Open Chicago Cybersecurity jobs

Summary

Leads security architecture efforts across all cybersecurity domains for new technology implementations, major system changes and mergers/acquisitions at an insurance and financial-services company, and drives updates to security standards and policies in response to regulatory or business change. The role communicates risk to executive leadership, performs third-party and cloud security risk assessments, serves as subject-matter expert during incident response, and supports SOX, PCI and HIPAA/HITECH compliance. The position is remote-eligible from EST or CST US locations and is not eligible for visa sponsorship.

Summary

This is a Principal Engineer role owning cybersecurity design and analysis for multiple medical devices, including threat modeling, vulnerability scanning, and penetration/fuzz testing across embedded and hosted systems. The engineer monitors CWE/CVE threat intelligence, drives secure architecture across cross-functional teams, and interfaces with regulators on medical-device cybersecurity compliance standards such as UL-2900, ICS-CERT, and FIPS 140.

Summary

Delivers cybersecurity and risk consulting to financial-services clients, leading risk assessments and designing security programs covering identity and access management, cloud security across Azure/AWS/GCP, and data protection. Evaluates IT and application security controls against frameworks such as NIST CSF and NIST 800-53, and advises on emerging technologies including AI security. CISSP or CRISC credentials are relevant to the role.

Summary

Application security engineering role inside an information security team, implementing and administering SAST, DAST, IAST and SCA tooling along with application security posture management, and integrating that tooling into CI/CD pipelines. A large share of the work is developer-facing: resolving false positives, guiding remediation, evaluating security exception requests and reporting on findings, with secure coding knowledge in Java and Node.js and familiarity with the OWASP Top 10 and CWE expected. Note a seniority discrepancy: the title advertises a junior opening while the stated requirements include five years of experience, coaching junior engineers and the ability to function as a principal engineer.

Summary

Senior application security engineering role in an information security team, implementing and administering SAST, DAST, IAST, SCA and application security posture management tooling and integrating it into CI/CD pipelines. Beyond tooling, the role supports development teams on triaging and mitigating findings, evangelizes secure development practice, and scales DevSecOps workflows across a large organization in AWS and Azure using infrastructure as code such as Terraform or CloudFormation. Deep secure coding knowledge across languages, especially Java and Node.js, is required.

Summary

Internal audit role at a bank holding company focused on information technology and information security controls, executing a risk-based audit plan. The auditor works under an in-charge auditor through the planning, fieldwork and reporting phases, evaluating the design and effectiveness of internal controls across banking, mortgage, wealth management and corporate functions.

Summary

A governance, risk and compliance role on Ovative Group's information security team, reporting to the Head of Information Security and Privacy. The operational core is client security questionnaires, vendor security assessments, SOC 2 evidence collection and audit support, the risk register and policy lifecycle, plus privacy compliance work under CCPA and GDPR including data mapping and data subject requests. A large second half of the job is standing up AI governance: running AI tool and vendor intake, conducting AI risk assessments, maintaining an inventory of approved tools, agents and connectors, and delivering secure-AI training, alongside security awareness campaigns, phishing simulations and periodic access reviews.

Summary

Lead security engineering role covering data protection and API security at Northern Trust, spanning Zscaler DLP, Microsoft Purview, CASB and endpoint DLP alongside installation, configuration, upgrade, migration and administration of the Broadcom Layer7 API Gateway across development, UAT and production. The role designs high-availability, clustering and disaster recovery architectures, monitors security events and supports threat detection and incident response, integrates security platforms with SIEM, and produces runbooks and upgrade procedures. Seven or more years in cyber security, data protection, encryption or API security is required, with CISSP, CISM, CISA, GIAC or cloud security certifications preferred.

Summary

Senior individual-contributor role performing hands-on offensive security testing across Ecolab's commercial digital products, including web and mobile applications, APIs, cloud services, IoT platforms, PLC/IPC-connected equipment and embedded field devices. The engineer plans, scopes and executes assessments that surface exploitable vulnerabilities, attack paths, weak access controls, exposed secrets and cloud misconfigurations, using tools such as Burp Suite, OWASP ZAP, Snyk, Wiz, Nmap and GitHub Advanced Security, and validates findings from scanning, third-party pen tests and product security reviews. The role also mentors other engineers, supports threat modeling and secure architecture reviews, and includes authorized physical access testing of product hardware.

Summary

Lead role running hands-on offensive security testing across Ecolab's commercial digital product portfolio, including web and mobile applications, APIs, cloud services, IoT platforms, PLC/IPC-connected equipment and embedded field-deployed devices. The engineer spends most of the time testing while also leading a small internal team and defining engagement scope, testing methods, reporting standards, remediation validation and risk-based prioritization, using tools such as Burp Suite, OWASP ZAP, Snyk, Wiz, Nmap and GitHub Advanced Security. The work includes authorized physical access testing of product hardware and field devices, and translating findings into remediation guidance for engineering and business stakeholders.

Summary

Senior cybersecurity engineering role executing the tactical, hands-on elements of Constellation's security strategy, with a central focus on achieving North American Electric Reliability Corporation Critical Infrastructure Protection compliance across the utility's IT and power IT environments. The engineer implements system security measures for confidentiality, integrity, availability, authentication and non-repudiation, performs security reviews to identify gaps in security architecture, and helps develop security risk management plans. The role acts as a liaison to the security architect and to cloud and infrastructure operations teams, and works closely with physical security on new standards and remediation.

Summary

Senior cybersecurity engineering role executing the tactical, hands-on elements of Constellation's security strategy, with a central focus on achieving North American Electric Reliability Corporation Critical Infrastructure Protection compliance across the utility's IT and power IT environments. The engineer implements system security measures for confidentiality, integrity, availability, authentication and non-repudiation, performs security reviews to identify gaps in security architecture, and helps develop security risk management plans. The role acts as a liaison to the security architect and to cloud and infrastructure operations teams, and works closely with physical security on new standards and remediation.

Summary

Owns the privacy program for a software marketplace company and serves as its Data Protection Officer, developing privacy strategy, policies and procedures and keeping the organization compliant with GDPR, CCPA, HIPAA and related regulations. The work spans privacy training programs and communications, compliance monitoring, auditing and remediation, data mapping and classification, privacy risk assessment, and preparing responses to consumer, government and media privacy inquiries.

Summary

An executive security leadership role setting Uline's enterprise-wide security strategy, security operating model, policies, standards and controls, and driving risk management and regulatory compliance across the business. The role builds and leads the information security teams, identifies staffing and third-party vendor needs, and reports on security risks, incidents and performance to executive leadership, working alongside a 450-person in-house technology team. All Uline positions are on site, the company does not participate in the H-1B lottery, and new hires complete a pre-employment hair follicle drug screening.

Summary

Network security engineering at a global snack foods company, designing, deploying and managing enterprise security infrastructure including firewalls, intrusion detection and prevention, VPNs, network access control, next-generation and web application firewalls, and proxies. A distinctive part of the scope is network segmentation across corporate, manufacturing OT and ICS, and cloud environments, plus rolling out zero trust network architecture and monitoring traffic through SIEM, NDR and packet analysis. The role also carries security standards, policy and risk-assessment responsibility, and asks for five or more years in network security and three or more managing Palo Alto, Fortinet or Cisco firewalls.

