Senior Security Assurance Analyst Jobs

At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done. We seek a highly specialised technical Senior Security Architect (SA) who practices security with an obsession for helping customers design and implement the best security mechanisms, particularly those that would relate to the Snowflake AI & Data Cloud. At Snowflake, Security Architects are passionate about security, often involving tremendous technology challenges that require no simple solutions. Success requires working collaboratively with a broad range of people inside and outside the company. Operating out of our APJ Field CTO Office , you will serve as our primary South Korean Security expert, who will be a cloud compliance evangelist, technical architect, and hands-on practitioner. This specialized role bridges the gap between global cloud data architecture and South Korea’s rigorous, localized regulatory frameworks, specifically the Cloud Security Assurance Program (CSAP) and the Korea Financial Services Institute (K-FSI) Safety Evaluation. IN THIS ROLE YOU WILL GET TO: Help to scope security related feature enhancements on behalf of customers to work with Product Management and Engineering on ways to enhance requirements for the local market. Help drive Snowflake adoption by advising customers and engineering teams on how to build secure Korea-compliant Data

Who Are We? Postman is the world’s leading API platform, used by more than 45 million+ developers and 500,000 organizations, including 98% of the Fortune 500. Postman is helping developers and professionals across the globe build the API-first world by simplifying each step of the API lifecycle and streamlining collaboration—enabling users to create better APIs, faster. The company is headquartered in San Francisco and has offices in Boston, New York, Austin, Tokyo, London, and Bangalore - where Postman was founded. Postman is privately held, with funding from Battery Ventures, BOND, Coatue, CRV, Insight Partners, and Nexus Venture Partners. Learn more at postman.com or connect with Postman on X via @getpostman. P.S: We highly recommend reading The "API-First World" graphic novel to understand the bigger picture and our vision at Postman. The Opportunity The Security GRC team is responsible for the overall security posture of Postman by ensuring compliance with applicable regulations and contractual obligations and maintaining effective and efficient governance, risk, and compliance programs. In addition, the Security GRC team is directly involved with supporting and enabling Sales and driving security and compliance initiatives to further the growth of Postman. We seek a Senior GRC Engineer who combines deep GRC expertise with strong engineering skills to build and scale automation across governance, risk, and compliance. This is a hands-on technical role focused on designing and operating GRC tooling, integrations, and AI-assisted workflows that reduce manual effort while improving security assurance. The ideal candidate has experience implementing and maturing compliance programs, including SOC 2, ISO 27001, HIPAA, GDPR, CCPA, and FedRAMP, and can translate security and risk requirements into practical engineering solutions. As a senior member of the Security GRC team, you will partner with Security, Engineering, IT, Legal, Sales, and other stakeholders to

We are hiring a Senior Software Engineer to join our Server Security team. The Server Security team is a development-focused group within MongoDB's core engineering organization. Operating "close to the bottom of the stack," the team builds features that enable database users to secure their data globally. You will work on critical components including: Cryptography: Queryable Encryption , at-rest data encryption, and fundamental cryptographic principles. Identity & Access: Authentication and authorization systems, TLS, and X.509 certificate management Network Security: High-performance, low-latency networking protocols (PKI, Hashing, CRLs) System Integrity: Resilience, observability, and compliance assurance within a large-scale distributed database Our team champions a strong culture of inclusivity, diversity, and collaboration. If you want to work on a collaborative team that applies distributed systems fundamentals to deliver core features of a popular database, join us! Let’s change what’s possible for application developers, system architects, and database operators. The role As a Senior Engineer, you will apply distributed systems fundamentals to deliver core security features. You will be a leader in improving MongoDB's security posture by owning features and leading investigations into complex areas of the codebase. What you’ll do: Build and test new security features in a large, feature-rich C++ codebase Work across engineering, cloud services, and support teams to coordinate feature rollouts and changes Stand for code quality and security best practices, assisting fellow engineers in writing well-reasoned, secure code Use strong diagnostic intuition to solve thorny technical issues related to distributed systems, concurrency, and OS internals This role can be remote or hybrid anywhere in the USA or Canada. We will prioritize candidates who are already located in one of these countries. Candidate Profile We are looking for a highly technical engineer w

