50 jobs found

Job Title: Site Reliability Operations Engineer - DevEx / AI Automation Location: Chandler, AZ / Charlotte, NC / Pennington, NJ Duration: Contract - 12 months Pay Range: $59.69/hr (W2) Job ID: 411043 About BCforward BCforward is a leading global IT consulting and workforce solutions firm providing services and support to Fortune 500 and government clients. Founded in 1998, BCforward has grown with our customers needs into a full-service business solutions provider. With delivery centers and offices across North America and India, we take pride in building long-term relationships and delivering excellence through innovation, collaboration, and integrity. Job Description We are seeking a Site Reliability Operations Engineer - DevEx / AI Automation to join our dynamic team. The ideal candidate will have strong experience in site reliability engineering, incident and problem management, automation, DevOps, and AI-enabled developer platforms and a proven ability to improve reliability, availability, performance, and operational effectiveness for a Developer Experience Platform. Responsibilities: Operate and improve the Developer Experience Platform to deliver stable, secure, and resilient services. Lead major-incident management, drive blameless post-incident reviews, perform root-cause analysis, and track corrective actions with clear executive communication. Advance service-management practices using platforms such as ServiceNow for workflow, reporting, CMDB, and service measurement. Identify recurring toil and implement automation to improve MTTD, MTTR, and support efficiency. Apply infrastructure as code, configuration management, automated testing, and release governance to reduce deployment risk. Execute capacity planning, performance engineering, availability management, disaster recovery, and resilience testing aligned to business-continuity principles. Partner across engineering, operations, security, and service management to deliver data-driven improvements. Support end users through established incident, request, escalation, and service-level processes. Required Skills & Qualifications: 5-7+ years in SRE, production operations, platform support, service management, DevOps, analytics, or related disciplines. Demonstrated experience with major-incident management, post-incident reviews, RCA, and executive communications. Hands-on knowledge of Microsoft 365 Copilot, GitHub Copilot, and Copilot Studio, including practical use of generative AI for engineering and operations. Experience integrating agentic solutions using Microsoft Copilot Studio, Azure AI services, LLM APIs, Power Platform, GitHub, Python, and cloud-native automation. Strong understanding of SDLC, SDM pipelines, DevOps operating models, CI/CD, automated build, and deployment processes. Jenkins and Ansible preferred. Proficiency in scripting with Python, PowerShell, Bash, or Groovy and experience writing automation scripts. Experience with Java, .NET, and Python for application development or production support, including debugging and failure analysis. Linux and Windows Server administration, command-line proficiency, and enterprise monitoring tools experience. Service-management platform experience such as ServiceNow for workflow and reporting, including CMDB and service metrics. Security and access management knowledge, including vulnerability remediation, audit evidence, regulatory controls, and secure operations. Oracle/SQL or comparable query skills for extraction, transformation, analysis, and reporting. Experience with Pandas, NumPy, Matplotlib, and Seaborn preferred. Bachelor's or master's degree in Computer Science, Information Systems, Engineering, Data Science, Statistics, Design, or related field, or equivalent practical experience. ITIL Foundation or higher certification. Relevant cloud, DevOps, SRE, security, or platform certifications. Preferred Skills: Knowledge of responsible AI and enterprise governance, including data privacy, least-privilege access, content safety, prompt-injection mitigation, and compliance. Experience with capacity, performance, availability, disaster recovery, and resilience testing practices. Proficiency with Tableau, Power BI, D3.js, or similar for data storytelling and executive-ready reporting. Experience leading service reviews, operational-readiness assessments, reliability initiatives, and cross-functional incident and problem management. Working knowledge of Microsoft Office, SharePoint, and collaboration and documentation platforms. Knowledge of user-experience design principles for dashboards, reporting, and developer-facing services. Why BCforward? At BCforward, we believe in advancing lives and careers. When you join our team, you gain access to: Competitive compensation and benefits. Opportunities for growth with global clients. A supportive, inclusive culture that values innovation and people. Exposure to cutting-edge technologies and projects. About Our Commitment BCforward is an equal opportunity employer. We value diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, age, disability, or veteran status. Interested? Apply Now! If this sounds like the right opportunity for you, please apply with your most recent resume.

ITC Digital Solutions is hiring a Sr. Security Engineer - Security Engineering Team to join our Aerospace team in Indianapolis, IN to support our government clients. The successful applicant will work closely with our clients to provide technical support in information security response, security monitoring, and supports audit/compliance activities. The role is focused in three main areas for Security Engineering and Operational activity. The successful applicant will have the opportunity to apply and grow their skill set, work with a motivated and entrepreneurial team, engage with a wide range of stakeholders, and build ITC's capabilities to serve our clients. Job Responsibilities As a Sr. Security Engineer - Security Engineering Team, you will: Run Activity - Monitoring and acting as required on the health of various Security tools. Incident Response - responding with appropriate actions as required regarding tooling within the remit of the SET. Triaging requests incoming to the Engineering Team mailbox and Service Management intake queue, ensuring ownership within the wider team is appropriately assigned and requests have ownership. Responsible for ensuring the integrity of client IT infrastructures. Responsible for keeping the lights green on all Security Toolkit Infrastructure within our remit. Support various toolsets including SIEM, IDPS, GVM and Malware Protection. Record and respond to health alerts from the Security Infrastructure we maintain. Configure and adjust policies, features, and enhancements as needed, both in response to security incidents and to accommodate client request for improvements. Troubleshooting security tools that may affect business applications when needed. Respond to and follow core IT Service Management Principles. Ddevelop and demonstrate a solid understanding of information security principles, including malware analysis, emerging threats, attack techniques, and vulnerability management. Required Qualifications: U.S. Citizenship is required. Eligible to obtain and maintain Government Security Clearance. 5-7 years of experience working in SOC environment as a Security Engineering Specialist. Experience supporting a large global enterprise environment Solid and demonstrable comprehension of Information Security including malware, emerging threats, attacks, and vulnerability management. Customer service including the resolution of customer escalations, incident handling response. Nice to have skills/qualifications: Cloud security experience. Programming and/or scripting language experience (C, .NET, Python, Perl, etc). Previous experience in Unix/Linux and the editor vi. Technical certifications considered asset are: CISSP, GCIH, GCIA, GCFA, GPEN, GCCF, CISA, CWSP, CCSP, CCNP, MSCE, Security+, or other relevant certification in vulnerability analysis, ethnical hacking techniques or penetration testing. Experience in the areas of change control, problem management, incident management and troubleshooting of security solutions. Technical proficiency in at least one enterprise SIEM platform (i.e. ArcSight, Envision, Q1 Radar, Nitro Security), and at least one enterprise Network Intrusion Detection System (i.e. HP Tipping Point, Sourcefire, McAfee) Familiarity with the Aerospace, Defense, or complex manufacturing industries. About ITC Digital Solutions: ITC Digital Solutions, a division of ITC Federal, delivers advanced technology solutions that help federal agencies modernize systems, harness data and AI, and adopt emerging technologies to advance their missions. Building on more than two decades of public sector experience, the team brings deep expertise in IT strategy, application development and testing, digital modernization, data and AI, and technology transformation across civilian, health, national security, and defense agencies. Disclaimer All qualified applicants will be considered for employment based on their skills and merit. Please be aware that ITC may capture your image (video or screenshot) during the interview process, and that image may be used for verification, including during the hiring and onboarding process. Applicants for employment in the U.S. must have valid work authorization that does not now and/or will not in the future require sponsorship of a visa for employment authorization in the U.S. by ITC. ITC discloses salary range information in compliance with state and local pay transparency obligations. The disclosed range represents the lowest to highest salary we, in good faith, believe we would pay for this role at the time of this posting, although we may ultimately pay more or less than the disclosed range, and the range may be modified in the future. The disclosed range takes into account the wide range of factors considered in making compensation decisions, including, but not limited to, geographic location, relevant education, qualifications, certifications, experience, skills, seniority, performance, sales- or revenue-based metrics, and business or organizational needs. At ITC, it is not typical for an individual to be hired at or near the top of the range for their role. The base salary range for the tagged location is $100,000-$120,000. Full-time regular employees are eligible for paid time off, medical, dental, and vision insurance, a 401(k), and any other benefits available to eligible employees. Note: No amount of pay is considered wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, or other form of compensation allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company's sole discretion, consistent with applicable law. Equal Opportunity Employer/Protected Veterans The contractor will not discharge or otherwise discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as part of their essential job functions may not disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge; (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer; or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c).

