senior security engineer

Handshake

<div><h1 class="jobSectionHeader"><b>About Handshake</b></h1><p>
Handshake is the career network for the AI economy. 20 million knowledge workers, 1,600 educational institutions, 1 million employers (including 100% of the Fortune 50), and every foundational AI lab trust Handshake to power career discovery, hiring, and upskilling, from freelance AI training gigs to first internships to full-time careers and beyond. This unique value is leading to unparalleled growth; in 2025, we tripled our ARR at scale.</p><p>
Why join Handshake now:</p><ul><li><p>
Shape how every career evolves in the AI economy, at global scale, with impact your friends, family and peers can see and feel</p></li><li><p>
Work hand-in-hand with world-class AI labs, Fortune 500 partners and the world&rsquo;s top educational institutions</p></li><li><p>
Join a team with leadership from Scale AI, Meta, xAI, Notion, Coinbase, and Palantir, among others</p></li><li><p>
Build a massive, fast-growing business with billions in revenue</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
About the Role</b></h2><p>
Handshake is seeking a <b>Senior Security Engineer</b> to own the architecture, design, and implementation of our enterprise identity automation and governance ecosystem. You&rsquo;ll define the long-term IAM automation strategy, build resilient and scalable lifecycle workflows, and enable secure-by-default identity operations across SaaS, cloud, and internal platforms.<br>
You&rsquo;ll partner closely with Security, IT Engineering, People Operations, and Product/Platform Engineering to deliver highly automated, auditable, and reliable identity solutions.</p><p></p><h2 class="jobSectionHeader"><b>
In this role, you will:</b></h2><ul><li><p>
Architect, build, and own automated onboarding, offboarding, and access-change workflows across Okta, Workday, SCIM, and event-driven systems.</p></li><li><p>
Engineer integration layers between identity platforms and internal applications using Python, REST APIs, Webhooks, and Terraform.</p></li><li><p>
Implement error-handling, reconciliation logic, telemetry, and monitoring to ensure reliability and determinism in identity lifecycle events.</p></li><li><p>
Modernize existing provisioning logic and replace manual processes with scalable automation frameworks.</p></li><li><p>
Develop tooling and pipelines enabling version-controlled, testable, observable IAM automation.</p></li><li><p>
Act as a technical owner for Handshake&rsquo;s IAM ecosystem, including Okta, Google Workspace, GCP, AWS IAM, and internal access systems.</p></li><li><p>
Engineer and optimize authentication &amp; authorization protocols (OIDC, OAuth2, SAML, JWT), fine-grained access policies, and scalable RBAC/ABAC models.</p></li><li><p>
Build custom automation using Okta Workflows or API-driven orchestration.</p></li><li><p>
Design SOC2-compliant access controls, approvals, attestations, and auditability mechanisms.</p></li><li><p>
Build automated access certification systems with full data lineage.</p></li><li><p>
Conduct identity-related incident forensics and implement preventative automation.</p></li><li><p>
Provide cross-functional leadership, setting standards, best practices, and reference architectures for identity automation.</p></li><li><p>
Serve as service owner for IAM automation platforms with accountability for uptime, consistency, and continuous improvement.</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
Desired Capabilities</b></h2><ul><li><p>
4&ndash;7+ years of hands-on IAM engineering, identity automation, or identity governance experience.</p></li><li><p>
Strong scripting/automation skills in Python, Node.js, and REST-based integrations.</p></li><li><p>
Experience with IAM platforms such as Okta, Google Workspace/GCP, Azure AD, or similar.</p></li><li><p>
Deep understanding of identity protocols, token flows, SCIM, and distributed lifecycle orchestration.</p></li><li><p>
Experience with Terraform or other infrastructure-as-code frameworks.</p></li><li><p>
Ability to diagnose complex identity issues across SaaS, cloud, and distributed systems.</p></li><li><p>
Strong understanding of DevOps practices, observability, and secure engineering principles.</p></li><li><p>
Demonstrated ownership mindset across architecture, implementation, monitoring, and iterative improvement.</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
Extra Credit</b></h2><ul><li><p>
Advanced experience with GCP IAM, Google Workspace IAM, AWS IAM, cross-account access patterns, and policy automation.</p></li><li><p>
Experience with Okta Workflows, SailPoint/IGA, or Privileged Access Management (PAM) solutions.</p></li><li><p>
Experience designing scalable authorization models for high-growth or distributed organizations.</p></li><li><p>
Certifications such as Okta Architect, Azure Identity Engineer, CISSP.</p></li><li><p>
Prior experience in SaaS, high-growth, or distributed engineering environments.</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
Perks</b></h2><p>
Handshake delivers benefits that help you feel supported&mdash;and thrive at work and in life.<br>
The below benefits are for full-time US employees.</p><p>
<b>Ownership:</b> Equity in a fast-growing company<br>
<b>Financial Wellness:</b> 401(k) match, competitive compensation, financial coaching<br>
<b>Family Support:</b> Paid parental leave, fertility benefits, parental coaching<br>
<b>Wellbeing:</b> Medical, dental, and vision, mental health support, wellness stipend<br>
<b>Growth:</b> Learning stipend, ongoing development<br>
<b>Remote &amp; Office:</b> Internet, commuting, and free lunch/gym in our SF office<br>
<b>Time Off:</b> Flexible PTO, 15 holidays + 2 flex days<br>
<b>Connection:</b> Team outings &amp; referral bonuses</p><p>
Explore our mission, values, and comprehensive US benefits at <b>joinhandshake.com/careers</b>.</p><p>
Compensation Range: $176K - $220K</p></div>