Summary

A principal engineer role leading the technology behind United's insider threat prevention and detection and data protection programs, driving strategic initiatives that reduce cyber risk. The work centers on tools such as Splunk, Microsoft Purview and M365 across DLP, open egress vector management and excessive access permissions, paired with risk assessment, strategic roadmap development and executive-level presentation.

Summary

Leads a cloud security consulting practice built on Microsoft Azure, defining the offering portfolio, reference architectures and delivery and governance standards while providing executive oversight on strategic and high-risk engagements. The role carries direct commercial accountability for pipeline, bookings, revenue and gross margin, and involves executive-level conversations with CIOs, CISOs and CTOs alongside joint work with Microsoft and Cognizant account teams. Building and developing a team of security architects, consultants and engineers is a core responsibility.

Summary

Application security engineering role within CME Group's Global Information Security group, developing secure software reference designs, delivery systems and enterprise-wide solutions and contributing to security strategy and roadmap planning. The work is genuine software development held to secure SDLC discipline: implementing products, writing unit, integration and system tests, reviewing code to identify and mitigate defects, and producing design and technical documentation, grounded in cryptography, authentication and authorization, secure data handling, auditing and input validation. It also serves as a security liaison to other engineering divisions and external groups, and asks for a computer science or information systems degree or equivalent experience plus eight or more years in application development or infrastructure.

Summary

Senior threat hunting and incident response inside a bank's security program — leading technical analysis of emerging threats, building and testing detection rules with engineering teams, mapping findings to MITRE ATT&CK, and automating hunts, with Jupyter notebooks and AI tooling featuring prominently. Also covers forensic and eDiscovery investigation support and training security operations staff.

Summary

A staff-level role serving as the technical owner for the infrastructure and security group, setting architecture and standards and making the technical calls across infrastructure, DevOps and security engineering. The work covers end-to-end ownership of an AWS cloud platform, CI/CD and delivery automation with Terraform infrastructure as code, retiring legacy services and consolidating vendors to shrink attack surface, unifying human, service, machine and agent identity, running a staffed infrastructure and security incident response rotation, and driving security compliance and supply-chain scanning. Background sought includes a formal information security grounding, having led a SOC 2 or similar audit, and having led at least one enterprise breach or data-leak incident response.

Summary

A security architecture role defining and validating secure development standards for United's services, applications and websites, and embedding security throughout the product lifecycle with cross-functional teams. The work spans application security assessment and testing, threat modeling, secure coding against the OWASP Top 10 and CWE Top 25, SAST, DAST and SCA in CI/CD, cryptography and identity, and reference architecture and remediation guidance.

Summary

Principal-level security architecture role setting enterprise security strategy and designing repeatable secure reference architectures across identity and access management, AI, cloud infrastructure and secret management. The emphasis is on building paved-path guardrails so engineers can ship quickly without bypassing controls, running continuous threat modeling on critical product features and infrastructure, vetting third-party technologies and vendor integrations, and mentoring senior security staff through influence rather than direct authority. It asks for 10 or more years in cybersecurity including at least four at lead or enterprise architect level, and requires in-office presence on Tuesdays and Thursdays.

Summary

A cybersecurity engineering role focused on artificial-intelligence security at Wintrust. The job sits in a banking security context and is for someone shaping secure use of AI systems, controls, and engineering practices rather than a general helpdesk or operations role.

Summary

Lead engineer and primary technical owner of a Saviynt-based identity governance and administration platform, responsible for platform architecture, configuration and production readiness, joiner-mover-leaver lifecycle processes, access requests, certifications, provisioning logic and SaaS connectors and integrations. The role designs and enforces security controls including Conditional Access, Zero Trust principles and periodic access reviews, drives root-cause analysis and post-go-live stabilization, mentors junior engineers and shapes the long-term IGA roadmap. Seven or more years of IT experience with identity governance depth is required; candidates must be a US citizen or green card holder intending to naturalize, and must work full time on site within 50 miles of the employing Reserve Bank.

Summary

A senior individual-contributor security architecture role: evaluating cybersecurity principles, processes, and controls, leading assessment of new technologies against existing frameworks, and advising senior leaders during periods of vulnerability as a function-wide subject matter expert. Calls for seven-plus years delivering enterprise-level security solutions, advanced programming ability, and practical cloud-native experience.

Summary

A fractional security leader placed with the firm government-contracting clients rather than an internal security post, acting as trusted advisor and owning the direction of each client security program. The posting frames it as a leadership role that stays close enough to the work to keep the program moving forward.

Summary

A security engineering role focused on maturing a recently implemented Zero Trust program through policy refinement, tool optimization and roadmap development. Hands-on scope covers identity, access and secure connectivity controls including MFA, conditional access, privileged access, DNS and content filtering, secure web gateway and certificate-based controls, plus leading the selection, deployment and tuning of SIEM, EDR, XDR, IAM and cloud security tooling. The environment is hybrid across on-premises and cloud infrastructure, and the posting names certifications such as CCIE, CCSE or GIAC and lists Terraform and scripting as a plus.

Summary

A senior individual contributor cloud security engineering role, positioned explicitly a step above the existing Senior Cloud Security Engineer level as the person who sets technical direction for cloud security. The depth areas are secure architecture and threat modeling, detection engineering and incident response, and Kubernetes and platform security, across AWS, GCP, self-managed Kubernetes and self-managed data stores including MongoDB. It is a pure IC role with no direct reports, leading through standards, reference architectures, cross-team initiatives, mentorship and design review.

Summary

Security engineering role inside the IT organization of a large distributor and e-commerce operator, leading the design and hands-on implementation of security solutions with particular focus on user access and network protection. The work also covers reviewing existing systems and technologies for vulnerabilities, recommending improvements, and partnering with architects, developers, and leadership on security plans for new systems and applications. The posting requires eight or more years in an enterprise IT environment, prefers CISSP or Security Plus, states that all positions are on-site, notes a pre-employment hair follicle drug screening, and says the company does not participate in the H1-B lottery.

Summary

Automation lead for a bank identity and access management organization, building workflows on the Tines automation platform and integrations between IAM platforms, security tools, ticketing systems, and enterprise applications to cut manual effort in identity lifecycle management, access governance, privileged access, and compliance reporting. The role mixes hands-on automation development with roadmap, prioritization, and capability planning, including the Digital Coworker intelligent automation initiative. It also owns the metrics and dashboards that measure automation adoption, efficiency gains, and risk reduction.

Summary

Governance, risk, and compliance work for a bank identity and access management program: gathering and validating audit evidence, supporting internal and external audits and regulatory examinations, tracking findings and remediation to closure, and maintaining IAM policy, standard, and control documentation. Coverage spans identity governance and administration, privileged access management, access controls, authentication, authorization, and directory services, plus building IAM risk and control reporting, dashboards, and KPI and KCI metrics. It is an analyst role partnering with IAM engineers and auditors rather than a hands-on engineering position, calling for 3 to 7 years in security, IAM, risk, audit, or compliance.