CFSA requires a senior, deeply hands-on Solution Architect resource to serve as the technical design authority for STAAND (Stronger Together Against Abuse and Neglect in DC), the District's federally certified Comprehensive Child Welfare Information System (CCWIS). STAAND is a person-centric, AI-enabled platform built on Microsoft Dynamics 365 and the Power Platform hosted in a Government Community Cloud (GCC) tenant, with Azure services operating in Microsoft's commercial cloud. It supports CFSA social workers, supervisors, private agency partners, providers, resource parents, and District sister agencies across nine functional modules - Intake and Investigations, Case Management, ICPC, Finance (Contracts, Service Logs, and Fiscal), Provider, Eligibility and Subsidy, Placement, Services, and Management Reports - plus six external portals (Mandated Reporter, MPD, NYTD, OSSE, Resource Parent, and Community). STAAND also fields CORA, an AI assistant supporting natural-language search and AI-assisted contact notes among other use cases. The Resource will own architecture, security design, AI engineering, and the platform-release change cadence required to keep STAAND current and improving. This is a build-and-design role, not an advisory or oversight role. The Resource is expected to personally configure, code, prototype, review, and troubleshoot in the platform while serving as the credible technical voice to CFSA executive leadership, STAAND Product Team, OCTO, Microsoft, and Federal Partners (ACF/Children's Bureau). The Resource will work under the direct supervision of the District DevOps Manager. Scope of Work and Responsibilities 3.1 Solution and Platform Architecture • Own and maintain the authoritative STAAND architecture: logical and physical data models, Dataverse table and relationship design, solution segmentation, environment strategy, and integration topology. • Personally build in the platform - model-driven app configuration, plug-ins and custom APIs (C#/.NET), PCF controls, TypeScript/JavaScript client extensions, Power Fx, and plug-in pipeline optimization. • Establish and enforce architecture standards, design patterns, naming conventions, and technical debt registers across all modules and portals. • Chair design authority review for significant changes; sign off on solution designs before build. • Diagnose deep platform issues: performance degradation, API and service-protection limits, plug-in execution ordering, solution layering conflicts, storage growth, portal rendering. • Maintain architecture artifacts sufficient to satisfy CCWIS review, federal audit, and District IT governance. 3.2 Cross-Cloud Architecture: GCC and Commercial Azure • Design, document, and harden the boundary between the GCC Dynamics/Power Platform tenant and Azure commercial-cloud services. • Define what data may traverse that boundary, in what form (de-identified, tokenized, aggregated, or full record), under what authorization, and with what logging - including explicit architectural boundaries for protected data categories such as Medicaid Enrollment. • Implement cross-tenant identity, managed identities, service principals, Key Vault secret lifecycle, private networking, and API gateway patterns. • Maintain a defensible position on data residency and FedRAMP authorization boundaries for every commercial-cloud service in use, and present that position to auditors and federal reviewers. 3.3 AI and Agentic Development • Serve as hands-on technical lead for CFSA's AI capability, including CORA and its expansion into agentic workflows. • Design, build, evaluate, and productionize agents in Azure AI Foundry and Copilot Studio: tool and function calling, orchestration and multi-agent patterns, grounding and retrieval over Dataverse and document stores, prompt and context engineering, structured output, and human-in-the-loop checkpoints. • Own AI evaluation discipline: golden datasets, automated evals, groundedness and hallucination measurement, regression testing on model or prompt changes, latency and cost benchmarking, controlled rollout. • Manage the AI model lifecycle - track model releases and deprecations, run comparative evaluation before adopting a new model, execute migrations without regression to worker-facing quality. • Implement responsible AI controls appropriate to a child welfare setting: content safety, PII/PHI handling, bias and fairness testing, explainability, audit logging of AI-influenced actions, and clear framing of AI output as decision support rather than decision making. • Support predictive and analytic capability aligned to agency mission priorities, ensuring models are validated, monitored for drift, and governed. • Build reusable AI platform assets - prompt libraries, agent templates, evaluation harnesses, observability dashboards. 3.4 Application and Platform Security • Own the security architecture of STAAND end to end; serve as technical counterpart to the agency ISSO, OCTO security, and District privacy officials. • Apply and evidence compliance with OCTO IT policies (octo.dc.gov/page/it-policies), NIST SP 800-53, FISMA, FedRAMP, HIPAA, 45 CFR 1355 (CCWIS), Title IV-E confidentiality, and District data protection law including DC Code 28-3851 et seq. breach notification obligations. • Design and enforce least privilege: Dataverse business unit and role architecture, row/column-level security, portal web roles and table permissions, privileged access management, separation of duties for finance and eligibility functions. • Lead secure SDLC: threat modeling, secure code review, static and dynamic analysis, dependency and supply-chain scanning, secrets management, remediation tracking with severity-based SLAs. • Support penetration tests, vulnerability assessments, and audit response; own STAAND-assigned POA&M items. • Define AI-specific security requirements: prompt injection defenses, tool-permission scoping, data exfiltration prevention, agent action auditing. • Contribute to incident response, continuity, and disaster recovery planning; validate RTO/RPO through periodic exercises. 3.5 Continuous Improvement and Release Management • Own the STAAND change pipeline from enhancement request through design, build, test, release, and post-release verification, including published release notes and coordination with the CISA training organization. • Plan and execute against Microsoft's Dynamics 365 biannual release waves and Power Platform service updates: early-access testing in a dedicated environment, deprecation and breaking-change assessment, and a documented impact and remediation plan per wave. • Evaluate new platform, Azure, and AI capabilities against the STAAND roadmap; run structured proofs of concept and make evidence-based adopt / trial / hold / retire recommendations. • Maintain a rolling multi-year technical roadmap balancing stabilization, platform health, security, federal compliance, and innovation. • Drive performance, reliability, and cost optimization - capacity and license consumption, Azure spend, storage tiering, API efficiency. • Advance DevOps maturity: source-controlled solutions, automated build and deploy pipelines, environment refresh, automated regression testing, release quality metrics. • Maintain and report the technical issues and risk register with mitigation owners and timelines. 3.6 Data, Interoperability, and Federal Reporting • Own the data architecture supporting AFCARS, NCANDS, NYTD, CFSR, and Title IV-E reporting, including lineage, quality rules, exception handling, and submission validation. • Design and maintain bi-directional exchanges with District and external partners consistent with CCWIS interoperability requirements. • Establish automated data quality controls, duplicate person detection and merge integrity, and reconciliation with legacy records. 3.7 Stakeholder and Senior Leadership Engagement • Translate between social work practice and technical architecture; observe real workflow with intake workers, investigators, case managers, placement staff, and fiscal teams before designing for it. • Brief the CFSA IT Steering Committee Members, CIO, STAAND Product Leadership, OCTO leadership, Council oversight staff, court monitors, and ACF/Children's Bureau reviewers, calibrating to each audience. • Serve as principal technical liaison to Microsoft (Industry Solutions Delivery, Customer Success, product groups) and to implementation and support vendors; hold them to architectural and quality standards. • Author decision memos, architecture decision records, briefing decks, and federal reporting content requiring minimal editing. • Mentor CFSA staff and other contract resources; build internal capability and reduce single-point-of-failure dependency. Dynamics 365 Customer Service (MB-230) Microsoft Certified: Power Platform Solution Architect Expert (PL-600) Microsoft Certified: Azure Solutions Architect Expert (AZ-305) Bachelor's degree in Computer Science, Software Engineering, Information Systems, Data Science, or a closely related technical discipline from an accr Progressive IT experience Solution or enterprise architecture on enterprise-scale, mission-critical systems Microsoft Dynamics 365 CE / Dataverse / Power Platform - hands-on Lead or principal architect on full D365 implementation lifecycles (min. 2 lifecycles) Microsoft Azure architecture and hands-on build (PaaS integration, data, identity) Generative AI / agentic development in production - Azure AI Foundry, Azure OpenAI, or Copilot Studio RAG / grounding, tool calling, agent orchestration, and AI evaluation methodology Application security in a regulated environment (NIST 800-53 or equivalent, threat modeling, secure SDLC) Government cloud delivery - GCC, GCC High, or Azure Government Pro-code D365 extensibility - C#/.NET plug-ins, custom APIs . click apply for full job details

Genesis10 is currently seeking a Windows Client Engineer for a contract position with a Global Manufacturing Company located in Pittsburgh, PA. This is a 12+ month contract opportunity. Compensation: $38.00 - $48.00 per hour, W2, based on qualifications Position Overview: We are looking for a hands-on Windows Client Engineer to manage and modernize our Windows endpoint estate using Microsoft Intune and SCCM (Configuration Manager), with a primary focus on driving down vulnerability risk. You will partner closely with our security team to review findings, translate them into deployable fixes, and build the packages and scripts to remediate them at scale. Key Responsibilities: Review outstanding vulnerabilities identified by Tenable and own the endpoint-side remediation workflow Build, test, and deploy remediation packages and solutions using Intune and SCCM Author and maintain remediation scripts (PowerShell), including detection and remediation logic Package and deploy third-party application updates that fall outside standard Microsoft patching Manage Windows Update policy through Windows Update for Business / WSUS / SCCM software update groups Partner with the security/vulnerability management team to triage findings and validate fixes Track remediation progress and report on compliance, patch coverage, and outstanding risk against SLAs Maintain configuration baselines and security hardening across the Windows client fleet Support co-management, device onboarding, compliance policies, and conditional access Document remediation procedures and contribute to a repeatable, well-tested deployment process Primary Requirements: Bachelor's degree or higher 3-5+ years of experience engineering and administering Windows endpoints in an enterprise environment Hands-on experience with both Microsoft Intune and SCCM/Configuration Manager, including application packaging and deployment Strong PowerShell scripting skills for automation, detection, and remediation Experience with Windows patch management (Windows Update for Business, WSUS, or SCCM software updates) Familiarity with vulnerability management concepts and tooling (Tenable experience strongly preferred) Understanding of CVEs, CVSS scoring, and how vulnerability findings map to real remediation actions Solid grasp of Windows OS internals, Active Directory, Group Policy, and Entra ID (Azure AD) Ability to test changes carefully and roll out fixes without disrupting end users Desired Skills: Experience with application packaging tools (PSADT, PatchMyPC) and MSI/MSIX Exposure to Microsoft Defender for Endpoint and its vulnerability management (TVM) integration Knowledge of security hardening frameworks (CIS Benchmarks, DISA STIGs) Relevant certifications (Microsoft MD-102, SC-200, or CompTIA Security+) Only candidates available and ready to work directly as Genesis10 employees will be considered for this position. If you have the described qualifications and are interested in this exciting opportunity, please apply! Ranked a Top Staffing Firm in the U.S. by Staffing Industry Analysts for six consecutive years, Genesis10 puts thousands of consultants and employees to work across the United States every year in contract, contract-for-hire, and permanent placement roles. With more than 300 active clients, Genesis10 provides access to many of the Fortune 100 firms and a variety of mid-market organizations across the full spectrum of industry verticals. For contract roles, Genesis10 offers the benefits listed below. If this is a perm-placement opportunity, our recruiter can talk you through the unique benefits offered for that particular client. Benefits of Working with Genesis10: Access to hundreds of clients, most who have been working with Genesis10 for 5-20+ years The opportunity to have a career-home in Genesis10; many of our consultants have been working exclusively with Genesis10 for years Access to an experienced, caring recruiting team (more than 7 years of experience, on average) Behavioral Health Platform Medical, Dental, Vision Health Savings Account Voluntary Hospital Indemnity (Critical Illness & Accident) Voluntary Term Life Insurance 401K Sick Pay (for applicable states/municipalities) Commuter Benefits (Dallas, NYC, SF, and Illinois) For multiple years running, Genesis10 has been recognized as a Top Staffing Firm in the U.S., as a Best Company for Work-Life Balance, as a Best Company for Career Growth, for Diversity, and for Leadership, amongst others. To learn more and to view all of our available career opportunities, please visit us at our website. Genesis10 is an Equal Opportunity Employer. Candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Job Description Job Description Senior Cloud Security Specialist 100% ONSITE in Washington DC Per Federal contract U.S. Citizenship Required Must be able to pass enhanced FBI background screening (criminal, financial and finger printing) for Public Trust clearance Performance Period: June 2026- Dec , with the possibility of multi-year extension based on performance W-2 or C2C Deadline to apply May 5th PROJECT DESCRIPTION: The IT Security Engineering team is seeking a Senior Cloud Security Specialist with deep expertise in AWS cloud services, cloud-native security tools and services. BACKGROUND: We are seeking a Senior Cloud Security Specialist to support the Security Engineering team within the IT division. This team is responsible for the strategy, design, deployment, and maintenance of effective security solutions in cloud, local, and hybrid environments. REQUIREMENTS: The candidate shall also demonstrate the knowledge and experience below: Required Experience: Minimum 5 years hands-on AWS security experience Personnel Qualifications AWS Certified Security - Specialty (strongly preferred) AWS Certified Solutions Architect - Professional or Associate Demonstrated experience implementing secure, scalable AWS cloud architectures following industry best security practices and security frameworks. Demonstrated federal experience and comprehensive knowledge in adopting and implementing federal cybersecurity requirements, including but not limited to the NIST Cybersecurity Framework, OMB Memorandum M-22-09, NIST SP 800-53 Possess deep analytical, problem-solving, and troubleshooting experience, to independently resolve complex security challenges. Proven ability to provide technical security consultation and advisory services with a proactive approach to identifying potential issues, raising questions, and engaging in open dialogue with team members and stakeholders to ensure security objectives are met. Strong understanding of security concepts and technologies related to Identity and Access Management (IAM), security engineering, network security design, security operations, security architecture, general engineering processes, cloud security, data loss protection, zero trust, DevSecOps and vulnerability management. Technical skills in AWS cloud security, security engineering, DevSecOps, scripting, and Infrastructure-as-code (IaC) Self-motivated and able to work independently Strong attention to detail The Consultant shall deliver, but not limited to, the following: Conduct regular security reviews of cloud infrastructure deployed by engineering teams Evaluate infrastructure-as-code against security standards Review and validate compliance with security policies and best practices Assess adherence to AWS Well-Architected Framework security pillar Identify and document security misconfigurations and non-compliant controls Develop and maintain security posture dashboards Create or update security configuration guides and playbooks Offer technical consultation to engineering teams on secure implementation Implement AWS security controls and services to ensure proper security hardening and other security engineering tasks. Develop and update AWS security configuration standards Conduct security training sessions for engineering teams Present findings and recommendations in team meetings Identify opportunities to automate security assessments Recommend security tooling improvements PLACE OF PERFORMANCE: On-site at FRB locations, Washington, DC CITIZEN STATUS: U.S. Citizenship is required per Federal Contract INTERVIEW: Selected candidates will participate in a phone screening. Those that pass the phone screening may be invited to an in-person interview. The use of video conference tools (e.g., MS Teams or WebEx) can be used in accordance with agency guidelines. Ref:

This job is with Braze, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At Braze, we have found our people. We're a genuinely approachable, exceptionally kind, and intensely passionate crew. We seek to ignite that passion by setting high standards, championing teamwork, and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity - inside and outside our organization. To flourish here, you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy, having accountability and being open to new perspectives are essential to our continued success. Our deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture. If you are driven to solve exhilarating challenges and have a bias toward action in the face of change, you will be empowered to make a real impact here, with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive, we can't wait to meet you. Braze is a modern, cloud-first SaaS company running entirely on cloud-native infrastructure - large-scale, distributed systems spanning AWS, GCP, and self-managed Kubernetes, backed by self-managed data stores such as MongoDB. We're looking for a Senior Cloud Security Engineer II to join our Security Engineering function as a senior individual contributor and technical leader for cloud security. This is a step up from our Senior Cloud Security Engineer role. Where a Senior engineer executes and improves our cloud security controls, a Senior Cloud Security Engineer II sets the technical direction: you define the standards and reference patterns other engineers build on, lead cross-team security initiatives end to end, take on the ambiguous problems that don't yet have a playbook (and write the playbook), and raise the bar for the whole team through mentorship and review. You'll go especially deep across three areas - secure architecture and threat modeling, detection engineering and incident response, and Kubernetes and platform security - and you'll shape how Braze does cloud security across Engineering. This is a pure IC role; you lead through technical depth and influence rather than direct people management. WHAT YOU'LL DO Set the technical direction (leadership & standards): Define the cloud security standards, guardrails, and reference architectures that Infrastructure, SRE, and Product Engineering build on - turning point-in-time fixes into durable, org-wide patterns Set your own objectives and roadmap for high-impact cloud security work, in partnership with Security Engineering leadership, and drive it to measurable outcomes Lead cross-functional security initiatives end to end - scope, timeline, stakeholders, and delivery - guiding technical debates to a decision and owning the result Mentor and uplevel other security and platform engineers through pairing, design review, and feedback; act as a force multiplier and the go-to technical resource for cloud security Represent cloud security in architecture and design forums, translating complex attack paths and risk into clear, actionable guidance engineers will actually adopt Secure architecture & threat modeling: Own threat modeling as a discipline for new cloud technologies, services, and patterns adopted across Engineering - making it a repeatable, scalable practice rather than a one-off exercise Partner with Infrastructure, SRE, and Product Engineering to design secure-by-default cloud architectures and build practical, scalable controls across AWS, GCP, and self-managed systems Drive control-plane and IAM security strategy across AWS and GCP, including relationships with external identity providers, RBAC models, and least privilege at scale Continually assess posture, surface systemic and emerging risk, and set the priorities that reduce it Detection engineering, incident response & automation: Advance our detection strategy: design high-signal detections and SIEM rules (with our SIEM Management function) and own detection coverage for cloud threats end to end Serve as a senior incident responder and cloud-forensics lead for cloud and run-time security investigations across AWS and GCP - and codify what you learn into standard IR playbooks and preventative controls Own and optimize security tooling such as CrowdStrike (EDR/CSPM/IR), Tenable, and native cloud security services, and lead our vulnerability management workflow - scanning, triage, prioritization, and remediation - for cloud assets Kubernetes & platform security: Own the security of our self-managed Kubernetes environments - control plane, nodes, workload isolation, admission control, run-time security, and the CI/CD supply chain feeding them Set the standards for Infrastructure-as-Code and pipeline security (Terraform preferred): design and harden IaC and CI/CD automation so security is built into how we ship Establish best practices for patch management, base-image hardening, and version management across containerized and VM-based environments Lead the security of large-scale, distributed systems and self-managed data stores (e.g., MongoDB), accounting for their real-world operational and security implications WHO YOU ARE You are a senior individual contributor who leads through technical depth and influence rather than authority. You can take an ambiguous, open-ended cloud security problem, define the objective yourself, and deliver a solution that becomes the way Braze does it going forward. You translate complex cloud attack paths, IAM misconfigurations, and multi-step threat scenarios into guidance engineers adopt, and you balance strong controls with operational reality. You raise the people around you - through mentorship, review, and the standards you set - and you stay current with the cloud security landscape, tools, and threats. Above all, you can walk someone through the messy middle - what you tried, what broke, and what you'd do differently. THE FEW HARD PREREQUISITES: These are the genuinely pass/fail requirements: Several years owning cloud security in production - on-call for it, not adjacent to it Hands-on, not theoretical: AWS as primary cloud, working GCP, self-managed Kubernetes You read and write code (Python, TF) For candidates based in the United States, the pay range for this position at the start of employment is expected to be between $149,000 and $235,000/year with an expected On Target Earnings (OTE) between $166,000 and $261,000/year (including bonus or commission). Your exact offer may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company. WHAT WE OFFER Braze benefits vary by location, and we encourage you to review our specific benefits offerings for each country at here . More details on benefits plans will be provided if you receive an offer of employment. From offering comprehensive benefits to fostering hybrid ways of working, we've got you covered so you can prioritize work-life harmony. Braze offers benefits such as: Competitive compensation that may include equity Retirement and Employee Stock Purchase Plans Flexible paid time off Comprehensive benefit plans covering medical, dental, vision, life, and disability Family services that include fertility benefits and equal paid parental leave Professional development supported by formal career pathing, learning platforms, and a yearly learning stipend A curated in-office employee experience, designed to foster community, team connections, and innovation Opportunities to give back to your community, including an annual company-wide Volunteer Week and donation matching Employee Resource Groups that provide supportive communities within Braze Collaborative, transparent, and fun culture recognized as a Great Place to Work ABOUT BRAZE Braze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging Braze helps brands deliver great customer experiences that drive value both for consumers and for their businesses. Built on a foundation of composable intelligence, BrazeAI allows marketers to combine and activate AI agents, models, and features at every touchpoint throughout the Braze Customer Engagement Platform for smarter, faster, and more meaningful customer engagement. From cross-channel messaging and journey orchestration to Al-powered decisioning and optimization, Braze enables companies to turn action into interaction through autonomous, 1:1 personalized experiences. The company has repeatedly been recognized as a Leader in marketing technology by industry analysts, and was voted a G2 "Best of Marketing and Digital Advertising Software Product" in 2025. Braze was also named a 2025 Best Companies To Work For by U.S. News and World Report, a 2025 America's Greatest Companies by Newsweek, and a 2025 Fortune Best Workplace in Technology by Great Place To Work , among other accolades . click apply for full job details

This job is with Braze, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At Braze, we have found our people. We're a genuinely approachable, exceptionally kind, and intensely passionate crew. We seek to ignite that passion by setting high standards, championing teamwork, and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity - inside and outside our organization. To flourish here, you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy, having accountability and being open to new perspectives are essential to our continued success. Our deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture. If you are driven to solve exhilarating challenges and have a bias toward action in the face of change, you will be empowered to make a real impact here, with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive, we can't wait to meet you. Braze is a modern, cloud-first SaaS company running entirely on cloud-native infrastructure - large-scale, distributed systems spanning AWS, GCP, and self-managed Kubernetes, backed by self-managed data stores such as MongoDB. We're looking for a Senior Cloud Security Engineer II to join our Security Engineering function as a senior individual contributor and technical leader for cloud security. This is a step up from our Senior Cloud Security Engineer role. Where a Senior engineer executes and improves our cloud security controls, a Senior Cloud Security Engineer II sets the technical direction: you define the standards and reference patterns other engineers build on, lead cross-team security initiatives end to end, take on the ambiguous problems that don't yet have a playbook (and write the playbook), and raise the bar for the whole team through mentorship and review. You'll go especially deep across three areas - secure architecture and threat modeling, detection engineering and incident response, and Kubernetes and platform security - and you'll shape how Braze does cloud security across Engineering. This is a pure IC role; you lead through technical depth and influence rather than direct people management. WHAT YOU'LL DO Set the technical direction (leadership & standards): Define the cloud security standards, guardrails, and reference architectures that Infrastructure, SRE, and Product Engineering build on - turning point-in-time fixes into durable, org-wide patterns Set your own objectives and roadmap for high-impact cloud security work, in partnership with Security Engineering leadership, and drive it to measurable outcomes Lead cross-functional security initiatives end to end - scope, timeline, stakeholders, and delivery - guiding technical debates to a decision and owning the result Mentor and uplevel other security and platform engineers through pairing, design review, and feedback; act as a force multiplier and the go-to technical resource for cloud security Represent cloud security in architecture and design forums, translating complex attack paths and risk into clear, actionable guidance engineers will actually adopt Secure architecture & threat modeling: Own threat modeling as a discipline for new cloud technologies, services, and patterns adopted across Engineering - making it a repeatable, scalable practice rather than a one-off exercise Partner with Infrastructure, SRE, and Product Engineering to design secure-by-default cloud architectures and build practical, scalable controls across AWS, GCP, and self-managed systems Drive control-plane and IAM security strategy across AWS and GCP, including relationships with external identity providers, RBAC models, and least privilege at scale Continually assess posture, surface systemic and emerging risk, and set the priorities that reduce it Detection engineering, incident response & automation: Advance our detection strategy: design high-signal detections and SIEM rules (with our SIEM Management function) and own detection coverage for cloud threats end to end Serve as a senior incident responder and cloud-forensics lead for cloud and run-time security investigations across AWS and GCP - and codify what you learn into standard IR playbooks and preventative controls Own and optimize security tooling such as CrowdStrike (EDR/CSPM/IR), Tenable, and native cloud security services, and lead our vulnerability management workflow - scanning, triage, prioritization, and remediation - for cloud assets Kubernetes & platform security: Own the security of our self-managed Kubernetes environments - control plane, nodes, workload isolation, admission control, run-time security, and the CI/CD supply chain feeding them Set the standards for Infrastructure-as-Code and pipeline security (Terraform preferred): design and harden IaC and CI/CD automation so security is built into how we ship Establish best practices for patch management, base-image hardening, and version management across containerized and VM-based environments Lead the security of large-scale, distributed systems and self-managed data stores (e.g., MongoDB), accounting for their real-world operational and security implications WHO YOU ARE You are a senior individual contributor who leads through technical depth and influence rather than authority. You can take an ambiguous, open-ended cloud security problem, define the objective yourself, and deliver a solution that becomes the way Braze does it going forward. You translate complex cloud attack paths, IAM misconfigurations, and multi-step threat scenarios into guidance engineers adopt, and you balance strong controls with operational reality. You raise the people around you - through mentorship, review, and the standards you set - and you stay current with the cloud security landscape, tools, and threats. Above all, you can walk someone through the messy middle - what you tried, what broke, and what you'd do differently. THE FEW HARD PREREQUISITES: These are the genuinely pass/fail requirements: Several years owning cloud security in production - on-call for it, not adjacent to it Hands-on, not theoretical: AWS as primary cloud, working GCP, self-managed Kubernetes You read and write code (Python, TF) For candidates based in the United States, the pay range for this position at the start of employment is expected to be between $149,000 and $235,000/year with an expected On Target Earnings (OTE) between $166,000 and $261,000/year (including bonus or commission). Your exact offer may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company. WHAT WE OFFER Braze benefits vary by location, and we encourage you to review our specific benefits offerings for each country at here . More details on benefits plans will be provided if you receive an offer of employment. From offering comprehensive benefits to fostering hybrid ways of working, we've got you covered so you can prioritize work-life harmony. Braze offers benefits such as: Competitive compensation that may include equity Retirement and Employee Stock Purchase Plans Flexible paid time off Comprehensive benefit plans covering medical, dental, vision, life, and disability Family services that include fertility benefits and equal paid parental leave Professional development supported by formal career pathing, learning platforms, and a yearly learning stipend A curated in-office employee experience, designed to foster community, team connections, and innovation Opportunities to give back to your community, including an annual company-wide Volunteer Week and donation matching Employee Resource Groups that provide supportive communities within Braze Collaborative, transparent, and fun culture recognized as a Great Place to Work ABOUT BRAZE Braze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging Braze helps brands deliver great customer experiences that drive value both for consumers and for their businesses. Built on a foundation of composable intelligence, BrazeAI allows marketers to combine and activate AI agents, models, and features at every touchpoint throughout the Braze Customer Engagement Platform for smarter, faster, and more meaningful customer engagement. From cross-channel messaging and journey orchestration to Al-powered decisioning and optimization, Braze enables companies to turn action into interaction through autonomous, 1:1 personalized experiences. The company has repeatedly been recognized as a Leader in marketing technology by industry analysts, and was voted a G2 "Best of Marketing and Digital Advertising Software Product" in 2025. Braze was also named a 2025 Best Companies To Work For by U.S. News and World Report, a 2025 America's Greatest Companies by Newsweek, and a 2025 Fortune Best Workplace in Technology by Great Place To Work , among other accolades . click apply for full job details

