cybersecurity engineer - cryptography - director

software engineer

ai engineer

associate, information security Jobs in New York

associate, information security

cybersecurity engineer - cryptography - director Jobs in New York

director of information security Jobs in New York

director of information security

security engineer

FluidStack

<div><div><div>New York, NY,Austin, TX,San Francisco, CA
 </div></div><div>Full Time</div></div>
<br><div><h1 class="jobSectionHeader"><b>About Fluidstack</b></h1>
<p>At Fluidstack, we build the compute, data centers, and power that will fuel artificial superintelligence. We supply GWs of compute capabilities to the world&rsquo;s biggest AI Labs at industry-defining speeds.</p>
<p>Our team is small, fast, and obsessed with quality. We own outcomes end-to-end, challenge assumptions, and treat our customers' problems as our own. No task is beneath anyone here.</p>
<p>There are a few thousand people who will shape the trajectory of superintelligence. Come and be one of them.</p>
<p></p><h1 class="jobSectionHeader"><b>About the Role</b></h1>
<p>Fluidstack is building the security infrastructure that underpins one of the most consequential computing platforms in the world: data center infrastructure serving frontier AI customers at scale. As a Security Engineer, Infrastructure, you will be the hands-on technical owner of the systems and pipelines that make our security program run: SIEM and date warehouse architecture, data ingestion and enrichment, security tool engineering, and the infrastructure that ties it all together. You will work directly with every other member of the security team, and other technical teams, to design, build, and operationalize a modern security stack from the ground up &mdash; spanning IT, OT, cloud, and bare metal environments &mdash; and you will embed security rigor into Fluidstack's software development lifecycle as we scale our engineering organization. This is not a role for someone who wants to maintain what already exists. It is a role for someone who wants to build what doesn't yet.</p>
<h1 class="jobSectionHeader"><b>Focus</b></h1>
<ul><li><p>Play a key role in the design, deployment, and operation of Fluidstack's security tooling and data infrastructure, including log source onboarding, detection engineering, alert tuning, and pipeline management across IT and OT environments</p>
</li><li><p>Help architect and maintain the security data platform &mdash; managing ingestion, normalization, enrichment, and routing of security telemetry from endpoints, network infrastructure, cloud environments, OT/ICS systems, and physical security tooling</p>
</li><li><p>Build and manage integrations between security tools and data systems, including EDR, vulnerability management, SOAR, CASB, and identity platforms</p>
</li><li><p>Embed security controls and review processes into the software development lifecycle, including CI/CD pipeline security, secrets management, artifact integrity, and code review support for security-relevant changes</p>
</li><li><p>Develop and maintain tooling for automated security data collection, normalization, and quality validation across diverse source types</p>
</li><li><p>Collaborate with network, infrastructure, and IT teams to ensure security instrumentation is complete and accurate across all Fluidstack environments, including multi-site data center facilities</p>
</li></ul><h1 class="jobSectionHeader"><b>About You</b></h1>
<ul><li><p>2+ years designing, implementing, configuring, and/or maintaining security infrastructure and security tooling</p>
</li><li><p>Experience with common cloud and virtualization technologies and capabilities</p>
</li><li><p>Experience with security system architecture</p>
</li></ul><h2 class="jobSectionHeader"><b>Salary &amp; Benefits</b></h2>
<ul><li><p>Competitive total compensation package (salary + equity).</p>
</li><li><p>Retirement or pension plan, in line with local norms.</p>
</li><li><p>Health, dental, and vision insurance.</p>
</li><li><p>Generous PTO policy, in line with local norms.</p>
</li></ul><p>The base salary range for this position is $170,000 - $220,000 per year, depending on experience, skills, qualifications, and location. This range represents our good faith estimate of the compensation for this role at the time of posting. Total compensation may also include equity in the form of stock options.</p>
<p></p><p>We are committed to pay equity and transparency.</p>
<p>Fluidstack is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans&rsquo; status, or any other characteristic protected by law. Fluidstack will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.</p>
<p></p><p><i>You will receive a confirmation email once your application has successfully been accepted. If there is an error with your submission and you </i><b><i>did not</i></b><i> receive a confirmation email, please email careers@fluidstack.io with your resume/CV, the role you've applied for, and the date you submitted your application- someone from our recruiting team will be in touch.</i></p></div>

