Security Risk Consultant Jobs

The Global Safety & Security Team falls under the Operations Team that runs many day-to-day operational functions that help keep our employees safe, happy and productive. We work closely with leadership and employees to ensure that Datadog continues to scale rapidly, yet smoothly and remains a fantastic place to work. We’re seeking an experienced team member to join our growing global team and play a critical role in keeping Datadogs and its assets safe and secure. You will work directly with the Global Head of Global Safety & Security and cross-functional teams to support safety and security operations across the enterprise. Ideal candidates will be passionate about leadership, security operations, building programs, workplace health and safety, project management, customer service and collaboration. This position is based in our Sydney or Singapore office and will require domestic and international travel. The role will focus particularly on developing our safety compliance, security program development and maturity, incident, investigations and crisis management programs. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Manage day-to-day global safety and security operations for Datadog’s regional offices in APAC, including its co-working locations and assist with global safety and security initiatives. Providing ad-hoc coverage for the EMEA and AMER region may be required at the discretion of the Global Head of Global Safety & Security. Oversee a variety of responsibilities, including investigations, health and safety compliance, security risk management, travel safety, event security, budgeting, crisis management, emergency response, property loss management and global safety and security system management. Enforce Datadog’s s

Who are we? Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems. We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that. We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft. We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us! The Opportunity Cohere seeks a Chief Information Security Officer who can help shape Cohere’s security strategy & the broader conversation around securing AI at scale. You know how to build trust across organizations and communicate trade-offs clearly in environments where speed, innovation, and security must coexist. You will build the playbook and lead the evolution of Cohere’s global security program across corporate systems, cloud infrastructure, AI development, and enterprise operations. As a visible leader for Cohere’s security vision internally and externally you will navigate risk, represent Cohere in industry discussions, and reinforcing our commitment to building AI responsibly. In this role you will: Define and Scale Cohere’s Security Strategy: Define and execute Cohere’s overarching information security strategy in alignment with business priorities and long-term company growth. Build a Modern Risk, Governance & Compliance Program: Lead Cohere in identifying, assessing, and mitigating security risk across all business functions. Secure AI Systems and Technical Infrastructure: Lead the security architecture st

P-1489 About Databricks At Databricks, we are passionate about enabling data teams to solve the world's toughest problems; from making the next mode of transportation a reality to accelerating the development of medical breakthroughs. We do this by building and running the world's best data and AI infrastructure platform so our customers can use deep data insights to improve their business. Founded by engineers and customer obsessed, we leap at every opportunity to solve technical challenges, from designing next-gen UI/UX for interfacing with data to scaling our services and infrastructure across millions of virtual machines. And we're only getting started. The Role We are seeking a Senior Staff Technical Program Manager to own and lead a company-wide portfolio of security programs spanning Trust & Safety Engineering, Identity and Access Management, Platform Security, Security Operations, Product Security, and IT. This role will take a major security risk portfolio from strategy to measurable risk reduction by driving prioritization, architecture alignment, investment planning, execution, adoption, and operationalization. The scope connects customer-facing product security with internal engineering and enterprise controls across Databricks’ product, corporate, and Databricks-on-Databricks environments. Success means advancing a complex security domain, creating clarity where direction is incomplete, and materially improving Databricks’ security posture, customer trust, and ability to operate at scale. The TPM will structure ambiguous problems, evaluate technical and resourcing tradeoffs, establish durable decision mechanisms, and align VP- and Director-level organizations with competing priorities and shared dependencies. This is an executive-facing role and a trusted partner to C-suite executives, VPs of Engineering and Product, Security executives, and senior architects. The TPM will communicate risk, options, decisions, progress, and escal

P-1489 About Databricks At Databricks, we are passionate about enabling data teams to solve the world's toughest problems; from making the next mode of transportation a reality to accelerating the development of medical breakthroughs. We do this by building and running the world's best data and AI infrastructure platform so our customers can use deep data insights to improve their business. Founded by engineers and customer obsessed, we leap at every opportunity to solve technical challenges, from designing next-gen UI/UX for interfacing with data to scaling our services and infrastructure across millions of virtual machines. And we're only getting started. The Role We are seeking a Senior Staff Technical Program Manager to own and lead a company-wide portfolio of security programs spanning Trust & Safety Engineering, Identity and Access Management, Platform Security, Security Operations, Product Security, and IT. This role will take a major security risk portfolio from strategy to measurable risk reduction by driving prioritization, architecture alignment, investment planning, execution, adoption, and operationalization. The scope connects customer-facing product security with internal engineering and enterprise controls across Databricks’ product, corporate, and Databricks-on-Databricks environments. Success means advancing a complex security domain, creating clarity where direction is incomplete, and materially improving Databricks’ security posture, customer trust, and ability to operate at scale. The TPM will structure ambiguous problems, evaluate technical and resourcing tradeoffs, establish durable decision mechanisms, and align VP- and Director-level organizations with competing priorities and shared dependencies. This is an executive-facing role and a trusted partner to C-suite executives, VPs of Engineering and Product, Security executives, and senior architects. The TPM will communicate risk, options, decisions, progress, and escal

