Security Engineer
Bright Machines
Posted: 10/21/2026AnsibleAWSAzureCloudGoogle Cloud PlatformIoTPythonSDLCTerraform
Security Construction Administrator
IMEG
Posted: 10/21/2026
Managing Director – AI Security
American Electric Power
Posted: 10/21/2026CloudCyber Security
Managing Director – OT Security
American Electric Power
Posted: 10/21/2026Cyber Security
Senior Director, Information Security
Walmart
Posted: 10/21/2026Cyber Security
Security Engineer
Shermco Industries
Posted: 10/21/2026Cyber SecurityDNSFirewallsTCP/IP
Information Security Officer
Endurance
Posted: 10/21/2026CloudSDLC
Cybersecurity and Compliance Manager
New Charter Technologies
Posted: 10/21/2026AzureCloudCyber SecurityJamfMacOS
AI Security Sales Executive
Abnormal Security
Posted: 10/21/2026CloudCyber Security
Cyber Security, Account Executive
Riveron
Posted: 10/21/2026CloudCyber SecuritySFDC
Endpoint Security Engineer – Journeyman
DecisionPoint Corporation
Posted: 10/21/2026Cyber SecurityServiceNow
Senior Security, CCRI Analyst
DecisionPoint Corporation
Posted: 10/21/2026Cyber SecurityServiceNow
Cybersecurity Lead – ISSM Support
DecisionPoint Corporation
Posted: 10/21/2026Cyber SecurityServiceNow
Information Systems Security Officer – ISSO
AMERICAN SYSTEMS
Posted: 10/21/2026Cyber SecurityTypeScript
IAM Provisioning Consultant – Associate Security Specialist III
U.S. Bank
Posted: 10/21/2026AI Security Sales Executive
Abnormal Security
Posted: 10/21/2026CloudCyber Security
AI Security Sales Executive, Public Sector
Abnormal Security
Posted: 10/21/2026CloudCyber Security
AI Security Sales Executive
Abnormal Security
Posted: 10/21/2026CloudCyber Security
Cloud Security Engineer
Guidehouse
Posted: 10/21/2026AWSCloudCyber SecurityDockerEC2PythonTerraform
Security Architect, AI Infrastructure
FluidStack
Posted: 10/21/2026Security Engineer
Bright MachinesPosted 10/21/2026full-timeBurlingame • California • United StatesMid-LevelSenior💰 $170,000 - $200,000 per yearWebsite
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in information security operations, including maintaining ISO 27001 certification, executing security assessments, and integrating application security into the SDLC. Proficient in vulnerability management, incident response, and compliance initiatives across various environments.
Highest-signal resume keywords
ISO 27001 Certification MaintenanceSAST/DAST/SCA Tooling ExperienceSecurity Risk AssessmentsInfrastructure-as-Code ProficiencyCloud Security Literacy
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Execute day-to-day information security operations across corporate IT, platform, and product environments
- Maintain Bright Machines' existing ISO 27001:2022 certification through evidence collection, internal audits, corrective actions, and support for surveillance and recertification audits
- Execute customer security due diligence, complete SIG and CAIQ questionnaires, support customer audits, and track contractual security requirements
- Partner with Platform Engineering to integrate application security into the SDLC through threat modeling support, secure code review guidance, and SAST/DAST/SCA tooling
- Run vulnerability management across applications and platform infrastructure, including scanning, triage, and remediation tracking
- Coordinate third-party penetration tests and security assessments and track findings to closure
- Partner with the Infrastructure Engineer on network and compute infrastructure security, including EDR/managed SOC and network IDS/IPS controls
- Support security incident response, maintain the incident response plan, participate in investigations, and run tabletop exercises
- Support identity and access governance, including access reviews, certifications, and MFA/SSO enforcement
- Conduct security risk assessments for vendors, tools, and third-party integrations
- Maintain information security policies, standards, and employee security awareness training, including phishing simulations
- Track and report security posture, risk, and compliance status to the Global IT Director
- Help evaluate and prepare for future compliance initiatives such as SOC 2 Type II
Requirements
What you’ll need- 5+ years of experience in security engineering, IT security, application security, or a closely related role
- Experience maintaining an existing ISO 27001 ISMS, including evidence collection, internal audits, and support for surveillance/recertification audits
- Working knowledge of OWASP Top 10 and secure SDLC practices
- Hands-on experience using SAST/DAST/SCA tooling, such as Snyk, Semgrep, Checkmarx, or Burp Suite
- Proficiency in a scripting language such as Python for security automation
- Strong inclination toward infrastructure-as-code, such as Terraform or Ansible, for codifying and enforcing security controls
- Familiarity with GRC platforms for compliance evidence and monitoring
- Basic cloud security literacy in AWS, Azure, and/or GCP, including IAM, network security groups, encryption, logging, and monitoring
- Comfortable completing customer security questionnaires and supporting customer-facing security conversations
- Familiarity with EDR/managed SOC platforms and security operations and detection/response workflows
- Excellent written and verbal English communication skills
- Security certifications such as Security+, GSEC, or CCSP would be great
- Experience in manufacturing, industrial, IoT, or OT/ICS security environments would be great
- Exposure to penetration testing engagements would be great
- Familiarity with Zero Trust architecture principles would be great
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security EngineeringApplication SecurityVulnerability ManagementThreat ModelingScripting (Python)Secure SDLC PracticesIncident ResponseSecurity AuditsCompliance MonitoringPenetration Testing
Soft Skills
Excellent Written CommunicationExcellent Verbal Communication
Tools & Technologies
SnykSemgrepCheckmarxBurp SuiteTerraformAnsibleEDR PlatformsGRC PlatformsAWSAzure
Certifications & Qualifications
Security+GSECCCSP
Industry Keywords
Manufacturing SecurityIndustrial SecurityIoT SecurityOT SecurityICS SecurityZero Trust Architecture