Security Engineer, Infrastructure

<div><div><div>New York, NY,Austin, TX,San Francisco, CA
 </div></div><div>Full Time</div></div>
<br><div><h1 class="jobSectionHeader"><b>About Fluidstack</b></h1>
<p>At Fluidstack, we build the compute, data centers, and power that will fuel artificial superintelligence. We supply GWs of compute capabilities to the world&rsquo;s biggest AI Labs at industry-defining speeds.</p>
<p>Our team is small, fast, and obsessed with quality. We own outcomes end-to-end, challenge assumptions, and treat our customers' problems as our own. No task is beneath anyone here.</p>
<p>There are a few thousand people who will shape the trajectory of superintelligence. Come and be one of them.</p>
<p></p><h1 class="jobSectionHeader"><b>About the Role</b></h1>
<p>Fluidstack is looking for a seasoned Senior / Staff Network Security Engineer to spearhead our security strategy and defend our fast-growing cloud platform. You will design and deploy advanced safeguards concentrated on the network perimeter, ensuring our edge remains secure, resilient, and reliable at massive scale. Operating in a high-throughput environment, you&rsquo;ll keep our infrastructure and services protected while earning trust across the organization. The ideal hire brings +5 years of deep expertise in modern cloud and network architectures&mdash;and a passion for cultivating a security-first culture through mentorship and leadership.</p>
<p><b>Focus</b></p>
<ul><li><p>Perimeter &amp; Edge Security Design: Architect and deploy resilient protections at the network edge &mdash;including perimeter firewalls, proxy layers, WAFs, and CDN-based controls&mdash;to shield Fluidstack&rsquo;s globally distributed footprint. Every ingress point and service should be hardened against unauthorized activity and attack vectors.</p>
</li><li><p>DDoS Resilience: Create and maintain sophisticated DDoS-defense programs that preserve uptime. Continuously analyze traffic, fine-tune safeguards such as rate-limiting and traffic filtering, and react decisively to volumetric spikes or atypical patterns.</p>
</li><li><p>Driving Zero-Trust: Lead the rollout of a Zero-Trust model across Fluidstack&rsquo;s cloud and network domains. Engineer solutions that enforce least-privilege, continuous verification, and service micro-segmentation, eliminating implicit trust at every tier.</p>
</li><li><p>Monitoring &amp; Incident Handling: Stand up comprehensive network-security monitoring to surface threats early. Detect indicators of compromise, hunt for vulnerabilities, and orchestrate rapid incident-response actions to limit blast radius.</p>
</li><li><p>Cross-Team Partnership: Collaborate closely with Networking, Infrastructure, SRE/DevOps, and Software Engineering to embed security best practices into designs, deployments, and pipelines. Offer expert input during architecture and code reviews to guarantee security-by-design.</p>
</li><li><p>Leadership &amp; Mentoring: Champion security initiatives and cultivate a security-first culture. Coach junior engineers and peer teams on network-security fundamentals, deliver training, and model strict adherence to policies and standards.</p>
</li><li><p>Policy Stewardship: Author, refine, and enforce security policies and SOPs suited to a highly scalable, distributed environment. Periodically reassess network and cloud-security posture, ensuring alignment with industry benchmarks as the company scales.</p>
</li></ul><p><b>About You</b></p>
<ul><li><p>Proven Experience: 5 + years in hands-on network-security engineering, protecting large-scale cloud or hyperscale environments and complex distributed systems.</p>
</li><li><p>Edge-Security Mastery: Deep expertise in edge-protection technologies - DDoS mitigation, web-exploit defense, and Zero-Trust implementations.</p>
</li><li><p>Cloud &amp; Network Know-How: Strong conceptual and practical command of modern cloud and network security. Proficient in protocols (TCP/IP, DNS, BGP, HTTP/S), segmentation, VPNs, and firewall tuning; experienced securing AWS, GCP, Azure, or bespoke hyperscale and containerized platforms.</p>
</li><li><p>Security Leadership: Demonstrated ability to own security programs end-to-end, mentor engineers, and instill a security-centric mindset across varied teams.</p>
</li><li><p>Collaborative Communicator: Excellent at partnering with Networking, Infrastructure, DevOps/SRE, and Software groups to craft security solutions that protect critical assets while empowering the business.</p>
</li><li><p>Policy &amp; Compliance Expertise: Skilled in crafting and evaluating security controls for massively scalable systems, and familiar with frameworks such as NIST, ISO 27001, and SOC 2 in cloud contexts.</p>
</li></ul><p><b>Nice to haves</b></p>
<ul><li><p>Hyperscale Background: Experience inside a top-tier cloud provider or hyperscale setting (FAANG-class or similar) and familiarity with unique security challenges at extreme scale.</p>
</li><li><p>DDoS/WAF Toolset: Acquainted with enterprise-grade DDoS and web-application-security platforms - Cloudflare, AWS Shield, Akamai, Arbor, F5, etc. - and adept at tuning WAF rules and traffic-scrubbing tactics.</p>
</li><li><p>Zero-Trust &amp; IAM: Hands-on design of Zero-Trust networks, including IAM, SSO, MFA, and NAC solutions.</p>
</li><li><p>Automation &amp; Scripting: Comfortable scripting or coding (Python, Go, etc.) to automate security workflows, integrate tools, and secure IaC and CI/CD pipelines.</p>
</li><li><p>Certifications: Credentials such as CISSP, CCSP, GIAC (GSEC, GCIH, &hellip;), or cloud-security specialties (AWS/Azure) that attest to a solid security foundation.</p>
</li><li><p>Lifelong Learner: Active in the security community or open-source projects, with current knowledge of emerging threats, vulnerabilities, and defenses in network and cloud security.</p>
</li></ul><p><b>Salary &amp; Benefits</b></p>
<ul><li><p>Competitive total compensation package (salary + equity).</p>
</li><li><p>Retirement or pension plan, in line with local norms.</p>
</li><li><p>Health, dental, and vision insurance.</p>
</li><li><p>Generous PTO policy, in line with local norms.</p>
</li></ul><p>The base salary range for this position is $200,000 - $350,000 per year, depending on experience, skills, qualifications, and location. This range represents our good faith estimate of the compensation for this role at the time of posting. Total compensation may also include equity in the form of stock options.</p>
<p></p><p>We are committed to pay equity and transparency.</p>
<p>Fluidstack is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans&rsquo; status, or any other characteristic protected by law. Fluidstack will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.</p>
<p></p><p><i>You will receive a confirmation email once your application has successfully been accepted. If there is an error with your submission and you </i><b><i>did not</i></b><i> receive a confirmation email, please email careers@fluidstack.io with your resume/CV, the role you've applied for, and the date you submitted your application- someone from our recruiting team will be in touch.</i></p></div>