This job is with Braze, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At Braze, we have found our people. We're a genuinely approachable, exceptionally kind, and intensely passionate crew. We seek to ignite that passion by setting high standards, championing teamwork, and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity - inside and outside our organization. To flourish here, you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy, having accountability and being open to new perspectives are essential to our continued success. Our deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture. If you are driven to solve exhilarating challenges and have a bias toward action in the face of change, you will be empowered to make a real impact here, with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive, we can't wait to meet you. Braze is a modern, cloud-first SaaS company running entirely on cloud-native infrastructure - large-scale, distributed systems spanning AWS, GCP, and self-managed Kubernetes, backed by self-managed data stores such as MongoDB. We're looking for a Senior Cloud Security Engineer II to join our Security Engineering function as a senior individual contributor and technical leader for cloud security. This is a step up from our Senior Cloud Security Engineer role. Where a Senior engineer executes and improves our cloud security controls, a Senior Cloud Security Engineer II sets the technical direction: you define the standards and reference patterns other engineers build on, lead cross-team security initiatives end to end, take on the ambiguous problems that don't yet have a playbook (and write the playbook), and raise the bar for the whole team through mentorship and review. You'll go especially deep across three areas - secure architecture and threat modeling, detection engineering and incident response, and Kubernetes and platform security - and you'll shape how Braze does cloud security across Engineering. This is a pure IC role; you lead through technical depth and influence rather than direct people management. WHAT YOU'LL DO Set the technical direction (leadership & standards): Define the cloud security standards, guardrails, and reference architectures that Infrastructure, SRE, and Product Engineering build on - turning point-in-time fixes into durable, org-wide patterns Set your own objectives and roadmap for high-impact cloud security work, in partnership with Security Engineering leadership, and drive it to measurable outcomes Lead cross-functional security initiatives end to end - scope, timeline, stakeholders, and delivery - guiding technical debates to a decision and owning the result Mentor and uplevel other security and platform engineers through pairing, design review, and feedback; act as a force multiplier and the go-to technical resource for cloud security Represent cloud security in architecture and design forums, translating complex attack paths and risk into clear, actionable guidance engineers will actually adopt Secure architecture & threat modeling: Own threat modeling as a discipline for new cloud technologies, services, and patterns adopted across Engineering - making it a repeatable, scalable practice rather than a one-off exercise Partner with Infrastructure, SRE, and Product Engineering to design secure-by-default cloud architectures and build practical, scalable controls across AWS, GCP, and self-managed systems Drive control-plane and IAM security strategy across AWS and GCP, including relationships with external identity providers, RBAC models, and least privilege at scale Continually assess posture, surface systemic and emerging risk, and set the priorities that reduce it Detection engineering, incident response & automation: Advance our detection strategy: design high-signal detections and SIEM rules (with our SIEM Management function) and own detection coverage for cloud threats end to end Serve as a senior incident responder and cloud-forensics lead for cloud and run-time security investigations across AWS and GCP - and codify what you learn into standard IR playbooks and preventative controls Own and optimize security tooling such as CrowdStrike (EDR/CSPM/IR), Tenable, and native cloud security services, and lead our vulnerability management workflow - scanning, triage, prioritization, and remediation - for cloud assets Kubernetes & platform security: Own the security of our self-managed Kubernetes environments - control plane, nodes, workload isolation, admission control, run-time security, and the CI/CD supply chain feeding them Set the standards for Infrastructure-as-Code and pipeline security (Terraform preferred): design and harden IaC and CI/CD automation so security is built into how we ship Establish best practices for patch management, base-image hardening, and version management across containerized and VM-based environments Lead the security of large-scale, distributed systems and self-managed data stores (e.g., MongoDB), accounting for their real-world operational and security implications WHO YOU ARE You are a senior individual contributor who leads through technical depth and influence rather than authority. You can take an ambiguous, open-ended cloud security problem, define the objective yourself, and deliver a solution that becomes the way Braze does it going forward. You translate complex cloud attack paths, IAM misconfigurations, and multi-step threat scenarios into guidance engineers adopt, and you balance strong controls with operational reality. You raise the people around you - through mentorship, review, and the standards you set - and you stay current with the cloud security landscape, tools, and threats. Above all, you can walk someone through the messy middle - what you tried, what broke, and what you'd do differently. THE FEW HARD PREREQUISITES: These are the genuinely pass/fail requirements: Several years owning cloud security in production - on-call for it, not adjacent to it Hands-on, not theoretical: AWS as primary cloud, working GCP, self-managed Kubernetes You read and write code (Python, TF) For candidates based in the United States, the pay range for this position at the start of employment is expected to be between $149,000 and $235,000/year with an expected On Target Earnings (OTE) between $166,000 and $261,000/year (including bonus or commission). Your exact offer may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company. WHAT WE OFFER Braze benefits vary by location, and we encourage you to review our specific benefits offerings for each country at here . More details on benefits plans will be provided if you receive an offer of employment. From offering comprehensive benefits to fostering hybrid ways of working, we've got you covered so you can prioritize work-life harmony. Braze offers benefits such as: Competitive compensation that may include equity Retirement and Employee Stock Purchase Plans Flexible paid time off Comprehensive benefit plans covering medical, dental, vision, life, and disability Family services that include fertility benefits and equal paid parental leave Professional development supported by formal career pathing, learning platforms, and a yearly learning stipend A curated in-office employee experience, designed to foster community, team connections, and innovation Opportunities to give back to your community, including an annual company-wide Volunteer Week and donation matching Employee Resource Groups that provide supportive communities within Braze Collaborative, transparent, and fun culture recognized as a Great Place to Work ABOUT BRAZE Braze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging Braze helps brands deliver great customer experiences that drive value both for consumers and for their businesses. Built on a foundation of composable intelligence, BrazeAI allows marketers to combine and activate AI agents, models, and features at every touchpoint throughout the Braze Customer Engagement Platform for smarter, faster, and more meaningful customer engagement. From cross-channel messaging and journey orchestration to Al-powered decisioning and optimization, Braze enables companies to turn action into interaction through autonomous, 1:1 personalized experiences. The company has repeatedly been recognized as a Leader in marketing technology by industry analysts, and was voted a G2 "Best of Marketing and Digital Advertising Software Product" in 2025. Braze was also named a 2025 Best Companies To Work For by U.S. News and World Report, a 2025 America's Greatest Companies by Newsweek, and a 2025 Fortune Best Workplace in Technology by Great Place To Work , among other accolades . click apply for full job details

