security infrastructure engineer

Magnet

<div>
 
 
 Employer Overview
 
 
 
 A national-scale private cloud platform provides secure, integrated IT services across multiple subsidiaries. The platform delivers
 
 multi-tenant, high-availability environments
 
 with advanced network and application security, supporting compliance, Zero Trust access, and secure workload hosting across hybrid infrastructures.
 
 
 
 
 
 
 Job Summary
 
 
 
 The Security Infrastructure Engineer is responsible for designing, implementing, and operating the security infrastructure of the private cloud platform. The role ensures
 
 secure network and application access, tenant-level segmentation, and Zero Trust principles
 
 , while maintaining high availability and compliance across multi-site environments.
 
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Design and operate Fortinet security platforms (NGFW, WAF, ADC, NAC, FortiAuthenticator, Sandbox)
 </li>
 <li>
 Implement and manage tenant-level security segmentation and firewall policies
 </li>
 <li>
 Integrate Zero Trust access solutions (e.g., AppGate or equivalent)
 </li>
 <li>
 Manage north-south and east-west traffic inspection and security policies
 </li>
 <li>
 Support secure application publishing and WAF protection
 </li>
 <li>
 Collaborate with SOC teams for incident response and threat mitigation
 </li>
 <li>
 Ensure compliance with security policies and regulatory requirements
 </li>
 <li>
 Support disaster recovery and high availability for security infrastructure
 </li>
 <li>
 Optimize security performance and scalability across multi-tenant environments
 </li>
 </ul>
 
 
 
 
 
 Requirements
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, Networks, Computer Engineering, or related field (preferred)
 </li>
 <li>
 6&ndash;10 years in network and infrastructure security
 </li>
 <li>
 Hands-on experience with enterprise security platforms in large-scale environments
 </li>
 <li>
 Proven experience with TCP/IP, routing, and network security principles
 </li>
 <li>
 Familiarity with SIEM integration and incident response coordination
 </li>
 <li>
 Strong analytical and problem-solving abilities
 </li>
 <li>
 Excellent communication and collaboration skills
 </li>
 <li>
 Detail-oriented with proactive security mindset
 </li>
 <li>
 Ability to work independently and in cross-functional teams
 </li>
 <li>
 Fortinet ecosystem: FortiGate, FortiWeb, FortiADC, FortiNAC, FortiAuthenticator, FortiSandbox
 </li>
 <li>
 Firewall policy design and tenant-level network segmentation
 </li>
 <li>
 Zero Trust architecture and secure remote access
 </li>
 <li>
 DDoS protection and traffic filtering
 </li>
 <li>
 Application security and WAF management
 </li>
 <li>
 Integration with SIEM and SOC platforms
 </li>
 <li>
 Proficiency with security management, monitoring, and orchestration tools
 </li>
 <li>
 Familiarity with hybrid and multi-site cloud environments
 </li>
 <li>
 Fluency in English (written and spoken)
 </li>
 <li>
 Ability to maintain 24x7 security infrastructure availability
 </li>
 <li>
 Capacity to implement secure access and segmentation across multi-tenant environments
 </li>
 <li>
 Capability to support DR and high-availability operations
 </li>
 <li>
 Ability to optimize security performance and enforce compliance policies
 </li>
 <li>
 Fortinet NSE4 / NSE7 / NSE8
 </li>
 <li>
 CISSP or equivalent security certification
 </li>
 <li>
 CCNP Security or equivalent
 </li>
 </ul>
</div>

Security Infrastructure Engineer (Fortinet & Zero Trust)

malomatia

<div>
 
 Job Description
 
 
 
 We are seeking a skilled Network &amp; Security Infrastructure Engineer with strong expertise in switching, routing, and application-centric switches. The candidate will be responsible for managing and maintaining Juniper and Cisco switching environments (standalone &amp; clustered, Apstra managed), along with security appliances (F5, Palo Alto, Fortinet, Pulse Secure, and other devices). The role involves operations, troubleshooting, upgrades, backups, patching, and reporting to ensure 24x7x365 availability of the infrastructure.
 
 
 
 External Interfaces
 
 
 
 <ul>
 <li>
 Field Support
 </li>
 <li>
 Datacenter Activity
 
 
 </li>
 </ul>
 
 Internal Interfaces
 
 
 
 <ul>
 <li>
 Operations team.
 </li>
 <li>
 Various Internal Stakeholders.
 </li>
 <li>
 Collaborate with other teams.
 
