Security Threat And Risk Consultant Jobs

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products. We are technical in what we build but are operational in how we do our work, and are committed to supporting all products and research at OpenAI. Our Security team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture. About the Role As a Security Engineer, Application Security you will be responsible for identifying and mitigating security vulnerabilities within software applications through building security tools, code reviews, penetration testing, and security assessments. We’re looking for people who will work closely with development teams to ensure secure coding practices are integrated throughout the software development lifecycle, preventing security risks before they emerge. You will also provide security guidance to developers and other stakeholders, fostering a culture of security awareness within the organization. The role is preferred to be based in San Francisco, Seattle or New York City but may consider remote work. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees. In this role, you will: Perform Security Assessments : Conduct regular security assessments, code reviews, and penetration testing to identify vulnerabilities in applications and software. Develop and Implement Security Tools : Design, develop, and implement security tools, frameworks, and methodologies to protect applications against security threats. Collaborate with Development Teams : Work closely with development teams to ensure security best practices are integrated throughout the software development lifecycle (SDLC), including secure coding guidelines. Threat Modeling and Risk Assessment : Conduct threat modeling and risk

About the Team Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity. The Security team protects OpenAI’s technology, people, and products. We are technical in what we build but are operational in how we do our work, and are committed to supporting all products and research at OpenAI. Our Security team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture. About the Role As a Security Engineer, Application Security you will be responsible for identifying and mitigating security vulnerabilities within software applications through building security tools, code reviews, penetration testing, and security assessments. We’re looking for people who will work closely with development teams to ensure secure coding practices are integrated throughout the software development lifecycle, preventing security risks before they emerge. You will also provide security guidance to developers and other stakeholders, fostering a culture of security awareness within the organization. The role is preferred to be based in San Francisco, Seattle or New York City but may consider remote work. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees. In this role, you will: Perform Security Assessments : Conduct regular security assessments, code reviews, and penetration testing to identify vulnerabilities in applications and software. Develop and Implement Security Tools : Design, develop, and implement security tools, frameworks, and methodologies to protect applications against security threats. Collaborate with Development Teams : Work closely with development teams to ensure security best practices are integrated throughout the software development lifecycle (SDLC), including secure coding guidelines. Threat Modeling and Risk Assessment : Conduct threat modeling and risk

The Director, Corporate Security is a leadership role responsible for the development and implementation of physical security programs to help the company keep all Zoox personnel and property safe and secure. This leader will serve as the primary point of contact for all physical security programs for the company, including physical security operations, risk management, incident response, insider threat coordination, investigations, workplace violence prevention, event security, executive protection, and fleet security. In this role, you will: Lead the physical security team across all Zoox locations Oversee 24/7 security operations, including access control, GSOC, incident response, and emergency management across all sites. Develop, implement, train, and enforce company security policies and procedures. Perform incident investigations and risk assessment activities. Partner with internal stakeholders to ensure they are meeting company standards. Management of outsourced security suppliers to ensure their performance is meeting contractual requirements.. Drive modernization of security infrastructure, integrating smart surveillance, AI-driven analytics, and automation to enhance efficiency and threat detection. Partner with Facilities, HR, EHS, Legal, IT, and ProdSec to align security programs and insider threat protection with business operations. Qualifications 15+ years of progressive experience in corporate security with at least 5 years in a leadership role, ideally at companies with dispersed physical operations. Proven ability to lead and mentor diverse teams, including contractors and third-party service providers. Deep knowledge of physical security technologies, operations centers, and systems integration. Exceptional judgment, communication, and crisis leadership under pressure. Experience with emergency communications and escalation process

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking a skilled and innovative Application Security Engineer to join our technology-driven company. In this role, you will be responsible for ensuring the security and integrity of our cloud-native applications and systems throughout the software development lifecycle, with a particular focus on code security, CI/CD pipelines, and emerging AI technologies. RESPONSIBILITIES: Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in our applications Design and implement secure coding guidelines and best practices for development teams Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline Perform threat modeling and risk assessments for applications, developing mitigation strategies for potential risks Manage vulnerability tracking and remediation efforts, providing guidance to development teams Support incident response activities related to application security Stay current on emerging security threats and trends in cloud-native technologies and AI, continuously enhancing our security measures Evaluate and secure software supply chains, including producing and

