security operations engineer

Umbra

<div>
 Umbra is an American space technology company delivering advanced systems, from sensors to spacecraft, that empower customers worldwide with unmatched access to critical information from space. Our mission is simple and ambitious: redefine space&mdash;for people, systems, and missions in every domain. Umbra's ecosystem operates through three business units: Remote Sensing (the data), Space Systems (the components), and Mission Solutions (the platforms). Together, our teams develop capabilities that deliver persistent access, resilient performance, and mission-ready solutions, advancing U.S. space leadership while keeping the world safe and informed.
 
 
 
 About The Team
 
 
 
 Umbra's Information Technology organization operates as a shared service and strategic capability, embedding security, automation, and operational rigor directly into the platforms the business depends on. Security is not an overlay, it is designed, implemented, and evidenced through IT platforms.
 
 
 
 About The Role
 
 
 
 The Security Operations Engineer is a hands-on technical role responsible for implementing, operating, and continuously improving security controls across Umbra's corporate technology platforms. This position serves as the primary conduit between Information Security (InfoSec) and IT execution, ensuring security policy is translated into durable, auditable technical controls.
 
 
 Sitting within Core Infrastructure, this role owns the security configuration control plane for corporate IT, identity, access, network security, endpoint posture, logging, and detection, while partnering closely with InfoSec on risk management, POA&amp;M execution, and audit readiness.
 
 
 This is an engineering-first role focused on building secure-by-default platforms, not a SOC-only or alert-triage position. The mission is to embed security into Umbra's core technology platforms by implementing scalable, automated, and auditable security controls that protect the enterprise while enabling speed, reliability, and compliance.
 
 
 
 Our aim is to hire this position to work in either our Santa Barbara/Goleta, CA office, Arlington, VA office, or Reston, VA office (coming soon).
 
 
 
 
 Key Responsibilities
 
 
 
 
 Security Control Implementation &amp; Operations
 
 
 
 <ul>
 <li>
 Implement and operate technical security controls across identity, endpoint, network, and cloud platforms.
 </li>
 <li>
 Translate InfoSec policies, standards, and POA&amp;Ms into enforceable configurations and guardrails.
 </li>
 <li>
 Own security configuration hygiene for corporate platforms, ensuring controls are consistently applied and monitored.
 
 
 </li>
 </ul>
 
 Identity &amp; Access Security
 
 
 
 <ul>
 <li>
 Operate and secure Umbra's Identity &amp; Access Management (IAM) stack, including IdP, SSO, MFA, SCIM/JIT, and PAM.
 </li>
 <li>
 Partner with Core Infrastructure and Digital Workplace to ensure access is least-privilege, time-bound, and auditable.
 </li>
 <li>
 Support quarterly access reviews and remediation activities in partnership with InfoSec.
 
 
 </li>
 </ul>
 
 Endpoint &amp; Platform Security
 
 
 
 <ul>
 <li>
 Partner with Digital Workplace to enforce endpoint security baselines across Windows and macOS.
 </li>
 <li>
 Ensure endpoint controls align with InfoSec standards (encryption, patching, device trust).
 </li>
 <li>
 Operate platform-level security tooling for endpoint posture, monitoring, and compliance.
 
 
 </li>
 </ul>
 
 Network &amp; Cloud Security
 
 
 
 <ul>
 <li>
 Support security operations across network and cloud environments, including:
 </li>
 <ul>
 <li>
 Firewalls, segmentation, ZTNA/VPN
 </li>
 <li>
 Cloud guardrails and security configurations
 </li>
 </ul>
 <li>
 Partner with Core Infrastructure engineers to ensure secure-by-design network and cloud architectures
 
 </li>
 </ul>
 
 Detection, Logging &amp; Incident Support
 
 
 
 <ul>
 <li>
 Operate and tune logging, monitoring, and detection capabilities across IT platforms.
 </li>
 <li>
 Support investigation and response for security incidents in coordination with InfoSec.
 </li>
 <li>
 Provide technical context, evidence, and remediation support during incident response activities.
 
 
 </li>
 </ul>
 
 Audit, Evidence &amp; Compliance Enablement
 
 
 
 <ul>
 <li>
 Act as a primary technical contributor to audit evidence generation for IT-owned controls.
 </li>
 <li>
 Maintain documentation, configuration artifacts, and system evidence required for SOC 2, NIST, CMMC, FedRAMP, and related frameworks.
 </li>
 <li>
 Partner with InfoSec to ensure evidence is accurate, timely, and repeatable.
 
 
 </li>
 </ul>
 
 Continuous Improvement &amp; Automation
 
 
 
 <ul>
 <li>
 Identify opportunities to automate security controls, evidence collection, and compliance reporting.
 </li>
 <li>
 Reduce manual security toil through policy-driven automation and infrastructure-as-code patterns.
 </li>
 <li>
 Contribute security improvements to the IT automation backlog via the SMO.
 
 
 </li>
 </ul>
 
 Cross-Team Collaboration &amp; Governance
 
 
 
 <ul>
 <li>
 Collaborate closely with:
 </li>
 <ul>
 <li>
 InfoSec for policy, risk, and assurance
 </li>
 <li>
 Core Infrastructure for platform guardrails
 </li>
 <li>
 Digital Workplace for endpoint and employee-facing security controls
 </li>
 <li>
 Enterprise Applications for app-level security configuration and evidence
 </li>
 </ul>
 <li>
 Participate in SMO forums, CABs, and security-related change reviews
 
 </li>
 </ul>
 
 Requirements
 
 
 
 
 Required Qualifications
 
 
 
