Security Engineer

• Design and implement automation for security operations (SecOps), including threat detection, incident response, and vulnerability management
• Develop and maintain playbooks for SOAR platforms such as Splunk SOAR, Palo Alto XSOAR, or Microsoft Sentinel
• Design, develop, and maintain scalable automation frameworks for Cybersecurity operations
• Automate compliance checks and reporting for frameworks like NIST, ISO 27001, and CIS Controls
• Integrate security tools (SIEM, EDR, firewalls, IAM) into automated workflows
• Collaborate with cybersecurity, DevOps, and infrastructure teams to embed security into CI/CD pipelines
• Lead initiatives to reduce manual effort in security monitoring, alert triage, and remediation
• Engage in automation strategy and mentor junior engineers

Security Automation and Orchestration Engineer

• Define and evolve the WIAM governance framework, including policy alignment, control design standards, and operating model
• Establish and lead a centralized governance capability across IAM domains and processes
• Drive alignment of issues, risk, controls, and policy for traceability, defensibility, and regulatory compliance
• Identify systemic risks, prioritize remediation, and improve control sustainability
• Define and monitor governance KPIs, scorecards, and maturity metrics
• Provide strategic direction for audit readiness, regulatory alignment, and assessments
• Partner with IAM engineering, operations, business units, and senior leaders to drive governance standards
• Translate complex risk and control concepts into actionable leadership insights
• Establish scalable processes enabling proactive risk mitigation
• Mentor and develop junior team members
• Provide technical evaluation and analysis in a specific security area
• Review information and logs, execute defined tasks, create documentation, and investigate data security issues
• Address or mitigate risks and vulnerabilities; review and define controls
• Conduct security assessments and recommend corrective actions
• Develop policies and procedures to standardize security functions and eliminate vulnerabilities and threats
• Align security-area controls to the enterprise framework and devise control implementation strategies

Senior Security Specialist – WIAM Policy and Controls

• Design and implement Salesforce security and access control strategies
• Configure profiles, permission sets, roles, sharing rules, and security policies
• Manage user access, authentication, authorization, and identity integrations
• Develop and maintain Salesforce security models for applications and data
• Monitor security controls and identify potential vulnerabilities or access issues
• Support data protection, encryption, and secure data management practices
• Conduct security reviews and assessments of Salesforce configurations and solutions
• Collaborate with Architects, Developers, and Administrators to implement secure solutions
• Support security testing, audits, compliance activities, and remediation efforts
• Document security configurations, standards, procedures, and controls
• Stay current with Salesforce security features, best practices, and platform updates

Salesforce Security Specialist

• Lead enterprise-wide cybersecurity strategy and strengthen security operations
• Protect Clarivate’s systems, products, data, and customers, including regulated healthcare and life sciences environments
• Support customer assurance, audits, and regulatory inspections
• Define and execute cybersecurity strategy, roadmap, and operating model to reduce enterprise risk
• Lead programs across security operations, incident response, vulnerability management, security engineering, governance, risk, and compliance
• Partner with Technology, Product, Engineering, Privacy, Legal, Compliance, Procurement, and business leaders to embed security requirements
• Oversee monitoring, escalation, investigation, and response processes for security incidents
• Improve security controls, policies, standards, procedures, dashboards, metrics, and reporting
• Evaluate cyber threats, identify security gaps, and prioritize remediation
• Support audit, certification, customer assurance, and regulatory activities
• Develop and lead a high-performing cybersecurity team through resource planning, capability development, coaching, and work prioritization
• Communicate cyber risk, program performance, incident trends, and strategic recommendations to executive and senior leadership

Senior Director, Cyber Security

• Support customer assurance, audits, and regulatory inspections involving healthcare, life sciences, GxP, or other regulated products and technology environments
• Define and execute the cyber security strategy, roadmap, and operating model to reduce enterprise risk and strengthen Clarivate’s security posture
• Lead cyber security programs across security operations, incident response, vulnerability management, security engineering, governance, risk, and compliance
• Partner with Technology, Product, Engineering, Privacy, Legal, Compliance, Procurement, and business leaders to embed security requirements into products, platforms, processes, and vendor relationships
• Oversee monitoring, escalation, investigation, and response processes for security incidents
• Drive improvement of security controls, policies, standards, procedures, dashboards, metrics, and reporting
• Evaluate current and emerging cyber threats, identify security gaps, and prioritize remediation activities
• Support audit, certification, customer assurance, and regulatory activities by ensuring security practices are documented, measurable, and continuously improved
• Develop and lead a high-performing cyber security team, including resource planning, capability development, coaching, and work prioritization
• Communicate cyber risk, program performance, incident trends, and strategic recommendations to executive and senior leadership
• Partner across global time zones and support urgent security incidents or business-critical events outside standard hours when needed

• Define and evolve the WIAM governance framework, including policy alignment, control design standards, and operating model
• Establish and lead a centralized governance capability across IAM domains and processes
• Align issues, risk, controls, and policy to ensure traceability, defensibility, and regulatory compliance
• Identify systemic risks, prioritize remediation, and improve control sustainability
• Define and monitor governance KPIs, scorecards, and maturity metrics
• Provide strategic direction for audit readiness, regulatory alignment, and assessments
• Partner with IAM engineering, operations, business units, and senior leaders to drive governance adoption
• Translate complex risk and control concepts into actionable leadership insights
• Establish scalable processes supporting proactive risk mitigation
• Mentor and develop junior team members
• Provide technical evaluation and analysis in a specific security area
• Review information and logs, execute defined tasks, create documentation, and investigate data security issues
• Perform actions to address or mitigate risks and vulnerabilities
• Review and define controls and advise on complex security procedures and products
• Conduct security assessments and recommend corrective actions
• Develop policies and procedures to standardize security functions and eliminate vulnerabilities and threats
• Align controls to the enterprise framework and devise control implementation strategies