Senior Security Engineer

Contour Software

<div><p><b>About Contour</b></p><p></p><p>
Contour Software has grown from a dozen people to over 2,000 staff across 3 cities, in less than 14 years.</p><p><br>
As a subsidiary of Constellation Software Inc., we are proud to be part of a global enterprise software conglomerate that has grown to become one of the top 10 software companies in the world, with employees and customers in 100+ countries. With a broad-based and ever-growing portfolio of market-leading, vertical-market enterprise solutions covering more than 100 industry domains in predominantly mature markets, CSI's recipe creates the perfect environment for professionals to build fulfilling, long-term careers.</p><p><br>
What started as an R&amp;D &amp; Accounting back-office, has progressed into a full-service Global Centre serving all functions and departments, at the divisional as well as operating group/corporate level. Today Contour employees, located in Karachi, Lahore &amp; Islamabad, are serving CSI divisions located in time zones spanning the globe, from Sydney to Vancouver. With the global growth of Constellation as the wind in our sails, we are only just getting started!</p><p></p><div><div><p><b>
About the Role</b></p></div><div><p>
We are looking for a skilled and motivated Security Engineer to join our team. In this role, you will be a key point of contact for IT administration and security operations across the business, helping to ensure our systems, tools, and people are well-supported, secure, and aligned with industry best practices. You will work closely with internal teams to deliver hands-on technical support, drive security initiatives, and contribute to a culture of IT and security awareness.</p></div><p></p><div><p><b><br>
Key Responsibilities</b></p></div><div><p><b>
Core Duties</b></p></div><div><ul><li><p>
Configure, manage, and maintain security and IT tooling, ensuring platforms are optimally set up and kept up to date.</p></li></ul></div><div><ul><li><p>
Develop and deliver training and guidance to internal teams on IT and security tools, helping to build organisation-wide capability and awareness.</p></li></ul></div><div><ul><li><p>
Provide day-to-day IT administration support across the business, ensuring systems and services run efficiently and reliably.</p></li></ul></div><div><ul><li><p>
Implement and champion best-practice IT and security approaches, contributing to the continuous improvement of our security posture.</p></li></ul></div><div><p><b>
Secondary Responsibilities</b></p></div><div><ul><li><p>
Provide timely incident support and escalation, triaging IT and security issues and coordinating resolution with the appropriate teams.</p></li></ul></div><div><ul><li><p>
Escalate IT issues internally in a clear and structured manner, ensuring the right stakeholders are engaged at the right time.</p></li></ul></div><div><ul><li><p>
Support internal and external compliance auditing activities, helping to prepare evidence, documentation, and responses as required.</p></li></ul></div><div><ul><li><p>
Contribute to reporting requirements, producing clear and accurate data on IT and security activities, incidents, and performance metrics.</p></li></ul></div><div><ul><li><p>
Collaborate with business units to support and advance their IT and security initiatives, acting as a trusted technical partner.</p></li></ul></div><p></p><div><p><b><br>
Essential Skills &amp; Experience</b></p></div><div><ul><li><p><b>
CrowdStrike</b><b> </b><b>-</b><b> </b>Deep, hands-on experience with</p></li></ul></div></div><div><div><ul><li><p>
Endpoint Detection &amp; Response (EDR / Falcon Prevent + Insight)</p></li></ul></div><div><ul><li><p>
Vulnerability Management (Falcon Spotlight)</p></li></ul></div><div><ul><li><p>
Exposure Management</p></li></ul></div><div><ul><li><p>
Cloud Security Posture Management (Falcon Horizon / CSPM)</p></li></ul></div><div><ul><li><p>
Ability to configure, manage, integrate, and troubleshoot the full platform - not just administer it</p></li></ul></div><div><ul><li><p><b>
Cloudflare</b><b> </b><b>-</b><b> </b>Proven, hands-on experience with</p></li></ul></div><div><ul><li><p>
Administration, configuration, and integration experience</p></li></ul></div><div><ul><li><p>
Able to architect and troubleshoot beyond basic setup</p></li></ul></div><div><ul><li><p>
Proven experience developing and delivering training programmes on security tools and practices to both technical and non-technical audiences.</p></li></ul></div><div><ul><li><p>
One or more professional IT or security certifications (e.g. CompTIA Security+, CISSP, CEH, CISM, or equivalent).</p></li></ul></div><div><ul><li><p>
Strong communication skills, with the ability to explain technical concepts clearly to a range of stakeholders.</p></li></ul></div><div><ul><li><p>
A proactive, problem-solving mindset with a keen eye for detail and a commitment to continuous improvement.</p></li></ul></div><p></p><div><p><b><br>
Desirable Skills &amp; Experience</b></p></div><div><ul><li><p>
CrowdStrike certification (e.g. CCFA, CCFH, CCSE or equivalent CrowdStrike-issued credential) &mdash; strongly advantageous.</p></li></ul></div><div><ul><li><p>
Experience administering <b>Microsoft 365</b>, including user management, security configurations, and productivity tooling.</p></li></ul></div><div><ul><li><p>
A bachelor's or master's degree in Information Technology, Networking, Cyber Security, or a related discipline.</p></li></ul></div><div><ul><li><p>
Familiarity with compliance frameworks such as ISO 27001, SOC 2, NIST, or similar.</p></li></ul></div><p></p><div><p><b><br>
What We Offer</b></p></div></div><div><div><ul><li><p>
A collaborative and supportive team environment.</p></li></ul></div><div><ul><li><p>
Opportunities for professional development and certification support.</p></li></ul></div><div><ul><li><p>
The chance to make a meaningful impact on IT and security across a growing organisation.</p></li></ul></div></div><p><b>
Exciting Benefits we offer:</b></p><ul><li><p>
Market-leading Salary</p></li><li><p>
Medical Coverage &ndash; Self &amp; Dependents</p></li><li><p>
Parents Medical Coverage</p></li><li><p>
Provident Fund</p></li><li><p>
Employee Performance-based bonuses</p></li><li><p>
Home Internet Subsidy</p></li><li><p>
Conveyance Allowance</p></li><li><p>
Profit Sharing Plan [Tenured Employees Only]</p></li><li><p>
Life Benefit</p></li><li><p>
Child Care Facility</p></li><li><p>
Company Provided Lunch/Dinner</p></li><li><p>
Professional Development Budget</p></li><li><p>
Recreational area for in-house games</p></li><li><p>
Sporadic On-shore training opportunities</p></li><li><p>
Friendly work environment</p></li><li><p>
Leave Encashment</p></li></ul><p></p><p><b><i>
Disclaimer:</i></b><i> At Contour, we attribute our success to the unique contributions of our diverse staff. We&rsquo;re committed to fostering a culture of respect that thrives on the varied perspectives and experiences of all individuals we recruit, employ, promote, and compensate. Since day one, we&rsquo;ve adhered to a policy that champions a work environment honoring the worth and dignity of each person while being free from all forms of employment discrimination.</i></p><p></p><p><i>
In our continuous effort to promote inclusivity, we extend our commitment to individuals with special needs by providing reasonable accommodations. We actively encourage qualified individuals with special needs to apply for the various openings within our company. Should you require assistance in completing the application process or have any inquiries regarding special facilities, please do not hesitate to contact our HR team. Your unique talents and abilities are welcomed and valued here.</i></p></div><p></p>

