• Coordinate and prioritize security testing for applications based on LLMs, including scenarios such as prompt injection, jailbreaks, data exfiltration, tool abuse, and context manipulation. • Oversee the execution of test cases on internal and user-facing agents, ensuring alignment with team-defined playbooks. • Lead the development of test suites and tools, such as Promptfoo or equivalents, driving innovation and efficiency. • Monitor and analyze alerts and signals generated by controls like LLM Firewall, guardrails, Anonymizer, and AI Gateway, ensuring prompt and effective responses. • Validate and review functional and regression tests on AI Security services and controls, ensuring the quality and security of deliverables. • Guide analysis of logs, metrics, and events related to LLM traffic, agents, and internal platforms, identifying patterns and opportunities for improvement. • Manage the identification of false positives and false negatives, and propose improvements to rules, heuristics, and detection policies. • Review and approve security analyses for MCPs, skills, and tools used by developers or agents. • Ensure the security of ML artifacts, the supply chain, and quality gates in pipelines, promoting best practices and compliance. • Document and review technical findings, evidence, FAQs, guides, playbooks, and best practices, ensuring clarity and applicability. • Promote education and awareness initiatives, CTFs, meetups, applied research, and consolidation of technical references, strengthening the security culture within the team and across the organization.

Role Description We're hiring a Senior Software Engineer, Security Infrastructure to build scalable security infrastructure that embeds compliance and risk controls directly into the Cadence platform. You will solve complex security challenges such as data classification, AI governance, GRC automation, and secure integration with healthcare partners and external systems. What You'll Do - Embed directly within Product and Platform Engineering teams to implement security-critical features and components of Cadence's platform, and drive teams toward secure architectural and implementation decisions as needed. - Build security capabilities that differentiate Cadence and influence the broader healthcare ecosystem, including reusable security primitives, contributions to open standards and open-source initiatives, and partnerships with customers and vendors to raise the bar for privacy, interoperability, and secure AI adoption. - Design and implement security controls across cloud infrastructure, Kubernetes, CI/CD systems, endpoints, identity systems, secrets management, and broader platform security primitives to keep core systems secure. - Build AI governance processes, frameworks, and safeguards that help ensure Cadence's AI systems are safe, reliable, fair, and aligned with patient safety outcomes. Qualifications - Bachelor's or Master's degree in Computer Science, Engineering, or a related field, or equivalent work experience. - 3+ years of software engineering experience, with at least 2+ years building and shipping real systems or infrastructure. - Strong ability to navigate and reason across the stack - quickly understanding unfamiliar codebases, architectures, and tooling ecosystems. - Ability to identify patterns and design scalable “golden paths” (e.g., logging, access controls, network security) that work across teams. - Effective communicator who translates technical findings into clear designs, builds alignment, and drives initiatives from concept to execution. - Demonstrated interest in security and the ability to think adversarially - approaching system design with rigor, considering failure modes, and leveraging modern tools to accelerate solutions. Requirements - 3+ years of software engineering experience. - At least 2+ years building and shipping real systems or infrastructure. Benefits - Competitive pay & equity* - Fully remote - Comprehensive health coverage: Medical, dental & vision - Paid time off - 401k plan + matching - Paid parental leave - Home office stipend *Benefit offerings may vary depending on job profile, job level and worker type.

• GuidePoint Security provides trusted cybersecurity expertise, solutions and services • Enabling organizations to identify threats, optimize resources and integrate solutions that mitigate risk • Collaborate and provide mentorship and guidance at every opportunity

Role Description We are seeking a highly experienced Senior Cyber Security Engineer to lead and support enterprise security initiatives, with a strong focus on security platform migrations and day-to-day cybersecurity operations. This role is responsible for ensuring the organization’s security posture is maintained and continuously improved while enabling secure adoption of new technologies. The ideal candidate is a hands-on security practitioner with deep experience in enterprise environments, capable of driving security initiatives, supporting operational teams, and guiding cross-functional stakeholders. Essential Job Responsibilities - Security Platform Ownership, Migration, and Transformation - Lead and support the daily management, governance, and migration of security platforms (e.g., EDR, identity, email security, cloud security tools) with minimal operational disruption. - Evaluate current security tools and recommend improvements or replacements aligned to business and risk requirements. - Coordinate with IT, infrastructure, and business teams to ensure secure management, configuration, and implementation of security platforms. - Develop and execute migration plans, including validation, testing, and cutover strategies. - Ensure proper configuration, hardening, and alignment to security standards. - Operational Cybersecurity (Day-to-Day) - Monitor and respond to security alerts and incidents in collaboration with SOC or IT teams. - Perform investigation and triage of security events, including root cause analysis and mitigation. - Manage vulnerability remediation efforts and track risk reduction progress. - Maintain and improve endpoint, identity, and network security controls. - Support incident response activities, including containment, eradication, and recovery. - Risk and Security Governance - Identify, assess, and communicate cybersecurity risks to leadership and stakeholders. - Ensure security controls align with regulatory and compliance requirements (e.g., NIST, CIS, ISO frameworks). - Contribute to the development and enforcement of security policies, standards, and procedures. - Participate in audits, assessments, and security reviews. - Collaboration & Leadership - Act as a subject matter expert for cybersecurity initiatives across the organization. - Partner with architecture, infrastructure, and application teams to embed security into projects. - Provide guidance and mentorship to junior security team members. - Support security awareness and best practice adoption across the business. Qualifications - 4–5+ years of hands-on cybersecurity experience in a fast-paced, complex enterprise environment. - Proven track record as a hands-on individual contributor (not primarily management-focused). - Experience across multiple cybersecurity domains (at least 3) such as: - Endpoint Detection & Response (EDR) - Identity & Access Management (IAM) - SIEM / SOAR - Cloud security - Email security or network security - Experience with security operations, including: - Incident response, investigation, and triage - Vulnerability management and remediation - Endpoint, identity, or network security controls - Demonstrated ability to own and manage security tools/platforms end-to-end. - Experience supporting or participating in security tool implementations, migrations, or transformations. - Working knowledge of security frameworks such as NIST, CIS, or ISO. - Strong ability to learn new technologies quickly and operate in a vendor-agnostic environment. - Excellent communication and collaboration skills, with the ability to work across technical and business teams. - Ability to thrive in a fast-moving, evolving environment with shifting priorities. Requirements - Experience with CrowdStrike or similar EDR platforms, especially in migration or large-scale deployments. - Experience with security automation or scripting (e.g., Python, PowerShell). - Hands-on experience with cloud platforms (Azure, AWS, or GCP security tooling). - Experience in rapid-growth or transformation-focused environments. - Exposure to OT/industrial or construction-related environments (nice to have). - Experience acting as a technical lead or subject matter expert, including mentoring others. - Relevant certifications (e.g., CISSP, GIAC, Security+) or demonstrated commitment to continuous learning. Benefits - Medical, dental, and vision insurance. - 401(k) retirement plan with company match. - Paid time off (PTO) and holiday pay. - Life and disability insurance. - Professional development and training opportunities. - Employee assistance program (EAP). - Benefits eligibility may vary based on employment classification and hours worked.