Senior Security Engineer
Security architect job in Las Vegas, NV
Since 2012, we've grown to become one of the leading single-family rental companies and homebuilders in the country, recently recognized as a top employer by Fortune and Great Place To Work . At AMH, our goal is to simplify the experience of leasing a home through professional management and maintenance support, so our residents can focus on what really matters to them, wherever they are in life.
The Senior Security Engineer is responsible for the research, testing, implementation, optimization, and maintenance of security products and services supported by effective change management.
Other responsibilities include cloud security and cloud risk management. Additional responsibilities can include designing, testing, and implementing secure operating systems, networks, and databases. Password auditing, network based and Web application-based vulnerability scanning, virus management, and intrusion detection. Conducting risk audits and assessments, providing recommendations for application design. Monitoring and analyzing system access logs. Planning for security backup and system disaster recovery. Managing projects/processes, working independently with limited supervision. Coaching and reviewing the work of lower-level professionals. Problems faced are difficult and sometimes complex.
Responsibilities
Research, test, implement, optimize, and maintain new security products and services to address future and current threats supported by effective change management.
Develops, maintains, and supports processes to support the IT Security Framework such as incident management, cloud risk management, and cloud security.
Act as an escalation path to Security issues and lead forensic investigations.
Identifies and investigates actual or potential information security violations. Performs follow up investigations with written reports.
Participate in application and infrastructure projects to provide security planning and implementation.
Develop dashboards and metrics that includes incident reporting and risk management reporting.
Requirements
High School Diploma or GED required
Bachelor's degree in Computer Science, Information Technology, Information Security, and/or related field preferred
Minimum of seven (7) years of experience in IT Security
Minimum of three (3) years of experience in Cloud Technologies
Experience in managing SIEM solutions
Experience in endpoint and email security solutions
Experience in Security incident management and reporting
Advanced knowledge of networking/web, phishing/cyberattacks, and incident response
CISSP, cloud security, and other security related certifications preferred
Excellent verbal and written communication, planning, analysis and organizing skills
May occasionally work evenings or weekends as this position is part of an on-call rotation.
Compensation
The anticipated pay range/scale for this position is $105,322.00 to $131,652.00 Annually. Actual starting base pay within this range will depend on factors including geographic location, education, training, skills, and relevant experience.
Additional Compensation
This position is eligible to receive a discretionary annual bonus.
Perks and Benefits
Employees have the opportunity to participate in medical, dental and vision insurance; flexible spending accounts and/or health savings accounts; dependent savings accounts; 401(k) with company matching contributions; employee stock purchase plan; and a tuition reimbursement program. The Company provides 9 paid holidays per year, and, upon hire, new employees will accrue paid time off (PTO) at a rate of 0.0577 hours of PTO per hour worked, up to a maximum of 120 hours per year.
CA Privacy Notice: To learn more about what information we collect when you apply for a job, and how we use that information, please see our CA Job Applicant Privacy Notice found at **************************************
Cyber Security Analyst
Security architect job in Las Vegas, NV
We're looking for a seasoned Cybersecurity Analyst to take the fight to advanced threats. From incident response and malware analysis to threat hunting and vulnerability management, you'll be on the front lines safeguarding our systems, data, and users while contributing to the overall program maturity. If you thrive on solving complex problems and driving continuous improvement, this is your mission.
Job Responsibilities
Monitor and analyze security tools, systems, and network activity for threats or suspicious behavior.
Investigate and triage alerts, perform threat hunting, and conduct malware and phishing analysis.
Manage the full lifecycle of security incidents, from detection through resolution and documentation.
Conduct vulnerability assessments, detection validation, and regular security reviews or audits.
Maintain and optimize security monitoring platforms, infrastructure, and tooling.
Collaborate with IT and third-party partners to implement security controls, apply fixes, and support incident response.
Develop and maintain incident response playbooks, procedures, and security awareness initiatives.
Ensure compliance with internal policies, industry standards, and regulatory requirements.
Generate and maintain reports, dashboards, and metrics for ongoing security performance tracking.
Provide occasional after-hours or on-call support as part of incident response efforts.
Perform other related tasks as assigned.
Technical Requirements
Proficiency with SIEM tools and EDR platforms.
Strong understanding of network protocols, security principles, and operating systems (Windows, Linux).
Hands-on experience with firewall, IDS/IPS, and threat intelligence technologies.
Familiarity with cloud security concepts (AWS, Azure, GCP).
Knowledge of attack vectors, mitigation strategies, and incident investigation techniques.
Education & Experience
Bachelor's degree in Cybersecurity or equivalent with 2+ years of relevant experience.
2-4 years in cybersecurity operations or a similar role, ideally within a SOC environment.
Relevant certifications preferred:
CompTIA Security+, THM SAL1, HTB CJCA, Blue Team Level 1/2, Antisyphon Training
, etc.
Proven experience in incident response, risk management, and security policy development.
Strong knowledge of cybersecurity frameworks, standards, and technologies.
Required Skills
Strong analytical and problem-solving skills with attention to detail.
Excellent written and verbal communication abilities.
Ability to work independently and collaboratively in a fast-paced environment.
Skilled in documentation, reporting, and managing multiple priorities.
Highly organized, adaptable, and committed to continuous learning.
Nice to Have
Experience in retail environments or with point-of-sale systems.
Background in networking or infrastructure engineering.
Familiarity with security frameworks (NIST, ISO 27001, CIS).
Scripting skills in Python, PowerShell, or similar languages.
Infrastructure Security Architect
Security architect job in Las Vegas, NV
Job DescriptionInfrastructure Security Architect
At TensorWave, we're leading the charge in AI compute, building a versatile cloud platform that's driving the next generation of AI innovation. We're focused on creating a foundation that empowers cutting-edge advancements in intelligent computing, pushing the boundaries of what's possible in the AI landscape.
About the Role
The Sr. Infrastructure Security Architect is a critical, high-impact role responsible for building and enforcing a unified security architecture across High Performance Compute (HPC), cloud environments, and core organizational systems. This hybrid position combines security architecture, DevSecOps engineering, offensive security, and cross-organizational alignment, ensuring that security is integrated at the design phase-not bolted on as an afterthought.
This role will establish the enterprise-wide security architecture strategy, implement automated controls, validate safeguards through ethical hacking techniques, and ensure alignment between Infrastructure, IT, Security, Engineering, Software Development, and Compliance.
Responsibilities
1. Strategic Architecture & Long-Term Security Design
Develop and maintain a holistic security architecture roadmap spanning HPC, cloud platforms, on-prem infrastructure, and internal applications.
Architect solutions aligned with NIST 800-53, NIST CSF, CIS benchmarks, and other relevant frameworks.
Establish and evangelize a Security-by-Design culture across engineering and operational teams.
2. Automation & Engineering (DevSecOps)
Build automated pipelines for security controls, monitoring, evidence collection, and audit readiness.
Engineer automated hardening, patching, and configuration management solutions across infrastructure and cloud assets.
Integrate security directly into CI/CD workflows, cloud provisioning, and infrastructure-as-code (IaC).
3. Offensive Security & Risk Validation
Conduct hands-on ethical hacking, security testing, threat modeling, and adversarial simulations to validate security controls.
Identify systemic weaknesses, prioritize risks, and define technical mitigation strategies.
Lead or support purple-team activities with Security, Infrastructure, and Software Engineering.
4. Cross-Functional Leadership & Alignment
Partner with Infrastructure, IT, Engineering, Software Development, Security, and Compliance to ensure unified execution of security policies.
Translate regulatory and audit requirements into actionable engineering tasks.
Act as a key technical advisor during audits to ensure evidence, control operation, and documentation meet standards.
5. Governance, Policy, & Audit Support
Architect scalable processes that ensure continuous audit readiness and reduce manual evidence creation.
Define baseline security standards, technical controls, and operational guardrails.
Support certifications, assessments, and customer security reviews.
Who You Are
Required:
7+ years in Infrastructure Security, DevSecOps, or Security Architecture
Expertise in security frameworks: NIST 800-53, NIST CSF, CIS
Extensive experience designing secure cloud and HPC environments
Strong automation and engineering background (IaC, CI/CD, cloud-native security tooling)
Offensive security experience (ethical hacking, red/purple team, threat modeling)
Proven ability to lead cross-functional teams and drive organizational alignment
Experience supporting audits, governance, and compliance initiatives
Preferred
Certifications: OSCP, CISSP, GIAC (GCSA, GMOB, GCPN), or similar
Experience with SOC 2, HIPAA, PCI, or other regulated environments
Experience with GPU clusters, HPC environments, or high-throughput compute systems
Deep familiarity with cloud security (AWS, GCP, Azure)
What We Bring
Stock Options
100% paid Medical, Dental, and Vision insurance
Life and Voluntary Supplemental Insurance
Short Term Disability Insurance
Flexible Spending Account
401(k)
Flexible PTO
Paid Holidays
Parental Leave
Mental Health Benefits through Spring Health
Enterprise Security Architect
Security architect job in Reno, NV
Come join Team Atlantis! We are currently accepting applications for Enterprise Security Architect. Responsible for designing, building, testing and implementing security systems within the companies' networks. Responsible for overseeing all system security and ensuring they meet organizational requirements, with the aim of protecting the company's assets. Preparing security standards, policies, and procedures and mentoring team members.
