Strategic Advisory

Strategic Advisory Engineer Jobs

44 jobs found

Today

Lead Security Engineer

JPMorganChase Tampa, FL

Tampa, FL

Today

Full time Ai Enabled Security Ai Security Application Security

Apply Now

Job Description

Lead Security Engineer at JPMorganChase, onsite in Tampa, FL, delivering secure software solutions as part of a high-performing Cybersecurity team.

Responsibilities

Develops and implements innovative security solutions, handling design, development, and technical troubleshooting beyond routine approaches to solve complex problems.
Creates secure production code and reviews or debugs code produced by teammates.
Reduces security vulnerabilities by applying industry insights and regulatory requirements, and by establishing processes to measure and improve current controls.
Utilizes enterprise-approved AI capabilities to accelerate threat modeling, vulnerability analysis, and security documentation, validating results and ensuring proper handling of sensitive data.
Collaborates with stakeholders and business leaders to understand security needs and recommends changes during periods of vulnerability.
Performs discovery, vulnerability assessments, penetration testing, and threat modeling across multiple assets, including external applications interfacing with the JPMorganChase network.
Incorporates reuse-first, AI-assisted practices within SDLC/toolchains to strengthen security testing and control validation, ensuring traceability and alignment with resiliency and security expectations.
Contributes to a team culture of diversity, opportunity, inclusion, and respect.
Collaborates effectively with teams located in multiple geographic locations.

Requirements

5+ years of experience with Java and Python in cloud environments (public or private).
Proven ability to plan, design, and implement enterprise-grade security solutions.
Hands-on AI/ML engineering skills, including experience with frameworks such as PyTorch or TensorFlow, and MLOps with CI/CD and model deployment/monitoring.
Deep GenAI expertise (LLMs, prompt engineering, RAG, fine-tuning, embeddings/vector databases) and Agentic AI knowledge (tool/function calling, orchestration frameworks, multi-agent workflows, evaluation guardrails, and responsible AI/security).
Demonstrated experience using enterprise-approved AI capabilities to support security engineering workflows with strong validation practices and awareness of data sensitivity.
Ability to review and validate AI-assisted code and security recommendations before adoption, escalating uncertainty and ensuring outcomes align with security, resiliency, and auditability expectations.
Proficient in all aspects of the Software Development Life Cycle including development, testing, and implementation.
Advanced understanding of agile methodologies such as CI/CD, Application Resiliency, and Security.
In-depth knowledge of the financial services industry and its IT systems.

Technologies

Java
Python
PyTorch
TensorFlow
CI/CD
MLOps
LLMs
vector databases

Benefits

Base salary
Commission-based pay
Discretionary incentive compensation
Cash
Forfeitable equity
Comprehensive health care coverage
On-site health and wellness centers
Retirement savings plan
Backup childcare
Tuition reimbursement
Mental health support
Financial coaching

View full job page →

1d ago

Senior Staff Product Security Engineer

Draeger Medical Systems, Inc. Andover, MA

Andover, MA

1d ago

$140k - $169k/yr Full time Senior Application Security Cybersecurity Tools

Apply Now

Job Description

Draeger Medical Systems, Inc. is seeking a Senior Staff Product Security Engineer to shape the product cybersecurity strategy across our medical device portfolios. This senior role leads enterprise security architecture standards, guides risk adjudication decisions, and ensures alignment with global regulatory expectations. The position is hybrid in Andover, Massachusetts, with a salary range of $140,400 to $168,500 per year.

Responsibilities

Outline a long-range product cybersecurity strategy and set the direction for enterprise security architecture.
Create globally applicable cybersecurity design standards and governance frameworks across the product portfolio.
Lead the organization-wide vulnerability management program and make risk prioritization decisions.
Represent Draeger in regulatory engagements and industry cybersecurity initiatives.
Ensure ongoing alignment with evolving global cybersecurity regulations and standards.
Define cybersecurity metrics and drive continuous improvement initiatives.
Develop senior engineering capability and provide technical mentorship.
Perform additional duties as assigned.