help AG

<div><p>Help AG is looking for a highly skilled OT Senior Security Engineer who will be responsible for the support, administration, and ongoing maintenance of cybersecurity systems and controls within the Operational Technology (OT) environment. This includes securing OT and OT-IT integration infrastructure in accordance with cybersecurity policies, standards, and guidelines.</p><p>
This role ensures the availability, integrity, and security of OT/ICS systems across the critical infrastructure, with a key focus across three core areas:</p><ul><li>Operate and Maintain (OM)</li><li>Protect and Defend (PR)</li><li>Securely Provision (SP)</li></ul><p></p><p><b><br>
Responsibilities</b></p><p></p><ul><li>
Provides the support, administration, and maintenance necessary to ensure effective and efficiency of OT/ICS Cybersecurity systems performance and availability.</li><li>
Perform asset management/inventory of OT cybersecurity resources and it is supported infrastructure resources.</li><li>
Perform system administration on specialized cyber defence tools and supported infrastructure for OT/ICS environment (e.g., antivirus, application whitelisting, firewalls, IPS/IDS, Data Diodes, secure file</li><li>
transfer, passive security monitoring) to include installation, configuration, maintenance, backup, and restoration as per operational procedures.</li><li>
Administer accounts, network rights, and access to OT/ICS Cybersecurity systems and equipment.</li><li>
Adhere to company OT cybersecurity metrics and OT Cybersecurity KPIs.</li><li>
Maintain security baseline configuration for OT/ICS Cybersecurity Systems and supported infrastructure according to organizational policies and operational standards.</li><li>
Assist and support OT/ICS systems custodians to apply the applicable security baseline configuration on OT/ICS systems.</li><li>
Identifies, analyses, and mitigates cybersecurity threats to Operation Technology (OT) systems and/or networks.</li><li>
Uses defensive measures and information collected from defence tools (e.g., IDS alerts, SIEM alerts, firewalls, network traffic logs) to identify, analyze, and report events that occur or might occur within the network and participate in preparing a standard remedial plan of actions to protect OT systems, and networks from threats.</li><li>
Implement system security measures to resolve vulnerabilities, mitigate risks and recommend security changes in accordance with established procedures and standards to ensure production continuity, resilience, and safety of OT/ICS Systems.</li><li>
Examine network topologies to understand data flows through OT/ICS network and interfaces between OT/ICS networks and systems.</li><li>
Work with stakeholders to resolve computer security incidents and vulnerability compliance within</li><li>
OT/ICS networks.</li><li>
Coordinate with OT systems custodians to assure collecting of information security data sources from OT systems and networks for Cybersecurity monitoring.</li><li>
Monitor external data sources (e.g., cyber defence vendor sites, Computer Emergency Response Teams, Security Focus. Etc) to maintain currency of OT/ICS cyber defence threat condition and determine which security issues may have an impact on the OT/ICS systems.</li><li>
Apply signatures/IOCs on cyber defence network tools in response to new or observed threats from advisories within the applicable OT/ICS network environment or enclave.</li><li>
Support OT/ICS projects life cycle from Cybersecurity perspective by defining OT Cybersecurity requirements - part of Design General Specification (DGS), Front End Engineering Design (FEED), Functional Design Specification (FDS), Detailed Design Specification (DDS) during EPC phase, Cyber Security Factory Acceptance Test (FAT), Cyber Security Site Acceptance Test (SAT), Site Integration Test (SIT), etc..</li><li>
Ensures that the stakeholder security requirements necessary to protect the organization&rsquo;s mission and operation processes in OT/ICS are adequately addressed in all aspects of architecture including reference models, segment and solution architectures, and the resulting systems supporting those missions and operational processes.</li><li>
Participate in design system security controls and measures in accordance with established procedures and standards to ensure Safety, integrity, availability, confidentiality, authentication, non-repudiation of OT/ICS Systems along with internal and external stakeholders.</li><li>
Technical lead for implementation and assessment of OT cybersecurity solutions to meet organizational requirement.</li></ul><p><b>
Qualifications &amp; Skills</b></p><br>
<p></p><ul><li>
Bachelor&rsquo;s degree in Computer Science (IT), Computer engineering, Electronics Engineering, Automation Engineering, or a related technical field.</li><li>
5-7 years of experience in IT Security systems with minimum 3 years in administrating and engineering Systems Security in OT/ICS environment with in-depth technical and business knowledge, spanning a range of system security hardware, software products and solutions.</li><li>
Or equivalent experience in OT process automation systems with minimum 3 years in operating, maintaining, or engineering in Industrial environment within Oil &amp; Gas sector and 3 years in administrating and engineering Systems Security in OT/ICS environment with in-depth technical and business knowledge, spanning a range of system security hardware, software products and solutions.</li><li>
Exposure to industrial operations and production technologies covering Industrial Control Systems, SCADA/DCS systems (Yokogawa) and related cyber security technologies in the energy sector.</li><li>
Understand and troubleshoot fault areas in industrial automation and communication systems.</li><li>
Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).</li><li>
Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version [ITIL]).</li><li>
Knowledge of computer networking concepts and protocols, and network security methodologies.</li><li>
Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth, demilitarized zones, network segmentation).</li><li>
Knowledge of the rage of existing OT systems (e.g., DCS, SCADA, PLC, Instruments) HW.</li><li>
Knowledge of Industrial network topologies, network redundancy protocols and industrial wireless technologies (e.g., FTE, ISA100 &amp; Wireless HART)</li><li>
Knowledge of industrial application protocols and measures to secure them (e.g., OPC, Modbus, PROFINet, Vnet/IP, Ethernet/IP, DNP3 and fieldbus protocols)</li><li>
Knowledge of system administration, network, operating system and virtualization hardening techniques.</li><li>
Skill in assessing security controls based on cybersecurity principles and tenets. (e.g., IEC62443, CIS CSC, NIST SP 800-53).</li><li>
Skill in configuring and utilizing network protection components (e.g., Firewalls, network intrusion detection systems, Data Diodes).</li><li>
Skill in configuring and utilizing software-based computer protection tools (e.g., host firewalls, antivirus, application whitelisting).</li><li>
Skill in conducting maintenance for OT/ICS Cybersecurity system and supported infrastructure.</li><li>
Skill in identifying and anticipating system/server performance, availability, capacity, or configuration problems.</li><li>
Mandatory vendor-neutral professional certification:o Global Industrial Cyber Security Professional (GICSP)o ISA/IEC 62443 Cybersecurity Fundamentals Specialist</li><li>
Yokogawa and/or ABB DCS, Industrial Control Systems and Network experience and knowledge is preferred.</li><li>
Detailed-oriented and persistent personality</li><li>
Strong Communication, interpersonal and self-management skills.</li><li>
Ability to work independently and a self-motivated attitude</li><li>
Critical thinking and problem-solving skills</li><li>
Ability to work effectively in a team and with other groups</li></ul><p></p><p><b><br>
Benefits:</b></p><br>
<p></p><ul><li>
Health insurance with one of the leading global providers for medical insurance.</li><li>
Career progression and growth through challenging projects and work.</li><li>
Employee engagement and wellness campaigns activities throughout the year.</li><li>
Excellent learning and development opportunities.</li><li>
Annual flight tickets to home country.</li><li>
Inclusive and diverse working environment.</li><li>
Flexible/Hybrid working environment.</li><li>
Open door policy.</li></ul><p></p><p><b>
About Us:</b></p><p></p><p><br>
Help AG is the cybersecurity arm of e&amp; enterprise (formerly Etisalat Digital) and provides leading enterprise businesses across the Middle East with strategic consultancy combined with tailored information security solutions and services that address their diverse requirements, enabling them to evolve securely with a competitive edge.</p><p>
Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; (formerly Etisalat Group) in 2020, hence creating a cybersecurity and digital transformation powerhouse in the region.</p><p></p><p>
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and maintaining its focus on all aspects of cybersecurity. With best of breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.</p></div><p></p>