Full Time Day Shift
Responsibilities
Enhances security team accomplishments and competence by planning delivery of solutions; answering technical and procedural questions for less experienced team members; teaching improved processes; mentoring team members.
Determines security requirements by evaluating business strategies and requirements; researching information security standards; conducting system security and vulnerability analyses and risk assessments; studying architecture/platform; identifying integration issues; preparing cost estimates.
Plans security systems by evaluating network and security technologies; developing requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, and related security and network devices; designs public key infrastructures (PKIs), including use of certification authorities (CAs) and digital signatures as well as hardware and software; adhering to industry standards.
Implements security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures; creating, transmitting, and maintaining keys; providing technical support; completing documentation.
Verifies security systems by developing and implementing test scripts.
Maintains security by monitoring and ensuring compliance to standards, policies, and procedures; conducting incident response analyses; developing and conducting training programs.
Upgrades security systems by monitoring security environment; identifying security gaps; evaluating and implementing enhancements.
Prepares system security reports by collecting, analyzing, and summarizing data and trends.
Updates job knowledge by tracking and understanding emerging security practices and standards; participating in educational opportunities; reading professional publications; maintaining personal networks; participating in professional organizations.
Enhances department and organization reputation by accepting ownership for accomplishing new and different requests; exploring opportunities to add value to job accomplishments.
Performs other incidental and related duties as required and assigned.
Other assignments as assigned my management.
While performing the duties of this job, the employee is required to stand; walk; use hands to finger, handle or feel objects, tools or controls; reach with hands and arms; climb stairs; balance; stoop, kneel crouch or crawl; talk, and hear. The employee must occasionally lift and/or move up to 25 pounds. Specific vision abilities required by the job include close vision, distance vision, color vision, peripheral vision, depth perception and the ability to focus.
Qualifications
Must be at least 21.
Extensive experience in information security and/or IT risk management with a focus on security, performance and reliability.
Solid understanding of security protocols, cryptography, authentication, authorization and security.
Good working knowledge of current IT risks and experience implementing security solutions.
Experience implementing multi-factor authentication, single sign-on, identity management or related technologies.
Ability to interact with a broad cross-section of personnel to explain and enforce security measures.
Excellent written and verbal communication skills as well as business acumen and a commercial outlook.
Minimum of 10 years' experience in Enterprise IT security.
Must adhere to all grooming standards, no "visible" tattoos/piercings or unnatural hair and nail colors
CERTIFICATES AND LICENSES:
Nevada Gaming Registration
Colorado Gaming License
CISM
Security+
CCNP
CISSP
Atlantis Casino Resort Spa fosters a team working environment and an environment that is focused on Team Member recognition and appreciation. Some of the ways in which we accomplish this is by offering the following:
Comprehensive benefits (medical, dental, vision, supplemental coverage)
401K retirement savings plan + discretionary match
Education Tuition Reimbursement Program
Paid Vacation
Holiday Pay
Recreation /Fitness Discounts
Weekly Resort Prizes
Career Development and Training Workshops
FREE daily meal
Internal Advancement
We can recommend jobs specifically for you! Click here to get started.
Auto-ApplySenior Analyst Info Security
Security architect job in Las Vegas, NV
The Senior Analyst Info Security is responsible for leading and supporting both short-term and long-term cybersecurity initiatives across the enterprise. This includes managing and maintaining secure systems, data, and network infrastructure, as well as conducting enterprise-wide security gap assessments, vulnerability remediation, and implementation of security controls. The role also encompasses the development and enforcement of compensating controls and exception management processes to ensure the organization's security posture remains resilient and compliant with industry standards. This role promotes a security-first mindset across the organization and contributes to the continuous improvement of the enterprise's security posture through proactive monitoring, technical support, and training initiatives.
Essential Functions & Responsibilities:
Manage the full lifecycle of cybersecurity toolsets, including planning, acquisition, deployment, administration, monitoring, and decommissioning.
Provide incident response and issue management for security investigations, including intrusion detection, malware, denial of service attacks, and privileged account misuse.
Develop and maintain standard operating procedures and training materials.
Monitor security alerts and logs to identify and investigate potential threats, reducing incident response time and improving detection accuracy.
Collaborate with IT and business units to ensure security controls are implemented and maintained across enterprise systems.
Provide high-level technical support, including configuration changes, policy recommendations, and diagnostics of network security issues.
Maintain awareness of regulatory gaming requirements, internal control standards (MICS), and enterprise policies related to information security.
Manages and maintains PCI compliance. This includes implementing PCI policy, standards, and procedures, assigning training and tracking to completion, and working with PCI assessors in assuring compliance.
Participate in operational planning and contribute to strategic security initiatives.
Promote a culture of security awareness and operational excellence across departments.
Emergency on-call to support after-hours security incidents and operational support.
Perform other duties as assigned to support the efficient operation of the department.
Required Qualifications:
Ability to secure and maintain a Nevada Gaming Registration.
High School diploma or GED required.
Bachelor's degree in information technology, Information Security, or a related field preferred.
Minimum of 6 years of experience in information security or related roles.
Experience in casino environments is strongly preferred.
Familiarity with the following technologies and practices:
Data Loss Protection
Forensic Software Suites
Network Infrastructure
Virtualization Platform Security
Operating Systems Security
Access Management and Privileged Access Management
Security Information and Event Monitoring (SIEM)
Incident Response Programs
PCI (Payment Card Industry)
Strong communication and presentation skills.
Ability to troubleshoot using the OSI model and analyze network traffic.
Understanding of standards, policies, procedures, and operational effectiveness.
Ability to work in a fast-paced, high-demand environment.
Certifications from organizations such as ISC2, CompTIA, ISACA, GIAC, or equivalent preferred (e.g., CISSP, Security+, CISM).
Physical Demands & Work Environment:
The physical demands and working environment described here are representative of those that an employee encounters and must be met by an employee to successfully perform the essential functions of this job.
Primary work environment is in a climate-controlled office setting.
Work requires travel to attend meetings, trade shows, and conferences.
Incumbents may be required to work evening, weekend and holiday shifts.
Must be able to work in a fast-paced, high-demand environment.
Strength sufficient to exert up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects and/or move up to 40 pounds occasionally.
Sedentary work: involves sitting most of the time. Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine, and computer printer.
Physical activities that apply to the essential functions of the position are balancing, stooping, kneeling, crouching, reaching, pushing, pulling, lifting, grasping, talking, hearing, and repetitive motions.
Hearing sufficient to hear conversational levels in person, via videoconference and over the telephone.
Speech sufficient to make oneself heard and understood in person, in front of groups, in meetings, via videoconference and over the telephone.
Visual acuity that meets the requirements of the position: The worker is required to have close visual acuity to perform an activity such as preparing and analyzing data and figures; transcribing; viewing a computer terminal; expansive reading and visual inspection of employees, visitors or facility.
Mobility sufficient to safely move in an office environment, walk, stoop, bend and kneel, and enter, exit and operate a motor vehicle in the course of travel to promotional events, meetings, conferences, trade shows and San Manuel properties.
Endurance sufficient to sit, walk and stand for extended periods, and maintain efficiency throughout the entire work shift and during extended work hours.
The employee may be exposed to fumes or airborne particles including secondhand smoke.
Equal Opportunity Employer:
Palms Casino Resort provides equal employment opportunities to all team members and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.
Palms Casino Resort, its affiliates and subsidiaries, will make reasonable accommodations in compliance with applicable law.
We are committed to creating a work environment where the growth and well-being of our team members is the top priority. Join our team today!
Auto-ApplyDetection & Response Security Engineer, Threat Intelligence
Security architect job in Carson City, NV
Meta Security is looking for a threat intelligence investigator with extensive experience in investigating cyber threats with an intelligence-driven approach. You will be proactively responding to a broad set of security threats, as well as tracking actor groups with an interest or capability to target Meta and its employees. You will also be identifying the gaps in current detections and preventions by long-term intelligence tracking and research, and working with cross-functional stakeholders to improve Meta's security posture. You will help the team establish, lead and execute multi-year roadmaps that improve research efficiency and quality across the team, and drive improvements to stakeholder management across a broad range of intelligence requirements.