 <ul>
 <li>
 5+ years of experience in security engineering, security operations, or infrastructure security roles.
 </li>
 <li>
 Strong hands-on experience implementing security controls across:
 </li>
 <ul>
 <li>
 Identity &amp; Access Management
 </li>
 <li>
 Endpoint management (Windows/macOS)
 </li>
 <li>
 Network and cloud platforms
 </li>
 </ul>
 <li>
 Demonstrated ability to translate security policy into technical implementation.
 </li>
 <li>
 Experience supporting &amp; automating audit and compliance evidence collection.
 </li>
 <li>
 Strong troubleshooting and incident response skills.
 </li>
 </ul>
 
 Desired Qualifications
 
 
 
 <ul>
 <li>
 10+ years of experience in security engineering, security operations, or infrastructure security roles.
 </li>
 <li>
 Experience with Okta (IdP, SSO, MFA, SCIM, workflows).
 </li>
 <li>
 Experience with FortiGate &amp; Cisco Network Technologies.
 </li>
 <li>
 Strong Understanding of TCP/IP, DNS, HTTP/S, VPNs, SD-WAN, routing/switching.
 </li>
 <li>
 Proficiency with security tools like firewalls, IDS/IPS, and SIEM platforms.
 </li>
 <li>
 Familiarity with regulated environments (NIST, ISO 27001, CMMC, FedRAMP).
 </li>
 <li>
 Experience automating security controls or evidence collection.
 </li>
 <li>
 Exposure to cloud security tooling and observability platforms.
 </li>
 <li>
 Proficiency in Python, Bash, or PowerShell to automate routine tasks, security checks, and incident response workflows.
 
 
 </li>
 </ul>
 
 Benefits
 
 
 
 <ul>
 <li>
 Flexible Time Off, Sick, Family &amp; Medical Leave
 </li>
 <li>
 Medical, Dental, Vision, Life, LTD, STD (employer funded)
 </li>
 <li>
 Vol Life, Critical Illness, Accidental, Hospital Indemnity, Pet Insurance (employee funded)
 </li>
 <li>
 401k with 3% non-elective company contribution
 </li>
 <li>
 Stock Options
 </li>
 <li>
 Free Parking
 </li>
 <li>
 Free lunch daily in office
 
 
 </li>
 </ul>
 
 Umbra is an Equal Opportunity Employer. We do not discriminate in hiring on the basis of sex, gender identity, sexual orientation, race, color, religious creed, national origin, physical or mental disability, protected veteran status, or any other characteristic protected by federal, state, or local law.
 
 
 
 
 Employment Eligibility Verification
 
 
 
 In compliance with federal laws, all hired persons will be required to verify their identity and eligibility to work in the United States by completing the required Employment Eligibility Verification Form (I-9 Form) upon hire.
 
 
 
 ITAR/EAR Requirements
 
 
 
 This position may include access to technology and/or data that is subject to U.S. export controls pursuant to ITAR and EAR. To comply with federal export controls, all persons hired must be a U.S. citizen, U.S. national, U.S. lawful permanent resident, refugee or asylee as defined by 8 U.S.C.
 
 
 <ul>
 <li>
 1324b(a)(3), or must otherwise be eligible to obtain the required authorizations from the U.S. Department of State and/or U.S. Department of Commerce as applicable.
 
 
 </li>
 </ul>
 
 Pay Transparency
 
 
 
 This job posting may cover multiple career levels. To ensure greater transparency, we provide base salary ranges for all roles, regardless of location. Our standard pay ranges are based on the role's function and level, benchmarked against similar growth-stage companies. Compensation may vary based on geographical location, as certain regions may have different cost-of-living factors. The final offer will also be influenced by the candidate's skills, responsibilities, and relevant experience.
 
 
 
 Compensation Range
 
 
 
 The Compensation Range for this role is $125,000 - $150,000 DOE.
</div>

Security Operations Engineer

Wayve

<div><div>At Wayve we're committed to creating a diverse, fair and respectful culture that is inclusive of everyone based on their unique skills and perspectives, and regardless of sex, race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, veteran status, pregnancy or related condition (including breastfeeding) or any other basis as protected by applicable law.
<h2 class="jobSectionHeader">About us
</h2>Founded in 2017, Wayve is the leading developer of Embodied AI technology. Our advanced AI software and foundation models enable vehicles to perceive, understand, and navigate any complex environment, enhancing the usability and safety of automated driving systems.

Our vision is to create autonomy that propels the world forward. Our intelligent, mapless, and hardware-agnostic AI products are designed for automakers, accelerating the transition from assisted to automated driving.
 
 
In our fast-paced environment big problems ignite us&mdash;we embrace uncertainty, leaning into complex challenges to unlock groundbreaking solutions. We aim high and stay humble in our pursuit of excellence, constantly learning and evolving as we pave the way for a smarter, safer future.

At Wayve, your contributions matter. We value diversity, embrace new perspectives, and foster an inclusive work environment; we back each other to deliver impact.
Make Wayve the experience that defines your career!
 </div><h2 class="jobSectionHeader">The role</h2>

As a Security Engineer within Wayve's Security Operations function, you will focus on building and scaling monitoring and detection capabilities across our vehicle fleets, including both:
<ul>
<li>R&amp;D vehicle fleet (development and testing vehicles)</li>
<li>Robotaxi fleet (customer-facing vehicles)</li>
</ul>
These environments represent distributed, safety-critical, and non-traditional attack surfaces, requiring bespoke approaches to telemetry, detection, and response.

Working under the SecOps Engineering Lead, your primary focus will be vehicle-centric detection engineering and telemetry expansion, ensuring we have meaningful visibility into vehicle systems, edge compute, and fleet operations.

You will also contribute secondarily to monitoring, detection, and incident response across Wayve's broader IT and cloud estate, helping maintain a cohesive security operations capability across all environments.

This is a hands-on engineering role, ideal for someone who enjoys solving hard visibility problems in complex, real-world systems.