Requirements

Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, or a related discipline.
Master's degree preferred.
At least 10 years of cybersecurity engineering experience within regulated medical devices or similar regulated industries.
Proven ability to influence enterprise-level cybersecurity strategy and align with regulatory requirements.
Certifications such as CISSP, ISSMP, OSCP, GCED; equivalent advanced enterprise certifications will be considered.
Ability to define an enterprise product cybersecurity strategy aligned with evolving global regulatory expectations.
Experience adjudicating complex cybersecurity risk decisions balancing patient safety and system availability.
Experience representing the organization in regulatory discussions and industry cybersecurity forums.
Experience with enterprise vulnerability management platforms.
Familiarity with security architecture modeling tools.
Experience with metrics and governance reporting platforms.

Technologies

Enterprise vulnerability management platforms
Security architecture modeling tools
Metrics and governance reporting platforms

Benefits

Medical, dental, and vision insurance
Life, short- and long-term disability coverage
401(k) with company match
More than four weeks of paid time off, plus holidays and parental leave
Flexible spending accounts and employee assistance program
Free parking at select locations
On-site gym at select locations
Cafeteria at select locations
Game room at select locations

Who we are

We are Draeger, actively hiring to make a real difference. Our guiding principle is Technology for Life. Draeger operates across North America with multiple sites and field-based sales and service roles. Our North America headquarters is in Telford, PA, just north of Philadelphia, with additional U.S. sites in Andover, MA and Houston, TX. Our Canada site is located in Mississauga, Ontario. Draeger is an Equal Opportunity Employer.

Interested?

Please apply directly through our career portal. We look forward to receiving your application.

View full job page →

1d ago

Cyber Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Deloitte Detroit, MI

Detroit, MI

1d ago

$105k - $208k/yr Full time Cloud Infrastructure Cloud Operations Cloud Platforms

Apply Now

Job Description

Deloitte is hiring in Detroit on site for a Cyber Zscaler Network Security Engineer / Senior Consultant who will help clients modernize network security with cloud-delivered zero-trust architectures. You will design, deploy, and optimize Zscaler capabilities across both on-premises and cloud environments, strengthening security posture, improving user access experiences, and enabling secure transformation. This role offers a competitive salary range of USD 105,400 to 207,800 per year and a discretionary annual incentive program.

Benefits

Discretionary annual incentive program

Responsibilities

Design, deploy, and operate Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) across enterprise environments
Support zero trust network access transformations by replacing legacy VPNs and modernizing access controls
Configure and optimize Zscaler security features, including policy administration, SSL/TLS inspection, advanced threat protection, data loss prevention, and cloud-based traffic inspection
Implement branch, cloud, and application connectors across on‑premises and cloud, including AWS, Azure, and GCP
Develop technical deliverables, solution designs, and client-facing recommendations aligned to security, network transformation, and operational requirements

Requirements

BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology) or equivalent work experience
Zscaler Digital Transformation Engineer (ZDTE) certification required
5+ years of progressively responsible experience in network security engineering
5+ years designing, deploying, and managing ZIA with web filtering, DNS security, cloud firewall, bandwidth controls, and advanced threat protection policies at enterprise scale
5+ years designing, deploying, and managing ZPA, including application segment configuration, access policies, connector deployment, and zero trust architectures replacing legacy VPNs
1+ years designing, deploying, and managing Zscaler Branch Connector with BGP/static routing and network segmentation to replace traditional SD-WAN
1+ years designing, deploying, and managing Zscaler Cloud Connector in cloud environments (AWS, Azure, and/or GCP) with workload-to-internet and workload-to-workload inspection
3+ years configuring and tuning Zscaler advanced security features (Cloud Sandboxing, ATP, IPS, CBI, DLP)
3+ years implementing and troubleshooting SSL/TLS inspection within ZIA, including certificate management, decryption policy design, bypass rules, and handling certificate-pinned apps
1+ years working with Zscaler AI-powered capabilities, including AI-driven policy recommendations, ZDX, and AI/ML threat intelligence for automated threat response
3+ years defining, managing, and reviewing Zscaler security policies, including rule base optimization, policy lifecycle, access reviews, and RBAC within the Zscaler Admin Portal
Experience implementing ZIdentity for centralized identity management
3+ years of experience with one or more major cloud providers (AWS, GCP, Azure) to deploy ZPA App Connectors within cloud-native architectures
3+ years deploying Zscaler Cloud Connector
Experience integrating Zscaler with SIEM/SOAR platforms (Splunk, Microsoft Sentinel, Palo Alto XSOAR) via log streaming, API connectors, or syslog
Experience with Zscaler APIs and automation tooling (Terraform, Ansible, Python) for provisioning, policy management, and configuration-as-code workflows
Experience designing and presenting Zscaler solution architectures tailored to client requirements for executive and non-technical stakeholders
Familiarity with identity provider integrations (Okta, Azure AD, Ping Identity) for SAML/SCIM-based authentication in ZIA and ZPA
Ability to travel up to 50% on average
Limited immigration sponsorship may be available

