — not just workarounds. Zero Trust Network Access Governance: Work closely on Zero Trust initiatives, participate in cluster network configuration and troubleshooting, identify device compliance risks, drive remediation of non-compliant devices, and continuously optimize access control policies. Monitoring & Observability: Build and continuously improve log monitoring systems; proactively surface system risks through alert rules and trend analysis. AI Agent Implementation: Lead the adoption of AI Agents in security operations — design and deploy AI Agent workflows f

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products. We are technical in what we build but are operational in how we do our work, and are committed to supporting all products and research at OpenAI. Our Security team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture. About the Role We are seeking a Software Engineer, Security Observability to join our Security team. In this role, you will be responsible for building secure, scalable systems that enhance our security observability infrastructure. Leveraging your strong engineering skills, you will collaborate with cross-functional teams to develop, deploy, and maintain robust software solutions that support our security and detection capabilities. This role is open to remote employees, or relocation assistance is available to one of our OpenAI offices in San Francisco, Seattle, or New York City. In this role, you will: Design and develop scalable software systems that facilitate security observability across our infrastructure. Build and maintain data pipelines that centralize and store security-relevant data from diverse sources. Proactively improve the resilience and reliability of data systems to ensure high platform availability Collaborate closely with Detection & Response (D&R) and other security teams to reduce the company’s security risk. Contribute to data engineering in support of forensic investigations and compliance efforts. You might thrive in this role if you have: Strong software engineering experience, with proficiency in programming languages such as Python, Golang, or similar. A background in infrastructure as code, with experience using tools like Terraform and working with cloud platforms such as Azure. Experience with building and main

Manage site security operations in harmony with business objectives and Security Strategy Roadmap at major sites  Protect enterprise wide infrastructure to ensure business continuity, creating a safe environment for all employees and stakeholders and ensuring enhanced security and personal safety of “designated protectees”  Address fraud & misconduct through a well-established framework to prevent, detect, respond, and refine strategies and methodologies.  Identify potential threats and calibration of risks from detailed security risk assessments to eliminate, reduce or mitigate risks.  Responsible for ensuring security and protection of tangible and intangible assets, at the site  Responsible for managing security related automation and infrastructure projects Source: Adani Group | Job ID: 49655