 
 </li>
 </ul>
 
 Responsibilities
 
 
 
 
 Operational
 
 
 
 <ul>
 <li>
 Detailed Roles and Responsibilities:
 
 
 </li>
 </ul>
 
 Network Infrastructure Management
 
 
 
 <ul>
 <li>
 Manage and maintain Core Switching and Top-of-Rack (ToR) Switching across Cisco and Juniper platforms, including environments managed by Apstra.
 </li>
 <li>
 Oversee both standalone and clustered switch deployments, ensuring high availability and optimal performance.
 </li>
 <li>
 Perform routing configuration and troubleshooting (OSPF, BGP, EIGRP, static routing) to ensure efficient traffic flow.
 </li>
 <li>
 Install, re-install, and recover devices in case of system crashes or hardware failures.
 </li>
 <li>
 Ensure synchronization and replication of configurations between Production and DR (Disaster Recovery) data centers.
 </li>
 <li>
 Maintain and manage IP Addressing schemes, VLAN configurations, and NAT rules for private&ndash;public zone connectivity
 </li>
 <li>
 Security Device Administration
 </li>
 <li>
 Manage and configure firewalls, VPNs, and load balancers, including:
 </li>
 <li>
 Palo Alto Firewalls and Panorama
 </li>
 <li>
 Fortinet Firewalls, FortiAnalyzer, and Sandbox
 </li>
 <li>
 F5 Load Balancers (including SSL offloading and virtual server setup)
 </li>
 <li>
 Pulse Secure VPN devices
 </li>
 <li>
 Monitor and maintain network traffic utilization, security policies, and VPN connectivity.
 </li>
 <li>
 Perform firmware upgrades and apply vendor-recommended patches to enhance security posture.
 </li>
 <li>
 Conduct vulnerability tracking, patch management, and remediation in line with organizational security requirements
 
 
 </li>
 </ul>
 
 Competencies
 
 
 
 Technical
 
 
 <ul>
 <li>
 24/7 support coverage including weekend as on call basis
 </li>
 <li>
 Must be willing to respond to critical incidents during off-hours as required.
 
 
 </li>
 </ul>
 Behavioral
 
 
 <ul>
 <li>
 Highly Empathetic.
 </li>
 <li>
 Ability to work under pressure.
 </li>
 <li>
 Flexible hours.
 </li>
 <li>
 Patient, Motivated self-starter.
 </li>
 <li>
 Excellent communication with the team.
 </li>
 <li>
 Displays positive professional outlook and behavior.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 
 Desired Educational Background:
 
 Bachelor&rsquo;s degree in technical or related engineering discipline
 
 
 
 Preferred Certifications
 
 
 
 <ul>
 <li>
 Networking/Switching : JNCIS-ENT Specialist ( Apstra, QFX, EVPN/VXLAN JNCIS-DC )
 </li>
 <li>
 Security: Palo Alto PCNSE, Fortinet NSE4/7, FTD
 </li>
 <li>
 Load Balancer &amp; VPN: F5 , Pulse Secure
 </li>
 <li>
 General IT &amp; Security: ITIL Foundation,
 
 
 </li>
 </ul>
 
 Language Requirement
 
 
 
 <ul>
 <li>
 Good written and verbal communications skills are essential for documentation and report writing.
 </li>
 <li>
 English / Arabic +English Speaker
 
 
 </li>
 </ul>
 
 Desired Experience
 
 
 
 <ul>
 <li>
 5&ndash;7 years&rsquo; hands-on experience in managing enterprise network and security infrastructure.
 </li>
 <li>
 Strong knowledge of Juniper switches (standalone, clustered, Apstra).
 </li>
 <li>
 Experience with application-centric switching and automation platforms.
 </li>
 <li>
 Expertise in security devices: Palo Alto, Fortinet, F5 Load Balancers, Pulse Secure VPN.
 </li>
 <li>
 Strong troubleshooting skills in network and security domains.
 </li>
 <li>
 Experience working in 24x7 enterprise/NOC environments with on-call support.
 </li>
 <li>
 Excellent documentation, reporting, and communication skills
 </li>
 <li>
 Maintain detailed Standard Operating Procedures (SOPs), design documentation, and configuration records.
 
