cloud security architect

Renesas

<div>Job Description 
About the role:
This role is responsible for making our software secure by design and keeping it secure throughout its lifecycle &mdash; from architecture and development to deployment and operations. The Architect will define security standards, embed security into engineering workflows, and ensure our SaaS platform meets enterprise-grade security and compliance expectations.
 A day in the life of our Cloud Security Architect:<ul><li>
Define and maintain secure architecture patterns for cloud-native SaaS systems</li><li>
Review and approve system designs for security risks</li><li>
Lead threat modeling for new features and platform components</li><li>
Design secure multi-tenant isolation models</li><li>
Architect secure API frameworks and integration patterns</li><li>
Ensure tenant data isolation and encryption strategies</li><li>
Continuously improve Secure SDLC practices</li><li>
Define secure coding standards and guardrails</li><li>
Architect secure cloud environments</li><li>
Define IAM, least-privilege access models, and service-to-service authentication</li><li>
Participate in security audits and customer security reviews</li><li>
Lead security incident root-cause analysis for application-layer incidents</li><li>
Improve detection and monitoring for application-level threats</li><li>
Collaborate with SRE to ensure security does not compromise reliability</li></ul>
Who We&rsquo;re Looking For:<ul><li>
8+ years in software engineering, security engineering, or cloud architecture</li><li>
Strong expertise in cloud-native architecture (microservices, containers, Kubernetes)</li><li>
Deep understanding of application security (OWASP Top 10, secure coding)</li><li>
Strong knowledge of IAM, authentication protocols (OAuth2, OIDC, SAML)</li><li>
Experience designing secure multi-tenant SaaS systems</li><li>
Hands-on experience with one major cloud provider (AWS preferred)</li></ul>
Preferred Qualifications:<ul><li>
Experience in enterprise SaaS environments</li><li>
Experience with regulated industries (FedRAMP, CMMC)</li><li>
Knowledge of tenant-based encryption models</li><li>
Experience implementing zero-trust architecture</li><li>
Background in vulnerability disclosure or bug bounty programs</li></ul>
The salary range for this role is $240,000 - $260,000. Actual compensation packages within this range are based on a wide array of factors unique to each candidate and role requirements, including but not limited to skill set, years and depth of experience, certifications, and specific location. 
Additional Information<div></div> 
Renesas is an embedded semiconductor solution provider driven by its Purpose &lsquo;To Make Our Lives Easier.&rsquo; As the industry&rsquo;s leading expert in embedded processing with unmatched quality and system-level know-how, we have evolved to provide scalable and comprehensive semiconductor solutions for automotive, industrial, infrastructure, and IoT industries based on the broadest product portfolio, including High Performance Computing, Embedded Processing, Analog &amp; Connectivity, and Power. 
 
With a diverse team of over 22,000 professionals in more than 30 countries, we continue to expand our boundaries to offer enhanced user experiences through digitalization and usher into a new era of innovation. We design and develop sustainable, power-efficient solutions today that help people and communities thrive tomorrow, &lsquo;To Make Our Lives Easier.&rsquo; 
 
At Renesas, you can:<ul><li>
Launch and advance your career in technical and business roles across four Product Groups and various corporate functions. You will have the opportunities to explore our hardware and software capabilities and try new things.</li><li>
Make a real impact by developing innovative products and solutions to meet our global customers' evolving needs and help make people&rsquo;s lives easier, safe and secure.</li><li>
Maximize your performance and wellbeing in our flexible and inclusive work environment. Our people-first culture and global support system, including the remote work option and Employee Resource Groups, will help you excel from the first day.</li></ul>
Are you ready to own your success and make your mark?
Join Renesas. Shape Your Future with Us.
Renesas Electronics is an equal opportunity and affirmative action employer, committed to celebrating diversity and fostering a work environment free of discrimination on the basis of sex, race, religion, national origin, gender, gender identity, gender expression, age, sexual orientation, military status, veteran status, or any other basis protected by federal, state or local law. For more information, please read our Diversity &amp; Inclusion Statement.
Renesas Electronics deals with dual-use technology that is subject to U.S. export controls regulations. Under these regulations it may be necessary for Renesas to obtain U.S. government export license prior to release of technology to certain persons. The decision whether or not to file or pursue an export license application is at the sole discretion of Renesas.
We have adopted a hybrid model that gives employees the ability to work remotely two days a week while ensuring that we come together as a team in the office the rest of the time. The designated in-office days are Tuesday through Thursday for innovation, collaboration and continuous learning.</div>

