Security Threat And Risk Consultant Jobs

CAPCO POLAND *We are looking for candidates willing to relocate to the Middle East - Qatar for the duration of the project. At Capco Poland, we’re not just another consultancy - we’re the spark behind digital transformation in the financial world. As a global leader in technology and management consulting, we thrive on helping clients tackle the toughest challenges across banking, payments, capital markets, wealth, and asset management. Our secret? A culture that’s fast, flexible, and fiercely entrepreneurial. We move quickly, think creatively, and always put our people first. We’re passionate about growth - both for our clients and ourselves - and that means attracting the very best talent to join us on this exciting journey. We’re proud to be: • Trailblazers in banking, payments, capital markets, wealth, and asset management • Champions of an agile, nimble, and innovative work environment • Dedicated to building a team of top-notch professionals who share our drive and vision The Role Capco is looking for a Security Consultant to help our clients identify, assess, and manage cybersecurity threats and technology risks across complex environments. You’ll work with security, technology, risk, architecture, and business teams to deliver structured threat and risk assessments that support informed decision-making and effective security controls. This is an opportunity to work on complex cybersecurity challenges within financial services, helping clients understand their threat landscape, identify vulnerabilities and control gaps, and strengthen their overall security and technology risk posture. The engagement is expected to run for one year and requires relocation to the Middle East for its duration . You will collaborate with client and project teams to deliver the agreed data engineering scope and project outcomes. What You’ll Do Assess existing security controls and evaluate their effectiveness against identified cyber and technology risks

Location: Doha | Practice Area : Technology & Engineering | Type: Permanent The Role Capco is looking for a Security Consultant to help our clients identify, assess, and manage cybersecurity threats and technology risks across complex environments. You’ll work with security, technology, risk, architecture, and business teams to deliver structured threat and risk assessments that support informed decision-making and effective security controls. This is an opportunity to work on complex cybersecurity challenges within financial services, helping clients understand their threat landscape, identify vulnerabilities and control gaps, and strengthen their overall security and technology risk posture. What You’ll Do Assess existing security controls and evaluate their effectiveness against identified cyber and technology risks. Identify potential threats, vulnerabilities, control gaps, and risk scenarios, documenting findings and recommending proportionate remediation actions. Conduct regular data, threat and risk assessments and recommend corrective actions to improve security posture. Work with security, architecture, engineering, risk, and business stakeholders to embed threat and risk assessment activities throughout technology change and delivery. Conduct threat and risk assessments across infrastructure, cloud environments, technology platforms, and business services. Produce clear risk assessments, reports, and recommendations that support governance, remediation planning, risk acceptance, and informed decision-making. What We’re Looking For Strong experience in cybersecurity risk assessment, threat assessment, technology risk, information security, or related disciplines. Practical knowledge of threat modelling, vulnerability assessment, security controls, risk assessment methodologies, and remediation planning. Experience assessing applications, infrastructure, cloud services, or technology solutions against security and risk requirements. Strong understanding

About the Team At Capco, we believe in fostering an inclusive work environment where you can #BeYourselfAtWork. Our Cybersecurity team partners with leading financial institutions to evaluate, design, and implement risk-aware security solutions that enable business growth and resilience. We help organizations navigate an evolving threat landscape by delivering strategic advisory services across cyber risk, governance, resilience, data protection, cloud security, and emerging technologies. As artificial intelligence continues to transform the financial services industry, we work closely with clients to establish secure, responsible, and compliant AI adoption strategies. Our team helps organizations manage AI-related risks, strengthen governance frameworks, secure AI-enabled platforms, and build trust in the use of emerging technologies. We combine deep financial services expertise with cybersecurity, risk management, data, and technology capabilities to advise executive leadership on their most critical security and digital transformation priorities. About the Job As a Senior Consultant within Capco’s Cybersecurity Practice, you will play a key role in delivering complex cybersecurity and technology risk engagements for leading Investment Banking, Retail Banking, Wealth Management, Capital Markets, and Insurance clients. You will work alongside industry experts and client stakeholders to solve challenging business problems, strengthen security capabilities, and support large-scale transformation initiatives. You will also help clients address emerging risks associated with cloud adoption, digital transformation, artificial intelligence, and evolving regulatory expectations. What You'll Get to Do Design and enhance cybersecurity policies, standards, controls, and governance frameworks across domains including Operational Resilience, Data Security, IAM, Cloud Security, Application Security, Digital Trust, and Technology Risk. Support clients in developing secure AI and