 
 </li>
 </ul>
 
 Job Specific Skills
 
 
 
 <ul>
 <li>
 Manage and maintain core switching and ToR switching across Juniper platforms.
 </li>
 <li>
 Administer and optimize application-centric switching environments via Apstra.
 </li>
 <li>
 Isolate, diagnose, and resolve routing and switching incidents.
 </li>
 <li>
 Configure, modify, and maintain network policies, VLANs, NATs, and routing protocols.
 </li>
 <li>
 Perform installation/re-installation of network devices in case of failures/crashes.
 </li>
 <li>
 Manage F5 Load Balancers, including SSL offloading and virtual server configurations.
 </li>
 <li>
 Administer Palo Alto Firewalls and Panorama, Fortinet Firewalls/Fortianalyzer/Sandbox, and Pulse Secure VPN devices.
 </li>
 <li>
 Support firmware upgrades, vulnerability tracking, and patch management across all devices.
 </li>
 <li>
 Ensure high availability and stability of security appliances and VPN connectivity
 </li>
 </ul>
</div>

Associate - Network Security

SAIC

<div>Job ID: 2611293
Location: Springfield, VA, US
Date Posted: 2026-04-09
Category: Information Technology
Subcategory: Network Engineer
Schedule: Full-Time
Shift: Day Job
Travel: No
Minimum Clearance Required: Top_Secret
Clearance Level Must Be Able to Obtain: TS/SCI
Potential for Remote Work: ORA_ON_SITE 
Description
SAIC currently has an opening for a Communications Security Engineer to support the Department of State (DoS) Bureau of Diplomatic Technology. DT provides enterprise architecture design, engineering, operations and maintenance support services for desktops, servers, networks, firewalls, and enterprise applications across the Department.
The Security Engineer shall develop next-generation security solutions to secure the organization&rsquo;s communication fabric. This role engineers the next generation security layers that protect data moving across internal networks, cloud environments, and remote access tunnels. They are the strategic lead in ensuring that every network handshake&mdash;whether via TLS, IPsec, or SSH&mdash;is backed by a robust and resilient cybersecurity infrastructure.
Description of Duties:<ul><li>
Secure Connection Management: Oversee the security of network tunnels and data-in-transit protocols. This includes managing the certificates and configurations for VPNs, secure gateways, and encrypted communication channels that link internal networks to external service providers.</li><li>
Lifecycle Automation: Develop and implement automated workflows for the lifecycle of security credentials. This reduces manual intervention, minimizes human error, and ensures timely rotation to meet security standards.</li><li>
Identity &amp; Access Integration: Align access with the organization&rsquo;s identity management framework. Ensure that only authorized systems and personnel can access sensitive keys and that all access is logged and audited according to the principle of least privilege.</li><li>
Security Compliance &amp; Auditing: Monitor and report on the status of encryption and network security controls. Conduct regular reviews to ensure that all hybrid and cloud-based configurations meet organizational security policies and industry regulatory requirements.</li><li>
Vulnerability &amp; Risk Mitigation: Identify and remediate security gaps in the hybrid network infrastructure. This involves assessing the risks associated with data movement between environments and implementing hardening measures to protect against unauthorized access or data leakage.</li><li>
Incident Response Support: Provide subject matter expertise during security incidents involving encryption failures or unauthorized network access. Assist in the rapid revocation and replacement of compromised credentials to restore secure operations.</li></ul>
Qualifications
Required Education &amp; Experience:<ul><li>
Bachelors and nine (9) years or more experience; Masters and seven (7) years or more experience ; may accept additional experience in lieu of degree.</li><li>
Experience with some or all of the following:<ul><li>
KMI &ndash; Key Management Infrastructure</li><li>
iApp</li><li>
EKMS- Electronic Key Management System</li><li>
Key Material</li><li>
OTNK &ndash; Over the Network Key</li><li>
CARDS (COMSEC Accounting, Reporting, and Distribution System)</li></ul></li><li>
Technical Expertise: Deep knowledge of symmetric and asymmetric encryption (e.g., AES, RSA, ECC) and Public Key Infrastructure (PKI) and Post Quantum Encryption.</li><li>
Proven experience managing security in a multi-environment IT infrastructure (e.g., mixing local servers with cloud services).</li><li>
Understanding of core network transport security concepts (symmetric vs. asymmetric encryption, hashing, and digital signatures) and network security protocols (TLS/SSL, IPsec, SSH).</li><li>
Ability to troubleshoot complex connectivity and encryption issues across different technical platforms.</li><li>
Skill in documenting technical procedures and explaining security risks to both technical teams and management.</li><li>
Familiarity with handling classified or confidential materials.</li></ul>
Required Clearance:<ul><li>
US Citizenship.</li><li>
Active top secret with the ability to obtain TS/SCI.</li></ul>
Desired Experience/Skills/Attributes:<ul><li>
Familiarity with DoS environment (data and voice networks, IT security systems, policies and procedures), Foreign Affairs Handbooks (FAHs), Foreign Affairs Manuals (FAMs) preferred.</li><li>
Interpersonal skills including the ability to collaborate effectively, self-awareness, and excellent written and oral communications.</li><li>
Previous COMSEC experience.</li></ul></div>