Cloud Security Architect

COZMALABS

We are seeking a highly skilled and motivated Cyber Security Architect with strong system, on prem and Cloud Security expertise to oversee and enhance the organization&rsquo;s internal security architecture, controls, and policies while actively contributing to external security initiatives and projects.This role combines strategic architecture leadership, hands-on implementation, security research, operations oversight, and cloud security engineering, with a strong focus on Microsoft environments such as Microsoft 365, Microsoft azure , and OS security.The ideal candidate will possess deep expertise in enterprise security architecture, domain security, on-prem and hybrid infrastructure protection, cloud-native security controls, and DevSecOps integration.Experience Requirements<ul><li>Minimum 7+ years in system and Cloud Security role.</li><li>Proven experience in enterprise security architecture (on-prem + cloud)</li><li>Experience in security research, security operations, and security assurance</li><li>Experience in setting and documenting security processes and procedures in compliance with Qatar NCSA guidelines and security best practices.</li><li>Experience in operating system and infrastructure hardening.</li></ul>Key Responsibilities<ul><li>Design, implement, and maintain enterprise-wide security architecture for the company internal security, user devices, cloud, and hybrid environments.</li><li>Develop and enforce security policies, standards, and procedures.</li><li>Lead security risk assessments and define mitigation strategies.</li><li>Align security controls with business objectives and regulatory requirements.</li><li>Oversee internal security governance and compliance frameworks (ISO 27001, NIST, CIS).</li><li>Architect and secure Azure cloud environments (IaaS, PaaS, SaaS).</li><li>Implement cloud-native and third-party security controls.</li><li>Conduct detailed security assessments of cloud services to ensure compliance with internal policies and industry frameworks.</li><li>Identify and remediate misconfigurations using automated scanning and manual inspection.</li><li>Implement secure cloud architecture patterns and service integrations.</li><li>Contribute to threat modeling and cloud risk assessments.</li><li>Ensure secure hybrid integration between on-prem and Azure environments.</li><li>Secure Active Directory and domain environments.</li><li>Implement GPO hardening and identity security controls.</li><li>Manage IAM, RBAC, MFA, and privileged access strategies.</li><li>Harden Windows/Linux servers and enterprise endpoints.</li><li>Oversee firewall configurations, IDS/IPS, VPN security, and segmentation.</li><li>Implement encryption and data protection strategies.</li><li>Perform vulnerability assessments and coordinate penetration testing.</li><li>Develop scripts and automation tools (PowerShell, Python, Bash) to enhance monitoring and compliance validation.</li><li>Integrate security controls within CI/CD pipelines (DevSecOps practices).</li><li>Monitor emerging threats, tools, and vulnerabilities.</li><li>Evaluate security technologies and recommend improvements.</li><li>Contribute to threat modeling exercises.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li><li>Conduct risk assessments and compliance audits.</li><li>Ensure adherence to CIS Benchmarks, NIST, ISO 27001.</li><li>Develop remediation guidance and contribute to policy development.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li></ul>Required Technical Expertise<ul><li>Deep technical understanding and hands on of:</li></ul>Cloud &amp; Security Platforms<ul><li>Cloud security.</li><li>Data protection strategies</li><li>Zero Trust Architecture</li></ul>Infrastructure &amp; Systems Security<ul><li>Active Directory and Microsoft 365 hardening</li><li>User devices security</li><li>Domain security best practices</li><li>Endpoint security solutions</li><li>Hybrid identity solutions</li></ul>DevSecOps &amp; Automation<ul><li>CI/CD security integration</li><li>Secure coding awareness</li><li>Security automation scripting</li></ul>Certifications (Required / Strongly Preferred)<ul><li>CISSP &ndash; Certified Information Systems Security Professional</li><li>CCSP &ndash; Certified Cloud Security Professional</li><li>CISM &ndash; Certified Information Security Manager</li><li>Microsoft Azure Security Engineer Associate (AZ-500)</li><li>CompTIA Security+ (Foundational)</li></ul>EducationBachelor&rsquo;s degree in Cyber Security, Computer Science, Information Systems, or related field (Master&rsquo;s preferred).Work Location: In person