• Implement and manage physical security measures to protect people, assets, and information
• Conduct risk assessments and design security systems to address potential vulnerabilities
• Develop and execute emergency response plans
• Interpret data and inform security strategies through analytical thinking
• Oversee regulatory compliance and maintain security documentation
• Collaborate with stakeholders to enhance security awareness and training programs
• Manage security incidents and coordinate response efforts
• Integrate security systems and technologies to optimize surveillance and monitoring
• Lead asset protection and operational risk management initiatives
• Build and maintain client relationships to understand and anticipate security needs
• Provide strategic advice and solutions for real estate industry clients
• Support property acquisitions, leasing, asset management, and development projects

Senior Associate, Property Management – Physical Security Management

• Design, develop, configure, implement, tune, and maintain cybersecurity solutions
• Resolve technical and business issues related to threat and vulnerability management, identity management, security operations, forensics, and data protection
• Support planning, implementation, and operation of the Enterprise Identity and Access Management platform
• Develop and deploy IAM features, access certifications, provisioning, modeling, workflows, and automation
• Work with Cybersecurity Architects to execute strategic cyber initiatives
• Evaluate security components of networks, applications, and end-user devices
• Provide guidance to ensure new systems meet regulatory and technical standards
• Participate in root-cause analysis and identify improvement opportunities after failures
• Manage cybersecurity systems, including tuning, release updates, and change management
• Design and implement cybersecurity solutions and secure baseline configurations
• Perform technical assessments for policy, standards, and regulatory compliance
• Evaluate and develop security policies and procedures
• Administer and sustain security for in-house infrastructures and services
• Participate in cybersecurity projects, including scope requirements, budgeting, and work breakdown
• Provide cybersecurity support across multiple departments and interact with staff and management at all levels
• Work Monday through Friday during normal business hours with on-call support

Cybersecurity Engineer I

• Design and implement shift-left security guardrails across AI-assisted development workflows, IDEs, commits, and CI/CD pipelines
• Configure and enforce security gates for code, AI-generated code, infrastructure-as-code, and deployment artifacts
• Deploy and manage SAST, dependency, container, secret detection, DAST, API security, and AI/LLM security scanners
• Develop security-as-code policies and governance controls for AI coding assistants, agents, and developer tooling
• Lead risk-based vulnerability triage, prioritization, remediation SLAs, root-cause analysis, and risk reduction
• Identify and remediate risks in AI-generated code, AI applications, model integrations, prompt injection, agent behavior, and sensitive data exposure
• Architect, maintain, integrate, tune, and optimize the enterprise application security toolchain
• Build automation for vulnerability triage, escalation, assignment, and reporting
• Develop dashboards and reporting pipelines for application security posture, AI security adoption, and policy compliance
• Advise engineering teams through code reviews, AI security consultation, and remediation guidance
• Deliver secure coding, secure AI development, and responsible AI tooling training and workshops
• Build and grow a Security Champions program and maintain secure coding and AI development standards
• Define, track, and report AppSec and AI security KPIs and metrics
• Conduct security posture reviews and support audit, risk, compliance, and governance activities
• Benchmark maturity against OWASP SAMM, BSIMM, OWASP Top 10 for LLM Applications, and emerging AI security practices
• Conduct security reviews and threat modeling for AI-enabled applications, LLM integrations, AI agents, and AI-assisted development platforms
• Collaborate with Architecture, Software Delivery Enablement, Engineering, and Risk Management teams
• Lead teams in defining requirements, deliverables, and timeframes; escalate issues and make recommendations
• Mentor less senior staff and deliver technical training
• Implement, monitor, configure, and maintain security systems
• Complete ISRM Infrastructure project tasks on time, within budget and scope
• Assure compliance with required standards, procedures, guidelines, and processes

Senior Security Engineer – Secure SDLC

• Lead and execute comprehensive security assessments of client information systems
• Analyze cybersecurity documentation, collect evidence, and conduct compliance interviews
• Evaluate compliance with FISMA, NIST RMF, and FedRAMP standards
• Guide cross-functional teams and lead compliance discussions
• Author assessment reports, attestations, and customer-facing compliance documentation
• Perform system and network vulnerability scanning and analysis using automated and manual techniques
• Identify, validate, and apply vulnerability remediations, fix procedures, and risk mitigation strategies
• Apply security engineering expertise to secure architecture, authentication protocols, applied cryptography, and application security
• Engage directly with client stakeholders and provide expert technical guidance
• Mentor team members and support secure cloud architecture design
• Explain cybersecurity concerns and compliance with standards and frameworks to customers
• Perform FedRAMP 20x assessments
• Travel for client engagements as required

Security Engineer jobs in Alabama

Security Automation and Orchestration Engineer

Senior Security Specialist – WIAM Policy and Controls

Salesforce Security Specialist

Senior Director, Cyber Security

Senior Director, Cyber Security

Senior Security Specialist – WIAM Policy and Controls

Senior Associate, Property Management – Physical Security Management

Cybersecurity Engineer I

Senior Security Engineer – Secure SDLC

Cybersecurity Engineer, FedRAMP