security engineering lead

Crane Company

<div>About the Role
Crane Company is seeking a hands-on Principal Security Engineer to help architect the next generation of our enterprise security capabilities and help transform the security of our technology environments. This is a rare opportunity to influence security at scale by building secure-by-design patterns, modernizing the global security technology stack, and partnering deeply with IT and cybersecurity teams across cloud, network, infrastructure, and application domains.
This role is ideal for those who gets energized solutions to complex problems, rationalizing tools, establishing patterns and guardrails, and elevating the security posture across diverse businesses and platforms with an eye on building for the future. If you enjoy creating clarity in complex technical environments, shaping enterprise-wide engineering standards, and delivering high-impact, measurable improvements to security capabilities this is your role. On-site candidates preferred, but remote candidates will also be considered.
Core Function
As a Principal Security Engineer, you will serve as a technical authority for secure architecture, platform security, and enterprise security engineering. You will drive the design, integration, and evolution of core security capabilities, ensuring scalable, consistent, and effective controls across Crane Company&rsquo;s global operating environment, and focused on streamlining M&amp;A processes for secured integrations of technology stacks.
This role focuses on building, integrating, and optimizing the underlying technologies that secure our cloud platforms, networks, endpoints, and infrastructure. You will evaluate existing controls, rationalize overlapping solutions, and lead the implementation of modern, centralized security capabilities.
Your work will directly influence strategic security investments and architectural decisions, and you will have a strong line to the CISO to drive secure design patterns and enterprise security maturity.
Key Responsibilities:
Secure Architecture &amp; Engineering (Primary Focus)
<ul><li>Design, implement, and evolve secure-by-design architectures for cloud, network, identity, endpoint, and infrastructure platforms.
</li><li>Partner closely with IT and engineering teams to embed security controls, guardrails, and patterns early in solution design.
</li><li>Lead consolidation and rationalization of the security technology stack, identifying redundancies and driving integration and modernization.
</li><li>Define and maintain security reference architectures, secure configuration baselines, and architectural patterns across platforms in current state, through M&amp;A and supporting business growth.
</li><li>Evaluate emerging technologies to strengthen enterprise security capabilities while simplifying and centralizing the environment.
</li><li>Drive enterprise-wide adoption of zero trust principles, identity-centric controls, and strong segmentation practices.
</li><li>Build scalable automation for security services, control enforcement, and platform provisioning.
</li></ul>Security Technology Integration &amp; Centralization
<ul><li>Integrate disparate tools and telemetry sources into centralized, unified platforms.
</li><li>Streamline data flows across cloud, on-prem, and hybrid environments to support advanced monitoring and analytics.
</li><li>Engineer interoperability between core security capabilities
</li><li>Develop API-driven automation and orchestration to reduce manual effort and ensure consistent enforcement of controls.
</li><li>Lead technical roadmaps for critical security platforms, ensuring alignment across IT and security stakeholders.
</li></ul>Collaboration &amp; Leadership
<ul><li>Act as a trusted advisor to IT, cloud, network, and infrastructure teams for secure design and control implementation.
</li><li>Provide senior engineering guidance during major digital transformation initiatives, cloud migrations, and infrastructure modernization projects.
</li><li>Partner with security leadership to shape enterprise security strategy and long-term program development.
</li><li>Communicate complex technical concepts to both technical and executive audiences, influencing architectural decisions.
</li></ul>Support for Security Operations
<ul><li>Provide expert engineering support to improve detection, prevention, and resilience capabilities.
</li><li>Assist in defining technical requirements for detection content, logging, and security telemetry (architecture-level input, not SOC operations).
</li><li>Inform security operations teams of architectural gaps and recommended improvements.
</li></ul>Qualifications &amp; Competencies:
Required
<ul><li>10+ years in security engineering, secure architecture, or platform security roles.
</li><li>Deep expertise designing, integrating, and securing enterprise-scale systems across cloud, network, identity, and endpoint domains.
</li><li>Proven experience building or modernizing large-scale security capabilities and consolidating complex toolsets.
</li><li>Strong background in security standards, architectural patterns, and modern control frameworks (Zero Trust, CIS, NIST, MITRE ATT&amp;CK).
</li><li>Hands-on engineering experience with automation, scripting, and API integrations (Python, PowerShell, REST APIs).
</li><li>Strong understanding of cloud-native security (Azure, AWS, OCI), hybrid environments, and infrastructure-as-code.
</li><li>Excellent communication skills, able to influence senior technical and business stakeholders.
</li></ul>Preferred
<ul><li>Experience driving secure design reviews and threat modeling practices.
</li><li>Expertise with identity services (AAD/Entra, SSO, MFA, PAM, secrets management).
</li><li>Knowledge of modern security service architecture (EDR/XDR, SIEM, SOAR, vulnerability management, Cloud, sec/ops
</li><li>Professional certifications (e.g., CISSP, CCSP, GIAC Cloud, GDSA, GCSA).
</li></ul>This description has been designed to indicate the general nature and level of work being performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job.
Crane Company. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, gender, sexual orientation, general identity, national origin, disability or veteran status.</div>

Principal Security Engineer

Banque Misr

<div>
 
 
 Role Description:
 
 
 
 Lead the engineering and deployment of security solutions across infrastructure, applications, and platforms, ensuring effective protection, scalability and compliance with regulatory standards.
 