Cybersecurity

Altec Industries

<div>Responsibilities
The Application Security Architect partners with software development, platform, cybersecurity, and cloud engineering teams to embed security throughout the modern software development lifecycle (SDLC). This role focuses on secure-by-design practices, DevSecOps strategy, roadmap and enablement, and risk-based vulnerability management across internally developed, third-party, SaaS, and cloud-native applications. The AppSec Architect serves as the strategic owner of the Application Security Roadmap, defines target-state AppSec maturity aligned to business growth, and prioritizes AppSec investments and tooling rationalization. The role serves as a trusted advisor to development teams and the key contributor to the organization&rsquo;s overall Secure Software Development Program.
Key Responsibilities
Secure SDLC &amp; DevSecOps
<ul><li>Embed application security controls into CI/CD pipelines, including automated SAST, DAST, IAST, SCA, secrets detection, and IaC scanning.
</li><li>Establish standardized security controls across platforms.
</li><li>Design exceptions and compensating controls.
</li><li>Partner with development teams to implement shift-left security while maintaining delivery velocity.
</li><li>Define and maintain secure coding standards, security design patterns, and reference architectures.
</li><li>Participate in architecture and design reviews, including threat modeling for new applications and major changes.
</li><li>Perform research and development (R&amp;D) into existing processes and tooling opportunities
</li></ul>Application &amp; Cloud Security Assessment
<ul><li>Identify and assess security risks in web, mobile, API, SaaS, and cloud-native applications developed internally or by third parties.
</li><li>Perform or coordinate:
<ul><li>Source code reviews (manual and automated)
</li><li>Application vulnerability assessments and penetration tests
</li><li>API and microservices security testing &amp; analysis
</li><li>Cloud configuration and IaC security reviews
</li></ul></li><li>Validate findings, reduce false positives, and prioritize remediation based on business risk.
</li><li>Establish reusable security architecture patterns for cloud-native and distributed systems.
</li></ul>Vulnerability &amp; Risk Management
<ul><li>Manage application security findings through a centralized vulnerability or risk management platform.
</li><li>Work with development teams to define practical, risk-based remediation guidance.
</li><li>Track remediation progress, verify fixes, and support exception/risk acceptance processes.
</li><li>Contribute to application security metrics, KPIs, and executive-level reporting.
</li><li>Translate technical debt and vulnerabilities into business risk and exposure.
</li></ul>Open Source &amp; Supply Chain Security
<ul><li>Assess and manage risks related to open-source dependencies, libraries, and third-party components.
</li><li>Support Software Composition Analysis (SCA) and software supply chain security initiatives (e.g., dependency hygiene, SBOMs).
</li><li>Evaluate security posture of third-party applications and vendors in collaboration with risk management team.
</li><li>Verify compliance with third-party component licensing models
</li></ul>Software Compliance
<ul><li>Lead software compliance activities related to application vulnerabilities, data exposure, or insecure design.
</li><li>Support application-related forensic analysis and root-cause investigations.
</li><li>Assist with compliance and assurance activities related to secure development (e.g., NIST, ISO, SOC, internal audits).
</li></ul>Enablement &amp; Education
<ul><li>Develop and deliver application security training for developers and cybersecurity team
</li><li>Provide hands-on guidance and documentation to improve developer security maturity.
</li><li>Act as a security champion advocate, helping teams make informed security decisions.
</li></ul>Required Education, Experience, and Skills
<ul><li>High School Diploma/GED Required
</li><li>Bachelor&rsquo;s Degree (Technical Degree Preferred) and 6 Years Relevant Experience OR 8 Years Relevant Experience
</li><li>12+ years of combined experience across software engineering, platform/cloud engineering, application security, &amp; DevSecOps / SRE with strong cybersecurity ownership preferred
<ul><li>5+ years in hands-on software engineering or platform/cloud engineering preferred
</li><li>7+ years in application security, DevSecOps, or secure architecture preferred