Technologies

Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), ZTNA
SSL/TLS inspection, Advanced Threat Protection (ATP), Cloud Sandboxing, Cloud Browser Isolation (CBI), Data Loss Prevention (DLP)
Zscaler AI capabilities, Digital Experience Monitoring (ZDX), ZIdentity
Zscaler Cloud Connector, Zscaler Branch Connector, Zscaler Admin Portal
Zscaler APIs, Terraform, Ansible, Python
AWS, Azure, Google Cloud Platform (GCP)
Okta, Azure AD, Ping Identity, Splunk, Microsoft Sentinel, Palo Alto XSOAR
SAML/SCIM, VPCs, VNets, Transit Gateways, BGP/static routing

The team

Our Enterprise Security offering embeds security across digital transformation initiatives, securing the technical backbone while enabling secure growth. The practice encompasses security architecture, secure development and deployment, end-to-end cloud security capabilities, application security, and security considerations for emerging technologies and connected products.

View full job page →

3d ago

Cyber Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Deloitte Atlanta, GA

Atlanta, GA

3d ago

$105k - $208k/yr Full time Cloud Cloud Architecture Cloud Infrastructure

Apply Now

Job Description

Deloitte offers a collaborative, client‑driven environment where security professionals modernize network protection through cloud delivered zero trust architectures. This onsite role in Atlanta focuses on designing, deploying, and optimizing Zscaler capabilities across both on‑premises and cloud environments. You will deliver technical designs, client‑facing recommendations, and enable secure transformation to strengthen security posture while improving user access experiences. Compensation ranges from USD 105,400 to 207,800 per year, plus a discretionary annual incentive program. This position is based on site in Atlanta, GA.

Benefits

Discretionary annual incentive program

Responsibilities

Design, deploy, and manage Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) across enterprise client environments
Support zero trust network access transformations, replacing legacy VPNs and modernizing access controls
Configure and optimize Zscaler security features including policy administration, SSL/TLS inspection, advanced threat protection, data loss prevention, and cloud-based traffic inspection
Implement branch, cloud, and application connector architectures across on‑premises and cloud environments such as AWS, Azure, and Google Cloud Platform
Develop technical deliverables, solution designs, and client‑facing recommendations aligned to enterprise security, network transformation, and operational requirements