Communication Security Engineer

Saronic Technologies

<div><div><h2 class="jobSectionHeader">Location</h2>
Austin, TX
</div><div><h2 class="jobSectionHeader">Employment Type</h2>
Full time
</div><div><h2 class="jobSectionHeader">Location Type</h2>
On-site
</div><div><h2 class="jobSectionHeader">Department</h2>
Software</div></div>
 <div><div>Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms.
Security at Saronic is a force multiplier. We're seeking a Security Engineer at the senior-level or above to own the design, implementation, and continuous improvement of security guardrails across our cloud infrastructure. You won't just secure the cloud; you'll build the systems and patterns that enable every team at Saronic to move fast and ship with confidence, with security baked in from the start. You will be the technical authority on how we architect, govern, and defend our AWS environments across commercial and GovCloud.
<h1 class="jobSectionHeader">Key Responsibilities</h1>
<ul><li>Own the security architecture for Saronic's AWS environments, including multi-account strategy, network segmentation, identity architecture, and data protection across commercial AWS and AWS GovCloud
</li><li>Design and maintain secure-by-default Terraform modules and IaC standards that teams adopt as the standard path, enforcing least privilege, secure defaults, and compliance requirements
</li><li>Implement preventive controls (SCPs, permission boundaries, policy-as-code) and detective controls (Config rules, CloudTrail analysis, GuardDuty) as a unified, layered security model
</li><li>Design and enforce IAM patterns across AWS accounts, services, and workloads including least-privilege policies, permission boundaries, cross-account access, federation, and service-to-service authentication
</li><li>Implement and govern secrets management using tools such as AWS Secrets Manager or Vault, integrated into CI/CD and runtime environments
</li><li>Partner with DevOps and Platform Engineering to embed security into CI/CD pipelines, infrastructure provisioning, and deployment workflows
</li><li>Build automated compliance validation into infrastructure pipelines and replace manual security gates with automated guardrails wherever possible
</li><li>Create self-service security tooling and patterns that allow teams to operate with speed and autonomy while maintaining compliance
</li><li>Integrate logging, monitoring, and alerting across cloud infrastructure to validate control effectiveness and detect misconfigurations or threats
</li><li>Build and tune cloud-native detections using CloudTrail, GuardDuty, Config, and SIEM integrations
</li><li>Support incident response for cloud security events, drive root-cause analysis, and translate findings into improved guardrails and controls
</li></ul><h1 class="jobSectionHeader">Required Qualifications:</h1>
<ul><li>6+ years of hands-on experience in cloud security engineering, infrastructure security, DevSecOps, or a closely related security engineering role
</li><li>Expert-level proficiency with Terraform, including module design, state management, policy-as-code, and managing complex multi-environment configurations
</li><li>Deep expertise in AWS security services and architecture, including IAM, Organizations, SCPs, Control Tower, CloudTrail, Config, GuardDuty, Security Hub, KMS, and VPC security
</li><li>Demonstrated experience building security guardrails and reusable infrastructure patterns that engineering teams adopt without friction
</li><li>Strong experience with CI/CD pipeline security, IaC review processes, and automated compliance validation
</li><li>Experience operating in AWS GovCloud or FedRAMP-regulated cloud environments
</li><li>Strong proficiency in Python, Go, Rust, or equivalent languages for building security automation and tooling
</li><li>Ability to obtain and maintain a security clearance
</li></ul><h1 class="jobSectionHeader">Preferred Qualifications:</h1>
<ul><li>Experience in defense, aerospace, robotics, autonomy, or other high-assurance environments
</li><li>Experience designing multi-account AWS landing zones and organizational security architectures from the ground up
</li><li>Hands-on experience with Kubernetes security, container security, and service mesh security in cloud-native environments
</li><li>Familiarity with NIST SP 800-171, NIST SP 800-53, FedRAMP, or Cloud Computing SRG Impact Levels
</li><li>Experience with infrastructure drift detection, automated remediation, and continuous compliance monitoring
</li><li>Relevant certifications such as AWS Security Specialty, AWS Solutions Architect Professional, HashiCorp Terraform Associate/Engineer, CCSP, or CISSP
</li></ul><h1 class="jobSectionHeader">Benefits:</h1>
<ul><li>Medical Insurance: Comprehensive health insurance plans covering a range of services
</li><li>Saronic pays 100% of the premium for employees and 80% for dependents
</li><li>Dental and Vision Insurance: Coverage for routine dental check-ups, orthodontics, and vision care
</li><li>Saronic pays 100% of the premium under the basic plan for employees and 80% for dependents
</li><li>Time Off: Generous PTO and Holidays
</li><li>Parental Leave: Paid maternity and paternity leave to support new parents
</li><li>Competitive Salary: Industry-standard salaries with opportunities for performance-based bonuses
</li><li>Retirement Plan: 401(k) plan
</li><li>Stock Options: Equity options to give employees a stake in the company&rsquo;s success
</li><li>Life and Disability Insurance: Basic life insurance and short- and long-term disability coverage
</li><li>Pet Insurance: Discounted pet insurance options including 24/7 Telehealth helpline
</li><li>Additional Perks: Free lunch benefit and unlimited free drinks and snacks in the office
</li></ul>This role requires access to export-controlled information or items that require &ldquo;U.S. Person&rdquo; status. As defined by U.S. law, individuals who are any one of the following are considered to be a &ldquo;U.S. Person&rdquo;: (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in 8 U.S.C. 1324b(a)(3).
Saronic does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits.</div></div>