Join Delphi - Where Innovation meets transformation At Delphi, we believe in creating an environment where our people thrive. Our hybrid work model empowers you to choose where you work—whether it's from the office, your home, or a mix of both—so you can prioritize what matters most. We are committed to supporting your personal goals, family, and overall well-being while driving transformative results for our clients. We welcome exceptional talent from anywhere across the globe. Interviews and onboarding are conducted virtually, reflecting our digital-first mindset. Rooted in the region, we specialize in delivering tailored, impactful solutions in Data, Advanced Analytics and AI, Infrastructure, Cloud Security, and Application Modernization. Whether it’s enabling predictive analytics , transforming operations with automation, or driving customer engagement with intelligent platforms, we are the trusted partner for organizations ready to embrace a smarter, more efficient future. Solution Implementation & Configuration Deploy and configure Microsoft Intune for device management, compliance policies, security baselines, and application protection. Implement Defender for Endpoint and Defender for Server for advanced threat protection, vulnerability management, and automated remediation. Integrate Windows 365 Cloud PC with Intune and Defender for Endpoint for secure hybrid work scenarios. Support Microsoft Sentinel integration for centralized monitoring and incident correlation where required. Configure Microsoft Purview solutions including Information Protection, Data Loss Prevention (DLP), Insider Risk Management, and eDiscovery. Implement Microsoft Entra capabilities such as Conditional Access, Privileged Identity Management (PIM), Identity Protection, and RBAC. Technical Delivery & Support Work collaboratively with architects, project managers, and other consultants to deliver projects efficiently. Troubleshoot and res

Location: Doha, Qatar | Practice Area : Technology & Engineering | Type: Permanent The Role Capco is looking for an AI Security Consultant to help our clients identify, assess, and manage security risks associated with AI technologies and AI-enabled solutions. You’ll work across data, security, technology, risk, and business teams to embed appropriate security controls throughout the lifecycle of AI systems. This is an opportunity to work at the intersection of AI, data, and cybersecurity within financial services, helping clients adopt AI securely while protecting sensitive information, strengthening governance, and managing emerging security risks. What You’ll Do Assess security risks associated with AI systems, models, data pipelines, and supporting technology environments. Conduct AI security assessments and secure AI architecture reviews. Define and implement security controls, standards, and guardrails across the AI lifecycle, from design and development through deployment and ongoing operation. Identify and assess AI-specific threats and vulnerabilities, including risks relating to data exposure, model access, prompt manipulation, and misuse. Deliver cybersecurity advisory services supporting enterprise AI adoption. Support clients in securing AI-enabled products, platforms and data ecosystems. Work with data, security, architecture, engineering, risk, and business teams to embed security-by-design into AI solutions and delivery processes. Support AI security governance, risk assessments, control testing, monitoring, incident response, and remediation activities. What We’re Looking For Strong experience in cybersecurity, information security, AI security, data security, or related technology risk disciplines. Practical understanding of AI and machine learning environments and the security risks associated with models, data, applications, and supporting infrastructure. Experience applying security controls, threat modelling, risk assessment, identity and a