Who we are At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower millions of developers worldwide to craft personalized customer experiences. Our dedication to remote-first work , and strong culture of connection and global inclusion means that no matter your location, you’re part of a vibrant team with diverse experiences making a global impact each day. As we continue to revolutionize how the world interacts, we’re acquiring new skills and experiences that make work feel truly rewarding. Your career at Twilio is in your hands. . Hiring and how we work We use Artificial Intelligence (AI) to help make our hiring process efficient. That said, every hiring decision is made by real Twilions! Also, while we are a remote-first company, you may be asked to report in person on an ad-hoc basis for team gatherings, functional off-sites or customer meetings. . See yourself at Twilio Join the team as Twilio’s next Staff Engineer, Security Engineering Partners. About the job We are actively recruiting for this role to fill an existing vacancy. This position is needed to bridge the gap between our security organization and engineering teams by partnering on the implementation of robust security measures at scale, up-leveling existing security capabilities and critical security risk reduction. Responsibilities In this role, you’ll: Design and ship scalable security solutions. Build relationships with engineering to foster cooperative partnerships across key Twilio products and platforms. Partner with product and engineering teams to integrate scalable security capabilities. Use metrics and data on the state of security at the product level, to drive accountability and action. Drive security risk reduction through technical leadership and influence of engineering roadmaps. Lead security reviews for critical features, new initiatives a

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As the Engineering Manager for Enterprise Security, you will be hands-on with the design, implementation, and strategy of the systems protecting Roblox's corporate infrastructure: endpoint security, network security, and supply chain security. You will build and lead the team that writes and runs this software, and partner across the company to help Roblox balance innovation with security risk management. You will be part of the Enterprise Security team, reporting to the Senior Manager of Enterprise Security and IAM, and will work closely with security leaders across InfoSec and cross-functionally with Corporate Engineering, DevOps, IT, and Product teams. This role is based in San Mateo with a hybrid schedule. You will: Lead and grow the team: Hire, coach, and develop a team of security software engineers. Own performance, career growth, and the technical culture of the team. Own the Enterprise Security roadmap: Define and drive strategy across the team's domains, balancing near-term risk reduction with durable platform investment. Security for AI, and AI for security: Set direction for how AI is deployed safely at Roblox: agent sandboxing, tool and MCP server access, scoped and short-lived

Sr. GRC Engineer The Team + The Role Pendo's Information Security team protects the data entrusted to Pendo and helps ensure our products are built with security and privacy by design. The team spans Security Operations, Product Security, and Compliance and Risk. With a small team and broad scope, the work directly supports the security, resilience, and trust of Pendo's products and operations. The Sr. GRC Engineer is an AI-first technical leader who helps drive the evolution of Pendo's governance, risk, and compliance program. This role independently leads complex compliance, risk, and incident-response work while identifying program maturity gaps, translating security risk into business terms, and contributing to security roadmap and investment decisions. Success means building durable controls and programs that reduce risk and operational friction, not simply completing audits. This role is based in our Raleigh office. What this looks like day-to-day AI-driven compliance and operations acceleration: Use AI to accelerate audit evidence preparation, policy documentation, control testing workflows, and regulatory research. Evaluate GRC platform automation capabilities and integrate AI tooling where it reduces manual overhead, then document and share effective approaches with the team. Security program strategy and roadmap: Identify maturity gaps across compliance and security operations and translate them into prioritized roadmap recommendations grounded in business risk. Contribute to security investment discussions, clarify tradeoffs between coverage, cost, and risk, and anticipate emerging regulatory requirements before they become audit findings. Compliance program ownership: Own one or more regulatory compliance programs end-to-end, including SOC 2 Type II, ISO 27001/42001, PCI-DSS, GovRAMP, or FedRAMP. Lead control design, evidence collection, auditor relationships, and remediation tracking to maintain effective and durable compliance programs. Risk assessment