Security Engineer, Cloud Security

<div><h3 class="jobSectionHeader">About the job</h3>

The Information Security Engineer is responsible for designing, implementing, and maintaining security controls across the organization's cloud, identity, endpoint, and network environments. This role focuses on engineering secure configurations, building automation, integrating security tooling, and ensuring the ongoing protection of systems and data.

The Information Security Engineer works closely with the IT &amp; InfoSec Helpdesk, Infrastructure teams, and Development teams to architect secure solutions, conduct security assessments, and implement governance frameworks aligned to ISO 27001 and internal InfoSec policies. This role also supports complex incident response activities, assists in root-cause analysis, and ensures controls are implemented following secure-by-design principles.

The shift for this positions is 08.00 - 17.00 CET/CEST with Saturday &amp; Sunday off.
<h3 class="jobSectionHeader">
Responsibilities</h3>

Security Engineering &amp; Control Implementation:
<ul>
<li>Design, implement, and maintain security controls across Azure, Entra ID, Microsoft 365, network, and endpoint environments.</li>
<li>Develop and maintain secure configurations, baselines, and policy frameworks using Azure Policy, Intune compliance, and conditional access.</li>
<li>Integrate and optimize security tools including Microsoft Defender suite, SIEM/SOAR platforms, cloud security posture management, and identity governance systems.</li>
</ul>
Cloud &amp; Infrastructure Security Architecture:
<ul>
<li>Support the design and review of cloud architectures, including secure VNet design, firewalls/NSGs, Private Link, and hybrid connectivity.</li>
<li>Implement key cloud security protections such as encryption, identity governance, privileged access control, and secure automation frameworks.</li>
<li>Partner with Cloud Engineers to codify security controls using Infrastructure-as-Code (IaC).</li>
</ul>
Identity &amp; Acess Security (Entra ID &amp; M365):
<ul>
<li>Implement and manage identity governance: MFA, Conditional Access, PIM, RBAC, role lifecycle automation.</li>
<li>Review, assess, and refine authentication and access control configurations.</li>
<li>Conduct periodic privileged access audits and align identity practices with Zero Trust principles.</li>
</ul>
Security Monitoring &amp; Threat Engineering:
<ul>
<li>Tune and enhance SIEM/Sentinel detections, automation, and response playbooks.</li>
<li>Develop KQL detection queries aligned to threat behaviours and emerging attack patterns.</li>
<li>Improve signal fidelity across Defender platforms and integrate new data sources</li>
</ul>
Incident Response &amp; Digital Forensics Support:
<ul>
<li>Serve as technical escalation during high-severity incidents.</li>
<li>Perform deep-dive investigations into identity compromise, cloud misconfigurations, lateral movement, and high-risk endpoint activity.</li>
<li>Provide forensic artefact analysis support (logs, file metadata, registry data, process analysis).</li>
<li>Implement long-term remediation items and drive post-incident improvements.</li>
</ul>
Vulnerability &amp; Risk Management
<ul>
<li>Support vulnerability assessment programs across cloud, endpoints, and SaaS platforms.</li>
<li><ul><li>Validate remediation efforts with system owners and ensure alignment to risk thresholds.</li></ul></li>
<li><ul><li>Interpret vulnerabilities based on severity, real-world exploitability, and exposure in Microsoft, cloud, and identity stacks.</li></ul></li>
</ul>
Compliance, Governance &amp; ISO 27001 Alignment
<ul>
<li>Implement and maintain controls aligned with ISO 27001:2022 requirements.</li>
<li>Support evidence collection, audit preparation, and remediation of nonconformities.</li>
<li>Maintain accurate documentation including policies, baselines, runbooks, and reference diagrams.</li>
</ul>
Automation, Scripting &amp; Continuous Improvement
<ul>
<li>Build and maintain automation using PowerShell, Azure CLI, Logic Apps, and Functions.</li>
<li>Automate user lifecycle, security state validation, incident containment tasks, and compliance reporting.</li>
<li>Continuously identify opportunities to strengthen security posture through modernization, simplification, and automation.</li>