Staff Network Security Engineer

Sigma Computing

<p></p><div><h3 class="jobSectionHeader"><b>About the Role</b></h3>
<p>
We are hiring a Senior, hands-on Cloud Security Engineer to secure a large-scale, cloud-native SaaS platform. This is an engineering-first role for someone who builds security solutions&mdash;not just manages tools.</p>
<p>
You will be a SME for cloud security architecture across platform, IAM, network, workload, data, and AI enablement, and partner with Engineering, Security, and Product to implement scalable controls that support business growth. You'll design secure architectures, embed controls into infrastructure-as-code, and build automated guardrails so teams can move fast without waiting on manual security approvals.</p>
<p>
We're looking for a builder-defender who thrives in complex cloud environments, automates aggressively (&quot;let the robots do the work&quot;), and can scale cloud security for a fast-moving SaaS company.</p>
<h3 class="jobSectionHeader"><b>
What You'll Do</b></h3>
<ul><li><b>Architectural Leadership:</b> Partner deeply with infrastructure and engineering teams to embed security into development workflows, leading high-level technical discussions to guide security efforts and strategic priorities.</li>
<li><b>Multi-Cloud Engineering:</b> Design, implement, and continuously improve Sigma Cloud Security across <b>AWS, GCP, and Azure</b> environments with architect-level technical depth.</li>
<li><b>Threat Modeling &amp; IR:</b> Conduct cloud threat modeling and demonstrate hands-on experience in Cloud Incident Response, including investigating and remediating malicious activity within cloud environments.</li>
<li><b>Identity &amp; Access:</b> Build IAM and privileged access strategy (RBAC/ABAC, federation, least privilege, cross-account access), eliminating standing privilege and long-lived credentials. Develop and enforce IAM best practices, including zero-trust models and privileged access controls across IaaS and SaaS.</li>
<li><b>Drive cloud data security controls</b> including classification, encryption/KMS, masking/tokenization, access governance, retention/deletion, and exfiltration risk reduction across APIs and data pipelines.</li>
<li><b>Develop automated remediation workflows</b> for recurring cloud misconfigurations, drift, and policy violations to reduce manual effort and response time.</li>
<li><b>Security Stack Management:</b> Deploy and manage cloud-native services (CSPM, CNAPP, DSPM, SIEM, DLP, WAF, Kubernetes, and container security).</li>
<li><b>Network Defense:</b> Review and apply zero-trust principles through strict network segmentation, authentication, and authorization.</li>
<li><b>Automation:</b> Develop sophisticated signatures/rules for cloud security and automate detection and response workflows.</li>
<li><b>AI :</b> Use AI securely and effectively to scale security practices and improve team efficiency.</li>
<li><b>Continuous Evolution:</b> Stay ahead of threats by leveraging intelligence, attack simulation, and red/blue team learnings.</li>
</ul><h3 class="jobSectionHeader"><b>What We're Looking For</b></h3>
<ul><li>Minimum 7+ years in Security roles with at least 5+ years focused on Cloud security engineering,IAM, and Data security</li>
<li>Bachelor's or Master's degree in Computer Science, Cyber Security, or a related field.</li>
<li>Deep technical expertise in cloud architectures AWS/Azure/GCP; including IAM, networking (VPCs, security groups, PrivateLink), and native security services is strongly desired.</li>
<li>Strong infrastructure-as-code skills&mdash;you write Terraform professionally, not just read it.</li>
<li>Advanced understanding and experience with container security, Kubernetes, and secure CI/CD pipeline design</li>
<li>Proven ability to demonstrate incident response experience specifically related to cloud-based malicious activity and breach remediation.</li>
<li>Advanced Cloud IAM expertise: federation, SSO, PAM/JIT access, service identities, and least privilege design.</li>
<li>Strong background in cloud network security (segmentation, private connectivity, egress controls, WAF).</li>
<li>Strong proficiency in scripting languages (e.g., Python, Go, PowerShell) for automation, data analysis, and security tooling development.</li>
<li>Strong knowledge of security platforms such as CNAPP (Wiz), WAF (Cloudflare), SASE (Netskope)</li>
<li>Demonstrated ability to lead cloud/saas architecture reviews and influence senior engineering stakeholders.</li>
<li>Experience securing data platforms (nice to have) - Snowflake, Databricks, BigQuery etc.</li>
<li>Experience in high-growth SaaS or data platforms Organizations (nice-to have)</li>
<li>Prior experience in Platform Engineering, DevSecops or similar (nice-to have)</li>
<li><b>Certifications (Preferred):</b> Professional-level cloud certifications are required, such as:</li>
<li><ul><li><b>AWS:</b> Certified Security &ndash; Specialty or Solutions Architect &ndash; Professional.</li>
<li><b>GCP:</b> Professional Cloud Security Engineer or Professional Cloud Architect.</li>
<li><b>Azure:</b> AZ-500 (Security Technologies) or AZ-305 (Solutions Architect).</li>
</ul></li>
</ul><p><b>Why Sigma?</b></p>
<p>
At Sigma, security is at the core of our mission. We power insights and innovation for our customers, and protecting their data is our highest priority. As a Senior Security Engineer, you will have the autonomy to shape our Security Engineering strategy, access to cutting-edge technologies, and the opportunity to solve real problems at scale.</p>
<p>
Join us and be part of a security team that values collaboration, innovation, and resilience&mdash;while giving you the room to grow, lead, and leave your mark on Sigma's security journey.</p>
<p><b>
Additional Job details</b></p>
<p>
The base salary range for this position is $210k - $240k annually.</p>
<p>
Compensation may vary outside of this range depending on a number of factors, including a candidate's qualifications, skills, competencies and experience. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work at Sigma Computing. This role is eligible for stock options, as well as a comprehensive benefits package.</p><div><h4 class="jobSectionHeader"><b>
About us:</b></h4>
<p>
Sigma is the AI apps and analytics platform connected to the cloud data warehouse. Using Sigma, business and technical teams can build intelligent, production-ready AI apps that accelerate and automate operational workflows. Sigma provides a spreadsheet interface, SQL and Python editors, visual builders, and native AI to help teams turn live data into interactive applications, analysis, reports, and embedded experiences.</p>
<p>
Sigma announced its $200M in Series D financing in May 2024, to continue transforming BI through its innovations in AI infrastructure, data application development, enterprise-wide collaboration, and business user adoption. Spark Capital and Avenir Growth Capital co-led the Series D funding round, with additional participation from a group of past investors including Snowflake Ventures and Sutter Hill Ventures.The Series D funding, raised at a valuation 60% higher than the company's Series C round three years ago, promises to further accelerate Sigma's growth.
</p><p>Come join us!</p>
<h4 class="jobSectionHeader"><b>
Benefits For Our Full-Time Employees:</b></h4>
<ul><li>Equity
</li><li>Generous health benefits</li>
<li>Flexible time off policy. Take the time off you need!</li>
<li>Paid bonding time for all new parents</li>
<li>Traditional and Roth 401k</li>
<li>Commuter and FSA benefits</li>
<li>Lunch Program</li>
<li>Dog friendly office</li>
</ul>
<p>Sigma Computing is an equal opportunity employer. We are committed to building a smart and strong team regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We look forward to learning how your experience can enable all of us to grow<i>.</i></p>
<p><i>
Note: We have an in-office work environment in all our offices in SF, NYC, and London.</i></p>
<p><b>
Our Privacy Practices
</b></p><p>When you submit a job application on this site, Sigma processes your personal data for the purposes of evaluating your candidacy for employment at Sigma and as otherwise needed throughout the recruitment and hiring process. Please review Sigma's Candidate Privacy Notice for more details. Please note that your personal data may be transferred to a country other than the one in which it was provided (including to USA, the UK, and Canada).</p>
<p><b>
Sigma's use of AI
</b></p><p>This hiring process utilizes artificial intelligence tools to assist in candidate screening and assessment. Our AI tools are designed to complement, not replace, human decision-making.</p></div></div>

