Security Framework Engineer Job at Robert Half (Miami)

Principal Security Engineer

We’re seeking a Principal Security Engineer with deep expertise in cloud securit...

Location

United States , San Francisco

Salary:

136000.00 - 241000.00 USD / Year

Ethos

Expiration Date

Until further notice

Requirements

10+ years of experience in security engineering or architecture roles
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field from a reputable institution
Deep expertise in cloud platforms (particularly AWS), including infrastructure-as-code (e.g., Terraform, CloudFormation)
Strong experience in secure software development and application security (e.g., OWASP Top 10, SAST, DAST, threat modeling)
Experience designing and implementing zero-trust architectures, secure API gateways, and identity/access controls
Proficient in scripting or development languages (e.g., Python, Go, JavaScript) and secure coding practices
Demonstrated leadership in cross-functional security initiatives and technical mentorship
Ability to come into our San Francisco, CA office once a week

Job Responsibility

Design and implement secure architectures for applications, APIs, microservices, and containerized workloads
Develop and enforce application security best practices across SDLC
partner with DevOps and engineering teams to integrate security into CI/CD pipelines
Conduct threat modeling, security design reviews, and risk assessments for new and existing systems
Evaluate and implement cloud security tools, controls, and frameworks (e.g., CSPM, CWPP, IAM, KMS, logging, and monitoring)
Provide technical leadership and mentorship to security engineers, software developers, and DevOps personnel
Lead response to complex security incidents or architectural flaws
conduct root cause analysis and recommend strategic remediations
Contribute to and influence security policies, standards, and governance
Stay current with emerging threats, vulnerabilities, and security technologies, advising stakeholders on evolving risks and mitigations

Fulltime

Product Security Engineer - Secure SDLC Analyst

HPE Aruba Networking is looking for a person excited to work at the intersection...

Location

United States , San Juan

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

BS in Information Security, Computer Science, or related technical field
A background in software security, either academic or work experience, including reverse engineering, vulnerability classes such as buffer overflows and their prevention, web application security, and/or cloud security
Programming knowledge of at least one programming language with the ability to look at source code and figure out what it’s doing
Familiarity with the purpose of tools such as IDEs, compilers, source code revision control systems, ASPM, SCA and code scanners
Minimum 3 years of experience working directly in software engineering or in an adjacent field with exposure to the software engineering environment
Experience conducting risk assessments, threat modeling, and/or compliance assessments
Experience supporting the integration of security practices through the software development lifecycle

Job Responsibility

Assist in the execution of product compliance assessments against various frameworks (e.g. NIST SSDF, NIST SP 800-218, SP 800-53, CIS Benchmarks)
Assist in the development and/or maintenance of GRC and SDLC tooling implementations, including scripting and automation
Operate as a representative of HPE Aruba in working groups, with government representatives, and with auditors
Provide consulting, information, and advice to product teams around implementing and improving the maturity of our SDLC
Document known issues and provide information to product teams in a manner which allows for easy interpretation and corrective actions to be performed
Monitor worldwide government standards and communicate to management and product teams when changes are made that may impact an existing control or introduce new requirements

What we offer

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

Fulltime

Security and Application Security Engineer

Beacon Technologies is seeking a Security and Application Security Engineer. The...

Location

United States , Las Vegas

Salary:

Not provided

Beacon Technologies

Expiration Date

Until further notice

Requirements

Minimum of five years of Information Security experience with at least two years of application-level security
Strong communication skills: ability to convey and document security guidelines, requirements, and coding best practices
Familiarity with Security Best Practices in common coding languages
Application Penetration Testing / API Security Testing
Software Development Life Cycle Design and Implementation
Static and Dynamic Application Testing Tools and Methods
Container and orchestration security (Kubernetes, Docker, Octopus, GitHub, etc.)
Familiarity with Application Security Testing Frameworks such as OWASP
Strong logical and analytical thinker
exceptional skills in security systems solutions

Job Responsibility

Operate as a liaison between the Security Team and the Development Teams
Preserve PCI and SOX Security Certification programs with a primary focus on ensuring compliance with the appropriate industry standards and security controls
Supporting incident response and architecture review whenever applications security expertise is needed
Integrating threat modeling practices into the SDLC
Work with other staff to perform periodic scans and evaluation of system security including areas such as patch management, penetration testing, vulnerability assessments, and other types of InfoSec-related tasks
Assist in identifying and communicating security exposures, information security incidents or non-compliance situations to IT management or the CISO as appropriate. Duties may also include collecting and documenting cyber security and incident response event data as necessary.