</li></ul></li><li>Strong understanding of modern SDLCs, Agile, and CI/CD practices.
</li><li>Hands-on experience with at least one major programming language (e.g., Java, C#, Python, JavaScript).
</li><li>Practical knowledge of:
<ul><li>Web, mobile, and API security
</li><li>Authentication and authorization models (OAuth2, OIDC, JWT, SAML)
</li><li>OWASP Top 10 and API Top 10
</li></ul></li><li>Familiarity with cloud platforms (AWS, Azure, and/or OCI) and cloud-native services.
</li><li>Working knowledge of networking fundamentals, encryption, and secure communications.
</li><li>Excellent written and verbal communication skills, with the ability to translate security risk into business impact.
</li></ul>Preferred / Beneficial Qualifications
<ul><li>Experience with application security tools such as SAST, DAST, IAST, SCA, secrets scanning, or IaC security platforms.
</li><li>Experience securing containers, Docker, and serverless workloads.
</li><li>Knowledge of Infrastructure as Code frameworks (e.g., Terraform, CloudFormation).
</li><li>Familiarity with threat modeling frameworks (e.g., STRIDE).
</li><li>Security or development certifications such as:
<ul><li>CSSLP, CISSP, GWAPT, GWEB, OSWE, or equivalent
</li><li>Cloud security certifications (AWS, Azure, or GCP)
</li></ul></li></ul>Behavioral &amp; Professional Expectations
<ul><li>Strong collaboration skills; ability to influence without authority.
</li><li>Comfortable balancing security risk with business and delivery priorities.
</li><li>Highly organized, detail-oriented, and self-directed.
</li><li>Customer-service mindset toward internal development teams.
</li><li>Ability to remain effective in fast-paced, evolving technical environments.
</li><li>Commitment to confidentiality, ethical conduct, and continuous improvement.
</li></ul>Additional Information
<ul><li>Travel: 0&ndash;25% (as needed)
</li><li>Work hours may occasionally include non-standard hours to support critical releases or incidents.
</li><li>Job level and scope may be adjusted based on experience and qualifications.
</li></ul>Experience Level Adjustmnt
Should the selected candidate meet the qualifications of a more experienced level in the career path, the job level may be adjusted.
Benefits
Altec offers a competitive salary that rewards performance and dedication, along with a comprehensive benefits package that includes:<ul><li>
Medical, Dental, Vision and Prescription Drug Program</li><li>
Retirement 401(k) Traditional or Roth Program Options with Company Match</li><li>
Vacation and Holidays</li><li>
Parental Leave</li><li>
Short Term and Long Term Disability Leave</li><li>
Flexible Spending Accounts</li><li>
Tuition Assistance Program</li><li>
Employee Assistance and Mental Health/Substance Abuse Program</li><li>
Life Insurance, Accidental Death and Dismemberment Insurance</li><li>
Supplemental Insurance including Hospital Indemnity, Critical Illness and Accident Insurance</li><li>
Additional Wellness Programs and Rewards Available</li></ul>
Why Join Altec?
If you're considering a career with Altec, there's never been a better time to join us! Our company was founded on values that place the customer first and prioritize our people as our greatest strength. Over the years, those values and our talented associates have helped us to earn the trust and confidence of customers worldwide. Today, Altec is an innovative, financially sound company that sets the standard of excellence in design, manufacturing and service &mdash; and that's why we're the ideal place for you to grow your career.
Founded in 1929, Altec is a privately held company headquartered in Birmingham, Alabama. Altec specializes in the manufacture, sale and service of aerial devices, digger derricks, cranes and specialty equipment for the electric utility, telecommunications, tree care, construction, and light and signs markets. We help our customers dig deeper and reach higher in more than 100 countries around the world.
EEO Statement
Altec Industries, Inc. and its affiliates are equal opportunity employers and maintain affirmative action plans to recruit, retain, develop, and promote qualified individuals without unlawful consideration of race, gender, color, religion, sexual orientation, gender identity, national origin, age, disability, citizenship status, veteran status, or any other characteristic protected by federal, state or local law. Altec strives to maintain a work environment free from unlawful discrimination and harassment, where associates are treated with respect and dignity.</div>

