Security Engineer

• Maintain the security posture and operational readiness of assigned information systems
• Partner with ISSMs, ISOs, system owners, administrators, engineers, assessors, and Authorizing Officials
• Prepare and maintain RMF authorization packages and supporting security documentation
• Conduct system reviews, self-inspections, continuous monitoring, and security assessments
• Develop and maintain system descriptions, network topologies, security plans, POA&Ms, and assessment artifacts
• Create, organize, and maintain Bodies of Evidence manually without GRC tools
• Apply RMF, JSIG, SAP, DoD, NIST, and applicable STIG requirements
• Review system changes and conduct security impact analyses for hardware, software, firmware, configuration, and authorization boundary changes
• Coordinate proposed changes with the ISSM, ISO, AO, or DAO before implementation
• Monitor system recovery activities to ensure security protections are restored and functioning properly
• Ensure proper procedures are followed for clearing, sanitizing, storing, transporting, and destroying media and hardware
• Review audit records, document anomalies, and support vulnerability remediation efforts
• Support assessments, audits, inspections, ATO activities, design reviews, and corrective action tracking
• Prepare security status reports, briefings, and other program documentation
• Maintain accurate, current, and accessible security records
• Provide RMF support to DoD, National Agency, SAP, and contractor organizations

Senior Information Systems Security Officer – TS Clearance, SCI Eligibility

• Provide support to the Security Engineering and Operations team.
• Research, develop, and implement security tools and applications.
• Serve as technical lead on security projects.
• Troubleshoot and resolve complex technical issues.
• Handle escalations from junior team members.
• Serve as a technical liaison for Clinical and Business Information Security needs.
• Train team members on implementation and operation of security tools.
• Train team members and others on incident response procedures.
• Lead security incidents and tabletop exercises.
• Implement security tools and applications that detect and prevent cyber threats.
• Ensure security systems operate and function as designed.

Information Security Engineer – Associate

• Gain hands-on experience securing critical operational technology environments supporting the electric grid
• Support substation cybersecurity, cyber asset management, vulnerability management, patching, compliance, risk management, incident response, and cybersecurity program governance
• Work alongside cybersecurity analysts, engineers, and operations personnel
• Support asset inventory reconciliation, cybersecurity assessments, technology deployments, process improvement, and data analysis
• Develop technical and professional skills
• Gain insight into Duke Energy's cybersecurity program, electric utility operations, regulatory requirements, and cybersecurity's role in power-grid reliability and resilience
• Work from remote and onsite locations after the onboarding period
• Complete a 16-week co-op session
• Work 5–15% travel as required

Cybersecurity Co-op

• Design, build, deploy, configure, and maintain security controls for enterprise AI platforms and services
• Implement technical safeguards for Microsoft Copilot, Azure AI Services, LLM applications, machine learning platforms, and AI-enabled business solutions
• Integrate AI security controls with identity management, DLP, logging, monitoring, CASB, SSE, SIEM, and cloud security platforms
• Develop and maintain AI security automation, workflows, detections, dashboards, reporting, and operational processes
• Build monitoring to detect AI misuse, prompt injection attacks, unauthorized access, sensitive data exposure, and other AI security threats
• Engineer secure implementation patterns for AI applications, model deployment, API integrations, and data ingestion pipelines
• Partner with development and platform teams to implement security requirements throughout the AI lifecycle
• Develop scripts, automations, APIs, and integrations to improve AI security operations and control effectiveness
• Perform technical validation, testing, troubleshooting, tuning, and continuous improvement of AI security controls
• Support incident response, investigations, and remediation involving AI technologies and AI-enabled applications
• Deploy and maintain security tooling for AI monitoring, data protection, governance, and compliance
• Develop technical documentation, implementation guides, standard operating procedures, and operational runbooks
• Provide advanced engineering support for AI-related cybersecurity issues and service requests

AI Security Engineer

• Design, construct, and maintain scalable ETL/ELT data pipelines ingesting and centralizing security data from numerous Systems of Record into the Cyber Data Hub
• Build, maintain, and optimize backend web infrastructure serving data dashboards, reporting portals, and AI model endpoints
• Engineer conceptual, logical, and physical data models
• Optimize relational and non-relational database architectures for transactional processing and BI/analytics workloads
• Develop and deploy machine learning models and intelligent automation for vulnerability risk scoring
• Create reusable automated frameworks and CI/CD workflows for data processing, web deployments, and model training
• Implement data quality checks, schema validations, and compliance safeguards
• Maintain and monitor web servers, databases, ML staging, and UAT reporting environments
• Translate security program needs into data and infrastructure tasks
• Guide junior engineers and act as a technical liaison between security operations and core engineering

Distinguished AI and Data Security Engineer

• Design, construct, and maintain scalable ETL/ELT data pipelines ingesting and centralizing security data from multiple Systems of Record into the Cyber Data Hub
• Build, maintain, and optimize backend web infrastructure serving dashboards, reporting portals, and AI model endpoints
• Engineer conceptual, logical, and physical data models
• Optimize relational and non-relational database architectures for transactional processing and BI/analytics workloads
• Develop and deploy machine learning models and intelligent automation for vulnerability risk scoring
• Create reusable automated frameworks and CI/CD workflows for data processing, web deployments, and model training
• Implement data quality checks, schema validations, and compliance safeguards
• Maintain and monitor web servers, databases, ML staging, and UAT reporting environments
• Translate security program needs into data and infrastructure tasks
• Guide junior engineers and liaise between security operations and core engineering

