senior information security engineer

Texas Instruments

Change the world. Love your job.
 
Texas Instruments is seeking a Cybersecurity Engineer to join our Information Technology Solutions (ITS) organization in Dallas. In this role, you will work alongside senior engineers to protect TI's global infrastructure, support privileged access solutions, drive security automation, and grow into increasingly independent ownership of security projects.
 
You will gain hands-on experience across TI's security tool stack while building the technical and professional skills needed to become a well-rounded cybersecurity engineer.
 
Responsibilities: 
DevSecOps And Cloud Security
 
Integrate security scanning tools (SAST, DAST, SCA) into CI/CD pipelines (Jenkins, GitHub Actions)
 Triage and prioritize findings from automated security scans and work with dev teams to remediate
 Maintain and improve pipeline security gates without blocking developer velocity
 Implement and monitor security controls across AWS/Azure/GCP environments
 Support CSPM tooling and respond to cloud misconfiguration findings
 Enforce secure baseline configurations for containerized workloads (Docker, Kubernetes).
 
Automation & Tooling
 
Write and maintain scripts (Python, Bash, PowerShell) to automate security checks and reporting
 Manage Infrastructure as Code security (Terraform/Ansible) — secrets management, least-privilege IAM, policy-as-code
 Build and maintain security dashboards and metrics for engineering teams
 
Collaboration
 
Partner with software engineers and platform teams to embed security early in the SDLC
 Document security standards and runbooks for the engineering org
 
Qualifications
 
Minimum requirements: 
Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, or a related field.
 2+ years of experience in cybersecurity, security operations, information security, or a related technical field.
 
Preferred qualifications: 
Master's degree in a related field or equivalent experience
 Certifications such as Security+, CySA+, GSEC, SSCP, CCNA Security, or similar
 Hands-on experience with SIEM platforms (Splunk, Microsoft Sentinel, LogRhythm) and EDR solutions (SentinelOne, CrowdStrike)
 Proficiency in scripting/automation (Python, PowerShell, Bash) and Infrastructure as Code (Terraform, Ansible, Terragrunt)
 Experience with CI/CD pipelines (Jenkins, GitHub Actions, GitLab CI) and integrating security scanning into DevSecOps workflows
 Working knowledge of cloud security controls and posture management (CSPM, CWPP, IAM policies, secrets management) in AWS, Azure, or GCP
 Solid grasp of networking fundamentals (firewalls, VPNs, segmentation) and privileged access concepts
 Experience with vulnerability management platforms and penetration testing methodologies
 Interest or experience applying AI/ML to security use cases
 CTF participation, security research, or similar competitive/research experience
 Demonstrated ability to mentor junior team members or lead small workstreams
 Strong written and verbal communication skills, with the ability to present technical findings to varied audiences
 
About Us
 Why TI?
 Engineer your future. We empower our employees to truly own their career and development. Come collaborate with some of the smartest people in the world to shape the future of electronics.
 We're different by design. Diverse backgrounds and perspectives are what push innovation forward and what make TI stronger. We value each and every voice, and look forward to hearing yours. Meet the people of TI
 Benefits that benefit you. We offer competitive pay and benefits designed to help you and your family live your best life. Your well-being is important to us. Please find our country-specific benefits here
 
About Texas Instruments
 Texas Instruments Incorporated (Nasdaq: TXN) is a global semiconductor company that designs, manufactures and sells analog and embedded processing chips for markets such as industrial, automotive, data center, personal electronics and communications equipment. At our core, we have a passion to create a better world by making electronics more affordable through semiconductors. This passion is alive today as each generation of innovation builds upon the last to make our technology more reliable, more affordable and lower power, making it possible for semiconductors to go into electronics everywhere. Learn more at TI.com.
 
Texas Instruments is an equal opportunity employer and supports a diverse, inclusive work environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, disability, genetic information, national origin, gender, gender identity and expression, age, sexual orientation, marital status, veteran status, or any other characteristic protected by federal, state, or local laws.
 
If you are interested in this position, please apply to this requisition.
 
TI does not make recruiting or hiring decisions based on citizenship, immigration status or national origin. However, if TI determines that information access or export control restrictions based upon applicable laws and regulations would prohibit you from working in this position without first obtaining an export license, TI expressly reserves the right not to seek such a license for you and either offer you a different position that does not require an export license or decline to move forward with your employment.
 
