cloud security engineer Jobs in Los Angeles

cloud security engineer

corporate security operations manager Jobs in Los Angeles

corporate security operations manager

manager of security

manager, operations

manager, security engineering Jobs in Los Angeles

manager, security engineering

manager security engineering

The Trade Desk

<div><div>The Trade Desk is a global technology company and the world's leading independent platform for digital advertising, with nearly 4,000 employees across more than 30 offices. Our technology helps advertisers reach the right audiences across the open internet &mdash; from streaming TV and podcasts to mobile apps, news, and more.
 
 
Advertising powers the content people love. By making it more transparent, effective, and responsible, we help support trusted journalism, quality entertainment, and creators worldwide. The world's brands and agencies rely on us to reach their customers and grow their businesses responsibly.
 
 
The scale of our platform brings unique technical challenges &mdash; from processing massive datasets in real time to building systems that operate reliably on a global scale. When you work here, your impact is worldwide. We welcome diverse perspectives, encourage curiosity, and build teams that learn from one another. If you're driven to solve meaningful challenges, we'd love to meet you.</div>
The Trade Desk operates one of the largest and most performant programmatic advertising platforms in the world. The security of our customers' data, the trust of our partners, and the velocity of our engineering teams all hinge on the strength of our application and platform security programs. As our security posture continues to mature, we are investing in the leadership required to drive that maturity forward.

We are looking for a Manager, Security Engineering to join our Cybersecurity Department. This person will lead a combined team of Application Security and Platform Security engineers, with end-to-end ownership of how TTD secures both the code we ship and the infrastructure we run it on. Reporting within the Cybersecurity organization, this leader will contribute to the strategy, roadmap, and execution of TTD's Security Engineering function &mdash; including the KPIs, maturity model, and executive-level reporting that demonstrate measurable improvement in our overall security posture over time.

The right candidate brings deep application and platform security expertise, a track record of building and developing high-performing teams, a strong bias to action, and the ability to translate technical risk into business outcomes for engineering leaders, product leaders, and executives.

Beyond the technical and program experience, we are looking for a leader with the human qualities that make a security team effective. You lead with integrity, communicate clearly, and bring empathy to your team, the engineers we partner with, and the customers whose trust we hold. You are deeply curious about how systems work and how they break, and you pair that curiosity with a strong bias to action and ownership of outcomes. You stay calm under pressure, and you approach feedback &mdash; both giving and receiving it &mdash; with humility and a willingness to grow. Security is a team sport, and the right leader sets that tone every day.

What You'll Do:
<ul>
<li>Lead, grow, mentor, and develop a combined team of Application Security and Platform Security engineers; drive performance, growth, and retention across the function.</li>
</ul><ul><li>Own and evolve The Trade Desk's Security Engineering strategy, roadmap, and maturity model across both application and platform domains; define and report KPIs that demonstrate measurable improvement in security posture to senior leadership.</li>
</ul><ul><li>Ensure consistency and alignment across application and platform security controls &mdash; driving unified standards, shared tooling, and integrated posture outcomes for the enterprise.</li>
</ul><ul><li>Drive shift-left integration of security into the SDLC in partnership with Engineering and Product &mdash; including threat modeling, secure design reviews, and the rollout and tuning of SAST, DAST, and SCA tooling.</li>
</ul><ul><li>Mature TTD's posture management capabilities across cloud and infrastructure &mdash; including CSPM, Infrastructure-as-Code scanning, hardening baselines, and configuration management.</li>
</ul><ul><li>Mature TTD's vulnerability management and remediation orchestration practices &mdash; including triage workflows, risk-based prioritization, SLA tracking, and integration with engineering workflows.</li>
</ul><ul><li>Represent the Security Engineering function across the broader organization &mdash; Engineering, Product, Compliance, Security Response, and executive leadership &mdash; and influence roadmap decisions, resource allocation, and security investment priorities.</li>
</ul>
 Who you are:
<ul>
<li>Bachelors degree in related field or equivalent years of experienec required. MS degree preferred.</li>
<li>7+ years of experience in Information Security or Cybersecurity, with hands-on depth in Application Security and/or Platform/Cloud Security.</li>
</ul><ul><li>2+ years of experience leading and developing security engineering teams, including hiring, mentoring, performance management, and roadmap ownership.</li>
</ul><ul><li>Experience driving a measurable security maturity program &mdash; defining KPIs, reporting to leadership, and demonstrating posture improvement over time.</li>
</ul><ul><li>Experience building programs that apply industry-standard security best practices and reconcile them against business and engineering needs.</li>
</ul><ul><li>Experience managing a security assessment program &mdash; including architecture reviews, secure design reviews, threat models, and code/configuration reviews across many product teams.</li>
</ul><ul><li>Experience building security visibility and engagement programs (e.g., Security Champions, security awareness, training) that scale culture and coverage across the organization.</li>
</ul><ul><li>Working knowledge of cloud security, Cloud Security Posture Management (CSPM), and Infrastructure-as-Code scanning across one or more major cloud platforms (AWS, GCP, or Azure).</li>
</ul><ul><li>Strong understanding of secure software development and deployment practices, including common application security risks and mitigations (e.g., OWASP, CWE).</li>
</ul><ul><li>Familiarity with common Information Security frameworks and standards such as MITRE ATT&amp;CK, NIST, and ISO 27001/27002.</li>
</ul><ul><li>Excellent written and verbal communication skills &mdash; able to translate technical risk into business outcomes for executive audiences and to communicate, influence, and manage expectations directly with engineering teams.</li>
</ul><ul><li>Certifications such as CISSP, CSSLP, GWAPT, OSWE, or cloud security certifications (AWS, GCP, or Azure) are a plus.</li>
</ul><ul><li>Knowledge of PII, PHI, financial data regulations, data residency requirements, and international regulatory aspects pertaining to sensitive information is a plus.</li>
</ul><ul><li>Experience in ad tech, large-scale SaaS, or other high-throughput consumer/enterprise platforms is a plus.</li>
</ul>
The Trade Desk does not accept unsolicited resumes from search firm recruiters. Fees will not be paid in the event a candidate submitted by a recruiter without an agreement in place is hired; such resumes will be deemed the sole property of The Trade Desk. The Trade Desk is an equal opportunity employer. All aspects of employment will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.