This job is with Braze, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At Braze, we have found our people. We're a genuinely approachable, exceptionally kind, and intensely passionate crew. We seek to ignite that passion by setting high standards, championing teamwork, and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity - inside and outside our organization. To flourish here, you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy, having accountability and being open to new perspectives are essential to our continued success. Our deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture. If you are driven to solve exhilarating challenges and have a bias toward action in the face of change, you will be empowered to make a real impact here, with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive, we can't wait to meet you. Braze is a modern, cloud-first SaaS company running entirely on cloud-native infrastructure - large-scale, distributed systems spanning AWS, GCP, and self-managed Kubernetes, backed by self-managed data stores such as MongoDB. We're looking for a Senior Cloud Security Engineer II to join our Security Engineering function as a senior individual contributor and technical leader for cloud security. This is a step up from our Senior Cloud Security Engineer role. Where a Senior engineer executes and improves our cloud security controls, a Senior Cloud Security Engineer II sets the technical direction: you define the standards and reference patterns other engineers build on, lead cross-team security initiatives end to end, take on the ambiguous problems that don't yet have a playbook (and write the playbook), and raise the bar for the whole team through mentorship and review. You'll go especially deep across three areas - secure architecture and threat modeling, detection engineering and incident response, and Kubernetes and platform security - and you'll shape how Braze does cloud security across Engineering. This is a pure IC role; you lead through technical depth and influence rather than direct people management. WHAT YOU'LL DO Set the technical direction (leadership & standards): Define the cloud security standards, guardrails, and reference architectures that Infrastructure, SRE, and Product Engineering build on - turning point-in-time fixes into durable, org-wide patterns Set your own objectives and roadmap for high-impact cloud security work, in partnership with Security Engineering leadership, and drive it to measurable outcomes Lead cross-functional security initiatives end to end - scope, timeline, stakeholders, and delivery - guiding technical debates to a decision and owning the result Mentor and uplevel other security and platform engineers through pairing, design review, and feedback; act as a force multiplier and the go-to technical resource for cloud security Represent cloud security in architecture and design forums, translating complex attack paths and risk into clear, actionable guidance engineers will actually adopt Secure architecture & threat modeling: Own threat modeling as a discipline for new cloud technologies, services, and patterns adopted across Engineering - making it a repeatable, scalable practice rather than a one-off exercise Partner with Infrastructure, SRE, and Product Engineering to design secure-by-default cloud architectures and build practical, scalable controls across AWS, GCP, and self-managed systems Drive control-plane and IAM security strategy across AWS and GCP, including relationships with external identity providers, RBAC models, and least privilege at scale Continually assess posture, surface systemic and emerging risk, and set the priorities that reduce it Detection engineering, incident response & automation: Advance our detection strategy: design high-signal detections and SIEM rules (with our SIEM Management function) and own detection coverage for cloud threats end to end Serve as a senior incident responder and cloud-forensics lead for cloud and run-time security investigations across AWS and GCP - and codify what you learn into standard IR playbooks and preventative controls Own and optimize security tooling such as CrowdStrike (EDR/CSPM/IR), Tenable, and native cloud security services, and lead our vulnerability management workflow - scanning, triage, prioritization, and remediation - for cloud assets Kubernetes & platform security: Own the security of our self-managed Kubernetes environments - control plane, nodes, workload isolation, admission control, run-time security, and the CI/CD supply chain feeding them Set the standards for Infrastructure-as-Code and pipeline security (Terraform preferred): design and harden IaC and CI/CD automation so security is built into how we ship Establish best practices for patch management, base-image hardening, and version management across containerized and VM-based environments Lead the security of large-scale, distributed systems and self-managed data stores (e.g., MongoDB), accounting for their real-world operational and security implications WHO YOU ARE You are a senior individual contributor who leads through technical depth and influence rather than authority. You can take an ambiguous, open-ended cloud security problem, define the objective yourself, and deliver a solution that becomes the way Braze does it going forward. You translate complex cloud attack paths, IAM misconfigurations, and multi-step threat scenarios into guidance engineers adopt, and you balance strong controls with operational reality. You raise the people around you - through mentorship, review, and the standards you set - and you stay current with the cloud security landscape, tools, and threats. Above all, you can walk someone through the messy middle - what you tried, what broke, and what you'd do differently. THE FEW HARD PREREQUISITES: These are the genuinely pass/fail requirements: Several years owning cloud security in production - on-call for it, not adjacent to it Hands-on, not theoretical: AWS as primary cloud, working GCP, self-managed Kubernetes You read and write code (Python, TF) For candidates based in the United States, the pay range for this position at the start of employment is expected to be between $149,000 and $235,000/year with an expected On Target Earnings (OTE) between $166,000 and $261,000/year (including bonus or commission). Your exact offer may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company. WHAT WE OFFER Braze benefits vary by location, and we encourage you to review our specific benefits offerings for each country at here . More details on benefits plans will be provided if you receive an offer of employment. From offering comprehensive benefits to fostering hybrid ways of working, we've got you covered so you can prioritize work-life harmony. Braze offers benefits such as: Competitive compensation that may include equity Retirement and Employee Stock Purchase Plans Flexible paid time off Comprehensive benefit plans covering medical, dental, vision, life, and disability Family services that include fertility benefits and equal paid parental leave Professional development supported by formal career pathing, learning platforms, and a yearly learning stipend A curated in-office employee experience, designed to foster community, team connections, and innovation Opportunities to give back to your community, including an annual company-wide Volunteer Week and donation matching Employee Resource Groups that provide supportive communities within Braze Collaborative, transparent, and fun culture recognized as a Great Place to Work ABOUT BRAZE Braze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging Braze helps brands deliver great customer experiences that drive value both for consumers and for their businesses. Built on a foundation of composable intelligence, BrazeAI allows marketers to combine and activate AI agents, models, and features at every touchpoint throughout the Braze Customer Engagement Platform for smarter, faster, and more meaningful customer engagement. From cross-channel messaging and journey orchestration to Al-powered decisioning and optimization, Braze enables companies to turn action into interaction through autonomous, 1:1 personalized experiences. The company has repeatedly been recognized as a Leader in marketing technology by industry analysts, and was voted a G2 "Best of Marketing and Digital Advertising Software Product" in 2025. Braze was also named a 2025 Best Companies To Work For by U.S. News and World Report, a 2025 America's Greatest Companies by Newsweek, and a 2025 Fortune Best Workplace in Technology by Great Place To Work , among other accolades . click apply for full job details

This job is with Braze, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At Braze, we have found our people. We're a genuinely approachable, exceptionally kind, and intensely passionate crew. We seek to ignite that passion by setting high standards, championing teamwork, and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity - inside and outside our organization. To flourish here, you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy, having accountability and being open to new perspectives are essential to our continued success. Our deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture. If you are driven to solve exhilarating challenges and have a bias toward action in the face of change, you will be empowered to make a real impact here, with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive, we can't wait to meet you. Braze is a modern, cloud-first SaaS company running entirely on cloud-native infrastructure - large-scale, distributed systems spanning AWS, GCP, and self-managed Kubernetes, backed by self-managed data stores such as MongoDB. We're looking for a Senior Cloud Security Engineer II to join our Security Engineering function as a senior individual contributor and technical leader for cloud security. This is a step up from our Senior Cloud Security Engineer role. Where a Senior engineer executes and improves our cloud security controls, a Senior Cloud Security Engineer II sets the technical direction: you define the standards and reference patterns other engineers build on, lead cross-team security initiatives end to end, take on the ambiguous problems that don't yet have a playbook (and write the playbook), and raise the bar for the whole team through mentorship and review. You'll go especially deep across three areas - secure architecture and threat modeling, detection engineering and incident response, and Kubernetes and platform security - and you'll shape how Braze does cloud security across Engineering. This is a pure IC role; you lead through technical depth and influence rather than direct people management. WHAT YOU'LL DO Set the technical direction (leadership & standards): Define the cloud security standards, guardrails, and reference architectures that Infrastructure, SRE, and Product Engineering build on - turning point-in-time fixes into durable, org-wide patterns Set your own objectives and roadmap for high-impact cloud security work, in partnership with Security Engineering leadership, and drive it to measurable outcomes Lead cross-functional security initiatives end to end - scope, timeline, stakeholders, and delivery - guiding technical debates to a decision and owning the result Mentor and uplevel other security and platform engineers through pairing, design review, and feedback; act as a force multiplier and the go-to technical resource for cloud security Represent cloud security in architecture and design forums, translating complex attack paths and risk into clear, actionable guidance engineers will actually adopt Secure architecture & threat modeling: Own threat modeling as a discipline for new cloud technologies, services, and patterns adopted across Engineering - making it a repeatable, scalable practice rather than a one-off exercise Partner with Infrastructure, SRE, and Product Engineering to design secure-by-default cloud architectures and build practical, scalable controls across AWS, GCP, and self-managed systems Drive control-plane and IAM security strategy across AWS and GCP, including relationships with external identity providers, RBAC models, and least privilege at scale Continually assess posture, surface systemic and emerging risk, and set the priorities that reduce it Detection engineering, incident response & automation: Advance our detection strategy: design high-signal detections and SIEM rules (with our SIEM Management function) and own detection coverage for cloud threats end to end Serve as a senior incident responder and cloud-forensics lead for cloud and run-time security investigations across AWS and GCP - and codify what you learn into standard IR playbooks and preventative controls Own and optimize security tooling such as CrowdStrike (EDR/CSPM/IR), Tenable, and native cloud security services, and lead our vulnerability management workflow - scanning, triage, prioritization, and remediation - for cloud assets Kubernetes & platform security: Own the security of our self-managed Kubernetes environments - control plane, nodes, workload isolation, admission control, run-time security, and the CI/CD supply chain feeding them Set the standards for Infrastructure-as-Code and pipeline security (Terraform preferred): design and harden IaC and CI/CD automation so security is built into how we ship Establish best practices for patch management, base-image hardening, and version management across containerized and VM-based environments Lead the security of large-scale, distributed systems and self-managed data stores (e.g., MongoDB), accounting for their real-world operational and security implications WHO YOU ARE You are a senior individual contributor who leads through technical depth and influence rather than authority. You can take an ambiguous, open-ended cloud security problem, define the objective yourself, and deliver a solution that becomes the way Braze does it going forward. You translate complex cloud attack paths, IAM misconfigurations, and multi-step threat scenarios into guidance engineers adopt, and you balance strong controls with operational reality. You raise the people around you - through mentorship, review, and the standards you set - and you stay current with the cloud security landscape, tools, and threats. Above all, you can walk someone through the messy middle - what you tried, what broke, and what you'd do differently. THE FEW HARD PREREQUISITES: These are the genuinely pass/fail requirements: Several years owning cloud security in production - on-call for it, not adjacent to it Hands-on, not theoretical: AWS as primary cloud, working GCP, self-managed Kubernetes You read and write code (Python, TF) For candidates based in the United States, the pay range for this position at the start of employment is expected to be between $149,000 and $235,000/year with an expected On Target Earnings (OTE) between $166,000 and $261,000/year (including bonus or commission). Your exact offer may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company. WHAT WE OFFER Braze benefits vary by location, and we encourage you to review our specific benefits offerings for each country at here . More details on benefits plans will be provided if you receive an offer of employment. From offering comprehensive benefits to fostering hybrid ways of working, we've got you covered so you can prioritize work-life harmony. Braze offers benefits such as: Competitive compensation that may include equity Retirement and Employee Stock Purchase Plans Flexible paid time off Comprehensive benefit plans covering medical, dental, vision, life, and disability Family services that include fertility benefits and equal paid parental leave Professional development supported by formal career pathing, learning platforms, and a yearly learning stipend A curated in-office employee experience, designed to foster community, team connections, and innovation Opportunities to give back to your community, including an annual company-wide Volunteer Week and donation matching Employee Resource Groups that provide supportive communities within Braze Collaborative, transparent, and fun culture recognized as a Great Place to Work ABOUT BRAZE Braze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging Braze helps brands deliver great customer experiences that drive value both for consumers and for their businesses. Built on a foundation of composable intelligence, BrazeAI allows marketers to combine and activate AI agents, models, and features at every touchpoint throughout the Braze Customer Engagement Platform for smarter, faster, and more meaningful customer engagement. From cross-channel messaging and journey orchestration to Al-powered decisioning and optimization, Braze enables companies to turn action into interaction through autonomous, 1:1 personalized experiences. The company has repeatedly been recognized as a Leader in marketing technology by industry analysts, and was voted a G2 "Best of Marketing and Digital Advertising Software Product" in 2025. Braze was also named a 2025 Best Companies To Work For by U.S. News and World Report, a 2025 America's Greatest Companies by Newsweek, and a 2025 Fortune Best Workplace in Technology by Great Place To Work , among other accolades . click apply for full job details