Summary

Client-facing incident response consulting role investigating security incidents and producing detailed findings and remediation reports for the firm's clients. It sits one level below the manager posting on the same team and centers on hands-on investigation, forensic evidence collection, and incident management through recovery. Tooling named includes Splunk, Elastic, FortiSIEM, Microsoft Sentinel, SentinelOne, CrowdStrike, Carbon Black and Microsoft Defender for Endpoint.

Summary

Consulting-side incident response leadership role at an accounting and advisory firm, running complex cybersecurity IR engagements for clients and mentoring a team of responders. The scope covers oversight of major incidents through containment and eradication, executive-level briefings, and digital forensics across endpoint and cloud environments. Named tooling includes Microsoft Sentinel, Splunk, Elastic, FortiSIEM, CrowdStrike, SentinelOne, Carbon Black and Defender for Endpoint, with scripting in PowerShell, Python and Bash.

Summary

A product security engineering role in Zebra's Print and Encode business unit, embedding secure-by-design principles into the development of both hardware devices (thermal printers, barcode scanners) and their software, firmware, and cloud integrations. Responsibilities include threat modeling, enforcing a secure software development lifecycle, overseeing penetration testing and code reviews, and leading remediation of product security vulnerabilities. The position is hybrid, requiring a minimum of three days a week onsite in Lincolnshire, IL.

Summary

A cybersecurity assurance and trust role that serves as the security-facing partner to sales and business-development teams, leading the review and response to customer security questionnaires, assessments, and live security discussions. It centers on translating the company's security, privacy, and compliance posture into credible narratives, maintaining a customer trust center, and aligning security messaging with go-to-market goals. The role is strongly customer-facing and sales-enablement oriented rather than hands-on security engineering.

Summary

Leads Wolters Kluwer's global third-party (supplier) cyber risk management program, modernizing it from a questionnaire-driven approach toward continuous monitoring, technical validation, automation, and risk quantification. Responsibilities include third-party contract review, maintaining an enterprise inventory of supplier risk tiers, and reporting third-party cyber risk posture to senior leadership. It is a manager-level role that also leads and develops a team of risk professionals and technical reviewers.

Summary

A senior cybersecurity threat-response engineer at T-Mobile (Bellevue WA, Overland Park KS, or Downers Grove IL) analyzing security alerts, incidents, and threat intelligence and leading incident response from detection through recovery, including serving as Incident Commander. A blue-team incident-response engineering role.

Summary

A governance, risk, and audit lead role centered on Customer Identity and Access Management (CIAM) controls within a financial institution. The lead runs risk and control assessments, coordinates internal and external audits and regulatory examinations, tracks remediation, and evaluates client authentication, authorization, onboarding, and identity-proofing controls. The work is identity-security GRC rather than hands-on security engineering.

Summary

An IAM-focused risk, audit, and governance lead responsible for strengthening the organization's identity and access management control environment. The role leads internal and external audits of IAM processes and controls, coordinates audit evidence and regulatory examinations, tracks remediation, and produces risk and compliance reporting. It works across engineering, risk, compliance, and audit stakeholders rather than building systems directly.

Summary

Despite the engineering title, this is a business-analyst and product-management role supporting a financial institution's Identity and Access Management (IAM) program. The analyst gathers requirements, develops business cases, and helps drive IAM strategy and roadmap across capabilities such as identity governance, privileged access management, authentication, and authorization. It partners with product managers, engineering, risk, and audit teams rather than performing hands-on engineering.

Summary

A junior cybersecurity analyst role with a FedRAMP-accredited assessment organization, evaluating client cybersecurity documentation and evidence against FedRAMP, FISMA, and NIST RMF standards. It emphasizes scripting in Python, PowerShell, or Bash to automate assessments and reporting, plus vulnerability scanning with tools like Nessus/ACAS and DISA STIGs. The remote position requires up to 25 percent travel and obtaining a required industry certification.

Summary

A hands-on offensive-security role performing penetration testing and advancing internal attack methodologies, weighted toward hardware and embedded-device security rather than pure web-application testing. It requires low-level programming (C, C++, Assembly) and scripting, with FPGA, signal processing, and hardware debugging tools a strong plus, alongside cloud security testing. Sits in a multidisciplinary safety-science lab mixing electronic, optical, mechanical, security, and IT work.

Summary

A cybersecurity assessment and engineering role with a FedRAMP-accredited third-party assessment organization, leading advanced security assessments of client cloud systems against FedRAMP, FISMA, and NIST RMF. Responsibilities include secure architecture guidance, vulnerability scanning with tools such as Nessus, ACAS, and DISA STIGs, remediation validation, and client-facing interviews and reporting. This is a remote role focused primarily on FedRAMP.

Summary

Consulting role leading the design and implementation of enterprise identity and access management strategy for client organizations across cloud and hybrid environments. The posting covers IAM and zero trust architecture, identity lifecycle and governance, privileged access management, and federation standards including OAuth2, OIDC, SAML, and SCIM, with vendor platforms such as Entra ID, SailPoint, Saviynt, CyberArk, Ping Identity, and Okta.

Summary

Consulting role designing and implementing identity and access management solutions for clients across cloud and hybrid environments. The posting emphasizes authentication and federation standards, identity governance, access reviews and credential provisioning, security assessment and control evaluation against NIST, ISO, and CIS, and integration work with platforms such as Entra ID, SailPoint, Saviynt, CyberArk, Ping Identity, and Okta.

Summary

An enterprise (corporate) security engineering role at Braze focused on protecting employees, assets, and work locations through malware and advanced-threat investigations, DLP, SaaS and internal configuration hardening, IAM, SSO, MDM, and SIEM detection engineering. The role builds and documents security infrastructure and mentors junior team members. It includes participation in an on-call rotation and response to critical incidents; based in Chicago.

Summary

A cybersecurity leadership role directing TransUnion's detection engineering and automation function across endpoint, identity, network, and cloud, reporting to the SVP of Cyber Defense. The director owns the end-to-end detection lifecycle and drives automation across SOAR, SIEM, and EDR platforms while leading a team of roughly 14 engineers and one manager. Requires 10+ years in cybersecurity with at least 3 to 5 years in people leadership; hybrid with a minimum of two days a week in-office.

Summary

A senior identity and workforce security engineering lead designing authentication and access-management solutions on Zero Trust and least-privilege principles. The role requires deep hands-on expertise with Entra ID, Okta, PingFederate, and Azure/AWS security, plus application-security work securing Java microservices, React frontends, and mobile apps (OAuth/OIDC, SAML, MFA, JWT, TLS, API security). Strong threat-modeling and consultative skills are expected.

Summary

A leadership role owning enterprise security architecture, engineering, and exposure management for a global Fortune 500 environment. Scope spans endpoint, cloud, network, data protection, collaboration, and OT security, plus standing up a new Continuous Threat Exposure Management capability and enforcing vulnerability remediation SLAs. The focus is the proactive, hardening side of security across multi-cloud, on-premises, and industrial control system environments.

Summary

Manages Uline's IT security controls and applications — administering security systems, hardening the environment, and contributing to the threat-operations program, policy enforcement and security-awareness efforts. Expects 5+ years of IT security operations experience, with Security+ or CISSP highly desirable. On-site at the Wisconsin headquarters, with no H-1B sponsorship.

