security software engineer

Apple

Apple&rsquo;s OS Security team is looking for a motivated software engineer to design, build, and deploy world-class containment and isolation mechanisms throughout our operating systems. As part of the Security Engineering and Architecture group, you will develop the foundational technologies-including compartmentalization, mandatory access control, and robust policy engines-that ensure our platforms are resilient and never just one mistake away from compromise. Our goal is for users to feel confident that our devices have their back every time they interact with an Apple product. 
 
Description 
 
In this hands-on software engineering role, you will design robust software systems and craft secure, high-performance code, collaborating across the company with everyone from our Silicon Engineering group to our Human Interface designers. We build technology deep within macOS and iOS internals, but we also lift it up through the software stack, creating ergonomic APIs that connect world-class security engineering directly to developers and users. You will have the autonomy to invest your time into the most promising areas of research and development, seeing your work scale to protect millions of people in their daily lives. Come help us push the boundaries of pragmatic, user-focused security.&quot;,&quot;responsibilities&quot;:&quot;Design and implement state-of-the-art isolation and compartmentalization mechanisms for iOS and macOS internals. 
 
Develop and maintain label-based and mandatory access systems, alongside the sophisticated policy languages and engines that enforce them. 
 
Build secure, usable APIs that allow both first-party and third-party developers to easily adopt our containment technologies. 
 
Analyze high-level frameworks and apps to ensure our security models apply pragmatically across the entire system, while operating mostly at the OS and systems programming level. 
 
Balance security, performance, and ease of use by breaking down ambitious, multi-year security goals into tangible, deployable steps. 
 
Collaborate across Apple to ensure our security technologies are not just built, but actively and correctly used by other teams to protect what matters most. 
 
Preferred Qualifications 
 
Exposure to iOS and macOS (end user, administrator, and/or developer). 
 
Involvement in open source technologies and development communities such as FreeBSD and Linux. 
 
Real world kernel and/or hypervisor programming experience. 
 
Experience designing and implementing security policy languages. 
 
Minimum Qualifications 
 
BS in Computer Science or equivalent experience/skills in systems programming and security. 
 
Strong C and low-level systems programming skills. 
 
Understanding of operating system internals (macOS, iOS, BSD, or Linux). 
 
Ability to navigate and understand code up and down the software stack (comfortable diving into kernel, low-level userland, framework, and application code). 
 
Familiarity with past, current, and emerging security exploits and mitigation techniques. 
 
Demonstrated readiness to balance concurrent priorities, manage technical debt, and deliver on tight schedules. 
 
Excellent partnership and communication skills to collaborate with a broad range of engineering teams.&quot;,&quot;internalDetails&quot;:null 
 
Pay &amp; Benefits 
 
This posting is not for a specific job opening and by submitting your resume you are expressing interest in being contacted about this type of role at Apple in the future.

Security Software Engineer, OS Security

Digital Envoy

<div>Description:

Digital Envoy (DE) is the leader in geolocation and VPN data for over 25 years for customers in various verticals &mdash; Streaming Media, Ad Tech, Cybersecurity, E-commerce, and Data Analytics. Our core product, IP address geolocation, powers customers like Netflix, Hulu, Trade Desk, PayPal, AWS, Apple, and many others. Our VPN and Proxy data, coupled with accurate IP address geolocation, helps companies determine malicious activity for threat intelligence, authentication, and digital privacy.
We are looking for a Cybersecurity Research Engineer to further our efforts on our VPN Proxy product. The Engineer will work to understand and investigate mobile software by identifying threats and performing analysis on software that potentially compromises devices.
This person can work remotely from any of the following states: California (CA), Colorado (CO), Connecticut (CT), Florida (FL), Georgia (GA), Kentucky (KY), Massachusetts (MA), Michigan (MI), New York (NY), New Jersey (NJ), North Carolina (NC), Pennsylvania (PA), South Carolina (SC), Tennessee (TN), Texas (TX), Virginia (VA), Washington (WA).
Georgia residents are encouraged and welcomed to join us a couple days/week in our Peachtree Corners, Georgia office.
Please note, at this time, Digital Envoy is not sponsoring visas for this position.
WHAT YOU'LL DO:<ul><li>
Write scalable code and perform intelligence analysis in order to identify threats</li><li>
Identify trends with current/emerging threats as they relate to the use of information technology and policies. Research credible new intelligence and subject matter resources to combat them</li><li>
Utilize and enhance existing REST APIs and implement new REST APIs using best practices for a scalable user interface</li><li>
Set the standards for development/coding</li><li>
Provide subject matter expertise to support various operations</li><li>
Leverage AI-assisted research, development, and automation tools to accelerate malware analysis, threat detection, reverse engineering, secure coding practices, and operational efficiency across cybersecurity initiatives.</li></ul>
WHAT WE OFFER:<ul><li>
Competitive Salary &amp; Bonus program</li><li>
Medical, Dental and Vision</li><li>
Paid Holidays &amp; Unlimited PTO policy</li><li>
401(k) with employer contribution match</li><li>
We value your input: make a real impact in a growing company!</li><li>
5 years development experience in Python 3, Perl, C (any other languages welcome)</li><li>
2+ years of relevant work experience in code-level security auditing and secure coding practice</li><li>
Advanced proficiency of Linux, security engineering, computer and network security, IP protocols</li><li>
Strong proficiency with static and dynamic analysis of malicious binaries</li><li>
Some proficiency with Smali</li><li>
Experience with security related data analysis</li><li>
Experience with noSQL databases</li><li>
Familiarity with tools such as IDA Pro or OllyDbg, any debugging/decompiler tools</li><li>
Familiarity with AWS and SQL is a plus</li></ul>
About Digital Envoy:
In 1999, Digital Envoy introduced the concept of privacy-sensitive IP-based geolocation and IP intelligence. This technology allows businesses from ad networks to publishers, websites, retailers and more to harness the power of location and new intelligence about connected users for many mission-critical applications. Digital Envoy has three business units that address the unique needs of customers: Digital Element, which provides global geolocation data and services that bring anytime, anywhere relevance and context to online and mobile initiatives; Digital Resolve, which delivers cybersecurity solutions that proactively secure online accounts, information, transactions and interactions from login to logout and Outlogic, which allows companies in retail, real estate, and financial markets to develop disruptive tools built on a foundation of quality location data.
At Digital Envoy, we are excited about building a diverse team and creating an inclusive environment where everyone can thrive. All employees must be authorized to work in the United States. Digital Envoy provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Digital Envoy complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities.
Requirements:

WHO YOU ARE:<ul><li>
5 years development experience in Python 3, Perl, C (any other languages welcome)</li><li>
2+ years of relevant work experience in code-level security auditing and secure coding practice</li><li>
Advanced proficiency of Linux, security engineering, computer and network security, IP protocols</li><li>
Strong proficiency with static and dynamic analysis of malicious binaries</li><li>
Some proficiency with Smali</li><li>
Experience with security related data analysis</li><li>
Experience with noSQL databases</li><li>
Familiarity with tools such as IDA Pro or OllyDbg, any debugging/decompiler tools</li><li>
Familiarity with AWS and SQL is a plus</li><li>
Familiarity with applying AI/ML-assisted tools and automation techniques to cybersecurity research, malware analysis, secure coding, and threat intelligence workflows</li></ul></div>

Cybersecurity Research Engineer

Amazon.com

<div><h2 class="jobSectionHeader">DESCRIPTION</h2>
AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we&rsquo;re the people who keep the cloud running. We support all AWS data centers and all of the servers, storage, networking, power, and cooling equipment that ensure our customers have continual access to the innovation they rely on. We work on the most challenging problems, with thousands of variables impacting the supply chain &mdash; and we&rsquo;re looking for talented people who want to help. 
 
You&rsquo;ll join a diverse team of software, hardware, and network engineers, supply chain specialists, security experts, operations managers, and other vital roles. You&rsquo;ll collaborate with people across AWS to help us deliver the highest standards for safety and security while providing seemingly infinite capacity at the lowest possible cost for our customers. And you&rsquo;ll experience an inclusive culture that welcomes bold ideas and empowers you to own them to completion. 
 
Would you like to develop new AWS services that enhance our customers&rsquo; ability to protect their workloads from evolving threats and attacks? 
AWS Perimeter Protection has created unique technology and innovative services such as AWS Shield, AWS Web Application Firewall, AWS Firewall Manager, and Network Firewall to monitor and defend some of the largest distributed networks in the world, but it is still only Day 1. 
 
Our team's mission is to help customers manage their network security complexity with ease. We're looking for a Software Development Manager to shape the development of a new, greenfield product that radically improves on this mission by leveraging GenAI to help customers meet their security needs. This project is a novel application of AI that goes beyond current industry standards. 
 