We are hiring a Senior Software Engineer to join our Server Security team. The Server Security team is a development-focused group within MongoDB's core engineering organization. Operating "close to the bottom of the stack," the team builds features that enable database users to secure their data globally. You will work on critical components including: Cryptography: Queryable Encryption , at-rest data encryption, and fundamental cryptographic principles. Identity & Access: Authentication and authorization systems, TLS, and X.509 certificate management Network Security: High-performance, low-latency networking protocols (PKI, Hashing, CRLs) System Integrity: Resilience, observability, and compliance assurance within a large-scale distributed database Our team champions a strong culture of inclusivity, diversity, and collaboration. If you want to work on a collaborative team that applies distributed systems fundamentals to deliver core features of a popular database, join us! Let’s change what’s possible for application developers, system architects, and database operators. The role As a Senior Engineer, you will apply distributed systems fundamentals to deliver core security features. You will be a leader in improving MongoDB's security posture by owning features and leading investigations into complex areas of the codebase. What you’ll do: Build and test new security features in a large, feature-rich C++ codebase Work across engineering, cloud services, and support teams to coordinate feature rollouts and changes Stand for code quality and security best practices, assisting fellow engineers in writing well-reasoned, secure code Use strong diagnostic intuition to solve thorny technical issues related to distributed systems, concurrency, and OS internals This role can be remote or hybrid anywhere in the USA or Canada. We will prioritize candidates who are already located in one of these countries. Candidate Profile We are looking for a highly technical engineer w

The Assurance, Risk and Compliance (ARC) Initiatives team at MongoDB owns the governance and delivery of key cross-functional security risk and compliance initiatives. The team designs and executes programs that support compliance audits, risk assessments, common control frameworks, operating cadences, and executive reporting that strengthen the organization’s assurance, risk management and compliance objectives. The policy and controls governance pillar is responsible for the structure, standards and operating mechanisms that keep MongoDB’s security policies, standards, procedures, and controls governance processes current, aligned, auditable and scalable across the organization. This includes ownership of the policy lifecycle, common controls framework governance, issue management, and the review cadences and cross-functional coordination needed to maintain strong governance maturity and audit readiness. This role sits under the Assurance, Risk and Compliance function within the Global Security Office and reports to the Director of ARC Initiatives. This role will be based remotely in the United States Responsibilities: Scope of Ownership Policy governance program ownership, including policy lifecycle management, documentation standards, review and approval cadences, change tracking, and exception governance Controls governance ownership, including common controls framework lifecycle management, control harmonization, framework mapping, and processes that support audit readiness and scalable control oversight Governance over supporting systems and workflows, including Jira, GRC tooling, documentation repositories, and reporting structures, that enable consistent execution and visibility Issue management and remediation governance, including intake, triage, tracking, and reporting for timely closure of findings Executive-ready reporting and metrics for policy health, controls maturity, policy exceptions and broader program effectiveness Program Leadership Own

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Vanta's Corporate Engineering team is the infrastructure layer that keeps 1,500+ people connected, secure, and moving fast. This role leads the shift from a reactive support function to a platform function the whole company relies on. Corporate Engineering owns the systems, tooling, and access infrastructure Vanta runs on. From identity and device management to AI tooling infrastructure and ITSM, CE makes sure Vanta's people have the right access, the right tools, and the right guardrails on day one and every day after. CE is at an inflection point. The company has scaled quickly, AI tooling is live company-wide, and the team is ready for a leader who sets technical direction, establishes clear ownership, and builds the leadership layer beneath them. As Sr. Manager, Systems Engineering, you will lead a team of experienced engineers, own several of the company's highest-priority platform initiatives, and make CE a function the rest of Vanta builds on rather than routes around. What you’ll do as a Senior Manager, Systems Engineering at Vanta: Lead, coach, and grow a team of systems engineers and a tech lead. Set clear expectations, hold a high bar, and develop the people who build Vanta's most critical internal systems. Own joiner, mover, and leaver automation end to end in Okta Workflows, so access is correct on day one, follows people through role changes, and closes completely on departure, including API keys and service credentials. Build and own device assurance across macOS and Windows, defining OS, browser, and device-state policy ahead of enforcement rather than in response to it. Rationalize the ITSM estate so self-servi