Key responsibilities:
<ul>
<li>Monitoring &amp; Detection</li>
<li><ul><li>Build and tune detections across R&amp;D and robotaxi fleets</li>
<li>Onboard and utilise vehicle telemetry (e.g. onboard systems, edge compute, fleet pipelines)</li>
<li>Contribute to monitoring and detection across cloud and IT environments</li>
<li>Improve detection coverage, playbooks, and automation</li>
</ul></li><li>Telemetry &amp; Instrumentation</li>
<li><ul><li>Define and improve security logging with autonomy, robotics, and platform teams</li>
<li>Ensure vehicle telemetry is structured and usable for detection</li>
</ul></li><li>Threat Detection &amp; Investigation</li>
<li><ul><li>Investigate alerts and anomalies across fleet and supporting systems</li>
<li>Perform triage, root cause analysis, and threat hunting</li>
</ul></li><li>Incident Response</li>
<li><ul><li>Support response activities across vehicle fleets and backend systems</li>
<li>Assist with evidence collection and post-incident reviews</li>
</ul></li></ul><h2 class="jobSectionHeader">About you
</h2>In order to set you up for success as Security Operations Engineer at Wayve, we're looking for the following skills and experience.
Essential
<ul>
<li>Hands-on experience in security monitoring, detection engineering, or SOC environments</li>
<li>Experience working with log data, SIEMs, or observability platforms</li>
<li>Strong understanding of:</li>
<li><ul><li>Detection engineering and alert tuning</li>
<li>Attacker behaviour (e.g. MITRE ATT&amp;CK)</li>
</ul></li><li>Experience working with distributed or non-traditional environments, such as: IoT, OT, embedded systems, or edge compute</li>
<li>Ability to write queries, detections, or scripts (e.g. Python, SQL, KQL, etc.)</li>
<li>Comfortable working cross-functionally with engineering teams to improve telemetry</li>
<li>Strong analytical and problem-solving skills</li>
</ul>
Desirable
<ul>
<li>Experience with:</li>
<li><ul><li>Automotive, robotics, or fleet-based systems</li>
<li>OT/ICS or IoT security monitoring</li>
<li>Cloud environments (AWS, GCP, Azure)</li>
</ul></li><li>Familiarity with:</li>
<li><ul><li>Telemetry pipelines, streaming data, or large-scale logging systems</li>
<li>Experience adapting detection techniques to novel or safety-critical environments</li>
</ul></li><li>Relevant certifications (e.g. GCIA, GCIH, GCED, GICSP etc.)</li>
</ul>
This is a full-time role based in our offices in London or Sunnyvale. At Wayve we want the best of all worlds so we operate a hybrid working policy that combines time together in our offices and workshops to fuel innovation, culture, relationships and learning, and time spent working from home. We operate core working hours so you can determine the schedule that works best for you and your team.

#LI-KM1<div>
Wayve is committed to creating an inclusive interview experience. If you require any accommodations or adjustments to participate fully in our interview process, please let us know

We understand that everyone has a unique set of skills and experiences and that not everyone will meet all of the requirements listed above. If you're passionate about self-driving cars and think you have what it takes to make a positive impact on the world, we encourage you to apply.

For more information visit Careers at Wayve.

To learn more about what drives us, visit Values at Wayve

DISCLAIMER: We will not ask about marriage or pregnancy, care responsibilities or disabilities in any of our job adverts or interviews. However, we do look to capture information about care responsibilities, and disabilities among other diversity information as part of an optional DEI Monitoring form to help us identify areas of improvement in our hiring process and ensure that the process is inclusive and non-discriminatory.</div></div>

