data engineer

software engineer

ai engineer

associate, information security Jobs in New York

associate, information security

cybersecurity engineer

security engineer

Veracity Software Inc

<div>
 <strong>
  Job Title: Information Security Engineer
  <br/>
  <br/>
 </strong>
 <strong>
  Duration:
 </strong>
 <strong>
  12 months, with potential to extend and/or convert
  <br/>
  <br/>
 </strong>
 <strong>
  Location: Chandler, AZ / New York, NY / Dallas, TX / San Francisco, CA / Charlotte, NC / Raleigh, NC / Minneapolis, MN / Columbus, OH - Hybrid Role (3 days onsite every week)
  <br/>
  <br/>
 </strong>
 <strong>
  Interview:
 </strong>
 <strong>
  First Round will be onsite in any of the listed locations. If required, a second or third round.
  <br/>
  <br/>
 </strong>
 <strong>
  Overview:
  <br/>
  <br/>
 </strong>
 We are seeking an Information Security Engineer to support enterprise IAM platforms, including both vendor solutions such as CyberArk and internally developed IAM applications. This role focuses on operational stability, execution of daily service requests, adherence to SLAs, and full lifecycle management of change requests. The engineer will troubleshoot issues, support integrations, perform hygiene/audit tasks, and participate in on&hyphen;call rotations for critical IAM services.
 <br/>
 <br/>
 <strong>
  Key Responsibilities:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Provide day&hyphen;to&hyphen;day operational support for IAM platforms including CyberArk and in&hyphen;house IAM applications.
  </li>
  <li>
   Perform BAU activities such as account unlocks/unsuspends, onboarding/offboarding, password rotations, health checks, and access lifecycle tasks.
  </li>
  <li>
   Analyze, create, validate, implement, and close change requests in alignment with established processes.
  </li>
  <li>
   Support requests from IAM integration teams and internal stakeholders.
  </li>
  <li>
   Perform operational hygiene tasks including human/non-human account cleanup, permissions reviews, and audit activities.
  </li>
  <li>
   Troubleshoot incidents, assist in root-cause analysis, and support platform upgrades, patching, and maintenance.
  </li>
  <li>
   Identify and implement automation opportunities using scripting and APIs.
  </li>
  <li>
   Participate in on&hyphen;call rotations to ensure high availability of IAM services. (Mon to Sun 7am to 7pm - once in every 4-6 weeks)
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Required Qualifications:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   5+ years of experience in Information Security or Identity &amp; Access Management.
  </li>
  <li>
   Hands-on experience with CyberArk or similar privileged access platforms.
  </li>
  <li>
   Experience supporting IAM operational environments with defined SLAs.
  </li>
  <li>
   Ability to manage change requests through full lifecycle (analysis &rarr; build &rarr; validation &rarr; implementation &rarr; closure).
  </li>
  <li>
   Scripting skills (PowerShell, Python, REST APIs).
  </li>
  <li>
   Solid understanding of IAM concepts, access lifecycle processes, and operational security controls.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Qualifications:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   CyberArk certifications (Defender, Sentry, Client) or equivalent IAM solution experience.
  </li>
  <li>
   Experience supporting custom or in-house IAM applications.
  </li>
  <li>
   Familiarity with Active Directory, Windows/Linux administration, and cloud (AWS/Azure) IAM integrations.
  </li>
 </ul>
</div>


