senior security engineer

Ascendion

<div><div><p><b>About Ascendion
</b></p><p>Ascendion is a full-service digital engineering solutions company. We make and manage software platforms and products that power growth and deliver captivating experiences to consumers and employees. Our engineering, cloud, data, experience design, and talent solution capabilities accelerate transformation and impact for enterprise clients. Headquartered in New Jersey, our workforce of 6,000+ Ascenders delivers solutions from around the globe. Ascendion is built differently to engineer the next.
</p><p>Ascendion | Engineering to elevate life
</p><p>We have a culture built on opportunity, inclusion, and a spirit of partnership. Come, change the world with us:
</p><ul><li>Build the coolest tech for world&rsquo;s leading brands
</li><li>Solve complex problems &ndash; and learn new skills
</li><li>Experience the power of transforming digital engineering for Fortune 500 clients
</li><li>Master your craft with leading training programs and hands-on experience
</li></ul><p><b>Experience a community of change makers!
</b></p><p>Join a culture of high-performing innovators with endless ideas and a passion for tech. Our culture is the fabric of our company, and it is what makes us unique and diverse. The way we share ideas, learning, experiences, successes, and joy allows everyone to be their best at Ascendion.
</p><p><b>About the Role:
</b></p><p><b>Hiring: Senior Software Engineer &ndash; Firmware Security / Compiler Engineering (C++ | LLVM | Fuzzing | AI)
</b></p><p><b>Location: </b>Hybrid (Redmond, WA)
</p><p>Are you passionate about <b>systems programming, firmware security, compiler technology, and AI-assisted security analysis </b>? We're hiring a <b>Senior Software Engineer </b>to help build a next-generation firmware security analysis platform within <b>Azure Hardware Security </b>.
</p><p>This is a rare opportunity to work at the intersection of <b>LLVM, C/C++, fuzzing, static analysis, and Large Language Models (LLMs) </b>to automate vulnerability discovery across firmware at enterprise scale.
</p><p><b>What You'll Do
</b></p><ul><li>Design and develop firmware security analysis pipelines using <b>C/C++ </b>, <b>LLVM </b>, and <b>Python </b>.
</li><li>Build compiler transformations and preprocessing pipelines that convert firmware into LLVM IR for automated analysis.
</li><li>Develop and enhance <b>fuzzing frameworks </b>to discover security vulnerabilities.
</li><li>Improve static analysis, crash triage, call graph generation, and AI-assisted vulnerability detection.
</li><li>Collaborate with compiler engineers, security researchers, and Azure platform teams.
</li><li>Contribute to CI/CD automation, testing, documentation, and open-source engineering initiatives.
</li></ul><p><b>Required Skills
</b></p><ul><li>7+ years of professional <b>C/C++ systems programming </b>experience.
</li><li>5+ years of <b>LLVM / Compiler Engineering </b>experience.
</li><li>3&ndash;5+ years working with <b>security fuzzing </b>tools such as <b>libFuzzer, AFL, AFL++ </b>, or similar.
</li><li>Strong understanding of software security, memory safety vulnerabilities, and root cause analysis.
</li><li>Python scripting and automation experience.
</li><li>Experience with Git-based development workflows.
</li></ul><p><b>Preferred Skills
</b></p><ul><li>Firmware or Embedded Systems development.
</li><li>CodeQL or other static analysis platforms.
</li><li>Hardware Abstraction Layer (HAL), MMIO, rehosting, or cross-compilation.
</li><li>AI/LLM integration into engineering workflows.
</li><li>Azure DevOps, GitHub, CI/CD pipelines.
</li><li>Open-source project contributions.
</li></ul><p><b>Why Join?
</b></p><ul><li>Work on a cutting-edge Azure Hardware Security initiative.
</li><li>Build AI-powered security tooling from the ground up.
</li><li>Collaborate with world-class compiler, firmware, and security experts.
</li><li>Opportunity to contribute to a future open-source platform with industry-wide impact.
</li></ul><p><b>Salary Range: </b>The salary for this position is between $170,000 &ndash; $180,000 annually. Factors which may affect pay within this range may include geography/market, skills, education, experience and other qualifications of the successful candidate.
</p><p><b>Benefits </b>: The Company offers the following benefits for this position, subject to applicable eligibility requirements: [medical insurance] [dental insurance] [vision insurance] [401(k) retirement plan] [long-term disability insurance] [short-term disability insurance] [personal days accrued each calendar year. The Paid time off benefits meet the paid sick and safe time laws that pertains to the City/ State] [12-15 days of paid vacation time] [6-8 weeks of paid parental leave after a year of service] [9 paid holidays and 2 floating holidays per calendar year] [Ascendion Learning Management System] [Tuition Reimbursement Program]
 </p><p><b>Want to change the world? Let us know.
</b></p><p>Tell us about your experiences, education, and ambitions. Bring your knowledge, unique viewpoint, and creativity to the table. Let&rsquo;s talk!</p></div></div><div></div>
<br><div><div><h4 class="jobSectionHeader"><b>Preferred Skills
</b></h4><div><div>LLVM
<ul><li><div>Complier Engineering
</div></li><li><div>Libfuzzer
</div></li><li><div>AFL
</div></li><li><div>AFL++
</div></li><li><div>C++
</div></li></ul></div></div></div><div><h4 class="jobSectionHeader"><b>Job details
</b></h4><div><div><h6 class="jobSectionHeader"><b>Job ID
</b></h6><p>332719
</p></div><div><h6 class="jobSectionHeader"><b>Job Requirements
</b></h6><p>Senior Firmware Security Engineer
</p></div><div><h6 class="jobSectionHeader"><b>Location
</b></h6><p>Redmond, Washington, US
</p></div><div><h6 class="jobSectionHeader"><b>Recruiter
</b></h6><p>Divya
</p></div><div><h6 class="jobSectionHeader"><b>Email
</b></h6><p>divy.tandel@ascendion.com
</p></div></div></div><div><h4 class="jobSectionHeader"><b>About Ascendion
</b></h4><div><h6 class="jobSectionHeader"><b>Ascendion is a full-service digital engineering solutions company. We make and manage software platforms and products that power growth and deliver captivating experiences to consumers and employees.
</b></h6><p>Our engineering, cloud, data, experience design, and talent solution capabilities accelerate transformation and impact for enterprise clients. Headquartered in New Jersey, our workforce of 6,000+ Ascenders delivers solutions from around the globe. Ascendion is built differently to engineer the next.</p></div></div></div>