What we offer

Career advancement opportunities
extensive training
excellent benefits including paying for health and dental premiums for salaried employees.

Fulltime

Security Engineer, Application Security

Figure is an AI Robotics company developing a general purpose humanoid. Our huma...

Location

United States , San Jose

Salary:

150000.00 - 350000.00 USD / Year

Figure

Expiration Date

Until further notice

Requirements

Experience in several of the following application security domains: penetration testing, vulnerability research, security assessment, secure coding practices, security architecture & design, hardware security
Strong software engineering (not scripting or automation) skills in C/C++, Rust, Golang, Python or similar
Experience with securing embedded systems, including secure boot, secure identity, OTA, or others
Solid foundation in web security, mobile security, or cryptography
Ability to collaborate with internal and external stakeholders whilst prioritizing tasks and work independently under minimal supervision.
BS in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field
3+ years of experience in the field of application security or related security role
Passion for learning and helping others
Excellent verbal and written communication skills, with high attention to detail

Job Responsibility

Conduct security assessments of applications, embedded systems, back-end services, and business integrations, as well as build tooling for a secure development lifecycle
Design technical solutions to mitigate security weaknesses on the robot and our service stack. Work with teams across the company to implement them.
Build frameworks and systems to prevent classes of vulnerabilities
Hunt for vulnerabilities and insecure coding patterns on our product stack (backend services and robot internal systems)
Be a champion for security and user privacy

Fulltime

Senior Security Engineer

PagerDuty is seeking a Senior Security Engineer to join our diverse, customer-fo...

Location

Canada , Toronto

Salary:

137000.00 - 207000.00 CAD / Year

PagerDuty

Expiration Date

Until further notice

Requirements

Proficiency with Application & Product Security typically associated with 4 - 5 years of experience in a Security Engineering role working with a cloud-native, microservices environment, preferably AWS
Familiarity with cloud-native product technologies including: Vulnerability detection via multiple approaches including SAST, DAST, SCA, and runtime (e.g., Qualys/Nessus, Wiz, Snyk, GHAS, Semgrep, etc.)
CI/CD technologies and integrations (e.g., CircleCI, Buildkite, Helm, Terraform, Chef)
Product security event logging standards and analysis tools (e.g., SIEM such as: SumoLogic, LogRythm, or Splunk, etc.)
Security Incident Response & Risk Management processes and tools
Proficiency in at least one programming language and framework (e.g. Python, Bash, Phoenix/Elixir, Java, Ruby on Rails), typically associated with 3 - 4 years of experience with the language/framework
Have exceptional written, oral communication, and interpersonal skills
Organizational skills with the ability to successfully manage multiple priorities and deadlines

Job Responsibility

Embrace the role of hands-on technical lead in defining product security standards and guiding platform protections
Establish criteria and conduct comprehensive security reviews throughout all stages of product development to identify and address security risks
Perform regular threat assessments, coordinate with third-party testers for penetration testing, and conduct internal penetration testing to identify and mitigate security risks
Mentor and guide team members to ensure product and business objectives are prioritized in project implementations, fostering a strong documentation culture with project charters and design documents
Work with loosely defined requirements where you exercise your analytical skills to clarify questions, share your approach, and collaborate with the team to design and implement effective security frameworks. Maintain a strong appetite for challenging problems with a high degree of ownership
Participate in the team’s On-Call rotation, triaging and addressing security issues as they arise, and implement measures to prevent future occurrences
Enable service team security implementations by developing security-as-code constructs, including infrastructure-as-code (IaC) modules, libraries and frontend components, while creating and maintaining developer-focused documentation to promote easy adoption
Establish and uphold baseline standards and hardened configurations for platform components
Continuously enhance security frameworks by focusing on product security standards and software supply chain protections, tailored for application security in cloud-native, microservices environments