Requirements

BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology, or equivalent work experience)
Zscaler Digital Transformation Engineer (ZDTE) certification required
5+ years of progressively responsible experience in network security engineering
5+ years of hands-on experience designing, deploying, and managing ZIA, including web filtering, DNS security, cloud firewall, bandwidth controls, and advanced threat protection policies in enterprise environments
5+ years of hands-on experience designing, deploying, and managing ZPA, including application segment configuration, access policies, connector deployment, and zero trust network access architectures replacing legacy VPN infrastructure
1+ years of experience designing, deploying, and managing Zscaler Branch Connector, including BGP/static routing configurations and network segmentation to replace traditional SD-WAN platforms
1+ years of experience designing, deploying, and managing Zscaler Cloud Connector in cloud environments (AWS, Azure, and/or GCP), including workload to internet and workload to workload traffic inspection
3+ years of experience configuring and tuning Zscaler advanced security features such as Cloud Sandboxing, Advanced Threat Protection, Intrusion Prevention, Cloud Browser Isolation, and Data Loss Prevention
3+ years of experience implementing and troubleshooting SSL/TLS inspection within ZIA, including certificate management and decryption policy design
1+ years of experience with Zscaler AI powered capabilities including AI driven policy recommendations and Digital Experience Monitoring (ZDX)
3+ years of hands-on experience defining, managing, and reviewing Zscaler security policies including policy lifecycle and RBAC in the Zscaler Admin Portal
Experience implementing ZIdentity for centralized identity management
3+ years of experience with one or more major cloud providers (AWS, GCP, Azure) to deploy ZPA App Connectors
3+ years of experience deploying Zscaler Cloud Connector
Experience integrating Zscaler with SIEM/SOAR platforms (Splunk, Microsoft Sentinel, Palo Alto XSOAR) via log streaming, API connectors, or syslog
Experience with Zscaler APIs and automation tooling (Terraform, Ansible, Python) for provisioning and configuration as code
Experience designing and presenting Zscaler solution architectures tailored to client requirements and communicating effectively to executives
Familiarity with identity provider integrations (Okta, Azure AD, Ping Identity) for SAML/SCIM authentication within ZIA and ZPA
Ability to travel up to 50 percent
Limited immigration sponsorship may be available
Ability to work independently and as part of a team, with strong written and verbal communication skills
Meticulous attention to detail, professional demeanor, and the ability to manage multiple tasks in a dynamic environment

Technologies

Zscaler Internet Access (ZIA)
Zscaler Private Access (ZPA)
Zscaler Branch Connector
Zscaler Cloud Connector
SSL/TLS inspection
AWS, Azure, GCP
BGP, VPCs, VNets, Transit Gateways
Cloud Sandboxing
Advanced Threat Protection (ATP)
Intrusion Prevention (IPS)
Cloud Browser Isolation (CBI)
Data Loss Prevention (DLP)
ZDX (Digital Experience Monitoring)
Zscaler AI powered capabilities
ZIdentity
Okta, Azure AD, Ping Identity
Terraform, Ansible, Python
Splunk, Microsoft Sentinel, Palo Alto XSOAR
Zscaler APIs

The Team

Our Enterprise Security practice weaves security into every facet of digital transformation. The team covers security architecture, secure development and deployment, end to end cyber cloud capabilities, application security, and security for emerging technologies and connected products. You will join a culture that values collaboration, rigorous delivery, and a focus on protecting client assets while enabling secure innovation.

View full job page →

4d ago

Cyber Palo Alto Networks Security Engineer/ Senior Consultant, Strategy, Growth, and Transformation

Deloitte Costa Mesa, CA

Costa Mesa, CA

4d ago

$105k - $208k/yr Full time Cloud Platforms Consultant Consulting

Apply Now

Job Description

This Senior Consultant role sits within Deloitte's Cyber Enterprise Security practice, focusing on modernizing network defense using Palo Alto Networks technologies across on premises and cloud environments, including NGFW, Prisma Access, and SIEM/SOAR integrations. The position is onsite in Costa Mesa, CA, with a salary range of USD 105,400 to 207,800 per year.

Responsibilities

Design, deploy, and operate Palo Alto Networks Next-Generation Firewalls across on premises and cloud environments, including AWS, Azure, and Google Cloud Platform.
Implement and optimize Prisma Access components such as GlobalProtect, Prisma Agent, and Prisma Browser to support secure internet access and remote work scenarios.
Administer Panorama and Strata Cloud Manager to enable centralized policy management, device configuration, visibility, and consistency across enterprise deployments.
Configure and tune security capabilities including Threat Prevention, IPS/IDS, Anti-Spyware, Antivirus, WildFire, DNS Security, and SSL/TLS decryption policies.
Develop client solution designs and recommendations, integrating Palo Alto platforms with SIEM/SOAR and identity provider tools, and enabling automation through Terraform, Ansible, or Python.