OT Senior Security Engineer

Sigma Computing

<p></p><div><h3 class="jobSectionHeader"><b>About the Role</b></h3>
<p>
We are hiring a Senior, hands-on Cloud Security Engineer to secure a large-scale, cloud-native SaaS platform. This is an engineering-first role for someone who builds security solutions&mdash;not just manages tools.</p>
<p>
You will be a SME for cloud security architecture across platform, IAM, network, workload, data, and AI enablement, and partner with Engineering, Security, and Product to implement scalable controls that support business growth. You'll design secure architectures, embed controls into infrastructure-as-code, and build automated guardrails so teams can move fast without waiting on manual security approvals.</p>
<p>
We're looking for a builder-defender who thrives in complex cloud environments, automates aggressively (&quot;let the robots do the work&quot;), and can scale cloud security for a fast-moving SaaS company.</p>
<h3 class="jobSectionHeader"><b>
What You'll Do</b></h3>
<ul><li><b>Architectural Leadership:</b> Partner deeply with infrastructure and engineering teams to embed security into development workflows, leading high-level technical discussions to guide security efforts and strategic priorities.</li>
<li><b>Multi-Cloud Engineering:</b> Design, implement, and continuously improve Sigma Cloud Security across <b>AWS, GCP, and Azure</b> environments with architect-level technical depth.</li>
<li><b>Threat Modeling &amp; IR:</b> Conduct cloud threat modeling and demonstrate hands-on experience in Cloud Incident Response, including investigating and remediating malicious activity within cloud environments.</li>
<li><b>Identity &amp; Access:</b> Build IAM and privileged access strategy (RBAC/ABAC, federation, least privilege, cross-account access), eliminating standing privilege and long-lived credentials. Develop and enforce IAM best practices, including zero-trust models and privileged access controls across IaaS and SaaS.</li>
<li><b>Drive cloud data security controls</b> including classification, encryption/KMS, masking/tokenization, access governance, retention/deletion, and exfiltration risk reduction across APIs and data pipelines.</li>
<li><b>Develop automated remediation workflows</b> for recurring cloud misconfigurations, drift, and policy violations to reduce manual effort and response time.</li>
<li><b>Security Stack Management:</b> Deploy and manage cloud-native services (CSPM, CNAPP, DSPM, SIEM, DLP, WAF, Kubernetes, and container security).</li>
<li><b>Network Defense:</b> Review and apply zero-trust principles through strict network segmentation, authentication, and authorization.</li>
<li><b>Automation:</b> Develop sophisticated signatures/rules for cloud security and automate detection and response workflows.</li>
<li><b>AI :</b> Use AI securely and effectively to scale security practices and improve team efficiency.</li>
<li><b>Continuous Evolution:</b> Stay ahead of threats by leveraging intelligence, attack simulation, and red/blue team learnings.</li>
</ul><h3 class="jobSectionHeader"><b>What We're Looking For</b></h3>
<ul><li>Minimum 7+ years in Security roles with at least 5+ years focused on Cloud security engineering,IAM, and Data security</li>
<li>Bachelor's or Master's degree in Computer Science, Cyber Security, or a related field.</li>
<li>Deep technical expertise in cloud architectures AWS/Azure/GCP; including IAM, networking (VPCs, security groups, PrivateLink), and native security services is strongly desired.</li>
<li>Strong infrastructure-as-code skills&mdash;you write Terraform professionally, not just read it.</li>
<li>Advanced understanding and experience with container security, Kubernetes, and secure CI/CD pipeline design</li>
<li>Proven ability to demonstrate incident response experience specifically related to cloud-based malicious activity and breach remediation.</li>
<li>Advanced Cloud IAM expertise: federation, SSO, PAM/JIT access, service identities, and least privilege design.</li>
<li>Strong background in cloud network security (segmentation, private connectivity, egress controls, WAF).</li>
<li>Strong proficiency in scripting languages (e.g., Python, Go, PowerShell) for automation, data analysis, and security tooling development.</li>
<li>Strong knowledge of security platforms such as CNAPP (Wiz), WAF (Cloudflare), SASE (Netskope)</li>