Job Info
 Job Identification 25016844
 Job Category Information Technology
 Posting Date 07/30/2026, 08:31 AM
 Degree Level Bachelor's Degree
 Locations EXKI 13560 N Central Expy, Dallas, TX, 75243, US
 ECL/GTC Required Yes

Early Career: IT Security Engineer

Leidos

<div>Description
Leidos is seeking a Cyber Security InfoSec Engineer will provide support for a 150+ FTE technical development program supporting the Sponsor&rsquo;s Entitlement Programs as well as IdAM /ICAM, Authentication, Authorization, Attributes and Digital Policy Management. The Cyber Security Engineer will target, assess, exploit, and report risks and vulnerabilities of information systems to provide senior decision makers with actionable data. Cyber Security Engineers are responsible for IT security/vulnerability assessments and managing overall network security using network and security-related hardware and software.
Primary Responsibilities<ul><li>
Identify and define applicable security controls and responses for the project</li><li>
Review responses, enter responses into the cyber risk management platform, and update risks</li><li>
Identify common controls and draft common control language for the cyber risk management platform</li><li>
Perform security maintenance duties, such as performing analyses of vulnerabilities and providing recommended resolutions</li><li>
Maintain awareness of system level changes, ensure proper patch levels, and upload cyclic scans to the appropriate repositories</li><li>
Achieve and maintain system accreditation, including providing guidance, plans, and evidence and maintaining documentation</li><li>
Perform regular reviews, such as audits, and review security test results</li><li>
Participate in or lead technical exchange meetings and application review boards and document action items and results</li><li>
Brief management on status</li></ul>
Required Qualifications<ul><li>
Active TS/SCI with Polygraph</li><li>
Prior experience with programs of similar size and complexity</li><li>
Experience with the Sponsor and the Sponsor&rsquo;s mission</li><li>
Bachelor's degree and 12+ years' experience. Additional experience in lieu of degree.</li><li>
Demonstrated work experience in cyber security or related IT field</li><li>
Demonstrated experience performing complex technical tasks with minimal direction</li><li>
Demonstrated experience designing, testing, or implementing IT security architecture</li><li>
Demonstrated experience performing network security analysis</li><li>
Demonstrated experience developing risk management methodologies</li><li>
Demonstrated experience analyzing test results to develop risk/threat mitigation plans</li><li>
Demonstrated experience communicating vulnerability results and risk posture to senior executives</li></ul>
Desired Qualifications<ul><li>
Certified Information Systems Security Professional (CISSP)</li><li>
Experience with the Sponsor&rsquo;s entitlement management programs</li><li>
PMP, SAFe Agilist Certification, AWS certification</li></ul>
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo &mdash; because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 &mdash; and moving faster than anyone else dares.<h2 class="jobSectionHeader">
Original Posting:</h2>
July 30, 2026 
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.<h2 class="jobSectionHeader"> 
Pay Range:</h2>
Pay Range $131,300.00 - $237,350.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
About Leidos
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.
Pay and Benefits
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.
Securing Your Data
Beware of fake employment opportunities using Leidos&rsquo; name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system &ndash; never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.</div>