</ul>
Collaboration &amp; Knowledge Leadership
<ul>
<li>Work closely with Cloud, IT Support, Development, and Compliance teams to embed security into operational and architectural decision-making.</li>
<li>Mentor InfoSec Analysts and provide guidance on investigation techniques, threat identification, and control operation.</li>
<li>Deliver internal training, knowledge-transfer sessions, and documentation.</li>
</ul>
Ticket Resolution &amp; Request Fulfilment
<ul>
<li>Respond to and resolve incidents and requests within the agreed SLAs.</li>
<li>Handle user and complex incidents across Azure, AVD, and M365; drive quick MTTR and reduce ticket reopens via robust post-resolution notes and KB updates.</li>
<li>Fulfil service requests (e.g., resource provisioning, AVD image updates, M365 security baselines, conditional access adjustments).</li>
<li>Problem management: identify recurring issues, perform root-cause analysis, raise Problem records, and propose corrective/preventive actions.</li>
<li>Escalation management: engage vendor support only after thorough triage and data collection (logs, timelines, impacted scope).</li>
</ul><h3 class="jobSectionHeader">About You</h3>

Required Experience
<ul>
<li>4+ years of experience in information security engineering, cloud security, or infrastructure security roles.</li>
<li>Hands-on experience implementing security controls in Azure and Microsoft 365 ecosystems.</li>
<li>Experience with Defender for Endpoint, Defender for Cloud, Defender for Identity, and Sentinel.</li>
<li>Experience with secure cloud networking, identity governance, and Zero Trust principles.</li>
<li>Experience supporting complex incident response investigations.</li>
<li>Familiarity with ITIL processes (incident, change, problem).</li>
<li>Understanding of security frameworks (i.e. ISO 27001:2022) and data privacy regulations (i.e. GDPR).</li>
</ul>
Technical Skills
<ul>
<li>Azure security architecture, governance, and configuration.</li>
<li>Advanced Entra ID identity governance and access control.</li>
<li>Endpoint and cloud threat detection (Defender suite).</li>
<li>SIEM/SOAR engineering (Sentinel, Logic Apps).</li>
<li>PowerShell, automation, and API integration.</li>
<li>KQL, log analysis, and detection engineering.</li>
<li>Infrastructure-as-Code familiarity (Bicep/ARM/Terraform).</li>
<li>Secure network design, segmentation, and encryption practices.</li>
</ul>
Soft skills
<ul>
<li>Customer focused: prioritizing the needs and satisfaction of users and clients in every interaction.</li>
<li>Communication: effective communication skills to collaborate with cross-functional teams, management, and external stakeholders.</li>
<li>Collaborative: working effectively with cross-functional teams to achieve common goals.</li>
<li>Innovative: consistently seeking new ideas and approaches to solve problems and improve processes.</li>
<li>Problem-solving: analytical mindset to identify gaps and recommend solutions.</li>
<li>Adaptability: the infrastructure, security, and client landscape evolve rapidly, so adaptability is crucial.</li>
</ul>
The following qualifications are mandatory:
<ul>
<li>CompTIA Security+ or similar (i.e. ISC2 Certified in Cybersecurity)</li>
<li>SC-300: Identity &amp; Access Administrator</li>
</ul>
The following qualifications would be advantageous:
<ul>
<li>AZ-500: Azure Security Engineer</li>
<li>SC-200: Security Operations Analyst</li>
<li>ISO 27001: 2022 Foundations</li>
</ul><h3 class="jobSectionHeader">We offer</h3>
<ul><li>The flexibility to work 100% remotely with no wasted commute time and travel costs.</li>
<li>A position at a fast-paced international company with ambitious gaming, e-commerce, and tech clients.</li>
<li>A diverse and inclusive culture with people from 80+ countries, speaking 25+ languages - where we celebrate everyone's uniqueness.</li>
<li>Innovative digital tools, and continuous opportunities for learning and development.</li>
<li>Access to Udemy Business for learning and development.</li>
<li>Fun employee engagement activities and participation in 5CA employee-lead communities such as 5CA Connect, Pride, 5CA Gamers, Women of 5CA, to name a few.</li>
<li>Location-specific benefits</li></ul></div>