 
 
 
 
 
 Core Responsibilities:
 
 
 
 &bull;Lead and manage the Infosec Security Engineering team, setting priorities, assigning tasks, and ensuring accountability for security control implementation and validation.
 
 
 &bull;Oversee the selection, evaluation, and approval of security tools and controls, ensuring alignment with organizational security policies and regulatory requirements.
 
 
 &bull;Coordinate with IT, PMO, SOC, GRC, and Architecture teams to ensure security controls are properly implemented, operated, and maintained.
 
 
 &bull;Review and approve engineering plans, remediation activities, and changes to security controls.
 
 
 &bull;Facilitate collaboration with vendors and partners to evaluate new security technologies and assess their applicability for the organization.
 
 
 &bull;Ensure that all security controls are fully documented, and maintain up-to-date documentation, including changes, configurations, and operational procedures.
 
 
 &bull;Monitor team performance, provide guidance, mentoring, and technical leadership to ensure the team meets its objectives effectively.
 
 
 &bull;Track recurring technical issues and control gaps, identify trends, and escalate systemic risks to senior Infosec leadership.
 
 
 &bull;Prepare reports, dashboards, and executive briefings to communicate team performance, security posture, and risk mitigation progress.
 
 
 
 
 
 
 Technical Competencies:
 
 
 <ul>
 <li>
 Security engineering practices.
 </li>
 <li>
 Security controls knowledge..
 </li>
 <li>
 Integration of security tools with infrastructure and applications.
 </li>
 <li>
 Security Certification CISSP , CISM , CEH
 </li>
 </ul>
 
 
 
 
 
 Domain Expertise:
 
 
 <ul>
 <li>
 Bachelor Degree in Engineering, Information Technology or Computer Science.
 </li>
 <li>
 Experience; 8-10 years of experience in Information Security field.
 </li>
 </ul>
</div>

