data engineer

software engineer

ai engineer

ai engineer – remote | $40 –$50/hr Jobs in New York

ai engineer – remote | $40 –$50/hr

ai solutions engineer - hybrid Jobs in New York

ai solutions engineer - hybrid

cybersecurity engineer

Morgan Stanley

<div>We're seeking someone to join our PKI and Secrets Management team as a Cybersecurity engineer with a strong focus on both engineering and operations in Data Protection Services department to design, implement, and support enterprise cryptographic solutions, including Public Key Infrastructure (PKI), Hardware Security Modules (HSM), certificate lifecycle and secrets management tools.
 
 
In the Technology division, we leverage innovation to build the connections and capabilities that power our Firm, enabling our clients and colleagues to redefine markets and shape the future of our communities.
This is an engineering position at Director level, which is part of the job family responsible for engineering and operations of cryptographic solutions and also responsible for providing specialist cyber expertise and creating solutions that protect the organization's systems and networks against actual and potential security threats and vulnerabilities. 
 
Since 1935, Morgan Stanley is known as a global leader in financial services, always evolving and innovating to better serve our clients and our communities in more than 40 countries around the world.
 
 
What you'll do in the role:
<ul><li>Communicate regularly with product leads across the organization and discuss opportunities for improvement to existing and future technology solutions.
</li><li>Design, implement, and maintain enterprise cryptographic infrastructure, including PKI, HSMs, and certificate management platforms.
</li><li>Manage the full certificate lifecycle (issuance, renewal, revocation, and deployment) to ensure security, availability, and compliance.
</li><li>Engineer and support secure key management solutions leveraging HSMs, including key generation, storage, rotation, and backup.
</li><li>Monitor and operate cryptographic services in a 24/7 environment (on call rotations), ensuring high availability, incident response, and performance optimization.
</li><li>Automate certificate and key management processes to reduce manual effort and minimize operational risk.
</li><li>Collaborate with application, infrastructure, and security teams to integrate cryptographic controls into enterprise systems and cloud environments.
</li><li>Support the evaluation, design, and adoption of Post-Quantum Cryptography (PQC) capabilities, including PQC-enabled PKI environments, crypto-agility strategies and transition planning What you'll bring to the role:
</li><li>Ability to effectively manage multiple functions and initiatives.
</li></ul>What you will bring :
<ul><li>Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
</li><li>5+ years of hands-on experience in cybersecurity engineering or operations, with exposure to cryptographic services (PKI, HSMs, certificate management).
</li><li>Strong understanding of cryptographic principles, protocols, and standards (e.g., TLS, X.509, key exchange, encryption algorithms).
</li><li>Proven experience managing PKI environments and certificate lifecycle tools in enterprise and/or cloud environments.
</li><li>Hands-on experience with HSM technologies and key management practices, including secure key generation, storage, rotation, and backup.
</li><li>Familiarity with automation and scripting (e.g., Python, PowerShell, or similar) to streamline certificate and key management processes.
</li><li>Knowledge of emerging cryptographic trends, including Post-Quantum Cryptography (PQC) and crypto-agility concepts; relevant certifications such as CISSP, CISM, or vendor-specific PKI/HSM certifications are preferred.
</li></ul>We are committed to maintaining the first-class service and high standard of excellence that have defined Morgan Stanley for over 89 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren&rsquo;t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you&rsquo;ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There&rsquo;s also ample opportunity to move about the business for those who show passion and grit in their work. To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.
WHAT YOU CAN EXPECT FROM MORGAN STANLEY:
At Morgan Stanley, we raise, manage and allocate capital for our clients &ndash; helping them reach their goals. We do it in a way that&rsquo;s differentiated &ndash; and we&rsquo;ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren&rsquo;t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you&rsquo;ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There&rsquo;s also ample opportunity to move about the business for those who show passion and grit in their work.
To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser.
Expected base pay rates for the role will be between 120,000 and 165,000 per year at the commencement of employment. However, base pay if hired will be determined on an individualized basis and is only part of the total compensation package, which, depending on the position, may also include commission earnings, incentive compensation, discretionary bonuses, other short and long-term incentive packages, and other Morgan Stanley sponsored benefit programs.
Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents.
Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences.
For more information, please visit : https://www.morganstanley.com/people-opportunities/eeo .</div>