Senior Firmware Security Engineer

Leidos

<div><p><b>Description</b>
</p><p>Leidos is seeking a Cyber Security InfoSec Engineer will provide support for a 150+ FTE technical development program supporting the Sponsor&rsquo;s Entitlement Programs as well as IdAM /ICAM, Authentication, Authorization, Attributes and Digital Policy Management. The Cyber Security Engineer will target, assess, exploit, and report risks and vulnerabilities of information systems to provide senior decision makers with actionable data. Cyber Security Engineers are responsible for IT security/vulnerability assessments and managing overall network security using network and security-related hardware and software.</p><p></p><p>
Primary Responsibilities</p><ul><li><p>
Identify and define applicable security controls and responses for the project</p></li><li><p>
Review responses, enter responses into the cyber risk management platform, and update risks</p></li><li><p>
Identify common controls and draft common control language for the cyber risk management platform</p></li><li><p>
Perform security maintenance duties, such as performing analyses of vulnerabilities and providing recommended resolutions</p></li><li><p>
Maintain awareness of system level changes, ensure proper patch levels, and upload cyclic scans to the appropriate repositories</p></li><li><p>
Achieve and maintain system accreditation, including providing guidance, plans, and evidence and maintaining documentation</p></li><li><p>
Perform regular reviews, such as audits, and review security test results</p></li><li><p>
Participate in or lead technical exchange meetings and application review boards and document action items and results</p></li><li><p>
Brief management on status</p></li></ul><p></p><p><b>
Required Qualifications</b></p><ul><li><p>
Active TS/SCI with Polygraph</p></li><li><p>
Prior experience with programs of similar size and complexity</p></li><li><p>
Experience with the Sponsor and the Sponsor&rsquo;s mission</p></li><li><p>
Bachelor's degree and 12+ years' experience. Additional experience in lieu of degree.</p></li><li><p>
Demonstrated work experience in cyber security or related IT field</p></li><li><p>
Demonstrated experience performing complex technical tasks with minimal direction</p></li><li><p>
Demonstrated experience designing, testing, or implementing IT security architecture</p></li><li><p>
Demonstrated experience performing network security analysis</p></li><li><p>
Demonstrated experience developing risk management methodologies</p></li><li><p>
Demonstrated experience analyzing test results to develop risk/threat mitigation plans</p></li><li><p>
Demonstrated experience communicating vulnerability results and risk posture to senior executives</p></li></ul><p></p><p><b>
Desired Qualifications</b></p><ul><li><p>
Certified Information Systems Security Professional (CISSP)</p></li><li><p>
Experience with the Sponsor&rsquo;s entitlement management programs</p></li><li><p>
PMP, SAFe Agilist Certification, AWS certification</p></li></ul><p>
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo &mdash; because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 &mdash; and moving faster than anyone else dares.</p><h2 class="jobSectionHeader"><b>
Original Posting:</b></h2>
July 30, 2026<p></p><p><br>
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.</p><p></p><h2 class="jobSectionHeader"><b><br>
Pay Range:</b></h2>
Pay Range $131,300.00 - $237,350.00<p></p><p>
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.</p><p></p><p><b>
About Leidos</b></p><p></p><p>
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.</p><p></p><p><b>
Pay and Benefits</b></p><p></p><p>
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.</p><p></p><p><b>
Securing Your Data</b></p><p></p><p>
Beware of fake employment opportunities using Leidos&rsquo; name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system &ndash; never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.</p><p>
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.</p><p></p><p><b>
Commitment to Non-Discrimination</b></p><p></p><p>
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.</p></div>