Information Security Engineer [Remote]

Aurora Innovation

<div><div>Who we are
<div>
Aurora's mission is to deliver the benefits of self-driving technology safely, quickly, and broadly.</div><div> 
The Aurora Driver will create a new era in mobility and logistics, one that will bring a safer, more efficient, and more accessible future to everyone.</div> 
<div></div>
<div>
At Aurora, you will tackle massively complex problems alongside other passionate, intelligent individuals, growing as an expert while expanding your knowledge. For the latest news from Aurora, visit aurora.tech or follow us on LinkedIn.</div></div><div></div> 
What we are looking for

Aurora hires talented people with diverse backgrounds who are ready to help build a transportation ecosystem that will make our roads safer, get crucial goods where they need to go, and make mobility more efficient and accessible for all.

We're searching for a Staff Security Engineer to join our Enterprise Security Engineering team, reporting to the Technical Lead Manager of Security Engineering.

Aurora is scaling its autonomous trucking operations, and the security foundations protecting our employees, devices, internal systems, and data need to scale with us. We're looking for a deeply technical enterprise security engineer who is as comfortable in a code editor as in a security console &mdash; you build the systems that make Aurora's security operations possible. This is a role for someone who can architect robust enterprise security solutions, write the code to implement them, and partner across Engineering and IT to make sure security is embedded from the start, not bolted on at the end.

This is not a security operations-only role. It sits squarely in enterprise security engineering, where the work is designing, building, and owning the platforms, integrations, and automation that power Aurora's internal security posture at scale.

In this role you will
<ul>
<li>Own the architecture and implementation of Aurora's enterprise security controls &mdash; designing the systems and integrations that protect Aurora's endpoints, identities, internal infrastructure, and SaaS environment.</li>
<li>Design and build Aurora's security telemetry and detection infrastructure, including log pipelines, SIEM integrations, and alerting frameworks &mdash; in partnership with the Security Operations Engineer who owns ongoing tuning and rule development.</li>
<li>Define and enforce enterprise security standards, conducting architecture and design reviews to ensure alignment with Aurora's security posture and risk tolerance.</li>
<li>Partner with IT, Infrastructure, and Engineering teams to embed security requirements early &mdash; shifting left on corporate IT initiatives before they become technical debt.</li>
<li>Build automation and tooling that extends the capabilities of Aurora's security platforms, reduces manual operational burden, and scales the team's impact.</li>
<li>Serve as the escalation point for enterprise security incidents requiring engineering-level investigation or remediation, and participate in the team's on-call rotation.</li>
<li>Translate security strategy into concrete, executable engineering projects with clear milestones and measurable outcomes.</li>
</ul>
Required qualifications
<ul>
<li>12+ years of hands-on experience in enterprise security engineering or corporate information security &mdash; specifically securing employee-facing systems, endpoints, identities, and internal infrastructure (not product or application security).</li>
<li>Proficiency in at least one programming language, used in a security context &mdash; writing production-quality automation, integrations, or internal tooling (the team primarily uses Go; Python is also common).</li>
<li>Experience architecting and integrating enterprise security platforms &mdash; designing API integrations, automating workflows, and building tooling that extends platform capabilities across domains such as EDR/XDR, MDM, IAM/IGA, DLP, SaaS security, cloud security, or PKI.</li>
<li>Experience designing and building security telemetry pipelines and detection infrastructure &mdash; log ingestion, normalization, SIEM integration, and alerting architecture.</li>
<li>Experience leading cross-functional security engineering projects &mdash; defining scope, driving execution, and aligning stakeholders across Engineering and IT.</li>
<li>Track record of conducting security architecture reviews and translating findings into actionable, risk-prioritized remediation plans.</li>
<li>Experience evaluating security posture and identifying systemic gaps, with a bias toward building durable solutions rather than one-off fixes.</li>
</ul>
Desirable qualifications
<ul>
<li>Experience with Zero Trust architecture and identity-centric security models (BeyondCorp-style or similar).</li>
<li>Familiarity with NIST CSF, MITRE ATT&amp;CK, and CIS Benchmarks as engineering inputs &mdash; used to inform what to build and how to validate it, not just as compliance checkboxes.</li>
<li>Hands-on AWS security experience (SCPs, GuardDuty, Security Hub, IAM, etc.) and familiarity with integrating cloud security signals into a corporate security platform.</li>
<li>Experience with applied cryptography and PKI in a production enterprise environment &mdash; certificate lifecycle management, CA design, or secrets management.</li>
<li>Familiarity with securing AI/ML platforms or applications built on LLMs, RAG pipelines, or MCP-based architectures.</li>
<li>Security certifications such as CISSP, GCED, GREM, or similar (valued but not required).</li>
</ul>
The base salary range for this position is $189,000 - $274,000 per Year. Aurora's pay ranges are determined by role, level, and location. Within the range, the successful candidate's starting base pay will be determined based on factors including job-related skills, experience, qualifications, relevant education or training, and market conditions. These ranges may be modified in the future. The successful candidate will also be eligible for an annual bonus, equity compensation, and benefits.

