Job Closed

This listing is no longer active.

ASM Research logo
ASM Research

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies. All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.

Security Engineer

Location

United States

Posted

12 days ago

Salary

0

Seniority

Mid Level

Job Description

Security Engineer

ASM Research

Role Description Evaluates application security in all phases of the software development life cycle. Works closely with team members to define application security best practices, performs software architecture and design reviews, and supports the identification, interpretation, and remediation of vulnerabilities across a variety of applications, programming languages, and platforms. - Responsible for the build, integration, and operation of security architecture components. - Identifying security tools, secure configurations, and processes in order to support security standards and compliance requirements. - Have the technical depth to be hands on to remediate security vulnerabilities and/or develop technical solutions to security compliance areas. - Work closely with the infrastructure architecture, development architecture, technical operations, and development teams to ensure changes are well designed and coordinated across the enterprise. - Explains and demonstrates vulnerabilities to application owners, and provide recommendations for mitigation. - Conducts and coordinates vulnerability assessments of software application under development. - Identifies additional application security related tools, conducts tool analysis, and provided recommendations. - Trains developers and other relevant team members on Secure Code Development as well as other security protocols as needed. Qualifications - Bachelor’s Degree in Computer Science, Engineering, or other Engineering or Technical discipline or equivalent relevant experience. - 5-10 years of experience as an Application Security Developer, Application Security Analyst, or equivalent. Requirements - Experience with Nessus, Appscan, DB Protect, Venafi, and BURP. - Experience with performing analysis of security scan results and implementing remediations to correct findings. - Experience with AIX, RedHat Linux, Agile preferred. Benefits - Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. - The compensation displayed for this role is a general guideline based on these factors and is unique to each role. - Monetary compensation is one component of ASM's overall compensation and benefits package for employees. Company Description - It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. - We affirm our commitment to these fundamental policies. - All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. - All decisions on employment are made to abide by the principle of equal employment.

Related Categories

Related Job Pages

More Security Engineer Jobs

ASM Research logo

Security Engineer - ICAM

ASM Research

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies. All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.

Role Description Enforces application security in all phases of the software development life cycle. Works closely with team members to define application security best practices, performs software architecture and design reviews, and supports the identification, interpretation, and remediation of vulnerabilities across a variety of applications, programming languages, and platforms. - Provides support for the implementation and integration of Okta identity services within federal environments. - Responsible for configuring authentication, authorization, MFA, and application onboarding. - Supports user provisioning, federation setup, and secure access workflows for cloud and on-premises systems. - Works closely with cybersecurity, infrastructure, and application teams to ensure identity integrations meet federal security expectations and align with Zero Trust principles. Qualifications - Bachelor’s Degree in Computer Science, Engineering, or other Engineering or Technical discipline or equivalent relevant experience. Master’s Degree preferred. - 5-7 years of experience in a relevant field. - Experience configuring Okta components such as SSO, MFA, and application integrations. - Understanding of SAML, OIDC, and other identity federation standards. - Ability to onboard enterprise applications into Okta. - Familiarity with identity lifecycle processes such as provisioning, de-provisioning, and access management. - General understanding of federal identity/security expectations (least privilege, audit readiness, secure authentication). - Experience modernizing identity services for federal agencies. - Hands-on experience integrating Okta with cloud platforms (AWS, Azure, M365). - Familiarity with Zero Trust identity architectures. - Ability to automate identity workflows or configurations using scripts or orchestration tools. Requirements - Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. - The compensation displayed for this role is a general guideline based on these factors and is unique to each role. - Monetary compensation is one component of ASM's overall compensation and benefits package for employees. EEO Requirements - It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. - We affirm our commitment to these fundamental policies. - All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. - All decisions on employment are made to abide by the principle of equal employment. Physical Requirements - The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. - Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions. Disclaimer The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.