Cybersecurity Engineer - Cryptography - Director

Drawbridge

<div>
 
 Cybersecurity Engineering Associate, Hybrid
 
 Hybrid, NYC: 3 days in office and 2 days remote
 
 
 
 Must be authorized to work in the United States without the need for sponsorship
 
 
 
 
 
 
 Working at Drawbridge
 
 
 
 
 At Drawbridge, we are committed to attracting and retaining the best individuals who enjoy working in a dynamic environment.   You will be joining an agile team that will help you at every level of your career to identify and use your strengths to grow. This is an opportunity to work at a company that is open to new ideas as we build a dynamic and diverse environment for our employees. The work will be challenging and rewarding.  You will gain hands-on experience from a team who strives to see its employees succeed.  Working in Client Advisory You will be joining a team of technical consultants who have a passion for understanding and defending against emerging cyber threats.  Our clients rely on our expertise to help them navigate the constantly changing cybersecurity landscape, and our team of consultants pair their technical knowledge and industry insight to offer critical risk management advice. The technical advisory team works as a collaborative unit, with each member bringing a unique technical skillset to the table.
 
 
 
 
 Our Values
 
 
 
 <ul>
 <li>
 Innovation: As the market leader, Drawbridge draws on its in-depth, collective expertise in its constant effort to innovate both our platform and our approach to service
 </li>
 <li>
 Integrity: Our clients and partners lean on us because they know we are trustworthy and honor what we say
 </li>
 <li>
 Collaboration: We are here to win, and we only win when we work together across team
 </li>
 <li>
 Diversity: We are inclusive. We honor, respect, and appreciate each other&rsquo;s differences and perspectives
 </li>
 </ul>
 
 
 
 In this role you will
 
 
 
 <ul>
 <li>
 Establish and maintain relationships with clients, IT providers, and other service providers
 </li>
 <li>
 Implement vulnerability scanning solutions and provide guidance to clients
 </li>
 <li>
 Deploy proprietary vulnerability scanning solutions
 </li>
 <li>
 Coordinate with clients to ensure successful scan appliance installation, and troubleshooting when necessary
 </li>
 <li>
 Validate functionality of scanning solutions and generate vulnerability findings reports
 </li>
 <li>
 Identify and communicate tasks necessary to remediate identified risks and vulnerabilities to client stakeholders
 </li>
 <li>
 Lead demonstrations of Drawbridge&rsquo;s vulnerability management platform
 </li>
 <li>
 Schedule and run external and internal vulnerability scans
 </li>
 <li>
 Assist with scanning product maintenance and development
 </li>
 <li>
 Develop and refine deployment processes to increase installation efficiency
 </li>
 <li>
 Assist with scoping vulnerability scanning engagements to determine the best solution for clients
 </li>
 <li>
 Troubleshoot issues related to scan job completion
 </li>
 <li>
 Work with client IT teams and external IT providers to deploy scanning software packages to client machines
 </li>
 <li>
 Manage tasks and projects while adhering to strict deadlines, escalating where necessary
 </li>
 <li>
 Manage client expectations and proactively communicate to ensure those expectations are met
 </li>
 <li>
 Bring a self-starter mentality. Identify gaps, propose solutions, and drive tasks to completion from start to finish
 </li>
 <li>
 Continuously learn and advance your cybersecurity knowledge, bringing new insights back to both client engagements and the broader team
 </li>
 </ul>
 
 
 
 You have
 
 
 
 <ul>
 <li>
 Knowledge of networking concepts such as DNS, DHCP, network segmentation, subnetting, and network topology
 </li>
 <li>
 Knowledge of IT infrastructure including but not limited to Windows Server OS, virtualization solutions, Windows OS, switches, and firewalls
 </li>
 <li>
 1 &ndash; 2 years&rsquo; experience in a client/customer facing role
 </li>
 <li>
 Understanding of basic security controls related to endpoint protection, user account security, and network security
 </li>
 <li>
 Experience discussing technical concepts with a non-technical audience
 </li>
 <li>
 Experience with Linux systems management
 </li>
 <li>
 Ability to work independently and identify areas requiring additional efficiency
 </li>
 </ul>
 