Senior Cyber Security Engineer

Ascendion

<div><div>About Ascendion
Ascendion is a full-service digital engineering solutions company. We make and manage software platforms and products that power growth and deliver captivating experiences to consumers and employees. Our engineering, cloud, data, experience design, and talent solution capabilities accelerate transformation and impact for enterprise clients. Headquartered in New Jersey, our workforce of 6,000+ Ascenders delivers solutions from around the globe. Ascendion is built differently to engineer the next.
Ascendion | Engineering to elevate life
We have a culture built on opportunity, inclusion, and a spirit of partnership. Come, change the world with us:
<ul><li>Build the coolest tech for world&rsquo;s leading brands
</li><li>Solve complex problems &ndash; and learn new skills
</li><li>Experience the power of transforming digital engineering for Fortune 500 clients
</li><li>Master your craft with leading training programs and hands-on experience
</li></ul>Experience a community of change makers!
Join a culture of high-performing innovators with endless ideas and a passion for tech. Our culture is the fabric of our company, and it is what makes us unique and diverse. The way we share ideas, learning, experiences, successes, and joy allows everyone to be their best at Ascendion.
About the Role:
Hiring: Senior Software Engineer &ndash; Firmware Security / Compiler Engineering (C++ | LLVM | Fuzzing | AI)
Location: Hybrid (Redmond, WA)
Are you passionate about systems programming, firmware security, compiler technology, and AI-assisted security analysis ? We're hiring a Senior Software Engineer to help build a next-generation firmware security analysis platform within Azure Hardware Security .
This is a rare opportunity to work at the intersection of LLVM, C/C++, fuzzing, static analysis, and Large Language Models (LLMs) to automate vulnerability discovery across firmware at enterprise scale.
What You'll Do
<ul><li>Design and develop firmware security analysis pipelines using C/C++ , LLVM , and Python .
</li><li>Build compiler transformations and preprocessing pipelines that convert firmware into LLVM IR for automated analysis.
</li><li>Develop and enhance fuzzing frameworks to discover security vulnerabilities.
</li><li>Improve static analysis, crash triage, call graph generation, and AI-assisted vulnerability detection.
</li><li>Collaborate with compiler engineers, security researchers, and Azure platform teams.
</li><li>Contribute to CI/CD automation, testing, documentation, and open-source engineering initiatives.
</li></ul>Required Skills
<ul><li>7+ years of professional C/C++ systems programming experience.
</li><li>5+ years of LLVM / Compiler Engineering experience.
</li><li>3&ndash;5+ years working with security fuzzing tools such as libFuzzer, AFL, AFL++ , or similar.
</li><li>Strong understanding of software security, memory safety vulnerabilities, and root cause analysis.
</li><li>Python scripting and automation experience.
</li><li>Experience with Git-based development workflows.
</li></ul>Preferred Skills
<ul><li>Firmware or Embedded Systems development.
</li><li>CodeQL or other static analysis platforms.
</li><li>Hardware Abstraction Layer (HAL), MMIO, rehosting, or cross-compilation.
</li><li>AI/LLM integration into engineering workflows.
</li><li>Azure DevOps, GitHub, CI/CD pipelines.
</li><li>Open-source project contributions.
</li></ul>Why Join?
<ul><li>Work on a cutting-edge Azure Hardware Security initiative.
</li><li>Build AI-powered security tooling from the ground up.
</li><li>Collaborate with world-class compiler, firmware, and security experts.
</li><li>Opportunity to contribute to a future open-source platform with industry-wide impact.
</li></ul>Salary Range: The salary for this position is between $170,000 &ndash; $180,000 annually. Factors which may affect pay within this range may include geography/market, skills, education, experience and other qualifications of the successful candidate.
Benefits : The Company offers the following benefits for this position, subject to applicable eligibility requirements: [medical insurance] [dental insurance] [vision insurance] [401(k) retirement plan] [long-term disability insurance] [short-term disability insurance] [personal days accrued each calendar year. The Paid time off benefits meet the paid sick and safe time laws that pertains to the City/ State] [12-15 days of paid vacation time] [6-8 weeks of paid parental leave after a year of service] [9 paid holidays and 2 floating holidays per calendar year] [Ascendion Learning Management System] [Tuition Reimbursement Program]
 Want to change the world? Let us know.
Tell us about your experiences, education, and ambitions. Bring your knowledge, unique viewpoint, and creativity to the table. Let&rsquo;s talk!</div></div><div></div>
 <div><div><h4 class="jobSectionHeader">Preferred Skills
</h4><div><div>LLVM
<ul><li><div>Complier Engineering
</div></li><li><div>Libfuzzer
</div></li><li><div>AFL
</div></li><li><div>AFL++
</div></li><li><div>C++
</div></li></ul></div></div></div><div><h4 class="jobSectionHeader">Job details
</h4><div><div><h6 class="jobSectionHeader">Job ID
</h6>332719
</div><div><h6 class="jobSectionHeader">Job Requirements
</h6>Senior Firmware Security Engineer
</div><div><h6 class="jobSectionHeader">Location
</h6>Redmond, Washington, US
</div><div><h6 class="jobSectionHeader">Recruiter
</h6>Divya
</div><div><h6 class="jobSectionHeader">Email
</h6>divy.tandel@ascendion.com
</div></div></div><div><h4 class="jobSectionHeader">About Ascendion
</h4><div><h6 class="jobSectionHeader">Ascendion is a full-service digital engineering solutions company. We make and manage software platforms and products that power growth and deliver captivating experiences to consumers and employees.
</h6>Our engineering, cloud, data, experience design, and talent solution capabilities accelerate transformation and impact for enterprise clients. Headquartered in New Jersey, our workforce of 6,000+ Ascenders delivers solutions from around the globe. Ascendion is built differently to engineer the next.</div></div></div>

