Security As Code

Security As Code Engineer Jobs

12 jobs found

3d ago

Security Engineer - Cloud Security Controls

PNC Financial Services Group Birmingham, AL

Birmingham, AL

3d ago

$91k - $186k/yr Full time Automation Azure CI/CD

Apply Now

Job Description

PNC Financial Services Group is hiring a security engineer to strengthen cloud defenses across public cloud workloads. This role sits on PNC’s Cloud Security team and focuses on building, testing, and deploying security controls for Azure and AWS, working in close partnership with cloud architects and operational security groups.

Based in Birmingham, AL, this onsite position supports security assessment and control delivery using CSPM capabilities and security-as-code practices within CI/CD workflows.

What you’ll do

Build and test security controls for Azure resources and AWS services.
Validate control effectiveness and promote approved controls to production workloads.
Engineer and configure CSPM tooling to analyze and assess cloud workloads for compliance in a CI/CD environment.
Assess, implement, automate, and document security solutions and processes for Microsoft Azure and AWS.
Provide analysis of workloads to help ensure alignment with operational security requirements before production deployment.
Collaborate with the Cloud Security Product Owner to refine backlog tickets and help define priority and sizing.
Automate and orchestrate cloud software deployment via CI/CD so enterprise security standards, policies, configurations, and architectures are integrated for applications, platforms, and infrastructure.
Assist DevOps team members with development and operationalization of security.
Help ensure the security posture of applications seeking deployment into production.
Serve as a subject matter expert for applying security concepts and maintaining technology solutions, including deliverables aligned to project timelines.
Work with architecture to translate high-level designs into implementation details, including sizing, integration details, onboarding, and operationalization.
Evaluate patches, updates, and ongoing maintenance impacts, using change control and governance processes to align solutions with new standards.
Develop detailed implementation, configuration, design, and engineering documentation, and build and implement solutions.
Partner with operational teams to support day-to-day transition and operational readiness.
Provide engineering support for existing production technology and collaborate with other groups as needed.

Required qualifications

Deep experience with AWS and/or Azure cloud services in an enterprise environment.
Thorough understanding of cloud security best practices.
Experience conducting security gap analysis on cloud services or cloud infrastructure.
Experience implementing security controls for public cloud workloads in Azure and AWS.
Experience creating security solutions that balance security needs with other corporate priorities.
Proficiency in one or more scripting languages such as Python, PowerShell, Bash, etc.
Expertise with Git, including branching workflows.
Experience testing security controls to ensure effectiveness.
Strong written and verbal communication skills.
Process and detail oriented.
Demonstrated project leadership, helping guide direction of large team initiatives.
Ability to consider approaches for security controls at scale across multiple cloud service providers.
Expertise in SQL or SQL-type query languages.
Typically requires a university or college degree and 5+ years of industry-relevant experience.
In lieu of a degree, a comparable combination of education, job-specific certification(s), and experience may be considered.
Bachelors

Preferred qualifications

Azure Fundamentals - AZ-900
Azure Security Engineer Associate - AZ-500
AWS Cloud Security Engineer

Technologies you’ll work with

Azure, AWS
Cloud Security Posture Management (CSPM) tools
Security as Code (SAC) pipeline
CI/CD
Infrastructure as Code (IAC) teams
Python, PowerShell, Bash
Git
SQL and SQL-type query languages
Azure Fundamentals - AZ-900
Azure Security Engineer Associate - AZ-500
AWS Cloud Security Engineer

Base salary range

USD 91,000 - 185,900 per year.

Benefits

Medical/prescription drug coverage with a Health Savings Account feature
Dental and vision options
Employee and spouse/child life insurance
Short- and long-term disability protection
401(k) with PNC match
Pension
Stock purchase plans
Dependent care reimbursement account
Back-up child/elder care
Adoption, surrogacy, and doula reimbursement
Educational assistance, including select programs fully paid
Robust wellness program with financial incentives
Maternity and/or parental leave
Up to 11 paid holidays each year
9 occasional absence days each year, unless otherwise required by law
Between 15 to 25 vacation days each year, depending on career level
Disability Accommodations Statement: reasonable accommodations to employment applicants and qualified individuals with a disability who need an accommodation to perform the essential functions of their positions

Application window

Generally expected to be posted for two business days from 05/11/2026, though it may be extended with business discretion.

