Security Engineer

• Lead the design, development, and implementation of secure system architectures and engineering solutions for information systems
• Apply engineering principles, security standards, and best practices to harden systems and networks against cyber threats
• Participate in requirements analysis, system trade studies, and risk analyses focused on cybersecurity posture
• Support accreditation and assessment activities, providing technical artifacts and engineering input to RMF and other security processes
• Prepare and present technical reports, briefings, and documentation on security engineering designs, risks, and mitigations
• Provide technical guidance and mentorship to journeyman and junior cyber engineering staff

Cybersecurity Engineer

• Lead the organization's Secure Access and Zero Trust transformation journey
• Provide technical leadership and strategic direction for SASE, SWG, Proxy, Secure Access, and related network security services
• Own the architecture, engineering, and continuous improvement of Zscaler, Palo Alto, and associated security platforms across a global enterprise environment
• Design, implement, and optimize security controls and policies for internet access, private application access, SSL inspection, traffic steering, threat prevention, and Zero Trust access models
• Drive operational excellence and platform reliability through standardization, tuning, automation, telemetry improvements, SIEM integration, and data-driven performance metrics
• Lead change management and major initiatives, including rollout planning, validation, risk mitigation, rollback readiness, and post-implementation reviews
• Serve as senior technical authority and final escalation point for complex issues, high-risk changes, major incidents, and cross-functional initiatives
• Mentor engineers and partner with security, infrastructure, operations, application teams, and vendors
• Participate in a rotating on-call schedule for incidents
• Act as a senior escalation point for major issues affecting secure access, proxy, SASE, and related network security services
• Contribute to post-incident analysis, corrective actions, readiness activities, operational reviews, and resilience improvements

Senior Network Security Specialist

• Oversee day-to-day operations across approximately 5–12 client project sites in the Northeast and Midwest regions
• Lead project start-ups and stabilizations for new client sites, including mobilization and onboarding of security services and staff
• Coach, develop, and manage Site Security Coordinators, Site Logistics Leaders, Shift Leaders, and Access Control Officers
• Own regional staffing plans, scheduling, and resource allocation
• Serve as Sitemetric's Qualified Manager/Agent/Principal for private security licensing
• Maintain compliance with state licensing requirements, Sitemetric policies, and client contractual obligations
• Conduct site audits, security drills, risk assessments, and incident investigations
• Develop post orders, standard operating procedures, communications plans, risk mitigation plans, and vulnerability assessments
• Liaise between field operations and the corporate Security & Safety team
• Partner with Safety, Operations, Technology, and other Regional Leaders on integrated site security
• Serve as the primary regional client contact for security matters and resolve issues
• Support client Site Specific Security Plans and advise on Sitemetric products and services
• Identify new security business, contract expansion, and upsell opportunities, targeting at least one win or expansion opportunity per quarter
• Build executive-level client relationships
• Design and deliver security training and support onboarding and professional development
• Manage the regional budget and billable utilization
• Meet KPI targets for audits, customer satisfaction, safety, and revenue growth
• Respond to incidents, emergencies, and high-priority client issues

Regional Security Leader

• Lead threat intelligence, detection engineering, threat hunting, and phishing resiliency functions
• Translate the external threat landscape and internal telemetry into measurable risk reduction
• Build, mentor, and retain a multidisciplinary cybersecurity team
• Advise executives on the threat landscape, detection posture, and risk-based prioritization
• Partner with privacy, legal, law enforcement, intelligence community, and intelligence-sharing organizations
• Direct the enterprise Cyber Threat Intelligence program, strategy, requirements, and operating model
• Oversee analysis and reporting on adversary tactics, techniques, procedures, threat actors, and emerging threats
• Set the strategy and operating model for threat intelligence, threat hunting, and AI-enabled detection engineering
• Drive zero-trust cyber defense through visualization, correlation, and analytics
• Manage vendors and external intelligence-sharing partnerships
• Own the detection engineering lifecycle from hypothesis through deployment, tuning, and deprecation
• Map detections to MITRE ATT&CK and real-world threat feeds
• Drive purple-team and red-team exercises with attack-surface management and red teams
• Integrate automation and AI capabilities with the AI SOC
• Establish team OKRs aligned to business risk, security priorities, and industry frameworks
• Govern adoption of agentic security solutions with safety, auditability, human-in-the-loop controls, and measurable value
• Communicate complex threats and trends to executives and business stakeholders through verbal briefings and written threat intelligence reports