 
 
 Nice if you have
 
 
 
 <ul>
 <li>
 Network +, Security +, CEH, SSCP certifications
 </li>
 <li>
 Knowledge of security standards and frameworks such as, but not limited to, NIST, CIS, COBIT, etc
 </li>
 <li>
 Experience conducting vulnerability assessments
 </li>
 <li>
 Experience with Salesforce
 </li>
 <li>
 Previous experience with vulnerability management software such as Qualys, Nessus, Tenable, etc
 </li>
 <li>
 Knowledge of hedge fund, private equity, or RIA operations/compliance
 </li>
 </ul>
 
 
 
 Base Salary Range
 
 
 
 <ul>
 <li>
 $70K-$80K per year
 </li>
 </ul>
 
 About Drawbridge Drawbridge is a premier provider of cybersecurity software and solutions to the alternative investment industry. Its proprietary platform helps firms exceed and manage their governance, risk, and compliance (GRC) requirements while combatting sophisticated cyber threats and third-party risks. Drawbridge's platform connects business, compliance, and IT to empower firms to centralize and manage their most robust security programs, improve their risk profile, and raise institutional capital. With a tested team focused on value delivery and a 900+ strong customer base, Drawbridge offers unmatched customer service and flexibility to help businesses proactively manage vulnerabilities, plan for growth, and reduce complexity. At Drawbridge, we are committed to attracting and retaining the best individuals who enjoy working in a dynamic environment Our Hiring Process We want to hire the most qualified individuals.  We have designed a multi-step selection process that may include interviews and assessments.  We make decisions quickly and we are eager to get to know you.
 
 
 Affirmative Action and Equal Opportunity Employer Drawbridge Partners, LLC is an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based on race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, non-disqualifying physical or mental disability, protected veteran status, or any other legally protected characteristic, in accordance with applicable law.  All employment is decided on the basis of qualifications, merit, and business needs
 
</div>

Cybersecurity Engineering Associate (Hybrid – NYC)