[LA JOBS ONLY] The Trade Desk will consider qualified applicants with criminal histories for employment in a manner consistent with the requirements of the Los Angeles Fair Chance Initiative for Hiring, Ordinance No. 184652.

[SF JOBS ONLY] Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.<div>

As an Equal Opportunity Employer, The Trade Desk is committed to creating an inclusive hiring experience where everyone has the opportunity to thrive.

Please reach out to us at accommodations@thetradedesk.com to request an accommodation or discuss any accessibility needs you may require to access our Company Website or navigate any part of the hiring process.

When you contact us, please include your preferred contact details and specify the nature of your accommodation request or questions. Any information you share will be handled confidentially and will not impact our hiring decisions.</div></div>

Manager, Security Engineering

Northrop Grumman

<div>RELOCATION ASSISTANCE: Relocation assistance may be available
CLEARANCE REQUIRED FOR START: No
CLEARANCE TYPE: Secret
TRAVEL: Yes, 10% of the Time<h2 class="jobSectionHeader">
Description</h2>
At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work &mdash; and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.
Northrop Grumman Defense Systems is currently seeking a System Safety Engineer Level 3 or 4 with the ability to obtain a security clearance to work with our talented Advanced Weapons team located in Northridge, CA. Relocation assistance, although not guaranteed, may be available.
The ideal candidate will have experience in safety engineering processes and standards to join our team of qualified, diverse individuals. They will be supporting our programs for defining and architecting a secured missile weapon system. The qualified applicant will become part of Northrop Grumman's System Safety team within Specialty Engineering. This position will require close collaboration with team members of other projects within the organization for security architecture designs as well as external partners and customers.
This position requires the selected candidate to work on-site in Northridge, CA. Telework is not available for this position. Relocation assistance, although not guaranteed, may be available.
In this role, the selected candidate will (but not limited to):<ul><li>
Perform system safety analysis of military weapon systems</li><li>
Participate in risk assessments/resolution and mishap investigations</li><li>
Utilize MIL-STD-882 and familiarity with Military and their equivalent industry standards such as MIL-STD-810, RCC 319, AFSPCMAN 91-710, ASTM, ANSI, NEC, AFOSH, AOP-52, JOTP-051, PESHE and NFPA.</li><li>
Be responsible for preparation of safety documentation such as System Safety Program Plan (SSPP), Preliminary Hazard Analysis (PHA), Functional Hazard Analysis (FHA), System/Subsystem Hazard Analysis (SHA/SuSHA), Fault Tree Analysis (FTA), Safety Assessment Report (SAR) and Software Safety Analysis in support of customer requirements</li><li>
Work side by side with customer counterparts</li></ul>
Basic Qualifications for a Principal System Safety Engineer:<ul><li>
BS in Electrical Engineering or relevant degree with 5 years of relevant/related experience or a MS in Electrical Engineering or relevant degree with 3 years of relevant/related experience</li><li>
Familiarity with electrical circuit design/schematics</li><li>
Experience with application of MIL-STD-882 to analyze, recommend, and drive safety into system design, equipment and procedures in order to mitigate or eliminate hazards</li><li>
Experience documenting hazards with a closed-loop Hazard Tracking System (HTS)</li><li>
Experience with developing, reviewing, updating, and approving system safety artifacts and system safety requirements such as System Safety Program Plan (SSPP), Preliminary Hazard Analysis (PHA), Functional Hazard Analysis (FHA), System/Subsystem Hazard Analysis (SHA/SuSHA), Fault Tree Analysis (FTA), Safety Assessment Report (SAR) and Software Safety Analysis in support of customer requirements</li><li>
Ability to work independently and effectively communicate (verbal and written) with internal and external customers</li><li>
U.S. citizen with the ability to obtain a government issued Security Clearance</li></ul>
Basic Qualifications for Sr. Principal System Safety Engineer:<ul><li>
BS in Electrical Engineering or relevant degree with 8 years of relevant/related experience or a MS in Electrical Engineering or relevant degree with 6 years of relevant/related experience</li><li>
Demonstrated ability in the application of MIL-STD-882 to analyze, recommend, and drive safety into system design, equipment and procedures in order to mitigate or eliminate hazards</li><li>
Experience documenting hazards with a closed-loop Hazard Tracking System (HTS)</li><li>
Familiarity with electrical circuit design</li><li>
Demonstrated ability to apply system safety engineering principles to develop safety documentation in accordance with MIL-STD-882 such as SSPP, PHA, FHA, SHA/SuSHA, Bent Pin Analyses, FTA, SAR and Software Safety Analyses</li><li>
Demonstrated ability to develop, review, update, and approve system safety artifacts and system safety requirements</li></ul><ul><li>
History of demonstrated leadership capabilities, ability to work independently, and effectively communicate (verbal and written) with internal and external customers</li><li>
U.S. citizen with the ability to obtain a government issued Security Clearance</li></ul>
Preferred Qualifications:<ul><li>
Active Government issued security clearance</li><li>
Ability to read and interpret electrical circuit schematics</li><li>
Experience with implementing and/or testing software safety requirements</li><li>
Strong working knowledge of military system safety and process standards and their Industry equivalent such as MIL-STD-882, MIL-STD-810, RCC 319, AFSPCMAN 91-710, ASTM, ANSI, NEC, AFOSH, AOP-52, JOTP-051, PESHE, NFPA</li><li>
Have experience with missile systems</li><li>
Knowledge of System Safety Incident Investigation process</li></ul>
Primary Level Salary Range: $114,000.00 - $171,000.00
Secondary Level Salary Range: $142,200.00 - $213,400.00
The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions.
Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business.
The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit http://www.northropgrumman.com/EEO. U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.</div>