Senior Firmware Security Engineer

Vivos Holdings

<div>Position Overview
We are seeking a Senior Cybersecurity Engineer to provide hands‑on leadership for our corporate IT security environment, while also supporting cybersecurity efforts within our manufacturing (OT) environments.
This role is primarily focused on enterprise IT security, with additional responsibility for supporting OT security initiatives in partnership with Engineering and Automation teams. In addition to deep technical ownership, this role plays a key part in executing the cybersecurity roadmap, coordinating with external security partners, and advising IT leadership on security strategy and architecture decisions.
The ideal candidate is a technically strong, self‑directed security professional who enjoys owning security platforms end‑to‑end, improving detection and response capabilities, and working cross‑functionally to reduce cyber risk across both business and manufacturing systems.
Key Responsibilities
Corporate IT Security
<ul><li>Design, implement, and maintain enterprise cybersecurity controls across on‑premises, cloud, and hybrid environments.
</li><li>Own and administer security platforms including SIEM/MDR/XDR, Endpoint Detection &amp; Response (EDR), and Identity &amp; Access Management (MFA, PIM/PAM).
</li><li>Lead threat detection, alert tuning, threat hunting, and incident response activities.
</li><li>Secure and monitor Azure and Microsoft 365 environments.
</li><li>Investigate and remediate security incidents; provide on‑call support for cybersecurity events as needed.
</li><li>Generate security metrics and reports to support risk management, audits, and continuous improvement.
</li><li>Evaluate and recommend security tools and enhancements aligned with business and technology needs.
</li></ul>Manufacturing / OT Security Support
<ul><li>Support cybersecurity efforts in manufacturing and OT environments through applied security controls and monitoring.
</li><li>Assist with extending enterprise security visibility and detection into OT‑relevant systems where appropriate.
</li><li>Support secure remote access and vendor access controls for manufacturing support scenarios.
</li><li>Partner with Engineering, Automation, and Networking teams on OT security improvements such as segmentation and access controls.
</li><li>Participate in OT‑related incident response activities with emphasis on safety, uptime, and operational continuity.
</li></ul>Note: This role supports OT security through hands‑on security controls and partnership but is not a full‑time OT systems or controls engineering role.
Security Roadmap &amp; Leadership
<ul><li>Act as a project lead for key initiatives within the cybersecurity roadmap.
</li><li>Plan, execute, and track cybersecurity initiatives, communicating progress, risks, and outcomes to IT leadership.
</li><li>Partner with IT leadership to prioritize initiatives based on risk, business impact, and resource availability.
</li></ul>Architecture, Risk &amp; Compliance
<ul><li>Conduct security reviews, vulnerability assessments, and risk analyses.
</li><li>Support internal and customer‑driven security audits.
</li><li>Maintain and contribute to security policies, standards, and documentation aligned with frameworks such as NIST and ISO 27001.
</li><li>Research emerging threats and technologies to continuously improve security posture.
</li></ul>Collaboration &amp; Advisory Role
<ul><li>Partner closely with the Head of IT Infrastructure to oversee and coordinate external cybersecurity partners, including SOC, penetration testing providers, and managed service providers.
</li><li>Work directly with the CIO and IT Infrastructure leadership as a trusted advisor, contributing to cybersecurity strategy, architecture decisions, and long‑term planning.
</li><li>Communicate security risks, initiatives, and recommendations to both technical teams and executive leadership.
</li><li>Mentor team members and promote cybersecurity best practices across the organization.
</li><li>Support and contribute to enterprise security awareness initiatives.
</li></ul>Required
<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field (or equivalent experience).
</li><li>Senior‑level experience in cybersecurity engineering or security operations.
</li><li>Strong hands‑on experience with enterprise IT security technologies.
</li><li>Experience with SIEM, incident response, identity security, endpoint protection, and cloud security.
</li><li>Ability to work independently, manage multiple priorities, and communicate effectively with both technical and non‑technical stakeholders.
</li></ul>Preferred
<ul><li>Exposure to manufacturing or OT environments.
</li><li>Familiarity with ICS/SCADA concepts.
</li><li>Security certifications such as CISSP, CISM, GIAC/GICSP, Security+, or Microsoft Security certifications.
</li><li>Experience supporting audits and writing security policies or standards.
</li></ul>Why Join Us
<ul><li>Opportunity to own and shape enterprise cybersecurity in a manufacturing environment
</li><li>Blend of hands‑on technical work and strategic influence
</li><li>Direct exposure to IT leadership and executive decision‑making
</li><li>Ability to drive meaningful improvements across IT and manufacturing security
</li></ul>Travel
<ul><li>Limited; occasional travel to manufacturing facilities as needed.</li></ul></div>

SR CYBERSECURITY ENGINEER

SoFi

<div><div>Employee Applicant Privacy Notice

Who we are:
<div>
Shape a brighter financial future with us.