**Required Skills:**
Detection & Response Security Engineer, Threat Intelligence Responsibilities:
1. Influence and align the team's vision and strategy. Collaboratively prioritize and deliver specific multi-year roadmaps and projects
2. Build, cultivate, and maintain impactful relationships with intelligence stakeholders to identify and facilitate solutions to increase the impact of the team's work
3. Refine operational metrics, key performance indicators, and service level objectives to measure Intelligence research and services
4. Lead cross-functional projects to improve the security posture of Meta's infrastructure, such as red team operations, surface detection coverage expansion and vulnerability management discussions
5. Track threat clusters posing threats to Meta's infrastructure and employees, and identify, develop and implement countermeasures on our corporate network
6. Investigate, mitigate, and forecast emerging technical trends and communicate effectively with actionable suggestions to different types of audiences
7. Work closely with incident responders to provide useful and timely intelligence to enrich ongoing investigations
8. Improve the tooling of threat cluster tracking and intelligence data integration to existing systems
**Minimum Qualifications:**
Minimum Qualifications:
9. 8+ years threat intelligence experience
10. B.S. or M.S. in Computer Science or related field, or equivalent experience
11. Be a technical and process subject matter expert regarding Security Operations and Threat Intelligence services
12. Experience developing and delivering information on threats, incidents and program status for leadership
13. Expertise with campaign tracking techniques and converting tracking results to long term countermeasures
14. Expertise with threat modeling frameworks, such as Diamond Model or/and MITRE ATT&CK framework
15. Experience intelligence-driven hunting to spot suspicious activities in the network and identify potential risks
16. Proven track record of managing and executing on short term and long term projects
17. Ability to work with a team spanning multiple locations/time zones
18. Ability to prioritize and execute tasks with minimal direction or oversight
19. Ability to think critically and qualify assessments with solid communications skills
20. Coding or scripting experience in one or more scripting languages such as Python or PHP
**Preferred Qualifications:**
Preferred Qualifications:
21. Experience recruiting, building, and leading technical teams, including performance management
22. Experience close collaborating with incident responders on incident investigations
23. Experience in threat hunting including leveraging intelligence data to proactively identify and iteratively investigates suspicious behavior across networks and systems
24. Familiarity with malware analysis or network traffic analysis
25. Familiarity with nation-state, sophisticated criminal, or supply chain threats
26. Familiarity with file-based or network-based rules and signatures for detection and tracking of complex threats, such as YARA or Snort
27. Experience in one or more query languages such as SQL
28. Experience authoring production code for threat intelligence tooling
29. Experience conducting large scale data analysis
30. Experience working across the broader security community
**Public Compensation:**
$177,000/year to $251,000/year + bonus + equity + benefits
**Industry:** Internet
**Equal Opportunity:**
Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.
Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at accommodations-ext@fb.com.
Senior Consultant, Security Advisory Services
Security architect job in Las Vegas, NV
Job DescriptionSalary:
Arctiq is a leader in professional IT services and managed services across three core Centers of Excellence: Enterprise Security, Modern Infrastructure, and Platform Engineering. Renowned for our ability to architect intelligence, we connect, protect, and transform organizations, empowering them to thrive in today's digital landscape. Arctiq builds on decades of industry expertise and a customer-centric ethos to deliver exceptional value to clients across diverse industries.
Position Overview:
We are seeking a highly skilled and motivated Senior Security Consultant to join our team. In this strategic role, you will be a key contributor in defining, architecting, and implementing cyber defense best practices for our clients across diverse industries.As a trusted advisor, you will help organizations build strategically defensible security programs, design and implement robust defensive countermeasures, and remediate complex security operations challenges. You will work closely with clients to assess their current security posture, identify gaps, and develop tailored solutions that align with business objectives and regulatory requirements.
Responsibilities:
Lead security operational assessments and maturity reviews to identify risks and improvement opportunities.
Architect and implement security defensive controls across cloud, hybrid, and on-premises environments.
Develop and deliver strategic roadmaps for cyber defense and incident recovery programs.
Collaborate with client teams to build and operationalize security defense programs aligned with industry standards (e.g., NIST, ISO, CIS).
Provide expert guidance on threat detection, response, and recovery capabilities.
Support clients before and after security incidents, helping them navigate containment, eradication, and recovery preparation phases.
Qualifications:
7+ years of progressive experience in cybersecurity consulting, architecture, or operations, with a strong track record of delivering strategic security solutions to enterprise clients.
Deep expertise in security frameworks such as NIST CSF, MITRE ATT&CK, NIST 800-53, and FIRST Controls, with practical experience applying them to build and operate security programs.
Proficiency in incident response and recovery planning, including leading post-incident investigations and developing actionable remediation and resilience strategies.
Hands-on experience designing recovery architectures, including integration with business continuity and disaster recovery (BC/DR) programs across cloud, hybrid, and on-premises environments.
Strong stakeholder engagement and communication skills, with the ability to translate technical concepts into business-aligned strategies for executive and operational audiences.
Demonstrated capability in both operational execution and management consulting, including security program development and strategic roadmap creation.
Industry-recognized certifications such as CISSP, CISM, or GIAC (e.g., GCIH, GCFA) are preferred.
Ability to travel up to 30% and eligible to work in the US and Canada to support engagements across North America.
Arctiq is an equal opportunity employer. If you need any accommodations or adjustments throughout the interview process and beyond, please let us know. We celebrate our inclusive work environment and welcome members of all backgrounds and perspectives to apply.
We thank you foryour interest in joining the Arctiq team! While we welcome all applicants, only those who are selected for an interview will be contacted.
Cloud Security Engineer
Security architect job in Las Vegas, NV
Cloud Security Engineer to help design, implement, and maintain secure cloud environments across our AWS, Azure, and/or Google Cloud platforms. You will work closely with infrastructure, DevOps, and application teams to ensure our cloud workloads meet industry security standards, comply with regulatory requirements, and support business objectives.
* Implement and manage cloud security controls, including IAM, encryption, key management, and network security.
* Monitor cloud environments for security events, misconfigurations, and vulnerabilities using tools like AWS Security Hub, Azure Defender, Prisma Cloud, or similar.Develop and enforce security policies and automation (IaC security, CI/CD
pipeline security, compliance checks).
* Support incident response activities, including investigation, remediation, and post-incident reviews.
* Collaborate with DevOps and engineering teams to implement secure-by-design practices.
* Conduct threat modeling and risk assessments for cloud-based applications and infrastructure.
Ensure compliance with standards such as CIS Benchmarks, ISO 27001, SOC 2, NIST, or GDPR as applicable.
* Participate in security architecture reviews and contribute to continuous improvement initiatives.
Preferred: AWS Certified Security - Specialty, Azure Security Engineer Associate, CCSP, CISSP or Security +, CISSP Required: None
Engineer, Information Security and Risk
Security architect job in Carson City, NV
Cardinal Health, Inc. (NYSE: CAH) is a global healthcare services and products company. We provide customized solutions for hospitals, healthcare systems, pharmacies, ambulatory surgery centers, clinical laboratories, physician offices and patients in the home. We are a distributor of pharmaceuticals and specialty products; a global manufacturer and distributor of medical and laboratory products; an operator of nuclear pharmacies and manufacturing facilities; and a provider of performance and data solutions. Working to be healthcare's most trusted partner, our customer-centric focus drives continuous improvement and leads to innovative solutions that improve the lives of people every day. With approximately 50,000 employees worldwide, Cardinal Health ranks among the top fifteen in the Fortune 500.
**_Department Overview:_**
**Information Technology** oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value.
**Information Security and Risk** develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. This job family develops system back-up and disaster recovery plans, conducts incident responses, threat management, vulnerability scanning, virus management and intrusion detection as well as completes risk assessments.
Lead IAM work for new customer onboardings and migrations. Collaborate with CAH Account Management, Application Teams, and Customers to design, implement, and test federated SSO solution based on customer login requirements. Provide technical guidance and act as primary point of contact for business partners and customer related to IAM work for onboarding. Additional responsibilities include supporting application integrations and enhancing SSO self service application onboarding.
**Responsibilities:**
+ **Customer Onboarding IAM Efforts - Strategy & Execution :** Lead the planning, design, and execution for Customer Onboarding via federated SSO, ensuring alignment with overall business and security objectives. This includes assessing multiple Cardinal Health e-commerce applications, understanding login requirements for new/existing customers, designing, testing and implementing solutions etc to ensure top notch user login experience and enhancing Cardinal Health's security posture.
+ **Collaboration & Communication:** Coordinate cross-functional teams, including Customer Business and IT teams, Cardinal Health's Account Management/Sales and Application teams, Information Security and others to ensure effective IAM implementation and seamless integration with business processes. Communicate complex security concepts to technical and non-technical internal and external stakeholders.
+ **Application Integration Leadership:** Lead the integration of various enterprise applications (SaaS, on-premise, custom-built) with our core IAM infrastructure, ensuring secure authentication, authorization, and user provisioning/de-provisioning.
+ **User Lifecycle Management:** Streamline and automate user provisioning, de-provisioning, and periodic access reviews for employees, contractors, and partners across all integrated systems, ensuring smooth onboarding and offboarding during M&A transitions.
+ **Solution Design & Implementation:** Design, implement, and maintain IAM solutions including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Role-Based Access Control (RBAC) frameworks.
+ **Technical Troubleshooting & Support:** Troubleshoot, identify, and resolve technical identity and access management-related issues, providing expert support to internal teams and end-users during and after integration.
+ **Documentation & Best Practices:** Develop, review, and maintain comprehensive technical documentation, including architecture diagrams, configuration guides, and operational procedures. Stay up-to-date with IAM best practices, regulatory requirements, and security trends.
**Qualifications:**
+ **Education:** Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience.
+ **Experience:** 5+ years of progressive experience as an IAM Engineer, designing and implementing enterprise scale solutions with significant experience in supporting M&A integration projects preferred.
+ **Technical Expertise:**
+ Extensive knowledge and experience with authentication standards and technologies such as SSO (SAML, OAuth, OpenID Connect), MFA
+ Proficiency in directory services (e.g., Active Directory, Azure AD, LDAP).