InfoSec Engineering Manager

Synchrony

<div>Job Description:
Role Summary/Purpose:
Synchrony is seeking an AVP, Product Security Architect to provide enterprise-level product security architecture leadership across Synchrony&rsquo;s application and SaaS ecosystem. This role operates at L11 scope&mdash;setting direction, defining standards, and driving adoption at scale&mdash;while partnering closely with product and engineering leaders to embed security into product strategy and modern software delivery.
The AVP will lead the definition of an Application Security Blueprint (reference architectures, approved patterns, and engineering guardrails) and will influence outcomes across multiple portfolios by enabling teams to design and deliver software that is secure-by-design, resilient, and compliant.
Essential Responsibilities:<ul><li>
Set product security architecture direction for assigned portfolios, aligning security architecture decisions with Synchrony technology strategy, risk appetite, and regulatory expectations.</li><li>
Own and evolve the Application Security Blueprint: enterprise application security standards, reference architectures, reusable patterns, and guardrails that enable consistent secure engineering across teams.</li><li>
Serve as a strategic partner to product and engineering leadership, influencing roadmaps and operating models to ensure security is built-in (not bolted-on) and delivery teams can move quickly with well-defined paved roads.</li><li>
Lead architecture governance for product/application security:<ul><li>
establish review criteria and decision frameworks</li><li>
perform design reviews and approve/drive remediation plans</li><li>
manage exceptions with documented risk acceptance, compensating controls, and time-bound closure</li></ul></li><li>
Drive threat modeling at scale by defining methodology and minimum expectations, and by facilitating modeling for high-risk initiatives&mdash;explicitly documenting trust boundaries, data flows, abuse cases, and security requirements.</li><li>
Define and standardize API security architectures (north-south and east-west), including authentication/authorization, token strategy, schema and input validation, anti-automation protections, and rate limiting/throttling patterns.</li><li>
Define patterns for service-to-service security controls in distributed systems, including workload identity, authorization, mTLS, secrets handling, and policy enforcement&mdash;ensuring controls are practical for engineering adoption.</li><li>
Influence and enable secure SDLC and platform controls with engineering enablement in mind (security requirements, pipeline guardrails, dependency/supply-chain controls, secure configuration guidance), partnering with platform teams to operationalize.</li><li>
Establish and track measurable outcomes (e.g., blueprint adoption, recurring architecture risks, API posture improvements, exception burn-down, control coverage for critical apps) and provide clear executive-level reporting.</li><li>
Act as a coach and multiplier: mentor engineers and architects, elevate secure design skills across teams, and improve security decision-making through clear documentation and reusable assets.</li><li>
Perform other duties and/or special projects as assigned.</li></ul>
Qualifications/Requirements:<ul><li>
7+ years in security architecture/engineering, with deep focus on application/product security in modern software environments.</li><li>
Demonstrated ability to operate at an enterprise influence level: setting standards, driving cross-team adoption, and aligning stakeholders with differing priorities.</li><li>
Strong hands-on knowledge of application and service security fundamentals: authentication/authorization, session/token security, cryptography concepts, secrets management, secure logging/monitoring design, and secure data handling.</li><li>
Proven experience leading threat modeling and producing strong architecture artifacts (DFDs, trust boundaries, security requirements, risk assessments).</li><li>
Strong knowledge of API security and common web/service risks (e.g., OWASP Top 10 / API Security Top 10), with the ability to translate risks into enforceable patterns.</li><li>
Excellent communication skills&mdash;able to present clearly to engineering teams and senior leaders, and to produce high-quality architecture documentation.</li><li>