Continental General

<div>SENIOR SECURITY ENGINEER
(Full Time, Salary, Exempt)
Looking to join a growing company dedicated to helping others? We offer that, plus competitive salaries, a culture of learning, and a fast-paced environment. This is a hybrid position with 3 days in-office. Join our team to help make a difference in the lives of others!
About Continental General:
The Continental General family of companies has provided insurance, including life and long-term care policies, to individuals and groups for over 30 years, and currently supports over 200,000 policyholders. Both our insurance company, Continental General Insurance Company, and our third-party administrator, Continental General Services, are committed to the continuous development of our infrastructure, processes, and people. The group is actively growing through expansion of both its insurance portfolio and its administrative services. With each opportunity, we take a collaborative approach to address challenges and provide unique solutions.
Position Summary:
The Senior Security Engineer is a hands-on technical contributor responsible for advancing security platforms, detections, automation, and cloud security capabilities across AWS, SaaS, and enterprise environments. In this role, you will own engineering execution across major security initiatives, build and tune platform integrations, improve observability, and expand detection and response capabilities through modern engineering practices including AI-assisted development.
You will design and implement detections, develop SOAR and automation workflows, and enhance cloud security guardrails. The Senior Security Engineer partners closely with cloud, identity, SASE, and application security teams to engineer controls, expand telemetry, and build scalable detection and response capabilities. You approach this work with a genuine curiosity about emerging tools and techniques, actively seeking out new ways to accelerate delivery and reduce manual effort through AI and automation.
This role is well-suited for an engineer who is self-directed and comfortable operating without heavy oversight, who brings a strong sense of craft to their work, and who stays ahead of the field by experimenting with tools before they become mainstream. The Senior Security Engineer serves as a reliable, high-output contributor between the SOC and platform engineering, ensuring operational needs translate into durable, scalable technical solutions.
Key Responsibilities:<ul><li>
Platform Engineering &amp; Technical Direction<ul><li>
Own engineering and advanced configuration across SIEM, SOAR, CSPM, EDR, SASE, and data security platforms.</li><li>
Build integrations, logging pipelines, and enrichment logic across AWS, SaaS, and identity providers.</li><li>
Contribute to platform strategy, participate in technology selection and proof-of-concept evaluations.</li><li>
Apply and help refine engineering standards for logging, telemetry, detection content, and automation practices.</li></ul></li><li>
Detection Engineering &amp; Telemetry<ul><li>
Develop and tune detections mapped to MITRE ATT&amp;CK, cloud threats, and environment-specific risk.</li><li>
Build enrichment pipelines, correlation logic, and advanced SIEM analytics (Splunk SPL).</li><li>
Identify logging and telemetry gaps and engineer new data sources across AWS and SaaS platforms.</li><li>
Partner with threat intelligence to incorporate adversary behaviors into detection logic and hunting hypotheses.</li></ul></li><li>
Automation, AI &amp; SOAR<ul><li>
Design and implement SOAR playbooks, enrichment workflows, and automated response actions.</li></ul></li><li><ul><li>Develop automation scripts and APIs (Python, PowerShell, Bash) for security operations functions.</li></ul></li><li><ul><li>
Integrate AI-assisted enrichment, summarization, and decision support into engineering and SOC workflows.</li><li>
Use AI-assisted development tools to accelerate automation build-out, reduce manual workflows, and improve iteration speed on security engineering tasks.</li><li>
Proactively evaluate emerging AI tooling, agentic workflows, and automation integrations for applicability to security operations; bring validated approaches to the team before they become industry standard practice.</li></ul></li><li>
Cloud, CSPM &amp; AWS Security Engineering<ul><li>
Engineer cloud security controls and observability across multi-account AWS environments.</li><li>
Extend CSPM capabilities with custom rules, policies, automation, and remediation pathways.</li><li>
Implement and maintain AWS security guardrails across Security Hub, GuardDuty, Inspector, Macie, CloudTrail, and IAM.</li><li>
Collaborate with cloud engineering and DevOps teams on secure architectures, monitoring patterns, and CloudWatch Logs data protection (PII/PHI masking).</li></ul></li><li>
SASE, DSPM &amp; Data Protection<ul><li>
Support technical implementation and optimization of SASE platforms, including SWG, CASB, and ZTNA control.</li><li>
Integrate DSPM platforms into detection, response, and SOAR workflows.</li><li>
Engineer data visibility and protection controls across SaaS, cloud storage, and API environments.</li><li>
Partner with identity and security teams to drive Zero Trust-enabling controls and telemetry expansion.</li></ul></li><li>
Application &amp; API Security Enablement<ul><li>
Support AppSec and API security by integrating telemetry, SAST/DAST findings, and runtime controls into detection workflows.</li><li>
Engineer detection patterns for OWASP Top 10 vulnerabilities and API misuse patterns.</li><li>
Collaborate with DevSecOps to automate application security validation and implement CI/CD security guardrails.</li></ul></li><li>
Incident Response Engineering<ul><li>
Serve as technical engineering escalation during active security investigations and incident response.</li><li>
Build IR automation, forensic data integrations, and evidence collection workflows.</li><li>
Implement corrective technical controls resulting from post-incident analysis and lessons learned.</li><li>
Contribute engineering work to runbooks, playbooks, and automation patterns shared with the SOC.</li></ul></li></ul>
Required Qualifications:<ul><li>
5+ years of security engineering, detection engineering, or advanced security operations experience.</li><li>
Expertise with SIEM detection development and correlation logic (Splunk preferred), including advanced SPL and analytics authoring.</li><li>
Strong AWS security engineering experience across multi-account environments, including Security Hub, GuardDuty, Inspector, Macie, CloudTrail, and IAM.</li><li>
Proficiency with SOAR platforms and automation scripting (Python, PowerShell, Bash) for SecOps workflow automation.</li><li>
Experience with SASE technologies (SWG, CASB, ZTNA) and/or DSPM platforms in an enterprise environment.</li><li>
Deep working knowledge of adversary TTPs and the MITRE ATT&amp;CK framework applied to detection engineering and threat modeling.</li><li>
Experience integrating cloud and SaaS telemetry into detection and incident response workflows.</li><li>
Genuine curiosity and an early-mover instinct for emerging technologies, including AI-assisted development tools such as Claude Code; demonstrated habit of evaluating and adopting new capabilities ahead of the curve to improve security posture and reduce manual workflows.</li><li>
Self-directed working style with the ability to scope, prioritize, and execute engineering work autonomously across concurrent initiatives without close direction.</li></ul>
Preferred Qualifications:<ul><li>
Hands-on CSPM engineering experience, including custom rules, policies, automation, and remediation workflows.</li><li>
DSPM platform integration and data-centric security controls.</li><li>
SASE platform engineering experience, including SWG, CASB, ZTNA policy configuration.</li><li>
SOAR workflow architecture and automation strategy across multi-platform environments.</li><li>
Relevant certifications: GIAC (GCIA, GCIH, GCED, GDAT), AWS Certifications, CISSP, or equivalent.</li><li>
Hands-on experience with AI-assisted development tools (Claude Code, GitHub Copilot, Cursor, or similar) applied to security engineering or automation workflows.</li></ul>
Why Join Us?<ul><li>
Competitive salary and benefits, including 401(k), health insurance, and performance-based bonuses.</li><li>
Collaborative and fast-paced work environment.</li><li>
Professional development and growth opportunities within the finance and investment space.</li></ul>
Benefits:<ul><li>
Competitive Salary &amp; Target Bonus Program</li><li>
Retirement Savings &ndash; 401(k) with a company match</li><li>
Comprehensive Medical insurance through BlueCross BlueShield of Texas. Company-paid dental, vision, short-term &amp; long-term disability, and life insurance.</li><li>
Work-Life Balance &ndash; This role offers 20+ days of PTO, 10 paid holidays, and paid volunteer time off.</li><li>
Flexible Work Options &amp; Perks &ndash; Hybrid opportunity, wellness programs, and weekly paid lunch for onsite staff.</li><li>
Health Savings Accounts (HSA) &amp; Flexible Spending Accounts (FSAs) &ndash; Includes a company match for HSAs.</li></ul></div>

Senior Security Engineer

SpaceX

<div><div>SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.</div>
OPERATIONS ENGINEER, SECURITY
The Security Operations Engineer is a seasoned leader specializing in project management, data analysis, dashboard creation, and compliance oversight within fast-paced, high-tech environments. In this role, you will work alongside our security team and lead cross-functional and multi-disciplinary teams to optimize security operations and related risk management functions, supporting overall business operations through strategic planning, process optimization, and resource alignment to tasks. You will drive initiatives to develop and maintain analytical dashboards for real-time monitoring and reporting, refine existing applications and systems, conduct in-depth data analysis to identify trends and risks, and ensure adherence to federal, state, local laws, and company policies across all security functions. This is an opportunity for emerging leaders who can apply principles of operations management and data analytics to solve complex security challenges, conduct rigorous problem analysis, and steer and execute strategic decisions within the business. 
 