Summary

A CISO role at a managed services provider, owning security posture end-to-end, from internal risk and compliance through the SOC and incident response, while also delivering client-facing vCISO engagements and shaping the security products the company brings to market. It combines internal security leadership with an external, revenue-facing advisory dimension.

Summary

A hands-on data protection engineering role within a bank's IT organization, focused on discovering, classifying, monitoring, and protecting sensitive data and implementing data loss prevention controls. The role translates regulatory, privacy, and risk requirements into practical controls and sustainable operating processes in a regulated environment. It is part of an effort to mature the enterprise data protection program.

Summary

Lead cyber threat intelligence analyst at a bank, conducting hands-on analysis of threat actors, campaigns, malware, phishing, and financial-sector threats and producing tactical, operational, and strategic intelligence products for security teams and leadership. Maps activity to MITRE ATT&CK and supports threat hunting, detection engineering, incident response, and vulnerability management as a senior individual contributor. Requires working from a US Bank location three or more days per week; no visa sponsorship.

Summary

A product-security role in a medical-device context, supporting security across the lifecycle of diabetes glucose-monitoring products: developing cybersecurity deliverables for software releases, evaluating third-party vendor security, conducting vulnerability and risk assessments, and supporting incident response. The role emphasizes regulatory compliance and protection of manufacturing assets and cloud-hosted applications. This position can be performed remotely within the U.S.

Summary

A cyber security functional-lead role at a national accelerator laboratory, providing technical direction and coordination for security projects without direct supervisory authority, while also performing Analyst II duties such as configuring and administering security systems and developing security standards and procedures. The role translates program objectives into technical requirements and coordinates across analysts, engineers, and external partners. The position is not eligible for relocation, visa sponsorship, or referral bonus.

Summary

A client-facing IT audit and cybersecurity risk advisory role at a consulting and accounting firm, delivering risk, governance, internal audit, and compliance services with a HITRUST focus. The role sits within a Risk Advisory practice serving external clients rather than an internal security team. Work location arrangements are discussed per opportunity across several U.S. offices.

Summary

A client-facing virtual CISO role within a managed security services provider, acting as liaison between the SOC team and client executives to assess cybersecurity posture, maintain risk registers, and track progress against frameworks such as CIS Controls and NIST CSF. Notably, this is not a remote position — it requires being on-site at the provider's Security Operations Center — and a Public Trust background check is a limited requirement.

Summary

A staff application security engineer at Upside (a brick-and-mortar commerce/cashback platform), an individual-contributor AppSec role reporting to the Director of Information Security. The work is securing application code and payment systems — running SAST/SCA, reviewing Python, threat modeling, guiding security architecture, training engineers, and supporting AWS Control Tower/IAM and bug bounties. Requires 6+ years of app/product security including Python review and deep AWS security knowledge; hybrid in DC/Austin/Chicago/NYC, posted base $210,000-$230,000.

Summary

Principal technical program manager embedded in TransUnion's Cyber Defense organization, building the closed-loop learning system that ties incidents, near-misses and detections into continuous improvement. This is a program-leadership and operational-rigor role — owning post-incident reviews, detection-council governance, security metrics and executive reporting — rather than hands-on security engineering, and expects 10+ years working in or alongside SOC/detection-and-response teams. Hybrid, reporting to the SVP of Cyber Defense.

Summary

An application-security engineering role on Cboe's Cybersecurity team, partnering with engineering teams to secure containerized services running on Kubernetes. Work includes secure design reviews and threat modeling, code-level security reviews with remediation guidance, and integrating and operating security tooling such as SAST, dependency and container scanning, and secret detection in CI/CD pipelines. It is positioned as a growth role for someone with software development experience building their application-security skills under senior guidance.

Summary

A hands-on engineering role designing, building, testing, and shipping agentic AI systems that run within AbbVie's security stack for detection, triage, response, risk assessment, and policy enforcement. The engineer contributes production code from day one while developing expertise across AI/ML and security operations, working alongside senior engineers and researchers in autonomous cybersecurity. Based in North Chicago, IL.

Summary

A hands-on senior individual-contributor role on a team building AI agents that operate autonomously inside security environments to tackle hard security problems. The engineer architects, builds, and ships agentic AI systems while setting the technical standards for how they are developed, tested, and secured. It is explicitly not a management or pure-research position — the emphasis is writing production code and shipping systems. Based in North Chicago, IL.

Summary

Entry-level security analyst at the University of Chicago's Center for Translational Data Science, supporting protection of multi-petabyte research data on the GDC and Gen3 data commons. Hands-on with security-ticket triage, vulnerability management, basic incident response and log analysis, plus writing Python automation and supporting a zero-trust transition. Grant-funded and mentorship-oriented; on-site in Chicago.

Summary

A senior security-operations role at health insurer Elevance Health, leading a SOC analyst shift: serving as the escalation point during security-event investigations and incident response, mentoring junior analysts, and maintaining SOC playbooks and on-call coverage. The work also spans implementing and configuring network-security systems and coordinating security vendors. Hybrid with 1-2 in-office days per week and a stated preference for the Indianapolis office.

Summary

Senior IT security administrator supporting Uline's security operations — maintaining security controls and applications, developing security procedures, and contributing to the threat-operations program and security-awareness initiatives. Expects 8+ years of IT security operations experience with enterprise applications. On-site at the Wisconsin headquarters, with no H-1B sponsorship.

Summary

A cloud-security and DevSecOps engineer protecting cloud assets across AWS, Azure, and GCP for commercial, government (CJIS, CCCS), and Federal (FedRAMP) environments. You deploy and maintain protections like CNAPP, vulnerability detection, WAF, and firewalls, automate security self-verification, support compliance with standards such as NIST 800-53, SOC 2, and ISO, and assist with incident response, sometimes as incident coordinator.

Summary

This is a cybersecurity architecture and advisory role reporting to the bank's Cybersecurity Architect Senior Manager, split roughly 40% security architecture, 50% technical leadership, and 10% research and development, designing security solutions for third-party/vendor relationships and setting security direction alongside product and solution architects. It requires 2+ years of cybersecurity architecture experience plus 6+ years each of information-security and technology-delivery experience.

Summary

Identity and access management engineering role at iManage, owning IAM infrastructure across a Microsoft-centric environment — Entra ID as the primary identity provider, SSO integrations (SAML/OAuth/OIDC/SCIM), and privileged access via CyberArk. Enforces zero-trust and least-privilege/RBAC, automates user lifecycle with PowerShell and Graph API, leads IAM incident response, and covers network infrastructure as a secondary duty; individual contributor with on-call.

Summary

The most senior individual-contributor cloud-security role at trading platform NinjaTrader, owning cloud security architecture across Google Cloud Platform (IAM, VPC Service Controls, KMS, Security Command Center) and designing edge/perimeter defenses with Cloudflare and Google Cloud Armor. It is an IC role with no people management that sets security standards and leads incident and security reviews company-wide; based in Chicago.