Track record of driving security with product teams: embedding security into product planning, influencing roadmaps, defining &ldquo;definition of done&rdquo; security requirements, and improving time-to-market through paved-road patterns.</li><li>
Experience securing and integrating SaaS applications, including SSO/federation (SAML/OIDC), tenant and data isolation considerations, audit logging, and shared responsibility alignment.</li><li>
Experience implementing service-to-service security patterns at scale (workload identity, mTLS, authorization, policy-as-code concepts).</li><li>
Experience operationalizing security standards into engineering consumables (shared libraries, templates, reference implementations, runbooks).</li><li>
Familiarity with CI/CD-based security enablement (SAST/DAST/SCA, secrets scanning, gating/exception workflows) and vulnerability management operating models.</li><li>
Experience supporting regulated environments and mapping architecture controls to policies/standards.</li><li>
Certifications (preferred): CISSP, CCSP, CSSLP (or equivalent).</li><li>
Ability and flexibility to travel for business as required</li></ul>
Desired Characteristics:<ul><li>
Threat modeling tooling;
</li><li>API gateways/policy enforcement; identity and federation (SSO, SAML, OIDC);
</li><li>application security testing (SAST/DAST/SCA/secret scanning);
</li><li>CI/CD tooling (e.g., GitHub/Jenkins); vulnerability management platforms; logging/monitoring;
</li><li>service mesh/mTLS patterns; secrets management solutions</li></ul>
Grade/Level: 11
The salary range for this position is 115,000.00 - 200,000.00 USD Annual and is eligible for an annual bonus based on individual and company performance.
Actual compensation offered within the posted salary range will be based upon work experience, skill level or knowledge.
Salaries are adjusted according to market in CA, NY Metro and Seattle.
Eligibility Requirements:<ul><li>
You must be 18 years or older</li><li>
You must have a high school diploma or equivalent</li><li>
You must be willing to take a drug test, submit to a background investigation and submit fingerprints as part of the onboarding process</li><li>
You must be able to satisfy the requirements of Section 19 of the Federal Deposit Insurance Act.</li><li>
New hires (Level 4-7) must have 9 months of continuous service with the company before they are eligible to post on other roles. Once this new hire time in position requirement is met, the associate will have a minimum 6 months&rsquo; time in position before they can post for future non-exempt roles. Employees, level 8 or greater, must have at least 18 months&rsquo; time in position before they can post. All internal employees must consistently meet performance expectations and have approval from your manager to post (or the approval of your manager and HR if you don&rsquo;t meet the time in position or performance expectations).</li></ul>
Legal authorization to work in the U.S. is required. We will not sponsor individuals for employment visas, now or in the future, for this job opening. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.
Our Commitment:
When you join us, you&rsquo;ll be part of an inclusive culture where your individual skills, experience, and voice are not only heard &ndash; but valued. Together, we&rsquo;re building a future where we can all belong, connect, and turn ideals into action. More than 50% of our workforce is engaged in our Employee Resource Groups (ERGs), where community and passion intersect to offer a safe space to learn and grow. 
This starts when you choose to apply for a role at Synchrony. We ensure all qualified applicants will receive consideration for employment without regard to age, race, color, religion, gender, sexual orientation, gender identity, national origin, disability, or veteran status. We&rsquo;re proud to have an award-winning culture for all.
Reasonable Accommodation Notice:
<ul><li>Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</li><li>
If you need special accommodations, please call our Career Support Line so that we can discuss your specific situation. We can be reached at 1-866-301-5627. Representatives are available from 8am &ndash; 5pm Monday to Friday, Central Standard Time</li></ul>
Job Family Group:
Information Technology</div>