RESPONSIBLITIES:
<ul>
<li>Lead and manage security projects from inception to completion, including planning, resource allocation, timeline management, and stakeholder coordination to enhance operational efficiency and risk mitigation</li>
<li>Monitor, analyze, provide strategic insights, execute, and improve against key performance indicators for security operations (especially incident response times, threat detection rates, compliance audit scores, security breach incidents, employee training completion rates, vulnerability resolution rates, risk assessment scores, resource utilization efficiency, and budget adherence for security initiatives)</li>
<li>Design, develop, and maintain interactive dashboards using tools like Power BI, JIRA, or similar platforms to visualize security metrics, incident data, and performance indicators for real-time decision-making</li>
<li>Perform comprehensive data analysis on security logs, incident reports, and operational metrics to identify patterns, vulnerabilities, and emerging threats, providing actionable insights to senior leadership</li>
<li>Collaborate with cross-functional teams (e.g., IT, facilities, and HR) to integrate security best practices into business processes and implement corrective actions based on analytical findings</li>
<li>Monitor and report on key performance indicators (KPIs) related to security operations, such as response times, incident resolution rates, and compliance adherence, while forecasting future needs and trends</li>
<li>Train and mentor security team members on data-driven tools, compliance protocols, and project management methodologies to foster a culture of continuous improvement</li>
<li>Develop and update security policies, procedures, and emergency response plans, incorporating data analysis to proactively address potential risks in a high-tech environment</li>
</ul>
BASIC QUALIFICATIONS:
<ul>
<li>Bachelor's degree in computer science, information technology, cybersecurity, or an engineering field</li>
<li>2+ years of experience in operations/process improvement/consulting (internship experience qualifies)</li>
<li>Experience with Excel, SQL, python</li>
</ul>
PREFFERED SKILLS AND EXPERIENCE:
<ul>
<li>5+ years of professional experience in security engineering, systems administration, or a similar role in fast-paced, high-tech environments</li>
<li>Experience in data analysis, compliance oversight, or leading cross-functional teams for operational efficiency</li>
<li>Experience in configuring Atlassian Cloud products, including Jira and Confluence.</li>
<li>Experience working with the Esri ArcGIS Suite, including ArcGIS Pro, ArcGIS Online, and ArcGIS Enterprise with skills in leveraging GIS for security applications, such as mapping facility layouts, asset tracking, threat analysis, and geospatial data visualization</li>
<li>Experience in automating using scripting languages (Python, Javascript, etc.)</li>
<li>Ability to lead and collaborate effectively with multi-disciplinary teams, including IT, facilities, HR, and executive stakeholders</li>
<li>Proficiency in data visualization and dashboard tools like Power BI, Tableau, or similar platforms for real-time monitoring and reporting</li>
<li>Experience conducting comprehensive data analysis on operational metrics, logs, and incident reports to identify trends, risks, and vulnerabilities</li>
<li>Familiarity with federal, state, and local security regulations, as well as industry standards for compliance and risk management</li>
<li>Digital forensics, threat assessment, or emergency response planning experience in physical</li>
<li>Possession of at least two of the following certifications is a plus: PMP (Project Management Professional), CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CPP (Certified Protection Professional), or data analytics certifications like Microsoft Certified: Power BI Data Analyst Associate</li>
<li>Advanced understanding of security operations disciplines, such as incident response, vulnerability management, and resource utilization, to analyze and mitigate risks</li>
</ul>
ADDITIONAL REQUIREMENTS:
<ul>
<li>Must be able to work extended hours and/or weekends as needed, including occasional short-notice domestic travel</li>
<li>Active Top Secret or TS/SCI. Note that an active clearance may provide the opportunity for you to work on sensitive SpaceX missions. If so, you will be subject to pre-employment drug and random drug and alcohol testing</li>
</ul>
COMPENSATION AND BENEFITS:

Pay range:

Operations Engineer /Level I: $100,000.00 - $115,000.00/per year

Operations Engineer /Level II: $110,000.00 - $135,000.00/per year

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience. Those with an active clearance will receive a 10% differential, up to an additional $15,000 annually, once officially briefed into a classified program.

Base salary is just one part of your total rewards package at SpaceX. You may also be eligible for long-term incentives, in the form of company stock, stock options, or long-term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan. You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short and long-term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation and will be eligible for 10 or more paid holidays per year. Employees accrue paid sick leave pursuant to Company policy which satisfies or exceeds the accrual, carryover, and use requirements of the law.<div>
ITAR REQUIREMENTS:
<ul>
<li>To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. &sect; 1157, or (iv) Asylee under 8 U.S.C. &sect; 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.</li>
</ul>
SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Applicants wishing to view a copy of SpaceX's Affirmative Action Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should reach out to EEOCompliance@spacex.com.</div></div>