CVS Health

<div>We&rsquo;re building a world of health around every individual &mdash; shaping a more connected, convenient and compassionate health experience. At CVS Health&reg;, you&rsquo;ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger &ndash; helping to simplify health care one person, one family and one community at a time.
Position Summary
The Principal Threat Detection Engineer serves as a senior, highly technical individual contributor responsible for the design, implementation, and continuous evolution of advanced threat detection capabilities across the enterprise. This role owns the development and optimization of detection logic leveraging Microsoft Security tooling, CrowdStrike, Splunk Cloud, Cribl, and related SOC platforms to identify sophisticated adversary activity spanning endpoint, network, and cloud environments. A core focus of the role is proactive threat hunting and the identification of behavioral indicators that improve visibility into novel and emerging attack techniques.
In this capacity, the Principal Threat Detection Engineer leads detection engineering strategy and execution, building, tuning, and automating high‑fidelity alerts using SIEM and analytics platforms such as Splunk Cloud, Microsoft Sentinel, and Cribl. The role applies deep knowledge of query languages (including KQL) and custom detection logic to reduce noise, improve precision, and increase analyst efficiency. Detection capabilities are continuously iterated based on adversary tradecraft, environmental changes, and lessons learned from active investigations and simulations.
The role operates at the intersection of offensive and defensive security, collaborating closely with threat hunting, incident response, and purple team partners to translate adversary emulation and penetration testing findings into actionable detection improvements aligned to the MITRE ATT&amp;CK framework. The position integrates threat intelligence and supports active incident investigations by providing insight into attacker behavior and detection blind spots. Through continuous innovation and a strong understanding of regulatory and compliance considerations (e.g., PCI-DSS, HIPAA, NIST, ISO 27001), the Principal Threat Detection Engineer strengthens the organization&rsquo;s overall detection maturity and cyber resilience.
Role Responsibilities:
Detection Engineering &amp; Threat Hunting<ul><li>
Design, deploy, and continuously optimize high‑fidelity detections across SIEM platforms including Microsoft Sentinel, Splunk Cloud, and Cribl.</li><li>
Lead proactive threat hunting using Microsoft Defender, CrowdStrike, and other SOC tools to identify advanced and emerging adversary activity.</li><li>
Develop custom detection logic and automation using KQL, SPL, and scripting, iterating based on threat intelligence and environmental changes.</li></ul>
Adversary Emulation &amp; Purple Teaming<ul><li>
Design and execute adversary emulation and purple team exercises to evaluate and improve detection and response effectiveness.</li><li>
Partner with defensive teams to translate offensive findings into actionable improvements aligned to the MITRE ATT&amp;CK framework.</li><li>
Support penetration testing efforts and produce actionable assessments highlighting detection gaps and remediation opportunities.</li></ul>
Threat Intelligence &amp; Incident Response Support<ul><li>
Integrate internal and external threat intelligence into detection strategies to prioritize risk and adapt alert logic.</li><li>
Support active incident investigations by providing insight into adversary tactics, detection blind spots, and response opportunities.</li></ul>
Detection Strategy &amp; Risk Visibility<ul><li>
Contribute to the development of enterprise‑wide threat detection strategy aligned with risk management objectives.</li><li>
Communicate detection coverage, gaps, and effectiveness to security leadership through clear, actionable reporting.</li></ul>
Required Qualifications<ul><li>
10+ years of experience in threat detection, hunting, penetration testing, and/or offensive security.</li><li>
7+ years of experience in Microsoft Security tools (Defender for Endpoint, Sentinel), CrowdStrike, Splunk Cloud, and Cribl.</li><li>
5+ years of experience with KQL, SPL, Python, PowerShell, or Bash scripting for automation and detection logic.</li></ul>
Preferred Qualifications<ul><li>
Relevant certifications such as OSCP, GCIH, GCIA, CISSP, CEH, or Microsoft Azure Certification.</li><li>
Experience in managing or participating in purple team exercises.</li><li>
Familiarity with compliance standards like PCI-DSS, HIPAA, or ISO 27001.</li><li>
Strong understanding of the MITRE ATT&amp;CK framework and security standards (NIST, CIS).</li><li>
Strong communication skills to convey complex security issues to non-technical stakeholders.</li></ul>
Education<ul><li>
Bachelor&rsquo;s degree or equivalent experience (High School Diploma and 4 years relevant experience)</li></ul>
Pay Range
The typical pay range for this role is:
$144,200.00 - $288,400.00 
This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. This position also includes an award target in the company&rsquo;s equity award program. 
Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.
Great benefits for great people
We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families. 
This full‑time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well‑being of colleagues and their families. The benefits for this position include medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources, based on eligibility. 
Additional details about available benefits are provided during the application process and on Benefits Moments. 
We anticipate the application window for this opening will close on: 05/11/2026
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.</div>