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Lead Data Scientist Overview: Services within Mastercard is responsible for acquiring, engaging, and retaining customers by managing fraud and risk, enhancing cybersecurity, and improving the digital payments experience. We provide value-added services and leverage expertise, data-driven insights, and execution. Role: We are seeking a highly skilled and motivated Lead Data Scientist to join our Cyber Analytics team within the Security Solutions Data Science organization. The successful candidate will play a leadership role in developing advanced analytics and machine learning solutions across cybersecurity, payments, and fraud. This person will also have formal people-management responsibilities for junior team members, helping them grow their technical capabilities, manage priorities, and deliver high-quality work. Job Responsibilities: • Lead the design, development, validation, and implementation of advanced analytical solutions, predictive models, and machine learning algorithms using large-scale payment, fraud, merchant, cybersecurity, and threat-intelligence data. • Provide technical leadership for graph analytics and modeling, including graph schema design, relationship modeling, community detection, link analysis, graph embeddings, and graph neural networks – all in service of

The opportunity We're looking for a Product Cybersecurity Engineer to help ensure that Polestar's products meet global cybersecurity standards and regulatory requirements throughout the vehicle lifecycle. In this role, you will work across concept, development, production, and post-launch operations, contributing to the implementation and validation of cybersecurity requirements that help safeguard our vehicle systems. Let us describe the challenge we offer As a Product Cybersecurity Engineer, you will play a key role in defining, integrating, and verifying technical security controls across our products. Working closely with R&D, suppliers, and cross-functional teams, you will support secure product development through threat analysis, secure design, cybersecurity validation, and regulatory compliance activities. This role is located at our HQ in Gothenburg, Sweden. What you'll do You will be responsible for implementing and validating cybersecurity requirements across the vehicle lifecycle while supporting compliance with standards and regulations such as ISO/SAE 21434 and UNECE R155. This includes: Define, decompose, trace, and maintain product cybersecurity requirements and assurance cases. Perform and/or support Threat Analysis and Risk Assessments (TARA) and risk treatment activities. Plan and execute cybersecurity validation and verification activities, including testing and reviews. Review supplier cybersecurity work products and support the closure of identified findings. Support the generation of technical evidence required for regulatory audits and type approvals. Collaborate with system architects, software and hardware teams, and functional safety teams to ensure secure integration. Contribute to the continuous improvement of security engineering methods, tools, and templates. Who you are You are an experienced cybersecurity engineer with a strong background in product or embedded cybersecurity. You enjoy working collaboratively across disciplines and a

About the Team DoorDash’s Global Governance, Risk and Compliance (GRC) team helps the business scale securely through practical risk-based decisions, reliable controls and clear accountability. Our third-party risk program protects the systems and data behind our marketplace across DoorDash, Wolt, and Deliveroo. About the Role We're hiring a Security Risk Specialist, who will help run and shape our risk management program and treatment plans, enabling risk and control owners and security teams to keep risk at an acceptable level as the business grows. You will work cross-functionally to achieve business goals by running risk assessments and reporting, supporting exception requests when a policy can't be met, and helping automate the tooling and processes that keep our risk register accurate and trustworthy. You'll also help us build a more proactive risk function — going into specific areas of the business to deep-dive their controls, surface where things have gone wrong, and get ahead of issues before they surface. You will report into the Senior Security Risk Manager on our GRC team in our Security organization. You’re excited about this opportunity because you will… Lead our global risk management process (assessing risk, negotiating treatment plans with owners, turning regulatory and framework changes into real, working controls) Get into the detail of how controls operate day-to-day, factoring in threat intelligence to make sure we stay ahead of new threat actors and attack vectors Manage policy exceptions by building compensatory controls or a case for risk acceptance instead Own risk reporting for key areas like security or engineering, becoming the go-to risk contact for at least one and helping reduce risk there in a measurable way Collaborate and report widely within our GRC and security teams and across the business Help shape our team’s strategy and tooling as we grow by building your own automations rather than waiting on an engineer to build them for y

About the Team The Corporate Security team ensures the physical safety and security of the organization's assets, operations, and personnel. We are committed to maintaining a secure environment that enables our team to focus on advancing artificial intelligence in a responsible manner. About the Role As a Protective Intelligence & Threat Analyst, you will identify, assess, and communicate physical security threats affecting OpenAI, its personnel, executives, operations, and assets. You will leverage open-source intelligence, social media, investigative tools, and other information sources to assess violent or disruptive threats, geopolitical developments, and emerging risks relevant to the company. The role will support a broad range of Protective Intelligence activities, including persons of interest investigations, behavioral threat assessment, executive and individual risk assessments, event and travel security assessments, and time-sensitive intelligence support to Corporate Security and cross-functional partners. You will turn complex and often incomplete information into clear assessments and actionable recommendations that help inform security and protective decisions. We are seeking candidates with intelligence experience, particularly in protective intelligence, threat investigations, or behavioral threat assessment. Successful candidates will understand the intelligence cycle, OSINT investigative techniques, corporate physical security, risk management, and threat assessment, and will be comfortable operating independently in a fast-moving environment involving sensitive and occasionally high-profile matters. This role could be based in San Francisco, CA, or may be a remote role for the right candidate. We use a hybrid work model of 3 days in the office per week. Relocation offered for those outside of the Bay Area. In this role, you will: Identify and investigate potential physical threats to OpenAI, its executives, employees, facilities, operations,

Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent of the Fortune 500, 50 percent of the Global 2000, and large government agencies. Come be part of our journey! What makes Tenable such a great place to work? Ask a member of our team and they’ll answer, “Our people!” We work together to build and innovate best-in-class cybersecurity solutions for our customers; all while creating a culture of belonging, respect, and excellence where we can be our best selves. When you’re part of our #OneTenable team, you can expect to partner with some of the most talented and passionate people in the industry, and have the support and resources you need to do work that truly matters. We deliver results that exceed expectations and we win together! Your Role: The Senior Product Manager will play a key role in the product life cycle with an emphasis on customer requirements, as well as generating and defining the product vision. The Senior Product Manager will work closely with multiple departments, including product management, engineering, UX/UI, sales, customer support, finance, and marketing, to ensure customer requirements are met. This is an exciting opportunity to join a fast-growing, innovative company, be part of a strong team, and lead a product that solves a high-profile problem in the Cloud Security space. You will be joining the company’s product team and leading a significant domain. Your Opportunity: Own and lead the vision, strategy, and execution for the Cloud Threat Detection domain, driving end-to-end product development of threat detections and stories, AI risk assessment, eBPF agent, container runtime protection and more. to help customers reduce risk and achieve continuous cloud compliance Engage directly with customers and prospects to gather insights, validate assumptions, and ensure product decisions al

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career. About the team Abuse Control Engineering (ACE) is Stripe’s rapid-response technical defense and control incubator. When urgent abuse vectors emerge, ACE bridges the gap using real attacker telemetry to prototype, test, and deploy software safeguards before vulnerabilities can be exploited at scale. We partner closely with Fraud, Risk and Product Engineering to run rigorous experiments, balancing aggressive risk mitigation against legitimate user conversion. Operating as both a strike team and an incubator, ACE builds automated regression suites in partnership with Abuse Research to permanently block threat recurrence and seamlessly transfers mature controls to long-term product owners across Stripe. What you’ll do As an Abuse Control Engineer on the Abuse Control Engineering (ACE) team, you will design, prototype, and incubate technical defenses that safeguard Stripe’s financial ecosystem against complex, cross-cutting abuse vectors. Where emerging threat patterns identify Stripe product weaknesses, ACE steps in to rapidly build and experiment with technical safeguards. Driven by empirical evidence and Stripe’s FT3 (Fraud Taxonomy 3.0) framework, you will translate threat intelligence into hard technical control requirements (e.g., API rate-limiting, step-up challenges, parameter validation, pre-debit holds). You will carefully balance security and product velocity, running experiments to evaluate risk reduction against user conv

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career. About the team Abuse Control Engineering (ACE) is Stripe’s rapid-response technical defense and control incubator. When urgent abuse vectors emerge, ACE bridges the gap using real attacker telemetry to prototype, test, and deploy software safeguards before vulnerabilities can be exploited at scale. We partner closely with Fraud, Risk and Product Engineering to run rigorous experiments, balancing aggressive risk mitigation against legitimate user conversion. Operating as both a strike team and an incubator, ACE builds automated regression suites in partnership with Abuse Research to permanently block threat recurrence and seamlessly transfers mature controls to long-term product owners across Stripe. What you’ll do As an Abuse Control Engineer on the Abuse Control Engineering (ACE) team, you will design, prototype, and incubate technical defenses that safeguard Stripe’s financial ecosystem against complex, cross-cutting abuse vectors. Where emerging threat patterns identify Stripe product weaknesses, ACE steps in to rapidly build and experiment with technical safeguards. Driven by empirical evidence and Stripe’s FT3 (Fraud Taxonomy 3.0) framework, you will translate threat intelligence into hard technical control requirements (e.g., API rate-limiting, step-up challenges, parameter validation, pre-debit holds). You will carefully balance security and product velocity, running experiments to evaluate risk reduction against user conversion impact.