This job is with Braze, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At Braze, we have found our people. We're a genuinely approachable, exceptionally kind, and intensely passionate crew. We seek to ignite that passion by setting high standards, championing teamwork, and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity - inside and outside our organization. To flourish here, you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy, having accountability and being open to new perspectives are essential to our continued success. Our deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture. If you are driven to solve exhilarating challenges and have a bias toward action in the face of change, you will be empowered to make a real impact here, with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive, we can't wait to meet you. Braze is a modern, cloud-first SaaS company running entirely on cloud-native infrastructure - large-scale, distributed systems spanning AWS, GCP, and self-managed Kubernetes, backed by self-managed data stores such as MongoDB. We're looking for a Senior Cloud Security Engineer II to join our Security Engineering function as a senior individual contributor and technical leader for cloud security. This is a step up from our Senior Cloud Security Engineer role. Where a Senior engineer executes and improves our cloud security controls, a Senior Cloud Security Engineer II sets the technical direction: you define the standards and reference patterns other engineers build on, lead cross-team security initiatives end to end, take on the ambiguous problems that don't yet have a playbook (and write the playbook), and raise the bar for the whole team through mentorship and review. You'll go especially deep across three areas - secure architecture and threat modeling, detection engineering and incident response, and Kubernetes and platform security - and you'll shape how Braze does cloud security across Engineering. This is a pure IC role; you lead through technical depth and influence rather than direct people management. WHAT YOU'LL DO Set the technical direction (leadership & standards): Define the cloud security standards, guardrails, and reference architectures that Infrastructure, SRE, and Product Engineering build on - turning point-in-time fixes into durable, org-wide patterns Set your own objectives and roadmap for high-impact cloud security work, in partnership with Security Engineering leadership, and drive it to measurable outcomes Lead cross-functional security initiatives end to end - scope, timeline, stakeholders, and delivery - guiding technical debates to a decision and owning the result Mentor and uplevel other security and platform engineers through pairing, design review, and feedback; act as a force multiplier and the go-to technical resource for cloud security Represent cloud security in architecture and design forums, translating complex attack paths and risk into clear, actionable guidance engineers will actually adopt Secure architecture & threat modeling: Own threat modeling as a discipline for new cloud technologies, services, and patterns adopted across Engineering - making it a repeatable, scalable practice rather than a one-off exercise Partner with Infrastructure, SRE, and Product Engineering to design secure-by-default cloud architectures and build practical, scalable controls across AWS, GCP, and self-managed systems Drive control-plane and IAM security strategy across AWS and GCP, including relationships with external identity providers, RBAC models, and least privilege at scale Continually assess posture, surface systemic and emerging risk, and set the priorities that reduce it Detection engineering, incident response & automation: Advance our detection strategy: design high-signal detections and SIEM rules (with our SIEM Management function) and own detection coverage for cloud threats end to end Serve as a senior incident responder and cloud-forensics lead for cloud and run-time security investigations across AWS and GCP - and codify what you learn into standard IR playbooks and preventative controls Own and optimize security tooling such as CrowdStrike (EDR/CSPM/IR), Tenable, and native cloud security services, and lead our vulnerability management workflow - scanning, triage, prioritization, and remediation - for cloud assets Kubernetes & platform security: Own the security of our self-managed Kubernetes environments - control plane, nodes, workload isolation, admission control, run-time security, and the CI/CD supply chain feeding them Set the standards for Infrastructure-as-Code and pipeline security (Terraform preferred): design and harden IaC and CI/CD automation so security is built into how we ship Establish best practices for patch management, base-image hardening, and version management across containerized and VM-based environments Lead the security of large-scale, distributed systems and self-managed data stores (e.g., MongoDB), accounting for their real-world operational and security implications WHO YOU ARE You are a senior individual contributor who leads through technical depth and influence rather than authority. You can take an ambiguous, open-ended cloud security problem, define the objective yourself, and deliver a solution that becomes the way Braze does it going forward. You translate complex cloud attack paths, IAM misconfigurations, and multi-step threat scenarios into guidance engineers adopt, and you balance strong controls with operational reality. You raise the people around you - through mentorship, review, and the standards you set - and you stay current with the cloud security landscape, tools, and threats. Above all, you can walk someone through the messy middle - what you tried, what broke, and what you'd do differently. THE FEW HARD PREREQUISITES: These are the genuinely pass/fail requirements: Several years owning cloud security in production - on-call for it, not adjacent to it Hands-on, not theoretical: AWS as primary cloud, working GCP, self-managed Kubernetes You read and write code (Python, TF) For candidates based in the United States, the pay range for this position at the start of employment is expected to be between $149,000 and $235,000/year with an expected On Target Earnings (OTE) between $166,000 and $261,000/year (including bonus or commission). Your exact offer may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company. WHAT WE OFFER Braze benefits vary by location, and we encourage you to review our specific benefits offerings for each country at here . More details on benefits plans will be provided if you receive an offer of employment. From offering comprehensive benefits to fostering hybrid ways of working, we've got you covered so you can prioritize work-life harmony. Braze offers benefits such as: Competitive compensation that may include equity Retirement and Employee Stock Purchase Plans Flexible paid time off Comprehensive benefit plans covering medical, dental, vision, life, and disability Family services that include fertility benefits and equal paid parental leave Professional development supported by formal career pathing, learning platforms, and a yearly learning stipend A curated in-office employee experience, designed to foster community, team connections, and innovation Opportunities to give back to your community, including an annual company-wide Volunteer Week and donation matching Employee Resource Groups that provide supportive communities within Braze Collaborative, transparent, and fun culture recognized as a Great Place to Work ABOUT BRAZE Braze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging Braze helps brands deliver great customer experiences that drive value both for consumers and for their businesses. Built on a foundation of composable intelligence, BrazeAI allows marketers to combine and activate AI agents, models, and features at every touchpoint throughout the Braze Customer Engagement Platform for smarter, faster, and more meaningful customer engagement. From cross-channel messaging and journey orchestration to Al-powered decisioning and optimization, Braze enables companies to turn action into interaction through autonomous, 1:1 personalized experiences. The company has repeatedly been recognized as a Leader in marketing technology by industry analysts, and was voted a G2 "Best of Marketing and Digital Advertising Software Product" in 2025. Braze was also named a 2025 Best Companies To Work For by U.S. News and World Report, a 2025 America's Greatest Companies by Newsweek, and a 2025 Fortune Best Workplace in Technology by Great Place To Work , among other accolades . click apply for full job details

Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.

Job Description Job Description Security Risk Advisors Intl., LLC (SRA) is offering a Cloud Security Engineer position. This role is responsible for designing, implementing, and maintaining security controls across SRA's multi-cloud environment, spanning Microsoft Azure/Entra ID, Google Cloud Platform (GCP), and Amazon Web Services (AWS). The Cloud Security Engineer will work closely with internal IT, security operations, and engineering teams to ensure cloud infrastructure is deployed and maintained in a secure, compliant, and resilient manner. Essential Functions Design, implement, and maintain cloud security architectures across Azure/Entra ID, GCP, and AWS environments. Administer and continuously improve cloud identity and access management (IAM) policies, roles, and privilege models across all three platforms. Monitor cloud environments for misconfigurations, threats, and vulnerabilities using cloud-native and third-party security tooling (e.g., Defender for Cloud, Security Command Center, AWS Security Hub). Operationalize cloud vulnerability and patch management processes, ensuring timely remediation of identified risks. Implement and maintain Cloud Security Posture Management (CSPM) solutions to enforce security baselines and compliance standards. Develop and enforce cloud security policies, standards, and guardrails (e.g., Azure Policy, GCP Organization Policies, AWS SCPs). Collaborate with engineering and DevOps teams to embed security into CI/CD pipelines and infrastructure-as-code (IaC) workflows. Conduct cloud security assessments and architecture reviews for new and existing environments. Support incident response activities related to cloud infrastructure, including investigation, containment, and remediation. Create and maintain technical documentation for cloud security architectures, configurations, and operational procedures. Research and evaluate emerging cloud security technologies and provide recommendations for adoption. Develop detection content and security analytics in SRA's internal SOC applicable to cloud environments. Requirements Competencies In-depth understanding of: Microsoft Azure and Entra ID, including conditional access, PIM, and Defender for Cloud Google Cloud Platform (GCP) security services, including Security Command Center, IAM, and VPC Service Controls Amazon Web Services (AWS) security services, including IAM, GuardDuty, Security Hub, and AWS Config Cloud identity and access management principles and zero trust architecture Working knowledge of: Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platforms (CWPP) Infrastructure-as-Code (IaC) tools such as Terraform, Bicep, or CloudFormation Networking concepts as applied to cloud environments (VPCs, peering, private endpoints, firewalls) SIEM and EDR technologies in cloud-integrated environments Experience with: CI/CD pipeline security and DevSecOps practices Organizing or supporting penetration testing, purple team exercises, or cloud-focused security assessments Compliance frameworks relevant to cloud environments (e.g., CIS Benchmarks, NIST CSF, SOC 2) Moderate experience with: Scripting and automation using Python, PowerShell, or Bash Automation via tools such as Power Automate, Logic Apps, or cloud-native orchestration services Supervisory Responsibility None Work Environment This job operates on-site in a professional office environment or remotely as needed/required. This role routinely uses standard office equipment. Physical Demands The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this job, the employee is regularly required to talk and hear; use hands to finger, handle, or feel; and reach with hands and arms. The employee frequently is required to stand and walk. This is a largely sedentary role. Candidates with disabilities are encouraged to apply and email with any questions. Reasonable accommodations may be made to enable disabled individuals to perform the essential functions of this role. Position Type/Expected Hours of Work This is a full-time position and hours of work and days are Monday through Friday 8:30am to 5pm. Occasional evening and weekend work may be required as job duties demand. Travel Less than 5%. Required Education and Experience Punctuality and timely attendance to external client and internal stakeholder needs. A bachelor's degree in Information Technology, Computer Science, or a similar field of study, or equivalent experience. 3+ years of hands-on experience in cloud security engineering or a related role, with demonstrable experience across at least two of the three major cloud platforms (Azure, GCP, AWS). Relevant cloud security certifications preferred (e.g., AZ-500, SC-100, Google PCSE, AWS Security Specialty). A passion for learning about cloud security, emerging technologies, and threat landscapes. Excellent verbal and written communication skills. Strong time management and organizational skills. Other Duties Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice. EEO Statement Security Risk Advisors is an Equal Opportunity Employer and prohibits discrimination or harassment of any kind. All employment decisions at SRA are based on business needs, job requirements, and individual qualifications, without regard to race, color, sex, sexual orientation, gender identity or expression, age, religion, national origin, disability, marital or family status, veteran status, medical condition, or any similar category protected under federal, state, or local laws. Benefits Work with Experts : Robust internal training program, plus Company-paid external training. SRA recognizes the value of professional development for employees. Therefore, we encourage our employees to pursue continuing education and role-specific training. Every SRA employee is eligible to attend one training per year paid for by SRA. Mental Health Services : SRA has partnered with BetterHelp to provide SRA employees with free mental health support. BetterHelp connects individuals with licensed therapists for chat, video, and phone sessions. Medical / Dental / Other (regular full-time employees only) Generous medical, dental, and vision benefits at different price points. Company-paid disability and life insurance. Company 401(k) plan including annual 3% safe harbor contribution. Free patient advocacy service that helps find care providers and resolve insurance queries. Free financial advising. Generous parental leave, sick leave, and vacation policies. Possibility to work remotely or with a flexible schedule when needed and approved. Company-paid cell phone with discounted accessories. 1-2-3 Give Program: 1. SRA will give $1,000 to a charity of your choice. 2. If you give an additional amount (up to $1,000), then 3. SRA will match that amount up to $1,000. Other discounted, employee-paid benefits including pet insurance, legal support, and voluntary life insurance. SRA's mission is to level up every day to protect our clients and their customers. This begins with our team members and their experience. SRA prides itself on maintaining a culture where team members have a shared sense of support and belonging, consistent with our It's Personal company value. At SRA, we prioritize transparent career pathing, varied DEI programming and community groups, competitive benefits including mental health support, and an emphasis on a sustainable, healthy, and engaging work culture. SRA has twice been named a Best Place to Work by the Philadelphia Business Journal. These Essential Functions, Requirements, and Skills are guidelines. If you are a candidate who does not meet this exact job description but can demonstrate excellent organization, attention to detail, professionalism, flexibility, and self-direction in your professional background, we hope you apply. SRA values a diverse workplace and strongly encourages women, people of color, LGBTQ+ individuals, people with disabilities, members of ethnic minorities, and veterans to apply. Salary Range : $90k - 130k