Director I – Cybersecurity, Threat Intelligence & Engineering

• Develop and maintain security standards and reference architectures for cloud environments
• Participate in architecture reviews for new cloud services, platforms, and major infrastructure changes
• Evaluate proposed architectures for security risks and recommend appropriate controls
• Establish secure patterns for cloud networking, identity, encryption, logging, storage, compute, and managed services
• Evaluate security boundaries between AWS-managed infrastructure and externally managed platforms such as Heroku and Snowflake
• Identify insecure cloud configurations and excessive permissions
• Assess cloud environments against security standards and benchmarks
• Prioritize and coordinate remediation of cloud security findings
• Establish least-privilege access models and controls for administrative and privileged cloud access
• Develop security controls and configuration baselines for compute, storage, databases, networking, serverless services, VPNs, data warehouses, APIs, and secrets management
• Implement cloud security guardrails with engineering teams
• Ensure cloud logging and security telemetry support monitoring
• Develop or assist with detections for suspicious cloud activity
• Partner with Security Operations to investigate cloud security events
• Embed security requirements into Infrastructure-as-Code
• Develop automated checks, preventative controls, reusable secure modules, and templates
• Automate security processes using APIs, scripts, and cloud-native services
• Support vulnerability management across cloud infrastructure and workloads
• Coordinate vulnerability remediation with infrastructure and engineering teams
• Develop cloud security standards and technical requirements
• Map cloud controls to security and compliance requirements
• Provide technical evidence for audits and assessments
• Evaluate AI-enabled cloud services such as Amazon Q for security and data-handling implications
• Collaborate regularly with Infrastructure, Platform Engineering, DevOps, Software Engineering, IAM, and Security teams
• Report to the Director of Security

Cloud Security Engineer

• Provide day-to-day technical and operational leadership for the Cyber Defense Red Team
• Prioritize work, assign engagements, oversee execution, escalate issues, and coordinate deliverables
• Coach and mentor team members and support technical and leadership development
• Coordinate third-party vendors, dependencies, stakeholders, risks, blockers, and decisions
• Partner with Detection Engineering, Security Operations, Threat Intelligence, and Incident Response teams on purple team exercises
• Develop and execute maturity roadmaps, testing strategies, methodologies, standards, tooling, automation, and quality assurance practices
• Define and report program metrics covering testing coverage, execution quality, remediation outcomes, and control validation
• Lead intelligence-driven adversary emulation and full-scope red team operations
• Conduct physical, external/internal, wireless, web application, and mobile application security assessments
• Lead assessments across cloud platforms, identity infrastructure, privileged access management, hybrid enterprise environments, and embedded systems
• Develop and operationalize Red Team tooling, automation, and adversary emulation capabilities
• Lead adversarial testing of AI applications, machine learning systems, generative AI, large language models, and autonomous agents
• Review engagement plans, rules of engagement, evidence, findings, and reports
• Coordinate third-party penetration testing and provide post-mortem reports and executive briefings
• Evaluate SOC, EDR/XDR, SIEM, and other security-layer detection and response capabilities
• Track remediation, validate fixes through retesting and attack path analysis, and support CTEM initiatives
• Research novel offensive techniques, incorporate threat intelligence, and deliver presentations and knowledge-sharing sessions