Operations Engineer, Security

Virtu Thinko

JOB DESCRIPTION Application Security EngineerDepartment:Technologies &ndash; InfrastructureReports to: Security Operations Manager1. Position SummaryThe Application Security Engineer is responsible for safeguarding the organization&rsquo;s application landscape by embedding security into every step of the software development lifecycle (SDLC). The role requires a deep understanding of application security principles, penetration testing, threat modelling, secure coding practices, and modern DevSecOps methodologies.The ideal candidate will work closely with development, project teams, and broader technology functions to proactively identify vulnerabilities, conduct in‑depth security assessments, and implement preventative controls. The role demands hands‑on experience with SAST/DAST tools, application penetration testing, API security, and the ability to integrate security controls within CI/CD pipelines.This position operates in a fast‑paced environment requiring strong technical expertise, excellent communication skills, and the ability to translate complex security findings into actionable remediation guidance. The successful candidate will play a critical role in maturing the organization&rsquo;s application security posture and ensuring compliance with industry best practices and global security standards.Responsibilities:&middot; Integrate security into all phases of the SDLC by collaborating with development, QA, project, and architecture teams.&middot; Conduct comprehensive application security assessments, including manual and automated code reviews, DAST/SAST analysis, and penetration testing for web, mobile, and API-based applications.&middot; Perform design and architecture reviews, including threat modelling using frameworks such as STRIDE and PASTA.&middot; Identify vulnerabilities and provide remediation guidance aligned with secure coding standards and frameworks such as OWASP Top 10, OWASP ASVS, NIST 800‑115, and CWE.&middot; Develop and maintain application security policies, secure coding guidelines, and best practice references.&middot; Support integration of security tooling into CI/CD pipelines.&middot; Review and improve security processes, focusing on optimization and automation opportunities.&middot; Conduct cloud and infrastructure penetration tests when required, in coordination with infrastructure teams.&middot; Manage and validate vulnerability findings using enterprise vulnerability management systems.&middot; Assist development teams in debugging and resolving security vulnerabilities, ensuring timely remediation.&middot; Participate in incident response activities related to application-layer attacks.&middot; Maintain up‑to‑date knowledge of emerging threats, exploit techniques, and evolving security technologies.&middot; Provide clear technical documentation, reports, and executive summaries of assessment results.&middot; Support internal audits, compliance requirements, and risk assessments related to application security.&middot; Promote secure-by-design principles and contribute to the organization&rsquo;s DevSecOps strategy.&middot; Ensure full compliance with Information Security and Assurance policies, industry standards, and applicable regulatory requirements by embedding governance and controls across the application lifecycle.&middot; Develop, maintain, and enforce application and system hardening baselines aligned with CIS Benchmarks and other security configuration standards.&middot; Participate in 24&times;7 support during critical application security incidents, investigations, and urgent remediation activities as required.&middot; Contribute to security-related initiatives and projects, performing additional duties as assigned to support evolving business and technology needs within the security program.Required Experience &middot; 5-7 years of professional experience in application security, penetration testing, or related security engineering roles.&middot; Demonstrated hands‑on experience in application penetration testing using tools such as Burp Suite, OWASP ZAP, and related exploitation frameworks.&middot; Strong knowledge of OWASP Top 10, OWASP ASVS, OWASP SAMM, and secure SDLC frameworks.&middot; Experience performing threat modelling and reviewing application architecture designs.&middot; Hands‑on expertise with SAST/DAST tools and integrating them into CI/CD workflows.&middot; Working knowledge of vulnerability management process and tools.&middot; Practical experience reviewing code in languages such as JavaScript, TypeScript, Java, or similar.&middot; Good understanding of microservices, REST APIs, authentication/authorization mechanisms, and modern application frameworks.&middot; Basic scripting proficiency (Python, Bash, or PowerShell).&middot; Familiarity with container security, cloud-native security concepts, and DevSecOps practices.&middot; Understanding of networking, TCP/IP fundamentals, and common attack vectors.Education:&middot; BSc/BA in Computer Science, Cybersecurity, Information Technology, or equivalent professional experience.Industry Qualifications: &middot; OSWE, OSCP, OSWA, GPEN, GWAPT, GCPN, or similar security certifications.&middot; Certifications in secure coding, cloud security, or application security standards.&middot; DevSecOps‑related certifications are an advantage.Key Behaviours / Competencies&middot; Strong analytical and problem‑solving skills with attention to detail.&middot; Ability to work independently, prioritize workload, and meet defined deadlines.&middot; Excellent communication skills, with the ability to explain technical vulnerabilities to non‑technical stakeholders.&middot; Demonstrated ability to operate effectively in high‑pressure environments.&middot; A mindset focused on continuous improvement, innovation, and automation.&middot; Strong collaboration and teamwork skills across multidisciplinary teams.&middot; Ability to evaluate applications from both attack and defense perspectives.&middot; Demonstrate a customer‑first mindset by enabling secure, frictionless digital experiences.&middot; Balance security requirements with business needs to support secure innovation.&middot; Provide clear, empathetic, and actionable guidance to internal stakeholders.&middot; Ensure security processes support transparency, agility, and minimal disruption to delivery teams.5. Primary Contactso Information Security Teamo Development Leads / Testing Teamso Project Managerso Security Operations Center (SOC)o Architecture &amp; Governance Teamo Internal and External AuditorsJob Types: Temporary, Contract Contract length: 12 monthsPay: BD1,000.000 - BD1,500.000 per month

Application Security Engineer

alfanar

<div>
 Job description:
 
 
 Job Purpose
 
 The Network Security Engineer is responsible for the daily administration, maintenance, and monitoring of the organization&rsquo;s security infrastructure. This role focuses on ensuring that firewalls, NAC systems, and WAFs are configured correctly to protect company assets and support secure business operations.
 
 Key Accountability Areas
 
 Network Security Operations
 
 &bull; &nbsp; &nbsp;Configure and maintain enterprise firewalls (Palo Alto/Fortinet/Cisco), IDS/IPS, and VPN gateways.
 