Senior Compliance Specialist Position Description SingleStore is building a real-time data platform that helps organizations transact, analyze and act on data in a single system. We are committed to operating with strong security, privacy and resilience standards across our products, services and internal operations. We are seeking an experienced and highly motivated Senior Compliance Specialist to help scale our security, privacy and compliance programs. This role will be responsible for maintaining key certifications, driving cross-functional compliance initiatives, overseeing development and management of our privacy program, supporting compliance with the Digital Operational Resilience Act (DORA), and helping mature our Business Continuity Management System (BCMS). The ideal candidate is practical, organized and collaborative, with experience translating regulatory and framework requirements into durable operational processes across technical and business teams. Job Responsibilities Support governance activities across the security, privacy and compliance program, including maintaining Information Security Management System documentation, evidence, policies, procedures and audit trails. Help maintain and improve active certifications and attestations such as ISO/IEC 27001, SOC 2 Type II, HIPAA and PCI DSS, while coordinating with stakeholders across the business to ensure ongoing compliance. Drive readiness efforts for new compliance objectives, certifications and customer-driven assurance requirements. Participate in enterprise risk management activities, including risk methodology, risk assessments, treatment planning and follow-up with risk owners. Oversee the development, implementation and ongoing management of SingleStore’s privacy program in partnership with Legal, Security, IT and business stakeholders. Support compliance with applicable privacy and data protection requirements, including operationalizing controls and processes needed to meet regu

We are looking for a Senior Partner Solutions Architect to lead technical engagement with independent software vendors (ISVs) and strategic technology partners. You will help partners build, embed, deploy, validate, and go to market with MongoDB-based solutions that create repeatable customer value and accelerate MongoDB adoption. This role combines enterprise architecture, partner engineering, technical pre-sales, solution assurance, and go-to-market enablement. You will work across the complete partner lifecycle—from opportunity discovery and business-value alignment through architecture, validation, design wins, launch readiness, and post-launch reuse. You will be successful in this role if you can move fluidly between a partner’s product architecture, a customer’s business problem, MongoDB’s technical capabilities, and the field motion needed to scale the outcome. We're looking to speak with candidates based in Mexico City for our hybrid working model. What you will do Serve as the senior technical advisor for strategic ISV and technology-partner engagements, including embedded software, SaaS, BYOA/BYO-EA, AI, and agent products Lead technical discovery and architecture reviews that clarify the partner’s workload, adoption path, deployment model, customer segment, success criteria, and MongoDB value proposition Guide partners through a repeatable technical validation and solution-assurance process covering architecture, deployment, security, compliance, performance, scale, resilience, operability, upgrades, support ownership, and lifecycle management Establish evidence-based readiness gates and partner maturity assessments; distinguish clearly between tested, supported, recommended, and go-to-market-approved claims Design reference architectures, integration patterns, sizing guidance, deployment blueprints, quickstarts, demos, troubleshooting guidance, and partner-facing documentation Help partners build MongoDB into shipped products, SaaS platforms, AI applicat