What we offer

Competitive salary
Comprehensive benefits package from day one
Flexible work arrangements
Company equity
ESPP (Employee Stock Purchase Program)
Retirement or pension plan
Generous paid vacation time
Paid holidays and sick leave
Dutonian Wellness Days & HibernationDuty - companywide paid days off in addition to PTO
Paid parental leave: 22 weeks for pregnant parent, 12 weeks for non-pregnant parent (some countries have longer leave standards and we comply with local laws)

Fulltime

Security Engineer

Airspace Link is seeking a Security Engineer to support the security posture of ...

Location

United States , Detroit

Salary:

Not provided

Airspace Link

Expiration Date

Until further notice

Requirements

2–5 years of experience in security engineering, cloud security, SOC/IR operations, or related hands-on security roles
Working knowledge of Azure security concepts and Microsoft cloud security tools
Practical experience with: Microsoft Defender for Cloud, Endpoint, Identity, and Cloud Apps
Microsoft Sentinel (KQL querying, incident investigation, dashboards)
Microsoft Intune / Endpoint Manager (MDM/MAM)
Microsoft Purview (DLP and compliance tooling)
Hands-on experience supporting vulnerability remediation with engineering teams
Familiarity with Terraform, secure CI/CD practices, and cloud configuration management
Strong written and verbal communication skills with the ability to collaborate cross-functionally

Job Responsibility

Assist with implementing and maintaining security controls within Azure and SaaS environments
Support the incident response lifecycle, including initial investigation, coordination with engineering, and documentation of remediation actions
Monitor, tune, and assist in the operation of the Microsoft Defender suite (Defender for Cloud, Endpoint, Identity, Cloud Apps, and Vulnerability Management)
Support mobile device management (MDM) and endpoint compliance using Microsoft Intune and Endpoint Manager
Partner with engineering teams to identify, prioritize, and track remediation of vulnerabilities across applications, cloud infrastructure, and CI/CD pipelines
Help implement and maintain Entra ID Conditional Access and Privileged Identity Management (PIM)
Assist in integrating DevSecOps guardrails within Azure DevOps and GitHub pipelines (e.g., CodeQL, IaC scanning, secret governance)
Participate in developing dashboards and analytics in Microsoft Sentinel, including KQL queries and incident correlation support
Contribute to threat modeling and risk assessments as part of project reviews
Support the creation and upkeep of security configuration baselines, Terraform modules, and policy templates

Fulltime

Staff Application Security Engineer

As a Staff Application Security Engineer at Culture Amp, you will play a pivotal...

Location

Australia , Sydney

Salary:

Not provided

Culture Amp

Expiration Date

Until further notice

Requirements

Extensive experience in application security engineering, with a proven track record of leading security initiatives in SaaS or cloud-native environments
Deep technical expertise in secure software development, secure coding practices, and common security frameworks (e.g., OWASP Top 10, NIST, PCI, SOC 2)
Proficiency in multiple programming languages (e.g., Ruby, Python, JavaScript, Go) and experience with modern web application architectures and cloud platforms (e.g. AWS)
Strong knowledge of security automation, CI/CD integration, and DevSecOps practices
Experience designing and implementing security tools, frameworks, and processes that scale with developer velocity
Demonstrated ability to lead and influence cross-functional teams, drive change, and deliver results in ambiguous or complex environments
Excellent communication skills, with the ability to explain complex security concepts to technical and non-technical audiences
Experience mentoring and developing engineers, and a passion for building a culture of security and continuous improvement
Familiarity with security-related compliance requirements and standards relevant to SaaS businesses