+ Hands-on experience with leading IAM platforms (e.g., Okta, Microsoft Azure AD, CyberArk, ForgeRock, Ping Identity, SailPoint).
+ Strong understanding of security principles, risk management, and access control models (e.g., RBAC).
+ Familiarity with Zero Trust architecture principles.
+ Familiarity with AI/ML concepts and their practical application in security and risk management, especially in IAM context.
+ Strong communication and interpersonal skills to collaborate effectively with various teams and stakeholders.
+ Detail-oriented mindset to ensure precise access control configurations and compliance.
+ Excellent problem-solving and analytical abilities to troubleshoot access issues and design solutions for unique business requirements
+ Must be a self-starter who takes full ownership of projects from inception to completion , holding oneself accountable for the security and operation integrity of IAM platform.
+ Ability to manage multiple priorities and meet tight deadlines in a fast-paced M&A environment.
**Anticipated salary range:** $94,900 - $135,600
**Bonus eligible:** No
**Benefits:** Cardinal Health offers a wide variety of benefits and programs to support health and well-being.
+ Medical, dental and vision coverage
+ Paid time off plan
+ Health savings account (HSA)
+ 401k savings plan
+ Access to wages before pay day with my FlexPay
+ Flexible spending accounts (FSAs)
+ Short- and long-term disability coverage
+ Work-Life resources
+ Paid parental leave
+ Healthy lifestyle programs
**Application window anticipated to close:** 12/20/2025 *if interested in opportunity, please submit application as soon as possible.
The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate's geographical location, relevant education, experience and skills and an evaluation of internal pay equity.
_Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply._
_Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal_ _Opportunity/Affirmative_ _Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law._
_To read and review this privacy notice click_ here (***************************************************************************************************************************
Senior Security Engineer
Security architect job in Las Vegas, NV
Since 2012, we've grown to become one of the leading single-family rental companies and homebuilders in the country, recently recognized as a top employer by Fortune and Great Place To Work . At AMH, our goal is to simplify the experience of leasing a home through professional management and maintenance support, so our residents can focus on what really matters to them, wherever they are in life.
The Senior Security Engineer is responsible for the research, testing, implementation, optimization, and maintenance of security products and services supported by effective change management.
Other responsibilities include cloud security and cloud risk management. Additional responsibilities can include designing, testing, and implementing secure operating systems, networks, and databases. Password auditing, network based and Web application-based vulnerability scanning, virus management, and intrusion detection. Conducting risk audits and assessments, providing recommendations for application design. Monitoring and analyzing system access logs. Planning for security backup and system disaster recovery. Managing projects/processes, working independently with limited supervision. Coaching and reviewing the work of lower-level professionals. Problems faced are difficult and sometimes complex.
Responsibilities:
Research, test, implement, optimize, and maintain new security products and services to address future and current threats supported by effective change management.
Develops, maintains, and supports processes to support the IT Security Framework such as incident management, cloud risk management, and cloud security.
Act as an escalation path to Security issues and lead forensic investigations.
Identifies and investigates actual or potential information security violations. Performs follow up investigations with written reports.
Participate in application and infrastructure projects to provide security planning and implementation.
Develop dashboards and metrics that includes incident reporting and risk management reporting.
Requirements:
High School Diploma or GED required
Bachelor's degree in Computer Science, Information Technology, Information Security, and/or related field preferred
Minimum of seven (7) years of experience in IT Security
Minimum of three (3) years of experience in Cloud Technologies
Experience in managing SIEM solutions
Experience in endpoint and email security solutions
Experience in Security incident management and reporting
Advanced knowledge of networking/web, phishing/cyberattacks, and incident response
CISSP, cloud security, and other security related certifications preferred
Excellent verbal and written communication, planning, analysis and organizing skills
May occasionally work evenings or weekends as this position is part of an on-call rotation.
Compensation
The anticipated pay range/scale for this position is $105,322.00 to $131,652.00 Annually. Actual starting base pay within this range will depend on factors including geographic location, education, training, skills, and relevant experience.
Additional Compensation
This position is eligible to receive a discretionary annual bonus.
Perks and Benefits
Employees have the opportunity to participate in medical, dental and vision insurance; flexible spending accounts and/or health savings accounts; dependent savings accounts; 401(k) with company matching contributions; employee stock purchase plan; and a tuition reimbursement program. The Company provides 9 paid holidays per year, and, upon hire, new employees will accrue paid time off (PTO) at a rate of 0.0577 hours of PTO per hour worked, up to a maximum of 120 hours per year.
CA Privacy Notice: To learn more about what information we collect when you apply for a job, and how we use that information, please see our CA Job Applicant Privacy Notice found at **************************************
#LI-PH1
Auto-ApplySenior Analyst, Security Compliance (SOX IT)
Security architect job in Carson City, NV
Ready to be pushed beyond what you think you're capable of? At Coinbase, our mission is to increase economic freedom in the world. It's a massive, ambitious opportunity that demands the best of us, every day, as we build the emerging onchain platform - and with it, the future global financial system.
To achieve our mission, we're seeking a very specific candidate. We want someone who is passionate about our mission and who believes in the power of crypto and blockchain technology to update the financial system. We want someone who is eager to leave their mark on the world, who relishes the pressure and privilege of working with high caliber colleagues, and who actively seeks feedback to keep leveling up. We want someone who will run towards, not away from, solving the company's hardest problems.
Our ******************************** is intense and isn't for everyone. But if you want to build the future alongside others who excel in their disciplines and expect the same from you, there's no better place to be.
While many roles at Coinbase are remote-first, we are not remote-only. In-person participation is required throughout the year. Team and company-wide offsites are held multiple times annually to foster collaboration, connection, and alignment. Attendance is expected and fully supported.
Coinbase stores more digital currency than any company in the world, making us a top tier target on the internet. Security is core to our mission and has been a key competitive differentiator for us as we scale worldwide. Essential to scaling is building and running a security compliance program that reflects how we protect the data and assets in our care, to open the doors with customers, regulators, auditors, and other external stakeholders. If you love working with fast moving companies to grow and scale security compliance engines and create positive change across the business, we'd like to speak with you about joining our team. Coinbase is looking for a Security Compliance Senior Analyst to drive the second line of defense IT SOX initiatives and help mature the IT SOX program.
*What you'll be doing (ie. job duties):*
* Lead Security and IT initiatives to support the SOX roadmap and advance program maturity
* Assist with SOX planning activities, including scoping of IT systems and creating training material to owners in preparation for SOX audit
* Lead security control gap assessments over SOX control environment, recommend remediation plans and track through completion
* Assess SOX implications of new products, update relevant controls, and communicate requirements to product organization and other stakeholders
* Provide ongoing reporting to stakeholders and leadership on above responsibilities and communicate progress and escalations management
* Perform SOX audit and control impact analysis as a result of security and technology incidents and partner with owning teams on control uplift activities
* Build close relationships with stakeholder teams including Security, IT, Infrastructure, Engineering, Data, and Finance to advise on SOX requirements and ensure excellence in control ownership
* Create and improve SOX procedural documentation, including process documentation, data flow diagrams, and uplifting templates
* Work closely with internal and external auditors to educate them about a complex technology control environment
* Oversee quality of audit initiatives, identify and analyze process gaps, provide guidance and expertise to team members
* Develop creative solutions to prove risk mitigation and solve for complex audit problems faced by the crypto industry
* Identify opportunities to address systemic program challenges, recommend solutions and drive efficiency through AI and automation
*What we look for in you (ie. job requirements):*
* Minimum of 5+ years of security/IT compliance or equivalent experience
* Strong knowledge and hands-on experience in Internal Controls over Financial Reporting, SOX 404 frameworks, and testing to support compliance
* Prior experience at a big 4 accounting firm
* Experience leading compliance initiatives from start to finish
* Proven understanding and audit experience of cloud technologies, AWS preferred
* Ability to effectively and autonomously accomplish outcomes across cross-functional teams in ambiguous situations with minimal supervision
* Strong oral and written communication skills
* Ability to multitask, direct cross functional work, and hold others accountable to committed deadlines in a fast paced environment
* Ability to communicate with technical / non-technical stakeholders to align on shared outcomes
* Experience in Financial services, Big Tech, or FinTech
*Nice to haves:*
* BA or BS in a technical field or equivalent experience
* Security certifications e.g. CISA, CISSP, CISM or other relevant certifications
* Experience auditing in Crypto space
Position ID: P73675
\#LI-Remote
*Pay Transparency Notice:* Depending on your work location, the target annual salary for this position can range as detailed below. Full time offers from Coinbase also include bonus eligibility + equity eligibility**+ benefits (including medical, dental, vision and 401(k)).
Pay Range:
$167,280-$196,800 USD
Please be advised that each candidate may submit a maximum of four applications within any 30-day period. We encourage you to carefully evaluate how your skills and interests align with Coinbase's roles before applying.
Commitment to Equal Opportunity
Coinbase is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sex, gender expression or identity, sexual orientation or any other basis protected by applicable law. Coinbase will also consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state and local law. For US applicants, you may view the *********************************************** in certain locations, as required by law.
Coinbase is also committed to providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please contact us at accommodations***********************************
*Global Data Privacy Notice for Job Candidates and Applicants*
Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. Our full notice outlining how data will be processed as part of the application procedure for applicable locations is available ********************************************************** By submitting your application, you are agreeing to our use and processing of your data as required.