AVP, Product Security Architect

JPMorganChase

<div>JOB DESCRIPTION 
You are ready to lead and influence the future of technology at a world-renowned company. Join JPMorganChase and unleash your potential in shaping the industry.<div><div>
As a Director of Security Engineering at JPMorganChase you lead at least one technical area with a security engineering focus, and drive impact within teams, technologies, and projects across departments. You are expected to be a &quot;Leader-Builder&quot;&mdash;someone who can define a multi-year strategy while also diving deep into code reviews, architectural whiteboarding, and complex systems integration. You will own the end-to-end lifecycle of services that provide security governance for SaaS.
</div><div></div><div>This is a high-impact, hands-on leadership role you aren't just managing a roadmap; you are a lead architect and coder who ensures our guardrails are seamlessly integrated across our hybrid-cloud environment while maintaining the highest standards of financial regulation and resiliency.</div><div>
</div><div>Utilize your in-depth knowledge of software, applications, technical processes, and product management to drive multiple complex projects and initiatives, while serving as a primary decision maker for your teams and a driver of innovation to deliver security solutions.</div><div>
Job responsibilities<ul><li>
Engineering Leadership: Drive the end-to-end development of firmwide security products. You will remain hands-on in the code to solve complex integration challenges between platforms, SaaS and our core infrastructure.</li><li>
Influences peer leaders and senior stakeholders across the business, product, and technology teams</li><li>
Modernize &amp; Integrate: Lead the technical integration of security controls into our platforms, ensuring &quot;Security-by-Design&quot; without slowing down our developers or business.</li><li>
Be accountable for decisions that influence teams&rsquo; resources, budget, tactical operations, and the execution and implementation of processes and procedures</li><li>
Delivers technical solutions that can be leveraged across multiple businesses and domain.</li><li>
Lead by Doing: Maintain a high level of hands-on technical contribution. You will write or review code, design critical system components, and troubleshoot complex production issues alongside your engineers.</li><li>
Develops and executes the function&rsquo;s objectives and is responsible for outcomes</li><li>
Mentor &amp; Scale: Directly manage and grow a team of security &amp; software engineers, fostering a culture of technical excellence, continuous integration (CI/CD), and test-driven development (TDD).</li><li>
Be responsible for staffing, budget, and relevant profit and loss</li><li>
Champions the firm&rsquo;s culture of diversity, opportunity, inclusion, and respect</li></ul>
</div><div>Required qualifications, capabilities, and skills<ul><li>
10+ years of software engineering and security experience</li><li>
5+ years experience running teams of engineers that deliver security solutions operations on cloud-based platforms and applications</li><li>
Full-Stack Mastery: Expert-level proficiency in multiple coding solutions, with a track record of building secure, scalable distributed systems</li><li>
Experience building security engineering products and solutions for public cloud-based applications and infrastructure</li><li>
Security Foundation: Deep technical knowledge of OAuth2, OIDC, SAML, and TLS/SSL protocols within a CASB or Proxy context.</li><li>
Integration Powerhouse: Proven experience integrating complex security platforms across Hybrid-Cloud environments (AWS/Azure/Private Cloud).</li><li>
Experience hiring, developing, and recognizing talent</li><li>
Experience leading a product as a product owner or product manager</li></ul><div>
Preferred qualifications, capabilities, and skills</div><ul><li>
API Gateway, Custom VPN &amp; proxy Development</li><li>
Infrastructure as Code: Advanced experience with Terraform, Kubernetes (EKS/AKS), and automated security scanning in the pipeline.</li><li>
AI/ML Observability: Hands-on experience building monitoring for LLM-based applications (e.g., tracking token usage, latency, and &quot;hallucination&quot; metrics).</li><li>
SSE, CASB or SIEM integration an hands-on experience building monitoring.</li><li>
Strategic Influence: Ability to translate complex technical risks into business terms for Operating Committee (OC) level stakeholders.</li><li>
Education: BS/MS in Computer Science or equivalent industry experience. 
</li></ul></div></div>ABOUT US 
<div>
<div>JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world&rsquo;s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.
</div><div>We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
<div>We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants&rsquo; and employees&rsquo; religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
JPMorgan Chase &amp; Co. is an Equal Opportunity Employer, including Disability/Veterans 
</div></div></div> 
 
ABOUT THE TEAM 
 
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we&rsquo;re setting our businesses, clients, customers and employees up for success.</div>