Information Security Engineer

Copia Automation

<div><div><p><b>About Copia</b></p>
<p>
Copia Automation builds the version control and change management platform for industrial automation. Our customers are in oil &amp; gas, manufacturing, and critical infrastructure &mdash; environments where the code running on PLCs, SCADA systems, and HMIs has direct safety implications. We bring modern software engineering practices to operational technology teams that have been underserved by tooling for decades.</p>
<p>
We&rsquo;re a well-funded startup growing fast, with enterprise customers deploying Copia across hundreds of facilities. Our headquarters is in New York City.</p>
<p><b>
The Role</b></p>
<p>
We&rsquo;re hiring a Lead Security Engineer to mature Copia&rsquo;s security engineering program. You&rsquo;ll work closely with our CISO and report into engineering leadership.</p>
<p>
This is not a siloed role. You&rsquo;ll be the person responsible for detection engineering on Monday, IAM architecture on Tuesday, compliance evidence on Wednesday, and incident response whenever it&rsquo;s needed. We need someone who can context-switch across security domains and knows which problem to prioritize on any given day.</p>
<p>
You should be comfortable building a security program, not just operating one someone else designed. If you&rsquo;ve been the first or second security engineer at a startup before, you know exactly what this means.</p>
</div>
<h3 class="jobSectionHeader"><b>What you'll own:</b></h3><div>
<ul><li><b>Detection Engineering &amp; Incident Response: </b>Build, tune, and maintain detection pipelines and alerting. Run incident investigations and root-cause analysis. Drive toward full visibility and monitoring coverage across cloud and endpoint assets.</li>
<li><b>Cloud &amp; Infrastructure Security: </b>Secure our AWS environment &mdash; IAM policies, network segmentation, container security, secrets management. Codify security guardrails in infrastructure-as-code. Review architecture decisions with engineering for security impact.</li>
<li><b>Enterprise Identity &amp; Cloud Access: </b>Architect and manage identity infrastructure across cloud and SaaS environments &mdash; IdP configuration, SSO/OIDC integration, SCIM provisioning, conditional access policies, and RBAC design. Own the full identity lifecycle from onboarding to offboarding, enforce least-privilege across AWS accounts and SaaS applications, and drive access certification and governance programs.</li>
<li><b>Security Automation: </b>Automate everything you can &mdash; alert triage, access provisioning, evidence collection, vulnerability management workflows. You&rsquo;re one person covering a lot of ground; automation is how you scale.</li>
</ul></div><h3 class="jobSectionHeader"><b>What we're looking for:</b></h3><div>
<p>
7+ years of experience in security engineering, with hands-on work across multiple security domains. You&rsquo;ve ideally done this at a SaaS company or cloud-native startup where you couldn&rsquo;t hide behind a large team.</p>
<ul>
<li>Strong detection engineering skills &mdash; you&rsquo;ve built and tuned SIEM rules, written detection content, and investigated real alerts, not just monitored dashboards someone else built</li>
<li>Deep understanding of AWS security architecture &mdash; IAM, VPC design, multi-account strategies, and native security services</li>
<li>Proficiency with infrastructure-as-code for security &mdash; codifying policies, guardrails, and configurations rather than clicking through consoles</li>
<li>Experience with identity and access management architecture &mdash; IdP configuration, SSO/OIDC, RBAC design, and access lifecycle automation</li>
<li>Scripting and automation chops in Python, Bash, or PowerShell for security operations, orchestration, and evidence workflows</li>
<li>Clear, direct communication skills &mdash; you can explain a risk to an engineer, write a post-incident report for leadership, and answer a customer security questionnaire without corporate fluff</li>
</ul>
<div><p><b>Bonus Points</b></p>
<ul>
<li>Experience with CrowdStrike Falcon (EDR + LogScale/NG-SIEM) or Datadog Security Monitoring</li>
<li>Terraform expertise, including module development and policy-as-code (OPA, Sentinel)</li>
<li>Familiarity with fleet management tools (FleetDM, osquery, Jamf, or Intune)</li>
<li>Exposure to OT/ICS security concepts, industrial control systems, or critical infrastructure environments</li>
<li>Experience with EU regulatory frameworks &mdash; NIS2, Cyber Resilience Act, IEC 62443</li>
<li>Background in vulnerability management lifecycle &mdash; scanning, triage, remediation tracking, and executive reporting</li>
<li>Experience implementing Zero Trust Network Access (ZTNA) in hybrid cloud/on-prem environments</li>
</ul></div></div><div>Benefits include unlimited PTO, employer-subsidized healthcare through Aetna, commuter benefits, in-office lunches, and more! <b>Full-time, permanent employees also receive generous equity packages.</b></div>
<h3 class="jobSectionHeader"><b>**This position is hybrid out of our New York City HQ.**</b></h3><div>
<p><b>
Why Copia</b></p>
<ul>
<li>Your work has real-world safety impact. Our customers run critical infrastructure. Security here isn&rsquo;t an abstract compliance exercise &mdash; it matters.</li>
<li>You&rsquo;ll build, not just maintain. This is a greenfield opportunity to shape the security program at a company that&rsquo;s scaling fast.</li>
<li>No bureaucracy. You&rsquo;ll work directly with engineering and leadership. Your recommendations get implemented, not lost in committee.</li>
<li>Competitive equity. Full-time permanent employees receive meaningful ownership in a company with significant upside.</li></ul></div></div>