Application Security Architect

Openkyber

<div>Respond by: 04/08/2026 Rate: DOE Type: Contract Work Mode: Hybrid Location: Austin TX Please respond with resume and 3 references preferably supervisor (name, title, company, hirings@openkyber.com, phone number) Background Check will be performed if a candidate is selected for placement and will have to be passed
Job Description Cloud Security Architect Leads the design and implementation of secure-by-default architectures across cloud-native, microservices, and AI-enabled systems. Ensures compliance with state and federal frameworks while enabling modernization and transformation initiatives.
II. CANDIDATE SKILLS AND QUALIFICATIONS Minimum Requirements:
Candidates that do not meet or exceed the minimum stated requirements (skills/experience) will be displayed to customers but may not be chosen for this opportunity.
<ul><li>Years Required/Preferred Experience 8 Required experience in information security and systems architecture</li>
<li>8 Required experience in information security and systems architecture</li>
<li>Proven experience designing secure cloud-native architectures (AWS preferred)</li>
<li>8 Required In-depth knowledge of Texas Cybersecurity Framework (TCF) and NIST 800-53</li>
<li>8 Required Expertise in Identity and Access Management (IAM) and Zero Trust Architecture</li>
<li>8 Required Experience performing threat modeling for complex systems</li>
<li>8 Required Experience securing microservices, APIs, and containerized environments</li>
<li>8 Required Experience configuring cloud security posture management (CSPM) tools</li>
<li>8 Required Experience integrating security into DevSecOps pipelines</li>
<li>4 Preferred Familiarity with securing AI/LLM-based systems and data pipelines</li>
<li>4 Preferred Experience with data protection strategies for PII, PHI, and sensitive data</li>
<li>4 Preferred Experience presenting risk assessments to executive leadership</li>
<li>4 Preferred Ability to draft enterprise security policies and architecture standards</li>
<li>2 Preferred Certifications : CISSP, CISM, AWS Certified Security Engineer</li>
</ul>III. TERMS OF SERVICE
Services are expected to start 05/04/2026 and are expected to complete by 08/31/2026 . Total estimated hours per Candidate shall not exceed 780 hours. This service may be amended, renewed, and/or extended providing both parties agree to do so in writing.
IV. WORK HOURS AND LOCATION
For applications and inquiries, contact: hirings@openkyber.com</div>

Cloud Network Architect

<div>AI, Security Architect

At BNY, our culture allows us to run our company better and enables employees&rsquo; growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world&rsquo;s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance &ndash; and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.

We&rsquo;re seeking a future team member for the role of AI Security Architect to join our Cybersecurity team. This role can be in Pittsburgh, PA or Lake Mary, FL or NYC, NY.
Overview

BNY is seeking a AI Security Architect to lead the design, implementation, and governance of security controls for AI/ML systems across the enterprise. This role will define the target architecture and security patterns for AI-enabled products and platforms, ensuring resilient, compliant, and trustworthy AI. The ideal candidate combines deep expertise in cybersecurity and cloud with hands-on knowledge of modern AI/ML infrastructure, data protection, adversarial threat models, and secure MLOps.