<li>Demonstrated ability to lead cloud/saas architecture reviews and influence senior engineering stakeholders.</li>
<li>Experience securing data platforms (nice to have) - Snowflake, Databricks, BigQuery etc.</li>
<li>Experience in high-growth SaaS or data platforms Organizations (nice-to have)</li>
<li>Prior experience in Platform Engineering, DevSecops or similar (nice-to have)</li>
<li><b>Certifications (Preferred):</b> Professional-level cloud certifications are required, such as:</li>
<li><ul><li><b>AWS:</b> Certified Security &ndash; Specialty or Solutions Architect &ndash; Professional.</li>
<li><b>GCP:</b> Professional Cloud Security Engineer or Professional Cloud Architect.</li>
<li><b>Azure:</b> AZ-500 (Security Technologies) or AZ-305 (Solutions Architect).</li>
</ul></li>
</ul><p><b>Why Sigma?</b></p>
<p>
At Sigma, security is at the core of our mission. We power insights and innovation for our customers, and protecting their data is our highest priority. As a Senior Security Engineer, you will have the autonomy to shape our Security Engineering strategy, access to cutting-edge technologies, and the opportunity to solve real problems at scale.</p>
<p>
Join us and be part of a security team that values collaboration, innovation, and resilience&mdash;while giving you the room to grow, lead, and leave your mark on Sigma's security journey.</p>
<p><b>
Additional Job details</b></p>
<p>
The base salary range for this position is $210k - $240k annually.</p>
<p>
Compensation may vary outside of this range depending on a number of factors, including a candidate's qualifications, skills, competencies and experience. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work at Sigma Computing. This role is eligible for stock options, as well as a comprehensive benefits package.</p><div><h4 class="jobSectionHeader"><b>
About us:</b></h4>
<p>
Sigma is the AI apps and analytics platform connected to the cloud data warehouse. Using Sigma, business and technical teams can build intelligent, production-ready AI apps that accelerate and automate operational workflows. Sigma provides a spreadsheet interface, SQL and Python editors, visual builders, and native AI to help teams turn live data into interactive applications, analysis, reports, and embedded experiences.</p>
<p>
Sigma announced its $200M in Series D financing in May 2024, to continue transforming BI through its innovations in AI infrastructure, data application development, enterprise-wide collaboration, and business user adoption. Spark Capital and Avenir Growth Capital co-led the Series D funding round, with additional participation from a group of past investors including Snowflake Ventures and Sutter Hill Ventures.The Series D funding, raised at a valuation 60% higher than the company's Series C round three years ago, promises to further accelerate Sigma's growth.
</p><p>Come join us!</p>
<h4 class="jobSectionHeader"><b>
Benefits For Our Full-Time Employees:</b></h4>
<ul><li>Equity
</li><li>Generous health benefits</li>
<li>Flexible time off policy. Take the time off you need!</li>
<li>Paid bonding time for all new parents</li>
<li>Traditional and Roth 401k</li>
<li>Commuter and FSA benefits</li>
<li>Lunch Program</li>
<li>Dog friendly office</li>
</ul>
<p>Sigma Computing is an equal opportunity employer. We are committed to building a smart and strong team regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We look forward to learning how your experience can enable all of us to grow<i>.</i></p>
<p><i>
Note: We have an in-office work environment in all our offices in SF, NYC, and London.</i></p>
<p><b>
Our Privacy Practices
</b></p><p>When you submit a job application on this site, Sigma processes your personal data for the purposes of evaluating your candidacy for employment at Sigma and as otherwise needed throughout the recruitment and hiring process. Please review Sigma's Candidate Privacy Notice for more details. Please note that your personal data may be transferred to a country other than the one in which it was provided (including to USA, the UK, and Canada).</p>
<p><b>
Sigma's use of AI
</b></p><p>This hiring process utilizes artificial intelligence tools to assist in candidate screening and assessment. Our AI tools are designed to complement, not replace, human decision-making.</p></div></div>