Together with our members, we're changing the way people think about and interact with personal finance.

We're a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we're at the forefront. We're proud to come to work every day knowing that what we do has a direct impact on people's lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.
</div></div>
The role 
We are seeking a Staff Vulnerability Management Engineer to lead the most complex technical work in SoFi's Vulnerability Management program. You will design and build scalable systems that identify, enrich, prioritize, route, and track vulnerabilities across applications, cloud and infrastructure, containers, software supply chains, and specialized hardware or firmware surfaces. This is a hands-on engineering role with broad technical influence: you will write production code, make architecture decisions, establish vulnerability management standards, and improve how teams understand and reduce vulnerability risk. 
You will partner with Engineering, Infrastructure, SRE, Compliance, Legal, and business stakeholders to accelerate remediation while protecting engineering velocity and customer trust. You will also serve as a senior technical responder for embargoed disclosures and zero-day events, lead root-cause analysis for high-impact vulnerability incidents, and mentor engineers. The ideal candidate combines deep vulnerability management expertise with strong software engineering judgment, systems thinking, and a bias for durable, measurable outcomes. 

What you'll do
<ul>
<li> Lead high-complexity vulnerability management initiatives and make architecture decisions for assigned program areas, from detection and assessment through ticket routing, remediation, exception handling, and closure validation.</li>
<li>Design, build, and productionize scalable triage and prioritization automation, including scanner and asset integrations, enrichment pipelines, decision logic, deduplication, ownership resolution, service-level tracking, observability, and failure recovery.</li>
<li>Develop risk-based prioritization models that combine CVSS, EPSS, CISA Known Exploited Vulnerabilities, threat intelligence, asset criticality, exposure, compensating controls, business context, and compliance obligations.</li>
<li>Engineer and improve vulnerability workflows across application security, cloud and infrastructure, containers and Kubernetes, open-source dependencies, secrets, software supply chain, and hardware-adjacent surfaces such as GPU, DPU/BlueField, BMC, and firmware.</li>
<li>Own or materially advance software supply chain capabilities, including SBOM inventory, dependency visibility, SLSA-aligned controls, and integration of SAST, SCA, secret scanning, and container scanning into CI/CD.</li>
<li>Act as a senior technical responder for critical vulnerabilities, embargoed disclosures, and zero-day events; coordinate technical assessment, containment, mitigation, patch deployment, validation, and executive communication with service owners and incident response teams.</li>
<li>Partner directly with development and platform teams to define practical remediation paths and, when appropriate, review or contribute secure changes in Python, Go, JavaScript/TypeScript, or infrastructure code.</li>
<li>Define technical standards for vulnerability severity, remediation service levels, exceptions, evidence, and closure criteria; ensure workflows support audit-ready reporting for applicable regulatory and compliance frameworks.</li>
<li>Produce actionable metrics, dashboards, and risk insights for technical and executive audiences, with clear accountability, trend analysis, compliance posture, and execution risks.</li>
<li>Lead root-cause analysis for high-impact vulnerability incidents and convert lessons learned into durable improvements to tooling, architecture, controls, and operating practices.</li>
<li>Evaluate and responsibly apply AI/ML and LLM-assisted techniques to security triage and decision support, with human-in-the-loop validation, measurable quality controls, and safe failure modes.</li>
<li>Build AI-assisted remediation workflows that partner with engineering teams to proactively identify, validate, and apply security patches, with appropriate testing, human oversight, rollback mechanisms, and measurable risk reduction.</li>
<li>Communicate complex security tradeoffs and program risks clearly to stakeholders across Engineering, Product, Operations, Legal, Compliance, and executive leadership.</li></ul> 
 