Principal Threat Detection Engineer - Blue Team

FluidStack

<div><div><div>New York, NY,Austin, TX,San Francisco, CA
 </div></div><div>Full Time</div></div>
 <div><h1 class="jobSectionHeader">About Fluidstack</h1>
At Fluidstack, we build the compute, data centers, and power that will fuel artificial superintelligence. We supply GWs of compute capabilities to the world&rsquo;s biggest AI Labs at industry-defining speeds.
Our team is small, fast, and obsessed with quality. We own outcomes end-to-end, challenge assumptions, and treat our customers' problems as our own. No task is beneath anyone here.
There are a few thousand people who will shape the trajectory of superintelligence. Come and be one of them.
<h1 class="jobSectionHeader">About the Role</h1>
Fluidstack is looking for a seasoned Senior / Staff Network Security Engineer to spearhead our security strategy and defend our fast-growing cloud platform. You will design and deploy advanced safeguards concentrated on the network perimeter, ensuring our edge remains secure, resilient, and reliable at massive scale. Operating in a high-throughput environment, you&rsquo;ll keep our infrastructure and services protected while earning trust across the organization. The ideal hire brings +5 years of deep expertise in modern cloud and network architectures&mdash;and a passion for cultivating a security-first culture through mentorship and leadership.
Focus
<ul><li>Perimeter &amp; Edge Security Design: Architect and deploy resilient protections at the network edge &mdash;including perimeter firewalls, proxy layers, WAFs, and CDN-based controls&mdash;to shield Fluidstack&rsquo;s globally distributed footprint. Every ingress point and service should be hardened against unauthorized activity and attack vectors.
</li><li>DDoS Resilience: Create and maintain sophisticated DDoS-defense programs that preserve uptime. Continuously analyze traffic, fine-tune safeguards such as rate-limiting and traffic filtering, and react decisively to volumetric spikes or atypical patterns.
</li><li>Driving Zero-Trust: Lead the rollout of a Zero-Trust model across Fluidstack&rsquo;s cloud and network domains. Engineer solutions that enforce least-privilege, continuous verification, and service micro-segmentation, eliminating implicit trust at every tier.
</li><li>Monitoring &amp; Incident Handling: Stand up comprehensive network-security monitoring to surface threats early. Detect indicators of compromise, hunt for vulnerabilities, and orchestrate rapid incident-response actions to limit blast radius.
</li><li>Cross-Team Partnership: Collaborate closely with Networking, Infrastructure, SRE/DevOps, and Software Engineering to embed security best practices into designs, deployments, and pipelines. Offer expert input during architecture and code reviews to guarantee security-by-design.
</li><li>Leadership &amp; Mentoring: Champion security initiatives and cultivate a security-first culture. Coach junior engineers and peer teams on network-security fundamentals, deliver training, and model strict adherence to policies and standards.
</li><li>Policy Stewardship: Author, refine, and enforce security policies and SOPs suited to a highly scalable, distributed environment. Periodically reassess network and cloud-security posture, ensuring alignment with industry benchmarks as the company scales.
</li></ul>About You
<ul><li>Proven Experience: 5 + years in hands-on network-security engineering, protecting large-scale cloud or hyperscale environments and complex distributed systems.
</li><li>Edge-Security Mastery: Deep expertise in edge-protection technologies - DDoS mitigation, web-exploit defense, and Zero-Trust implementations.
</li><li>Cloud &amp; Network Know-How: Strong conceptual and practical command of modern cloud and network security. Proficient in protocols (TCP/IP, DNS, BGP, HTTP/S), segmentation, VPNs, and firewall tuning; experienced securing AWS, GCP, Azure, or bespoke hyperscale and containerized platforms.
</li><li>Security Leadership: Demonstrated ability to own security programs end-to-end, mentor engineers, and instill a security-centric mindset across varied teams.
</li><li>Collaborative Communicator: Excellent at partnering with Networking, Infrastructure, DevOps/SRE, and Software groups to craft security solutions that protect critical assets while empowering the business.
</li><li>Policy &amp; Compliance Expertise: Skilled in crafting and evaluating security controls for massively scalable systems, and familiar with frameworks such as NIST, ISO 27001, and SOC 2 in cloud contexts.
</li></ul>Nice to haves
<ul><li>Hyperscale Background: Experience inside a top-tier cloud provider or hyperscale setting (FAANG-class or similar) and familiarity with unique security challenges at extreme scale.
</li><li>DDoS/WAF Toolset: Acquainted with enterprise-grade DDoS and web-application-security platforms - Cloudflare, AWS Shield, Akamai, Arbor, F5, etc. - and adept at tuning WAF rules and traffic-scrubbing tactics.
</li><li>Zero-Trust &amp; IAM: Hands-on design of Zero-Trust networks, including IAM, SSO, MFA, and NAC solutions.
</li><li>Automation &amp; Scripting: Comfortable scripting or coding (Python, Go, etc.) to automate security workflows, integrate tools, and secure IaC and CI/CD pipelines.
</li><li>Certifications: Credentials such as CISSP, CCSP, GIAC (GSEC, GCIH, &hellip;), or cloud-security specialties (AWS/Azure) that attest to a solid security foundation.
</li><li>Lifelong Learner: Active in the security community or open-source projects, with current knowledge of emerging threats, vulnerabilities, and defenses in network and cloud security.
</li></ul>Salary &amp; Benefits
<ul><li>Competitive total compensation package (salary + equity).
</li><li>Retirement or pension plan, in line with local norms.
</li><li>Health, dental, and vision insurance.
</li><li>Generous PTO policy, in line with local norms.
</li></ul>The base salary range for this position is $200,000 - $350,000 per year, depending on experience, skills, qualifications, and location. This range represents our good faith estimate of the compensation for this role at the time of posting. Total compensation may also include equity in the form of stock options.
We are committed to pay equity and transparency.
Fluidstack is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans&rsquo; status, or any other characteristic protected by law. Fluidstack will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.
You will receive a confirmation email once your application has successfully been accepted. If there is an error with your submission and you did not receive a confirmation email, please email careers@fluidstack.io with your resume/CV, the role you've applied for, and the date you submitted your application- someone from our recruiting team will be in touch.</div>