Systems Safety Engineer Level 3/4 (AHT)

Newmark

<div>Newmark Group, Inc. (Nasdaq: NMRK), together with its subsidiaries (&ldquo;Newmark&rdquo;), is a world leader in commercial real estate, seamlessly powering every phase of the property life cycle. Newmark&rsquo;s comprehensive suite of services and products is uniquely tailored to each client, from owners to occupiers, investors to founders, and startups to blue-chip companies. Combining the platform&rsquo;s global reach with market intelligence in both established and emerging property markets, Newmark provides superior service to clients across the industry spectrum. For the twelve months ended March 31, 2026, Newmark generated revenues of more than $3.4 billion. As of March 31, 2026, Newmark and its business partners together operated from over 185 offices with more than 9,600 professionals across four continents. To learn more, visit nmrk.com or follow @newmark. 
Job Summary
The Associate Project Manager supports the planning, coordination, and execution of real estate construction and renovation projects, working closely with the Project Managers and other stakeholders to ensure projects are delivered on time, within budget, and in accordance with quality and compliance requirements.</div>
 <div><ul><li>Bachelor&rsquo;s degree in engineering, architecture, project management or related field, or equivalent experience.
</li><li>Minimum of 3 years project management experience.
</li><li>Excellent verbal and written communication skills.
</li><li>Strong budgetary, fiscal and expense management skills.
</li><li>Knowledge and understanding of code and regulatory compliance related to the work being performed.
</li>PC skills and solid experience with MS Office products. Ability to work with AutoCAD is preferred. 
<li>
</li></ul>Working Conditions: Normal working conditions with the absence of disagreeable elements
Note: The statements herein are intended to describe the general nature and level of work being performed by employees, and are not to be construed as an exhaustive list of responsibilities, duties, and skills required of personnel so classified.
Newmark is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected Veteran Status, or any other characteristic protected by applicable federal, state, or local law.</div>
 <div><ul><li>Process minor project work, defined as work not requiring extensive design or coordination functions.
</li><li>Execute contractor sourcing activities including issuing requests for proposal, performing bid analyses, and preparing award recommendations.
</li><li>Prepare effective project initiation and approval documents; manage routing and stakeholder approval processes.
</li><li>Organize and lead project kickoff and closeout meetings with the client and contractors. Act as the primary liaison to other stakeholders regarding the project including building operations, security, and IT.
</li><li>Perform timely and accurate project management administrative activities including issuing meeting minutes, purchase and change orders, verifying work, processing invoices, and updating project status.
</li><li>May perform other duties as assigned.</li></ul></div>