Lead Security Engineer

<div><div>Ro is a direct-to-patient healthcare company with a mission of helping patients achieve their health goals by delivering the easiest, most effective care possible. Ro is the only company to offer nationwide telehealth, labs, and pharmacy services. This is enabled by Ro's vertically integrated platform that helps patients achieve their goals through a convenient, end-to-end healthcare experience spanning from diagnosis, to delivery of medication, to ongoing care. Since 2017, Ro has helped millions of patients in nearly every single county in the United States, including 99% of primary care deserts.</div>
<div></div>
<div>Ro is consistently recognized as a top workplace in Health Care, in New York, and for Women and Parents&mdash;earning more than 20 honors from Fortune, Great Place to Work, and PEOPLE since 2021. In 2025 alone, we ranked top 5 among medium workplaces in Health Care and New York, and top 50 nationwide.</div><div></div><h3 class="jobSectionHeader"><b><br>
The Role</b></h3>
<div>As a Senior Security Engineer, Enterprise SaaS, you&rsquo;ll serve as Ro&rsquo;s hands-on technical lead and builder for SaaS security posture management (SSPM) and data loss prevention (DLP). You&rsquo;ll define the standards, automation, and monitoring that keep our SaaS platforms secure, compliant, and reliable as the business scales. This role blends architecture with execution: you&rsquo;ll engineer hands-on solutions and automated workflows while guiding how Ro integrates, governs, and secures numerous SaaS services across the enterprise. You&rsquo;ll partner across Security Operations, IT, GRC, and Product Security to shape a unified SaaS security strategy that keeps our people productive and patient data protected.</div>
<h3 class="jobSectionHeader"><b>What You&rsquo;ll Do</b></h3><ul>
<li>Own the architecture, implementation, and continuous improvement of Ro&rsquo;s SSPM and DLP platforms driving security maturity across our robust SaaS landscape.</li>
<li>Define and evolve SaaS security standards, access models, and configuration baselines that balance control with business agility.</li>
<li>Engineer the SaaS lifecycle: Build scalable SaaS lifecycle automations, ranging from posture monitoring and alerting to end-to-end remediation workflows using Tines or similar orchestration platforms.</li>
<li>Partner across teams to embed SaaS security into identity management, onboarding/offboarding, and vendor risk processes.</li>
<li>Collaborate with Security Operations to investigate SaaS-related alerts, ensuring rapid, documented, and systemic remediation.</li>
<li>Lead the integration of SaaS controls into SIEM and SOAR systems (e.g., Splunk, Tines), ensuring actionable telemetry and streamlined response.</li>
<li>Contribute to compliance alignment, ensuring SSPM and DLP controls satisfy HIPAA,HITRUST and SOC 2 requirements.</li>
<li>Mentor peers and share expertise across Security and IT teams, elevating overall SaaS security awareness and discipline.</li>
</ul><h3 class="jobSectionHeader"><b>What You&rsquo;ll Bring</b></h3><ul>
<li>5+ years of experience in Security Engineering or Cloud Security roles, with expertise in SaaS ecosystems, automation, and data protection.</li>
<li>Proven success implementing and managing SSPM and DLP technologies such as AppOmni, Obsidian, BetterCloud, Nightfall, Netskope, etc.</li>
<li>A sharp analytical mindset with the ability to ask the right questions to uncover hidden risks, coupled with the judgment to rationalize complex SaaS features against security policies and risk tolerance.</li>
<li>Demonstrated experience integrating SaaS controls into SIEM/SOAR systems and automating detection, response, and reporting.</li>
<li>Working knowledge of data classification, privacy, and governance frameworks relevant to healthcare or regulated industries.</li>
<li>Excellent communication and collaboration skills &mdash; able to influence both technical and executive stakeholders.</li>
<li>A builder&rsquo;s mindset &mdash; practical, automation-oriented, and focused on delivering scalable, measurable outcomes.</li>
<li>Bonus: direct experience supporting HIPAA, HITRUST or SOC 2 compliance, or prior work securing cloud-first healthcare or fintech environments.</li>
</ul><h3 class="jobSectionHeader"><b>We&rsquo;ve Got You Covered</b></h3><ul>
<li>Full medical, dental, and vision insurance + OneMedical membership</li>
<li>Healthcare and Dependent Care FSA</li>
<li>401(k) with company match</li>
<li>Flexible PTO</li>
<li>Wellbeing + Learning &amp; Growth reimbursements</li>
<li>Paid parental leave + Fertility benefits</li>
<li>Pet insurance</li>
<li>Student loan refinancing</li>
<li>Virtual resources for mindfulness, counseling, and fitness</li>
</ul><div>The target base salary for this position ranges from $153,400 to $186,000, in addition to a competitive equity and benefits package (as applicable). When determining compensation, we analyze and carefully consider several factors, including location, job-related knowledge, skills and experience. These considerations may cause your compensation to vary.</div><div></div><div><br>
Ro recognizes the power of in-person collaboration, while supporting the flexibility to work anywhere in the United States. For our Ro&rsquo;ers in the tri-state (NY) area, you will join us at HQ on Tuesdays and Thursdays. For those outside of the tri-state area, you will be able to join in-person collaborations throughout the year (i.e., during team on-sites).</div>
<div></div>
<div>At Ro, we believe that our diverse perspectives are our biggest strengths &mdash; and that embracing them will create real change in healthcare. As an equal opportunity employer, we provide equal opportunity in all aspects of employment, including recruiting, hiring, compensation, training and promotion, termination, and any other terms and conditions of employment without regard to race, ethnicity, color, religion, sex, sexual orientation, gender identity, gender expression, familial status, age, disability and/or any other legally protected classification protected by federal, state, or local law.</div>
<div></div>
<div>Ro is committed to providing reasonable accommodations for qualified individuals with disabilities in our application and interview process. If you require a reasonable accommodation in the application or interview process, please contact us at talent@ro.co.</div>
<div></div>
<div>See our California Privacy Policy here.</div>
<p>
We may use automated tools, including artificial intelligence (AI), to assist with parts of our recruiting and hiring process, such as reviewing applications, evaluating resumes, and assessing responses or job-related qualifications. These tools are used to support our recruitment team and do not replace human judgment. Final hiring decisions are made by humans.</p></div>