Hands-on Security Software Engineering Manager

Leidos

<div>Description
Lead Security Engineer
Leidos has a new and exciting opportunity for a Lead Security Engineer in our Intel Sector's Cyber &amp; Analytics Business Area (CABA). Our talented team is at the forefront in Security Engineering, Computer Network Operations (CNO), Mission Software, Analytical Methods and Modeling, Signals Intelligence (SIGINT), and Cryptographic Key Management. At Leidos, we offer competitive benefits, including Paid Time Off, 11 paid Holidays, 401K with a 6% company match and immediate vesting, Flexible Schedules, Discounted Stock Purchase Plans, Technical Upskilling, Education and Training Support, Parental Paid Leave, and much more. Join us and make a difference in National Security!
Job Summary
Leidos is seeking a Lead Security Engineer to support a mission-critical program, offering a challenging and rewarding opportunity for a hands-on technical leader in the security domain. The selected individual will lead all security engineering efforts for a large, complex network environment with geographically distributed systems; and will manage a team of Information Systems Security Officers (ISSOs) and Information Systems Security Engineers (ISSEs), providing technical leadership and direction to meet program requirements. The selected individual will mentor the team in sound information systems security engineering practices and will be heavily involved in system testing. The selected candidate will work closely with other engineers and technical experts to enhance operational, test, integration, and development environments. Responsibilities include ensuring and maintaining Authorizations to Operate (ATOs) for all System Security Plans (SSPs), and ensuring compliance with Secure the Enterprise/Secure the Network (STE/STN) requirements.
Primary Responsibilities<ul><li>
Responsible for the overall security architecture, ensuring all security requirements are defined, implemented, and verified.</li><li>
Serve as a security subject matter expert (SME), providing guidance and oversight for the end-to-end security architecture.</li><li>
Engage with multiple system owners across multiple networks to interpret, negotiate, and refine system and security requirements.</li><li>
Define and drive security strategy, including risk assessment and management, security control assessment, continuous monitoring, service design, and broader cybersecurity program support.</li><li>
Identify and analyze security issues across complex, highly integrated systems and environments, and develop clear, actionable remediation recommendations.</li><li>
Design, develop, and execute static and dynamic application security testing, as well as penetration testing activities.</li><li>
Partner with development teams to improve understanding of vulnerabilities, attack vectors, and effective remediation techniques.</li><li>
Lead and mentor a team of program security engineers in day-to-day security engineering activities.</li><li>
Collaborate with the program security team to ensure STE/STN and continuous monitoring requirements are met for Test, Integration, and Development environments.</li><li>
Clearly articulate program security requirements, risks, and compliance challenges to multiple customer points of contact.</li><li>
Coordinate with internal cross-functional teams to plan, prioritize, and execute remediation and other security-related activities.</li></ul>
Required Qualifications<ul><li>
Master&rsquo;s degree in Information Technology, Information Assurance, or related field, and at least 15 years of relevant experience. Additional experience may be substituted for a degree.</li><li>
At least 10 years of experience leading large, diverse Security Engineering teams, leading ISSO and ISSE teams.</li><li>
Current active CISSP certification.</li><li>
Certified Scrum Master certification.</li><li>
At least 5 years of experience applying Agile methodologies in security engineering projects, including Scrum or SAFe frameworks.</li></ul><ul><li>
Extensive hands-on experience with modern security tools; hardware and software security implementation; communication protocols; encryption technologies; and web services.</li><li>
Expert-level understanding of security vulnerabilities and remediation techniques, including risk assessment, risk management, and security strategy/design.</li><li>
Extensive experience formulating, implementing, and assessing IT security policy.</li><li>
Solid understanding of ATOs, SSPs, and STE/STN requirements.</li><li>
Direct experience collaborating with software developers, software testers, and integration, deployment, and sustainment teams.</li><li>
Strong communication and interpersonal skills, with a proven ability to clearly convey program requirements and system compliance challenges to multiple customer stakeholders.</li><li>
Demonstrated ability to coordinate across multiple internal teams for planning and remediation activities.</li><li>
Solutions-oriented team player with a high level of self-initiative.</li><li>
Clearance Required: Must have TS/SCI with Polygraph.</li></ul>
Preferred Qualifications<ul><li>
Additional certification: Information System Security Engineering Professional (ISSEP)</li><li>
At least twelve years of experience with defense-in-depth principals/technology (including access control, authorization, identification and authentication, public key infrastructure, network and enterprise security architecture) and applying risk assessment methodology to system development.</li><li>
Experience developing/implementing integrated security services management processes, such as assessing and auditing network penetration tests, anti-virus planning assistance, risk analysis, and incident response.</li><li>
Experience developing/implementing integrated security services management processes, such as assessing and auditing network penetration tests, anti-virus planning assistance, risk analysis, and incident response.</li><li>
Experience providing information assurance support for application development that includes system security certifications and project evaluations for firewalls that encompass the development, design, and implementation.</li></ul>
At Leidos, the opportunities are boundless. We challenge our staff with interesting assignments that allow them to thrive professionally and personally. For us, helping you grow your career is good business. We look forward to learning more about you &ndash; apply today.
careers.leidos.com/CONMD
CSSKEY
CONMD
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo &mdash; because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 &mdash; and moving faster than anyone else dares.<h2 class="jobSectionHeader">
Original Posting:</h2>
March 16, 2026 
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.<h2 class="jobSectionHeader"> 
Pay Range:</h2>
Pay Range $154,050.00 - $278,475.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
About Leidos
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.
Pay and Benefits
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.
Securing Your Data
Beware of fake employment opportunities using Leidos&rsquo; name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system &ndash; never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.</div>