Staff Network Security Engineer

<div><div><div>New York, NY,Austin, TX,San Francisco, CA
 </div></div><div>Full Time</div></div>
 <div><h1 class="jobSectionHeader">About Fluidstack</h1>
At Fluidstack, we build the compute, data centers, and power that will fuel artificial superintelligence. We supply GWs of compute capabilities to the world&rsquo;s biggest AI Labs at industry-defining speeds.
Our team is small, fast, and obsessed with quality. We own outcomes end-to-end, challenge assumptions, and treat our customers' problems as our own. No task is beneath anyone here.
There are a few thousand people who will shape the trajectory of superintelligence. Come and be one of them.
<h1 class="jobSectionHeader">About the Role</h1>
Fluidstack is building the security infrastructure that underpins one of the most consequential computing platforms in the world: data center infrastructure serving frontier AI customers at scale. As a Security Engineer, Infrastructure, you will be the hands-on technical owner of the systems and pipelines that make our security program run: SIEM and date warehouse architecture, data ingestion and enrichment, security tool engineering, and the infrastructure that ties it all together. You will work directly with every other member of the security team, and other technical teams, to design, build, and operationalize a modern security stack from the ground up &mdash; spanning IT, OT, cloud, and bare metal environments &mdash; and you will embed security rigor into Fluidstack's software development lifecycle as we scale our engineering organization. This is not a role for someone who wants to maintain what already exists. It is a role for someone who wants to build what doesn't yet.
<h1 class="jobSectionHeader">Focus</h1>
<ul><li>Play a key role in the design, deployment, and operation of Fluidstack's security tooling and data infrastructure, including log source onboarding, detection engineering, alert tuning, and pipeline management across IT and OT environments
</li><li>Help architect and maintain the security data platform &mdash; managing ingestion, normalization, enrichment, and routing of security telemetry from endpoints, network infrastructure, cloud environments, OT/ICS systems, and physical security tooling
</li><li>Build and manage integrations between security tools and data systems, including EDR, vulnerability management, SOAR, CASB, and identity platforms
</li><li>Embed security controls and review processes into the software development lifecycle, including CI/CD pipeline security, secrets management, artifact integrity, and code review support for security-relevant changes
</li><li>Develop and maintain tooling for automated security data collection, normalization, and quality validation across diverse source types
</li><li>Collaborate with network, infrastructure, and IT teams to ensure security instrumentation is complete and accurate across all Fluidstack environments, including multi-site data center facilities
</li></ul><h1 class="jobSectionHeader">About You</h1>
<ul><li>2+ years designing, implementing, configuring, and/or maintaining security infrastructure and security tooling
</li><li>Experience with common cloud and virtualization technologies and capabilities
</li><li>Experience with security system architecture
</li></ul><h2 class="jobSectionHeader">Salary &amp; Benefits</h2>
<ul><li>Competitive total compensation package (salary + equity).
</li><li>Retirement or pension plan, in line with local norms.
</li><li>Health, dental, and vision insurance.
</li><li>Generous PTO policy, in line with local norms.
</li></ul>The base salary range for this position is $170,000 - $220,000 per year, depending on experience, skills, qualifications, and location. This range represents our good faith estimate of the compensation for this role at the time of posting. Total compensation may also include equity in the form of stock options.
We are committed to pay equity and transparency.
Fluidstack is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans&rsquo; status, or any other characteristic protected by law. Fluidstack will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.
You will receive a confirmation email once your application has successfully been accepted. If there is an error with your submission and you did not receive a confirmation email, please email careers@fluidstack.io with your resume/CV, the role you've applied for, and the date you submitted your application- someone from our recruiting team will be in touch.</div>