Associate Project Manager

University of Southern California

<div>Job ID REQ20178248 Category Information Technology Services</div>
 <div>The University of Southern California (USC) is advancing its cybersecurity posture with a renewed focus on resilience, cyber risk management, and threat-informed defense. As a world-class research institution, USC is building a culture of security that supports its academic and research mission in a rapidly evolving threat landscape.
This role sits within a newly restructured cybersecurity organization that&rsquo;s leading this transformation. You&rsquo;ll join a team focused on scalable, proactive defense strategies, incident preparedness, and operational excellence&mdash;working alongside experts who are deeply committed to service, innovation, and impact.
If you&rsquo;re driven by purpose, thrive in complexity, and want to help shape the future of cybersecurity at a leading university, we invite you to bring your leadership to the table.
POSITION SUMMARY
As the Lead Analyst, Attack Surface Management (ASM) you will be an integral leader of the cybersecurity department while also collaborating with stakeholders across the university ecosystem, and reporting to the ASM Manager. This is a full-time exempt position, eligible for all of USC&rsquo;s fantastic Benefits + Perks. This opportunity is remote.
The Lead Analyst, Attack Surface Management (ASM) responsible for identifying, assessing, and mitigating security vulnerabilities across our organization's systems, networks, and applications and supports attack surface management operations. Conducts vulnerability assessments, penetration testing, compliance, and risk management activities. Oversees the university's attack surface and vulnerability lifecycle management process, (e.g., detection, monitoring, reporting, and assessing the impact of vulnerabilities) with focus on continuous improvement to mitigate risks associated with vulnerabilities, application security, and cyber threat intelligence. Develops and implements remediation strategies to address vulnerabilities and minimize the university's attack surface. Directly supports program maturity efforts and plays a key role in integrating threat intelligence into the broader university environment.
The Lead Analyst, Attack Surface Management (ASM) will:
<ul><li>Oversees the vulnerability lifecycle management process (e.g., detection, monitoring, reporting, and assessing the impact of vulnerabilities). Supports regular vulnerability assessments and scans to identify security weaknesses in systems, applications, networks, and OT/IoT environment.
</li><li>Develops and implements remediation strategies to address vulnerabilities and minimize the university's attack surface. Implements remediation required by audits. Engages with DSUs to advise on remediation strategies of vulnerabilities.
</li><li>Collaborates with IT teams and stakeholders to validate effective end-to-end vulnerability remediation and maintain a consistent customer experience. Collaborates with VM managed service teams and manages daily operations and communications. Evaluates vulnerability trends in third-party applications and services and collaborates with managed service providers as needed.
</li><li>Serves as an ASM subject matter expert, formulating and prioritizing intelligence requirements according to established risk management framework. Participates in and influences the roadmap for the university&rsquo;s vulnerability management program.
</li><li>Collaborates on detailed reports on vulnerabilities, their impact, and the status of remediation efforts and communicates findings to stakeholders. Provides expertise to help develop and maintain vulnerability and attack surface management policies, procedures, and best practices for the university.
</li><li>Maintains awareness and knowledge of current changes within legal, regulatory, and technology environments which may affect operations. Maintains awareness of current university threat intelligence feeds and reports to stay informed about emerging threats and vulnerabilities that may affect the organization's attack surface. Maintains knowledge of emerging vulnerabilities, exploits, and remediation techniques.
</li><li>Encourages a workplace culture where all employees are valued, value others and have the opportunity to contribute through their ideas, words and actions, in accordance with the USC Code of Ethics.
</li></ul>MINIMUM QUALIFICATIONS
Great candidates for the position of Lead Analyst, Attack Surface Management (ASM) will meet the following qualifications:
<ul><li>5 years in attack surface and vulnerability management.
</li><li>A bachelor&rsquo;s degree or combined experience/education as substitute for minimum education.
</li><li>Knowledge of the following frameworks: NIST Cybersecurity Framework (NIST CSF), ISO/IEC 27001, MITRE ATT&amp;CK
</li><li>Framework, OWASP Top Ten, CIS Controls, COBIT, SANS Critical Security Controls, PCI DSS, NIST SP 800-53, and ITIL.
</li><li>Strong understanding of ASM/vulnerability management, security testing practices, and methodologies.
</li><li>Understanding and technical knowledge of Cyber Defense concepts, (e.g., incident response, security monitoring, cyber threat intelligence, attack surface and vulnerability management).
</li><li>Understanding of Operational Technology environments and security requirements needed to manage the broader attack landscape across the university.
</li><li>Experience in building infrastructure and application vulnerability management programs.
</li><li>Experience in deploying and operating vulnerability scanning infrastructure and services and deep understanding of vulnerability scanning platforms.
</li><li>Comprehensive knowledge of cloud-native vulnerability practices in AWS, Azure, and SaaS platforms and associated security challenges.
</li><li>Ability to assess business risks and recommend suitable cybersecurity measures.
</li><li>Experience in managing vulnerability assessment tools.
</li><li>Knowledge of system, application, and database hardening techniques.
</li><li>Strong communication and interpersonal skills, enabling effective interaction across all organizational levels, along with proven analytical and problem-solving abilities, and exceptional attention to detail.
</li><li>Project management experience with a track record of leading complex security initiatives, coupled with the ability to teach and train others effectively.
</li><li>Ability to work with teams across the cybersecurity function, with managed service providers, and with IT teams across the university.
</li><li>Ability to work evenings, weekends and holidays as the schedule dictates.
</li></ul>PREFERRED QUALIFICATIONS
Exceptional candidates for the position of Lead Analyst, Attack Surface Management (ASM) will also bring the following qualifications or more:
<ul><li>7 years of related experience.
</li><li>A bachelor's degree or combined experience/education as substitute for minimum education.
</li><li>Experience working in higher education or complex, decentralized environments.
</li><li>CISSP, GCIH, GPEN, Security+, or similar.
</li></ul>In addition, the successful candidate must also demonstrate, through ideas, words and actions, a strong commitment to USC&rsquo;s Unifying Values of integrity, excellence, community, well-being, open communication, and accountability.
SALARY AND BENEFITS
The annual base salary range for this position is $162,315.11-$201.452.98. When extending an offer of employment, the University of Southern California considers factors such as (but not limited to) the scope and responsibilities of the position, the candidate&rsquo;s work experience, education/training, key skills, internal peer alignment, federal, state, and local laws, contractual stipulations, grant funding, as well as external market and organizational considerations.
To support the well-being of our faculty and staff, USC provides benefits-eligible employees with a broad range of perks to help protect their and their dependents&rsquo; health, wealth, and future. These benefits are available as part of the overall compensation and total rewards package.
Join the USC cybersecurity team within an environment of innovation and excellence. 
 