View full job page →

10d ago

Security Engineer – Cloud Security (AWS)

Xcel Energy Denver, CO

Denver, CO

10d ago

$98k - $139k/yr Full time Amazon Web Services Aws Inspector And Security Hub Cloud

Apply Now

Job Description

Xcel Energy offers a hybrid Security Engineer role focused on building and running a cloud security program that reduces risk through visibility, guardrails, and automation. You will work across AWS environments, coordinate remediation with responsible teams, and help strengthen security practices for DevSecOps and cloud-hosted applications.

Responsibilities

Build and mature the AWS cloud security program with clear ownership, processes, and workflows.
Identify, prioritize, and communicate cloud security risk across environments and stakeholders.
Implement preventative controls and guardrails to reduce risk before deployment.
Use automation and integration to reduce manual effort and improve consistency in security checks and workflows.
Support remediation by driving findings to the appropriate owners and tracking outcomes.
Act as the primary cloud security engineer for AWS environments, including commercial, GovCloud, dev, and test accounts.
Leverage AWS native security capabilities such as Inspector, Security Hub, and related services to identify and analyze risk.
Maintain visibility across IAM, network configuration, logging, monitoring, and workload security posture.
Identify issues including overly permissive access, unused accounts, misconfigurations, and exposure risks.
Develop and implement guardrails, policies, and controls to prevent insecure configurations and reduce attack surface.
Promote hardened images, containers, and standardized builds to reduce risk at deployment.
Integrate cloud security findings into existing workflows and coordinate remediation with responsible teams.
Collaborate with Cloud Platform, SAP, Enterprise Architecture, and other teams to implement meaningful security improvements.
Partner with Application Security to support DevSecOps practices, including CI/CD pipeline integration, gates, and automation.
Support SAP cloud security needs and maintain awareness of SAP-specific risks within AWS environments.
Use APIs, scripting, and integration to automate data collection, analysis, and workflow execution.
Analyze cloud risk in context and communicate clear, actionable recommendations to stakeholders.
Support logging and monitoring setup and integration while deferring operational ownership to SOC/IR teams.

Requirements

Minimum 5 years of experience in information security.
Strong hands-on experience with AWS cloud environments and security concepts.
Strong understanding of AWS IAM, networking, logging, monitoring, and workload security.
Experience using AWS native security tools such as Inspector, Security Hub, or equivalent.
Strong understanding of DevSecOps, CI/CD pipelines, and application security fundamentals.
Basic understanding of SAP environments in cloud-hosted architectures.
Experience identifying and communicating risk related to cloud configurations and architecture.
Strong analytical and complex technical problem-solving skills.
Ability to communicate technical risk clearly to non-technical stakeholders.
Experience with APIs, scripting, or automation for data integration and workflow execution.
Ability to operate independently and build a program with limited oversight.

Technologies

AWS
Inspector
Security Hub
IAM
CI/CD pipelines
DevSecOps
APIs
Scripting
Automation
Containers
SAP
Azure
GovCloud

Benefits

Annual Incentive Program
Medical/Pharmacy Plan
Dental
Vision
Life Insurance
Dependent Care Reimbursement Account
Health Care Reimbursement Account
Health Savings Account (HSA) (if enrolled in eligible health plan)
Limited-Purpose FSA (if enrolled in eligible health plan and HSA)
Transportation Reimbursement Account
Short-term disability (STD)
Long-term disability (LTD)
Employee Assistance Program (EAP)
Fitness Center Reimbursement (if enrolled in eligible health plan)
Tuition reimbursement
Transit programs
Employee recognition program
Pension
401(k) plan
Paid time off (PTO)
Holidays
Volunteer Paid Time Off (VPTO)
Parental Leave

Preferred Qualifications

Experience across multiple cloud environments, including AWS multi-account and GovCloud architectures.
Experience supporting Azure cloud environments.
Experience implementing preventative security controls such as guardrails, policy enforcement, or pipeline gating.
Experience improving data quality and visibility across multiple cloud and security data sources.
Experience working with enterprise cloud platform, networking, or architecture teams.

Certifications

AWS Certified Security – Specialty required.
AWS Certified Solutions Architect – Professional or AWS Certified DevOps Engineer – Professional preferred.

Location and Compensation

Denver, CO (Hybrid): three days per week in the office. Must be located within Xcel Energy territory and reasonably close to an Xcel Energy facility. Denver, Colorado and Minnesota areas preferred.

Salary Range: USD 97,600 - 138,600 per year.

View full job page →

14d ago

Security Engineer

Mary Kay Inc Dallas, TX

Dallas, TX

14d ago

Full time Azure DevOps CI/CD Cloud Platforms

Apply Now

Job Description

Responsibilities

Design, deploy, and maintain security platforms and automation tooling.
Develop integrations using APIs and Infrastructure as Code to streamline security workflows.
Enhance security across cloud services, containerized workloads, Kubernetes environments, and CI/CD pipelines.
Create and tune detections for threats in cloud, endpoint, identity, and container contexts.
Participate in threat hunting and incident response activities.
Contribute to Detection-as-Code initiatives and broader automation efforts.

