Security Engineer

• Perform security architecture reviews and threat modeling for applications, APIs, cloud services, infrastructure, and third-party solutions
• Evaluate architecture patterns covering authentication and authorization, IAM, encryption, secrets/key management, APIs, network segmentation, data protection, cloud security, and secure integration patterns
• Validate that approved architecture and security controls have been implemented as designed before production deployment
• Own the security workstream for multiple concurrent technology initiatives, establishing security deliverables, dependencies, priorities, and milestones
• Manage a portfolio of security engagements simultaneously and prioritize activities based on business criticality, architecture complexity, security risk, and delivery timelines
• Identify security-related project risks and dependencies early, escalate blockers, and ensure security activities do not become late-stage impediments
• Participate in project governance meetings and provide security guidance to project teams
• Review Security Models produced by Corporate Security Architecture
• Assess proposed architectures for alignment with BBVA security standards and U.S. regulatory requirements
• Provide delegated Security Architecture and Application Security support for local initiatives
• Identify security gaps and recommend compensating controls
• Review initiatives outside the standard lifecycle process, including third-party platforms, trading venues, and standalone SaaS solutions
• Serve as the primary security advisor for assigned projects
• Collaborate with Corporate Security Architecture, Enterprise Architecture, Technology Engineering, Application Development, Infrastructure, Risk, Compliance, and business stakeholders

Senior Manager – Security Architecture, Application Security

• Oversee the review and improvement of security technology across client data center projects.
• Inspect, monitor and validate construction activities, installations, testing, commissioning and contractor deliverables.
• Ensure work meets project specifications, industry standards and client requirements.
• Identify and articulate risks within the campus portfolio and communicate risk treatment and acceptance options.
• Work with the Client team to prioritize identified risks and treatment plans.
• Identify and escalate non-conformances and coordinate corrective actions with vendors, contractors and engineers.
• Provide oversight of outage planning, work plans and project closeout activities.
• Represent the client on-site and maintain detailed quality records.
• Witness and document critical system tests, including pressure tests, leak tests and system start-ups.
• Inspect building security systems, including mechanical and electrical systems, for compliance.
• Conduct risk assessments for client data center sites and identify critical security concerns.
• Monitor installation, testing and commissioning of security systems.
• Maintain inspection reports, logs and compliance records.
• Oversee corrective actions, final inspections, punch lists and project closeouts.
• Verify the quality of materials, workmanship and equipment installations.
• Collaborate with contractors, engineers and inspectors to resolve issues.
• Represent the Client in alignment with contract requirements and project deliverables.

Technical Data Center Security Assurance Manager

• Administer EY's 1Badge access control platform and associated security systems
• Produce, issue, replace, and deactivate employee, contractor, and visitor access badges
• Process access requests, permission changes, transfers, terminations, and office moves
• Support biometric access solutions and secure-space access administration
• Maintain accurate badge and access records
• Investigate and resolve turnstile access issues, badge malfunctions, and access-related incidents
• Coordinate with Physical Security, Workplace Experience, and office leadership on access control concerns
• Assist with security-related escalations and service requests
• Support business continuity activities related to physical access systems and badge operations
• Facilitate badge issuance and access provisioning for new hires, Early Careers participants, contractors, and transferring employees
• Provide customer support for badge and access-related inquiries
• Generate operational reports and dashboards related to badge administration and access control
• Perform data validation and reconciliation
• Monitor work queues and assignment portfolios to meet service-level expectations
• Assist with audits, compliance reviews, and governance reporting
• Partner with Workplace Experience, Facilities Asset Management, Physical Security, HR, and local office leadership
• Support office-specific initiatives, security projects, and operational improvements
• Participate in process enhancement efforts

Security Administrator – Associate

• Remediate security findings across infrastructure by writing Terraform and application changes
• Drive remediation to completion when fixes belong to other teams
• Run vulnerability management from Snyk, Prowler, and ASV findings through verified fixes
• Own AWS security posture across IAM, least privilege, network boundaries, secrets management, and logging coverage
• Define and enforce technical security baselines as code, including host hardening, WAF configuration, and deployment patterns
• Conduct regular penetration testing against the company’s environment
• Perform threat modelling and security reviews for new services and integrations with payment and custody providers
• Serve as technical lead for security incidents, including forensic investigations
• Own and improve Datadog detection coverage and tune alerts for meaningful signals
• Report into Platform Engineering and work closely with the CISO, who sets the security agenda and serves as the escalation route

Senior Engineer, Security

• Lead digital security trainings on risk assessment, password managers, multifactor authentication, encrypted voice calls and text messages, online privacy, device security, and mitigating online harassment
• Work with team members to meet clients’ needs from intake through service implementation and follow-up
• Assist in developing curricula and supporting materials for digital security trainings
• Contribute to public editorial content, including guides, blog posts, and newsletters
• In the long term, train SecureDrop clientele, including administrators and journalists, on installing and using the platform
• Perform other responsibilities assigned by the deputy director of digital security

Senior Digital Security Trainer

• Lead the implementation, maturation, and continuous improvement of the enterprise AI Security Program
• Develop and operationalize AI security standards, control frameworks, secure design patterns, implementation baselines, and governance processes
• Serve as lead security engineer for enterprise AI platforms, including Claude, AI coding assistants, AI gateways, Agents, MCP-based integrations, and emerging AI technologies
• Design, implement, and improve security controls covering identity and access management, authorization, tenant security, encryption, logging, monitoring, and data protection
• Develop and operationalize AI guardrails against prompt injection, jailbreaks, unauthorized access, excessive agency, sensitive data exposure, model misuse, and adversarial attacks
• Develop security automation, governance automation, and policy-as-code capabilities
• Contribute to security architecture reviews and threat modeling for AI-enabled applications, platforms, agents, workflows, and integrations
• Establish secure development standards for AI-enabled software development
• Support security operations teams in monitoring and responding to AI security threats and emerging adversarial techniques
• Partner with Data Protection, Privacy, Compliance, and Governance teams on safeguards for secure data use within AI platforms
• Serve as the firm’s subject matter expert on AI security, emerging threats, adversarial AI risks, and industry best practices
• Provide technical security engineering leadership for AI security innovation, proofs of concept, and future-state capabilities
• Define and report KPIs measuring security effectiveness and maturity
• Stay current on emerging threats, technologies, and industry trends
• Build cross-functional partnerships across global teams and external stakeholders