Minimum Education: Bachelor's degree Addtional Education Requirements Combined experience/education as substitute for minimum education Minimum Experience: 5 years in attack surface and vulnerability management. Minimum Skills: Knowledge of the following frameworks: NIST Cybersecurity Framework (NIST CSF), ISO/IEC 27001, MITRE ATT&amp;CK Framework, OWASP Top Ten, CIS Controls, COBIT, SANS Critical Security Controls, PCI DSS, NIST SP 800-53, and ITIL. Strong understanding of ASM/vulnerability management, security testing practices, and methodologies. Understanding and technical knowledge of Cyber Defense concepts, (e.g., incident response, security monitoring, cyber threat intelligence, attack surface and vulnerability management). Understanding of Operational Technology environments and security requirements needed to manage the broader attack landscape across the university. Experience in building infrastructure and application vulnerability management programs. Experience in deploying and operating vulnerability scanning infrastructure and services and deep understanding of vulnerability scanning platforms. Comprehensive knowledge of cloud-native vulnerability practices in AWS, Azure, and SaaS platforms and associated security challenges. Ability to assess business risks and recommend suitable cybersecurity measures. Experience in managing vulnerability assessment tools. Knowledge of system, application, and database hardening techniques. Strong communication and interpersonal skills, enabling effective interaction across all organizational levels, along with proven analytical and problem-solving abilities, and exceptional attention to detail. Project management experience with a track record of leading complex security initiatives, coupled with the ability to teach and train others effectively. Ability to work with teams across the cybersecurity function, with managed service providers, and with IT teams across the university. Preferred Education: Bachelor's degree In Information Science Or Computer Science Or Computer Engineering Or in related field(s) Preferred Certifications: CISSP, GCIH, GPEN, Security+, or similar. Preferred Experience: 7 years Preferred Skills: Experience working in higher education or complex, decentralized environments.
<div>Job ID REQ20178248 Posted Date 07/30/2026</div></div>

Attack Surface Management, Lead Analyst

CHAOS Industries

<div>CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage&mdash;domain dominance. The company's products are powered by Coherent Distributed Networks (CDN&trade;), empowering warfighters, commercial air operators, and border protection teams to act faster, adapt rapidly, and stay ahead of evolving threats.

CHAOS Industries was founded in 2022 and has raised a total of $1 billion in funding from leading investors, including 8VC, Accel, and Valor Equity Partners. The company is headquartered in Los Angeles, with offices in Washington, D.C., San Francisco, San Diego, Seattle, and London. For more information, please visit www.chaosinc.com.

Role Overview:

CHAOS Industries is hiring a Enterprise Cloud Architect to design, lead, and govern our cloud infrastructure strategy across defense and GovCon program environments. This is a high-impact, senior individual contributor role that sits at the center of our digital transformation &mdash; you'll define how we build, secure, and scale cloud capabilities across classified, unclassified, and hybrid environments. You'll own the architecture from concept through delivery, working alongside ISSMs, program managers, and engineering teams to ensure every solution is mission-ready, compliant, and built to last.
<ul>
<li>You'll be embedded across the Enterprise Technology and Classified Programs divisions &mdash; partnering with ISSMs, security engineers, program leads, and government customers to translate mission requirements into cloud architecture that actually works at scale in a defense environment. If you thrive in environments where the stakes are real, this is your seat.</li>
<li>From day one, you'll own the cloud architecture roadmap, lead our AWS GovCloud and Azure Government platform strategy, drive zero trust network architecture implementation, and architect the secure connectivity fabric between classified and unclassified environments. You build the things other architects only diagram.</li>
</ul>
Responsibilities:
<ul>
<li>Design and own the enterprise cloud architecture across AWS GovCloud, Azure Government, and on-premise/hybrid environments supporting classified and unclassified program workloads.</li>
<li>Develop cloud architecture documentation including solution design documents, network diagrams, data flow maps, and Authority to Operate (ATO) supporting artifacts aligned to NIST RMF, ICD 503, and FedRAMP.</li>
<li>Define and enforce cloud security architecture standards including Zero Trust Architecture (ZTA), identity and access management (IAM), encryption in transit and at rest, and workload isolation patterns.</li>
<li>Lead cloud migration planning and execution &mdash; assess on-premise workloads, define migration strategies (rehost, replatform, refactor), and oversee technical delivery.</li>
<li>Architect secure, high-availability cloud network topologies including VPC/VNET design, transit gateways, private connectivity (AWS Direct Connect, Azure ExpressRoute), and cross-domain solution integration.</li>
<li>Collaborate with ISSM/ISSO teams to develop and maintain Cloud Security Plans, System Security Plans (SSPs), and continuous monitoring strategies for cloud-hosted systems.</li>
<li>Establish infrastructure-as-code (IaC) standards and patterns using Terraform, AWS CloudFormation, or Azure Bicep; promote repeatable, auditable, and secure deployment pipelines.</li>
<li>Evaluate emerging cloud technologies, services, and vendors; provide build vs. buy vs. configure recommendations with documented trade studies for CIO and executive review.</li>
<li>Serve as the primary technical authority for cloud architecture on assigned programs; engage directly with government customers, AOs, and prime contractors on cloud-related matters.</li>
<li>Mentor and guide cloud engineers, DevSecOps practitioners, and junior architects; establish architecture review processes and cloud governance frameworks.</li>
<li>Travel up to 10% CONUS to support program sites, government customer engagements, and architecture reviews.</li>
</ul>
 Minimum Requirements:
<ul>
<li>Bachelor's degree in Computer Science, Information Systems, Cloud Computing, or a related technical field. Master's degree preferred; equivalent experience considered.</li>
<li>8&ndash;12 years of experience in cloud architecture, infrastructure engineering, or solutions architecture, with a minimum of 4 years designing cloud solutions for DoD, IC, or federal government programs.</li>
<li>Demonstrated experience architecting production workloads on AWS GovCloud and/or Azure Government, including multi-account/multi-subscription landing zone design, networking, and IAM.</li>
<li>Hands-on experience with infrastructure-as-code tooling (Terraform, CloudFormation, Bicep, or equivalent) and CI/CD pipeline security (DevSecOps).</li>
<li>Working knowledge of FedRAMP, NIST SP 800-53, NIST SP 800-144, CMMC Level 2/3, and DFARS cloud security requirements.</li>
<li>Experience supporting NIST RMF authorization activities for cloud-hosted systems, including development of cloud-specific SSP artifacts and continuous monitoring strategies.</li>
<li>Active Secret clearance required at time of hire. TS/SCI eligibility strongly preferred; specific program assignments may require upgrade.</li>
</ul>
Preferred Requirements:
<ul>
<li>Active Secret Clearance</li>
<li>Experience designing Cross Domain Solutions (CDS) or multi-level security (MLS) architectures for classified environments.</li>
<li>Familiarity with NSA/CSS cloud security standards, DoD Cloud Computing Security Requirements Guide (CC SRG), or IC cloud policy.</li>
<li>Experience with container orchestration (Kubernetes, EKS, AKS) and service mesh architectures in a GovCloud environment.</li>
<li>Knowledge of cloud-native SIEM and security tooling (AWS Security Hub, Microsoft Sentinel, Crowdstrike Falcon) for continuous monitoring in classified/CUI environments.</li>
<li>AWS Certified Solutions Architect &ndash; Professional, AWS Certified Security &ndash; Specialty, Microsoft Azure Solutions Architect Expert, or equivalent.</li>
<li>TOGAF 9/10 or equivalent enterprise architecture certification.</li>
</ul>
Why CHAOS?
<ul>
<li>Health Benefits: Medical, dental, and vision benefits 100% paid for by the company</li>
<li>Additional benefits: 401k (+ 50% company match up to 6% of pay), FSA, HSA, life insurance, and more</li>
<li>Our Perks: Free daily lunch, 'No meeting Fridays', unlimited PTO, casual dress code</li>
<li>Compensation Components: Competitive base salaries, generous pre-IPO stock option grants, relocation assistance, and (coming soon!) annual bonuses</li>
<li>Team Growth: 250 employees and counting across 5 global offices</li>
</ul><div>Salary Range: $180,000 - $220,000</div>

The stated compensation range reflects only the targeted base compensation range and excludes additional earnings such as bonus, equity, and benefits. If your compensation requirements fall outside of the range, we still encourage you to apply. The salary range for this role is an estimate based on a range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. 


<h3 class="jobSectionHeader">Recruiting Agencies: CHAOS Industries does not accept unsolicited resumes or outreach. Unsolicited submissions will not be reviewed or compensated.</h3> 


#LI-onsite</div>

Enterprise Cloud Architect

Metropolis

<div><h3 class="jobSectionHeader">Who we are</h3>

The real world is the next frontier, and at Metropolis, we are creating the artificial intelligence to make it responsive. We are pioneering the Recognition Economy &mdash; a future where mundane repetition disappears and being known unlocks access, comfort and belonging everywhere you go. From transforming parking into a seamless drive-in, drive-out experience for millions of Members to expanding our intelligence layer across retail and hospitality, we are building a world that feels instinctive and magical. The future isn't coming; it's here, and we need builders, innovators and problem solvers to help us create it.
<h3 class="jobSectionHeader">
Who you are</h3>