Senior Cyber Security Engineer

Information Technology Senior Management Forum

<div><div>Posted Date 7/30/2026
</div><div>Description<br>
<p></p>
<p><b>Regular or Temporary:</b></p>
Regular
<p><b>Language Fluency: </b>English (Required)</p>
<p><b>Work Shift:</b></p>
1st shift (United States of America)
<h4 class="jobSectionHeader"><b>Please review the following job description:</b></h4>
***This role is 5 days a week in the Atlanta, Raleigh or Charlotte office***
<br>
<br>
<ul><li>This team uses automated API security tools like Akamai, Salt Security and ReadyAPI tools to identify vulnerabilities in running APIs
</li></ul><br>
<ul><li>This Senior Security Engineer will be experienced with API security testing tools such as Akamai, API Security, Salt Security, Traceable, Data Theorem, OWASP ZAP (API extensions), SoapUI, ReadyAPI, or Burp Suite
</li></ul><br>
<ul><li>The team partners with application development, DevSecOps, and technology teams to identify, assess, prioritize, and drive remediation of security vulnerabilities across applications, APIs,
</li></ul><p><b>ESSENTIAL DUTIES AND RESPONSIBILITIES</b></p>
<p>Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.</p>
<ul><li>Lead the enterprise vulnerability management program for automated API testing, including identification, assessment, prioritization, tracking, and remediation of security vulnerabilities.</li>
<li>Performs security testing, and penetration testing tasks for assigned platforms and services, using defined methods to identify and remediate vulnerabilities.</li>
<li>Develop risk-based remediation strategies and collaborate with application teams to reduce organizational security exposure</li>
<li>Reviews relevant security threats, tools, and design options for assigned work, and provides input that supports technical plans and priorities for the job area.</li>
<li>Perform triage and validation of security findings to reduce false positives and improve remediation effectiveness.</li>
<li>Design, implement, and maintain automated API security testing capabilities within CI/CD pipelines.</li>
<li>Implements and updates security baselines, guardrails, and control configurations for systems and applications within the area of responsibility, helping maintain regulatory and policy compliance.</li>
<li>Shares knowledge and best practices with technical teammates, offering informal guidance and support during code reviews, design discussions, and pairing sessions.</li>
<li>Plans and manages own work to meet defined objectives and milestones, seeking feedback, pursuing self-development, and adjusting approaches to improve quality and effectiveness over time.</li>
</ul><p><b>Required Qualifications</b>
<br>
The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.</p>
<ul><li>Bachelor&rsquo;s degree or equivalent education, training, and work-related experience.</li>
<li>Minimum of 7 years of experience in security engineering or related cybersecurity roles.</li>
<li>Deep specialized knowledge in cybersecurity principles, theories, and concepts.</li>
<li>Proven experience in software development lifecycle security practices.</li>
<li>Deep knowledge of threat modeling, security testing, and penetration testing.</li>
<li>Experience implementing and managing complex information security technologies.</li>
</ul><p><b>Preferred Qualifications</b></p>
<ul><li>Working knowledge of industry security frameworks and standards, including:
<ul><li>NIST SP 800-228 (API Security Guidance)</li>
<li>FFIEC (Federal Financial Institutions Examination Council) guidelines</li>
<li>OWASP API Security Top 10</li>
<li>Financial-grade API (FAPI &ndash; OpenID Foundation)</li>
</ul></li><li>Strong understanding of API security protocols and frameworks, including OAuth 2.0, OpenID Connect (OIDC), Mutual TLS (mTLS), and JSON Web Tokens (JWT)</li>
<li>Experience within banking or financial services environments</li>
<li>Proficiency or familiarity with Python scripting</li>
<li>Relevant security certifications such as CISSP, OSCP, CEH, or Security+</li>
<li>Experience with cloud platforms such as AWS and/or Microsoft Azure?</li>
<li>Experience in financial services, cybersecurity, regulated enterprise environments, or platforms with high audit and control requirements.</li>
<li>Familiarity with secure tool-calling patterns, API protections, model or prompt change validation, and runtime traceability for AI systems.</li>
<li>Working knowledge of cloud-native security patterns, telemetry analysis, and deployment gating for modern engineering teams.</li>
</ul><p><b>General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: </b>All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist&rsquo;s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist&rsquo;s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.</p>
<p><b><i>Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.</i></b></p>
<p>EEO is the Law E-Verify IER Right to Work</p>
</div><div></div><div><div>Type
<div>Full-time</div></div></div></div>