Senior Security Engineer, Enterprise SaaS

K Health

<div><h3 class="jobSectionHeader"><b>About the role:</b></h3>
<p>
We are seeking a detail-oriented, proactive Security Compliance Engineer to join our Security team.</p>
<p>
In this role, you will not just check boxes; you will own the governance and compliance lifecycle for critical security programs and, in many cases, be actively involved in implementation and remediation. You will ensure that our vulnerability management, privacy, data retention, and business continuity efforts meet the rigorous standards of <b>SOC 2, HIPAA, and HITRUST</b>, protecting our sensitive healthcare data and maintaining trust with our partners.</p>
<h3 class="jobSectionHeader"><b>
What you will do:
</b></h3><h3 class="jobSectionHeader"><b>Vulnerability Management Governance</b></h3>
<ul><li>Oversee the compliance aspect of the vulnerability management program, ensuring scans and remediation efforts adhere to SLAs.</li>
<li>Track and report on remediation timelines to ensure evidence is audit-ready.</li>
<li>Collaborate with engineering and IT teams to validate that exceptions are documented, risk-accepted, and reviewed periodically.</li>
<li>Manage and handle &quot;tracking technologies&quot; to comply with partner requirements</li>
</ul>
<p><b>Privacy &amp; Data Governance</b></p>
<ul>
<li>Manage adherence to internal privacy policies and external regulations (HIPAA, State Laws, CCPA).</li>
<li>Manage adherence to partner-specific health system requirements</li>
<li>Monitor data retention schedules to ensure data is stored, archived, and purged in accordance with policy and legal requirements.</li>
<li>Conduct periodic privacy impact assessments (PIAs) for new products or features.</li>
</ul>
<p><b>Disaster Recovery (DR) &amp; Business Continuity (BCP)</b></p>
<ul>
<li>Coordinate annual or bi-annual DR/BCP table-top exercises and technical tests.</li>
<li>Maintain and update DR/BCP documentation, ensuring contact lists and recovery procedures are current.</li>
<li>Review post-mortem reports from tests to ensure continuous improvement and compliance with availability trust principles.</li>
</ul>
<p><b>Audit &amp; Framework Management (SOC 2 &amp; HITRUST)</b></p>
<ul>
<li>Serve as a primary point of contact for external auditors during SOC 2 and HITRUST assessments.</li>
<li>Collect, organize, and review evidence on the controls for the programs above.</li>
<li>Identify compliance gaps and drive remediation projects before external audits begin.</li>
</ul>
<p><b>AI/ML in healthcare and emerging federal and state AI regulations</b></p>
<h3 class="jobSectionHeader"><b>
What we're looking for:</b></h3>
<ul><li><b>Experience:</b> 3-5+ years of experience in Information Security, Governance, Risk, Vulnerability Management, Compliance (GRC), or IT Audit.</li>
<li><b>Program Management:</b> Proven experience managing specific compliance verticals like vulnerability management or business continuity.</li>
<li><b>Communication:</b> Ability to translate compliance requirements into actionable technical tasks for engineering teams.</li>
<li><b>Organization:</b> Exceptional documentation skills&mdash;you understand that &quot;if it isn't written down, it didn't happen.&quot;</li>
<li><b>Influence:</b> Ability to drive consensus and compliance across teams without direct management authority.</li>
</ul>
<p><b>Benefits &amp; Perks:</b><b> </b>#LI-Hybrid</p>
<ul>
<li>Hybrid work schedule with weekly lunches and stocked fridges</li>
<li>Monthly social committees for company events</li>
<li>18 vacation days, 9 company holidays, 5 sick days, and 2 personal days</li>
<li>Stock options for every full-time employee</li>
<li>Paid parental leave</li>
<li>401k benefit</li>
<li>Commuter Benefits</li>
<li>Competitive health, dental, and vision insurance options</li>
</ul><div><p><b>
Who We Are:</b></p>
<p>
Behind every leading health system is K Health's AI-powered virtual care engine.</p>
<p>
Esteemed health systems like Mayo Clinic, Cedars-Sinai, Mass General Brigham, Hackensack Meridian Health, and Hartford Healthcare partner with K Health to build and run modern primary virtual care clinics on their behalf.</p>
<p>
Our deeply integrated model modernizes the primary care loop by using AI to put humans first. For our patients, we offer clinical AI (i.e., PatientGPT) and unparalleled access to close care gaps around the clock. For our Providers, we deliver provider-serving agentic solutions (i.e., Perfect Note) to eliminate administrative overload and burnout. And for the health systems, we deploy our top-grade Virtualists in AI-powered virtual clinics 24/7 to capture the patients' care journeys at step one, retain the journey through the system for longitudinal care, and strengthen profitability.
</p><p>We're founded in 2016, headquartered in New York City, and backed by nearly $400 million from leading investors including Valor Equity Partners, Claure Group, Mangrove Capital Partners, 14W, Notable Capital, Lerer Hippeau, Primary Venture Partners, Comcast Ventures, PICO Venture Partners, Max Ventures, and other strategic healthcare partners.</p><br>
<p><i>
We offer competitive compensation packages based on industry benchmarks for function, level, and geographic location. Offer amounts are determined by multiple factors such as a candidate's experience and expertise.</i><i>
</i></p><p><i>We are proud to be an Equal Opportunity Employer and consider applicants for employment regardless of race, ethnicity, religion, color, national origin, ancestry, disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, sexual orientation, pregnancy, childbirth and breastfeeding, age, citizenship, military or veteran status, or any other class protected by applicable federal, state, and local laws. </i><i>We're deeply committed to building teams as diverse as the patients we serve and strive to cultivate an environment where everyone can bring their most authentic self to work. We depend on our differences to make our team stronger, our workplace more dynamic, and our product accessible to all of our users.</i></p>
<p><i>
We are committed to maintaining the integrity of our hiring process and ensuring a safe environment for all candidates. All communication for job offers from K Health will come from email addresses ending in @khealth.com. K Health will never ask you to provide financial information about yourself during the recruitment process. We will never use personal email accounts or other domains for official correspondence. Our official job postings are only listed on our official website and reputable job boards. Be cautious of job offers from sources other than these platforms.</i></p></div></div>