Summary

Hands-on security engineering role at a quantitative trading firm focused on threat detection and incident response, including analyzing incidents via the MITRE ATT&CK framework, threat hunting across anomalous log data, and managing security infrastructure such as SIEM, EDR, IDS/IPS, MFA, and email security. The role leans on automation and API-driven orchestration to streamline response and includes vulnerability management plus securing the firm's growing internal AI and agentic-tooling footprint. Works alongside a managed security service provider (MSSP) and targets candidates with roughly 3-5 years in cybersecurity or security engineering.

Summary

A senior offensive-security role leading threat-emulation and adversarial-simulation exercises across enterprise networks, applications, cloud, and physical-security domains. Develops custom tools, payloads, and exploits, leads purple-team engagements, and mentors junior operators; expertise with C2 frameworks (Cobalt Strike, Metasploit, Mythic, Sliver) and EDR/XDR evasion expected.

Summary

A hands-on application-security engineering role helping scale a trading platform's security program, owning domains such as vulnerability management, application and API security, and supply-chain security. The work integrates security into design reviews, threat modeling, and CI/CD pipelines and involves building and tuning SAST, SCA, DAST, dependency, and container-security tooling, with some use of AI/LLMs. It emphasizes automation and developer enablement with significant autonomy.

Summary

Cloud security architect at a bank holding company — reviewing, validating, and guiding cloud-native and third-party security controls across business units, leading threat modeling for SaaS and PaaS products, and advising on identity and access for cloud services. Strategy-and-architecture work in a regulated banking environment rather than hands-on operations.

Summary

Leading offensive security operations against a major bank's AI/ML systems — adversarial testing of LLMs and model pipelines (prompt injection, data poisoning, model inversion, jailbreaks) alongside traditional red teaming, plus building custom tooling and mentoring red team engineers. A senior technical-authority role requiring 8+ years of relevant experience.

Summary

Working manager over a 4-6 person cyber monitoring and analysis team — providing tier 3 escalation support, driving alert tuning and reduction, leading automation and AI efforts for the SOC, and commanding incident response, plus performance reviews and other people-management duties. Tooling centers on Splunk SIEM and SOAR, CrowdStrike, and Symantec/Netskope DLP.

Summary

Tier 2 SOC analyst — investigating security incidents escalated from tier 1, performing advanced analysis of security logs, network traffic, and endpoint data, and executing containment, eradication, and recovery. Wants demonstrated SIEM content development (Splunk, QRadar, LogRhythm), SOAR experience, and familiarity with frameworks like NIST CSF.

Summary

Offensive security operator on an adversarial red team — covert black-box (and occasional white-box) assessments spanning network, web application, cloud, mobile, physical, and social engineering domains, including building C2 infrastructure with evasion techniques and using AI/LLM tooling to accelerate offensive research. Coordinating remediation retests with defensive teams is part of the job.

Summary

A Microsoft-ecosystem data-governance and security engineering role: hands-on ownership of Microsoft Purview (DLP, sensitivity and retention labels, insider risk, eDiscovery, audit), Entra ID, and Defender across a hybrid M365/Azure/on-prem environment, translating frameworks like CMMC, NIST 800-171, ISO 27001, HIPAA, and GDPR into enforceable technical controls. Includes participation in the security team's on-call rotation; wants 5+ years in infosec with at least 3 focused on data protection or governance.

Summary

Client-facing cybersecurity compliance consultant (internally titled Virtual Compliance Manager) performing point-in-time gap analyses and advising clients on maintaining regulatory compliance, developing compliance roadmaps, policies, and controls, and supporting audits. Explicitly not a remote position; required on-site at the Dot Security Operations Center.

Summary

A mid-level, hands-on GRC engineer role at a trading-platform company that spends as much time writing code and integrating systems as reviewing controls — automating continuous control monitoring, evidence collection, and audit readiness across SOC 2, ISO 27001, and SOX. It integrates compliance workflows with cloud providers, identity systems, ticketing, and CI/CD pipelines, aimed at someone who wants to move beyond spreadsheets into building compliance tooling.

Summary

Despite the listed title, the posting body describes a Network Infrastructure & Security Engineer focused on detection engineering: writing SQL-based behavioral detections (lateral movement, C2 beaconing, DNS tunneling, exfiltration) on top of Ocient's petabyte-scale telemetry engine, building the datasets and demo environment, and shaping network probe and data-collection strategy. It is an explicitly hands-on builder role, remote US-only with 10-25% travel, and the company cannot sponsor or transfer visas of any kind. Posted range: $170,000-$210,000 base, $226,000-$280,000 OTE.

Summary

Despite the cloud-security title, the description centers on managing a cloud database engineering and operations team — building repeatable infrastructure patterns, working with Azure PaaS databases (Cosmos, Postgres, SQL Server) and Ansible/ARM automation, and providing level-3 support and lifecycle management. Hybrid from Chicago or Richardson, TX with no relocation offered; sponsorship is not available, including for candidates currently on OPT.

Summary

Senior individual-contributor product security role on Zebra's Product & Solution Security team, partnering with product development teams to proactively reduce security risk across the product portfolio. Work centers on secure SDLC and shift-left practices, secure coding standards, vulnerability and secrets remediation, and ownership of security tooling and vendor engagement.

Summary

A broad security engineering role anchored in application security: you lead architecture reviews, threat modeling, code reviews, and penetration-testing coordination while also covering cloud, infrastructure, IAM, and vulnerability management. Expect to integrate SAST/DAST/SCA and secrets detection into CI/CD and partner across Engineering, DevOps, IT, and Compliance; the posting indicates a remote arrangement.

Summary

A security-architecture role at a pharmaceutical company, defining reusable security patterns and guardrails and driving secure-by-design across high-risk business applications. The work is advisory and architectural — representing security in design-authority boards, evaluating application and infrastructure designs, producing control architectures, and embedding security into delivery teams — rather than hands-on coding. Routed to Chicago; spans application and platform security.

Summary

A hands-on cloud security engineering role securing Azure and AWS through Policy-as-Code and Terraform Infrastructure-as-Code mapped to CIS and NIST 800-53. You would run CSPM tools such as Wiz and Microsoft Defender for Cloud, perform regular configuration assessments and audits, and investigate and respond to security incidents with root-cause analysis. It is an execution-focused engineering seat leaning on Terraform, Python automation, and Git-based CI/CD rather than policy writing alone.

Summary

Client-facing IT audit and cybersecurity risk advisory role at a national accounting and consulting firm, with a focus on HITRUST assessments. Work involves evaluating clients' IT and security controls and helping them meet compliance and risk-management requirements.

Summary

A senior information security and technology risk manager role at Old National Bank operating in the second line of defense: establishing and maintaining the enterprise information-security and technology-risk framework (policies, standards, monitoring), providing independent challenge and oversight of first-line controls, and advising business units on regulatory expectations and risk appetite. It is a governance and risk-management role rather than hands-on security engineering; Minneapolis, 98,400 to 199,000 dollars plus bonus.

Summary

Data protection role advancing enterprise controls over how sensitive data is classified, handled and monitored, working with cross-functional partners. Areas covered include data classification and lifecycle management, DLP platforms, Microsoft 365 and Purview, endpoint and cloud data protection, data movement and exposure risk analysis, insider threat detection and program metrics.