Senior API Security Engineer

Faire

<div><div><p><b>About Faire</b></p>
<p>
Faire is a technology wholesale platform built on the belief that the future is local. Independent retailers around the globe collectively represent a multi-hundred-billion-dollar wholesale market that has historically been fragmented and offline. At Faire, we're using the power of tech, data, and machine learning to connect this thriving community of entrepreneurs across the globe. Picture your favorite boutique in town &mdash; we help them discover the best products from around the world to sell in their stores. With the right tools and insights, we believe that we can level the playing field so businesses can grow and local communities can thrive.</p>
<p>
We're looking for smart, resourceful and passionate people to join us as we power the shop local movement. If you believe in community, come join ours.</p></div><p><b>
About the role:</b></p>
<p>
As a Senior Enterprise Security Engineer, you will help protect Faire's corporate environment across endpoint, network, identity, and SaaS, and play a key role in how we govern the safe use of AI across the company. You will apply secure-by-default standards, champion zero trust, and turn strategy into practical controls, automation, and guidance that teams adopt. Working across leadership pillars, you will help shape our AI governance approach and own much of how it gets put into practice. This is a role for someone who is strong hands-on and ready to grow their scope and influence across IT, Engineering, Legal, People, Finance, and Product.</p>
<p><b>
What You'll Do:</b></p>
<ul>
<li>Help shape and operate Faire's AI governance program: acceptable-use standards, data protection for AI tools, vendor and model risk review, and safe patterns for AI-assisted work (including agent and MCP-based integrations).</li>
<li>Partner with IT teams to harden endpoint management, corporate infrastructure, identity services, and networking.</li>
<li>Design and implement controls that protect company information from unauthorized access, disclosure, or misuse.</li>
<li>Support and help run our endpoint detection and response platform, email security stack, and phishing simulation and awareness programs.</li>
<li>Build the guardrails and enablement that let teams experiment with AI quickly without creating new exposure, partnering with Engineering rather than duplicating their work.</li>
<li>Advise employees on securing endpoints, office AV, and network gear, and publish clear runbooks.</li>
<li>Build and deliver training that grows a culture of security, accountability, and practical awareness.</li>
<li>Track emerging threats, including AI-specific risks, and make recommendations to improve our posture.</li>
</ul>
<p><b>What It Takes:</b></p>
<ul>
<li>5+ years in enterprise security with hands-on experience.</li>
<li>Practical experience in at least two of these areas: endpoint security, network security, data security, security operations, threat management, AI governance and security.</li>
<li>Exposure to enterprise AI governance and security (e.g. AI platform management, AI tool or MCP security review, prompt guardrailing), with the interest and ability to grow into owning more of it.</li>
<li>Experience writing policies and processes and supporting audits for frameworks such as ISO 27001, SOX, and SOC 2 Type II.</li>
<li>Strong written and verbal communication.</li>
<li>Analytical, outcomes-driven mindset with a bias for action.</li>
<li>Ability to influence others through empathy and relationship-building.</li>
<li>A passion for programming and solving problems with code (Python, Ruby, or Go).</li>
</ul><h4 class="jobSectionHeader"><b>Salary Range:</b></h4>
<p>
San Francisco: the pay range for this role is $174,500 - $240,000 per year.</p>
<p>
This role will also be eligible for equity and benefits. Actual base pay will be determined based on permissible factors such as transferable skills, work experience, market demands, and primary work location. The base pay range provided is subject to change and may be modified in the future.</p><div><p><i>
Hybrid Faire employees currently go into the office 3 days per week on Tuesdays, Thursdays, and a third flex day of their choosing (Monday, Wednesday, or Friday).</i><i> Additionally, hybrid in-office roles will have the flexibility to work remotely up to 4 weeks per year. Specific Workplace and Information Technology positions may require onsite attendance 5 days per week as will be indicated in the job posting.</i></p><br>
<p><b>
Why you'll love working at Faire</b></p>
<ul>
<li><b>Move fast:</b> You'll own meaningful problems that serve customers around the globe with the agency to move fast and see your results clearly.</li>
<li><b>Equipped to scale:</b> We invest in what matters, including the latest enterprise AI tools, to help you work smarter and get more out of every day.</li>
<li><b>Best in class:</b> Our team is full of sharp, kind, and generous colleagues who care about their craft and about helping you grow in yours.</li>
<li><b>Real rewards.</b> Competitive pay, equity, and comprehensive benefits designed to support your life inside and outside of work.</li>
<li><b>Belonging:</b> We're intentional about building an environment where every Faire employee has equal access to opportunities, growth, and success.</li>
</ul>
<p>Faire was founded in 2017 by a team of early product and engineering leads from Square. We're backed by some of the top investors in retail and tech including: Y Combinator, Lightspeed Venture Partners, Forerunner Ventures, Khosla Ventures, Sequoia Capital, Founders Fund, and DST Global. We have headquarters in San Francisco and Kitchener-Waterloo, and a global employee presence across offices in Toronto, London, and New York. To learn more about Faire and our customers, you can read more on our blog.</p>
<p></p>
<p>Faire provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, sexual orientation, gender identity or gender expression.</p>
<p>
Faire is committed to providing access, equal opportunity and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. Accommodations are available throughout the recruitment process and applicants with a disability may request to be accommodated throughout the recruitment process. We will work with all applicants to accommodate their individual accessibility needs. To request reasonable accommodation, please fill out our Accommodation Request Form (https://bit.ly/faire-form)</p>
<p><b>
Privacy</b></p>
<p>
For information about the type of personal data Faire collects from applicants, as well as your choices regarding the data collected about you, please visit Faire's Privacy Notice (https://www.faire.com/privacy)</p></div></div>