Senior Security Engineer II – Cloud & Data Security

Memorial Sloan Kettering Cancer Center

<p>Department: Informatics &amp; Information Technology
Location: New York, NY
Salary: 152,400.00 - 251,600.00 USD Annual</p>
<br><div><div><div><h5 class="jobSectionHeader"><b>Job details</b></h5>
<div><div><div><div><div><div><div><p><b>About Us:</b></p></div></div></div></div></div></div></div><p><br>
</p><p>The people of Memorial Sloan Kettering Cancer Center (MSK) are united by a singular mission: ending cancer for life. Our specialized care teams provide personalized, compassionate, expert care to patients of all ages. Informed by basic research done at our Sloan Kettering Institute, scientists across MSK collaborate to conduct innovative translational and clinical research that is driving a revolution in our understanding of cancer as a disease and improving the ability to prevent, diagnose, and treat it. MSK is dedicated to training the next generation of scientists and clinicians, who go on to pursue our mission at MSK and around the globe.</p><p><br>
</p><div><div><p><b>Exciting Opportunity at MSK:</b><b> </b>Principal Cyber Security Engineer &ndash; Identity Access Management (IAM)</p></div><p></p><div><p>
At MSK, this role serves as a senior technical authority for Identity and Access Management, shaping secure, scalable identity solutions that protect critical systems, users, and data. The Principal Cyber Security Engineer partners across the enterprise to design, implement, and evolve modern identity platforms supporting workforce and external identities.</p></div><p></p><div><p><b><br>
Role Overview</b></p></div><p></p><div><ul><li><p>
Serve as a principal-level technical lead for enterprise Identity and Access Management (IAM) architecture and solutions</p></li></ul></div><div><ul><li><p>
Design and implement secure authentication and authorization flows across workforce and external user populations</p></li></ul></div><div><ul><li><p>
Lead enterprise-scale IAM initiatives leveraging modern federation and identity standards</p></li></ul></div><div><ul><li><p>
Strong experience with PingFederate, PingID, PingOne Suite, including PingOne Protect, PingOne Verify and Davinci</p></li></ul></div><div><ul><li><p>
Partner with security, application, and business stakeholders to align identity strategy with organizational needs</p></li></ul></div><div><ul><li><p>
Provide hands-on technical leadership for advanced identity platforms and integrations</p></li></ul></div><div><ul><li><p>
Drive identity security improvements including MFA, risk-based authentication, and adaptive access</p></li></ul></div><div><ul><li><p>
Troubleshoot and resolve complex authentication, federation, and access issues across platforms</p></li></ul></div><div><ul><li><p>
Influence IAM standards, best practices, and long-term identity roadmap across the enterprise</p></li></ul></div><p></p><div><p><b>
Key Qualifications</b></p></div><p></p><div><ul><li><p>
Deep hands-on experience with SAML, OAuth 2.0, OpenID Connect (OIDC), LDAP, SCIM, and Auth0</p></li></ul></div><div><ul><li><p>
Proven experience delivering enterprise-scale IAM implementations and migrations</p></li></ul></div><div><ul><li><p>
Experience managing identity solutions for both workforce and external/consumer identities</p></li></ul></div><div><ul><li><p>
Strong experience with PingOne Suite, including PingOne SSO, MFA, Protect, and Risk</p></li></ul></div><div><ul><li><p>
Advanced experience with cloud identity architectures in Azure, AWS, and GCP</p></li></ul></div></div><div><div><ul><li><p>
Strong JavaScript experience for custom identity logic, orchestration, and flow extensions</p></li></ul></div><p></p><div><p><b><br>
Core Skills</b></p></div><p></p><div><ul><li><p><br>
Ability to translate complex business requirements into secure, scalable identity solutions</p></li></ul></div><div><ul><li><p>
Strong analytical and troubleshooting skills for browser-based authentication and identity flows</p></li></ul></div><div><ul><li><p>
Advanced use of JSON for APIs, identity payloads, and event-driven integrations</p></li></ul></div><div><ul><li><p>
Working knowledge of XML for federation metadata, policies, and configuration artifacts</p></li></ul></div><div><ul><li><p>
Collaborative, influential mindset with the ability to lead through expertise and technical credibility</p></li></ul></div><div><ul><li><p>
Working knowledge of programming languages (e.g. C#, Java, SQL)</p></li></ul></div><div><ul><li><p>
Strong knowledge in managing Linux and Windows servers.</p></li></ul></div><p></p><div><p><b><br>
Additional Information:</b></p></div><p></p><div><ul><li><p>
Schedule: 9:00 AM &ndash; 5:00 PM EST, Monday - Friday</p></li></ul></div><div><ul><li><p>
Location: Hybrid: 99% remote with flexibility to come to NYC as needed. Must live in commutable distance to NYC</p></li></ul></div><div><ul><li><p>
Reporting To Associate Director, Identity &amp; Access Management</p></li></ul></div><p></p><div><p><b><br>
Helpful Links:</b></p></div><p></p><div><ul><li><p>
Compensation Philosophy</p></li></ul></div><div><ul><li><p>
Benefits</p></li></ul></div></div><p><br>
</p>Pay Range: $152,400.00 - $251,600.00<p><br>
</p>FSLA Status: Exempt<p><br>
</p><p><b>Closing</b>:
</p><p></p><p>At MSK, we believe in fair, competitive pay that reflects your job, experience, and skills.</p><p></p><p>
MSK is an equal opportunity and affirmative action employer committed to diversity and inclusion in all aspects of recruiting and employment. All qualified individuals are encouraged to apply and will receive consideration without regard to race, color, gender, gender identity or expression, sexual orientation, national origin, age, religion, creed, disability, veteran status or any other factor which cannot lawfully be used as a basis for an employment decision.</p><p></p><p>
Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</p>
</div></div><div><div><div><div><p>Application Process</p>
<div><div><div><ul><li><div><b>01</b></div>
<div><p><b>Step 1:</b></p>
<p>Complete an Online Application</p>
</div></li><li><div><b>02</b></div>
<div><p><b>Step 2:</b></p>
<p>Interview Process</p>
</div></li><li><div><b>03</b></div>
<div><p><b>Step 3:</b></p>
<p>Provide References</p>
</div></li><li><div><b>04</b></div>
<div><p><b>Step 4:</b></p>
<p>Extension of Job Offer</p>
</div></li><li><div><b>05</b></div>
<div><p><b>Step 5:</b></p>
<p>Onboarding</p>
</div></li><li><div><b>06</b></div>
<div><p><b>Step 6:</b></p>
<p>New Employee Orientation</p></div></li></ul></div></div></div></div></div></div></div></div><div></div>

Principal Cyber Security Engineer – Identity Access Management (Ping Suite)