Senior Security Engineer II – Cloud & Data Security

Smart Working Solutions

<div><div><p><b>About Smart Working</b></p>
<p>
At Smart Working, we believe your job should not only look right on paper but also feel right every day. This isn&rsquo;t just another remote opportunity - it&rsquo;s about finding where you truly belong, no matter where you are. From day one, you&rsquo;re welcomed into a genuine community that values your growth and well-being.</p>
<p>
Our mission is simple: to break down geographic barriers and connect skilled professionals with outstanding global teams and products for full-time, long-term roles. We help you discover meaningful work with teams that invest in your success, where you&rsquo;re empowered to grow personally and professionally.<br>
Join one of the highest-rated workplaces on Glassdoor and experience what it means to thrive in a truly remote-first world.</p>
<p><b>
About the Role</b></p>
<p>
As a <b>Senior Security Engineer</b>, you will play a critical role in designing and implementing security controls across mobile applications, backend services, and web platforms. You will help ensure that systems are secure by design, protecting both customer data and platform integrity while meeting strict internal security standards and regulatory requirements.<br>
Working closely with engineering teams, you will contribute to embedding security practices across the development lifecycle, from secure coding and threat modelling to DevSecOps and infrastructure security. You will help identify vulnerabilities, assess risk, and implement proactive security measures that strengthen the organisation&rsquo;s overall security posture.</p>
<p>
This role is ideal for a security engineer who enjoys working at the intersection of application security, secure architecture, and engineering enablement, helping development teams build resilient and compliant systems.</p>
</div>
<h3 class="jobSectionHeader"><b>Responsibilities</b></h3><ul>
<li>Design and implement security controls for mobile applications, backend services, and web platforms</li>
<li>Conduct threat modelling and risk assessments for new and existing systems</li>
<li>Embed secure coding practices across engineering teams, aligned with OWASP standards</li>
<li>Partner with engineers to ensure security is integrated throughout the software development lifecycle (SDLC)</li>
<li>Identify and remediate application vulnerabilities and security risks</li>
<li>Contribute to the implementation and improvement of DevSecOps practices</li>
<li>Provide guidance on secure architecture and secure software design</li>
<li>Support the development and enforcement of security policies, controls, and engineering standards</li>
<li>Improve the organisation&rsquo;s application security posture through proactive security reviews and testing</li>
<li>Work with teams to ensure systems meet internal security standards and external regulatory requirements</li>
<li>Provide security expertise for infrastructure components including containers and cloud-native environments</li>
<li>Contribute to incident response and vulnerability management processes</li>
</ul><h3 class="jobSectionHeader"><b>Requirements</b></h3><ul>
<li>6+ years of experience in security engineering or application security</li>
<li>3+ years of experience in Application Security (AppSec)</li>
<li>3+ years of experience conducting threat modelling and risk assessments</li>
<li>3+ years of experience applying secure coding principles aligned with OWASP standards</li>
<li>Strong understanding of application security vulnerabilities and mitigation strategies</li>
<li>Proven experience collaborating with engineering teams to build secure-by-design applications</li>
<li>2&ndash;3 years of experience implementing DevSecOps practices</li>
<li>2&ndash;3 years of experience securing containerised environments such as Docker or Kubernetes</li>
<li>2+ years of experience applying cryptography and encryption techniques in application security</li>
</ul><h3 class="jobSectionHeader"><b>Nice to Have</b></h3><ul>
<li>Experience working within a bank, fintech company, or other regulated environment</li>
<li>Familiarity with financial services security standards and regulatory frameworks</li>
<li>Experience securing mobile applications and modern web platforms</li>
</ul>
<p>We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</p></div>