Security Engineer, Infrastructure

<div>We&rsquo;re building a world of health around every individual &mdash; shaping a more connected, convenient and compassionate health experience. At CVS Health&reg;, you&rsquo;ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger &ndash; helping to simplify health care one person, one family and one community at a time.
Position Summary
The Staff Engineer, Regulatory Technology Engineering is responsible for the development and delivery of technology solutions that support the strategic direction of technology compliance and audit management for CVS Health&rsquo;s Digital, Data, Analytics &amp; Technology (DDAT) Compliance organization. This role applies deep technical expertise to design, modernize, and operationalize technology solutions that support SOX, SOC 1, SOC 2, PCI, HITRUST, NIST 800‑53, NYDFS, and other cybersecurity and regulatory frameworks.
The role partners closely with engineering teams, process and control owners, and security architects to develop robust, audit‑ready control environments and automate evidence collection for complex, modern technology stacks, including cloud‑native platforms, distributed systems, AI/ML solutions, and DevSecOps implementations. This role requires an engineering mindset and the ability to translate regulatory requirements into scalable technical controls, automated testing approaches, and measurable compliance indicators.
You will contribute to the development and continuous improvement of compliance tooling, control processes, dashboards, and metrics. Additionally, you will collaborate with IT, business partners, Learning and Development, Internal Audit, Legal, and external assessors to ensure alignment, transparency, and consistent execution of the technology compliance program.<div></div>
Required Qualifications<ul><li>
7+ years of software engineering or software development experience, with a strong understanding of modern architectures and engineering practices</li><li>
7+ years of technical project leadership experience, supporting engineering initiatives on cross‑functional teams in highly collaborative environments</li><li>
5+ years of experience in internal audit, external assessments, risk management, regulatory compliance, or information security within a corporate environment</li><li>
5+ years of experience with audit methodologies, internal control frameworks, risk assessments, and control testing techniques, with the ability to apply them to cloud and modern technology environments</li><li>
3+ years of hands‑on experience with cloud security engineering, architecture, and/or automation, including designing or evaluating technical controls in cloud‑native platforms (AWS, Azure, GCP)</li></ul><div></div>
Preferred Qualifications<ul><li>
Strong understanding of the software development lifecycle (SDLC) and secure development practices</li><li>
Experience with AI/ML platforms, tools, and related risk considerations</li><li>
Understanding of regulatory frameworks and security standards such as NIST, ISO, HITRUST, HIPAA, PCI, SOC 1/SOC 2, and SOX, with the ability to interpret and translate requirements into technical solutions</li><li>
Experience with DevOps/DevSecOps, CI/CD pipelines, infrastructure‑as‑code, and modern cloud infrastructure and cybersecurity patterns</li><li>
Ability to document and translate complex technical requirements for development team consumption</li><li>
Strong attention to detail with exceptional analytical and problem‑solving skills; able to evaluate technical systems, identify risks, and propose pragmatic solutions</li><li>
Demonstrated ability to influence across engineering, security, and business teams, building strong relationships with technical and non‑technical stakeholders</li><li>
Excellent written and verbal communication skills, capable of explaining complex technical and regulatory concepts in a clear and concise manner</li><li>
Experience working with risk management frameworks and identifying cybersecurity risks in modern technology environments</li><li>
Strong program management skills, including strategic planning, road‑mapping, and technical project execution</li><li>
Industry experience in Healthcare, Insurance, or Retail is a plus</li><li>
Relevant certifications such as CCSK, CCSP, CISSP, CRISC, or similar credentials</li></ul><div></div>
Education<ul><li>
Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Engineering, or equivalent experience (High School Diploma and 4+ years of relevant experience).</li></ul>
Pay Range
The typical pay range for this role is:
$106,605.00 - $284,280.00 
This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. This position also includes an award target in the company&rsquo;s equity award program. 
Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.
Great benefits for great people
We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families. 
This full‑time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well‑being of colleagues and their families. The benefits for this position include medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources, based on eligibility. 
Additional details about available benefits are provided during the application process and on Benefits Moments. 
We anticipate the application window for this opening will close on: 05/04/2026
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.</div>

Staff Engineer - Regulatory Technology

ISMG Careers

<div><h4 class="jobSectionHeader">About Us</h4>
ISMG is a global intelligence firm and media powerhouse, leading the way in cybersecurity, enterprise IT, and digital transformation. With 10+ brands, 38 digital media properties, and over 400 premier events annually&mdash;ISMG connects a network of over 2M executives, decision-makers, and innovators with the insights and opportunities they need to stay ahead. 
 