Lead Security Engineer with TS/SCI Poly

ActioNet

<div><div><div><div>The Security Engineering Lead is responsible for engineering, implementing, and maintaining cybersecurity controls across enterprise infrastructure, ensuring protection of systems, compliance with applicable cybersecurity program requirements, and alignment with federal and industry security standards.</div><div>
</div><div></div><div>
Location: Rockville, MD</div><div>
Salary: 177,000-207,000</div><div>
Clearance: Secret or L Clearance</div><div>
</div><h3 class="jobSectionHeader">
Responsibilities:</h3><div><ul><li><div>
Establish, govern, and direct implementation of enterprise cybersecurity control frameworks across server infrastructure, Microsoft 365 services, network environments, cloud platforms, and endpoint systems, ensuring alignment with federal cybersecurity standards, NIST security frameworks, and Zero Trust architecture principles.</div></li><li><div>
Govern the enterprise vulnerability management program, establishing risk-based prioritization strategies, remediation timelines, and executive reporting mechanisms to reduce exposure and ensure continuous compliance across enterprise IT environments.</div></li><li><div>
Define and enforce enterprise security configuration standards including endpoint protection baselines, Microsoft Defender security services, firewall policy governance, encryption controls, and access enforcement mechanisms to maintain confidentiality, integrity, and availability of enterprise systems.</div></li><li><div>
Direct integration and optimization of security telemetry across enterprise SIEM platforms, ensuring comprehensive log ingestion, effective correlation rule development, alert tuning, and alignment with incident detection and response objectives.</div></li><li><div>
Lead enterprise security control assessments, audit readiness activities, and compliance reporting, providing executive-level briefings on risk posture, remediation progress, emerging threat trends, and control effectiveness to senior cybersecurity and IT leadership.</div></li><li><div>
Serve as the enterprise technical authority during cybersecurity incident response activities, directing root cause analysis, validating containment and eradication strategies, and recommending long-term control improvements to prevent recurrence.</div></li><li><div>
Provide cybersecurity risk oversight during Change Advisory Board (CAB) reviews, evaluating infrastructure and application modifications for security impact and approving implementation based on enterprise risk assessment and mitigation adequacy.</div></li><li><div>
Maintain enterprise security architecture documentation, control implementation evidence, risk registers, and remediation tracking artifacts, ensuring audit readiness and demonstrable compliance</div></li></ul></div><div>
</div><h3 class="jobSectionHeader">
Requirements</h3><ul><li><div>
Bachelor&rsquo;s Degree with 12+ years of progressive cybersecurity experience, including demonstrated authority establishing, governing, and directing enterprise security engineering programs within complex IT environments OR Master&rsquo;s Degree with 10+ years or Associate&rsquo;s Degree with 15+ years of relevant experience may be substituted.</div></li><li><div>
Demonstrated experience establishing and governing enterprise cybersecurity control frameworks across server, network, M365, cloud, and endpoint environments.</div></li><li><div>
Proven ability to direct enterprise vulnerability management strategy, including risk-based prioritization, remediation governance, and executive-level reporting of security posture.</div></li><li><div>
Advanced knowledge of federal cybersecurity mandates and NIST-based frameworks.</div></li><li><div>
Experience leading enterprise security assessments, control validation reviews, and audit readiness initiatives.</div></li><li><div>
Demonstrated authority integrating and optimizing security telemetry within enterprise SIEM platforms to enhance detection, response, and threat visibility.</div></li><li><div>
Experience directing incident response activities, providing executive briefings, and recommending long-term control improvements to reduce organizational risk.</div></li><li><div>
Ability to establish security performance metrics and drive continuous improvement across multiple infrastructure domains.</div></li></ul><div>
Preferred Certifications</div><ul><li><div>
Certified Information Systems Security Professional (CISSP)</div></li><li><div>
Certified Information Security Manager (CISM) or Certified Cloud Security Professional (CCSP)</div></li></ul> 
Clearance: 
SECRET or L Clearance</div></div> 
ActioNet is a CMMI-DEV Level 4, CMMI-SVC Level 4, ISO 20000, ISO 27001, ISO 9001, HDI-certified, woman-owned IT Solutions Provider with strong qualifications and expertise in Agile Software Engineering, Cloud Solutions, Cyber Security and IT Managed Services. With 25+ years of stellar past performance, ActioNet is the premier Trusted Innogrator!
Core Capabilities:<ul><li>
Advanced and Managed IT Services</li><li>
Agile Software Development</li><li>
DevSecOps</li><li>
Cybersecurity</li><li>
Health IT</li><li>
C4ISR &amp; SIGINT</li><li>
Data Center Engineering &amp; Operations</li><li>
Engineering &amp; Installation</li></ul>
Why ActioNet?
At ActioNet, our Passion for Quality is at the heart of everything we do:<ul><li>
Commitment to Employees: We are committed to making ActioNet a great place to work and continue to invest in our ActioNeters.</li><li>
Commitment to Customers: We are committed to our customers by driving and sustaining Service Delivery Excellence.</li><li>
Commitment to Community: We are committed to giving back to our community, helping others, and making the world a better place for our next generation.</li></ul>
ActioNet is proud to be named a Top Workplace for the eleventh year in a row (2014 - 2024). We have a 98% customer retention rate. We are passionate about the inspirational missions of our customers, and we entrust our employees and teams to deliver exceptional performance to enable the safety, security, health, and well-being of our nation. 
What's in It For You?
As an ActioNeter, you get to be part of an exceptional team and a corporate culture that nurtures mutual success for our customers, employees, and communities. We give you the tools to be successful; all you need to do is bring your best ideas, your energy, and a desire to develop your skills, experience, and career. Are you ready to make a difference?
ActioNet is an equal-opportunity employer and values diversity at our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. 
Full-Time Employees are eligible to participate in our ActioNet&rsquo;s Benefits Program:<ul><li>
Medical Insurance</li><li>
Vision Insurance</li><li>
Dental Insurance</li><li>
Life and AD&amp;D Insurance</li><li>
401(k) Savings Plan</li><li>
Education and Professional Training</li><li>
Flexible Spending Accounts (FSA)</li><li>
Employee Referral and Merit Recognition Programs</li><li>
Employee Assistance and Identity Theft Protection</li><li>
Paid Holidays: 11 per year</li><li>
Paid Time Off (PTO)</li><li>
Disability Insurance</li></ul>
ActioNet is an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
********Direct Applicants, only. No Agencies, No third-party recruiters, please********</div>

