Manager, Offensive Security leading Capital One's Purple Team to enhance cyber defense posture. Collaborating across teams to address vulnerabilities and improve information security protocols.
About the role
- Principal Cloud Security Engineer leading security posture validation at HHAeXchange technology platform for home care. Collaborating with teams to align security strategy with business objectives.
Responsibilities
- Design and guide secure architectures across AWS, Azure, and GCP.
- Define and enforce security baselines aligned with NIST 800-53, HITRUST, and CIS Benchmarks
- Lead threat modeling, architecture reviews, and secure design guidance for cloud workloads
- Build and maintain Infrastructure as Code using Terraform (preferred) and cloud-native tooling
- Integrate automated security controls into CI/CD pipelines (SAST, DAST, IaC scanning, container scanning)
- Implement policy-as-code guardrails using tools such as AWS SCPs and cloud-native governance services
- Develop automated remediation and enforcement workflows to reduce manual security effort
- Embed compliance controls directly into cloud infrastructure and pipelines to support ATO efforts
- Partner with compliance teams and auditors on evidence collection and continuous monitoring
- Implement centralized logging, monitoring, and incident response across cloud environments
- Serve as the senior cloud security SME for engineers, architects, and stakeholders
- Mentor engineers on secure cloud development and DevSecOps practices
- Translate complex security concepts to both technical and non-technical audiences
- Provide daily oversight of security operations, to include the security impact analysis of proposed system modifications and implementations.
- Monitor information security tools, including SIEM, system monitors, access control, and other specific cloud security controls
Requirements
- Bachelor’s degree in Computer Science or a related technical field, or equivalent practical experience.
- 8 + years of experience in the support of security-focused tools and services.
- Minimum of 3 years of experience in support of security for Cloud Architectures.
- Technical experience or understanding of commonly used EDR (e.g., SentinelOne, Carbon Black, Trend Micro, Crowdstrike, Microsoft Defender), network firewall (Palo Alto, Fortinet, AWS Firewall, Azure Firewall, Google Cloud Firewall), email security (Mimecast, Proofpoint), and workforce (O365, G Suite) software, technologies and standards.
- Experience with Azure Security Center, AWS Security Hub, or Google Cloud Security.
- Experience with security monitoring solutions (e.g., AWS CloudTrail, Azure Log Analytics, Google Cloud Audit Logs, SIEM, Cloud Security, or Cloud-Scale Monitoring).
- Experience with securing CI/CD pipelines (e.g., Jenkins, git, CircleCI, TeamCity, Checkov, Fugue, Sentinel).
- Experience with scripting and programming languages such as Python, Bash, Jinja, YAML, etc.
- Comfort working in Linux, Windows, and Cloud Provider CLI.
- Willingness to explore and adopt AI tools responsibly to enhance productivity and innovation in your role
Benefits
- Competitive health plans
- Paid time-off
- Company paid holidays
- 401K retirement program with a Company elected match
- Other company sponsored programs
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Bilingual Security Agent ensuring the safety of people and property for OPENLANE. Responsibilities include surveillance, access control, and customer service at the facility.
Enterprise Sales Executive focusing on AI Security solutions for F5. Collaborating with enterprise account teams and engaging senior stakeholders in driving sales.
Security Engineering Manager responsible for developing enterprise security platforms at Snap. Leading a team to ensure security and operational excellence across the company.
Consultant conducting onsite operational security assessments and red teaming for technology client across Asia Pacific region. Focus on physical security practices and compliance in Singapore.
Information Security Advisor ensuring risk assessment and compliance for Sun Life business groups. Conducting risk assessments and advising on information security best practices.
Cloud Cybersecurity Engineer modernizing leading multi - cloud environments for Leidos. Supporting USAF system resiliency and security with hands - on cloud experience.
Auditing clients' organisations and products against ISO 27001 and ISO 22301 standards. Building relationships and improving business performance with a client - centric approach.
Senior Developer in Application Security at Clio focusing on innovative security solutions. Responsible for proactive vulnerability management in core applications and advising on security best practices.
Enterprise Services Manager leading the Technical Account Management team at Proofpoint. Responsible for maximizing customer value of products and services while ensuring high customer satisfaction.