As a Senior Security Engineer within Application Security at Datadog, you will help secure emerging application architectures where established security patterns may not yet exist, including agentic applications, LLM-enabled products, protocol-driven tool use, and untrusted execution environments. You will establish and validate security models, requirements, and controls while partnering with product and platform teams to develop secure-by-default approaches. Your work will address evolving trust boundaries, agent identity, data access, tool permissions, and runtime behavior through threat modeling, security solutions, and practical implementation. You will have the opportunity to shape how Datadog safely supports new application paradigms and address emerging security risks before they become systemic. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Define security models, requirements, and guardrails for emerging application architectures where established patterns are incomplete or do not yet exist. Design, implement, and validate practical security controls that reduce risk in emerging architectures and high-risk system behaviors. Shape how emerging systems authenticate, authorize actions, isolate workloads, and access data, applying least-privilege principles throughout. Partner with product, platform, Infrastructure Security, and other engineering teams to identify security gaps and embed secure-by-default requirements from early design through production. Lead threat modeling and security assessments for new and existing products, focusing on evolving threats, unfamiliar trust boundaries, and new interaction patterns. Prioritize and drive remediation of emerging security risks, including continuous security testing where it provides durable cover

About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for society as a whole. Our team is a quickly growing group of committed researchers, engineers, policy experts, and business leaders working together to build beneficial AI systems. About the role The Security Engineering team's mission is to safeguard our AI systems and maintain the trust of our users and society at large. Whether we're developing critical security infrastructure, building secure development practices, or partnering with our research and product teams, we are committed to operating as a world-class security organization and keeping the safety and trust of our users at the forefront of everything we do. Responsibilities: Build security for large-scale AI clusters across multiple clouds and bare-metal data centers, including IAM, network segmentation and encryption controls Design and implement network security controls: default-deny ingress and egress, segmentation between research, training and production environments, private connectivity across clouds and data centers, cloud firewall policy and mTLS with service identity Ship these controls as secure defaults using infrastructure as code and GitOps workflows, so new clusters, VPCs and data center links inherit the right boundaries Build visibility into network traffic and boundary drift, with detection for exfiltration paths and automated remediation where it is safe to do so Design secure-by-design development workflows and CI/CD pipelines across our services, with expertise in Kubernetes security, container orchestration and identity management Threat model and assess risk for complex multi cloud and networked environments, and join infrastructure networking, cluster and data center teams at design time so topology, routing and firewall decisions carry our security requirements from day one Mentor engineers and contribute to hiring and growt

Location Details: Remote, Romania At GoDaddy the future of work looks different for each team. Some teams work in the office full-time; others have a hybrid arrangement (they work remotely some days and in the office some days) and some work entirely remotely.​ This position may be a hybrid or fully remote position, as decided by your manager. If designated as hybrid, you’ll divide your time between working remotely from your home and an office location, so you should live within commuting distance. If designated as remote, you’ll be working remotely from your home and may occasionally visit a GoDaddy office to meet with your team for events or meetings. Your hiring manager can share more about this role’s hybrid or remote designation. Occasional travel may be required to support business needs. Join our team If you are looking to become the next Health and Safety leader at GoDaddy, this role is designed for you. At GoDaddy, we prioritize a strong Health and Safety culture, and our team continues to grow. If you thrive in a fast-paced and supportive environment, your search ends here. Join GoDaddy on our journey to success by helping protect our people and our company, while ensuring a safe and secure working environment for all employees. Support the development, execution, and continuous improvement of Health and Safety policies and programs across GoDaddy's workforce. Contribute to raising standards, awareness, and compliance while promoting a "threat to business" and "risk aware" culture through sound regulatory and security practices. Serve as a growing Health and Safety subject matter expert for assigned business units and regional EMEA teams, helping identify, assess, and manage risks that could affect business activities. What you'll get to do... Support the delivery and continuous improvement of Health & Safety policies, procedures, programmes and training, with an initial focus on Romania . Help monitor Romanian Health & Safety requirements

Our vision is to transform how the world uses information to enrich life for all . Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever. As a Regional Governance, Risk, Compliance (GRC) Principal, you will serve as the senior Governance, Risk, Compliance, and Cyber Resilience leader for Japan, acting as the primary liaison between Micron's global GRC organization and regional business operations. This role is responsible for driving adoption of enterprise governance, cybersecurity, risk management, compliance, audit, resilience, and regulatory programs across Japan while ensuring alignment with Micron's strategic objectives, regulatory obligations, customer requirements, and evolving threat landscape. You will partner closely with regional business leaders, site leadership, Engineering, IT, Product Security, Physical Security, Legal, Privacy, HR, Internal Audit, BISOs, external auditors, regulators, customers, and government stakeholders to assess risks, coordinate compliance activities, facilitate audits, manage remediation efforts, and strengthen organizational resilience. This role serves as the voice of Japan within the global GRC organization and ensures local regulatory requirements, cultural considerations, customer expectations, and business priorities are effectively represented in enterprise governance decisions. The Regional GRC Principal will also champion AI-enabled governance and risk management capabilities, helping scale assessments, evidence management, risk monitoring, regulatory analysis, and compliance oversight while improving efficiency and consistency across the region. POSITION QUALIFICATIONS <p