Metropolis is seeking a Governance, Risk, and Compliance (GRC) Analyst to join our expanding Security team. Reporting to the Senior Manager, GRC, you will mature information security policies, drive employee security awareness, and pioneer our AI governance framework. You will partner across Technology, Legal, Internal Audit, Procurement, and People Operations to safeguard customer trust and support operational excellence.
<h3 class="jobSectionHeader">
What you'll do</h3>
<ul><li>Author, update, and enforce corporate security policies to guarantee cross-departmental compliance</li>
<li>Deploy and manage required information security training campaigns as the platform owner</li>
<li>Transform static policies into interactive modules with comprehension quizzes for mandatory sign-offs</li>
<li>Establish and enforce an internal AI governance framework with Data, Legal, and Tech teams</li>
<li>Conduct structured risk assessments on emerging tools and internal AI models to maintain behavioral guardrails</li>
<li>Report training metrics, policy exceptions, and risk postures directly to senior management</li>
<li>Review vendor security profiles and software pipelines to mitigate security risk</li>
</ul><h3 class="jobSectionHeader">What we're looking for</h3>
<ul><li>3+ years of experience in information security GRC, cybersecurity training, or technology compliance</li>
<li>Proven track record of managing required security awareness programs and driving cross-functional accountability</li>
<li>Experience with modern training orchestration platforms and understanding of AI and machine learning data security</li>
<li>Working knowledge of standard industry frameworks, specifically SOC 2 and PCI-DSS</li>
<li>Communication skills with the ability to explain complex regulatory needs to non-technical employees</li>
<li>Bachelor's degree in Cybersecurity, Information Systems, or an equivalent technical discipline</li>
</ul><h3 class="jobSectionHeader">While not required, these are a plus:</h3>
<ul><li>GRC certifications such as CISA or CRISC</li>
</ul>
4 Days in Office: Metropolis values in-person collaboration to drive innovation, strengthen culture, and enhance the Member experience. Our corporate team members hold to our office-first model, which requires employees to be on-site at least four days a week, fostering organic interactions that spark creativity and connection

When you join Metropolis, you'll join a team of world-class product leaders and engineers, building an ecosystem of technologies at the intersection of parking, mobility, and real estate. Our goal is to build an inclusive culture where everyone has a voice and the best idea wins. You will play a key role in building and maintaining this culture as our organization grows. The anticipated base salary for this position is $100,000.00 USD to $135,000.00 USD annually. The actual base salary offered is determined by a number of variables, including, as appropriate, the applicant's qualifications for the position, years of relevant experience, distinctive skills, level of education attained, certifications or other professional licenses held, and the location of residence and/or place of employment. Base salary is one component of Metropolis's total compensation package, which may also include access to or eligibility for healthcare benefits, a 401(k) plan, short-term and long-term disability coverage, basic life insurance, a lucrative stock option plan, bonus plans and more. #LI-CM1 #LI-Onsite<div>
Metropolis may utilize an automated employment decision tool (AEDT) to assess or evaluate your candidacy for employment or promotion. AEDTs are used to assist in assessing a candidate's application relative to the required job qualifications and responsibilities listed in the job posting.

As part of this process, Metropolis retains data relevant to your candidacy, including personal information, for a period that is reasonably necessary for the use of the tool. If you are hired for the position, your data may become part of your employee records.

Metropolis Technologies is an equal opportunity employer. We make all hiring decisions based on merit, qualifications, and business needs, without regard to race, color, religion, sex (including gender identity, sexual orientation, or pregnancy), national origin, disability, veteran status, or any other protected characteristic under federal, state, or local law.</div></div>

GRC Analyst

Aero

<div>
 <ul>
 <li>
 Location: Remote but reside within one hour's drive of one of Aero's primary locations (VNY, ASE, OPF, TEB/HPN) &mdash; travel to operating locations (Domestic and International) required as needed
 
 
 
 
 
 </li>
 </ul>
 
 About Aero
 
 
 At Aero, we believe that exceptional journeys start with exceptional people. Inspired by the golden age of aviation, we&rsquo;re redefining air travel with a modern approach. Our direct, premium flights via private terminals deliver the comfort of low-contact travel and the effortlessly fabulous experience of flying private. Just as we create an elevated experience for our guests, we invest in creating the same for our people&mdash;prioritizing transparency, support, accountability and fulfillment to foster a culture of trust and purpose.
 
 
 
 About This Role
 
 
 The Manager of Security owns the day-to-day administration of the company's TSA-approved security program and ensures full compliance across our on-demand and public charter operations. Operating a fleet of 7+ jet aircraft over 12,500 lbs maximum certificated takeoff weight, the company is governed by the TSA Twelve-Five Standard Security Program (TFSSP) and conducts by-the-seat public charter service under DOT/14 CFR Part 380. This role is responsible for implementing, maintaining, and continuously improving security procedures&mdash;including passenger and accessible property screening, restricted-area and aircraft access controls, threat response, and personnel vetting&mdash;while serving as the primary liaison to the TSA and other government stakeholders.
 
 
 This position is central to protecting our guests, crews, and aircraft while enabling the seamless, elevated experience our public charter guests expect. The successful candidate combines regulatory rigor with a practical, service-minded approach to security.
 
 
 
 USAC Airways 695 LLC (dba Aero) is an equal opportunity employer. This job description is not exhaustive and may be updated to reflect regulatory changes or business needs.
 