CLEAR is building THE secure identity company of the future. Our mission is to make experiences safer and easier—physically and digitally. With more than 43 million Members and a growing network of partners across the world, CLEAR's secure identity platform is transforming the way people live, work, and travel. Whether it’s at the airport, stadium, or throughout your everyday life, CLEAR unlocks the magic of frictionless experiences. As a Senior Fullstack Software Engineer on CLEAR’s Healthcare team, you will build and scale secure, interoperable identity and data solutions that connect patients, providers, and partners. You’ll operate at the intersection of modern web platforms, healthcare interoperability standards, and high-assurance identity systems powering frictionless, trusted healthcare experiences nationwide. A brief highlight of our tech stack: Python / React / Typescript AWS cloud What you’ll do: Design and deliver secure, scalable fullstack solutions that integrate with enterprise EHR systems and national health information exchange frameworks Build and maintain healthcare data integrations leveraging FHIR (RESTful APIs/JSON) and HL7 v2 messaging to enable compliant, real-time data exchange Develop identity resolution and patient matching capabilities using identifiers such as MRNs and NPIs to ensure integrity across disparate clinical systems Partner with Engineering, Security, Product, and Health Information Management teams to implement compliant, audit-ready workflows for regulated healthcare processes Collaborate with external vendors (e.g., Epic Technical Services) to troubleshoot integration issues, manage deployments across TST/PRD environments, and ensure production reliability How you’ll measure success: Successful delivery and stability of FHIR/HL7 integrations across healthcare partners Reduction in data integrity issues related to patient matching and identity resolution High system uptime and successful production deployments across tiered

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. Okta enables universal, secure access to technology for every user and organization. The Device Identity and Access team ensures that every endpoint interacting with corporate resources is trusted, healthy, and secure. Our pillar spans four domains: Device Identity, Device Authentication, Device Security Posture, and Endpoint AI Security. We are hiring a Senior Product Manager to drive our Zero Trust Authentication group. In this role, you will lead the core execution, performance, and deployment strategy for Okta’s foundational endpoint products. You will own the operational excellence of Okta Verify , FastPass , and Device Assurance , ensuring that our core passwordless authentication flows and device posture engines remain performant, secure, and incredibly easy for global enterprises to deploy at scale. This is a critical, high-impact role designed for a highly autonomous product manager. You will take on the tactical execution and smaller strategic investments for our endpoint authenticators, acting as the team's operational anchor so that our senior product leaders can continuously expand our strategic frontiers. What you will own You will bridge user experience and deep systems engineering to ensure our core authentication products scale reliably for millions of global users. Core Device Assurance Execution: Own the roadmap for our baseline security posture checks (such as OS version validation, disk encryption, and firewall status). You will m

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Why we're hiring: Provide senior hands-on PAM engineering, owning complex change and integrations and assuring Kyndryl-delivered operations What you'll be doing: Engineer and assure complex PAM configuration, onboarding and integrations. Act as senior technical escalation above the Kyndryl run layer. Automate privileged-account onboarding and operational tasks. Assure the quality and security of partner-delivered change. Support audit remediation and control hardening. Own complex and small change in-house and provide senior technical escalation above the Kyndryl run layer. Assure the quality, safety and standards-compliance of Kyndryl-delivered change. Coach and uplift partner engineers and engineer out recurring failure. What you'll need: Expert PAM platform engineering and integration. Expert Beyond Trust product knowledge Vaulting, session management and connector configuration. Automation and scripting. Security hardening and troubleshooting. Change assurance and standards enforcement. Extensive hands-on senior engineering experience with the relevant platforms. Relevant senior technical certific

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As an Internal Audit IT Associate Manager, you'll join the Internal Audit team and lead the execution of IT and security audits across Coinbase's global cloud infrastructure, security operations, and crypto-native products. This team delivers independent, third-line assurance over technology, information security, and IT governance, helping Coinbase protect customers and maintain trust at scale. You'll own audits end-to-end, from planning through reporting, mentor junior team members supporting your engagements, and translate complex technical findings into clear, actionable insights for senior leadership. What you'll do: Own end-to-end execution of IT and security audits covering cloud infrastructure (AWS, GCP), application security, identity and access management, vendor/third-party risk, and blockchain-related products including wallets and cold storage. Lead audit planning, fieldwork, and stakeholder management, synthesizing findings into evidence-based reports and presentations for senior leadership and the Audit Committee. Direct and develop junior audit team members supporting your engagements, providing day-to-day guidance, reviewing workpapers, and coaching on technical and professional growth. Drive continuous monitoring and validation of remediated audit findings, tracking management responses and flagging delays or emerging risk themes. Partner with Engin