Senior Offensive Security Engineer – Red Team

• Analyze changes to cybersecurity solutions and their relationships to internal and external systems to assess control effectiveness and cybersecurity risk
• Resolve complex multi-functional technical issues
• Apply cybersecurity assessments, standards, control testing methodologies, and compliance frameworks across security systems
• Improve security solutions, governance processes, automated controls, and monitoring capabilities
• Analyze processes and procedures and lead improvements, automation opportunities, and remediation activities
• Develop and submit Standard Operating Procedures
• Investigate business-impacting events and evaluate control performance, exceptions, and risk indicators through continuous monitoring
• Investigate cyber incidents, control failures, and compliance exceptions
• Assist with risk mitigation and remediation plans
• Lead global security initiatives, policies, compliance requirements, and continuous control monitoring practices
• Collect, validate, and report security metrics, control performance results, and remediation efforts
• Provide cybersecurity consulting, guidance, and support to customers and stakeholders
• Translate security principles into security and compliance requirements for build and configuration processes
• Monitor emerging IT/OT, cybersecurity, automation, and artificial intelligence technologies and their impact on security, risk, and compliance

Senior Cybersecurity Engineer, GRC Automation, Continuous Control Monitoring

• Provide technical guidance on information security policies, procedures, technologies, and compliance-related activities through First Line Assurance assessments
• Collaborate with Information Security, Technology, Risk, Audit, and business stakeholders
• Perform targeted control assessments, operational assurance reviews, post-deployment security validations, and certification activities
• Evaluate security control implementation and effectiveness
• Identify control weaknesses, vulnerabilities, compliance gaps, and security policy variances
• Assist with remediation tracking and provide detailed findings and recommendations
• Support automation of control audits, evidence collection, control testing, reporting, remediation tracking, certification, and continuous monitoring
• Contribute to workflows, dashboards, data collection, and repeatable assessment processes
• Use automation and reporting tools to streamline evidence collection, control validation, assessment execution, remediation tracking, and recurring assurance activities
• Review technical, administrative, and operational security controls for continuous monitoring and validation
• Review business requests, assurance findings, and control exceptions to determine risk level and appropriate remediation path
• Inform management of security policy variances and control gaps
• Perform other duties as assigned

Information Security Assurance Analyst I

• Develop and execute the enterprise quality vision, strategy, roadmap, and operating model
• Establish enterprise-wide quality goals, governance mechanisms, and performance expectations
• Lead the design, implementation, and continual improvement of the corporate Quality Management System
• Advise executive leadership on quality performance, compliance risks, process maturity, and organizational effectiveness
• Promote a culture of quality excellence, accountability, customer-focused decision-making, and continuous improvement
• Establish and maintain enterprise quality policies, standards, procedures, controls, and governance frameworks
• Ensure compliance with ISO 9001, AS9100, CMMI, customer-specific standards, government contracting requirements, and international frameworks
• Lead certification audits, surveillance audits, recertifications, customer assessments, and regulatory reviews
• Direct corrective and preventive action programs
• Monitor emerging industry standards and regulatory developments
• Partner with business unit leadership, program management offices, and functional organizations to deploy quality initiatives
• Provide strategic quality leadership across government and commercial programs
• Build stakeholder relationships and influence decision-making across matrixed, geographically dispersed organizations
• Establish and oversee quality metrics, dashboards, KPIs, and leading performance indicators
• Analyze enterprise quality trends and provide actionable insights to executive leadership
• Drive data-informed improvement initiatives to enhance operational performance, strengthen compliance, and reduce business risk
• Champion Lean, Six Sigma, process optimization, and operational excellence methodologies
• Integrate quality and compliance principles into enterprise risk management
• Evaluate quality-related risks associated with programs, operations, suppliers, and strategic initiatives
• Improve customer outcomes, contract performance, and organizational effectiveness
• Ensure timely resolution of quality concerns and strengthen customer confidence
• Lead, mentor, and develop assigned quality professionals and matrixed teams
• Build organizational capability through training, coaching, succession planning, and leadership development
• Foster a collaborative, inclusive, and high-performing work environment
• Promote professional development, knowledge sharing, and continuous learning

Security Engineer jobs in Ohio