Senior Enterprise Security Engineer

Arrow Electronics

<div>
 <strong>
  Position
  <br/>
  <br/>
 </strong>
 Senior IT Security Compliance Engineer
 <br/>
 <br/>
 <strong>
  Job Description
  <br/>
  <br/>
 </strong>
 The Senior IT Security Compliance Engineer is responsible for developing, maintaining, and advancing the organization&rsquo;s security compliance posture. This role leads security audits, manages compliance frameworks, and ensures the effectiveness of security controls across the organization. The position works closely with cross‑functional stakeholders to support regulatory requirements, customer security inquiries, and continuous security improvements in a SaaS/cloud-based environment.
 <br/>
 <br/>
 Key Responsibilities
 <br/>
 <br/>
 <ul>
  <li>
   Develop, review, and maintain IT security policies, standards, procedures, and guidelines in alignment with industry best practices and regulatory requirements.
  </li>
  <li>
   Lead and coordinate compliance initiatives for security frameworks and standards, including but not limited to ISO 27001, SOC 2, CMMC, NIST, and internal security assessments.
  </li>
  <li>
   Manage audit readiness activities, including documentation preparation, evidence collection, stakeholder coordination, and remediation tracking for internal and external audits.
  </li>
  <li>
   Respond to customer and partner security questionnaires, ensuring accurate, consistent, and timely responses.
  </li>
  <li>
   Conduct periodic security and risk assessments to evaluate the effectiveness of security controls and identify improvement opportunities.
  </li>
  <li>
   Track, manage, and follow up on vulnerability remediation efforts in collaboration with IT, engineering, and operations teams.
  </li>
  <li>
   Prepare and deliver security metrics, compliance reports, and executive-level summaries.
  </li>
  <li>
   Provide security awareness, training, and education to employees to promote a strong security culture across the organization.
  </li>
  <li>
   Support continuous improvement of governance, risk, and compliance (GRC) processes and tooling.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Requirements And Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Strong knowledge of information security principles, risk management, and compliance frameworks, with a solid understanding of ISO 27001 requirements and controls.
  </li>
  <li>
   Hands-on experience supporting audits and compliance programs for frameworks such as ISO 27001, SOC 2, CMMC, NIST, or similar.
  </li>
  <li>
   GRC-related certification (e.g., CISSP, CISA, CRISC, ISO 27001 Lead Implementer/Lead Auditor) is preferred.
  </li>
  <li>
   Experience working in SaaS or technology-driven environments is highly desirable.
  </li>
  <li>
   Familiarity with cloud computing platforms and cloud security principles.
  </li>
  <li>
   Excellent written and verbal communication skills, with proven ability to produce clear, high-quality security documentation and reports.
  </li>
  <li>
   Minimum of 5 years of professional experience in cybersecurity, information security, or compliance-related roles.
  </li>
  <li>
   Bachelor&rsquo;s degree in Computer Engineering, Computer Science, Information Security, or a related field.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Location:
  <br/>
  <br/>
 </strong>
 EG-Cairo, Egypt (Al Emdad &amp; Al Tamween)
 <br/>
 <br/>
 <strong>
  Time Type
  <br/>
  <br/>
 </strong>
 Full time
 <br/>
 <br/>
 <strong>
  Job Category
  <br/>
  <br/>
 </strong>
 Information Technology
</div>