We are entering an extraordinary growth phase&mdash;expanding our editorial depth and global reach. If you&rsquo;re passionate about shaping narratives that influence the world of cybersecurity and financial services, this is your moment to lead.<h4 class="jobSectionHeader">
The Opportunity</h4>
ISMG is building a high-performing news desk to cover the most important cybersecurity and AI developments in real time.
We&rsquo;re seeking a General Assignment Reporter to support daily coverage across our global publications&mdash;reporting on breaking news, emerging threats, and major industry developments as they happen.
This is a fast-paced, execution-focused role ideal for a reporter who:<ul><li>
Thrives on a variety of beats</li><li>
Moves quickly without sacrificing accuracy</li><li>
Takes pride in keeping an expert audience informed</li></ul>
You&rsquo;ll work closely with editors and senior correspondents to ensure ISMG delivers timely, high-quality coverage across a rapidly evolving landscape.<h4 class="jobSectionHeader">
What You&rsquo;ll Do</h4><ul><li>
Monitor and report on breaking news across cybersecurity and AI, publishing timely stories each day as events warrant</li><li>
Cover critical vulnerabilities (CVEs) and translate technical disclosures into clear, actionable reporting</li><li>
Report on data breaches, ransomware incidents, and major security events as they unfold</li><li>
Track law enforcement actions (arrests, takedowns, indictments, etc.) and summarize developments</li><li>
Monitor earnings calls and announcements from major cybersecurity and AI vendors to surface market trends and business intelligence relevant to our readers</li><li>
Identify cybersecurity angles in global and geopolitical developments</li><li>
Support senior editors and reporters by quickly advancing stories and filling coverage gaps</li></ul><h4 class="jobSectionHeader">
What We&rsquo;re Looking For</h4><ul><li>
2&ndash;8 years of reporting experience, ideally in technology, cybersecurity, AI or related business news</li><li>
Strong news judgment and ability to prioritize under pressure</li><li>
Ability to write clearly, accurately, and quickly for a sophisticated technical audience</li><li>
Comfort operating as a generalist across multiple topics and beats</li><li>
Familiarity with/basic understanding of cybersecurity fundamentals (CVE, ransomware, threat actors, etc.)</li><li>
Ability to take direction and operate in a high-output newsroom environment</li><li>
AI-savvy mindset, open to and proactive about using AI tools to streamline research, reporting, and editing&mdash;while maintaining strong editorial standards and accuracy</li></ul>
Nice to have:<ul><li>
Experience covering breaking news or working on a news desk</li><li>
Exposure to financial reporting, regulatory coverage, or earnings calls</li></ul><h4 class="jobSectionHeader">
Why This Role Matters</h4>
The volume of critical cybersecurity news continues to grow&mdash;and timely, accurate reporting is essential for the professionals who rely on ISMG. This role is central to ensuring we deliver fast, reliable, and high-quality coverage at scale, while building the next generation of editorial talent within our organization.<h4 class="jobSectionHeader">
Why ISMG?</h4><ul><li>
Work with purpose in a mission-driven, innovative media environment</li><li>
Be part of a globally recognized editorial team with unmatched access to resources</li><li>
Do journalism that genuinely matters to the people who defend our critical systems</li><li>
Develop deeper subject matter expertise within global cybersecurity</li><li>
The opportunity to advance in your career, building sources and owning coverage areas over time</li></ul>
Ready to be part of something bigger? Apply now or visit ISMG.io to learn more!</div>

General Assignment Reporter, Cybersecurity News Desk

Explore 228+ Cybersecurity engineer in New York this May. Find roles across top companies and apply now to boost your career.