Security Engineer Lead

DigitalOcean

<div><div>Dive in and do the best work of your career at DigitalOcean. Journey alongside a strong community of top talent who are relentless in their drive to build the simplest scalable cloud. If you have a growth mindset, naturally like to think big and bold, and are energized by the fast-paced environment of a true industry disruptor, you'll find your place here. We value winning together&mdash;while learning, having fun, and making a profound difference for the dreamers and builders in the world.</div><h2 class="jobSectionHeader">
We're looking for a security manager passionate about defending the enterprise to lead a team of Security Engineers and Analysts.</h2>

You will manage a team dedicated to defending DigitalOcean's corporate and production environments, reporting to the Director of Security. At the heart of this team's mission lies a commitment to building and maintaining robust systems that keep DigitalOcean's production and corporate infrastructure safe, secure, and defensible. We protect DigitalOcean from internal and external threats by implementing security tools and processes. We collaborate with teams to provide secure-by-design solutions that remove obstacles to productivity, embodying a &quot;yes, and&quot; philosophy rather than &quot;no.&quot;
<h2 class="jobSectionHeader">
What You'll Do:</h2>

Lead and grow the team
<ul>
<li>You will manage, mentor, and hire for a team of 6 infrastructure security engineers and security analysts ranging from junior to staff levels.</li>
<li>You will support team members' career growth, manage performance, and ensure the team maintains a high bar for technical execution.</li>
</ul>
Scale security infrastructure
<ul>
<li>You will lead Infrastructure Security engineers in building and maintenance of critical systems including Vault, VPNs, LDAP, and Network IDS sensors.</li>
<li>You will oversee the maintenance of mission-critical Infrastructure as Code automation, leveraging tools like Ansible, Chef, and Terraform while leading the strategic evolution of IAM and endpoint security for both production and corporate infrastructure.</li>
<li>Maintain the operational health of the team's platforms and services by overseeing a sustainable on-call rotation, serving as a secondary escalation point to support your engineers during major infrastructure disruptions or outages.</li>
</ul>
Mature detection engineering
<ul>
<li>You will lead Security Analysts in building a first line of defense, triaging corporate alerts, and building robust detections.</li>
<li>You will ensure the team effectively monitors for suspicious activity and executes the crucial initial steps of alert triage to activate Incident Response.</li>
<li>Collaborate closely with ICs and leaders in Digital Forensics and Incident Response (DFIR) to ensure the detection pipeline is grounded in reality, building high-fidelity alerts that map directly to potential security incidents and threat actor behaviors.</li>
</ul>
Build bridges, not walls
<ul>
<li>You will foster strong cross-functional relationships by working closely with ICs and leaders across both corporate and technical teams, including IT, Finance, Internal Audit, and Product Engineering.</li>
<li>You will lead your team to be proactive &quot;yes, and&quot; partners who help stakeholders navigate security challenges with clarity and confidence.</li>
</ul><h2 class="jobSectionHeader">What You'll Add to DigitalOcean:</h2>

Experienced management
<ul>
<li>You have 2+ years of experience leading a team of security engineers or analysts.</li>
<li>You are comfortable stepping into a role with 6 direct reports and have a track record of elevating talent across all levels (junior to staff) and keeping them engaged and unblocked.</li>
</ul>
Technical context
<ul>
<li>You possess a deep background in Infrastructure Security, Security Operations, or Security Engineering.</li>
<li>You lead with technical credibility, providing meaningful feedback on complex systems across Identity (IAM, ZTNA), Infrastructure (VPNs, Endpoint, IDS, Vault), and Security Observability platforms.</li>
<li>You have direct experience with security monitoring programs and a passion for maturing enterprise defense.</li>
</ul>
Servant leadership
<ul>
<li>You measure your own success by the success of your team.</li>
<li>You have a track record of defining clear priorities to reduce context switching, clearing operational paths so your engineers and analysts can focus on technical execution, and ensuring they receive visibility and credit for their work.</li>
</ul>
Empathy &amp; communication
<ul>
<li>You translate complex security risks into business context for leadership and teach your team to communicate with empathy and clarity.</li>
<li>You effectively communicate roadmaps, milestones, target dates, and project status to both your direct leadership and the extended security leadership team.</li>
</ul><h2 class="jobSectionHeader">Compensation Range:</h2>
<ul><li>$180,000 - $210,000</li>
</ul>
<ul><li>This is a remote role.</li></ul>

JR: 2026-7588

#LI-Remote<div><h2 class="jobSectionHeader">
Why You'll Like Working for DigitalOcean</h2>
<ul><li>We innovate with purpose. You'll be a part of a cutting-edge technology company with an upward trajectory, who are proud to simplify cloud and AI so builders can spend more time creating software that changes the world. As a member of the team, you will be a Shark who thinks big, bold, and scrappy, like an owner with a bias for action and a powerful sense of responsibility for customers, products, employees, and decisions.</li>
<li>We prioritize career development. At DO, you'll do the best work of your career. You will work with some of the smartest and most interesting people in the industry. We are a high-performance organization that will always challenge you to think big. Our organizational development team will provide you with resources to ensure you keep growing. We provide employees with reimbursement for relevant conferences, training, and education. All employees have access to LinkedIn Learning's 10,000+ courses to support their continued growth and development.</li>
<li>We care about your well-being. Regardless of your location, we will provide you with a competitive array of benefits to support you from our Employee Assistance Program to Local Employee Meetups to flexible time off policy, to name a few. While the philosophy around our benefits is the same worldwide, specific benefits may vary based on local regulations and preferences.</li>
<li>We reward our employees. The salary range for this position is based on market data, relevant years of experience, and skills. You may qualify for a bonus in addition to base salary; bonus amounts are determined based on company and individual performance. We also provide equity compensation to eligible employees, including equity grants upon hire and the option to participate in our Employee Stock Purchase Program.</li>
<li>DigitalOcean is an equal-opportunity employer. We do not discriminate on the basis of race, religion, color, ancestry, national origin, caste, sex, sexual orientation, gender, gender identity or expression, age, disability, medical condition, pregnancy, genetic makeup, marital status, or military service.</li>
</ul>
Application Limit: You may apply to a maximum of 3 positions within any 180-day period. This policy promotes better role-candidate matching and encourages thoughtful applications where your qualifications align most strongly.</div></div>

Manager, Security Defense Engineering

Search 10000+ Security engineering lead jobs near you this March. New roles added regularly across leading industries. Apply today.