Security Engineer responsible for technical security controls across the platform, cloud infrastructure, and corporate environment.
Compensation
The expected base salary range is $200,000 to $250,000 (NYC). Total compensation includes base salary, equity, and a full range of benefits and perks. Final compensation depends on skills, experience, qualifications, and location, and is set during the interview process.
Responsibilities
Learn environment and take ownership of focus area
Close highest-risk gaps in AWS environment
Tune CI/CD and cloud scanning
Run and mature vulnerability management program
Triage and respond to findings from automated tooling, bug bounty reports, and third-party assessments
Hands‑on remote cybersecurity consultant responsible for implementing and maintaining security controls across repositories, pipelines, and cloud accounts.
Compensation
Your starting rate is negotiable depending on your skills and experience. This is an hourly paid position. Contractors are paid monthly via wire transfer.
Responsibilities
Run security maturity assessments
Write security policies and procedures
Configure and enforce SSO and MFA
Harden Passbolt and implement secrets manager
Implement baseline hardening for laptops, cloud accounts, backups and logging
The US national base salary range for this position is from $104,300.00 - $193,700.00
Responsibilities
Work with DevOps teams to design, implement, and maintain secure CI/CD pipelines that integrate security testing at every stage of the software development lifecycle
Implement and tune automated security scanning, including SAST, DAST, SCA, and container scanning
Deploy and support API security tools, ensuring findings are consistently reported to a central aggregator
Collaborate with development teams to promote secure coding practices and provide security guidance throughout the development process
Evaluate and help govern the secure use of agentic AI coding tools across engineering teams, establishing guardrails and detection strategies to mitigate risks such as hallucinated dependencies, injected vulnerabilities, and insufficient oversight
Lead and manage the SecOps team, overseeing security operations, incident response, vulnerability management, and ISO 27001 compliance for a full-cloud ad tech platform.
The Security Engineer, Secure Development is responsible for establishing, leading, and enforcing security standards for all internally developed software, automation, and AI enabled solutions prior to customer delivery or internal production use.
Responsibilities
Own and enforce secure development standards for all internally built applications, platforms, automation, and tooling across a diverse stack
Perform and oversee manual and automated code reviews
Establish clear release gates requiring security approval before software or AI systems are delivered to customers or promoted internally
Define remediation standards and risk acceptance criteria for security findings
Conduct secure design reviews and application threat modeling during early development phases
Lead enterprise DevSecOps architecture, strategy, and standards to enable secure, scalable software delivery across S&P Global’s global development teams.
Compensation
S&P Global states that the anticipated base salary range for this position is $150,000 to $205,000.
Responsibilities
Define and lead the enterprise DevSecOps architecture, roadmap, and adoption strategy
Embed automated security controls across the full software development lifecycle
Establish and govern architecture standards for source control, build automation, artifact management, release orchestration, observability, vulnerability management, and software supply‑chain security
Lead architecture reviews, threat modeling sessions, design decisions, and proofs of concept
Drive platform reliability, resilience, and operational readiness through measurable engineering practices
Requirements
Bachelor’s degree in computer science, engineering, cybersecurity, information systems, or equivalent practical experience
Nice to have: Regulated or security‑sensitive enterprise environment
Nice to have: Managed container orchestration services
Cloud DevSecOps EngineerNewZact · Remote, India
Member of Technical Staff, SecurityNewProfound · New York, US
Application Security EngineerNewArdent · Remote
SecOps ManagerEquativ · Paris, France
Associate Director, DevSecOps ArchitectS&P Global · Princeton, US
AI Security EngineerAmazon · Jessup, US+2 more