What you'll need
<ul>
<li>Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related field, or equivalent practical experience.</li>
<li>Deep expertise in vulnerability management, security engineering, and modern infrastructure, including cloud, containers, and distributed systems.</li>
<li>Strong programming or scripting skills in Python, Go, Java, or similar languages, with experience building automation at scale.</li>
<li>Deep knowledge of vulnerability management methods and standards, including CVSS, EPSS, CISA KEV, threat intelligence integration, asset and exposure context, remediation SLAs, exception governance, and risk-based prioritization.</li>
<li>Hands-on experience with modern vulnerability and application security tooling such as Wiz, Semgrep, Snyk, Socket, Rapid7, Tenable, Checkmarx, or equivalent platforms, plus experience tuning SAST, SCA, secret scanning, container, or cloud findings.</li>
<li>Experience designing end-to-end workflows that integrate scanners, asset inventories or CMDBs, ticketing systems, CI/CD platforms, data stores, dashboards, and alerting systems.</li>
<li>Working knowledge of cloud-native and software supply chain environments, including AWS, GCP, or Azure; Kubernetes and containers; build systems and package managers; SBOMs; and Infrastructure as Code.</li>
<li>Demonstrated ability to lead cross-functional technical initiatives, influence without direct authority, make sound decisions amid ambiguity, and drive work from concept through production operation and measurable outcomes.</li>
<li>Experience mentoring senior and developing engineers and raising engineering quality through design reviews, code reviews, standards, and incident leadership.</li>
<li>Strong written and verbal communication, business judgment, and the ability to explain how security choices affect engineering velocity, regulatory obligations, customer trust, and business risk.</li></ul> 
 
Nice to have
<ul>
<li>Experience managing security partnerships with hardware or software vendors, including embargoed disclosures, coordinated vulnerability disclosure, and pre-release remediation collaboration.</li>
<li>Production experience with security orchestration platforms such as Tines and serverless frameworks such as AWS Lambda or Google Cloud Functions.</li>
<li>Experience scaling vulnerability management in a high-growth, cloud-native environment or operating within FedRAMP, PCI DSS, SOC 2, ISO 27001, NIST, or comparable regulated environments.</li>
</ul><div><div>Compensation and Benefits</div>
<div>The base pay range for this role is listed below. Final base pay offer will be determined based on individual factors such as the candidate's experience, skills, and location.</div>
<div></div>
<div>To view all of our comprehensive and competitive benefits, visit our Benefits at SoFi page!</div>
<h5 class="jobSectionHeader">SoFi provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion (including religious dress and grooming practices), sex (including pregnancy, childbirth and related medical conditions, breastfeeding, and conditions related to breastfeeding), gender, gender identity, gender expression, national origin, ancestry, age (40 or over), physical or medical disability, medical condition, marital status, registered domestic partner status, sexual orientation, genetic information, military and/or veteran status, or any other basis prohibited by applicable state or federal law.</h5>
<h5 class="jobSectionHeader">The Company hires the best qualified candidate for the job, without regard to protected characteristics.</h5>
<h5 class="jobSectionHeader">Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.</h5>
<h5 class="jobSectionHeader">New York applicants: Notice of Employee Rights</h5>
<h5 class="jobSectionHeader">SoFi is committed to an inclusive culture. As part of this commitment, SoFi offers reasonable accommodations to candidates with physical or mental disabilities. If you need accommodations to participate in the job application or interview process, please let your recruiter know or email accommodations@sofi.com.</h5>
<h5 class="jobSectionHeader">Due to insurance coverage issues, we are unable to accommodate remote work from Hawaii or Alaska at this time.</h5>
<div>Internal Employees</div>
<div>If you are a current employee, do not apply here - please navigate to our Internal Job Board in Greenhouse to apply to our open roles.</div></div></div>