*AI Disclosure*
For select roles, Coinbase is piloting an AI tool based on machine learning technologies to conduct initial screening interviews to qualified applicants. The tool simulates realistic interview scenarios and engages in dynamic conversation. A human recruiter will review your interview responses, provided in the form of a voice recording and/or transcript, to assess them against the qualifications and characteristics outlined in the job description.
For select roles, Coinbase is also piloting an AI interview intelligence platform to transcribe and summarize interview notes, allowing our interviewers to fully focus on you as the candidate.
*The above pilots are for testing purposes and Coinbase will not use AI to make decisions impacting employment*. To request a reasonable accommodation due to disability, please contact accommodations[at]coinbase.com
Security Engineer
Security architect job in Nellis Air Force Base, NV
Serco is seeking an Information Systems Security Officer (ISSO) to support the Immersive Missions and Training Solutions teams SAP Programs at Nellis Air Force Base, Joint Integrated Test and Training Center - Nellis.
This position will support the ISSM in securing systems that support SAP business operations at the Nellis AFB facility. You will lead cybersecurity policy implementation, conduct risk assessments, and support system certification and accreditation activities.
This position is contingent upon your ability to maintain/transfer your TS/SCI Clearance
In this role, you will:
Conduct system and network assessments to identify security deviations from policy or acceptable configurations.
Perform compliance audits and vulnerability assessments to support cybersecurity objectives.
Support program control processes to ensure risk mitigation and accreditation readiness.
Assist in the implementation of DoD security policy (e.g., NIST 800-53 Rev. 4, JSIG, CNSSI No. 1253) and recommend process enhancements.
Validate security requirements and recommend safeguards.
Support Security Test and Evaluation (ST&E) activities and document results.
Prepare and maintain Security Plans and Plans of Action and Milestones (POA&M).
Oversee periodic reviews of system audits and ensure corrective actions are completed.
GET TO KNOW YOUR RECRUITER!
Qualifications
To be successful in this role, you will have:
Must have an active DoD TS/SCI clearance
U.S Citizenship Required
Current IAM Level 1 Certification
Bachelor's degree with cybersecurity experience and tools below
Or a HS diploma or GED with cybersecurity experience and tools below
A foundation in security audits, system assessments, and policy compliance
Experience supporting cybersecurity documentation and accreditation processes
Ability to translate security requirement to technical requirements
Experience with vulnerability scanning (ACAS, Nessus, etc.)
Experience with STIG/Compliance scanning (SCAP, ACAS, GPOs)
Ability to work on-site at Nellis AFB
Ability to travel as needed (up to 10% of the time)
Additional desired experience and skills:
Utilizing Splunk to perform security audits/dashboard configuration
Powershell, Windows Server, Linux Knowledge
If you are interested in supporting and working with passionate Serco team- then submit your application now for immediate consideration. It only takes a few minutes and could change your career!
In compliance with state and local laws regarding pay transparency, the salary range for this role is $67,889.77 to $101,500.00; however, Serco considers several factors when extending an offer, including but not limited to, the role and associated responsibilities, a candidate's work experience, education/training, and key skills.
Company Overview
Serco Inc. (Serco) is the Americas division of Serco Group, plc. In North America, Serco's 9,000+ employees strive to make an impact every day across 100+ sites in the areas of Defense, Citizen Services, and Transportation. We help our clients deliver vital services more efficiently while increasing the satisfaction of their end customers. Serco serves every branch of the U.S. military, numerous U.S. Federal civilian agencies, the Intelligence Community, the Canadian government, state, provincial and local governments, and commercial clients. While your place may look a little different depending on your role, we know you will find yours here. Wherever you work and whatever you do, we invite you to discover your place in our world. Serco is a place you can count on and where you can make an impact because every contribution matters.
To review Serco benefits please visit: ************************************************************ If you require an accommodation with the application process please email: ******************** or call the HR Service Desk at ************, option 1. Please note, due to EEOC/OFCCP compliance, Serco is unable to accept resumes by email.
Candidates may be asked to present proof of identify during the selection process. If requested, this will require presentation of a government-issued I.D. (with photo) with name and address that match the information entered on the application. Serco will not take possession of or retain/store the information provided as proof of identity. For more information on how Serco uses your information, please see our Applicant Privacy Policy and Notice.
Serco does not accept unsolicited resumes through or from search firms or staffing agencies without being a contracted approved vendor. All unsolicited resumes will be considered the property of Serco and will not be obligated to pay a placement or contract fee. If you are interested in becoming an approved vendor at Serco, please email *********************.
Serco is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.
Auto-ApplySecurity Engineer II
Security architect job in Carson City, NV
Trustmark's mission is to improve wellbeing - for everyone. It is a mission grounded in a belief in equality and born from our caring culture. It is a culture we can only realize by building trust. Trust established by ensuring associates feel respected, valued and heard. At Trustmark, you'll work collaboratively to transform lives and help people, communities and businesses thrive. Flourish in a culture of diversity and inclusion where appreciation, mutual respect and trust are constants, not just for our customers but for ourselves. At Trustmark, we have a commitment to welcoming people, no matter their background, identity or experience, to a workplace where they feel safe being their whole, authentic selves. A workplace made up of diverse, empowered individuals that allows ideas to thrive and enables us to bring the best to our colleagues, clients and communities.
We are seeking a highly skilled Cyber Security Engineer to join our team and play a pivotal role in safeguarding our organization's digital assets. The ideal candidate will possess a deep understanding of cybersecurity principles, a strong technical background, and a passion for protecting sensitive information.
You will be responsible for engineering, implementing and monitoring security measures for the protection of Trustmark's computer systems, networks and information. The role helps identify and define system security requirements as well as develop detailed cyber security designs.
**Responsibilities:**
+ Design, implement, and maintain security architectures, systems, and solutions to protect critical infrastructure and data.
+ Conduct vulnerability assessments and penetration testing to identify and mitigate risks.
+ Develop and implement security policies, standards, and procedures.
+ Monitor security systems and respond to incidents promptly and effectively.
+ Stay up-to-date with the latest cybersecurity threats and trends.
+ Collaborate with cross-functional teams to ensure security is integrated into all aspects of the business.
+ Provide technical guidance and support to internal stakeholders.
**Qualifications:**
+ Bachelor's degree in Computer Science, Information Technology, or a related field or
+ 3-5 Years of network engineering or cyber engineering experience
+ Strong understanding of cybersecurity frameworks and standards (e.g., NIST, ISO 27001).
+ Proficiency in network security, systems security, application security, and data security.
+ Hands-on experience with security tools and technologies (e.g., firewalls, intrusion detection systems, encryption, SIEM).
+ Excellent problem-solving and analytical skills.
+ Strong communication and interpersonal skills.
+ Ability to work independently and as part of a team.
**Preferred Qualifications:**
+ Certifications such as CISSP, CISA, or CEH.
+ Experience with cloud security (e.g., AWS, Azure, GCP).
+ Knowledge of scripting and programming languages (e.g., Python, PowerShell).
Brand: Trustmark
Come join a team at Trustmark that will not only utilize your current skills but will enhance them as well. Trustmark benefits include health/dental/vision, life insurance, FSA and HSA, 401(k) plan, Employee Assistant Program, Back-up Care for Children, Adults and Elders and many health and wellness initiatives. We also offer a Wellness program that enables employees to participate in health initiatives to reduce their insurance premiums.
**For the fourth consecutive year we were selected as a Top Workplace by the Chicago Tribune.** The award is based exclusively on Trustmark associate responses to an anonymous survey. The survey measured 15 key drivers of engaged cultures that are critical to the success of an organization.
All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, sexual identity, age, veteran or disability.
Join a passionate and purpose-driven team of colleagues who contribute to Trustmark's mission of helping people increase wellbeing through better health and greater financial security. At Trustmark, you'll work collaboratively to transform lives and help people, communities and businesses thrive. Flourish in a culture where appreciation, mutual respect and trust are constants, not just for our customers but for ourselves.
Introduce yourself to our recruiters and we'll get in touch if there's a role that seems like a good match.
When you join Trustmark, you become part of an organization that makes a positive difference in people's lives. You will play a vital role in delivering on our mission of helping people increase wellbeing through better health and greater financial security. Our customers tell us they simply appreciate the personal attention and knowledgeable service. Others tell us we've changed their lives.
At Trustmark, you'll be part of a close-knit team. You'll enjoy abundant opportunities to grow your career. That's why so many of our associates stay at Trustmark and thrive. Trustmark benefits from more than 100 years of experience but pairs that rich history with a palpable sense of optimism, growth and excitement for what's ahead - and beyond. This is a place where associates bring their whole selves to work each day. A place where you can be yourself. Whatever your beyond is, you can achieve it at Trustmark.
Infrastructure Security Architect
Security architect job in Las Vegas, NV
At TensorWave, we're leading the charge in AI compute, building a versatile cloud platform that's driving the next generation of AI innovation. We're focused on creating a foundation that empowers cutting-edge advancements in intelligent computing, pushing the boundaries of what's possible in the AI landscape.