Senior IT Security Compliance Engineer

SAIC

<div><p>Job ID: 2615084</p><p><b>
Location: </b>Kittery, ME, US</p><p><b>
Date Posted: </b>2026-07-29</p><p><b>
Category: </b>Engineering and Sciences</p><p><b>
Subcategory: </b>Systems Engineer</p><p><b>
Schedule: </b>Full-Time</p><p><b>
Shift: </b>Day Job</p><p><b>
Travel: </b>Yes - 10% of the time</p><p><b>
Minimum Clearance Required: </b>Secret</p><p><b>
Clearance Level Must Be Able to Obtain: </b>None</p><p><b>
Potential for Remote Work: </b>ORA_ON_SITE</p><p><b><br>
Description</b>
</p><p>SAIC is seeking a <b>Senior Storage Engineer</b> to support the Portsmouth Naval Shipyard (PNSY) Information Technology Programs for the Dept of the Navy. This initiative leverages advanced technologies and integrates critical defense systems to optimize ship maintenance through IT applications, systems, and training, ensuring sustained mission success in naval ship maintenance operations.</p><p><b>
Work is performed on site in Kittery, ME.</b></p><p><b>
Role:</b><br>
Design, implement, and maintain secure and resilient data storage systems while ensuring they adhere to organizational cybersecurity policies and industry standards. This role combines expertise in storage technologies with a strong understanding of cybersecurity principles to safeguard sensitive data, protect systems from unauthorized access, and enable effective disaster recovery and business continuity. This role with focus on areas such as; storage infrastructure design and deployment, data protection and security, backup and disaster recovery, monitoring and maintenance, collaboration and compliance, threat mitigation and incident response, and documentation and training.</p><div><b>
Responsibilities:</b><br>
<ul><li>Create, maintain, and optimize storage architectures such as, such as SAN (Storage Area Networks), NAS (Network Attached Storage), or cloud-based storage solutions.</li><li>Evaluate and implement secure storage hardware/software, ensuring systems meet performance, scalability, and retention requirements.</li><li>Apply strong security controls, including encryption, access management, and protection against ransomware and data breaches.</li><li>Develop and manage backup and disaster recovery strategies, including testing, continuity planning, and incident support.</li><li>Monitor and maintain storage environments, addressing vulnerabilities, performance issues, patching, and automation opportunities.</li><li>Collaborate with cybersecurity and incident response teams to identify risks, support investigations, and remediate storage related threats.</li><li>Ensure compliance with relevant regulations and standards, preparing audit materials and documentation.</li><li>Produce technical documentation and train internal teams on secure storage protocols.</li></ul></div>
<p></p><p><b>Qualifications</b>
</p><p><b>EDUCATION:</b> Bachelor's degree in Computer Networks &amp; Cybersecurity (or related field of study) or additional years of experience considered in lieu of degree</p><div><b><br>
REQUIRED EXPERTISE</b>:<br>
<ul><li>Ten (10+) years of experience in Information Technology, Cybersecurity, and network security, specializing in system administration, risk management, and incident response.</li><li>Deep understanding of storage technologies, including SAN (e.g., Dell EMC, NetApp), NAS, cloud storage (AWS S3, Azure Blob, Google Cloud Storage), and object storage systems.</li><li>Experience working with backup and recovery solutions like Veeam, Commvault, or Veritas.</li><li>Expertise in storage protocols (e.g., iSCSI, NFS, SMB/CIFS, FC, S3) and related file systems.</li><li>Knowledge of encryption standards (e.g., AES, TLS, SSL) and security best practices.</li><li>Familiarity with identity and access management (e.g., RBAC, ABAC) as applied to storage.</li><li>Understanding of ransomware protection and data loss prevention mechanisms.</li><li>Ability to manage complex systems and diagnose issues using root cause analysis.</li><li>Experience with testing and deploying disaster recovery workflows in complicated technical environments.</li><li>Strong teamwork and communication abilities to work across security, IT, and business units.</li><li>Attention to detail for compliance with policies and regulations.</li><li>Capability to stay updated on the latest in both cybersecurity threats and storage technologies.</li></ul></div><div><b>
REQUIRED CERTIFICATION</b>:<br>
<ul><li>Must be DoD 8570 compliant in one or more of the following: CompTIA CASP+CE, Security+CE, Network+CE, CYSA+, GCIH, GIAC , or CEH</li></ul><br>
<b>
REQUIRED CLEARANCE</b>:<br>
<ul><li>Active Secret clearance</li></ul><br>
<b>
NICE TO HAVE/DESRIED</b>:<br>
<ul><li>Certified in AWS, AWS CCP, EC-Council, or Scrum</li><li>Storage certifications: Dell EMC Proven Professional, NetApp Certified, SNIA Certified Professional.</li><li>Cybersecurity certifications: CISSP, CISM, CEH, CompTIA Security+, or GIAC Cyber Security certifications.</li><li>Cloud certifications: AWS Certified Solutions Architect, Microsoft Azure Administrator, or Google Professional Collaboration Engineer.</li></ul></div>
<p></p>Target salary range: $120,001 - $160,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.</div>