Staff Vulnerability Management Engineer

Torus Inc

<div><h4 class="jobSectionHeader">About Torus</h4>
Torus is headquartered in Utah and is expanding manufacturing at our 545,000-square-foot facility in Salt Lake City called GigaOne. We are the world&rsquo;s first mesh energy infrastructure, uniting communities through resilient, sustainable, and intelligent power. We design, engineer, manufacture, install, and support our systems end-to-end, standing behind them throughout their lifecycle. Torus systems help reduce costs, lower emissions, and protect facilities from outages, while strengthening the security and reliability of the broader utility grid. Torus is committed to American manufacturing, engineering excellence, and building energy systems that last. 
Torus has raised over $267 million from investors like Magnetar, Mercado, ICONIQ and Origin Ventures. The investments are helping to accelerate deployment of modular power plants across utilities, data centers, and industrial sectors. This investor confidence reflects the strength of our team, technology as well as the scale of the problem we are solving. 
At Torus, you will be part of something larger than a single product or technology. Your work will help build energy infrastructure that supports and strengthens our electrical grid, critical systems, industry, and communities for decades to come. We value accountability, collaboration, and clear thinking. We are looking for people who want to solve hard problems and build things that matter.<h4 class="jobSectionHeader"> 
About the Role</h4>
Torus is building the world's first mesh energy infrastructure and that infrastructure is only as resilient as the systems and people behind it. The Principal IT Security Engineer is Torus's senior hands-on technical leader across IT infrastructure and security, spanning identity and access management, endpoint security, network architecture, and compliance. The security posture you build directly protects the systems Torus designs, manufactures, and stands behind for the long haul. This role reports to the Director of IT to set technical direction, stays deeply hands-on in the tools and systems that keep Torus secure, and mentors other engineers to raise the bar across the team.<h4 class="jobSectionHeader">
Who You Are</h4><ul><li>
You take full ownership and bring others along. At the principal level, you don't just execute. You help set technical direction, mentor other engineers, and raise the bar for how the team works.</li><li>
You seek context before conclusions. You ask questions and understand the full picture before troubleshooting, recommending, or reacting.</li><li>
You lead with the answer, then bring the data. You communicate clearly and directly, keeping things simple enough for any audience to act on.</li><li>
You hold speed and quality to the same standard. You move fast without cutting corners that create rework or risk down the line.</li><li>
You think in systems, not just tickets. You see how Information Technology, Security, and Operational Technology connect, and how your work affects the people who depend on them.</li><li>
You build trust through transparency. You document clearly, communicate proactively, and assume positive intent when things go wrong.</li></ul><h4 class="jobSectionHeader">
Responsibilities</h4><ul><li>
Own and evolve Torus's core IAM, MDM, AV, &amp; Network architecture.</li><li>
Lead endpoint detection and response strategy and day-to-day operations, including policy tuning, device control, and incident response.</li><li>
Drive maturity of the vulnerability management program, including remediation prioritization, reporting, and coverage across IT and OT assets.</li><li>
Architect and maintain secure network infrastructure supporting both IT and OT environments.</li><li>
Build and maintain automation for security and IT operations to reduce manual toil across the team.</li><li>
Serve as an escalation point for complex incidents, outages, and security events, coordinating cross-functional response.</li><li>
Mentor and provide technical guidance to other IT and Security engineers, raising the bar for engineering practices across the team.</li><li>
Evaluate and recommend new tools, architecture changes, and process improvements to strengthen Torus's overall security posture.</li><li>
Other duties and projects as assigned.</li></ul><h4 class="jobSectionHeader">
Required Experience</h4><ul><li>
8+ years proven experience in IT infrastructure, security engineering, or a related technical discipline, with demonstrated depth across multiple domains.</li><li>
Direct, hands-on expertise implementing identity and access management platforms, policies, and processes.</li><li>
8+ years experience in IR and specific experience as an incident handler and overseeing post mortems.</li><li>
Strong background in vulnerability management and network security fundamentals.</li><li>
Experience supporting SOC 2 or similar compliance frameworks.</li><li>
Familiarity with security tooling and proven ability to build automation to support security and IT operations.</li><li>
Excellent communication skills and experience mentoring other engineers.</li><li>
Comfortable working with AI-assisted development tools to accelerate delivery and operate independently</li><li>
A self-starter who identifies what needs to be done and executed without waiting to be directed</li><li>
Clear communicator with the ability to convey risk and recommendation to any audience.</li><li>
Excellent communication skills and experience mentoring other engineers.</li></ul><h4 class="jobSectionHeader">
Preferred Experience</h4><ul><li>
Bachelor's degree in Computer Science, Information Security, or related field</li><li>
Experience in regulated or security-sensitive industries</li><li>
Familiarity with OT/IT convergence and industrial network security (e.g., NIST SP 800-82).</li><li>
Experience with physical access control systems</li><li>
Relevant certifications (e.g., CISSP, OSCP, Security+).</li><li>
Experience with designing and implementing MCP servers.</li></ul><h4 class="jobSectionHeader">
Additional Details</h4>
Background Check All candidates are subject to a background check.
Compensation $150,000 - 180,000 (Note: We have the flexibility to hire at different levels, which may impact the corresponding pay range.) 
Location + Travel The role is hybrid remote based in Salt Lake City. The Engineer will be expected to travel to Torus locations located in Salt Lake and Utah counties as needed. 
Schedule Full-Time, Salaried
Physical Requirements<ul><li>
Ability to sit or stand at a workstation and use a computer for extended periods of time.</li><li>
Ability to safely lift and move IT equipment weighing up to 30 lbs.</li><li>
Ability to read, identify, and recognize details on technical documentation, network diagrams, and system dashboards.</li><li>
Ability to occasionally work outside standard business hours to support incident response or on-call needs.</li><li>
Ability to communicate information so others can understand. Must be able to exchange accurate information in these situations.</li><li>
Must report to work reliably and with the ability to use full and unimpaired skills and judgment to safely execute your job.</li><li>
Proficiency in reading, writing, and speaking English required.</li></ul><h4 class="jobSectionHeader">
Our Perks &amp; Benefits</h4>
Benefits eligibility is based on employment status.
Financial<ul><li>
Employee Rewards Package including equity</li><li>
401(k) Retirement Savings Plan</li><li>
Torus paid life and AD&amp;D Insurance with options to purchase additional coverage</li><li>
Voluntary short- and long-term disability insurance</li></ul>
Health &amp; Wellness<ul><li>
Health Benefits Package: Choice between traditional PPO or HSA-eligible medical plans with Torus covering 50% of medical premiums; Dental insurance; and Vision insurance</li><li>
Plan participants have access to telehealth services, mental health support and coaching, and exclusive discounts on brands, dining, entertainment, and more.</li></ul>
Time Off<ul><li>
Unlimited discretionary PTO or 10 days annual PTO</li><li>
10 paid company holidays</li><li>
Waiting period-free 100% paid parental leave</li></ul>
Culture &amp; Community<ul><li>
Regular company-wide offsites to showcase our progress and learnings. A time to step back, think strategically, and work on the business together.</li><li>
Team members receive Torus branded gear</li><li>
Peer Recognition Program</li><li>
Fully stocked break rooms with free snacks and drinks. Because great work deserves great fuel.</li></ul> 
Torus is proud to be an Equal Opportunity Employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status. 
#li-lw</div>