 &bull; &nbsp; &nbsp;Administer Aruba ClearPass for Network Access Control (NAC), including managing guest access, BYOD policies, and 802.1X troubleshooting.
 
 &bull; &nbsp; &nbsp;Monitor and tune WAF policies to protect web applications, ensuring regular signature updates and analyzing blocked traffic logs.
 
 System Hardening &amp; Implementation
 
 &bull; &nbsp; &nbsp;Apply security baselines to network devices and ensure its compliance.
 
 &bull; &nbsp; &nbsp;Execute network segmentation tasks as directed, ensuring internal traffic is restricted according to the principle of least privilege.
 
 &bull; &nbsp; &nbsp;Perform regular firewall rule reviews to identify and decommission unused or risky policies.
 
 Vulnerability &amp; Incident Support
 
 &bull; &nbsp; &nbsp;Perform vulnerability scans using tools like Nessus or Qualys and assist in the technical remediation of identified risks.
 
 
 &bull; &nbsp; &nbsp;Ticket Resolution: Timely resolution of security-related service requests and troubleshooting incidents.
 
 &bull; &nbsp; &nbsp;Policy Accuracy: Successful implementation of firewall and WAF changes with zero unauthorized downtime.
 
 &bull; &nbsp; &nbsp;NAC Stability: Ensuring seamless authentication for corporate and guest devices via Aruba ClearPass.
 
 &bull; &nbsp; &nbsp;Documentation Quality: Keeping all security asset inventories and diagrams up to date.
 
 
 &bull; &nbsp; &nbsp;Act as Tier 2 supports security incidents, analyzing SIEM alerts and escalating complex threats to the Senior Engineer or SOC lead.
 
 &bull; &nbsp; &nbsp;Coordinate with vendors (e.g., following up on support tickets with Vendor side) to resolve hardware or software defects.
 
 Compliance &amp; Documentation
 
 &bull; &nbsp; &nbsp;Maintain technical documentation for all security configurations, network diagrams, and standard operating procedures (SOPs).
 
 &bull; &nbsp; &nbsp;Collect evidence for security audits to demonstrate compliance with NCA ECC and internal policies.
 
 
 &bull; &nbsp; &nbsp;Ticket Resolution: Timely resolution of security-related service requests and troubleshooting incidents.
 
 &bull; &nbsp; &nbsp;Policy Accuracy: Successful implementation of firewall and WAF changes with zero unauthorized downtime.
 
 &bull; &nbsp; &nbsp;NAC Stability: Ensuring seamless authentication for corporate and guest devices via Aruba ClearPass.
 
 &bull; &nbsp; &nbsp;Documentation Quality: Keeping all security asset inventories and diagrams up to date.
 
 
 Sucess Criteria:
 
 <ul>
 <li>
 Ticket Resolution: Timely resolution of security-related service requests and troubleshooting incidents.
 </li>
 <li>
 Policy Accuracy: Successful implementation of firewall and WAF changes with zero unauthorized downtime.
 </li>
 <li>
 NAC Stability: Ensuring seamless authentication for corporate and guest devices via Aruba ClearPass.
 </li>
 <li>
 Documentation Quality: Keeping all security asset inventories and diagrams up to date.
 </li>
 </ul>
 Role Accountability
 
 
 Leadership
 
 
 &bull; &nbsp; &nbsp;Assist in daily operational tasks and collaborate effectively within the team to meet functional objectives, supporting efforts to enhance workflow efficiency and team productivity.
 
 
 Strategy and Planning
 
 
 &bull; &nbsp; &nbsp;Provide operational support in executing strategy plans, ensuring tasks are completed in alignment with the broader organizational objectives.
 
 
 Policy, Systems and Procedures
 
 
 &bull; &nbsp; &nbsp;Support the implementation and maintenance of operational policies and procedures, ensuring compliance with standards and contributing to the efficiency and effectiveness of daily operations.
 
 
 
 Certifications (Required)
 
 : Cisco Certified CyberOps Associate, CompTIA Security+, or Aruba Certified ClearPass Associate (ACCA).
 
 
 
 Certifications (Preferred
 
 ): Fortinet NSE 4, CCNA Security, or CySA+).
 
 Academic Qualification Bachelor Degree in Science in Cybersecurity or Computer Science Work Experience 2 to 5 Years Technical / Functional Competencies Work under pressur MS Office Teamwork Time Management Well Organized Communication Creativity Critical thinking Initiative Risk Assessment Resource Management Analytical thinking Adaptability
</div>