CAPCO POLAND *We are looking for Poland based candidate. Capco is a fully independent, global management and technology consultancy. For 25 years we have combined innovative thinking with deep industry knowledge to deliver business consulting, digital transformation and technology services to Finance and Energy markets. Our collaborative and efficient approach helps clients reduce costs and manage risk and regulatory change while increasing revenues. We are thinkers, innovators, and disruptors. We are small enough to care but large enough to matter. We are seeking a highly skilled Security Operations Engineer to support the expansion of a strategic security program focused on onboarding critical applications into enhanced monitoring capabilities.In this role, you will play a key part in building and optimizing SIEM detection capabilities, supporting threat verification, and enabling regulatory alignment with DORA (Digital Operational Resilience Act) requirements by the end of 2026. You will work at the intersection of SIEM engineering, threat modelling, and security operations , contributing directly to improving detection accuracy and strengthening overall security posture. Key Responsibilities: Detection Engineering: Design, build, and optimize SIEM detection rules (with a focus on Microsoft Sentinel) Testing & Automation: Develop and execute test cases for detection logic; automate validation processes using scripting Application Onboarding: Support onboarding of critical applications into the security monitoring ecosystem Requirements Gathering: Collaborate with application teams to define logging requirements and detection use cases Workshop Facilitation: Lead and moderate workshops with stakeholders to align on threat scenarios and security capabilities Technical Documentation: Produce clear and comprehensive documentation covering detection logic, threat models, and validation results Collaboration: Work closely with SOC, enginee

Help strengthen network and data security across complex financial services environments, protecting critical infrastructure and sensitive information from evolving threats. The Role As a Senior Network Security Consultant, you will work with clients and delivery teams to strengthen the security, resilience, and protection of enterprise network and data environments across complex financial services organizations. You will bring together expertise across network security, infrastructure, and Data Loss Prevention (DLP), helping clients protect sensitive information while maintaining secure, reliable, and high-performing connectivity. You will support the design, implementation, configuration, monitoring, and ongoing enhancement of security controls across networks, endpoints, email, cloud, web, and other relevant technology environments. Working across cybersecurity, infrastructure, cloud, architecture, identity and access management, risk, compliance, privacy, and business teams, you will investigate security events and incidents, identify vulnerabilities and data protection risks, and translate security requirements into practical controls. As a senior consultant, you will provide technical insight, support complex security initiatives, and help clients improve network resilience and data protection while balancing security requirements with operational and business needs. What You’ll Do Assess, monitor, and analyze network and data security environments, investigating security events, DLP alerts, connectivity issues, potential data leakage, policy violations, and emerging risks. Design, configure, implement, and enhance network security and DLP controls across firewalls, VPNs, network segmentation, endpoints, email, cloud, web, and other relevant channels. Lead and support security implementations, upgrades, migrations, and control enhancements, including technical analysis, testing, documentation, deployment, and post-implementation validation. Investigate comple

A Career with Point72’s Technology Group As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications. As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity—all while delivering real business impact for our multi-billion-dollar global business. What you’ll do As a GenAI Security Engineer, you will develop and implement next-generation security controls to protect the firm’s agentic and human-in-the-loop GenAI systems. Specifically, you will: Build and run generative AI (GenAI) security controls for applications and platforms, including guardrails for model usage and API integrations. Secure agent/tool-calling and connector workflows, such as MCP or equivalent, to prevent tool abuse and data exfiltration. Lead AI threat modeling and risk assessments, maintaining threat models for prompt injection, jailbreaks, tool injection, data exfiltration, training data leakage, and supply chain risks, and driving mitigations. Define secure-by-default reference architectures for cloud-native and hybrid GenAI workloads, including network isolation and secrets handling. Develop and continuously improve monitoring and detection for anomalous AI behavior and unsafe outputs. Lead incident response and remediatio