Senior Security Engineer, AI Security

• Join Bastion's security team as its second engineer, reporting to the CTO/CISO and working alongside the Staff Security Engineer
• Scale the security program across security engineering, infrastructure, product and application security, detection and response, and technical GRC
• Write production Go code, review design documents, and build reusable security tooling and middleware
• Learn and contribute to Bastion's Go codebase, AWS and Kubernetes environment, SIEM, and security services
• Ship security fixes, guardrails, and detections to production
• Learn incident response and on-call procedures and join the security rotation
• Contribute to the DLP program rollout
• Own a security domain such as Kubernetes and cloud hardening, application security in CI, or detection engineering
• Write and tune detections as code, add telemetry sources, and reduce alert noise
• Build reusable Go security libraries or middleware for authorization, tenant isolation, request signing, or input validation
• Review design documents for new product features and architecture changes
• Deliver control automation and audit evidence for SOC 1, SOC 2, and OCC workstreams
• Help launch and triage the bug bounty program and expand DLP coverage and policies
• Drive multi-quarter initiatives involving service-to-service networking, security policy evaluation, and granular access
• Expand Kubernetes cluster and container security, including image scanning and signing, admission policies, pod security standards, and runtime protection
• Expand compliance automation, conduct resilience testing, influence the security roadmap, and improve secure development and deployment practices

• Manage Information Technology security protections to protect PPFA and reduce the impact of security incidents and system compromises
• Provide security monitoring, event investigation, and analysis in a 24/7 environment
• Provide countermeasure proposals and support and guidance to Tier I Analysts
• Provide technical assistance for Tier II and III incidents as assigned
• Interface with the InfoSec Operations Team, Managed Security Service Provider, and IT Managed Service Provider on SIEM security event architecture, collection, management, reporting, and alerting
• Engage with InfoSecOps, InfoSec, ITOps/MSP, MSSP, ATS, and staff within PPFA and its affiliates
• Identify, implement, and maintain Information Security toolsets, primarily focused on SIEM
• Interface with IT Operations to ensure proper security event logging setup
• Act as subject matter expert for PPFA’s Splunk SIEM, including configuring, managing, operating, and administering the platform
• Monitor SIEM security events and conduct threat/risk analysis
• Ensure event identification, filtering, data collection, analysis, assignment, triage, and documentation processes are followed
• Handle Tier II event escalations and identify appropriate triage and documentation processes
• Create and maintain Standard Operating Procedures for the Information Security Operations group
• Recommend security process improvements
• Support complex security tool-specific tasks with management, vendor, and MSSP resources
• Assist with vulnerability assessment setup, scanning, analysis, and remediation
• Assist IT Operations and corporate vendors in correcting infrastructure errors and alerts
• Assist with Incident Response incidents as assigned
• Perform other duties as assigned

Associate Director, Information Security Engineer

• Own Orchid’s field marketing presence and full regional marketing motion
• Plan and execute industry conferences, trade shows, sponsorships, and cybersecurity and identity security events, including RSA, Gartner, and regional CISO forums
• Design and run Orchid-hosted executive programs, including roundtables, dinners, workshops, and bespoke experiences
• Build and run account-based field programs with regional sales representatives
• Manage end-to-end event logistics, including vendors, venues, speakers, booth production, budgets, and on-site execution
• Drive pre- and post-event engagement with demand generation and marketing operations
• Track and report field marketing ROI, pipeline sourced and influenced, attendance, and account engagement
• Partner with Product Marketing to maintain messaging consistency across field activities and regional sales tools
• Collaborate on integrated campaigns combining field activity with digital and content programs
• Report directly to the VP Marketing and work at the intersection of marketing and sales

Field Marketing Manager – Cybersecurity, IAM, B2B SaaS

• Identify detection opportunities and define telemetry requirements
• Partner with the detection infrastructure squad and data owners to make detection and investigation signals available
• Develop, test, tune, and maintain detections across endpoint, identity, cloud, SaaS, email, and other security-relevant environments
• Investigate and prioritize alerts, determine security impact, and participate in incident containment and remediation
• Build repeatable investigation workflows and playbooks for alert triage, evidence collection, decision-making, escalation, containment, and response
• Improve proactive threat identification and threat hunting using internal telemetry and external threat intelligence
• Create AI workflows for Detection and Response that enrich alerts, analyze evidence, guide investigations, and automate repetitive response work
• Measure detection effectiveness, identify coverage gaps, and tune detections to balance security value, fidelity, and analyst workload
• Use SIEM, EDR, SOAR, and related security platforms to research threats, develop detections, investigate alerts, and validate security outcomes
• Share knowledge, document decisions, and communicate security findings to technical and non-technical audiences
• Partner with detection infrastructure and teams across Spotify to support detection and response at scale

Security Engineer jobs in New York

Senior Manager – Security Architecture, Application Security

Technical Data Center Security Assurance Manager

Security Administrator – Associate

Senior Engineer, Security

Senior Digital Security Trainer

Senior Security Engineer, AI Security