The Assurance, Risk and Compliance (ARC) Initiatives team at MongoDB owns the governance and delivery of key cross-functional security risk and compliance initiatives. The team designs and executes programs that support compliance audits, risk assessments, common control frameworks, operating cadences, and executive reporting that strengthen the organization’s assurance, risk management and compliance objectives. The policy and controls governance pillar is responsible for the structure, standards and operating mechanisms that keep MongoDB’s security policies, standards, procedures, and controls governance processes current, aligned, auditable and scalable across the organization. This includes ownership of the policy lifecycle, common controls framework governance, issue management, and the review cadences and cross-functional coordination needed to maintain strong governance maturity and audit readiness. This role sits under the Assurance, Risk and Compliance function within the Global Security Office and reports to the Director of ARC Initiatives. This role will be based remotely in the United States Responsibilities: Scope of Ownership Policy governance program ownership, including policy lifecycle management, documentation standards, review and approval cadences, change tracking, and exception governance Controls governance ownership, including common controls framework lifecycle management, control harmonization, framework mapping, and processes that support audit readiness and scalable control oversight Governance over supporting systems and workflows, including Jira, GRC tooling, documentation repositories, and reporting structures, that enable consistent execution and visibility Issue management and remediation governance, including intake, triage, tracking, and reporting for timely closure of findings Executive-ready reporting and metrics for policy health, controls maturity, policy exceptions and broader program effectiveness Program Leadership Own

Leidos is seeking a detail-oriented Cybersecurity Analyst with expertise in Security Accreditation to support the assessment, authorization, and continuous monitoring of information systems. The successful candidate will ensure systems comply with government and industry cybersecurity requirements while supporting the organization's Risk Management Framework (RMF) processes. Primary Responsibilities: Lead and support the security accreditation process for information systems. Develop, maintain, and review security authorization packages. Conduct security control assessments in accordance with RMF and applicable security standards. Collaborate with system owners, engineers, and stakeholders to implement security controls. Perform security risk assessments and recommend mitigation strategies. Monitor systems for compliance with cybersecurity policies and standards. Maintain Plans of Action and Milestones (POA&Ms) and track remediation activities. Support continuous monitoring activities, including vulnerability management and security reporting. Prepare documentation for Assessment & Authorization (A&A) activities. Participate in internal and external cybersecurity audits. Stay current on cybersecurity threats, regulatory requirements, and best practices. Basic Qualifications: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience). 3–7 years of experience in cybersecurity, information assurance, or security compliance. Experience implementing or supporting the NIST Risk Management Framework (RMF). Knowledge of: NIST SP 800-37 NIST SP 800-53 NIST SP 800-171 FISMA FedRAMP (preferred) Experience with vulnerability assessment tools such as Tenabl

At Freddie Mac, our mission of Making Home Possible is what motivates us, and it’s at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose. Position Overview: The Cyber Security team at Freddie Mac is searching for a strong data analyst to collaborate on developing and administering data security policies as well as safeguarding information, evaluating existing data security procedures and identifying new areas of risk for Freddie Mac. If this role sounds like a fit for your skill set, please read on, apply and learn why there is #MoreatFreddieMac ! Our Impact: We develop and train the enterprise on relevant Identity and Access Management best practices, develop and support automated IAM processes, and develop and implement ongoing IAM efficiency improvements with limited oversight by managers. The role will work closely with Enterprise partners and security control owners on IAM automation development activities and alignment of IAM processes with InfoSec maturity targets as described in the InfoSec Strategy. Your Impact: Senior Data Analyst who can develop and implement new and updated business process automation for all Identity and Access Management activities. Develop and proposes strategies to reduce security risk in the organization by implementing procedural prevention, detection, and response measures, while still enabling positive business outcomes. Comfortable supporting ad hoc data retrieval and analysis requests using SQL queries and Copilot/Excel . Creating audit-ready reference documentation. This role will allow for and support rapid AI-based extrapolation/replication of these services as future automated IAM microservices. Qualifications: Typically, 5 - 7 years

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Our Software Engineers deliver high-value products for our customers, and infrastructure that enables our business to scale. Vanta’s team and technology surface are growing quickly, and it’s essential that we invest in the right abstractions and systems to enable us to scale with our business. As a Software Engineer, you’ll be responsible for setting technical direction to enable our product and infrastructure to scale with our business, and driving complex projects across our technical stack.. Your past experience will be leveraged to enable and accelerate Vanta’s growth. Our Senior Software Engineers lead and mentor engineers, delivering high-value products for our customers and infrastructure that enables our business to scale. Our product integrates deeply with the services that present security risk to a company, pulls and analyzes data from those sources, and surfaces potential security threats to our customers in real time with guidance to remediate them. Our business has found incredible product-market fit and has monetized effectively since the day we signed our first customer. We’re growing at a blistering pace, which presents career-defining opportunities for engineers to accelerate their growth and to contribute to a rapidly-scaling company. As a Software Engineer on the Expansion Team, you’ll play a central role in shaping Vanta’s self-serve and product-led growth motion. Instead of working horizontally across compliance workflows, this team focuses on the full post-activation lifecycle—driving retention, expansion, and revenue automation across the product. You’ll build the core systems that power Vanta’s purchasi