Requirements

2–5 years of experience in Security Engineering, Platform Engineering, DevSecOps, or related fields.
Bachelor's degree; security certifications such as Security+, AZ-500, AWS Security Specialty, or CKS are preferred.
Experience with Linux operating systems.
Hands-on experience with AWS, Azure, or GCP.
Knowledge of Kubernetes and container technologies.
Proficiency in Python, Go, PowerShell, or Bash.
Experience using Git and automation workflows.
Strong troubleshooting skills and effective communication.
Experience with SIEM/EDR platforms (Microsoft Sentinel, Defender XDR, Splunk, Elastic, CrowdStrike, Chronicle, Cortex XSIAM) is preferred.
Experience with cloud security tools (Wiz, Prisma Cloud, Defender for Cloud, Orca, Lacework) is preferred.
Experience with CI/CD and Infrastructure-as-Code (GitHub Actions, GitLab CI, Azure DevOps, Terraform, Helm) is preferred.
Knowledge of MITRE ATT&CK framework is preferred.
Threat hunting experience is preferred.

Technologies

Linux
AWS
Azure
GCP
Kubernetes
Python
Go
PowerShell
Bash
Git
GitHub Actions
GitLab CI
Azure DevOps
Terraform
Helm
Wiz
Prisma Cloud
Defender for Cloud
Orca
Lacework
Microsoft Sentinel
Defender XDR
Splunk
Elastic
CrowdStrike
Chronicle
Cortex XSIAM
MITRE ATT&CK

Benefits

Generous Paid Time Off
401K and Profit Sharing
Medical, Dental, and Vision Coverage
Free On-site Fitness Center and Health Clinic
Tuition Reimbursement
Employee Product Discounts

What you’ll need to be successful

2–5 years of experience in Security Engineering, Platform Engineering, DevSecOps, or a related field.
Bachelor's degree; security certifications such as Security+, AZ-500, AWS Security Specialty, or CKS are preferred.
Experience with Linux.
Experience with AWS, Azure, or GCP.
Knowledge of Kubernetes and containers.
Experience with Python, Go, PowerShell, or Bash.
Experience using Git and automation.
Strong troubleshooting and communication skills.
Experience with SIEM/EDR platforms (Microsoft Sentinel, Defender XDR, Splunk, Elastic, CrowdStrike, Chronicle, Cortex XSIAM) is preferred.
Experience with cloud security tools (Wiz, Prisma Cloud, Defender for Cloud, Orca, Lacework) is preferred.
Experience with CI/CD and Infrastructure-as-Code (GitHub Actions, GitLab CI, Azure DevOps, Terraform, Helm) is preferred.
MITRE ATT&CK knowledge is preferred.
Threat hunting experience is preferred.

View full job page →

14d ago

Senior Security Engineer

Neighborhood Loans Downers Grove, IL

Downers Grove, IL

14d ago

$120k+/yr Full time Senior Application Security Cloud Platforms

Apply Now

Job Description

Neighborhood Loans seeks a hands-on Senior Security Engineer to reinforce controls across cloud, application, network, and email security within a regulated mortgage lending environment. This role reports to the Chief Information Officer and operates in a hybrid capacity based in Downers Grove, Illinois.

Responsibilities

Harden and maintain the security configuration of the Azure and Microsoft 365 environment, including Entra ID, Conditional Access, network controls, and Key Vault.
Define and operate the application security program, incorporating SAST, DAST, software composition analysis, and security checks integrated into the CI/CD pipeline.
Administer and tune Mimecast based email security and anti-phishing controls, including policy configuration and handling of delivered threats.
Author and maintain security policies, standards, and supporting documentation to support SOC 2 readiness and ongoing compliance efforts.
Support detection and incident response activities in coordination with the organization’s managed detection and response provider.
Contribute to third-party and vendor risk reviews and to GLBA Safeguards Rule compliance activities.

Requirements

At least seven years of information security experience with hands-on work securing and operating enterprise environments.
Strong expertise with Azure and Microsoft security technologies, including Entra ID, Conditional Access, Key Vault, and identity management.
Proven experience with application security and secure-SDLC tooling (SAST, DAST, and software composition analysis) and CI/CD security integration.
Experience administering endpoint protection and managed detection and response services such as Bitdefender and secure email gateways like Mimecast.
Excellent written communication skills, with the ability to author security policies, standards, and operational documentation.
Experience in regulated industries (financial services, mortgage, or banking) with familiarity with frameworks such as NIST, GLBA, PCI, or HIPAA.
Judgment to prioritize and tailor security controls to the organization’s risk profile.