Senior Security Engineer (Remote, Full-Time) [AS219] PK

Openkyber

<div><p>This is for a Federal contract , no sponsorship provided
</p><b>PROJECT DESCRIPTION:</b>
<p>The IT Security Engineering Team is supporting a data access management project that requires a Senior Cloud Security Specialist with proficiency in REST API integrations. The Senior Cloud Security Specialist will need to provide hands-on API integration support between cloud applications using modern and secure techniques.</p>
<b>BACKGROUND:</b>
<p>We are seeking a Senior Cloud Security Specialist to support the Security Engineering team within the IT division at the Federal govt project . This team is responsible for the strategy, design, deployment, and maintenance of effective security solutions in cloud, local, and hybrid environments.</p>
<b>REQUIREMENTS:</b>
<p>The candidate shall possess the knowledge and skills set forth in the Technical Services the Federal Client , for labor category Senior Cloud Security Specialist. The candidate shall also demonstrate the knowledge and experience below:</p>
<ul><li>Required Experience: Extensive REST API experience specifically in implementing, securing, automating, testing, and documenting API integrations.</li>
<li>Strong understanding of resilient integration patterns including error handling, retry mechanisms, and monitoring strategies</li>
<li>Proficient in scripting and automation languages for security orchestration</li>
</ul><p>Preferred Qualifications:</p>
<ul><li>AWS Certified Security - Specialty (strongly preferred)</li>
<li>AWS Certified Solutions Architect - Professional or Associate</li>
</ul><ul><li>Prefer experience with integrations between ServiceNow, Collibra, and Saviynt</li>
<li>Experience implementing cloud-native serverless architectures and services</li>
<li>Experience architecting and implementing security controls across public cloud platforms</li>
<li>Experience implementing DevSecOps practices including continuous integration/deployment pipelines and infrastructure as code methodologies</li>
<li>Experience implementing cloud access security broker (CASB) solutions for SaaS application security and visibility</li>
<li>Strong understanding of security concepts and technologies related to Identity and Access Management (IAM), security engineering, network security design, security operations, security architecture, general engineering processes, cloud security, data loss protection, zero trust, DevSecOps and vulnerability management.</li>
<li>Demonstrated federal experience and comprehensive knowledge in adopting and implementing federal cybersecurity requirements, including but not limited to the NIST Cybersecurity Framework, OMB Memorandum M-22-09, NIST SP 800-53</li>
<li>Possess deep analytical, problem-solving, and troubleshooting experience, to independently resolve complex security challenges.</li>
<li>Proven ability to provide technical security consultation and advisory services with a proactive approach to identifying potential issues, raising questions, and engaging in open dialogue with team members and stakeholders to ensure security objectives are met.</li>
</ul><p>The Consultant shall deliver, but not limited to, the following:</p>
<ul><li>API integration architecture document detailing out the integrations between cloud systems.</li>
<li>Data model and attribute mapping across cloud systems.</li>
<li>Automation scripts and orchestration (serverless functions, scheduled jobs, event handlers)</li>
<li>Build resilient, secure API integrations between cloud applications in support of an endto- end data access management solution.</li>
<li>Comprehensive testing and documentation of cloud integrations</li>
<li>Support data loss prevention and cloud access security broker cloud initiatives</li>
<li>Work across multiple teams as a Cloud Security Engineer SME to support security design, build, implementation, and monitoring of cloud platforms, applications, and tools.</li>
<li>Offer technical consultation to cloud engineering teams on secure implementations</li>
<li>Create or update security configuration guides and playbooks</li>
</ul><p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