• Lead the Security Operations Center (SOC) and execute the organization’s security operations strategy and roadmap
• Direct cybersecurity incident response and breach investigations, including detection, containment, recovery, and reporting
• Oversee security monitoring, threat detection, threat intelligence, vulnerability management, and threat-hunting activities
• Lead the implementation and optimization of enterprise security technologies, including SIEM, EDR/XDR, IAM/PAM, IDS/IPS, cloud security, and vulnerability-management platforms
• Partner with Infrastructure, Cloud, Development, Legal, Procurement, and business teams to integrate security requirements into technology solutions and business processes
• Manage security vendors, technology partners, audits, and operational security services
• Develop and report cybersecurity metrics, KPIs, security trends, and program effectiveness to leadership
• Lead, mentor, and develop security professionals while providing technical guidance and escalation leadership for significant security incidents

Manager, Information Security

• Maintain the security posture of the organization’s internal information systems
• Ensure compliance with applicable cybersecurity frameworks
• Manage system vulnerabilities through scanning, prioritization, and remediation
• Support patching and configuration enforcement through endpoint management solutions
• Continuously monitor information systems and identify and mitigate anomalous activity
• Analyze and correlate logs from endpoints, servers, identity systems, and cloud services
• Configure and tune alerting and automated response capabilities for security events
• Perform incident response and reporting for malware, phishing, unauthorized access, and data exfiltration
• Maintain Plans of Action & Milestones (POA&M) and track remediation to closure
• Keep system security documentation, including SSPs, baselines, policies, and procedures, current and audit-ready
• Assist with developing and maintaining security policies, standards, and technical controls
• Review and assess the security impact of system changes during change control processes
• Recommend and implement security configurations across Microsoft 365, endpoint, and identity platforms
• Conduct user activity monitoring and support investigations involving potential insider threats or policy violations
• Run security awareness initiatives, including phishing simulations and training activities
• Prepare reports on vulnerabilities, incidents, and overall security posture
• Collaborate with Security, IT, leadership, and compliance stakeholders

Information Security Specialist

• Establish and lead the enterprise Corporate Security governance framework
• Develop enterprise security policies, standards, procedures, and minimum-security requirements
• Coordinate security risks across business units, functions, and locations
• Establish accountability, escalation protocols, and decision-making processes for significant security matters
• Partner with Legal, Human Resources, Risk Management, IT, Real Estate/Facilities, and Business Operations
• Provide executives with visibility into material security risks, trends, incidents, and program performance
• Establish security metrics, KPIs, dashboards, and executive reporting
• Lead workplace violence prevention and Safe Workplace initiatives
• Establish and coordinate the enterprise Threat Assessment Team
• Develop threat reporting, assessment, escalation, intervention, and case-management protocols
• Support crisis-management governance, preparedness, exercises, after-action reviews, and continuous improvement
• Coordinate responses to significant security incidents and emerging threats
• Establish physical security standards and govern access control, badging, surveillance, visitor management, alarms, and related technologies
• Develop executive protection, travel security, international security, and event security governance
• Conduct or coordinate sensitive, complex, or significant investigations involving security matters, fraud, criminal activity, and employee misconduct
• Develop security awareness, reporting, escalation, and response protocols for associates
• Develop and manage the Corporate Security operating budget
• Evaluate and manage security vendors, consultants, technology providers, and specialized resources
• Develop a phased Corporate Security program roadmap and assess future staffing needs
• Lead strategically while remaining hands-on in program building, incident management, investigations, threat assessment, and practical security problem-solving

Senior Director, Corporate Security

• Provide technical expertise in the implementation, configuration, maintenance, and optimization of Workday and UKG security models
• Configure, maintain, and troubleshoot security roles, role-based access controls, domain security policies, business process security, and organizational security assignments
• Analyze and translate human resources, payroll, timekeeping, benefits, talent management, and workforce management security requirements into scalable application security solutions
• Manage user provisioning, role assignments, security requests, and access reviews while ensuring compliance with organizational security standards
• Support system implementations, upgrades, releases, security enhancements, and application testing activities
• Perform security audits, segregation of duties (SoD) reviews, access certifications, and compliance reporting
• Troubleshoot security-related application, integration, authentication, and workflow issues while partnering with Information Security, Identity and Access Management, and business stakeholders
• Develop and maintain security documentation, role matrices, workflow diagrams, testing scripts, and configuration standards
• Perform quality assurance and integrated testing to validate security changes before production deployment
• Collaborate with cross-functional teams to strengthen application security, improve governance, reduce risk, and support regulatory compliance
• Participate in an on-call support rotation for assigned applications when required
• Serve as a liaison between Human Resources, Payroll, Information Systems, Compliance, and business operations

Security Engineer jobs in Florida

Senior Information Systems Security Officer – TS Clearance, SCI Eligibility

Information Security Engineer – Associate

Cybersecurity Co-op

AI Security Engineer

Distinguished AI and Data Security Engineer

Distinguished AI and Data Security Engineer

Manager, Information Security

Information Security Specialist

Senior Director, Corporate Security

Security Application Analyst – Workday/UKG