Google

<div><h3 class="jobSectionHeader"><b>Minimum qualifications:</b></h3><ul>
<li>Bachelor's degree or equivalent practical experience.<br>
</li>
<li>8 years of experience with security assessments or security design reviews or threat modeling.<br>
</li>
<li>8 years of experience with security engineering, computer and network security and security protocols.<br>
</li>
<li>8 years of coding experience in one or more general purpose languages.<br>
</li>
<li>Experience in vulnerability research or pen testing.</li></ul><br>
<h3 class="jobSectionHeader"><b>
Preferred qualifications:</b></h3><ul>
<li>5 years of experience in offensive security (red teaming, vulnerability research, pen testing, etc.) in a cloud environment.</li>
</ul><div><h2 class="jobSectionHeader"><b>About the job</b></h2><p>
Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.</p>
<p>
Product Security Engineering is the team within the Cloud CISO organization responsible for helping ensure every product in Cloud is as secure as it can be, and increasing the security in the infrastructure underlying all our products.</p><p>
Cloud Red Team's mission is to evaluate our ability to detect and respond to known and unknown threats by simulating real-world adversaries that aim to compromise and persist in Cloud&rsquo;s infrastructure.</p><p>
Google Cloud accelerates every organization&rsquo;s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google&rsquo;s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.</p><p>
The US base salary range for this full-time position is $207,000-$300,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.</p><p>
Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.</p></div><div><h2 class="jobSectionHeader"><b>
Responsibilities</b></h2><ul>
<li>Work with Cloud security teams and Alphabet-wide partners to shape and maintain strategy on one or more focus areas for Cloud Red Team.</li>
<li>Design realistic and relevant attack scenarios based on current threat intelligence and the specific Cloud environment being assessed.<br>
</li>
<li>Work within a highly-skilled team to plan and execute attacks against Cloud&rsquo;s products, services, and infrastructure.<br>
</li>
<li>Identify vulnerabilities and attack vectors within Cloud services, configurations, and related technologies.<br>
</li>
<li>Contribute with subject matter expertise to directly support remediation of multi-faceted, ambiguous security problems.<br>
</li>
</ul></div>Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.</div>