About the Role
The Sr. Infrastructure Security Architect is a critical, high-impact role responsible for building and enforcing a unified security architecture across High Performance Compute (HPC), cloud environments, and core organizational systems. This hybrid position combines security architecture, DevSecOps engineering, offensive security, and cross-organizational alignment, ensuring that security is integrated at the design phase-not bolted on as an afterthought.
This role will establish the enterprise-wide security architecture strategy, implement automated controls, validate safeguards through ethical hacking techniques, and ensure alignment between Infrastructure, IT, Security, Engineering, Software Development, and Compliance.
Responsibilities
1. Strategic Architecture & Long-Term Security Design
* Develop and maintain a holistic security architecture roadmap spanning HPC, cloud platforms, on-prem infrastructure, and internal applications.
* Architect solutions aligned with NIST 800-53, NIST CSF, CIS benchmarks, and other relevant frameworks.
* Establish and evangelize a Security-by-Design culture across engineering and operational teams.
2. Automation & Engineering (DevSecOps)
* Build automated pipelines for security controls, monitoring, evidence collection, and audit readiness.
* Engineer automated hardening, patching, and configuration management solutions across infrastructure and cloud assets.
* Integrate security directly into CI/CD workflows, cloud provisioning, and infrastructure-as-code (IaC).
3. Offensive Security & Risk Validation
* Conduct hands-on ethical hacking, security testing, threat modeling, and adversarial simulations to validate security controls.
* Identify systemic weaknesses, prioritize risks, and define technical mitigation strategies.
* Lead or support purple-team activities with Security, Infrastructure, and Software Engineering.
4. Cross-Functional Leadership & Alignment
* Partner with Infrastructure, IT, Engineering, Software Development, Security, and Compliance to ensure unified execution of security policies.
* Translate regulatory and audit requirements into actionable engineering tasks.
* Act as a key technical advisor during audits to ensure evidence, control operation, and documentation meet standards.
5. Governance, Policy, & Audit Support
* Architect scalable processes that ensure continuous audit readiness and reduce manual evidence creation.
* Define baseline security standards, technical controls, and operational guardrails.
* Support certifications, assessments, and customer security reviews.
Who You Are
Required:
* 7+ years in Infrastructure Security, DevSecOps, or Security Architecture
* Expertise in security frameworks: NIST 800-53, NIST CSF, CIS
* Extensive experience designing secure cloud and HPC environments
* Strong automation and engineering background (IaC, CI/CD, cloud-native security tooling)
* Offensive security experience (ethical hacking, red/purple team, threat modeling)
* Proven ability to lead cross-functional teams and drive organizational alignment
* Experience supporting audits, governance, and compliance initiatives
Preferred
* Certifications: OSCP, CISSP, GIAC (GCSA, GMOB, GCPN), or similar
* Experience with SOC 2, HIPAA, PCI, or other regulated environments
* Experience with GPU clusters, HPC environments, or high-throughput compute systems
* Deep familiarity with cloud security (AWS, GCP, Azure)
What We Bring
* Stock Options
* 100% paid Medical, Dental, and Vision insurance
* Life and Voluntary Supplemental Insurance
* Short Term Disability Insurance
* Flexible Spending Account
* 401(k)
* Flexible PTO
* Paid Holidays
* Parental Leave
* Mental Health Benefits through Spring Health
Product Security Engineer, Instagram
Security architect job in Carson City, NV
The Instagram Security Ecosystems team is seeking a product-focused security engineer interesting in enabling Instagram product teams to develop features with a focus on security and user safety. You will be relied upon to directly work with Instagram engineers, hardening both product features and our protective frameworks that make life harder for bad actors on the Instagram platform.
**Required Skills:**
Product Security Engineer, Instagram Responsibilities:
1. Threat Modeling and Security Architecture: Work directly with product managers and technical leads on threat models and security architecture for novel Instagram features or products
2. Security Reviews: Perform manual design and implementation reviews of web, mobile, and native code
3. Developer Guidance: Provide guidance and education to developers that help prevent the authoring of vulnerabilities
4. Automated Analysis and Secure Frameworks: Work with other security teams to improve Instagram's static and dynamic analysis and frameworks to scale coverage
5. Bug Bounty: Help provide technical guidance to our world class bug bounty program and independent security researchers
6. Industry Impact: Push the industry forward through conference talks and open source projects to contribute broadly to security for the world
**Minimum Qualifications:**
Minimum Qualifications:
7. B.S. or M.S. in Computer Science, Cybersecurity, or related field, or equivalent experience
8. 8+ years of experience finding vulnerabilities in interpreted languages (Python, PHP)
9. Extensive, proven experience in threat modeling and secure systems design
10. Experience with exploiting common security vulnerabilities
**Preferred Qualifications:**
Preferred Qualifications:
11. Product software engineering or product management experience
12. Experience in security consulting or other leadership-facing security advisory roles
13. Familiarity with cybersecurity investigations, abuse operations, and/or security incident response
14. Contributions to the security community (public research, blogging, presentations, bug bounty, etc.)
**Public Compensation:**
$177,000/year to $251,000/year + bonus + equity + benefits
**Industry:** Internet
**Equal Opportunity:**
Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.
Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at accommodations-ext@fb.com.
Engineer, Information Security and Risk
Security architect job in Carson City, NV
Cardinal Health, Inc. (NYSE: CAH) is a global healthcare services and products company. We provide customized solutions for hospitals, healthcare systems, pharmacies, ambulatory surgery centers, clinical laboratories, physician offices and patients in the home. We are a distributor of pharmaceuticals and specialty products; a global manufacturer and distributor of medical and laboratory products; an operator of nuclear pharmacies and manufacturing facilities; and a provider of performance and data solutions. Working to be healthcare's most trusted partner, our customer-centric focus drives continuous improvement and leads to innovative solutions that improve the lives of people every day. With approximately 50,000 employees worldwide, Cardinal Health ranks among the top fifteen in the Fortune 500.
**_Department Overview:_**
**Information Technology** oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value.
**Information Security and Risk** develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. This job family develops system back-up and disaster recovery plans, conducts incident responses, threat management, vulnerability scanning, virus management and intrusion detection as well as completes risk assessments.
We are seeking a highly skilled and experienced Identity and Access Management (IAM) Engineer to join our team. In this pivotal role, you will be instrumental in designing, implementing, and managing IAM solutions that secure our enterprise applications and facilitate the secure, efficient, and seamless integration of identity and access systems in context of our rapid growth through Mergers and Acquisitions. You will ensure robust access controls, streamline user experiences, and maintain operational continuity across our diverse IT landscape. The ideal candidate will have deep technical expertise in modern IAM principles, protocols and products along with strong management and communication skills.
**Responsibilities:**
+ **Application Integration Leadership:** Lead the integration of various enterprise applications (SaaS, on-premise, custom-built) with our core IAM infrastructure, ensuring secure authentication, authorization, and user provisioning/de-provisioning.
+ **M&A Integration Strategy & Execution:** Lead the planning, design, and execution of IAM integration strategies for M&A activities, ensuring alignment with overall business and security objectives. This includes assessing the IAM landscapes of merging entities to identify challenges and solutions.
+ **Identity System Merging & Consolidation:** Manage the complex process of merging disparate identity providers, user directories (e.g., Active Directory, Azure AD, LDAP), and access management systems from acquired companies into the existing infrastructure.
+ **User Lifecycle Management:** Streamline and automate user provisioning, de-provisioning, and periodic access reviews for employees, contractors, and partners across all integrated systems, ensuring smooth onboarding and offboarding during M&A transitions.
+ **Solution Design & Implementation:** Design, implement, and maintain IAM solutions including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Privileged Access Management (PAM), and Role-Based Access Control (RBAC) frameworks.
+ **Security & Compliance:** Ensure IAM systems and processes comply with regulatory requirements (e.g., GDPR, HIPAA, SOX) and internal security policies, providing auditable records of access activities. Protect against data breaches by ensuring only authorized personnel can access sensitive information.
+ **Technical Troubleshooting & Support:** Troubleshoot, identify, and resolve technical identity and access management-related issues, providing expert support to internal teams and end-users during and after integration.
+ **Collaboration & Communication:** Coordinate cross-functional teams, including Information Security, IT Operations, HR, and Application Development, to ensure effective IAM implementation and seamless integration with business processes. Communicate complex security concepts to technical and non-technical stakeholders.
+ **Documentation & Best Practices:** Develop, review, and maintain comprehensive technical documentation, including architecture diagrams, configuration guides, and operational procedures. Stay up-to-date with IAM best practices, regulatory requirements, and security trends.
**Qualifications:**
+ **Education:** Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience.
+ **Experience:** 5+ years of progressive experience as an IAM Engineer, designing and implementing enterprise scale solutions with significant experience in supporting M&A integration projects preferred.
+ **Technical Expertise:**
+ Proficiency in directory services (e.g., Active Directory, Azure AD, LDAP).
+ Extensive knowledge and experience with authentication standards and technologies such as SSO (SAML, OAuth, OpenID Connect), MFA, and privileged access management (PAM).
+ Hands-on experience with leading IAM platforms (e.g., Okta, Microsoft Azure AD, CyberArk, ForgeRock, Ping Identity, SailPoint).
+ Experience with scripting languages (e.g., PowerShell, Python) for automation and integration.