Summary

Insider threat analyst role designing and refining detection logic, leading alert triage and investigations, and improving monitoring quality with cross-functional partners. The work draws on endpoint and cloud telemetry, Microsoft 365 and Purview data classification, DLP platforms, Splunk, UEBA and behavioral analytics, exfiltration analysis, threat hunting and automation scripting.

Summary

Offensive security role conducting threat emulation, red team and purple team operations, and penetration tests against systems, networks, and applications, including lateral movement, privilege escalation, phishing and social engineering, and custom tooling in Python/Bash. Reports to a Director of Cybersecurity; primarily remote with occasional in-person attendance, 5+ years of red-team and pen-test experience, and certifications like OSCP or OSCE preferred.

Summary

An offensive-security role: a Red Team Operator running threat-emulation exercises, penetration tests, and purple-team operations to uncover vulnerabilities across systems, networks, and applications. Requires 5+ years of hands-on red teaming with expertise in phishing and social engineering, lateral movement, privilege escalation, and basic python/bash scripting; certifications such as OSCP, OSCE, or GPEN are a plus. Remote, with occasional in-person attendance at work events.

Summary

An identity and access management practice-lead role supporting a large client's IAM integration and migration effort, covering authentication and federation, authorization frameworks, secret management, identity governance (IGA), and privileged access management (PAM). Beyond hands-on solution architecture, the role carries significant pre-sales and business-development responsibility, including proposals, RFP responses, and effort estimation. It blends deep technical IAM delivery with client-facing sales support.

Summary

This is a senior network and firewall security engineering role for Cboe's global offices and data centers. The person designs, deploys, migrates, and troubleshoots Palo Alto firewall environments, segmentation, SSL decryption, routing, packet analysis, and secure connectivity across infrastructure and security teams.

Summary

A senior Identity and Access Management engineer at Ensono specializing in the ForgeRock platform — administering and tuning AM, IDM, DS, and Identity Gateway for high availability while building custom authentication journeys, scripts, and plugins in Java, JavaScript, or Groovy. It blends L3 operational support (SSO, federation, MFA, Zero Trust) with hands-on engineering and CI/CD/containerized deployment. Requires 6+ years in IAM with 2+ in ForgeRock; a specialist identity-engineering role.

Summary

This is a lead security engineering role for OCC's hybrid infrastructure. The person maintains cloud and on-premises security integrity, enforces security-as-code standards, leads critical cloud service rollouts, builds automation pipelines for provisioning and compliance, partners on secure cloud technology deployments, and improves security processes and tools.

Summary

This is a security-engineering role rather than a generic title-only opening. The JD points to hands-on work around AWS, Azure, and GCP, so the fit depends on wanting that specific slice of the role.

Summary

A hands-on technical project and delivery management role driving cybersecurity programs that let the bank adopt AI, including agentic AI systems and LLMs, securely. You would coordinate delivery so AI solutions ship with proper identity controls for human and non-human agent identities, data-protection controls for prompts and training data, and monitoring and response for AI workloads. It is project execution at the intersection of cybersecurity and AI, not coding.

Summary

This is a security-engineering role rather than a generic title-only opening. The JD points to hands-on work around Kubernetes, CI/CD automation, and AWS, so the fit depends on wanting that specific slice of the role.

Summary

IAM analyst role within UL Solutions' Global Cybersecurity team, supporting implementation and ongoing management of identity and access management solutions — provisioning, governance, and compliance with SOX/HIPAA/GDPR frameworks. Requires 3-5 years of IAM experience with tools like Azure AD, Saviynt, SailPoint, or Okta. Hybrid (3 days onsite) if near a UL office, otherwise fully remote.

Summary

A director-level IAM architect at CNA Insurance specializing in the intersection of AI and identity governance — responsible for defining how AI agents are treated as non-human identities with full lifecycle controls, while also driving AI-powered automation across provisioning, access certification, and anomaly detection. This goes beyond traditional IAM director work; the JD explicitly requires experience with agentic AI systems and AI governance frameworks alongside 10+ years in IAM platforms like Okta, SailPoint, and CyberArk.

Summary

A 6-month contract role (with possible extension or conversion) building the security and governance layer for enterprise AI rather than writing application code. The work is AI-specific threat modeling and controls — defending against prompt injection, data poisoning, model theft, and privacy leakage — plus authoring acceptable-use policies for generative AI, data-classification rules for training sets, and security standards for AI/ML pipelines. Suited to a security architect comfortable owning AI risk from the ground up at a consulting firm.

Summary

Senior vulnerability analyst joining Cboe's Global Vulnerability Management team, responsible for operating a risk-based vulnerability management program — scanning, risk analysis, remediation coordination with global infra teams, and building automation to scale detection and reporting. Four-day in-office model at Cboe's Chicago HQ; role is in financial market infrastructure, a regulated environment with significant audit expectations.

Summary

A consulting security architect role centered on modernizing client security operations centers: assessing current-state SOC capability across people, process, data, governance, and tooling, rationalizing fragmented platforms, and designing future-state operating models built on SIEM and SOAR, detection engineering, automated enrichment, and AI-assisted or agentic investigation workflows with human-in-the-loop decisioning. The output is strategy and roadmaps tied to cyber maturity, regulatory obligations, and staffing models, delivered through executive workshops with CIOs, CISOs, and cyber defense leaders. Strong preference for candidates who have modernized SOCs for energy and utilities or other critical infrastructure clients, with Google SecOps experience called out as a plus though the role is intentionally platform-agnostic.

Summary

A managing-director role at West Monroe leading and growing its cybersecurity practice — a market-facing, growth-oriented leadership role that is heavily business-development-focused rather than hands-on technical. The core responsibilities are developing executive relationships (CISOs, CTOs, CIOs, PE investors), originating and closing new cybersecurity business across strategy, risk management, and transaction services, developing go-to-market strategies for AI-focused cybersecurity offerings (AI governance, secure AI adoption), and serving as a trusted advisor and thought leader, often partnering with West Monroe's M&A and private-equity teams. A fit for a seasoned cybersecurity leader with deep advisory expertise and a strong professional network who can create demand and build pipeline; based across West Monroe's US offices.

Summary

An associate IAM engineer (1 to 3 years) at a precision-medicine AI company configuring SAML and OIDC SSO integrations, troubleshooting Okta as Tier 2/3, maintaining lifecycle automation, and supporting device assurance and access certifications. Chicago.

Summary

A director-level security management role running a Technology Risk unit rather than doing hands-on engineering. Responsibilities include approving information-security architecture, policies, and standards; directing IS security risk assessments and compliance audits; overseeing testing of hardware and software for security impact; and guiding incident investigation. A large share is people leadership, covering performance management, hiring, staffing, and setting unit strategy aligned to the broader security program.

Summary

A senior-director role at Prolaio owning information-security and cloud-operations strategy for its AI-driven, cloud-first healthcare platform, running continuous-security and continuous-compliance against HITRUST, ISO 27001 and 42001, HIPAA, and FDA expectations using modern DevSecOps and security-as-code. It is a senior security-and-cloud leadership seat for a regulated AI health product.

Summary

An associate-principal security engineer at the options clearinghouse managing privileged access systems (CyberArk, HashiCorp, PKI) with 24x7 support and AI-based security capabilities. This appears to be a second opening of the same role as REQ-4436. Chicago.