Senior Security Engineer - Compliance and Risk

CVS Health

<div><p>We&rsquo;re building a world of health around every individual &mdash; shaping a more connected, convenient and compassionate health experience. At CVS Health&reg;, you&rsquo;ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger &ndash; helping to simplify health care one person, one family and one community at a time.</p><p></p><p><b>
Position Summary</b></p><p><br>
We are seeking a hands-on and highly skilled Senior Secrets Manager Engineer to join our Identity and Access Management (IAM) team. This role will focus on the design, deployment, and operational support of enterprise-grade secrets management platforms&mdash;primarily Akeyless and HashiCorp Vault&mdash;across multi-cloud environments. The ideal candidate will be a subject matter expert (SME) in secrets management, automation, and cloud-native security practices.</p><ul><li>
Serve as the SME for secrets management platforms such as Akeyless and HashiCorp Vault.</li><li>
Lead the integration of secrets management solutions with CI/CD pipelines, Kubernetes (AKS, GKE), and cloud platforms (Azure, AWS, GCP).</li><li>
Automate the onboarding and rotation of secrets for applications and machine identities.</li><li>
Collaborate with product managers, architects, and application teams to drive adoption and ensure secure implementation.</li><li>
Develop and maintain scripts and automation tools for secrets lifecycle management.</li><li>
Support the migration of non-person accounts from PAM tools to secrets management platforms.</li><li>
Monitor and remediate risks related to unmanaged credentials and privileged access.</li><li>
Contribute to the development of onboarding guides, SDK integrations, and operational runbooks</li></ul><p><b><br>
Required Qualifications</b></p><ul><li>
5+ years of experience in security engineering with a focus on IAM and PAM.</li><li>
3+ years of hands-on experience with Akeyless, HashiCorp Vault, or CyberArk Conjur in production environments</li><li>
3+ years of experience with scripting in Python, Bash, or PowerShell.</li><li>
3+ years of experience in integrating secrets management with Jenkins, GitHub Actions, or similar CI/CD tools.</li></ul><p><b><br>
Preferred Qualifications</b></p><ul><li>
Experience with Kubernetes, container orchestration, and service mesh integrations.</li><li>
Deep understanding of cloud-native architectures and secure DevOps practices.</li><li>
Familiarity with API-based secret access, SDKs, and CLI tools</li><li>
Experience working in large-scale enterprise environments.</li><li>
Exposure to hybrid secrets management strategies involving multiple vaulting solutions (e.g., Azure Key Vault, AWS Secrets Manager)</li><li>
Knowledge of Just-in-Time access, certificate-based authentication (e.g., Venafi), and Zero Knowledge encryption models</li><li>
Familiarity with compliance frameworks and audit requirements for secrets management.</li></ul><p></p><p><b>
Education</b></p><ul><li>
Bachelor&rsquo;s degree or equivalent experience (High School Diploma and 4 years relevant experience)</li></ul><p></p><p><b>
Anticipated Weekly Hours</b></p>
40<p></p><p><b>
Time Type</b></p>
Full time<p></p><p><b>
Pay Range</b></p><p>
The typical pay range for this role is:</p><p></p>
$83,430.00 - $222,480.00<p></p><p>
This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above.</p><p><br>
Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.</p><p></p><p><b>
Great benefits for great people</b></p><p></p><p>
We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families.</p><br>
This full‑time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well‑being of colleagues and their families. The benefits for this position include medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources, based on eligibility.<p><br>
Additional details about available benefits are provided during the application process and on Benefits Moments.</p><br>
We anticipate the application window for this opening will close on: 04/17/2026<p></p><p>
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.</p></div>