Staff Security Engineer, Cloud Red Team, Cloud CISO

Capital Group

<div><p><b>&ldquo;I can be myself at work.&rdquo;</b></p><p></p><p>
You are more than a job title. We want you to feel comfortable doing great work and bringing your best, authentic self to everything you do. We value your talents, traditions, and uniqueness&mdash;and we&rsquo;re committed to fostering a strong sense of belonging in a respectful workplace.
</p><p></p><p>We intentionally seek diverse perspectives, experiences, and backgrounds, investing in a culture designed to celebrate differences. We believe that belonging leads to better outcomes and a stronger community of associates united by our mission. At Capital, we live our core values every day: Integrity, Client Focus, Diverse Perspectives, Long-Term Thinking, and Community.</p><p></p><p><b><br>
&ldquo;I can influence my income.&rdquo;</b></p><p></p><p><br>
You want to feel recognized at work. Your performance will be reviewed annually, and your compensation will be designed to motivate and reward the value that you provide. You&rsquo;ll receive a competitive salary, bonuses and benefits. Your company-funded retirement contribution will factor in salary and variable pay, including bonuses.</p><p></p><p><b><br>
&ldquo;I can lead a full life.&rdquo;</b></p><p></p><p><br>
You bring unique goals and interests to your job and your life. Whether you&rsquo;re raising a family, you&rsquo;re passionate about where you volunteer, or you want to explore different career paths, we&rsquo;ll give you the resources that can set you up for success.</p><ul><li><p>
Enjoy generous time-away and health benefits from day one, with the opportunity for flexible work options</p></li><li><p>
Receive 2-for-1 matching gifts for your charitable contributions and the opportunity to secure annual grants for the organizations you love</p></li><li><p>
Access on-demand professional development resources that allow you to hone existing skills and learn new ones</p></li></ul><p></p><p><b>
&ldquo;I can succeed as a Senior DevSecOps Engineer at Capital Group.&rdquo;</b></p><p></p><p>
As a Senior DevSecOps Engineer within the Application Security team, you&rsquo;ll support, secure, manage and deploy solutions that secure the software delivery lifecycle for enterprise applications. This is a highly technical role, so you will need a strong understanding of automation, CI/CD infrastructure, software development, and cloud services. Knowledge of information security and application security tools is highly desirable.</p><p>
The DevSecOps engineer supports the security of continuous integration and continuous deployment (CI/CD) initiatives and is an integrated team member working with software developers, system engineers, cybersecurity engineers and systems administrators. The role is security-focused and helps CI/CD pipelines deliver secure software in a scalable manner while showing developer empathy and engineering excellence such as obsession with security tool output quality, false positive removal, using data / metrics to improve tools that integrate into the CI/CD pipeline. This role is hybrid (in-office 3 days/week) in New York NY.</p><p></p><p>
Responsibilities:</p><ul><li>
Simplify automation that applies security inter-workings with CI/CD pipelines.</li><li>
Work to consistently learn and share advanced skills and practices that promote team excellence.</li><li>
Build relationships with developers, stakeholders and scrum master&rsquo;s to incorporate security principles into engineering design and deployments.</li><li>
Supervise testing and validation in application security controls across projects.</li><li>
Oversee implementation of defensive practices and countermeasures across infrastructure and applications.</li><li>
Draft and uphold CI/CD security strategy and practices in tandem with other technical team leads.</li><li>
Serve as a point of contact for security-based escalations and remain tightly involved through resolution.</li><li>
Build services and tools to enable developers and engineers to easily use security components produced by Application Security team members.</li><li>
Support the ability to &ldquo;shift left&rdquo; and incorporate security early on and throughout the development lifecycle.</li><li>
Communicate vulnerability results in a manner understood by technical and non-technical business units based on risk tolerance and threat to the business, and gain support through influential messaging.</li><li>