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking a skilled and innovative Application Security Engineer to join 𝕏 Money. In this role, you will protect the security and integrity of our payments and financial products throughout the software development lifecycle, with a particular focus on code security, CI/CD pipelines, and systems that move and hold customer funds. Experience securing fintech, payments, digital wallet, ledger, or similar high-value platforms, where fraud, abuse, and unauthorized transfers are a constant concern, is strongly preferred. RESPONSIBILITIES: Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in financial applications Design and implement secure coding guidelines and best practices for development teams Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline Perform threat modeling and risk assessments for payments, wallets, ledgers, and related product surfaces, and develop mitigation strategies for fraud, abuse, and unauthorized movement of funds or credits Manage vulnerability tracking and remediation efforts, providing guidance to development teams Manage the

About BlueConic: We are building products with AI at the core, and we build our products using AI. Agents and skills write a share of our code, run parts of our SDLC, and operate alongside our engineers every day. We need a Staff Security Engineer who can secure that reality, not the SDLC of five years ago. In conjunction with the CISO you represent security across the product development lifecycle, lead threat modeling and vulnerability management, and drive secure coding practices in an environment where code review means reviewing agent output as often as human output. You will use AI agents and skills as core tools of your own job: building automation, running threat models, triaging vulnerabilities, and scaling your impact across teams. Lead Security Engineer What you'll do Drive adoption of secure coding practices, including practices specific to AI-generated and AI-assisted code. Conduct security assessments, threat modeling, and risk analysis so threats are understood, documented, and mitigated. Automate security processes wherever it creates leverage, using scripts, AI agents, and AI skills as your default tools. Identify emerging classes of vulnerabilities and build solutions before they become incidents. Build and maintain security tooling, automation, and monitoring capabilities, including custom agents and skills for security workflows Threat model agentic systems: prompt injection, tool misuse, unauthorized agent privilege escalation, and data exfiltration through agent actions. Define guardrails and human-in-the-loop checkpoints for agent-driven changes to code and infrastructure. Set and enforce review standards for code produced by AI coding agents, including required checks before agent-authored changes reach production. Break large, cross-team security projects into individual tasks. Manage scope across teams and drive projects to closure. Monitor, investigate, and respond to security incidents, coordinating remediation across teams. S

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . Security is a primary competency at Coinbase, and the Threat Intelligence team within Security Operations keeps a watchful eye over every aspect of it. As a Senior Onchain Investigator, you'll own end-to-end onchain investigations into the threat actors targeting Coinbase and the crypto ecosystem. You'll cluster illicit wallets, fuse OSINT with onchain evidence, and turn findings into detections, blocks, and decisions that protect customers and products. This role leads investigation methodology for the team, not just individual cases. What you'll do: Own complex onchain investigations into threat actor infrastructure, scam networks, exploits, and related abuse targeting Coinbase and Base Drive clustering and attribution of illicit actors using blockchain analytics, OSINT, and internal data, then operationalize results into Vertex Synapse and downstream controls Build OSINT and onchain analysis pipelines, queries, and dashboards that automate detections and scale investigative capacity across the team Lead post-incident reviews and root cause analyses to identify gaps and recommend enhancements to controls, detection, and overall security posture Partner with product, engineering, and risk teams to embed threat and abuse mitigation strategies into the product development lifecycle from ideation to launch Lead new investigative techniques, teach them across Sec

The Security team is responsible for protecting Asana’s employees, users, and customers. We are a team of security engineers and risk and compliance practitioners who build innovative safeguards to ensure that our data is protected against threats and that we comply with legal, regulatory, and customer requirements. We collaborate closely with teams across the organization to foster a culture of security throughout our product and operations. We’re looking for an Application Security Engineer to join our Security team in Warsaw. You’ll be a foundational member of the security presence in a key engineering hub, partnering directly with IT, infrastructure, and product teams to ensure we design and ship secure software. You will be instrumental in scaling our security practices by conducting security design reviews, threat modeling, and vulnerability assessments across our products and internal applications, eliminating entire classes of vulnerabilities, and championing a security-first mindset. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland. What you’ll achieve ● Conduct security architecture reviews and threat modeling for new features and services across our product and internal applications, identifying risks early and influencing secure design decisions. ● Perform vulnerability assessments of software and systems, using a range of assessment methodologies to surface and prioritize security weaknesses across our product surface. ● Triage, investigate, and drive remediation of vulnerabilities from our bug bounty program and automated s