Senior Network Security Engineer

UNIUNI

<div><p><b>About UniUni</b></p><p>
UniUni is a late-stage last-mile logistics company moving millions of parcels across the United States and Canada for some of the largest e-commerce platforms in North America. Our technology is cloud-native on AWS. We hold an active ISO 27001 certification and SOC 2 Type II attestation, and security and compliance are central to how we operate and how our customers trust us. This role reports to the Information Security Officer and is based in North America (remote with periodic travel to UniUni hubs).</p><p><b><br>
About the role</b></p><ul><li>
We are hiring a Senior Security Compliance Engineer to be the operational backbone of UniUni's governance, risk, and compliance function. You will run the day-to-day machinery that keeps our ISO 27001 certification and SOC 2 Type II attestation healthy, our policies current, our customers confident, and our regulatory obligations met.</li><li>
This is a hands-on senior IC role. The Information Security Officer designs the program; you make it work. You will run audit cycles, manage evidence, drive policy lifecycles, lead customer security reviews, operate the third-party risk program, and support privacy and regulatory work. We are looking for someone who automates what should be automated, writes clearly, and treats compliance as a real engineering problem.</li></ul><p><b>
What you'll do</b></p><p><b>
Core GRC</b></p><ul><li>
Run the ISO 27001 program operations, including surveillance audit prep, internal audits, the annual risk assessment, management reviews, and corrective action tracking.</li><li>
Run the SOC 2 Type II program operations, including continuous control monitoring, evidence collection, auditor coordination, and remediation tracking.</li><li>
Operate the information security policy lifecycle: drafting, stakeholder review, approval workflows, annual reviews, version control, and employee attestations.</li><li>
Maintain the risk register, drive risk treatment plans through to closure, and prepare risk reporting for the ISO and the executive team.</li><li>
Build and maintain compliance automation, including evidence collection workflows, control testing, and dashboarding. Treat the GRC platform as a system you actively engineer, not a passive system of record.</li><li>
Plan and run security awareness training and phishing simulation cycles, and report on outcomes.</li></ul><p><b>
Privacy and Regulatory</b></p><ul><li>
Operate UniUni's privacy program in partnership with legal, including data inventories, data flow mapping, retention schedules, and privacy impact assessments.</li><li>
Execute on regulatory obligations relevant to our business, including the DOJ Data Security Program, Canadian PIPEDA, and applicable US state privacy laws.</li><li>
Coordinate the response to data subject access requests (DSARs) and privacy inquiries within statutory timelines.</li><li>
Track regulatory developments across the jurisdictions in which UniUni operates and translate them into concrete control changes, evidence requirements, and policy updates.</li><li>
Support data residency and data minimization commitments, working with engineering and the data security team to verify they hold in practice.</li></ul><p><b>
Customer Reviews and Third-Party Risk</b></p><ul><li>
Lead the response to customer security questionnaires, RFP security sections, and prospect security reviews, in partnership with sales, legal, and the ISO.</li><li>
Review and negotiate the security and privacy clauses in customer and vendor contracts, escalating material issues to the ISO and legal.</li><li>
Run UniUni's third-party risk management program: vendor inventory, tiering by risk, due diligence, security review of new vendors, periodic reassessment of existing vendors, and remediation tracking.</li><li>
Operate the trust center and the security artifact library (SOC 2 reports, ISO certificates, pen test summaries, security overviews) and keep customer-facing materials current and accurate.</li></ul><p><b>
Across All of It</b></p><ul><li>
Be a credible representative of UniUni's security posture in front of customers, auditors, and regulators.</li><li>
Write clearly and precisely. The work product of this role lands in front of customers, auditors, regulators, and executives, and it has to hold up.</li><li>
Partner with engineering, IT, legal, HR, and finance to make compliance a normal part of how the business runs, not an interrupt.</li></ul><p><b>
Qualifications</b></p><ul><li>
5 to 8 years in security GRC, audit, or a closely related discipline, with hands-on ownership of ISO 27001 and SOC 2 program operations in a cloud-native organization.</li><li>
Direct experience driving SOC 2 Type II audit cycles end to end, including auditor coordination, evidence collection, and remediation.</li><li>
Working knowledge of common control frameworks beyond ISO and SOC (NIST CSF, NIST 800-53, CIS) and the ability to map between them.</li><li>
Experience operating a GRC platform (e.g., Vanta, Drata, Secureframe, Hyperproof, ServiceNow GRC, OneTrust) as a power user, including building automated evidence pipelines and control tests.</li><li>
Experience leading customer security questionnaires and security reviews for enterprise customers, including reviewing security and privacy clauses in contracts.</li></ul><ul><li>
Familiarity with privacy regulation in North America, including PIPEDA and US state privacy laws, and a working understanding of cross-border data transfer requirements.</li><li>
Experience operating a third-party risk management program at meaningful vendor volume.</li><li>
Strong written communication. You can produce auditor-ready documentation, customer-ready security narratives, and executive-ready risk summaries, and you know which is which.</li><li>
A pragmatic, automation-first mindset. You are bothered by manual evidence collection and you do something about it</li></ul><p><b>
Nice to Have</b></p><ul><li>
Experience in logistics, supply chain, marketplaces, or other high-volume operational businesses.</li><li>
Familiarity with the DOJ Data Security Program and bulk data transfer rules.</li><li>
Light scripting ability (Python, SQL) for automating evidence collection or building control queries against AWS, identity providers, and SaaS platforms.</li><li>
Relevant certifications such as ISO 27001 Lead Auditor or Lead Implementer, CISA, CISM, CIPP, or CRISC.</li><li>
Prior experience supporting a company through a customer-driven security maturation, an investor due diligence cycle, or IPO readiness.</li></ul><p></p><p><b><br>
Why This Role</b></p><p>
This is a senior IC role with end-to-end ownership and visible impact. You will work directly with the Information Security Officer in a security function with executive commitment, a live ISO 27001 certification, and an active SOC 2 Type II attestation. You will be in the room for customer security conversations, in the loop on regulatory questions, and in the driver's seat on the audit cycles that protect both.</p></div>

Senior Security Compliance Engineer

Search 10000+ Senior security engineer jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 senior security engineer jobs Near Me

Senior Security Engineer

Senior Security Engineer

OT Senior Security Engineer

Senior Security Engineer II – Cloud & Data Security

Senior Security Engineer (Remote, Full-Time) [AS219] PK

Senior Network Security Engineer

Senior Security Compliance Engineer