Requirements

BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology, or equivalent work experience).
PCNSE (Palo Alto Networks Certified Network Security Engineer) certification.
5+ years of progressive network security engineering experience with demonstrated depth in Palo Alto Networks technologies and increasing levels of technical ownership and leadership.
5+ years hands-on experience designing, deploying, and managing Palo Alto Networks NGFW in on premises and cloud environments (AWS, Azure, and/or GCP).
3+ years designing, deploying, and managing Prisma Access, including configuration of GlobalProtect, Prisma Agent, and Prisma Browser for Internet and secure remote access use cases.
3+ years designing, deploying, and managing Panorama centralized management, and Strata Cloud Manager.
3+ years configuring and tuning Palo Alto Threat Prevention features, including IPS/IDS, Anti-Spyware, Antivirus, WildFire, and DNS Security.
3+ years implementing and troubleshooting SSL/TLS Decryption policies, including forward proxy and inbound inspection, certificate management, and decryption exclusion handling.
3+ years hands-on experience defining, managing, and reviewing security policies, including rule base optimization, policy lifecycle management, and periodic access reviews.
3+ years of experience with one or more major cloud service providers (AWS, GCP, Azure) and their native security toolsets, including deployment of VM-Series firewalls within cloud-native architectures.
Ability to travel up to 50 percent on average, based on client work and industries served.
Limited immigration sponsorship may be available.

Technologies

Palo Alto Networks NGFW, AWS, Microsoft Azure, Google Cloud Platform (GCP)
Prisma Access, GlobalProtect, Prisma Agent, Prisma Browser
Panorama, Strata Cloud Manager
Threat Prevention, IPS, IDS, Anti-Spyware, Antivirus, WildFire, DNS Security
SSL/TLS decryption, Terraform, Ansible, Python
VM-Series, SIEM, SOAR, Zscaler, Netskope, Okta, Azure AD, Ping Identity, Palo Alto Cloud Identity Engine (CIE), SAML, SCIM

Benefits

Discretionary annual incentive program

The Team

Our Enterprise Security offering embeds security across digital transformation by protecting a client’s technical backbone while enabling secure innovation. The practice spans security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.

View full job page →

6d ago

Cyber Palo Alto Networks Security Engineer/ Senior Consultant, Strategy, Growth, and Transformation

Deloitte Houston, TX

Houston, TX

6d ago

$105k - $208k/yr Full time Cloud Cloud Infrastructure Cloud Platforms

Apply Now

Job Description

This on-site role is a Senior Consultant position on Deloitte's Cyber Enterprise Security team, focused on modernizing network security with Palo Alto Networks technologies across on-premises and cloud environments to deliver zero-trust architectures. The position is based in Houston, TX and offers a salary range of USD 105,400 to 207,800 per year.

Responsibilities

Design, deploy, and manage Palo Alto Networks Next-Generation Firewalls (NGFW) across on-premises and cloud environments, including AWS, Azure, and Google Cloud Platform (GCP).
Implement and optimize Prisma Access capabilities, including GlobalProtect, Prisma Agent, and Prisma Browser, to support secure internet access and remote access use cases.
Administer Panorama and Strata Cloud Manager to support centralized policy management, device configuration, visibility, and operational consistency across enterprise environments.
Configure and tune security capabilities including Threat Prevention, IPS/IDS, Anti-Spyware, Antivirus, WildFire, DNS Security, and SSL/TLS decryption policies.
Develop client solution designs and recommendations, integrating Palo Alto platforms with security information and event management/security orchestration, automation, and response (SIEM/SOAR) and identity provider tools, and supporting automation through Terraform, Ansible, or Python.