Summary

A leadership role owning the enterprise application security strategy across the software development lifecycle, setting standards for APIs, CI/CD pipelines, and the software supply chain, and embedding DevSecOps tooling like SAST, DAST, SCA, and secrets scanning. A notable focus is leading the shift toward securing AI-assisted and AI-generated development. You would manage roughly four direct reports plus about ten contractors and advise cybersecurity leadership, with 10-plus years in application security expected.

Summary

A hands-on cloud security engineering role protecting Azure and AWS environments by writing Policy-as-Code and Infrastructure-as-Code in Terraform, aligning controls to CIS and NIST 800-53, and running CSPM tooling like Wiz and Microsoft Defender for Cloud. Day to day mixes security assessments, incident investigation, and mentoring, so strong Terraform, Python, and CI/CD skills matter more than the title. Roughly 8 to 12 years of IT experience is expected.

Summary

A senior threat-hunting security engineer at an exchange operator, proactively hunting threats across the firm's market-infrastructure environment. Chicago.

Summary

A senior red team specialist at Cboe Global Markets who plans and executes adversary emulation engagements across endpoint, identity, cloud, SaaS, network, and application environments — with a specific mandate to translate offensive findings into actionable improvements for detection engineering, threat hunting, and incident response teams. This is a deeply technical, hands-on individual contributor role that requires active engagement across the entire attack chain. Four days in-office at Cboe HQ in Chicago.

Summary

A senior IAM engineer (II) at a precision-medicine AI company architecting and scaling its Okta tenant (SAML, OIDC, OAuth 2.0), building Okta Workflows lifecycle automation, managing AD-to-cloud identity sync, and serving as the Tier-3 authentication expert. Chicago.

Summary

A cybersecurity leadership role owning the global vulnerability management and security-configuration program across on-prem, cloud, and endpoints: discovery, risk-based prioritization, automation-led remediation, and enterprise hardening baselines with continuous drift detection, aligned to CTEM principles. It is a hands-on, engineering-led mandate running a lean team of roughly four employees plus about ten contractors, with regular executive reporting and a push toward AI-enabled prioritization.

Summary

Security operations engineering at a proprietary trading firm, covering daily monitoring, alert investigation and incident response across cloud and on-premises systems, plus vulnerability assessments and security reviews of systems and new technologies. A large share of the work is Microsoft-stack identity and data protection: Entra ID conditional access, MFA and PIM, Defender for Endpoint, Identity and O365, and Purview with sensitivity labels, DLP and insider risk policies, alongside AWS and network tooling. Automation in Python and PowerShell and system integration through Graph and REST APIs are treated as core to the role rather than optional extras.

Summary

A security-engineering role on AbbVie's Information Security Risk Management architecture team, focused on cybersecurity posture and hygiene rather than incident response. Hands-on work: scripting against application APIs to extract configuration data, building dashboards and alerts for configuration drift, documenting CIS baselines, and applying AI to scale security outcomes. Can be based virtually anywhere in the US.

Summary

A cybersecurity threat-management leadership role centered on emerging, AI-enabled attack techniques: building proactive threat scenarios and response playbooks, coordinating cross-functional triage and containment, and serving as the firm's subject-matter expert on AI-related threats. It is heavily communication-driven, producing executive- and regulator-ready reporting. Note the posting explicitly offers no visa sponsorship, so applicants must already be authorized to work in the U.S. with no H-1B, L-1, TN, or similar support.

Summary

Leadership role running the airline's cybersecurity operations center, with ownership of incident response, threat triage, detection engineering and cyber threat intelligence. It combines people management, coaching and security metrics with the rollout of AI-driven security workflows under human-in-the-loop governance.

Summary

A senior Cloud Security Engineer at Old National Bank — owns cloud-security tooling and posture-management across the bank's cloud surface. Multi-location: Lake Elmo MN (Washington core ring) / Chicago IL / Evansville IN. Forward-looking software role on Old National's growing Twin Cities footprint.

Summary

A senior manager role owning the medical-device cybersecurity program at a precision-medicine AI company, bridging enterprise security strategy and product-level device execution. The work is embedding secure-by-design and secure SDLC into device development, managing SBOM strategy, and ensuring alignment with FDA pre-market and post-market cybersecurity guidance (510(k), De Novo, PMA) and ISO 14971/13485. It includes mentoring analysts and overseeing threat modeling, vulnerability management, and penetration testing of hardware and embedded systems; requires seven-plus years in information security.

Summary

A security engineer on DRW's client-platforms (endpoint) team, securing the firm's employee devices and the systems they access. Endpoint-security engineering at the Chicago prop trader.

Summary

A senior cybersecurity engineer at a bank focused specifically on internet proxy and web-filtering operations, integrating automation, application and monitoring systems. The role collaborates with the Cybersecurity Operations Center on security-automation use cases and leans on knowledge of SIEM, SOAR/orchestration, and remote browser isolation or enterprise browsers. It requires 3+ years in proxy/filtering tools, is office-based, does not sponsor visas, and lists a range of 57K to 113K.

Summary

A full-stack software-engineering role inside AbbVie's Information Security and Risk Management org, building internal application-security tooling and platform capabilities rather than defending infrastructure directly. Uses modern full-stack practices and AI-assisted development to accelerate delivery. Hybrid; for a builder who wants to work in the AppSec and security-tooling space.

Summary

A cybersecurity IT audit manager role at Plante Moran, a public accounting and consulting firm, responsible for leading client engagements across IT risk assessments, IT internal audits, and security control evaluations from scoping through delivery. The role requires 5-7 years of technology risk or IT audit experience, CISA or CISSP preferred within one year, and 25-35% overnight travel. It is a client-facing professional services position with practice development responsibilities.

Summary

A senior cyber-defense engineer focused on data protection at a derivatives exchange, deploying DLP and Data Security Posture Management across endpoints, email, and cloud (GCP, Azure), and defining controls for generative-AI and LLM data exposure. Chicago.

Summary

A lead cloud security engineering role at a smart-access/IoT company (LiftMaster, Chamberlain, myQ), responsible for designing and enforcing security controls across AWS and Azure. Core work includes IAM, network segmentation, encryption, CSPM/CWPP tooling, Infrastructure-as-Code guardrails (Terraform, CloudFormation, Bicep), and securing containers and serverless (EKS, ECS, Lambda, AKS). The role carries people-leadership duties as well as hands-on cloud defense and compliance work (SOC 2, ISO 27001, NIST CSF, PCI DSS).

Summary

A senior identity-and-access-management engineering role at Moveworks (a ServiceNow company), and notably a hands-on developer role — coding, designing, building, and scaling IAM solutions across cloud infrastructure, SaaS applications, and internal systems. You would own IAM initiatives end to end: developing robust access models across AWS, Azure, and Kubernetes (with tools like Teleport and Terraform), reducing privilege sprawl through thoughtful role design, building observability through SIEM logging and metrics, modernizing user access reviews, and continuously de-risking IAM threats. A fit for an engineer who treats secure access as an enabler and is comfortable architecting and operationalizing automated IAM, not just designing it; based in Chicago.