Primary Responsibilities
<ul>
<li>Define enterprise AI security architecture: develop reference architectures, guardrails, and standards for secure data pipelines, model training/inference, and AI-integrated applications across on-prem and cloud.</li>
<li>Secure MLOps/ML platforms: architect identity, secrets management, network segmentation, and least-privilege access for feature stores, model registries, orchestration, and deployment pipelines.</li>
<li>Data protection by design: establish controls for sensitive data ingestion, anonymization/pseudonymization, encryption (at rest/in transit), tokenization, and lineage across AI workflows.</li>
<li>Adversarial ML defense: design controls and tests for model poisoning, evasion, model theft/exfiltration, prompt injection, jailbreaking, data leakage, and output manipulation.</li>
<li>AI supply chain security: govern third-party models, APIs, and datasets; enforce SBOMs for AI components; evaluate provenance, licensing, and dependency risk.</li>
<li>Policy and governance integration: translate AI security requirements into actionable standards and control evidence; align with enterprise risk, compliance, and model governance processes.</li>
<li>Threat modeling and security testing: lead threat modeling for AI systems; design red-teaming and secure evaluation methods for models and agents; integrate chaos/resilience testing.</li>
<li>Secure development lifecycle: embed AI-specific security checks (static/dynamic scans, IaC policy-as-code, data quality gates, bias/robustness checks) into CI/CD and change management.</li>
<li>Runtime protection: implementing guardrails, content filters, output validation, rate limiting, anomaly detection, and monitoring for AI services and agentic workflows.</li>
<li>Observability and incident response: define logging/telemetry (model inputs/outputs, drift, performance, safety events); integrate AI-specific playbooks into SOC operations.</li>
<li>Zero Trust for AI: design identity-aware access, micro-segmentation, and continuous verification for data scientists, services, and agents.</li>
<li>Privacy and ethics controls: partner with privacy and legal to operationalize consent, minimization, purpose limitation, and responsible AI guardrails, including human-in-the-loop where appropriate.</li>
<li>Resilience and continuity: design disaster recovery, backup/restore, model reproducibility, and contingency plans for AI platforms and critical use cases.</li>
<li>Vendor/platform assessments: evaluate cloud AI services, open-source frameworks, and commercial tools for security posture, compliance, and fit-for-purpose.</li>
<li>Risk management: lead control testing and risk assessments for AI initiatives; document residual risks and remediation plans; support audits and regulatory queries.</li>
<li>Reference implementations: deliver secure patterns, sample code, and automation (e.g., reusable Terraform/Policy-as-Code, secrets patterns, logging schemas) to accelerate adoption.</li>
<li>Stakeholder leadership: partner with platform engineering, data science, enterprise architecture, cyber operations, and product teams to drive end-to-end secure outcomes.</li>
<li>Coaching and enablement: build education and guidance for architects, data scientists, and engineers on secure AI practices, design patterns, and common pitfalls.</li>
<li>Continuous improvement: track emerging threats, standards, and best practices; lead updates to architecture and controls; measure effectiveness via KPIs and control health.</li>
</ul>
Required Qualifications
<ul>
<li>12 years in cybersecurity/enterprise security architecture with 3 years focused on AI/ML or data platform security at scale.</li>
<li>Expertise in cloud security (AWS/Azure/GCP) including identity, secrets management, key management (KMS/HSM), network segmentation, and policy-as-code.</li>
<li>Strong knowledge of AI/ML workflows: data ingestion/feature engineering, model training/inference, MLOps tooling (model registry, orchestrators, serving).</li>
<li>Practical experience with adversarial ML concepts and defenses; familiarity with model robustness, prompt injection risks, and secure evaluation methods.</li>
<li>Proficiency in designing observability/telemetry for AI systems (e.g., logging prompts/outputs, drift/quality metrics, safety events) with SIEM/SOAR integration.</li>
<li>Hands-on with infrastructure-as-code (Terraform/CloudFormation), CI/CD, and secure SDLC practices tailored to data/ML systems.</li>
<li>Deep understanding of data protection (encryption, tokenization, anonymization), privacy by design, and secure data lifecycle management.</li>
<li>Strong stakeholder management and communication skills; ability to convert complex risks into clear architecture decisions and implementation guidance.</li>
</ul>
Preferred Qualifications
<ul>
<li>Experience architecting secure AI agents and LLM applications including guardrails, content filters, and output validation.</li>
<li>Familiarity with standards and frameworks relevant to AI and data (e.g., NIST AI RMF, cloud CIS benchmarks, OWASP for ML/LLM, privacy controls).</li>
<li>Background in model governance and risk management (e.g., testing for drift, bias, stability, and explainability) and integration with enterprise control frameworks.</li>
<li>Programming/scripting proficiency (Python preferred) for reference implementations, automation, and security tooling integrations.</li>
<li>Experience with container security, Kubernetes, service mesh, and microservices patterns in AI platforms.</li>
<li>Prior leadership in enterprise-scale transformations, enabling secure adoption of AI across multiple business lines.</li>
</ul>
At BNY, our culture speaks for itself, check out the latest BNY news at:

BNY Newsroom

BNY LinkedIn
 Here&rsquo;s a few of our recent awards:
<ul>
<li>America&rsquo;s Most Innovative Companies, Fortune, 2025</li>
<li>World&rsquo;s Most Admired Companies, Fortune 2025</li>
<li>&ldquo;Most Just Companies&rdquo;, Just Capital and CNBC, 2025</li></ul> 
 
Our Benefits and Rewards:

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life&rsquo;s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter. 
BNY assesses market data to ensure a competitive compensation package for our employees. The base salary for this position is expected to be between $142,000 and $259,000 per year at the commencement of employment. However, base salary if hired will be determined on an individualized basis, including as to experience and market location, and is only part of the BNY total compensation package, which, depending on the position, may also include commission earnings, discretionary bonuses, short and long-term incentive packages, and Company-sponsored benefit programs. 
This position is at-will and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation) at any time, including for reasons related to individual performance, change in geographic location, Company or individual department/team performance, and market factors.</div>

AI Security Architect

Apex Technology

<div>Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge.
For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles.
Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more.
We&rsquo;d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet.<h1 class="jobSectionHeader">
About the Role</h1>
We are seeking a Cloud Security Engineer to design, implement, maintain, and optimize secure cloud environments supporting U.S. government, DoD, and intelligence community missions. 
 