Senior Secrets Management Engineer - Akeyless

Wisetek Providers, Inc

<p><b>Company Overview</b><br/>Wisetek Providers, Inc. has been a leader in delivering innovative software solutions since 1997, leveraging modern technology tools to meet the evolving needs of the information system industry. With a team of highly skilled professionals, the company is committed to providing cutting-edge services that address complex cybersecurity challenges across various sectors.</p><p>We have several openings in different cybersecurity roles.</p><p><i><b>Location: Brooklyn, New York (Hybrid - 3 days in-person, 2 days remote)</b></i></p><p><b>Cyber Security Network Engineer</b></p><p><b>Open position:1</b></p><p><i><b>Objective</b></i><b>: </b>Work with DC Architect to assess and map the network in all Locations / Environments using existing tools such as SNOW ITOM and app dynamics, and any configuration management database.</p><p><i><b>Scope:</b></i></p><ul><li>Map network elements in all environments and locations - hoteling, OTI, Cloud.</li></ul><p><i><b>Tasks Breakdown:</b></i></p><ul><li>Inventory and asset discovery in ALL locations / Environments</li><li>Identify critical applications and services</li><li>Identify critical infrastructure</li><li>Create network architecture map of sufficient detail</li><li>Identify network traffic and behaviorCyber Security Disaster Recovery (DR) Architect<b>o</b> Design DR solution for the agency for services for all locations / environments (hoteling, cloud, OTI) leveraging existing solutions like Commvault and native Cloud Services solutions.</li></ul><p><b>Cyber Security Disaster Recovery (DR) Architect</b></p><p><i><b>Scope:</b></i></p><ul><li>Design DR solutions for all locations and environments for critical applications and services.</li></ul><p><i><b>Tasks Breakdown:</b></i></p><ul><li>Data recovery solution that leverages existing tools (combination of hardware and software) for each environment and location.</li><li>Application and workflow recovery solution that leverages existing tools for each environment and location</li><li>Create DR solution security pattern for each location / environment.</li><li>Activation of DR solution</li><li>Test and Validate DR solution(s)</li><li>Cyber Security Disaster Recovery Specialist</li></ul><p><b>Tasks &amp; Duties:</b></p><p><i><b>Objective:</b></i></p><ul><li>Determine RTO and RPO for critical services and applications.</li></ul><p><i><b>Scope:</b></i></p><p>Program area-specific application and data RTO and RPO for disaster recovery</p><p><i><b>Tasks Breakdown:</b></i></p><ul><li>Application Inventory</li><li>Business Impact and Risk analysis</li><li>Work with the development team and business team to determine appropriate RPO and RTO</li><li>Develop recovery strategies</li></ul><p><b>Senior Cybersecurity Manager</b></p><p><b>Open position:1</b></p><p><i><b>Objective:</b></i></p><p>o To ensure prompt identification and prioritization of IT/security service disruptions and alerts arising during the DSS Data Center migration from Brooklyn to a hybrid Cloud and NJ DR facility. Security triage in data center migration refers to the process of identifying, assessing, and responding to security incidents and vulnerabilities that arise throughout the various stages of a data center migration project.</p><p><i><b>Scope:</b></i></p><p>Analyze infrastructure Vulnerability service tickets related to the migration project for all new hardware / environments and locations.</p><p><i><b>Tasks Breakdown:</b></i></p><ul><li>Maintain proactive communication with stakeholders including ITS, OTI, DSS Legal Affairs, and NYC Cyber Command.</li><li>Coordinate across legacy, cloud, and DR environments, leveraging knowledge of SIEM (Splunk), EDR (CrowdStrike), and endpoint policy management (Trellix).</li><li>POC for all infrastructure Vulnerability findings found for all locations and environments for the D/C move.</li><li>Coordinate vulnerability remediation for new infrastructure and environments as part of D/C move.</li><li>Create remediation workflows affecting systems and environments related to the DC implementation.</li><li>Maintain structured management and communication for vulnerabilities related to the DC implementation.</li><li>Document resolutions and practices for institutional knowledge and audit.</li></ul><p>Pay: $85,000.00 - $120,000.00 per year</p><p>Work Location: In person</p>