+ Strong understanding of security principles, risk management, and access control models (e.g., RBAC).
+ Understanding of DevOps practices.
+ Familiarity with Zero Trust architecture principles.
+ Familiarity with AI/ML concepts and their practical application in security and risk management, especially in IAM context.
+ **M&A Specific Skills:** Proven track record of managing complex integration projects, including assessing existing IAM capabilities, workflow, systems, and processes of acquired entities. Ability to navigate the complexities of integrating diverse identity infrastructures.
+ Strong communication and interpersonal skills to collaborate effectively with various teams and stakeholders.
+ Detail-oriented mindset to ensure precise access control configurations and compliance.
+ Excellent problem-solving and analytical abilities to troubleshoot access issues and design solutions for unique business requirements
+ Must be a self-starter who takes full ownership of projects from inception to completion , holding oneself accountable for the security and operation integrity of IAM platform.
+ Ability to manage multiple priorities and meet tight deadlines in a fast-paced M&A environment.
+ Adaptability to stay ahead of evolving IAM technologies and security threats.
**Anticipated salary range:** $94,900 - $135,600
**Bonus eligible:** No
**Benefits:** Cardinal Health offers a wide variety of benefits and programs to support health and well-being.
+ Medical, dental and vision coverage
+ Paid time off plan
+ Health savings account (HSA)
+ 401k savings plan
+ Access to wages before pay day with my FlexPay
+ Flexible spending accounts (FSAs)
+ Short- and long-term disability coverage
+ Work-Life resources
+ Paid parental leave
+ Healthy lifestyle programs
**Application window anticipated to close:** 12/20/2025 *if interested in opportunity, please submit application as soon as possible.
The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate's geographical location, relevant education, experience and skills and an evaluation of internal pay equity.
_Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply._
_Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal_ _Opportunity/Affirmative_ _Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law._
_To read and review this privacy notice click_ here (***************************************************************************************************************************
Journeyman Cloud Security Engineer - Top Secret/Q Cleared
Security architect job in Las Vegas, NV
Zachary Piper Solutions is seeking a Journeyman Cloud Security Engineer to support the NNSA in safeguarding the nation's nuclear security infrastructure. This is a contract-to-hire opportunity based out of Las Vegas, Nevada for cleared senior professionals to lead proactive, AI-augmented defense of mission-critical hybrid cloud environments on multi-million-dollar federal contracts. As a Journeyman Cloud Security Engineer, you'll drive RMF compliance, automate NIST controls, and mentor teams within operations at the NNSA.
Responsibilities for the Journeyman Cloud Security Engineer include:
* Lead RMF package development in eMASS for Azure/AWS/GCP migrations and continuous ATO monitoring.
* Automate STIG/SCAP compliance and policy-as-code enforcement using Python/Boto3, Terraform, and OPA.
* Conduct proactive threat hunting with AI/ML tools (e.g., AWS Macie, Azure Sentinel) and zero-downtime vuln remediation.
* Secure DevSecOps pipelines (GitHub Actions, SonarQube, CloudFormation) and harden VMware VCF per NIST 800-161.
Required qualifications for the role include:
* 5+ years in federal cloud cybersecurity or related high-assurance environments
* Expert-level RMF implementation, NIST 800-53 controls, and FISMA audit leadership
* Advanced scripting/automation (Python/Bash, Boto3, Terraform) and policy-as-code (OPA)
* BA/BS degree (Computer Science, Cybersecurity, or equivalent)
Clearance: Active DOE "Q" or Top Secret (TS) Clearance (must be current and transferable).
* Skills:
RMF/eMASS/POA&M mastery in cloud migrations
AI/ML-driven threat hunting (Macie, Sentinel)
Zero-downtime patching (SCCM/GPO, blue-green)
DevSecOps shift-left (SonarQube, IaC)
VMware VCF hardening (NIST 800-161 supply chain)
Compensation for the Senior Cloud Security Engineer includes:
* Target salary: $120,000 (full-time equivalent)
* Full Standard Benefits: PTO, Paid Holidays, Medical, Dental, Vision, 401k plan, Sick leave as required by law
This job opens for applications on 11/13/25. Applications for this job will be accepted for at least 30 days from the posting date.
#LI-AD1
#LI-Onsite
DOE Q clearance, Top Secret clearance, TS/SCI, active clearance, Nevada National Security Site, NNSS, NNSA, National Nuclear Security Administration, Las Vegas onsite, 5 days onsite, contract-to-hire, RMF, Risk Management Framework, eMASS, POA&M, NIST 800-53, AU-2, audit logging, Azure security, AWS security, GCP security, cloud migration, ATO, Authority to Operate, FISMA audit, NIST CSF, policy-as-code, OPA, Open Policy Agent, Terraform, CloudFormation, IaC, Infrastructure as Code, STIG, SCAP compliance, Tenable.io, vulnerability assessment, vulnerability management, prioritization, remediation scripting, Python automation, Bash scripting, Boto3, error handling, AI/ML threat hunting, AWS Macie, Azure Sentinel, anomaly detection, proactive security, zero-downtime patching, SCCM, GPO, blue-green deployment, DevSecOps, GitHub Actions, SonarQube, shift-left security, VMware VCF, VMware Cloud Foundation, hybrid cloud, NIST 800-161, supply chain risk, federal SOC, ESOC, Enterprise Security Operations Center, Deloitte partnership, SIEM architecture, cyber engineering, SOC analysts, incident response, mentorship, team leadership, cloud vuln assessment, continuous monitoring, compliance automation, federal cybersecurity, high-assurance environments, nuclear deterrence, stockpile stewardship, mission-critical systems, proactive AI threats, Q-cleared experience, cybersecurity leadership, cloud security engineer, senior cloud security, RMF implementation, FISMA compliance, security infrastructure, scripting proficiency, automation tools, security tools integration, network security, system security, federal security standards, multi-million-dollar contracts, Zachary Piper Solutions, Zen Prasertsin, Mike Ewell, Chief Growth Officer, PwC alumni, cyber ops expert, exclusive search, 24-hour feedback, technical interview panel, phone screen, resume review, offer turnaround, 120k salary, BA/BS degree, computer science degree, cybersecurity degree, onsite requirement, 24-hour notice, interview availability
Security Engineer IT- Information Technology
Security architect job in Reno, NV
Come join Team Atlantis! This position is responsible for ensuring that sensitive data is kept confidential. Document and report security threats. Make sure the right software and hardware are in place, supervise IT projects that guarantee the safety of valuable information as well as our internet and intranet infrastructure. Ensures compliance with policies, procedures, and compliance frameworks required by regulatory bodies.
Responsibilities
Engineering, implementing and monitoring security measures to protect computer systems, networks, applications, and information.
Assists with development of organizational policies, procedures, and best practices supporting information security and compliance initiatives.
Monitors, reviews, and analyzes log and alert data from company systems, network, and security devices for potential security and compliance events.
Identifying and defining system security requirements.
Designing computer security architecture and developing detailed cyber security designs.
Preparing and documenting standard operating procedures and protocols.
Configuring and troubleshooting security infrastructure devices.
Developing technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
Ensuring that the company knows as quickly as possible about security incidents.
Writing comprehensive reports, including assessment-based findings, outcomes, and propositions for further system security enhancement.
Working with and providing reports for compliance audits.
Other assignments as assigned my management.
The incumbent in this position works on-site at all properties and interfaces with external/internal customers, Team Members, and vendors on a regular basis. The position's work schedule varies and may include Saturday/Sunday and evening work depending on the needs of the operation.
While performing the duties of this job, the employee is occasionally required to stand; walk; sit; use hands to finger, handle or feel objects, tools or controls; reach with hands and arms; climb stairs; balance; stoop, kneel crouch or crawl; talk, and hear. The employee must occasionally lift and/or move up to 75 pounds. Specific vision abilities required by the job include close vision, distance vision, color vision, peripheral vision, depth perception and the ability to focus.
Qualifications
CERTIFICATES AND LICENSES:
CISM
GSEC
CCNA
CEH
OSCP
CISSP
Nevada Gaming Registration
Colorado Gaming License
Qualifications:
At least three (3) years of education, training, and/or experience in IT security monitoring and analysis, vulnerability analysis, risk analysis, or similar cybersecurity-related fields preferred.
Proven track record of successfully implementing IT projects in a medium to large network environment.
Knowledge and understanding of enterprise networking protocols and concepts, server operating systems (including Windows, Linux, and VMWare), and core security principles.
Hands on experience with common information security solutions, including firewalls, IDS/IPS, SIEM, endpoint protection, and data leakage protection.
Strong analytical and problem-solving skills.
Attention to detail in both analysis and documentation.
***Must adhere to all grooming standards, no "visible" tattoos/piercings or unnatural hair colors***
Atlantis Casino Resort Spa fosters a team working environment and an environment that is focused on Team Member recognition and appreciation. Some of the ways in which we accomplish this is by offering the following:
Comprehensive benefits (medical, dental, vision, supplemental coverage)
401K retirement savings plan + discretionary match
Education Tuition Reimbursement Program
Paid Vacation
Holiday Pay
Weekly Resort Prizes
Career Development and Training Workshops
FREE daily meal
Internal Advancement
We can recommend jobs specifically for you! Click here to get started.