Network Security Analyst

Medical Guardian

<div>About Medical Guardian:
Medical Guardian is a fast-growing digital health and safety company on a mission to help people live a life without limits. With 13 consecutive years on the Inc. 5000 list of Fastest Growing Companies, we&rsquo;re redefining what it means to age confidently and independently.
We support over 625,000 members nationwide with life-saving emergency response systems and remote patient monitoring solutions. Trusted by families, healthcare providers, and care managers, our work is powered by a culture of innovation, compassion, and purpose.
Position Summary:
We are seeking a highly skilled and strategic Senior Security Engineer to strengthen and mature our enterprise security capabilities as part of the broader IT Operations organization. This role is responsible for securing cloud infrastructure, AI platforms, applications, endpoints, identity systems, and core operational environments.
The Senior Security Engineer will work closely with Infrastructure, Engineering, Compliance, QA, IT Operations, and external security service providers to proactively reduce risk while enabling business growth. This position reports directly to the Head of Infrastructure and Information Security, with a dotted-line reporting relationship to the CISO for strategic alignment, governance oversight, and security program direction.
This role serves as the primary technical lead for security incident response, responsible for coordinating internal response teams, activating third-party incident response partners when required, and leading containment and recovery efforts during active security events. The position requires the ability to respond to and manage security incidents outside of standard business hours when necessary.
This is a hands-on senior engineering role with architectural ownership, external partner oversight, and mentorship responsibilities.
Key Responsibilities:
Security Architecture and Engineering<ul><li>
Design and implement secure architecture patterns across Azure and AWS cloud environments, as well as on-prem and hybrid infrastructures</li><li>
Lead security design reviews for infrastructure and application initiatives</li><li>
Engineer and optimize enterprise security controls across endpoint protection, threat detection and response, network security, email security, data protection, cloud access governance, and privileged access management</li><li>
Define and implement Zero Trust principles</li></ul>
Cloud Security, Azure Focused<ul><li>
Harden Azure security posture including Entra ID governance, RBAC design, Conditional Access, PIM, Defender for Cloud, Defender for Cloud Apps, and Private Link architecture</li><li>
Implement and manage cloud posture management and cloud workload protection capabilities, including CSPM and CNAPP tooling</li><li>
Secure Kubernetes and containerized workloads</li><li>
Automate security guardrails using infrastructure as code such as Terraform, Bicep, and CloudFormation</li><li>
Implement enterprise data classification, DLP, encryption, and tenant-level controls across Microsoft 365 and Azure to prevent data exfiltration and unauthorized AI service access</li></ul>
AI and Emerging Technology Security<ul><li>
Design, implement, and enforce security controls for enterprise AI platforms including Azure OpenAI, Microsoft Copilot, Azure Machine Learning, and related AI services</li><li>
Secure AI model training data, inference endpoints, APIs, and service principals while enforcing governance controls to prevent exposure of sensitive or regulated data</li><li>
Develop guardrails to detect and prevent shadow AI adoption</li><li>
Evaluate third-party AI tools for security, privacy, and data residency risks</li><li>
Partner with Legal and Compliance teams to support responsible AI governance and regulatory requirements</li></ul>
Application Security<ul><li>
Partner with DevOps and Engineering teams to integrate automated application security testing, including static analysis, dynamic testing, and secret detection, into CI and CD pipelines prior to deployment</li><li>
Perform threat modeling and architecture risk assessments</li></ul>
Threat Detection and Incident Response<ul><li>
Serve as incident response lead for security events, coordinating internal response teams and activating third-party incident response partners as needed</li><li>
Lead containment, eradication, and recovery efforts during security incidents</li><li>
Enhance detection engineering use cases within SIEM and develop automated response playbooks</li><li>
Lead post-incident reviews and root cause analysis</li><li>
Lead and facilitate regular incident response tabletop exercises and coordinated response simulations to validate detection, escalation, and cross-functional readiness</li></ul>
Vulnerability Management<ul><li>
Oversee enterprise vulnerability management including scanning, risk-based prioritization, and remediation tracking</li><li>
Develop metrics and reporting for executive visibility</li></ul>
Compliance and Risk<ul><li>
Support regulatory requirements including HIPAA, HITRUST, SOC 2, and PCI-DSS as applicable</li><li>
Assist with audits and evidence collection</li><li>
Develop and maintain security policies and standards</li><li>
Perform third-party risk assessments</li></ul>
Security Operations and External Partner Management<ul><li>
Oversee MDR detection coverage, alert tuning, escalation workflows, service level adherence, and integration of logging and telemetry between internal systems and third-party providers</li><li>
Collaborate with the MSP on infrastructure security hardening, patching strategy, endpoint protection, and configuration management</li><li>
Drive continuous improvement through regular performance reviews and security posture assessments with external partners</li></ul>
Leadership and Mentorship<ul><li>
Provide technical guidance and drive security best practices across IT and Engineering initiatives</li><li>
Serve as escalation point for complex security issues</li></ul> 

Requirements 
Required Qualifications<ul><li>
Must be legally authorized to work in the United States without the need for employer sponsorship now or in the future</li><li>
5 or more years of progressive experience in cybersecurity engineering</li><li>
Strong experience in Azure security architecture and hands-on implementation of controls including Entra ID, Conditional Access, PIM, Defender for Cloud, and Private Endpoints</li><li>
Deep understanding of network security, identity and access architecture, endpoint protection, and security monitoring and detection engineering principles</li><li>
Experience securing AI and ML platforms or cloud-native AI services</li><li>
Experience implementing enterprise data protection controls including DLP, Purview, labeling, encryption, and key management</li><li>
Experience with infrastructure as code and automation using Python, PowerShell, Terraform, Bicep, or similar tools</li><li>
Experience securing CI and CD pipelines and containerized environments</li><li>
Strong knowledge of security frameworks including NIST, CIS, and ISO 27001</li><li>
Experience managing third-party security operations relationships and holding vendors accountable to defined service levels</li></ul>
Preferred Qualifications<ul><li>
Experience in regulated industries such as healthcare</li><li>
Experience implementing Zero Trust architectures</li><li>
Security certifications such as CISSP or CCSP strongly preferred. Azure security certifications including AZ-500 highly valued. GIAC certifications such as GCED or GCIA and OSCP are considered a plus.</li></ul>
Work Environment &amp; Requirements:<ul><li>
Hybrid work model with on-site presence required two days per week at the Philadelphia location</li></ul><ul><li>
Serve as the primary incident response lead, including availability outside standard business hours to coordinate and manage security incidents and engage third-party incident response partners when necessary</li><li>
Candidates must be authorized to work in the United States without current or future need for visa sponsorship.</li></ul> 

Benefits 
<ul>
<li>Health Care Plan (Medical, Dental &amp; Vision)</li>
<li>Paid Time Off (Vacation, Sick Time Off &amp; Holidays)</li>
<li>Company Paid Short Term Disability and Life Insurance</li>
<li>Retirement Plan (401k) with Company Match</li></ul></div>

Search 10000+ Security operations engineer jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 security operations engineer jobs Near Me

Security Operations Engineer

Security Operations Engineer

Senior Security Engineer

Operations Engineer, Security

Application Security Engineer

Network Security Analyst

Senior Security Engineer