Cybersecurity Engineer

Santander Consumer Bank

<div><div><div><h1 class="jobSectionHeader"><b>Associate, Information Security</b></h1>
<p>New York, New York</p><p></p><div><div>
</div></div><div><div><div>Job ID</div>
<div>Req1563874</div>
</div><div><div>Category</div>
<div>Technology Risk &amp; Cybersecurity</div>
</div><div><div>Date posted</div>
<div>04/11/2026</div>
</div></div></div><div><div><b>It Starts Here:</b><p></p><p>
Santander is a global leader and innovator in the financial services industry and is evolving from a high-impact brand into a technology-driven organization. Our people are at the heart of this journey and together, we are driving a customer-centric transformation that values bold thinking, innovation, and the courage to challenge what&rsquo;s possible. This is more than a strategic shift. It&rsquo;s a chance for driven professionals to grow, learn, and make a real difference.</p><p></p><p>
If you are interested in exploring the possibilities <b>We Want to Talk to You!</b></p><p></p><p><b>
The Difference You Make:</b></p><p>
Santander is seeking an Associate, Information Security professional to join the Information Security team within the First Line of Defense. This role is primarily focused on <b>Vulnerability Management</b>, with exposure to <b>Network Security</b> as a secondary or &ldquo;nice to have&rdquo; capability. The ideal candidate is a cybersecurity professional who can support, monitor, and help maintain information security controls across on-premises and cloud environments.</p><p></p><p>
As an Associate, you will:</p><ul><li>
Protect the Company, customers, and employees by identifying and mitigating technology threats to Santander</li><li>
Support and strengthen Santander&rsquo;s vulnerability management program through scanning, analysis, prioritization, and remediation tracking</li><li>
Help identify security risks, configuration gaps, and control weaknesses across infrastructure, applications, and cloud services</li><li>
Partner with technology and business teams to drive timely remediation and improve security posture</li><li>
Gain exposure to regulatory expectations and enterprise security operations</li><li>
Build a strong foundation in cyber risk management, with optional growth into network security disciplines.</li></ul><p></p><p><b>
What You Bring:</b></p><p>
The role will report directly to the Director of Information Security and functionally to the Santander US Tower Head of Infrastructure Security Services. The Associate Information Security professional will <b>work closely with multiple technology, application, and business teams</b> across the Santander ecosystem to help <b>advise on secure design and implementation of solutions</b>.</p><p></p><p>
Under the guidance of senior security leaders, this role supports the integration of security controls into new and existing systems while ensuring alignment with Santander&rsquo;s information security policies, standards, and regulatory expectations. The role also supports <b>process improvement and automation initiatives</b>, including the use of scripting and <b>prompt engineering techniques</b> to help streamline repetitive audit, risk, and security-related tasks within the Information Security function.</p><p></p><p><b>
Primary Focus: Vulnerability Management</b></p><ul><li>
Create vulnerability scanning schedules and perform scans on a periodic and ad hoc basis to identify vulnerabilities</li><li>
Conduct vulnerability assessments on IT infrastructure, applications, and related information assets</li><li>
Support the operation and governance of the vulnerability management lifecycle</li><li>
Analyze and prioritize vulnerabilities using the Common Vulnerability Scoring System (CVSS), threat intelligence, exploitability, and business context</li><li>
Identify gaps and risks and drive remediation through closure within established timeframes</li><li>
Partner with infrastructure, application, cloud, and business teams to validate findings and support remediation planning</li><li>
Track remediation progress, escalate aging issues, and support risk acceptance processes when needed</li><li>
Establish, track, and report key vulnerability management metrics (e.g., scan coverage, SLA adherence, critical vulnerability aging)</li><li>
Participate in change request reviews assessing security risk and recommend solutions</li><li>
Perform risk assessments and/or control gap analysis against Information Security Policies and Standards</li></ul><p></p><p><b>
Broader Information Security Responsibilities:</b></p><ul><li>
Collaborate with technology teams to advise on secure implementation of solutions across the Santander environment</li><li>
Provide security input during solution design and change activities, ensuring controls are embedded early in the delivery lifecycle</li><li>
Translate information security requirements into practical, business-aligned guidance for partner teams</li><li>
Support automation of repetitive security and audit-related tasks using scripting tools and prompt engineering techniques</li><li>
Implement book-of-work projects and initiatives within scope, on time, and within budget</li><li>