Job Description Job Description Dark Wolf Solutions is seeking a Senior Security Control Assessor Representative (SCAR) to conduct independent comprehensive assessments of the management, operation, and technical security controls and control enhancements employed within, or inherited by, an Information technology (IT) system to determine the overall effectiveness of the controls. The SCAR will perform reviews of security artifacts for system authorizations, assessing both the technical and functional adequacy as required for application and software cybersecurity readiness. The SCAR candidate must have prior experience in authorizing tools/applications, systems, and/or enclaves. Additionally, knowledge of network security, technologies, processes, and practices designed for the prevention of damage to, protection of, and restoration of computers, communications systems, services, and various types of communications technologies. The SCAR candidate must be knowledgeable and proficient in assessing DoD GovCloud environments to include testing controls and validating artifacts. A successful candidate will have a strong foundational understanding of NIST, DOD, and DAF cybersecurity focused guidance. This position can be based out of any Dark Wolf Office location and will be a hybrid schedule. Additional responsibilities include: Key Responsibilities: Evaluating IT infrastructure in terms of risk to the organization and defining artifacts required to meet Federal, DoD and DAF requirements Assessing IT systems and architecture to ensure compliance with the Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), NIST 800-53 revision 5 and applicable guidance Supporting the system/application assessment and authorization (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks and resulting artifacts mandated by governing DoD and AF policies, and applicable mandates Collecting, reviewing and verifying documented business processes within process narratives or flowcharts, identifying risks and validating proficiency of mitigating controls Reviewing risk and control matrices and testing plans for key controls and determines effectiveness Identifying control gaps, reviewing and testing the design of existing controls. Formulating clear and concise conclusions on internal controls and business process efficiency Recommending policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access to systems, networks, and data Conducting risk and vulnerability assessments of installed information systems to identify vulnerabilities, risks, and protection needs Reviewing Plans of Actions & Milestones (POA&Ms) Providing recommendations and reports to the Security Control Assessor (SCA), Authorizing Official (AO), Chief Information Security Officer (CISO) Reviewing network and systems design to ensure accuracy Ensuring the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services Required Qualifications: 15+ years of relevant Cyber experience 15+ years prior experience as a Security Control Assessor/Representative RMF Engineer, ISSO, ISSM and/or information assurance engineer Cloud Platform experience with at least one service offering from AWS, Azure, or Google GCP Hands-on eMASS and/or Xacta experience completing full system lifecycle activities Experience with Air Force risk management policies/procedures, to include, DODI 8510.01, AFI 17-101 Experience with Cloud Computing Security Requirements Guide (CC SRG) Knowledgeable with DoD DevSecOps Fundamentals Playbook Experience evaluating information security compliance against STIGs Ability to clearly articulate ideas Strong technical writing abilities to author reports for AO and CISO dissemination Exudes confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders Ability to use prior experience and knowledge to address new situations Certification requirements (at least one of the following): SecurityX / CASP+, CCISO, CGRC/CAP, CISA, CISM, CISSO, CISSP, CISSP-ISSEP, Cloud+, CySA+, FITSP-A, GCSA, GSEC, GSLC, GSNA, PenTest+, Security+ B.A. or B.S. Information Security, Computer Science or related discipline US Citizenship and currently possess a Top Secret security clearance Desired Qualifications: Experience with Fast Track ATO Handbook & AF Continuous ATO Playbook Familiarity with CI/CD Pipelines DevSecOps experience Sharepoint, JIRA, Confluence familiarity The salary range for this position is $140,000.00 - $145,000.00 commensurate on experience and technical skillset. We are open to considering a variety of levels of experience for these projects and potential for 1099 hourly opportunity. We are proud to be an EEO/AA Employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.

Job Description Job Description Job Description We are seeking a Security Software Engineer to build and harden software systems supporting DoD programs operating under CMMC/NIST 800-171/FedRAMP compliance requirements. You will embed security across the SDLC-from design and code review through CI/CD and cloud deployment-working alongside engineering, DevSecOps, and IT teams in a regulated, cloud-native environment (AWS Commercial and GovCloud, Azure GCC High). Responsibilities Core Engineering & Secure Development Design and develop secure software with a security-first mindset baked into every phase of the SDLC. Apply secure coding standards, threat modeling, and vulnerability mitigation aligned to NIST 800-53 and CMMC Level 2/3 controls. Conduct architecture reviews and code hardening to address OWASP Top 10 and DoD STIGs. Automate security gates in CI/CD pipelines (SAST, DAST, dependency scanning, secrets detection). Security Architecture & Controls Design secure system and API architectures for multi-tenant cloud environments, including GCC High and FedRAMP-authorized platforms. Implement IAM controls, JIT provisioning, SSO/SAML/OIDC flows, and least-privilege authorization frameworks (e.g., Cognito, Azure AD). Instrument applications with security logging and monitoring that satisfies audit and continuous monitoring requirements (AU/SI control families). Vulnerability Management & Response Lead code reviews, SAST/DAST scans, and targeted penetration testing; document findings against control frameworks. Triage and remediate vulnerabilities within POA&M timelines; maintain artifact evidence for compliance assessments. Support incident response for application-layer events; contribute to after-action reports and corrective action plans. Cross-functional Collaboration Serve as the embedded security champion for engineering squads, raising the security bar through mentorship and code review culture. Develop and deliver security training and runbooks tailored to engineering and DevOps team members. Collaborate with DevOps/SRE to enforce secure IaC, WAF rules, network controls, and runtime monitoring across AWS and Azure environments. Required Qualifications Bachelor's degree in Computer Science, Engineering, or related field-or equivalent experience. 3+ years of software engineering experience with a strong focus on security. Proficiency in one or more programming languages (e.g., JavaScript/TypeScript, Python, Go, C#). Experience with secure coding practices and frameworks. Strong understanding of application security principles, including: OWASP Top 10 Secure API/REST design Cryptography fundamentals Authentication/authorization patterns Experience with code scanning tools (SAST/DAST), threat modeling, and penetration testing. Familiarity with NIST 800-171, CMMC, or FedRAMP security control requirements and evidence collection. Hands-on experience with AWS and/or Azure security services (IAM, WAF, Security Hub, Defender, Sentinel); GCC High or GovCloud experience a plus. Preferred Qualifications Experience with container security (Docker, ECS). Working knowledge of Zero Trust Architecture principles. Experience building DevSecOps pipelines in regulated environments; familiarity with tools like Prisma, Checkov, Snyk, or Aqua. Relevant certifications (any of the following): CISSP, CSSLP, or CASP+ OSCP CEH GIAC (GWAPT, GSEC, GWEB) or CCP/CCA (UK Cyber Essentials equivalent) Experience securing microservices or event-driven architectures on ECS; background in federal or cleared environments preferred.

Job Description Job Description Job Description ACTIVE SECURITY CLEARANCE AT THE TS/SCI POLYGRAPH LEVEL IS REQUIRED We are seeking an Information Systems Security Officer (ISSO) to manage and enforce information assurance (IA) programs across critical defense and intelligence enclaves. In this role, you will be responsible for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies. You will manage day-to-day security operations, perform risk and vulnerability assessments, evaluate enterprise security solutions, and lead Assessment Authorization (AA) activities under the NIST Risk Management Framework (RMF). From maintaining Configuration Management (CM) control to preparing comprehensive System Security Plans (SSPs), you will ensure system compliance while enabling mission execution. The annual base salary range for this role is $135 000-$160,000 (USD) , which does not include discretionary bonus compensation or our comprehensive benefits package. Actual compensation offered to the successful candidate may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level, among other things. , Required Skills Information Assurance Governance: Proven ability to propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies across programs, systems, and enclaves. NIST RMF Authorization Support: Hands-on experience driving security authorization activities in compliance with the National Institute of Standards and Technology Risk Management Framework (NIST RMF). Security Documentation Artifact Creation: Deep experience preparing, reviewing, and updating System Security Plans (SSPs), Risk Assessment Reports (RARs), Certification and Accreditation (CA) packages, and System Requirements Traceability Matrices (SRTMs). Vulnerability Risk Assessment: Skilled in conducting vulnerability, threat, and risk assessment analyses to support system accreditation and continuous monitoring. Configuration Management (CM) Impact Analysis: Experience managing system change controls, evaluating security solutions for processing classified information, and assessing the security impact of hardware, software, and firmware modifications. Education: Bachelor's Degree in Data Science, Computer Science, Computational Linguistics, Mathematics, or a related technical discipline, PLUS 7+ years of professional experience in data science, NLP, or software engineering OR High School Diploma / GED, PLUS 11+ years of specialized technical experience in lieu of a degree. , Desired Skills Industry Certifications: Active IAM/IAT Level II or III certifications (e.g., CISSP, CISM, CAP/CGRC, Security+, CASP+). Scanning Audit Tools: Experience utilizing automated compliance and vulnerability scanning tools (e.g., Nessus/Tenable, XACTA, STIG Viewer, SCAP Compliance Checker). Cross-Domain Cloud Security: Familiarity with cross-domain solutions, cloud security concepts (AWS/Azure gov clouds), or containerized enclave security. Continuous Monitoring: Practical experience implementing continuous monitoring strategies and managing Plans of Action and Milestones (POAMs). , About Nyla Technology Solutions Nyla Technology Solutions delivers exceptional Artificial Intelligence (AI), Data Science, and Software Engineering services for the U.S. Government. Nyla embraces a forward-thinking and bold approach at every turn, earning us a solid reputation of technical trendsetters within the industry. We have a passion for developing solutions that have a quick and immediate impact on mission. Headquartered in Columbia, Maryland, our customers love how we tackle their most challenging problems and get things done. If you have the unique experience and expertise we are seeking, along with the desire and determination to invest your time and energy as a part of Nyla's team, Taking Care of All of You Nyla provides a top-of-market compensation and benefits package. And through our unique Nyla FLEX program, we custom tailor these benefits to best fit your lifestyle. The Nyla FLEX benefit program is designed to offer you flexibility in the 3 biggest areas of your life: your pay, your leave, and your schedule. PAY - Nyla starts with 4 weeks of Annual Leave plus 11 holidays and an additional day of Annual Leave for each year you're at the company. You have the flexibility to cash out your annual leave hours, opt out of other Nyla benefits, and/or arrange for additional hours on contract (over 40 hrs/week). There's even an option to earn 1.3 times your hourly rate once you work over 1880 hours on contract! LEAVE - Want to spend more time with the family? Want more time to travel the world? You can BUY additional annual leave for a total of 6 weeks of annual leave. That's up to 240 hours of leave plus 11 holidays! That's not even including paid anniversary leave! SCHEDULE - Does the traditional 40-hour workweek no longer fit your lifestyle? With Nyla FLEX, you have the freedom to scale down to 30-32 hours while still enjoying the top-notch Nyla benefits you know and love. It's flexibility that works for you without compromising the perks! WHAT ABOUT OTHER BENEFITS? Nyla's health care (medical, dental, and vision) is 100% covered by the company. We provide 10% 401k matching - with full vesting day 1! Our Professional Development offers $5,000 per year to be used towards fees, tuition, or time off for your continued growth. We even have a student loan repayment program and we provide 8 hours of volunteering annually so you can support your community, making your world a better place. To learn more about Nyla's culture and our exceptional benefit packages click here. Nyla is an equal opportunity employer.