United States
Job Closed
Full TimeRemoteTeam 10,001+Since 1994H1B Sponsor

• Provide cloud security capabilities that are proactive, preventive-focused models that address modern threats, including those driven by AI-enabled attack techniques. • Expanding into next-generation security domains such as AI/ML security, container security, and advanced threat detection and response. • Design and implement cloud security controls that reduce risk and improve prevention, detection, and response capabilities. • Contribute to securing multi-cloud and hybrid environments across AWS, Azure, GCP, and on-premise infrastructure. • Implement security controls for AI/ML workloads, including protecting data pipelines, model services, and AI-integrated applications. • Identify and help mitigate AI-specific risks such as prompt injection, data poisoning, and model/data leakage. • Apply DevSecOps and Infrastructure-as-Code (IaC) practices to integrate security into CI/CD pipelines. • Partner with product and platform teams to implement secure architecture patterns and cloud security standards. • Utilize CNAPP platforms and related tools to identify and remediate risks across cloud, container, and AI environments. • Implement and maintain security controls for containerized environments, including Kubernetes cluster configuration, image scanning, and runtime protection. • Support monitoring, detection, and response capabilities, including integration with cloud-native telemetry and security tooling. • Participate in threat modeling and risk assessments (Attack Surface Management, Data Security Posture Management, etc.) for cloud-native and AI-enabled systems. • Develop and maintain automation solutions to improve security coverage and operational efficiency. • Deploy and manage infrastructure using Infrastructure-as-Code (IaC) tools and best practices. • Contribute to security initiatives and projects, helping deliver measurable improvements to the organization’s security posture. • Support security operations and internal service requests, contributing to continuous process improvement.

United Kingdom
JioStar logo

Director – Cybersecurity, Product Security

JioStar

A legacy of entertainment, now united as one. Welcome to JioStar - where stories and experiences are infinite!

Full TimeRemoteTeam 5,001-10,000H1B No Sponsor

Role Description As a Director – Cybersecurity you will lead, mentor, and develop engineers who are part of our Security team. The Security team helps secure Infrastructure that run the Hotstar business, streaming product, live broadcast and social gaming. As devsecops engineer you would be developing software tools that work reliably at scale and extending our operational excellence around securely operating a large cloud infrastructure. We need passionate hackers who derive purpose in life by finding potential weaknesses and then crafting creative solutions to eliminate those weaknesses. The pace of our growth is incredible – if you want to tackle hard and interesting problems at scale, and create an impact within an entrepreneurial environment, join us! Key Responsibilities - Championing security: Educate and train people at all levels of the business to advocate for a security-conscious culture - Advocate for policy-as-code, security, and automation - Leverage AI/ML techniques to enhance threat detection, anomaly identification, and automated security operations - Growing our security tech stack: Maintain our existing tooling and stay on top of emerging technologies that could improve our security posture and drive their evaluation, rollout, and adoption - Promoting security by design: Work closely with engineering teams to embed security considerations, including vulnerability management, in the design, development, and maintenance of products and features - Manage internal efforts to successfully end security incidents - Build and design tooling to automate security operations without compromising our posture - Define and refine measurements of security risk - Advocate and support engineering teams in developing secure platform tooling and services - Mentor team members to uplevel technical and interpersonal security skills - Exert technical influence over Infosec team members, increasing their productivity and effectiveness by sharing your deep knowledge and experience Qualifications - Extensive knowledge of security risks and mitigations through process and technology, especially for cloud-based applications and infrastructure - Experienced with securing AWS infrastructure managed and provisioned using IaC - Architect, design, develop and operationalize high-performance, scalable, reliable, and resilient services - You have experience working with and securing containers and Kubernetes - You have a robust knowledge of security engineering and application security - Strong understanding of web or mobile application security - Penetration Testing, threat modeling, and architecture review experience - Strong communication skills to translate security requirements into business objectives and to effectively convey security considerations to both technical and non-technical audiences - Confidence to engage with peers, both internally and at prospects/customers, to understand their information security concerns - You have experience working with a fully distributed, remote team - Excellent problem-solving abilities - Sound business judgment, proven ability to influence others and strong analytical thinking skills - Entrepreneurial spirit and willingness to have fun! Preferred Education & Experience - Bachelor's Degree in Computer Science or related field with a minimum 8+ years of experience in securing large scalable systems Company Description Perched firmly at the nucleus of spellbinding content and innovative technology, JioStar is a leading global media & entertainment company that is reimagining the way audiences consume entertainment and sports. Its television network and streaming service together reach more than 750 million viewers every week, igniting the dreams and aspirations of hundreds of million people across geographies. JioStar is an equal opportunity employer. The company values diversity and its mission is to create a workplace where everyone can bring their authentic selves to work. The company ensures that the work environment is free from any discrimination against persons with disabilities, gender, gender identity and any other characteristics or status that is legally protected.