Principal IT Security Engineer

Booz Allen Hamilton

<div>The Opportunity:
Are you looking for an opportunity to share your experience in information system security engineering to safeguard national security systems? As a systems security &amp; network security engineer, you can identify what is needed to assess vulnerabilities and recommend the best solution and security strategy. We need your experience to help lead the development and implementation of security solutions and policies that will help safeguard national security systems.
On our team, you&rsquo;ll troubleshoot and analyze complex challenges for customers using your knowledge of system security engineering principles. You&rsquo;ll use your curiosity for technology and market trends to further research and develop security solutions. Using your knowledge and experience in system security engineering principles, you&rsquo;ll help our client enterprise organization help their enterprise customers in assessing security threats and implementing infrastructure controls.
In this role, you&rsquo;ll closely impact how a client's enterprise information security organization manages information security compliance to safeguard national security systems. Specifically, you will support the CISO organization in managing the compliance of a cryptographic inventory program. With mentoring, challenging hands-on problem-solving, and opportunities to learn new tools and skills, we focus on growing as a team to make the best solutions for our customers.
Work with us as we secure and protect our client's critical mission area for the better.
What You&rsquo;ll Work On:
<ul><li>Manage the enterprise security compliance of cryptographic inventory, e nga ging internal and external stakeholders to capture compliance status or met rics and generating status reports to senior enterprise leadership.
</li><li>Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.
</li><li>Implement infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
</li></ul>Join us. The world can&rsquo;t wait.
You Have:
<ul><li>6+ years of experience in system security engineering principles, including assessment of overall security posture of U.S. government computer networks
</li><li>5+ years of experience conducting and coordinating COMSEC, INFOSEC, or IA activities
</li><li>Experience with requirements gathering and analysis and client and stakeholder e nga gement through working groups and technical exchange meetings
</li><li>Knowledge of system or security architecture
</li><li>Ability to work both individually and in a team environment in an enterprise-level organization
</li><li>TS/SCI clearance with a polygraph
</li><li>HS diploma or GED
</li></ul>Nice If You Have:
<ul><li>Experience with systems engineering
</li><li>Knowledge of the Risk Management Framework ( RMF ) process and NIST 800-53 security controls
</li><li>Knowledge of a national agency&rsquo;s corporate systems and their implementation of security controls
</li><li>Knowledge of 800-53 security controls and how to apply them to a system
</li><li>Ability to assess residual risk based on threat and security control implementation
</li><li>Possession of excellent verbal and written communication skills
</li><li>Bachelor's degree in a technical field
</li></ul>Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information ; TS/SCI clearance with polygraph is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Candidate AI Usage Policy
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided .
Work Model
 
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.
<ul><li>Remote : If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
</li><li>Hybrid : If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.
</li><li>Onsite : If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.
</li></ul>Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

System Security Engineer, Senior

Search 10000+ Senior information security engineer jobs near you this August. New roles added regularly across leading industries. Apply today.