Leverage Vulnerability database sources to understand the weakness, probability and remediation options supplied by vendors as well as workarounds.</li><li>
Join forces and provision security principles in architecture, infrastructure and code.</li><li>
Regularly research and learn new tactics, techniques and procedures (TTPs) in public and closed forums, and work with colleagues to assess risk and implement/validate controls as necessary through the CI/CD pipeline.</li><li>
Enrich DevOps architecture with security standards and best practices.</li><li>
Partner with teams to define key performance indicators (KPIs) and metrics across business units.</li></ul><p></p><p>
&ldquo;I am the person Capital Group is looking for&rdquo;</p><p></p><ul><li>
Bachelor&rsquo;s degree in Computer Science or related field and/or at least 7+ years&rsquo; experience in information technology, information security administration or security operations.</li><li>
Experience with agile workflows, including Scrum and Kanban.</li><li>
Hands-on experience of containers (e.g., Docker) and container orchestration (e.g., Docker Swarm, Kubernetes).</li><li>
Understanding DevSecOps tooling, including Terraform, Ansible, and CI/CD Pipelines.</li><li>
Experience with operations and security across Amazon Web Services (AWS).</li><li>
Ability to obtain and maintain technical team and business support to influence a collaborative effort to reduce attack surface while performing rapid, continuous implementation.</li><li>
Proficient in designing, building, and deploying complex engineering solutions</li><li>
Expert Programming knowledge in Python. Other Languages a bonus.</li><li>
Interested in Agentic software development, including developing agentic Skills to accelerate feature requests and improve the quality of solutions delivered.</li><li>
Excellence in communicating business risk and remediation requirements from assessments.</li></ul><p></p><p><b>
&ldquo;I can apply in less than 4 </b><b>minutes.&rdquo;</b></p><p><br>
</p><p>You&rsquo;ve reviewed this job posting and you&rsquo;re ready to start the candidate journey with us. Apply now to move to the next step in our recruiting process. If this role isn&rsquo;t what you&rsquo;re looking for, check out our other opportunities and join our talent community.</p><p><br>
</p><p><b>&ldquo;I can learn more about Capital Group.&rdquo;</b></p><p><br>
</p><p>At Capital Group, the success of the people who invest with us depends on the people in whom we invest. That&rsquo;s why we offer a culture, compensation and opportunities that empower our associates to build successful and prosperous careers. Through nine decades, our goal has been to improve people&rsquo;s lives through successful investing. We know that our history is a testament to the strength of the people we hire. More than 9,000 associates in 30+ offices around the world help our clients and each other grow and thrive every day. Find us on LinkedIn, Instagram, YouTube and Glassdoor.&lrm;</p><p></p><p>
&lrm;</p><p>
&lrm;</p><p>
&lrm;</p><p>
&lrm;</p>
New York Base Salary Range: $168,924-$270,278<p>
&lrm;</p><p>
&lrm;</p><p>
&lrm;</p>
&lrm;<p>
&lrm;</p><p>
&lrm;</p><p>
&lrm;</p><p>
&lrm;</p><p>
&lrm;</p><p>
 &lrm;</p><p>
 &lrm;</p><p>
 &lrm;</p><p><i>
In addition to a highly competitive base salary, per plan guidelines, restrictions and vesting requirements, you also will be eligible for an individual annual performance bonus, plus Capital&rsquo;s annual profitability bonus plus a retirement plan where Capital contributes 15% of your eligible earnings.</i></p><p></p><p><i>
You can learn more about our compensation and benefits </i><i>here</i><i>.</i></p><p></p><ul><li><i>Temporary positions in the United States are excluded from the above mentioned compensation and benefit plans.</i></li></ul><p><i><br>
We are an equal opportunity employer, which means we comply with all federal, state and local laws that prohibit discrimination when making all decisions about employment. As equal opportunity employers, our policies prohibit unlawful discrimination on the basis of race, religion, color, national origin, ancestry, sex (including gender and gender identity), pregnancy, childbirth and related medical conditions, age, physical or mental disability, medical condition, genetic information, marital status, sexual orientation, citizenship status, AIDS/HIV status, political activities or affiliations, military or veteran status, status as a victim of domestic violence, assault or stalking or any other characteristic protected by federal, state or local law.</i></p></div>