Technologies

Azure
Microsoft 365
Entra ID
Conditional Access
Key Vault
Mimecast
Bitdefender
SAST
DAST
Software composition analysis
Encompass
PowerShell
Python
Bicep
Terraform
EDR
MDR
NIST
GLBA
PCI
HIPAA

Benefits

401(k)
Dental insurance
Health insurance
Paid time off
Vision insurance

Pay

From USD 120,000 per year

Application Question(s)

Do you have mortgage or fintech industry experience, including experience with Encompass or other loan origination systems?

Experience

Information security: 5 years (Preferred)

Work Location

Hybrid remote in Downers Grove, IL 60515

Job Type / Additional Information

Full-Time
Primarily Remote / Chicagoland area candidates preferred
Reports to Chief Information Officer

About Us

At Neighborhood Loans we are dedicated mortgage lending professionals focused on making clients our priority. As a residential mortgage lender, we educate and empower consumers in a rapidly evolving market. Our mission centers on delivering exceptional service grounded in ethics, values, and customer care, with the aim of earning the loyalty and trust of homeowners who become lifelong clients and friends.

View full job page →

16d ago

Senior Security Engineer

Miradero Cybersecurity San Francisco, CA 🇺🇸 Remote

San Francisco, CA

16d ago

$100k - $150k/yr Full time Senior Ai Security Cloud Platforms

Apply Now

Job Description

Miradero Cybersecurity offers a 호 or open-ended landscape to shape a security platform from the ground up. This remote California role places you at the core of the engineering effort, with a salary range of USD 100,000 to 150,000 per year. As the first engineering hire, you will define architectural direction, own the telemetry pipeline, and lead the development of a private AI stack that differentiates us from legacy MSSPs. You will collaborate with a lean, high-trust team and have opportunities for technical leadership and equity-based growth in a well-funded startup environment.

Benefits

Dental insurance
Health insurance
Paid time off
Vision insurance

Why join Miradero Cybersecurity

Founding Influence: You are the first engineering hire. Your architectural decisions will shape the company’s technical trajectory.
The AI Moat: Lead the implementation of a private, local AI stack to create a technical edge over traditional MSSPs.
Equity & Growth: Employee equity options in a lean, well-funded startup with a clear path to technical leadership.
Operational Autonomy: A high trust, low micromanagement environment that enables independent ownership.

The right personality

Builder Mentality: Prefer creating durable tools that solve problems rather than repeating manual fixes.
Low Ego / High Output: Comfortable collaborating with a CTO and operating as a peer to the SOC Manager.
Precision-Driven: Value documentation and architectural clarity over quick, ad-hoc solutions.

Responsibilities

Platform Engineering: Architect and implement the multi-tenant telemetry pipeline and enable Detection-as-Code using GitHub or GitLab for version control and CI/CD deployment of detection logic.
Tooling Orchestration: Manage the configuration and integration of CrowdStrike Falcon (EDR) and ArmorPoint (XDR/SIEM), ensuring high-signal telemetry flows from endpoints to analysts.
Python Development: Write production-grade Python scripts to automate SOC tasks, build custom API integrations between security tools and PSA/Documentation systems, and develop internal tooling.
AI Implementation: Co-lead the development of the private AI layer, building Retrieval-Augmented Generation pipelines and LLM-based classifiers to automate triage and summarize findings.
Detection Authoring: Serve as the senior authority for detection content across CrowdStrike and ArmorPoint, tuning rules to minimize false positives.
Technical Pre-Sales: Act as the technical authority on standard client engagements, scoping pilot deployments and ensuring architectural sanity.
Escalation Engineering: Provide the final technical analysis for complex root-cause investigations that extend beyond the SOC's standard playbooks.

Requirements

7+ years in Security Engineering, Detection Engineering, or Platform Architecture.
Strong Python skills are essential; ability to write clean, maintainable automation and API integration code.
DevOps Mindset: Fluent with GitHub and GitLab; experience with CI/CD and treating infrastructure and detections as code.
Deep tooling experience with CrowdStrike Falcon and ArmorPoint (or equivalent enterprise EDR/XDR platforms).
Solid understanding of cloud telemetry (AWS, Azure, GCP) and identity platforms (Entra ID, Okta).
Fluency with MITRE ATT&CK and translating tactics into practical detection logic.