You will work closely with other teams including Threat Research, Security, Operations, Networking, and Product to shape how we design, develop, build, deploy, and support this exciting new product. In this role, you will lead part of the Engineering team which is responsible for developing this new security product. 
 
Key job responsibilities 
The team is looking for a software engineer to solve challenging distributed systems problems on a global scale, and continually deliver new capabilities to meet the needs of our customers worldwide. The ideal candidate has a technical background in distributed systems and a knowledge of computer networking is a plus! 
 
Candidates who enjoy the challenges of scaling a global architecture, have deep analytical skills, and excellent communication skills will find the team to be inline with their interests and desire for a challenge. You must be able to highly collaborative, be creative, analytical and thrive in fast-paced environments, all while interacting with highly technical software and networking development teams. 
 
You will own the operation of these services and partner with stakeholders across the organization to set goals and deliver a long-term vision for protecting our customer&rsquo;s critical applications. You will also play a leading role by interacting with customers, gathering requirements, then influencing how we design, develop, build, deploy, and support new features and functionality.<h2 class="jobSectionHeader">
BASIC QUALIFICATIONS</h2><ul><li>3+ years of non-internship professional software development experience</li><li>2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience</li><li>1+ years of software development engineer or related occupational experience</li><li>1+ years of designing and developing large-scale, multi-tiered, multi-threaded, embedded or distributed software applications, tools, systems, and services using: C#, C++, Java, or Perl experience</li><li>1+ years of Object Oriented Design experience</li><li>Bachelor's degree or foreign equivalent in Computer Science, Engineering, Mathematics, or a related field</li><li>Experience programming with at least one software programming language</li></ul><h2 class="jobSectionHeader">
PREFERRED QUALIFICATIONS</h2><ul><li>3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience</li><li>Bachelor's degree in computer science or equivalent</li></ul> 
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. 
 
Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company&rsquo;s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. 
 
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner. 
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits. 
USA, CA, Santa Clara - 165,200.00 - 223,600.00 USD annually 
USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually</div>