Auto-ApplyOffensive Security Engineer, Assessments (Web3)
Security architect job in Carson City, NV
Ready to be pushed beyond what you think you're capable of? At Coinbase, our mission is to increase economic freedom in the world. It's a massive, ambitious opportunity that demands the best of us, every day, as we build the emerging onchain platform - and with it, the future global financial system.
To achieve our mission, we're seeking a very specific candidate. We want someone who is passionate about our mission and who believes in the power of crypto and blockchain technology to update the financial system. We want someone who is eager to leave their mark on the world, who relishes the pressure and privilege of working with high caliber colleagues, and who actively seeks feedback to keep leveling up. We want someone who will run towards, not away from, solving the company's hardest problems.
Our ******************************** is intense and isn't for everyone. But if you want to build the future alongside others who excel in their disciplines and expect the same from you, there's no better place to be.
While many roles at Coinbase are remote-first, we are not remote-only. In-person participation is required throughout the year. Team and company-wide offsites are held multiple times annually to foster collaboration, connection, and alignment. Attendance is expected and fully supported.
The Application Security organization at Coinbase is seeking to hire an experienced Offensive Security Engineer specializing in Web3 penetration testing and Web3 bug bounty program management and optimization. In this role, you will collaborate with the Bug Bounty Program Lead to drive Web3 bug bounty triage, validation, and strategic initiatives aimed at increasing program efficiency, maturity, and hacker engagement. You will work closely with whitehat hackers, security engineers, and cross-functional teams to enhance Coinbase's security posture through an effective bug bounty program. Additionally, you will perform penetration tests on Web3 technologies and applications, ensuring the security of Coinbase's blockchain-based products and services.
*What you'll be doing (ie. job duties):*
* Conduct security assessments of Web3 products and services, including smart contracts, DeFi protocols, and blockchain infrastructure.
* Collaborate with partner teams to enhance detection and response capabilities for Web3 vulnerabilities.
* Stay informed on emerging security trends, advisories, and academic research in the Web3 space.
* Lead Web3 bug bounty triage and validation, ensuring timely and accurate assessments of reported vulnerabilities.
* Develop and implement strategies to incentivize high-quality bug bounty submissions and engage with the hacker community.
* Manage the Web3 bug bounty program, including scope updates, researcher communication, and payout disbursements.
* Analyze bug bounty data to identify trends, common vulnerabilities, and areas for improvement.
* Collaborate with engineering teams to prioritize and remediate vulnerabilities identified through the bug bounty program.
* Mentor and train junior security engineers in Web3 bug bounty triage and analysis.
* Provide on-call support for critical Web3 bug bounty-related incidents.
* Document and report on Web3 bug bounty metrics and program effectiveness.
*What we look for in you (ie. job requirements):*
* Bachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering, or a related field.
* 3+ years of experience in Web3 application security and penetration testing.
* Proven track record of identifying critical vulnerabilities across the blockchain protocol stack, Web2, and Web3 components.
* Extensive knowledge of the blockchain ecosystem, including L1/L2 networks, DeFi protocols, and staking mechanisms.
* Deep understanding of Web2 security concepts and common vulnerabilities (e.g., OWASP Top 10, SANS Top 25).
* Strong analytical skills to identify trends and patterns in vulnerabilities.
* Excellent communication skills for engaging with internal teams.
* Passion for security and a drive to improve Web3 security posture.
* Ability to work independently and take ownership of penetration testing initiatives.
* Energy and self-drive for continuous learning in the rapidly evolving crypto space.
* Excellence in clear, direct, and kind communication with technical and non-technical stakeholders.
* Experience building relationships with product, engineering, and security teams.
*Nice to haves:*
* Participation in CTFs, bug bounty programs, or open-source security research.
* Expertise in Application Security, Network Security, or Cloud Security.
* Relevant security certifications (e.g., OSCP, GPEN).
* Experience developing and implementing security tooling to support bug bounty triage and analysis.
* Experience with bug bounty programs and platforms, including triage, validation, and researcher communication.
* Strong analytical skills to identify trends and patterns in bug bounty submissions.
* Excellent communication skills to effectively engage with bug bounty researchers.
Position ID: P69494
\#LI-remote
*Pay Transparency Notice:* Depending on your work location, the target annual salary for this position can range as detailed below. Full time offers from Coinbase also include bonus eligibility + equity eligibility**+ benefits (including medical, dental, vision and 401(k)).
Pay Range:
$152,405-$179,300 USD
Please be advised that each candidate may submit a maximum of four applications within any 30-day period. We encourage you to carefully evaluate how your skills and interests align with Coinbase's roles before applying.
Commitment to Equal Opportunity
Coinbase is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sex, gender expression or identity, sexual orientation or any other basis protected by applicable law. Coinbase will also consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state and local law. For US applicants, you may view the *********************************************** in certain locations, as required by law.
Coinbase is also committed to providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please contact us at accommodations***********************************
*Global Data Privacy Notice for Job Candidates and Applicants*
Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. Our full notice outlining how data will be processed as part of the application procedure for applicable locations is available ********************************************************** By submitting your application, you are agreeing to our use and processing of your data as required.
*AI Disclosure*
For select roles, Coinbase is piloting an AI tool based on machine learning technologies to conduct initial screening interviews to qualified applicants. The tool simulates realistic interview scenarios and engages in dynamic conversation. A human recruiter will review your interview responses, provided in the form of a voice recording and/or transcript, to assess them against the qualifications and characteristics outlined in the job description.
For select roles, Coinbase is also piloting an AI interview intelligence platform to transcribe and summarize interview notes, allowing our interviewers to fully focus on you as the candidate.
*The above pilots are for testing purposes and Coinbase will not use AI to make decisions impacting employment*. To request a reasonable accommodation due to disability, please contact accommodations[at]coinbase.com
Infrastructure Security Architect
Security architect job in Las Vegas, NV
At TensorWave, we're leading the charge in AI compute, building a versatile cloud platform that's driving the next generation of AI innovation. We're focused on creating a foundation that empowers cutting-edge advancements in intelligent computing, pushing the boundaries of what's possible in the AI landscape.
About the Role
The Sr. Infrastructure Security Architect is a critical, high-impact role responsible for building and enforcing a unified security architecture across High Performance Compute (HPC), cloud environments, and core organizational systems. This hybrid position combines security architecture, DevSecOps engineering, offensive security, and cross-organizational alignment, ensuring that security is integrated at the design phase-not bolted on as an afterthought.
This role will establish the enterprise-wide security architecture strategy, implement automated controls, validate safeguards through ethical hacking techniques, and ensure alignment between Infrastructure, IT, Security, Engineering, Software Development, and Compliance.
Responsibilities
1. Strategic Architecture & Long-Term Security Design
Develop and maintain a holistic security architecture roadmap spanning HPC, cloud platforms, on-prem infrastructure, and internal applications.
Architect solutions aligned with NIST 800-53, NIST CSF, CIS benchmarks, and other relevant frameworks.
Establish and evangelize a Security-by-Design culture across engineering and operational teams.
2. Automation & Engineering (DevSecOps)
Build automated pipelines for security controls, monitoring, evidence collection, and audit readiness.
Engineer automated hardening, patching, and configuration management solutions across infrastructure and cloud assets.
Integrate security directly into CI/CD workflows, cloud provisioning, and infrastructure-as-code (IaC).
3. Offensive Security & Risk Validation
Conduct hands-on ethical hacking, security testing, threat modeling, and adversarial simulations to validate security controls.
Identify systemic weaknesses, prioritize risks, and define technical mitigation strategies.
Lead or support purple-team activities with Security, Infrastructure, and Software Engineering.
4. Cross-Functional Leadership & Alignment
Partner with Infrastructure, IT, Engineering, Software Development, Security, and Compliance to ensure unified execution of security policies.
Translate regulatory and audit requirements into actionable engineering tasks.
Act as a key technical advisor during audits to ensure evidence, control operation, and documentation meet standards.
5. Governance, Policy, & Audit Support
Architect scalable processes that ensure continuous audit readiness and reduce manual evidence creation.
Define baseline security standards, technical controls, and operational guardrails.
Support certifications, assessments, and customer security reviews.
Who You Are
Required:
7+ years in Infrastructure Security, DevSecOps, or Security Architecture
Expertise in security frameworks: NIST 800-53, NIST CSF, CIS
Extensive experience designing secure cloud and HPC environments
Strong automation and engineering background (IaC, CI/CD, cloud-native security tooling)
Offensive security experience (ethical hacking, red/purple team, threat modeling)
Proven ability to lead cross-functional teams and drive organizational alignment
Experience supporting audits, governance, and compliance initiatives
Preferred
Certifications: OSCP, CISSP, GIAC (GCSA, GMOB, GCPN), or similar
Experience with SOC 2, HIPAA, PCI, or other regulated environments
Experience with GPU clusters, HPC environments, or high-throughput compute systems
Deep familiarity with cloud security (AWS, GCP, Azure)
What We Bring
Stock Options
100% paid Medical, Dental, and Vision insurance
Life and Voluntary Supplemental Insurance
Short Term Disability Insurance
Flexible Spending Account
401(k)
Flexible PTO
Paid Holidays
Parental Leave
Mental Health Benefits through Spring Health
Auto-Apply