Focus on reducing risk at scale by building the security infrastructure, automation, and tooling that empowers engineers to ship secure products with confidence, embedding secure-by-default practices throughout the SDLC.
Compensation
US Zone 2
$193,500—$261,900 USD
US Zone 3
$172,000—$232,800 USD
Responsibilities
Build and maintain security tools, automation, and libraries to enable secure-by-default development across engineering teams
Design and implement custom security rules (e.g., Semgrep, CodeQL) to detect and prevent common and emerging vulnerability patterns
Act as a subject matter expert on application security across web, mobile, and desktop environments
Improve and scale the Secure Development Lifecycle (SDLC) by integrating tools, checks, and processes into engineering workflows
Perform targeted code reviews, and develop follow-up tooling or controls to prevent regressions
Security Engineer provides technical support in the areas of vulnerability and risk assessment, network security, product evaluation, and security implementation, adhering to USTRANSCOM processes and procedures.
Responsibilities
Reviews evolving NIST requirements to support risk assessment activities
Prepares detailed specifications from which cybersecurity deficiencies identified during risk assessment will be mitigated/remediated
Collaborates closely with government customers to develop appropriate POA&Ms and support risk acceptance activities
Responsible for designing and implementing solutions for protecting confidentiality, integrity, and availability of sensitive information
Provides technical evaluations of IT systems and assists with making security improvements
Requirements
Bachelor’s degree in Computer Science, Cybersecurity, or equivalent Information Technology academic studies
Lead application assurance governance, secure SDLC, DevSecOps, and risk management for BCG’s enterprise applications.
Responsibilities
Support the definition, maintenance, and continuous improvement of application assurance governance processes across BCG's application and product landscape.
Help establish secure SDLC expectations, application security standards, and control requirements for product and engineering teams.
Partner with application developers, product owners, architects, security champions, and engineering teams to improve application security posture across the enterprise.
Track application security risks, recurring control gaps, remediation trends, and governance exceptions across application environments.
Maintain application security coverage data, assurance metrics, and governance records to support risk reporting and decision-making.
Requirements
Bachelor's degree in computer science, information security, engineering, or a related field, or equivalent practical experience.
Lead AI security assurance testing programs, manage complex technical assurance initiatives, collaborate across engineering, legal, and product teams to ensure compliance and secure AI/ML deployments.
Provide oversight and issues as a critical second line of defense function, establishing and maintaining technical assurance testing frameworks for AI/ML and traditional security ecosystems.
Lead AI security by effectively communicating testing results, control deficiencies, and mitigation strategies to technical leadership, legal counsel, and executive stakeholders.
Translate testing insights into actionable engineering recommendations and partner with first-line research and product teams to continuously optimize privacy and security strategies for Generative AI and traditional ML models.
Collaborate with the Legal department to evaluate the compliance implications of identified AI privacy and security risks, ensuring all assurance efforts align with internal policies and evolving global AI regulations.
Design, implement, and scale security assurance frameworks, leveraging scripting and custom tooling to programmatically validate that AI safeguards and guardrails perform as intended.
Requirements
Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience
Design, implement, and maintain security controls and architectures to protect the company's cloud infrastructure, applications, and data from cyber threats.
Compensation
Starting Salary: $100,000 - $130,000*
Responsibilities
Design, implement, and maintain security controls and architectures
Improve cloud security posture and vulnerability management program
Build and enforce software supply chain controls
Extend security into CI/CD pipelines
Build automation, internal tooling, and integrations
Requirements
Bachelor's degree in Computer Science or related field
Senior Security Engineer responsible for implementing, maintaining, and optimizing enterprise security tools and platforms, automating controls, and ensuring security across cloud and on-premises environments.
Responsibilities
Implement, maintain, and optimize enterprise security tools and centralized platforms.
Support system onboarding, integrations, configuration, and tooling rationalization.
Ensure security platform performance, health, and coverage.
Develop automation scripts and workflows to streamline security operations.
Implement automated controls, policy enforcement, and orchestration solutions.
Design, develop, and support automation solutions for Identity and Access Management (IAM) operations, governance, compliance, and security of both human and non-human identities, integrating AI-enabled capabilities.
Responsibilities
Design and automate IAM processes including onboarding, offboarding, access requests, provisioning, deprovisioning, access reviews, and privileged access management
Application Security EngineerNewDropbox · Remote, US
Security EngineerNewParagon Technology Group, Inc · Scott AFB, US
Global Cybersecurity Senior Specialist – App AssuranceNewBoston Consulting Group · Gurgaon, India
Privacy and Security Technical Assurance Lead, RCINewGoogle · Dublin, Ireland
Security EngineerNewRVO Health · Remote, US
Senior Security EngineerRWS Group · Bangalore, India