India
CAI logo

Workday Security & Integration Developer

CAI

WHEN YOU NEED TO MEET A HIGHER STANDARD® in US | ASIA | EUROPE | AUSTRALIA

Full TimeRemoteTeam 501-1,000H1B Sponsor

Role Description We are seeking an experienced Workday Security & Integration Developer to help shape and support our Workday transformation across Finance, HR, and Reporting. This role will evaluate the current security posture, design a future-state role and domain framework, manage day-to-day security configurations, and partner with our Integration Developer to troubleshoot and maintain Workday integrations. The ideal candidate brings deep expertise in Workday HCM and Finance security, along with strong integration knowledge and a collaborative, solutions-oriented mindset. This position is full-time and remote. "This position does not offer employment sponsorship. All candidates must be eligible to work without need for sponsorship by employer." What You’ll Do - Lead the redesign of Workday security to reduce excessive access, eliminate role overlap, address segregation of duties (SoD) gaps, and improve clarity across business units. - Collaborate with Finance, HR, IT, and other stakeholders to gather security requirements, validate configurations, and communicate access design decisions clearly and transparently. - Design, implement, and maintain comprehensive security solutions, policies, procedures, and guidelines that safeguard the Workday environment. - Ensure security solutions align with SOC 2 Type 2 requirements. - Develop compliance dashboards, audit reports, and notifications to monitor access, configuration changes, and data flow within Workday. - Recommend durable security design choices that support evolving AI and agent-based use cases, including agent identities, permissions, human-in-the-loop approval models, and audit trails for agent-initiated actions. - Troubleshoot issues related to EIB, Core Connector, and Studio integrations. - Build and maintain Workday Studio integrations. - Partner with cross-functional teams to design, implement, and support Workday solutions aligned with business objectives. - Create and maintain detailed documentation of processes, integrations, and configurations to support knowledge sharing and future reference. Qualifications - Minimum of 5 years of Workday configuration experience, including at least 3 years focused on Workday security administration across both Finance and HCM security domains. - Demonstrated experience redesigning Workday security models at enterprise scale, including role rationalization and persona-based security frameworks. - Deep knowledge of Workday security constructs, including domain security policies, business process security policies, security groups, and security analysis tools. - Understanding of SOC 2 compliance requirements as they apply to Workday security, with the ability to embed compliance controls throughout configuration. - Demonstrated understanding of how Workday security supports downstream identity, role, and access consumers, including familiarity with SSO, identity provider integrations, and federated access concepts. - Minimum of 1 year of experience with Workday integrations, preferably Workday Studio. - Strong knowledge of XML and XSLT for designing and maintaining integrations. - Strong analytical and problem-solving skills, with the ability to translate complex business access requirements into technical security configurations. - Excellent communication and collaboration skills, with the ability to work effectively across functional teams and with program stakeholders at all levels. - Highly self-motivated and able to work independently in a fully remote contract environment. Requirements - Workday certifications in Integrations and/or Security (preferred). - Experience supporting SOC 2 Type 2 audits or similar control environments (preferred). - Familiarity with AI agent access control frameworks and how Workday security governance applies to emerging agent-based use cases (preferred). - Bachelor’s degree in Computer Science, Information Systems, or a related field (preferred). Physical Demands - Ability to safely and successfully perform the essential job functions. - Sedentary work that involves sitting or remaining stationary most of the time with occasional need to move around the office to attend meetings, etc. - Ability to conduct repetitive tasks on a computer, utilizing a mouse, keyboard, and monitor. Benefits - $105,000 - $130,000 per year. - Benefit packages include medical, dental, and vision insurance, as well as 401k retirement account access. - Employees in this role receive paid time off and may also be entitled to paid sick leave and/or other paid time off as provided by applicable law. Reasonable Accommodation Statement If you require a reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employment selection process, please direct your inquiries to application.accommodations@cai.io or (888) 824 – 8111.

United States
$105K - $130K / year