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What Is The Role : The Platform Engineering Productivity team operates the CI, CD, and Release infrastructure for the company. We ensure developers can efficiently and safely deploy changes across our various environments and at scale. In an age of AI, the landscape is evolving rapidly from scaling needs to, more than ever, securing our supply chain. There are interesting challenges to tackle. We're looking for a proactive systems thinker who delivers on business-driven projects while identifying and driving the work that keeps our infrastructure ahead before scaling and security challenges become problems. If you're energized by work that makes every engineering team at Elastic ship faster and more securely, we'd love to hear from you. What You Will Be Doing : Define the roadmap and technical vision for CI/CD, from problem identification through org-wide adoption. Identify where CI/CD is a bottleneck, a source of friction, or a security risk before it becomes an incident, and drive the remediation rather than waiting to be assigned it. Design and enforce release gates covering supply chain integrity, artifact provenance, and release readiness, built to scale across teams without becoming a tax on engineering velocity. Direct engineers on your team through complex, multi-quarter projects: break down the architecture, assign the work, and o

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What Is The Role : The Platform Engineering Productivity team operates the CI, CD, and Release infrastructure for the company. We ensure developers can efficiently and safely deploy changes across our various environments and at scale. In an age of AI, the landscape is evolving rapidly from scaling needs to, more than ever, securing our supply chain. There are interesting challenges to tackle. We're looking for a proactive systems thinker who delivers on business-driven projects while identifying and driving the work that keeps our infrastructure ahead before scaling and security challenges become problems. If you're energized by work that makes every engineering team at Elastic ship faster and more securely, we'd love to hear from you. What You Will Be Doing : Define the roadmap and technical vision for CI/CD, from problem identification through org-wide adoption. Identify where CI/CD is a bottleneck, a source of friction, or a security risk before it becomes an incident, and drive the remediation rather than waiting to be assigned it. Design and enforce release gates covering supply chain integrity, artifact provenance, and release readiness, built to scale across teams without becoming a tax on engineering velocity. Direct engineers on your team through complex, multi-quarter projects: break down the architecture, assign the work, and o

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What Is The Role : The Platform Engineering Productivity team operates the CI, CD, and Release infrastructure for the company. We ensure developers can efficiently and safely deploy changes across our various environments and at scale. In an age of AI, the landscape is evolving rapidly from scaling needs to, more than ever, securing our supply chain. There are interesting challenges to tackle. We're looking for a proactive systems thinker who delivers on business-driven projects while identifying and driving the work that keeps our infrastructure ahead before scaling and security challenges become problems. If you're energized by work that makes every engineering team at Elastic ship faster and more securely, we'd love to hear from you. What You Will Be Doing : Define the roadmap and technical vision for CI/CD, from problem identification through org-wide adoption. Identify where CI/CD is a bottleneck, a source of friction, or a security risk before it becomes an incident, and drive the remediation rather than waiting to be assigned it. Design and enforce release gates covering supply chain integrity, artifact provenance, and release readiness, built to scale across teams without becoming a tax on engineering velocity. Direct engineers on your team through complex, multi-quarter projects: break down the architecture, assign the work, and o

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What Is The Role : The Platform Engineering Productivity team operates the CI, CD, and Release infrastructure for the company. We ensure developers can efficiently and safely deploy changes across our various environments and at scale. In an age of AI, the landscape is evolving rapidly from scaling needs to, more than ever, securing our supply chain. There are interesting challenges to tackle. We're looking for a proactive systems thinker who delivers on business-driven projects while identifying and driving the work that keeps our infrastructure ahead before scaling and security challenges become problems. If you're energized by work that makes every engineering team at Elastic ship faster and more securely, we'd love to hear from you. What You Will Be Doing : Define the roadmap and technical vision for CI/CD, from problem identification through org-wide adoption. Identify where CI/CD is a bottleneck, a source of friction, or a security risk before it becomes an incident, and drive the remediation rather than waiting to be assigned it. Design and enforce release gates covering supply chain integrity, artifact provenance, and release readiness, built to scale across teams without becoming a tax on engineering velocity. Direct engineers on your team through complex, multi-quarter projects: break down the architecture, assign the work, and o