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. The McKesson Pentest Team is seeking a Penetration Testing Engineer to help support and scale McKesson's Continuous Adversarial Testing (CART) program and strengthen the security posture of our enterprise application ecosystem. This role provides technical support for offensive security programs, focusing on AI-enabled security testing, web application penetration testing, cloud security assessments, vulnerability validation, and adversarial testing across large-scale application portfolios. The individual in this role will partner with a pentest lead, engineering, product, cloud, and security teams to identify complex attack paths, validate threats, and drive remediation efforts that reduce business risk. The position will play a key role in executing autonomous security testing capabilities, integrating CART outputs into security operations, and advancing McKesson's offensive security assessments. This role will also help shape the future direction of AI-assisted security testing, automation, and modern offensive security methodologies across the enterprise. This is a hands-on technical role for someone who can support the development of a new security program while also performing advanced technical testing, validating AI-generated findings, solving operational challenges, and supporting the long-term direction of McKesson's offensive security capabilities. What You'll Do Work closely with a Lead Pentest Engineer to Implement McKesson's Continuous Adversarial Testing program across large application portfolios. Support and help shape the first iteration of the CART operating model. Execute and refine repeatable onboarding processes covering application context, test accounts, authentication, authorization roles, test data, rate limits, WAF coordination, exclusions, maintenance windows, and emergency stop procedures. Perform human-in-the-loop reviewing, reproducing, validating, prioritizing, and communicating findings generated by autonomous testing platforms. Support the execution of continuous AI assisted penetration tests across high-priority enterprise web applications, including application onboarding, test orchestration, execution oversight, findings validation, and remediation coordination. Implement integrations between CART platforms and vulnerability management, engineering, reporting, and remediation workflows. Conduct AI-enabled web application, API, and cloud security assessments across enterprise environments. Perform penetration testing, adversarial assessments, and vulnerability validation activities against internally developed and third-party applications. Evaluate emerging autonomous security testing capabilities and recommend changes to CART strategy, tooling, and service delivery. Contribute to program documentation including; playbooks, runbooks, technical standards, training materials. Leverage automation and AI-assisted security tooling to scale testing coverage and improve assessment efficiency. Identify and validate complex attack paths involving authentication weaknesses, authorization flaws, business logic vulnerabilities, and multi-stage exploitation scenarios. Evaluate REST APIs, GraphQL APIs, cloud-native architectures, and modern authentication technologies. Partner with engineering teams to explain findings, prioritize remediation efforts, and validate fixes through retesting. Develop and maintain testing methodologies, automation workflows, and security assessment procedures. Contribute to incident investigations, threat modeling activities, and continuous security improvement initiatives. Basic Requirements 4+ years of cybersecurity, application security, penetration testing, offensive security, or related experience. Bachelor's degree or equivalent combination of education and experience. Experience performing web application and API penetration testing. Experience validating security vulnerabilities, assessing exploitability, and distinguishing actionable findings from false positives. Experience assessing enterprise applications utilizing REST APIs, GraphQL APIs, authentication systems, and cloud-native technologies. Working knowledge of AWS, Azure, or Google Cloud Platform (GCP) security concepts. Experience documenting technical findings and communicating remediation guidance to engineering teams. Hands-on experience with Burp Suite Professional, Nuclei, Nmap, Metasploit, Postman, and Kali Linux tools. Preferred Skills/Experience Experience leveraging AI-assisted security tools and security automation platforms. Experience implementing, operating, or scaling continuous security testing, attack simulation, breach and attack simulation, or automated offensive security capabilities. Experience evaluating, validating, and triaging findings from automated or AI-assisted security testing platforms. Experience assessing AI-enabled applications, agent-based systems, LLM integrations, or AI security risks. Familiarity with DevSecOps, CI/CD security controls, and secure software development practices. Knowledge of OWASP Top 10, API Security Top 10, threat modeling, and secure design principles. Experience conducting red team, adversarial simulation, or attack path validation exercises. Knowledge of cloud security architecture and containerized environments. Experience performing cloud security assessments in AWS, Azure, and GCP environments. Experience creating custom security testing scripts and automation workflows. Experience developing proof-of-concept exploits and adversary emulation scenarios. Familiarity with security control validation and compliance frameworks. Experience mentoring engineers and contributing to security program maturity. Experience supporting regulated industries such as healthcare, finance, or other highly regulated environments. Relevant certifications such as OSCP, OSWE, OSWA, OSAI, HTB CWES, HTB CWEE, OSEP, GPEN, GWAPT or equivalent. Travel / Work Environment / Physical Requirements Limited travel may be required based on business needs. Hyrbid, two days a week in the office. We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here. Our Base Pay Range for this position $103,900 - $173,100 McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind: McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application. McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates. McKesson job postings are posted on our career site: . McKesson is an Equal Opportunity Employer McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson's full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page. McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to (United States) or (Canada) . Resumes or CVs submitted to this email box will not be accepted. Join us at McKesson!

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. The McKesson Pentest Team is seeking a Penetration Testing Engineer to help support and scale McKesson's Continuous Adversarial Testing (CART) program and strengthen the security posture of our enterprise application ecosystem. This role provides technical support for offensive security programs, focusing on AI-enabled security testing, web application penetration testing, cloud security assessments, vulnerability validation, and adversarial testing across large-scale application portfolios. The individual in this role will partner with a pentest lead, engineering, product, cloud, and security teams to identify complex attack paths, validate threats, and drive remediation efforts that reduce business risk. The position will play a key role in executing autonomous security testing capabilities, integrating CART outputs into security operations, and advancing McKesson's offensive security assessments. This role will also help shape the future direction of AI-assisted security testing, automation, and modern offensive security methodologies across the enterprise. This is a hands-on technical role for someone who can support the development of a new security program while also performing advanced technical testing, validating AI-generated findings, solving operational challenges, and supporting the long-term direction of McKesson's offensive security capabilities. What You'll Do Work closely with a Lead Pentest Engineer to Implement McKesson's Continuous Adversarial Testing program across large application portfolios. Support and help shape the first iteration of the CART operating model. Execute and refine repeatable onboarding processes covering application context, test accounts, authentication, authorization roles, test data, rate limits, WAF coordination, exclusions, maintenance windows, and emergency stop procedures. Perform human-in-the-loop reviewing, reproducing, validating, prioritizing, and communicating findings generated by autonomous testing platforms. Support the execution of continuous AI assisted penetration tests across high-priority enterprise web applications, including application onboarding, test orchestration, execution oversight, findings validation, and remediation coordination. Implement integrations between CART platforms and vulnerability management, engineering, reporting, and remediation workflows. Conduct AI-enabled web application, API, and cloud security assessments across enterprise environments. Perform penetration testing, adversarial assessments, and vulnerability validation activities against internally developed and third-party applications. Evaluate emerging autonomous security testing capabilities and recommend changes to CART strategy, tooling, and service delivery. Contribute to program documentation including; playbooks, runbooks, technical standards, training materials. Leverage automation and AI-assisted security tooling to scale testing coverage and improve assessment efficiency. Identify and validate complex attack paths involving authentication weaknesses, authorization flaws, business logic vulnerabilities, and multi-stage exploitation scenarios. Evaluate REST APIs, GraphQL APIs, cloud-native architectures, and modern authentication technologies. Partner with engineering teams to explain findings, prioritize remediation efforts, and validate fixes through retesting. Develop and maintain testing methodologies, automation workflows, and security assessment procedures. Contribute to incident investigations, threat modeling activities, and continuous security improvement initiatives. Basic Requirements 4+ years of cybersecurity, application security, penetration testing, offensive security, or related experience. Bachelor's degree or equivalent combination of education and experience. Experience performing web application and API penetration testing. Experience validating security vulnerabilities, assessing exploitability, and distinguishing actionable findings from false positives. Experience assessing enterprise applications utilizing REST APIs, GraphQL APIs, authentication systems, and cloud-native technologies. Working knowledge of AWS, Azure, or Google Cloud Platform (GCP) security concepts. Experience documenting technical findings and communicating remediation guidance to engineering teams. Hands-on experience with Burp Suite Professional, Nuclei, Nmap, Metasploit, Postman, and Kali Linux tools. Preferred Skills/Experience Experience leveraging AI-assisted security tools and security automation platforms. Experience implementing, operating, or scaling continuous security testing, attack simulation, breach and attack simulation, or automated offensive security capabilities. Experience evaluating, validating, and triaging findings from automated or AI-assisted security testing platforms. Experience assessing AI-enabled applications, agent-based systems, LLM integrations, or AI security risks. Familiarity with DevSecOps, CI/CD security controls, and secure software development practices. Knowledge of OWASP Top 10, API Security Top 10, threat modeling, and secure design principles. Experience conducting red team, adversarial simulation, or attack path validation exercises. Knowledge of cloud security architecture and containerized environments. Experience performing cloud security assessments in AWS, Azure, and GCP environments. Experience creating custom security testing scripts and automation workflows. Experience developing proof-of-concept exploits and adversary emulation scenarios. Familiarity with security control validation and compliance frameworks. Experience mentoring engineers and contributing to security program maturity. Experience supporting regulated industries such as healthcare, finance, or other highly regulated environments. Relevant certifications such as OSCP, OSWE, OSWA, OSAI, HTB CWES, HTB CWEE, OSEP, GPEN, GWAPT or equivalent. Travel / Work Environment / Physical Requirements Limited travel may be required based on business needs. Hyrbid, two days a week in the office. We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please click here. Our Base Pay Range for this position $103,900 - $173,100 McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson's (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind: McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application. McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates. McKesson job postings are posted on our career site: . McKesson is an Equal Opportunity Employer McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category. For additional information on McKesson's full Equal Employment Opportunity policies, visit our Equal Employment Opportunity page. McKesson is committed to being an Equal Employment Opportunity Employer and offers opportunities to all job seekers including job seekers with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, please contact us by sending an email to (United States) or (Canada) . Resumes or CVs submitted to this email box will not be accepted. Join us at McKesson!