Summary

A principal-level cloud security engineering role securing Azure and AWS platforms through Policy-as-Code and Terraform Infrastructure-as-Code aligned to CIS and NIST 800-53, plus CSPM tooling such as Wiz and Microsoft Defender for Cloud. Work spans security assessments, incident response with root-cause analysis, and mentoring junior engineers. It is a deeply hands-on engineering position where Terraform, Python automation, and Git-based CI/CD are the core skills.

Summary

A senior identity and access management leadership role defining governance across human, machine/service, and, notably, AI-agent identities. A big part of the mandate is pioneering identity frameworks for agentic AI: issuing unique agent identities, scoping task-based permissions, managing their lifecycle, and building guardrails against privilege escalation or identity sprawl by autonomous systems. It combines IAM strategy, risk modeling, and regulatory compliance with emerging AI governance.

Summary

A cybersecurity governance, risk and compliance role sitting in the Technology function as first line of defense. The work centers on assessing how cyber rules and regulations apply, providing controls oversight and assurance, and coordinating cyber-control evidence for regulators, auditors, and clients. It suits someone who blends genuine cybersecurity knowledge with audit or compliance experience and strong stakeholder communication, more of an assurance and governance role than a hands-on technical one.

Summary

A senior cybersecurity architect and systems engineer providing security and networking oversight for a department's mission-critical systems under strict government compliance (NIST SP 800-171/53, CMMC). You architect and maintain solutions like EDR, DLP, MFA, encryption, and SIEM platforms, serve as the incident-response lead, and drive audit preparation and technical controls within a highly regulated framework.

Summary

Directs HCSC's Cyber Fusion Center — its security operations center — owning SLA-driven threat detection and escalation, budget and resourcing, and continuous improvement of the insurer's cyber posture. Wants a bachelor's plus 12 years (or 16 years) in IT/security including five in leadership and direct SOC management experience spanning vulnerability management, incident handling, and forensics; willingness to work non-standard hours and travel frequently for investigations is expected, and CISSP is preferred.

Summary

A security engineering role designing, building, and scaling enterprise vulnerability management systems across Keeper's cloud, application, and corporate environments, covering vulnerability discovery, prioritization, automation, and offensive security initiatives. This is a security-focused role rather than product development. It is 100% remote in the US, with an optional hybrid schedule for candidates near El Dorado Hills, CA or Chicago, IL.

Summary

An information-security architect role specializing in AI risk management, focused on securing enterprise adoption of generative AI at Wolters Kluwer. The work involves assessing GenAI implementations, designing security controls, applying AI risk frameworks such as NIST AI RMF and ISO/IEC 42001, and threat modeling with the OWASP LLM Top 10. It expects a security certification such as CISSP, CISA, or CISM, plus hands-on familiarity with platforms like Azure OpenAI, AWS Bedrock, and Vertex AI.

Summary

An early-career seat on a cybersecurity consulting team, delivering risk and controls assessments, due diligence, and audits for enterprise and private equity clients under the firm's CAPE program for portfolio-wide security visibility. Consultants use the firm's proprietary Intellio Hunt tooling alongside other tools to hunt for indicators of compromise across cloud and on-premise environments, and are expected to explain findings to both technical and non-technical audiences. Listed as 1-2+ years of experience in cybersecurity, information security, or tech consulting, hybrid at two days a week in office, 30-50 percent travel, and no visa sponsorship.

Summary

A senior security-software-engineering role on Pinterest's Application Security team, helping keep its 619 million monthly users safe by building tooling, product enhancements, and the platform behind its secure development lifecycle. You would design and build the rules, processes, and platform for the SDLC, deliver and review well-tested code, conduct security and design reviews, and rework controls to address both increased AI-driven productivity and new AI threats. A fit for an engineer with 5+ years in product or application security and proficiency in a dynamic language like Python; remote (with rare in-office collaboration), posted range $155,584 to $320,320.

Summary

A security operations role focused on running and scaling enterprise security controls across Keeper's global organization, with the JD explicitly noting it centers on security operations execution and control ownership rather than observability platform engineering or application security program leadership. The work ties into Keeper's PAM platform and AI-driven threat detection. The position is 100% remote in the US, with an optional hybrid schedule for candidates near El Dorado Hills, CA or Chicago, IL.

Summary

A detection-engineering role building and operating SIEM, detection logic, and security telemetry across Keeper's cloud-native production and corporate environments. The work centers on security visibility and detection maturity rather than general software development. It is 100% remote in the US, with an optional hybrid schedule for candidates near El Dorado Hills, CA or Chicago, IL.

Summary

A senior QA analyst role on Keeper Security's Privileged Access Management team, ensuring the quality, reliability, and security of the KeeperPAM platform and Keeper Secrets Manager integrations. It is a QA and test seat embedded in a PAM product (100 percent remote from select locations), suited to QA engineers comfortable with security and platform integrations.

Summary

A senior application-security role on Nerdio's growing security team, building out the AppSec program from inception — its strategy, processes, and tooling — and integrating security into design reviews, threat modeling, code reviews, and penetration testing across web, mobile, and API products. It calls for 10+ years in application security, someone who has led the initial stand-up of an AppSec program, and familiarity with common vulnerabilities and SAST/DAST tooling. The role is remote within the United States.

Summary

Cybersecurity advisory consulting with a heavy private equity focus: leading risk assessments and controls reviews against NIST and similar frameworks, then turning them into implementation roadmaps for carve-outs, mergers, and acquisitions. The work is client-facing rather than hands-on engineering, covering scoping and cost estimates, compliance and regulatory frameworks such as SOC 1/2, PCI DSS, CMMC, FedRAMP, GDPR and CCPA, plus mentoring junior consultants and cross-selling into existing accounts. The posting states 30-50 percent travel per year, a hybrid schedule of 1-2 days a week in office, 7-10+ years of cybersecurity experience, and no visa sponsorship.

Summary

Security engineering role on a global governance, risk and compliance team, designing, developing and configuring GRC solutions in ServiceNow including third-party risk management, risk and control assessments, privacy risk assessments and compliance automation. Additional duties cover platform support and troubleshooting, user access management with periodic access reviews, integrating the GRC platform with other systems via APIs, and automating manual processes. The role is hybrid and based in Chicago, reporting to the senior manager for governance, risk and compliance.

Summary

Full-stack engineering on Grainger's Product Security team, building self-service automated security capabilities that engineering teams across the company consume: secrets management, vulnerability management, policy as code with OPA, and application security risk platforms. The framing is guardrails rather than gates, with ownership running from design and delivery through production support, plus coaching junior engineers and recording decisions in architecture decision records. The role is hybrid from the Lake Forest or Chicago offices and is not eligible for any form of visa sponsorship.

Summary

Security architecture role inside the information security organization of an HR and payroll SaaS company, defining how AI and machine learning systems are securely designed, deployed and governed across both the enterprise and the product portfolio. The architect holds a permanent seat on the AI Governance Committee as the security and compliance subject matter expert and represents AI security on the architecture review board, partnering with product and technology, data science, procurement, enterprise applications, legal and privacy. Described as hands-on and high visibility, and fully remote within the United States.