Software Development Engineer II, AWS Network Security Director

Crescent Solutions Services

Position Overview:The Security Engineer, Platform &amp; Tooling owns the shared automation backbone that serves both security-operations teams (Red, Blue, Purple) and the product SDLC. The mandate is twofold:- Eliminate operational toil by building reliable pipelines for scans, telemetry, and evidence management.- Embed security into DevOps workflows (DevSecOps) so vulnerabilities are identified and remediated early.Responsibilities:CI/CD &amp; DevSecOps Automation- Integrate SAST (Semgrep), DAST (ZAP, Burp), and SCA scanners into GitHub/GitLab pipelines.- Enforce IaC and container-image checks (Terraform, CloudFormation, Dockerfile linters).- Publish build-stage security metrics (OWASP risk tags, pass/fail gates) to engineering dashboards.Offensive &amp; Defensive Tooling- Orchestrate bulk scans (ZAP, Nuclei, Semgrep) outside the SDLC for red-team engagements.- Parse SARIF/JSON outputs and route findings to DefectDojo and Jira with de-duplication logic.Telemetry Ingestion &amp; SIEM/XDR Pipelines- Maintain schemas, enrichment, and data-quality checks for Windows/M365, AWS, and Azure logs.- Monitor pipeline health via automated SLIs/SLOs; trigger self-healing routines where feasible.Reusable Artefact Curation- Standardise Nuclei templates, Burp/ZAP add-ons, Sigma rules, and threat-hunt notebooks.- Version and distribute through an internal registry; provide CLI tooling for one-command deployment.Lab &amp; Sandbox Infrastructure- Operate disposable AD forests, cloud sandboxes, and target containers for red/purple exercises.- Provide &ldquo;one-click&rdquo; Terraform/Ansible scripts that bootstrap environments in &lt; 15 minutes.Process Optimisation &amp; Practitioner UX- Conduct quarterly time-motion studies to locate manual pain points.- Produce concise documentation and in-tool help to maximise adoption by security analysts and developers.Metrics &amp; Continuous Improvement- Report KPIs (see below) to leadership; maintain a roadmap aligned with both Ops and SDLC priorities.Requirements:- Programming: Advanced proficiency in Python or Go for pipeline tooling and API integrations.- CI/CD &amp; DevOps: Demonstrable experience with Jenkins, GitHub Actions, GitLab CI, or Azure DevOps;familiarity with GitOps patterns.- Security Scanners &amp; Formats: Hands-on with ZAP, Semgrep, Nuclei, SARIF/JSON, CycloneDX, SBOMs.- Container &amp; Cloud: Docker/Kubernetes, plus AWS or Azure deployment experience; image-hardening andruntime-security controls.- Data Engineering: Log parsing, schema mapping, and streaming (Kafka, Kinesis, or equivalent).- IaC &amp; Configuration Management: Terraform, CloudFormation, Ansible, or similar.- Collaboration: Proven record of working with both software-engineering squads and security-operations teams,translating requirements into intuitive tooling.- Strong proficiency in both written and spoken English.- Adaptability to thrive in dynamic, fast-paced environments and remote work settings.- Effective team player with excellent collaboration and interpersonal skills.- Ability to perform under pressure with a positive attitude and a focus on team success.- Demonstrates high levels of responsibility, reliability, and accountability.- Willingness and ability to travel internationally when required.Nice-to-Haves- Experience with implementing OWASP DSOMM- GIAC Cloud Security Automation (GCSA)- HashiCorp Certified: Terraform Associate- Certified Kubernetes Administrator (CKA)- DevOps or DevSecOps-specific certifications (e.g., DSOE, CDP)What we offer:- Competitive Compensation: Enjoy a salary package tailored to your skills and experience- Comprehensive leave package- Top-Tier Equipment: Stay productive with the latest tools, including a MacBook and iPhone.- Thriving Culture: Immerse yourself in a dynamic, inclusive work environment that fosters growth.Pay: From AED10,000.00 per monthEducation:<ul><li>Bachelor's (Preferred)</li></ul>Experience:<ul><li>Programming in Python : 5 years (Preferred)</li><li>Go: 4 years (Preferred)</li><li>API integrations: 5 years (Preferred)</li><li>CI/CD: 5 years (Preferred)</li><li>DevOps: 5 years (Preferred)</li><li>Security Scanners ZAP, Semgrep, Nuclei (must be hands-on): 5 years (Preferred)</li><li>AWS or Azure : 4 years (Preferred)</li><li>IaC &amp; Configuration Management: Terraform, CloudFormation: 5 years (Preferred)</li></ul>Work Location: In person