This role plays a critical part in protecting classified and sensitive data in AWS, Azure, and hybrid/multi-cloud infrastructures while ensuring full compliance with federal standards such as NIST 800-53, FedRAMP, RMF, and DoD Impact Levels (IL-4/IL-5).
 
 
The candidate must hold an active Secret clearance (TS/SCI preferred) and bring hands-on experience securing cloud platforms in regulated environments. This role will help the organization meet industry standards such as SOC2, ISO 27001, PCI-DSS, GDPR/CCPA, or other relevant compliance frameworks.<h1 class="jobSectionHeader">
Responsibilities:
</h1><ul><li>Design and implement secure cloud architectures and configurations across AWS GovCloud, Azure, and/or Google Cloud, applying best practices for least privilege encryption, network segmentation, and data protection.</li><li>
Implement and maintain cloud security frameworks, ensuring ongoing compliance with NIST 800-53 Rev. 5, FedRAMP, DoD IL-2/4/5, RMF, and Secure Cloud Computing Architecture (SCCA) requirements.</li><li>
Configure and manage Identity and Access Management (IAM), Role-Based Access Control (RBAC), Just-In-Time (JIT) access, Key Vaults, and Zero Trust Architecture (ZTA) principles across cloud environments.
</li><li>Engineer, deploy, and optimize cloud-native security tools, including Microsoft Defender for Cloud, Azure Sentinel, AWS GovCloud security services, CSPM/CWPP solutions, and SIEM (Elastic) platforms for threat detection, monitoring, and response.</li><li>
Conduct vulnerability assessments, penetration testing simulations, security configuration reviews (against STIGs, CIS benchmarks, and NIST controls), and continuous 
monitoring of cloud resources.</li><li>
Develop, maintain, and update System Security Plans (SSP), Security Assessment Reports (SAR), Plans of Action &amp; Milestones (POA&amp;M), and risk/compliance reporting for cloud-based operations.</li><li>
Identify, analyze, and respond to Indicators of Compromise (IoCs), threat intelligence, and security incidents within cloud environments; perform root-cause analysis and implement preventive controls.
</li><li>Perform periodic security reviews and audits of cloud environments (Azure, AWS, hybrid) to ensure sustained compliance, mitigate evolving threats, and update policies/procedures.</li><li>
Collaborate with DevSecOps, infrastructure, and development teams to integrate security into CI/CD pipelines, automate security controls, and support secure cloud migrations or 
modernization initiatives.</li><li>
Assess current cloud architectures, propose security improvements, review designs through a security lens, and serve as a subject-matter expert on cloud security tools, 
processes, and best practices.</li><li>
Coordinate with configuration management teams to ensure hardware/software changes adhere to security protocols, maintain version control, and support documentation of the cyber terrain.</li><li>
Develop, enforce, and maintain cloud security policies, standards, and automated guardrails to support secure CI/CD pipelines and infrastructure-as-code (IaC) practices (e.g., using Terraform, CloudFormation).</li><li>
Monitor cloud environments for security incidents, investigate alerts, perform root-cause analysis, and coordinate incident response activities.
</li><li>Identify emerging threats and recommend proactive improvements to cloud security posture, including automation of security controls and processes.</li><li>
Provide guidance and training to engineering teams on secure cloud design patterns and best practices.</li><li>
Ability to be on-site 5 days a week at our office Playa Vista.
</li></ul><h1 class="jobSectionHeader">Requirements:</h1><ul><li>
Security Clearance: Active U.S. Secret clearance required (TS/SCI)</li><li>
Must be a U.S. citizen.</li><li>
Education: Bachelor&rsquo;s degree in Cybersecurity, Information Assurance, Computer Science, or a related field (or 5+ years equivalent professional experience in cloud security engineering)</li><li>
Experience: 5&ndash;9+ years in cloud security engineering, with hands-on work in AWS GovCloud, Azure, Google GCP, or multi-cloud environments.
</li><li>Strong analytical, problem-solving, communication, and collaboration skills; ability to work in fast-paced, mission-critical environments. 
 