Hydraulic Systems Engineer (Associate, Experienced, or Lead) Company: The Boeing Company Boeing Defense, Space & Security (BDS) Mobility, Surveillance and Bombers (MS&B) B-52 Commercial Engine Replacement Program (CERP ) is seeking a Hydraulic Systems Engineer (Associate, Experienced or Senior) to join the Systems Engineering, Integration, and Test (SEIT) team . The selected candidate will drive engineering excellence on this complex development program in Oklahoma City, OK . Position Responsibilities: Operate as the team’s Subject Matter Expert on the B-52 Hydraulics Subsystem. Lead systems and multifunctional engineering efforts for the SEIT IPT, ensuring adherence to technical quality standards throughout the product lifecycle Collaborate with cross-functional teams, including design, manufacturing, and quality assurance, to define and implement systems engineering processes and best practices Conduct trade studies and risk assessments to inform design decisions and optimize system performance, cost, and schedule Develop and maintain system requirements, interface control documents, and verification and validation plans to ensure compliance with customer specifications and regulatory standards Oversee the integration of hardware and software components in System Integration Labs in Oklahoma City Oversee the verification and test of hardware and software components supporting the modification in San Antonio

We’re looking for an Associate Legal Counsel, Commercial and Privacy to contribute in developing a world class privacy program at Hootsuite and supporting on sales and other commercial matters. As part of our Privacy, Compliance & Customer Assurance team, you'll be helping translating complex global privacy laws into practical advice for business stakeholders and helping the Commercial Legal team drive deals across the line. This is a remote-first role and is open to applicants located in provinces and states where we are set up to hire. In this role, you will report to the Senior Legal Counsel, Privacy, AI & Compliance. Please include a cover letter when applying. WHAT YOU’LL DO: Provide frontline privacy support to business stakeholders throughout the organization (e.g., product development, sales, marketing, people, etc.) Draft privacy and other legal policies, notices and guidance Support our Customer Assurance function (which provides security and privacy sales support) and efficiently respond to customer data protection and privacy questions Draft, review, and negotiate commercial and data protection agreements, including, data processing agreements, NDAs, SaaS agreements, and vendor agreements Collaborate with key stakeholders to implement and maintain key privacy initiatives (e.g., improvements to our data retention / deletion policies, PIAs, data inventories, vendor controls, data subject requests) Collaborate with key business stakeholders to identify privacy risks and implement business minded solutions Support the implementation and maintenance of Privacy and Customer Assurance operations tools and processes in collaboration with the team and other stakeholders. Provide business oriented and practical legal guidance and support on a wide range of topics, including commercial contracts (with a focus on SaaS contracts), data protection, and procurement. Build and maintain positive relationships with

Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. Are you a curiosity driven technologist who can quickly understand how an AI system works, identify where it could be misused or fail, and help a team find a practical path forward? Sony Interactive Entertainment is seeking a Senior AI Security Risk Analyst to provide hands-on security support for AI systems, agents, workflows, tools, and integrations across SIE. Role Summary: In this role, you will operate at the intersection of modern AI technology, security risk, architecture, and enablement. You will conduct AI security reviews using SIE’s established security risk assessment methodology, policies, standards, and control expectations, adapting their application to AI-enabled and agentic systems and identifying where AI-specific guidance or controls are needed. You will coordinate risk-focused design and architecture input and translate AI-specific weaknesses into decision-ready recommendations and engineering actions. You will serve as an approachable security partner, working cross-functionally with teams across SIE’s business units and functions to support a diverse range of AI use cases, systems, and technologies. You will work especially closely with Responsible AI & Governance and coordinate expertise across Information Security teams and IT &amp