Security Engineer, Platform & Tooling

Snowflake

<div><div>At Snowflake, we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don&rsquo;t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset &mdash; who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At Snowflake, your role isn't just to execute a function, but to help redefine the future of how work gets done.
Anti-Abuse Senior Software Engineer, Product Security
Build the future of data and AI. Join the Snowflake team.
The Anti-abuse team at Snowflake is responsible for protecting Snowflake and our customers from abuse on the Snowflake platform. You will have the opportunity to help set the direction of the anti-abuse roadmap and Product Security while working closely with other teams at Snowflake.
As an Anti-Abuse Security Engineer, you will design, build, and operate systems that protect our platform, customers, and data from abuse, misuse, and fraud. You&rsquo;ll work at the intersection of security engineering, data analytics, and machine learning, developing prevention controls, detections, and automation that mitigate abuse activity across our ecosystem.
We&rsquo;re at the forefront of the data revolution, committed to building the world&rsquo;s greatest data and applications platform. Our &lsquo;get it done&rsquo; culture allows everyone at Snowflake to have an equal opportunity to innovate on new ideas, create work with a lasting impact, and excel in a culture of collaboration.
AS AN ANTI-ABUSE SECURITY ENGINEER AT SNOWFLAKE, YOU WILL:<ul><li>
Understand the abuse risks faced by Snowflake and our customers.</li><li>
Design and deploy the anti-abuse controls addressing risks such as Account Take Overs (ATO), data exfiltration, risk around code/data sharing, and other newest and highest future engineering challenges as Snowflake grows.</li><li>
Help illustrate abuse risks, threats and exploits to cross functional teams.</li><li>
Research, plan, and build anti-abuse architectures for Snowflake products and features<ul><li>
Provide designs and reference implementations for new anti-abuse features</li><li>
Research new services, controls, or features that can help protect the product and our customers from abuse.</li></ul></li></ul>
OUR IDEAL ANTI-ABUSE SECURITY ENGINEER WILL HAVE:<ul><li>
Bachelor's degree in Computer Science or related technical field or equivalent practical experience.</li><li>
4+ years of experience with anti-abuse space, insider threats, detections, threat hunting and incident response.</li><li>
Understanding of common abuse patterns (e.g., ATO, exfiltration, insider threats, , spam, fraud, privilege misuse).</li><li>
Proficiency in Python, SQL, or a similar language for building detections and data pipelines.</li><li>
In-depth knowledge of anti-abuse solutions, network security, and/or infrastructure security.<ul><li>
Experience performing source code reviews across various languages (e.g. Java, Go)</li></ul></li><li>
Ability to assess engineering designs and architecture diagrams for abuse risks<ul><li>
Ability to assess abuse risks within an application or feature</li><li>
Experience communicating abuse risks and roadmaps</li><li>
Experience designing and implementing anti-abuse solutions</li></ul></li><li>
Experience contributing to the security anti-abuse community such as presenting at conferences or meetups.</li></ul> 
BONUS POINTS FOR EXPERIENCE WITH THE FOLLOWING:<ul><li>
Master's degree or PhD in Computer Science or related technical field.</li><li>
Experience with cloud environments (AWS, GCP, Azure) and their security/abuse detection tooling.</li><li>
Familiarity with ML-based detection systems, feature engineering, or anomaly detection methods.</li></ul> 
WHY YOU SHOULD WORK FOR US:
Snowflake is growing fast, and we&rsquo;re scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake. 
How do you want to make your impact?
Snowflake is growing fast, and we&rsquo;re scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake.
How do you want to make your impact?
For jobs located in the United States, please visit the job posting on the Snowflake Careers Site for salary and benefits information: careers.snowflake.com
The following represents the expected range of compensation for this role:<ul><li>
The estimated base salary range for this role is $200,000 - $287,500.</li><li>
Additionally, this role is eligible to participate in Snowflake&rsquo;s bonus and equity plan.</li></ul>
The successful candidate&rsquo;s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location. This role is also eligible for a competitive benefits package that includes: medical, dental, vision, life, and disability insurance; 401(k) retirement plan; flexible spending &amp; health savings account; at least 12 paid holidays; paid time off; parental leave; employee assistance program; and other company benefits.
To comply with pay transparency requirements and other statutes, you can notify us if you believe that a job posting is not compliant by completing this form.</div></div>

Anti-Abuse Senior Software Engineer, Product Security

Basharsoft

<div>For a growing security consulting company specializing in industrial security design and compliance, We are seeking a Security Systems Engineer (HCIS Compliance) to review pre-designed security layouts and prepare technical reports in alignment with the Higher Commission for Industrial Security (HCIS) standards. 
The engineer will ensure all designs meet HCIS requirements and submit documentation and reports through the official HCIS platform.<h2 class="jobSectionHeader">
Key Responsibilities</h2><ul><li>
Review security system designs for industrial, commercial, and storage facilities in accordance with HCIS Safety &amp; Security Regulations.</li><li>
Verify placement and adequacy of CCTV, access control, intrusion detection, gates, entrances, and emergency systems.</li><li>
Prepare professional technical reports on company letterhead for submission to HCIS.</li><li>
Conduct gap analysis on existing security layouts and recommend improvements.</li><li>
Ensure compliance with HCIS design guidelines and regulatory updates.</li><li>
Coordinate with internal teams and clients to clarify technical requirements.</li><li>
Support the submission process of site plans and reports through HCIS online systems.</li><li>
Provide technical advice for upcoming security design projects.</li></ul><h2 class="jobSectionHeader">
Required Qualifications</h2><ul><li>
Bachelor&rsquo;s degree in Electrical Engineering, Security Systems Engineering, Industrial Engineering, or related field.</li><li>
Minimum 3 years of experience in HCIS-related security design, review, or industrial security projects.</li><li>
Strong knowledge of HCIS Security Directives (SDs) and compliance processes.</li><li>
Experience with CCTV layouts, access control design, and physical security systems.</li><li>
Strong report-writing and technical documentation skills.</li><li>
Previous experience working in Saudi Arabia.</li><li>
Ability to work independently and manage multiple submissions.</li></ul><h2 class="jobSectionHeader">
Preferred Certifications (Plus but not mandatory)</h2><ul><li>
HCIS-related training or certification.</li><li>
PSP, CPP, or other ASIS certifications.</li><li>
Courses in physical security design, safety, or fire protection.</li></ul></div>

Security Design Engineer | Saudi Arabia

AE Business Solutions

<div>Seeking hands‑on Security Engineer to support critical Data Protection initiatives, including operationalizing Microsoft Purview and accelerating Data Security Posture Management (DSPM) evaluation. 