Senior DevSecOps Engineer

CVS Health

<div><p>We&rsquo;re building a world of health around every individual &mdash; shaping a more connected, convenient and compassionate health experience. At CVS Health&reg;, you&rsquo;ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger &ndash; helping to simplify health care one person, one family and one community at a time.</p><p></p><p><b>
Position Summary</b></p><p></p><p>
The Principal Threat Adversary Operations Engineer &ndash; Red Team is a senior, highly technical individual contributor responsible for designing and executing advanced offensive security operations across complex enterprise, cloud, and hybrid environments. This role leads the development of custom attack techniques and novel adversary simulations, exploring fringe and emerging attack vectors beyond standard penetration testing methodologies. Penetration testing is a core function of the role, with a focus on uncovering high‑impact, previously unidentified security weaknesses across networks, applications, identities, and systems.</p><p></p><p>
Operating at a principal engineering level, the role builds and executes sophisticated attack campaigns using a combination of industry‑standard tooling and extensive custom exploit and tooling development. The Principal Engineer applies deep expertise in adversary tradecraft, scripting, and automation to emulate real‑world threat actors at scale, aligning attack scenarios with modern and emerging Tactics, Techniques, and Procedures (TTPs). Offensive activities are informed by current threat intelligence and adversary modeling to ensure realistic, intelligence‑driven simulations that meaningfully stress defensive controls.</p><p></p><p>
The role serves as a critical purple team partner and trusted advisor to detection, response, and incident investigation teams, translating complex offensive findings into measurable improvements in defensive capability, telemetry, and operational readiness. Through clear articulation of technical risk and business impact, the Principal Engineer influences enterprise security strategy, informs long‑term defensive investments, and supports high‑severity investigations and post‑incident analysis. All offensive activities are executed with strong governance awareness, ensuring alignment with regulatory, audit, and compliance expectations while advancing the organization&rsquo;s adversary‑informed security posture.</p><p></p><p>
Role Responsibilities:</p><p></p><p>
Penetration Testing &amp; Adversary Operations</p><ul><li>
Lead and execute advanced internal and external penetration tests across enterprise, cloud, and emerging technology environments.</li><li>
Design and execute custom adversary emulation campaigns to pressure‑test detection, response, and control effectiveness.</li><li>
Own and evolve the offensive security toolset, including development of custom exploits, scripts, and attack frameworks.</li><li>
Produce executive‑ready assessments that clearly articulate technical risk, business impact, and remediation priorities.</li></ul><p>
Purple Team &amp; Defensive Enablement</p><ul><li>
Partner closely with detection, response, and security engineering teams to drive purple team exercises and adversary‑informed improvements at scale.</li><li>
Translate offensive findings into measurable enhancements in monitoring, telemetry, alerting, and response workflows.</li><li>
Lead technical deep dives and knowledge‑sharing sessions to elevate enterprise understanding of adversary behavior and attack paths.</li></ul><p>
Security Strategy, Automation &amp; Incident Support</p><ul><li>
Influence enterprise adversary operations and threat management strategy through risk‑based assessments and adversary trend analysis.</li><li>
Architect and implement automation to scale penetration testing and adversary simulation capabilities.</li><li>
Provide expert adversary insight during incident response and threat hunting, informing hypotheses, detections, and post‑incident improvements.</li></ul><p></p><p><b>
Required Qualifications</b></p><ul><li>
10+ years of hands‑on experience in penetration testing, red teaming, adversary emulation, and/or offensive security.</li><li>
7+ years of deep experience with tools such as Kali Linux, Metasploit, Nmap, Burp Suite, and comparable frameworks.</li><li>
5+ years of advanced scripting experience (Python, PowerShell, Bash, or similar languages).</li><li>
5+ years of experience securing and testing cloud platforms (AWS, Azure, GCP) and containerized environments.</li></ul><p></p><p><b>
Preferred Qualifications</b></p><ul><li>
Advanced certifications such as OSCP, OSCE, CISSP, CEH, or GPEN.</li><li>
Demonstrated leadership in purple team programs and adversary simulation initiatives.</li><li>
Strong familiarity with PCI‑DSS, HIPAA, ISO 27001, and enterprise compliance environments.</li><li>
Expert knowledge of MITRE ATT&amp;CK, NIST, and CIS security frameworks.</li><li>
Exceptional communication skills with the ability to influence technical and non‑technical senior stakeholders.</li></ul><p></p><p><b>
Education</b></p><ul><li>
Bachelor&rsquo;s degree or equivalent experience (High School Diploma and 4 years relevant experience)</li></ul><p></p><p><b>
Pay Range</b></p><p>
The typical pay range for this role is:</p><p></p>
$144,200.00 - $288,400.00<p><br>
This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. This position also includes an award target in the company&rsquo;s equity award program.</p><p><br>
Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.</p><p></p><p><b>
Great benefits for great people</b></p><p></p><p>
We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families.</p><br>
This full‑time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well‑being of colleagues and their families. The benefits for this position include medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources, based on eligibility.<p><br>
Additional details about available benefits are provided during the application process and on Benefits Moments.</p><br>
We anticipate the application window for this opening will close on: 05/11/2026<p></p><p>
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.</p></div>

Principal Adversary Operations Engineer - Red Team

Explore 510+ Security engineer in New York this May. Find roles across top companies and apply now to boost your career.