Senior Storage Engineer

Cvent

<div>Overview:
<p><b>
Our Culture and Impact</b></p><p>
Cvent is a leading meetings, events, and hospitality technology provider with more than 5,500+ employees and ~30,000 customers worldwide, including 60% of the Fortune 500. Founded in 1999, Cvent delivers a comprehensive event marketing and management platform for marketers and event professionals and offers software solutions to hotels, special event venues and destinations to help them grow their group/MICE and corporate travel business. Our technology brings millions of people together at events around the world. In short, we&rsquo;re transforming the meetings and events industry through innovative technology that powers the human connection.</p><p>
Cvent's strength lies in its people, fostering a culture where everyone is encouraged to think like entrepreneurs, taking risks and making decisions confidently. We value diverse perspectives and celebrate differences, working together with colleagues and clients to build strong connections.</p><p><b>
AI at Cvent: Leading the Future</b></p><p>
Are you ready to shape the future of work at the intersection of human expertise and AI innovation? At Cvent, we&rsquo;re committed to continuous learning and adaptation&mdash;AI isn&rsquo;t just a tool for us, it&rsquo;s part of our DNA. We&rsquo;re looking for candidates who are eager to evolve alongside technology. If you love to experiment boldly, share your discoveries, and help define best practices for AI-augmented work, you&rsquo;ll thrive here. Our team values professionals who thoughtfully integrate AI into their daily work, delivering exceptional results while relying on the human judgment and creativity that drive real innovation.</p><p>
Throughout our interview process, you&rsquo;ll have the chance to demonstrate how you use AI to learn, iterate, and amplify your impact. If you&rsquo;re excited to be part of a team that&rsquo;s leading the way in AI-powered collaboration, we&rsquo;d love to meet you.</p><p></p><p><br>
We're seeking a senior, builder-minded Application Security Engineer who can go deep on hard technical problems while setting the direction for how AI reshapes a security program. This isn't someone who just uses AI tooling &mdash; it's someone who architects it: agentic systems that automate threat modeling end to end, AI-assisted vulnerability management, and self-serve security capabilities that change how an engineering org works. The ideal candidate is equally credible doing a rigorous design review, writing the automation that scales it, and communicating the resulting risk decisions to leadership. This role owns product security for the teams it partners with &mdash; they look to this person as the accountable security voice for their roadmap.</p>
In This Role, You Will::
<ul><li>Architect and own AI-first security automation &mdash; design agentic systems and skills that take security work from intake (e.g., a Jira epic or design doc) through analysis to logged risk and published findings, with minimal manual handoff.</li><li>
Lead the development of security agents and AI tooling &mdash; define the architecture for LLM-integrated workflows (via APIs and MCP connectors), set patterns for tool/function design, and decide build-vs-buy across the toolchain.</li><li>
Drive AI-assisted threat modeling at scale &mdash; benchmark custom solutions against off-the-shelf agents, embed methodologies (STRIDE, PASTA, LINDDUN, MITRE ATT&amp;CK) into automation, and make pentest scoping decisions defensible and repeatable.</li><li>
Set the standard for AI feature security &mdash; define coverage models and assessment criteria for GenAI and AI/ML features, applying the OWASP LLM Top 10, OWASP AI Testing Guide, and MITRE ATLAS to real product risk.</li><li>
Own integration and scaling of SAST, DAST, and SCA across CI/CD, including AI-assisted triage layers that cut noise and accelerate remediation.</li><li>