<h1 class="jobSectionHeader">Technical Skills:</h1><ul><li>
Deep knowledge of cloud platforms (AWS GovCloud, Azure Government, etc.), IAM/RBAC, encryption, network security, and cloud-native security services.</li><li>
Familiarity with SIEM, vulnerability scanners, threat intelligence, and automation tools (e.g., Terraform, Python scripting).</li><li>
Experience with compliance frameworks (NIST, FedRAMP, RMF) and tools like Azure Sentinel, NESSUS, BURP SUITE, Microsoft Defender, or AWS equivalents.</li><li>
Deep understanding of network security, encryption, logging/monitoring, and container/Kubernetes security.</li><li>
Experience with infrastructure-as-code, scripting (Python, PowerShell, etc.), and security automation tools.</li></ul></li><li>
Additional Certifications:
<ul><li>CISSP, AWS Certified Security-Specialty, AWS Certified Solutions Architect (Associate or Professional), Microsoft Certified: Security, Compliance &amp; Identity, Security+, CEH, or CSSP related (e.g., CySA+, GCIH).</li></ul></li></ul><h1 class="jobSectionHeader">
Why Join Apex?</h1>
Apex believes in creating a work environment that you look forward to embracing every day. Our employees love working at Apex, and we want you to love it too. We're a fast-growing startup backed by $200M in Series D funding, and we invest heavily in our people from day one.<h2 class="jobSectionHeader">
What We Offer For Full-time Employees:</h2><ul><li>
Shared upside: Receive equity in Apex, letting you benefit from the work you create</li><li>
Best-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost</li><li>
Comprehensive PTO package to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays</li><li>
Competitive 401(k) plan with generous matching - 100% match on first 3%, 50% on next 2%</li><li>
8 weeks paid parental leave plus childcare reimbursement up to $350/day for work-related travel</li><li>
Daily catered lunch and unlimited snacks to keep you fueled throughout the day</li><li>
Vibrant community: Monthly office BBQs, pickleball tournaments, run club, and social gatherings for you and your family</li><li>
Your dream desk setup and all the tools you need to be your most productive self</li><li>
World-class Playa Vista office with EV chargers, with the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life</li><li>
Real impact opportunity: Work alongside experts from aerospace, new space, and other cutting-edge industries to make a lasting difference</li></ul>
Ready to join a team where your contributions matter and your future is bright? Let's build something extraordinary together.<h1 class="jobSectionHeader">
Equal Opportunity Employer</h1>
Apex Technology, Inc. is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Candidates and employees are always evaluated based on merit, qualifications, and performance. We will never discriminate on the basis of race, color, gender, national origin, ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability, or any other legally protected status.
Compensation Range: $120K - $170K</div>

Cloud Security Engineer

Concentrix

<div>
 
 Job Title
 
 
 
 Cloud Resiliency Architect with English and Arabic
 
 
 We are seeking a Resiliency Engineer to lead advisory workshops for our clients with developing cloud architectures. The successful candidate will play a critical role in advising on and designing strategies that enhance the resilience of cloud environments. The focus is on concepts and practices including high availability, disaster recovery planning, business continuity planning, major incident response plans, and formal risk assessments.
 
 
 
 Languages: French and English
 
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Lead advisory workshops to assist clients in building resilient cloud architectures.
 </li>
 <li>
 Advise on strategies to improve system reliability and availability.
 </li>
 <li>
 Develop and implement disaster recovery and business continuity plans.
 </li>
 <li>
 Conduct formal risk assessments to identify potential vulnerabilities.
 </li>
 <li>
 Design major incident response plans to mitigate and manage disruptions effectively.
 </li>
 <li>
 Collaborate with client teams to understand their architectural needs and provide tailored solutions.
 </li>
 <li>
 Educate clients on best practices for building resilient systems.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 <ul>
 <li>
 A minimum of 3 years of experience in cloud resiliency engineering or related fields.
 </li>
 <li>
 Demonstrated exposure to Site Reliability Engineering concepts.
 </li>
 <li>
 Strong understanding of high availability, disaster recovery, and business continuity planning.
 </li>
 <li>
 Experience in conducting risk assessments and developing incident response plans.
 </li>
 <li>
 Ability to communicate complex technical concepts to non-technical stakeholders.
 </li>
 <li>
 Excellent interpersonal and communication skills, with the ability to lead workshops and engage with diverse client teams.
 </li>
 </ul>
</div>

Cloud Resiliency Architect with English and Arabic

Search 3301+ Cloud security architect jobs near you this June. New roles added regularly across leading industries. Apply today.