Technologies

Python
GitHub
GitLab
CrowdStrike Falcon
ArmorPoint
AWS
Azure
GCP
Entra ID
Okta
MITRE ATT&CK
CQL
LogScale
RAG (Retrieval-Augmented Generation)
LLM

View full job page →

21d ago

Staff Product Security Engineer, Reviews

Okta San Francisco, CA

San Francisco, CA

21d ago

$180k - $248k/yr Full time Ai Security Api Security Application Security

Apply Now

Job Description

The Staff Product Security Engineer will conduct security reviews, guide secure development practices, and handle externally reported vulnerabilities across Okta's products, including code reviews, penetration testing, and architectural security assessments.

Responsibilities

Conduct security reviews including design reviews, threat modeling, and penetration testing for new features and major changes.
Perform manual secure code reviews across multiple programming languages.
Identify and mitigate security vulnerabilities, providing clear guidance to engineering teams.
Lead product security incidents, assess risks, and drive remediation efforts.
Develop security tools and automation to improve vulnerability detection and assessment.
Mentor junior engineers and provide guidance to non-security staff on secure development practices.
Represent Okta externally through security research, conference talks, and publications.

Requirements

Expertise in identifying OWASP Top 10 and CWE Top 25 vulnerabilities through manual code review.
Strong experience in penetration testing and secure development practices.
Deep technical background in assessing Large Language Models and securing AI integrated software architectures.
Proficiency in multiple programming languages, including Java, Go, Python, and C/C++.
Deep understanding of authentication and authorization protocols (OIDC, SAML, OAuth).
Strong communication skills to explain risks and remediation to developers and leadership.
Ability to automate security testing using large language models and scripting (Python, Bash, etc.).
Experience leading security incidents and risk assessments.

Technologies

Java
Go
Python
C/C++
OIDC
SAML
OAuth
Large Language Models (LLMs)
SAST
DAST
SCA
Fuzzing tools

Benefits

Supporting Your Well-Being
Driving Social Impact
Developing Talent and Fostering Connection + Community

The Okta Experience

Supporting Your Well-Being
Driving Social Impact
Developing Talent and Fostering Connection + Community

View full job page →

22d ago

Lead Security Engineer

JPMorganChase Tampa, FL

Tampa, FL

22d ago

Full time Ai Enabled Security Ai Security Application Security

Apply Now

Job Description

Lead Security Engineer at JPMorganChase, onsite in Tampa, FL, delivering secure software solutions as part of a high-performing Cybersecurity team.

Responsibilities

Develops and implements innovative security solutions, handling design, development, and technical troubleshooting beyond routine approaches to solve complex problems.
Creates secure production code and reviews or debugs code produced by teammates.
Reduces security vulnerabilities by applying industry insights and regulatory requirements, and by establishing processes to measure and improve current controls.
Utilizes enterprise-approved AI capabilities to accelerate threat modeling, vulnerability analysis, and security documentation, validating results and ensuring proper handling of sensitive data.
Collaborates with stakeholders and business leaders to understand security needs and recommends changes during periods of vulnerability.
Performs discovery, vulnerability assessments, penetration testing, and threat modeling across multiple assets, including external applications interfacing with the JPMorganChase network.
Incorporates reuse-first, AI-assisted practices within SDLC/toolchains to strengthen security testing and control validation, ensuring traceability and alignment with resiliency and security expectations.
Contributes to a team culture of diversity, opportunity, inclusion, and respect.
Collaborates effectively with teams located in multiple geographic locations.

Requirements

5+ years of experience with Java and Python in cloud environments (public or private).
Proven ability to plan, design, and implement enterprise-grade security solutions.
Hands-on AI/ML engineering skills, including experience with frameworks such as PyTorch or TensorFlow, and MLOps with CI/CD and model deployment/monitoring.
Deep GenAI expertise (LLMs, prompt engineering, RAG, fine-tuning, embeddings/vector databases) and Agentic AI knowledge (tool/function calling, orchestration frameworks, multi-agent workflows, evaluation guardrails, and responsible AI/security).
Demonstrated experience using enterprise-approved AI capabilities to support security engineering workflows with strong validation practices and awareness of data sensitivity.
Ability to review and validate AI-assisted code and security recommendations before adoption, escalating uncertainty and ensuring outcomes align with security, resiliency, and auditability expectations.
Proficient in all aspects of the Software Development Life Cycle including development, testing, and implementation.
Advanced understanding of agile methodologies such as CI/CD, Application Resiliency, and Security.
In-depth knowledge of the financial services industry and its IT systems.