 
 
 We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Security program administration &mdash; Implement, maintain, and update the TSA-approved TFSSP and any applicable Security Directives, Emergency Amendments, and Information Circulars; keep the program current with changing regulatory requirements affecting on-demand and Part 380 public charter operations.
 </li>
 <li>
 Regulatory compliance &mdash; Ensure ongoing compliance with 49 CFR Part 1544, the TFSSP, and TSA requirements for passenger and accessible-property screening, as well as applicable international aviation security requirements (e.g., EASA/EU, UK CAA/DfT, and other host-state and ICAO Annex 17 standards) for operations to, from, and within those jurisdictions.
 </li>
 <li>
 TSA liaison &mdash; Serve as the company's principal point of contact with the TSA (including the Principal Security Specialist), coordinating inspections, audits, and information requests, and managing corrective-action responses to findings.
 </li>
 <li>
 Screening operations &mdash; Oversee passenger and accessible property screening processes at private terminals/FBOs and operating stations; ensure screening personnel and any contracted screening vendors are trained, equipped, and performing to standard.
 </li>
 <li>
 Access control &mdash; Administer controls for aircraft, restricted areas, and secured/sensitive information; manage the issuance, accountability, and audit of credentials IAW the TSA approved ID Media Program.
 </li>
 <li>
 Ground Security Coordinator oversight &mdash; Oversee and direct the Ground Security Coordinator (GSC) function; ensure a qualified GSC is designated for each flight/station, that GSCs are properly trained and equipped, and that they carry out their TFSSP responsibilities for passenger, baggage, and cargo acceptance and station-level security.
 </li>
 <li>
 Security training (company-wide) &mdash; Develop, deploy, and maintain security-related training across the entire company; build initial and recurrent curricula, delivery methods, and testing for crewmembers, GSCs, other personnel, and contractors, and ensure training keeps pace with regulatory and threat changes.
 </li>
 <li>
 Personnel vetting &amp; records &mdash; Manage Security Threat Assessments (STAs) and criminal history records checks (CHRC); maintain complete and auditable security training and vetting records.
 </li>
 <li>
 Threat &amp; incident response &mdash; Maintain and exercise procedures for bomb threats, suspicious items, unruly/disruptive passengers, and elevated-threat conditions; lead incident response, investigation, and reporting.
 </li>
 <li>
 Sensitive Security Information (SSI) &mdash; Safeguard SSI in accordance with 49 CFR Part 1520, controlling access, storage, distribution, and destruction.
 </li>
 <li>
 Recordkeeping &amp; reporting &mdash; Maintain required security records and documentation; prepare and submit regulatory reports and internal metrics on screening throughput, findings, and program performance.
 </li>
 <li>
 Audits &amp; continuous improvement &mdash; Conduct internal security audits, self-inspections, and drills; identify gaps, track corrective actions to closure, and drive continuous improvement.
 </li>
 <li>
 Cross-functional coordination &mdash; Partner with Flight Operations, Experience, Maintenance, and FBO/airport partners to embed security requirements into location procedures and the guest experience; coordinate with local law enforcement and airport authorities.
 </li>
 <li>
 Emergency preparedness &mdash; Support the company's emergency response plan and business-continuity efforts as they relate to security threats and events.
 </li>
 <li>
 Security manuals &mdash; Maintain the Company Security Manual (CSM), the National Terrorism Advisory System (NTAS) Contingency Plan, and any new or additional security manuals identified; ensure all manuals are current, version-controlled, and aligned with regulatory requirements and approved procedures.
 
 
 
 
 
 </li>
 </ul>
 
 Required Qualifications
 
 
 
 <ul>
 <li>
 U.S. citizen
 </li>
 <li>
 5+ years of experience in aviation security, law enforcement, military security, or a regulated transportation-security role.
 </li>
 <li>
 Ability to obtain and maintain a passing Security Threat Assessment (STA) and Criminal History Records Check (CHRC).
 </li>
 <li>
 Demonstrated experience interfacing with regulatory agencies (TSA, FAA, or equivalent) during inspections and audits.
 </li>
 <li>
 Strong written and verbal communication skills, with the ability to author procedures and train personnel.
 </li>
 <li>
 Sound judgment and composure under time-critical, high-pressure situations.
 
 
 
 
 
 </li>
 </ul>
 
 Preferred Qualifications
 
 
 
 <ul>
 <li>
 Bachelor's degree in aviation management, criminal justice, homeland security, or a related field &mdash; or equivalent experience.
 </li>
 <li>
 Prior experience as an AOSC or Alternate AOSC, or in security program management for a Part 135 or Part 121 operator.
 </li>
 <li>
 Strong working knowledge of 49 CFR Parts 1520, 1540, and 1544; the TSA Twelve-Five Standard Security Program (TFSSP); and 14 CFR Parts 135 and 380.
 </li>
 <li>
 Familiarity with public charter (Part 380) by-the-seat operating models and private-terminal screening.
 </li>
 <li>
 Experience selecting, deploying, or managing TSA-approved screening equipment (e.g., WTMD, HHMD, etc.) and screening vendors.
 </li>
 <li>
 Relevant certifications (e.g., Certified Member / AAAE, security or emergency-management credentials).
 
 
 
 
 
 </li>
 </ul>
 
 Working Conditions &amp; Physical Requirements
 
 
 Work is performed in remote, terminal/FBO, and airport ramp environments. The role requires availability outside standard business hours to support operations and respond to security events, and travel to operating stations. May require standing for extended periods and occasional lifting in operational settings
</div>

Manager of Security

Explore 67+ Manager security engineering in Los Angeles this August. Find roles across top companies and apply now to boost your career.