Requirements

BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology, or equivalent work experience).
PCNSE (Palo Alto Networks Certified Network Security Engineer) certification.
5+ years of progressively responsible experience in network security engineering, with demonstrated depth in Palo Alto Networks technologies and increasing levels of technical ownership and leadership over time.
5+ years of hands-on experience designing, deploying, and managing Palo Alto Networks Next-Generation Firewalls (NGFW) in both on-premises and cloud environments (AWS, Azure, and/or GCP).
3+ years of experience designing, deploying, and managing Prisma Access, including configuration of GlobalProtect, Prisma Agent, and Prisma Browser for Internet and secure remote access use cases.
3+ years of experience designing, deploying, and managing Panorama centralized management, and Strata Cloud Manager.
3+ years of experience configuring and tuning Palo Alto Threat Prevention features, including IPS/IDS, Anti-Spyware, Antivirus, WildFire, and DNS Security.
3+ years of experience implementing and troubleshooting SSL/TLS Decryption policies, including forward proxy and inbound inspection, certificate management, and decryption exclusion handling.
3+ years of hands-on experience defining, managing, and reviewing security policies, including rule base optimization, policy lifecycle management, and periodic access reviews.
3+ years of experience with one or more major cloud service providers (AWS, GCP, Azure) and their native security toolsets, including deployment of VM-Series firewalls within cloud-native architectures.
Ability to travel up to 50%, on average, based on the work performed and client engagements.
Limited immigration sponsorship may be available.

Technologies

Palo Alto Networks Next-Generation Firewalls (NGFW)
Prisma Access, GlobalProtect, Prisma Agent, Prisma Browser
Panorama, Strata Cloud Manager
Threat Prevention, IPS/IDS, Anti-Spyware, Antivirus, WildFire, DNS Security
SSL/TLS decryption policies, forward proxy, inbound inspection
Terraform, Ansible, Python
AWS, Microsoft Azure, Google Cloud Platform (GCP)
VM-Series
Splunk, Microsoft Sentinel, Palo Alto XSOAR

Benefits

Discretionary annual incentive program

View full job page →

6d ago

Cloud Security Engineer Manager

Deloitte Indianapolis, IN

Indianapolis, IN

6d ago

$119k - $244k/yr Full time Manager Application Security Azure

Apply Now

Job Description

Deloitte is seeking a Cloud Security Engineer Manager to design, deploy, and sustain an enterprise-grade, application-centric micro-segmentation service within a zero-trust framework. This onsite role in Indianapolis, Indiana collaborates across application, network, server, and cloud teams to protect critical workloads and enforce robust workload isolation throughout a multi-year security program. The position carries a salary range of USD 118,700 to 243,700 per year.

Responsibilities

Contribute to the design, deployment, and ongoing maintenance of zero-trust architectures to guard key assets and data against evolving cyber threats.
Act as the subject matter expert for application micro-segmentation and zero-trust concepts, methodologies, and technologies.
Work with Network and Firewall, Application, Server, and Cloud Engineering teams to architect, implement, and support an enterprise-class, application-centric micro-segmentation service.
Drive the implementation of micro-segmentation as part of a multi-year program to protect critical applications.
Identify new service requirements aligned with the Zero Trust strategy.
Lead and assist with troubleshooting for the micro-segmentation service.

Requirements

Bachelor's degree or equivalent in Information Technology, Computer Science, or Engineering.
Minimum of 6 years of related Cyber Security experience with a focus on network security engineering, including firewall policy design, rule management, and hands-on work securing east-west traffic in enterprise environments.
Proficiency in Python development for automation and scripting, including building security tooling, policy automation, or infrastructure-as-code workflows.
Strong networking fundamentals with experience across cloud environments (AWS, Azure, or GCP) and on-prem data centers, including VLANs, subnetting, routing protocols, firewall policy, and east-west traffic segmentation.

Technologies

Python, PowerShell, Bash
AWS, Azure, GCP
Illumio, Guardicore, Cisco Secure Workload
VMware, Hyper-V, Palo Alto, Cisco
Windows Packet Filtering, IP Tables
Windows Server, Linux
VLANs, IaaS, SDN, Containers
Zero Trust Framework, NIST 800-207

Benefits

Discretionary annual incentive program

The Team

Cyber Security
Technology Support
Technology & Infrastructure
Applications
Relationship Management
Strategy & Communications
Project Management
Financials

Cyber Security

The Cyber Security function protects Deloitte and client data through a strategic risk program that adapts to evolving threats, business changes, risks, and vulnerabilities. By leveraging situational awareness and threat intelligence, and by fostering a security-aware culture, the team works to preserve the integrity and reputation of the Deloitte brand.