Perform and lead deep secure design reviews, code reviews, threat modeling, and penetration testing for complex and high-risk systems, including cloud-native and AI-driven architectures.</li><li>
Own product security for an assigned product area or portfolio &mdash; serve as the accountable security partner for those teams, drive their threat modeling, design reviews, and risk decisions end to end, and own the security posture and remediation outcomes for that scope.</li><li>
Mentor Engineer II and mid-level teammates, review their automation and findings, and grow the team's AI and AppSec capability.</li><li>
Communicate risk clearly to both engineering and leadership audiences, and support compliance efforts across ISO 27001, SOC 2, and PCI.</li></ul>
Here's What You Need::
<ul><li>5+ years of hands-on experience in application security or secure software development, with demonstrated technical ownership.</li><li>
Strong scripting/programming skills &mdash; the ability to design and build non-trivial internal tools and automation in Python, JavaScript/TypeScript, or Bash.</li><li>
Proven experience integrating security tooling into CI/CD and the SDLC, and improving it over time.</li><li>
Strong familiarity with cloud platforms (AWS preferred; GCP or Azure acceptable) and cloud-native security, including securing applications built with AWS CDK / IaC.</li><li>
Proficiency with security testing and cloud security tools (e.g., Burp Suite, Checkmarx, Mend, Veracode, Fortify, ZAP, Wiz) and the judgment to know when manual testing beats automation.</li><li>
Deep understanding of the OWASP Top 10, CWE, SANS Top 25, secure coding practices, and web/API vulnerability classes.</li><li>
Demonstrated end-to-end ownership of at least one security tool, automation, or agentic/LLM-integrated workflow that is used in production or relied on by a team &mdash; designed, shipped, and depended on by others. This is the primary, screenable differentiator from the Engineer II role.</li></ul><p><b>
Bonus If You Have:</b></p><ul><li>
Experience securing AI/ML pipelines and a working understanding of adversarial ML, prompt injection, and agent-misuse risk.</li><li>
DevSecOps, IaC security, or supply-chain depth, and senior-relevant certifications (e.g., OSWE, OSCP, AWS Security &ndash; Specialty, CISSP).</li></ul><div><p><b>
Why You'll Love This Role</b></p></div><div><ul><li>
You'll define how AI transforms Application Security at scale &mdash; architecting automation and agents that change how an entire engineering org ships secure software.</li><li>
You'll join the ASRE team to innovate at the forefront of AI-assisted AppSec, with the autonomy to set technical direction.</li><li>
You'll work with teams who take security seriously and back you to drive meaningful, lasting change.</li><li>
You'll have both technical depth and leadership impact, with a path to grow into staff-level or lead roles.</li></ul></div><p></p><div><p><i><br>
This job posting is intended to comply with all applicable laws. If we learn during the course of our recruitment process that, due to an applicant&rsquo;s location, further information about the position is required, including certain salary information, this information in this posting will be supplemented accordingly.</i></p><p><i>
The estimated base salary range for new hires into this role is $120,000 - $160,000 annually + bonus depending on factors such as job-related knowledge, relevant experience, and location. We also offer a competitive benefits package, details of which can be found </i><i>here</i><i>.</i></p><div></div><div><br>
Hybrid:<b> 2 days in office</b></div><div><i><br>
We are not able to offer sponsorship for this position</i></div><div></div><div><i><br>
Physical Demands</i></div></div><br>
<p></p>
LinkedIn Remote Type: #LI-Hybrid Indeed Remote Type: WFH Flexible</div>

Senior Engineer, Application Security

Search 7800+ Senior security engineer jobs near you this August. New roles added regularly across leading industries. Apply today.