Security Architect Location: London (Hybrid) | Practice Area: Technology & Engineering | Type: Permanent Safeguard the digital future of financial services. The Role We are looking for Security Architects to lead the design and implementation of secure, scalable solutions for some of the world’s leading financial institutions. You’ll play a critical role in shaping security strategy, informing architectural decisions, and embedding best practices across cloud and hybrid environments. This is a hands-on role with opportunities to mentor others and influence major change initiatives, using approved AI tools, automation and AI-enabled workflows where appropriate to improve the speed, quality and insight of security architecture activities. You’ll apply human judgement and responsible AI guardrails to ensure outputs are appropriately reviewed and escalated. What You’ll Do Develop enterprise security architecture strategies aligned with business and regulatory requirements, using approved AI-enabled tools where appropriate to accelerate research, analysis and insight Lead the design of secure systems, networks and applications across on-premise, cloud and hybrid environments Conduct threat modelling and risk assessments, define remediation strategies, and explore responsible AI and automation to improve the efficiency and quality of security analysis while maintaining human review Guide DevSecOps adoption by designing embedded security and controls within the SDLC, including appropriate guardrails, audit trails and escalation pathways for AI-enabled workflows Champion security awareness and mentor teams across engineering, architecture and delivery, encouraging responsible experimentation with approved AI tools where they can improve productivity and outcomes What We’re Looking For Extensive experience designing and implementing secure architectures across cloud and hybrid environments Experience designing solutions using Palo Alto, Microsoft or similar security ecos

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the Team The Security Engineering team protects Anthropic's AI systems and maintains the trust of our users and society. We define the authentication architecture for our training infrastructure, design the cryptographic foundations that protect model weights and training data, and drive the developer security program that shapes how engineers build and ship software. The team works across several areas that collaborate closely: identity and secrets management, developer security and supply chain, infrastructure security, and secure frameworks. You will own one or two of these areas and contribute to others, with your focus shaped by your strengths and the team's priorities. This is largely greenfield work, and you will help define the architecture. About the role: Scope, design, and build complex security systems end to end, maintaining them through production and driving through ambiguous technical challenges with minimal oversight Identify systematic risks through threat modeling and risk assessment, then build the controls and infrastructure that address them Mentor engineers across the security team and broader engineering organization, contribute to hiring, and grow security engineering culture at Anthropic Enable other teams to build their own security solutions by providing design pattern guidance and expanding security ownership beyond the security team Developer security and supply chain Build and advance our developer security program by embedding security practices into the software development lifecycle and developer workflows Harden CI/CD pipelines against supply chain attacks through isolated build environments, s

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products. We are technical in what we build but are operational in how we do our work, and are committed to supporting all products and research at OpenAI. Our Security team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture. About the Role As a Security Engineer, Application Security you will be responsible for identifying and mitigating security vulnerabilities within software applications through building security tools, code reviews, penetration testing, and security assessments. We’re looking for people who will work closely with development teams to ensure secure coding practices are integrated throughout the software development lifecycle, preventing security risks before they emerge. You will also provide security guidance to developers and other stakeholders, fostering a culture of security awareness within the organization. The role is preferred to be based in San Francisco, Seattle or New York City but may consider remote work. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees. In this role, you will: Perform Security Assessments : Conduct regular security assessments, code reviews, and penetration testing to identify vulnerabilities in applications and software. Develop and Implement Security Tools : Design, develop, and implement security tools, frameworks, and methodologies to protect applications against security threats. Collaborate with Development Teams : Work closely with development teams to ensure security best practices are integrated throughout the software development lifecycle (SDLC), including secure coding guidelines. Threat Modeling and Risk Assessment : Conduct threat modeling and risk