#Mid-Senior<div> 
Working at Aurora 
At Aurora, we bring together extraordinarily talented and experienced people united by the strength of our values. We operate with integrity, set outrageous goals, and build a culture where we win together &mdash; all without any jerks.

We believe in-person work increases collaboration, empathy and our ability to lead effectively. As a result, we operate in a hybrid work environment where Aurorans are in office at least 3 days per week.

Our Careers page provides insight into what it is like to work at Aurora, and you can find all the latest updates in our Newsroom.

Our commitment to safety

At the core of everything we do is our commitment to safety. Building best-in-class self-driving technology will take time, and we believe that each employee at Aurora has a role in contributing to safety, every step of the way. Aurora expects commitment to our safety policies from every employee, and seeks candidates who take an active responsibility, can contribute to building an atmosphere of trust, and invest in the organization's long-term success by prioritizing working safely, no matter what.

Our commitment to inclusion

Aurora considers candidates without regard to their race, color, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, pregnancy status, parent or caregiver status, ancestry, political affiliation, veteran and/or military status, physical or mental disability, or any other status protected by federal or state law. Aurora considers qualified applicants with criminal histories, consistent with applicable federal, state, and local law. We are also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, you may contact us at careersiteaccommodations@aurora.tech.

For California applicants, information collected and processed as part of your application and any job applications you choose to submit is subject to Aurora's California Employment Privacy Policy.</div></div>

Staff Security Engineer

NTT DATA

Req ID: 370027
 
NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.
 
We are currently seeking a Security Engineer- Hybrid to join our team in Fort Washington, Pennsylvania (US-PA), United States (US).
 
The Security Engineer is a hands-on technical role responsible for day-to-day security operations, alert response, and platform maintenance. This role executes investigations, supports incident response, and keeps security tools healthy and effective.
 
This is a hybrid role with 3 days on-site in the office and 2 days remote. Only local candidates will be considered.
 
Key Responsibilities
 <ul>
<li>Investigate and respond to security alerts and incidents</li>
<li>Maintain and tune security platforms to reduce noise and improve effectiveness</li>
<li>Document incidents, response actions, and runbooks</li>
<li>Participate in after-hours on-call rotation</li>
</ul>
Basic Qualifications
 <ul>
<li>3 + years of security engineering or security operations experience</li>
</ul>
Additional Skills
 <ul>
<li>Hands-on incident response experience</li>
<li>Familiarity with SIEM, EDR, IAM, email, and network security tools</li>
<li>Strong attention to detail and documentation skills</li>
</ul>
About NTT DATA
 
NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in RD.
 
Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client’s needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, https://us.nttdata.com/en/contact-us.
 
NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.

Security Engineer- Hybrid

Search 10000+ Security infrastructure engineer jobs near you this May. New roles added regularly across leading industries. Apply today.