Job Responsibility

Lead and drive the most complex and high-impact application security reviews, threat modeling, and risk assessments across our product portfolio, providing expert guidance and direction for other team members
Collaborate with engineering, product, and platform teams to embed security into the SDLC, including secure design, code review, and automated security testing (DevSecOps)
Develop and scale security automation, tools, and centralized libraries that enable developers to build secure applications efficiently and at scale
Proactively identify, assess, and address security risks and vulnerabilities in our SaaS environment, including cloud-native and microservices architectures
Own and evolve our vulnerability management programs, ensuring timely triage, remediation, and communication of security issues
Mentor and support engineers across the organization, fostering a culture of security awareness, knowledge sharing, and continuous learning
Influence and drive cross-functional security initiatives, partnering with compliance, privacy, and infrastructure teams to meet regulatory and customer requirements (e.g., SOC 2, ISO 27001, OWASP)
Stay current with the latest security threats, technologies, and best practices, and advocate for their adoption within Culture Amp
Represent Culture Amp’s security expertise internally and externally, including supporting customer security reviews and contributing to the broader security community

What we offer

Employee Share Options Program
Programs, coaching, and budgets to help you thrive personally and professionally
Access to external providers for mental wellbeing and coaching support
Monthly Camper Life Allowance
Team budgets dedicated to team building activities and connection
Intentional quarterly wellbeing pauses
Extended year-end breaks
Excellent parental leave and in work support program available from day 1
5 Social Impact Days a year
MacBooks for you to do your best & a work from home office budget

Fulltime

Senior AI Security Engineer

Senior AI Security Engineer role in Citi's Application, Platform and Engineering...

Location

United Kingdom , London

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Production system builder with security focus - proven track record of architecting and building secure, large-scale production applications and business-facing platforms from the ground up
Ethical hacking and penetration testing expertise - hands-on experience finding and exploiting vulnerabilities, conducting red team exercises
State-of-the-art security engineering with Go, Python, JavaScript
HashiCorp Vault mastery - deep experience writing custom plugins, creating secrets engines, implementing dynamic credentials
Enterprise authentication & authorization - designing and implementing OAuth, JWT, RBAC, and complex identity systems
API security and threat modelling - securing REST/GraphQL APIs, conducting threat assessments
AI/ML security and vulnerability research - understanding of LLM vulnerabilities, model security, prompt injection attacks
Security automation and tooling – automating manual security processes
Cloud-native security - securing containerized applications in Kubernetes, service mesh security
Incident response and forensics - experience investigating, analyzing, and responding to security incidents

Job Responsibility

Build secure AI products from 0-1 - Engineer production-grade, business-facing AI platforms with security built-in from day one
Conduct ethical hacking and red team activities - penetration testing, vulnerability research, and attack simulation
Design and build security tools and frameworks - Create automated security solutions that scale across fast-paced development cycles
Secure novel AI attack surfaces - Identify and mitigate LLM-specific vulnerabilities, prompt injection attacks, and AI model security risks
Lead 'shift left' security - Embed security practices throughout rapid development lifecycle while maintaining velocity
Mentor security practices - Guide other engineers on secure coding, vulnerability remediation, and security-first thinking

What we offer

27 days annual leave (plus bank holidays)
Discretional annual performance related bonus
Private Medical Care & Life Insurance
Employee Assistance Program
Pension Plan
Paid Parental Leave
Special discounts for employees, family, and friends
Hybrid working model (up to 2 days working at home per week)
Competitive base salary (annually reviewed)

Fulltime

Security Framework Engineer

Robert Half

Location:
United States , Miami

Category:
IT - Software Development

Contract Type:
Employment contract, Contract work

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
April 23, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Security Framework Engineer

Principal Security Engineer

Product Security Engineer - Secure SDLC Analyst

Security and Application Security Engineer

Security Engineer, Application Security

Senior Security Engineer

Security Engineer

Staff Application Security Engineer

Senior AI Security Engineer

Security Framework Engineer

Robert Half

Location:United States , Miami

Category:IT - Software Development

Contract Type:Employment contract, Contract work

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:April 23, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Security Framework Engineer

Principal Security Engineer

Product Security Engineer - Secure SDLC Analyst

Security and Application Security Engineer

Security Engineer, Application Security

Senior Security Engineer

Security Engineer

Staff Application Security Engineer

Senior AI Security Engineer

Location:
United States , Miami

Category:
IT - Software Development

Contract Type:
Employment contract, Contract work

Job Posted:
April 23, 2026