Establish and maintain appropriate governance forums and escalation paths</li><li>
Manage and monitor technology, audit, and regulatory risk through governance, oversight, reporting, and training initiatives</li><li>
Partner with examiners and auditors on technology examinations, gathering information and responding to findings</li><li>
Bachelor's Degree or equivalent work experience: Computer Science or equivalent field. - Required.</li><li>
5+ Years Experience in information security, governance, IT audit, or risk management. - Required.</li><li>
5+ Years SAS experience. - Required.</li><li>
Understanding of regulatory expectations related to technology and cyber risk (e.g., OCC, FFIEC, DORA, SOX, NYS DFS).</li><li>
Experience with cyber security and information security program management and frameworks (e.g., NIST CSF, ISO/IEC 27000, etc.).</li><li>
Working knowledge of security systems or tools such as Qualys, AlgoSec, Microsoft SCCM, Ansible, Red Hat Satellite, ServiceNow (SNOW), CMDB, etc.</li><li>
Proven ability to work in a team environment.</li><li>
Possess the ability to perform under pressure in a challenging environment.</li><li>
A hunger to learn and take on challenging opportunities, contributing to the success of the information security team.</li><li>
Possess a highly developed sense of personal accountability and follow-through with an ability to effectively prioritize multiple tasks and projects.</li><li>
Must take ownership, demonstrate a sense of urgency, and ensure accuracy and quality.</li></ul><p></p><p><b>
Certifications:</b></p><ul><li>
CompTIA Security+, CompTIA Network+, CISSP</li></ul><p></p><p><b>
It Would Be Nice For You To Have:</b></p><p>
Experience in the following areas is considered a plus:</p><ul><li>
Support oversight of Network Security controls, including firewalls, proxy, Intrusion Prevention Systems (IPS), VPN, Web Application Firewall (WAF), and Network Access Control (NAC), across on-premises and cloud environments</li><li>
Conduct periodic reviews of firewall, proxy, and VPN configurations in accordance with Santander US standards and processes</li><li>
Review firewall configurations to ensure inbound and outbound traffic is limited to what is necessary for business purposes, and that all other traffic is explicitly denied and logged</li><li>
Familiarity with network segmentation, access control principles, and secure rule lifecycle management</li></ul><p></p><p><b>
What Else You Need To Know:</b></p><p>
The base pay range for this position is posted below and represents the annualized salary range. For hourly positions (non-exempt), the annual range is based on a 40-hour work week. The exact compensation may vary based on skills, experience, training, licensure and certifications and location.</p><p></p><p><b>
Base Pay Range:</b></p><p>
Minimum:</p>
$125,000.00 USD<div><div><div><div><div><div><div><p>
Maximum:</p></div></div></div></div></div></div></div>
$165,000.00 USD<p></p><p><b>
We Value Your Impact:</b></p><p>
Your contribution matters and it&rsquo;s recognized. You can expect a fair and competitive rewards package that reflects the impact you create and the value you deliver. We know rewards go beyond numbers. Offering more than just a paycheck our benefits are designed to support you, your family and your well-being, now and into the future. Santander Benefits - 2026 Santander OnGoing/NH eGuide (foleon.com)</p><p></p><p><b>
Risk Culture:</b></p><p>
We embrace a strong risk culture and all of our professionals at all levels are expected to take a proactive and responsible approach toward risk management.</p><p></p><p><b>
EEO Statement:</b></p><p>
At Santander, we value and respect differences in our workforce. We actively encourage everyone to. Santander is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, genetics, disability, age, veteran status or any other characteristic protected by law.<br>
<br>
<b>Working Conditions:</b></p><p>
Frequent minimal physical effort such as sitting, standing and walking is required for this role. Depending on location, occasional moving and lifting light equipment and/or furniture may be required.<br>
<br>
<b>Employer Rights:</b></p><p>
This job description does not list all of the job duties of the job. You may be asked by your supervisors or managers to perform other duties. You may be evaluated in part based upon your performance of the tasks listed in this job description. The employer has the right to revise this job description at any time. This job description is not a contract for employment and either you or the employer may terminate your employment at any time for any reason.</p><p></p><p><b>
What</b><b> To Do Next</b><b>:</b></p><p>
If this sounds like a role you are interested in, then please.</p><p></p><p>
We are committed to providing an inclusive and accessible application process for all candidates. If you require any assistance or accommodation due to a disability or any other reason, please contact us at TAOps@santander.us to discuss your needs.</p></div></div></div></div><p></p>

Associate, Information Security

Explore 228+ Security engineer in New York this April. Find roles across top companies and apply now to boost your career.