<ul><li>No C2C inquiries, please</li></ul> 

This role will join the Security Governance, Risk, and Compliance (GRC) &ndash; Data Protection team and work closely with internal security leadership and implementation partners to execute hands‑on configuration and operational tasks. The contractor will help remove near‑term execution bottlenecks while building foundational capabilities that will transition to permanent ownership later in the year. 

This is a 6‑month contract engagement with a strong potential for conversion to a full‑time role, based on performance and business need. 

Primary Focus Areas
<ul><li>Microsoft Purview operationalization and post‑deployment stabilization</li>
<li>DSPM platform evaluation (Cyera, BigID)</li>
<li>Security control configuration, tuning, and operational enablement</li>
<li>Documentation and handoff to permanent staff</li></ul> 

Day‑to‑Day Responsibilities
Microsoft Purview &ndash; Hands‑On Execution
<ul><li>Execute hands‑on Microsoft Purview configuration tasks under guidance from internal Security leadership and SHI / Stratascale advisory teams.</li>
<li>Implement and refine data labeling, DLP policies, and supporting configurations.</li>
<li>Support post‑deployment hypercare, including issue resolution, tuning, and stabilization activities.</li>
<li>Follow change management processes, approval workflows, and Data Protection project plans.</li>
<li>Enable logging, monitoring, and telemetry flows to support operational visibility and SOC integration.</li>
</ul>
Data Security Posture Management (DSPM) &ndash; Evaluation Support
<ul><li>Assist with hands‑on evaluation of DSPM platforms, beginning with Cyera, and supporting BigID as needed.</li>
<li>Onboard representative data sources and environments into DSPM trials.</li>
<li>Validate discovery accuracy, classification depth, access visibility, and risk prioritization signals.</li>
<li>Document findings, gaps, operational friction points, and remediation considerations.</li>
<li>Provide structured input to support DSPM platform selection and business case development.</li>
</ul>
Operational Enablement &amp; Knowledge Transfer
<ul><li>Produce clear documentation, including configuration notes, runbooks, and operational procedures.</li>
<li>Support definition of steady‑state operational processes for data protection controls.</li>
<li>Ensure smooth handoff of knowledge and artifacts to permanent Security Analysts joining later in the year.</li></ul> 

Reporting &amp; Team Structure
<ul><li>Reports functionally to the Lead Security Analyst &ndash; Data Protection</li>
<li>Works day‑to‑day within the GRC &ndash; Data Protection team</li>
<li>Partners closely with Security Engineering, SOC, IT platform teams, and external implementation partners</li></ul> 

Required Skills &amp; Experience
<ul><li>7+ years of experience in Security Engineering, Data Protection, or Cloud Security roles</li>
<li>Hands‑on experience with Microsoft Purview, including DLP and information protection capabilities</li>
<li>Experience implementing or operating data security controls in enterprise environments</li>
<li>Working knowledge of cloud data platforms, SaaS applications, and enterprise data flows</li>
<li>Strong understanding of access control, data classification, and security posture concepts</li>
<li>Experience working within structured change management and security governance processes</li></ul> 

Preferred Experience
<ul><li>Experience with Data Security Posture Management (DSPM) tools such as Cyera, BigID, Varonis, or similar platforms</li>
<li>Prior involvement in security tool evaluations or proof‑of‑concepts</li>
<li>Familiarity with SOC operations, logging, alerting, and security monitoring workflows</li>
<li>Experience working alongside consulting or advisory firms without ceding internal ownership</li></ul> 

Engagement Details
<ul><li>Duration: 6‑month contract</li>
<li>Start: Immediate</li>
<li>Location: Hybrid / Remote (aligned to U.S. time zones)</li>
<li>Conversion Opportunity: Strong potential for full‑time Security Engineer / Security Analyst II conversion based on performance and program maturity</li></ul> 

Why This Role Matters
This engagement directly supports enterprise‑level data protection priorities driven by Board oversight, regulatory expectations, and audit findings. The contractor will play a key role in stabilizing foundational security controls now, while enabling long‑term scale and ownership for organizational data protection strategy.</div>

Security Engineer

Search 10000+ Security software engineer jobs near you this May. New roles added regularly across leading industries. Apply today.