Security GRC Engineer Jobs

Senior Security GRC Engineer

The Senior Security GRC Engineer at Atlassian will be instrumental in implementi...

Location

India , Bengaluru

Salary:

Not provided

Atlassian

Expiration Date

Until further notice

Requirements

5-7+ years experience in a similar role, preferably in a large-scale SaaS/Product environment
Expertise and experience working in security-focused roles
Experience with application security, especially web applications
Experience in cloud security architecture and infrastructure
Experience providing SME knowledge and guidance to stakeholders and engineering functions
Experience working with internal/external audit and leadership teams
Solid knowledge of cybersecurity principles, risk management strategies, and IT governance frameworks
Strong communication and interpersonal skills, with the ability to interact with stakeholders at all levels and explain complex security concepts in an understandable way
Relevant certifications such as CISSP, CISM, or CRISC would be beneficial
Scripting experience to automate recurring tasks (JQL, SQL, Python, Go)

Job Responsibility

Deliver technical expertise and innovation, providing security guidance to teams and promoting the adoption of industry-leading methodologies to build secure products by default
Drive technical solutions in security and risk management
Leverage data analytics and visualization, deriving actionable insights from security governance, risk, and compliance data
Promote automation and tooling, encouraging the use of the latest security tools to enhance product security processes
Proactively identify and mitigate risks, recognizing potential security threats or compliance concerns specific to product security
Collaborate with product security teams, implementing security controls and best practices
Regularly evaluate and report, assessing the effectiveness of security controls
Influence and align stakeholders, working with security engineers and stakeholders to drive alignment on security initiatives
Stay informed on regulatory awareness and compliance, keeping up with the latest developments in legislative, regulatory, and industry security requirements

What we offer

health coverage
paid volunteer days
wellness resources

Fulltime

Product Security Engineer - Secure SDLC Analyst

HPE Aruba Networking is looking for a person excited to work at the intersection...

Location

United States , San Juan

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

BS in Information Security, Computer Science, or related technical field
A background in software security, either academic or work experience, including reverse engineering, vulnerability classes such as buffer overflows and their prevention, web application security, and/or cloud security
Programming knowledge of at least one programming language with the ability to look at source code and figure out what it’s doing
Familiarity with the purpose of tools such as IDEs, compilers, source code revision control systems, ASPM, SCA and code scanners
Minimum 3 years of experience working directly in software engineering or in an adjacent field with exposure to the software engineering environment
Experience conducting risk assessments, threat modeling, and/or compliance assessments
Experience supporting the integration of security practices through the software development lifecycle

Job Responsibility

Assist in the execution of product compliance assessments against various frameworks (e.g. NIST SSDF, NIST SP 800-218, SP 800-53, CIS Benchmarks)
Assist in the development and/or maintenance of GRC and SDLC tooling implementations, including scripting and automation
Operate as a representative of HPE Aruba in working groups, with government representatives, and with auditors
Provide consulting, information, and advice to product teams around implementing and improving the maturity of our SDLC
Document known issues and provide information to product teams in a manner which allows for easy interpretation and corrective actions to be performed
Monitor worldwide government standards and communicate to management and product teams when changes are made that may impact an existing control or introduce new requirements

What we offer

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

Fulltime

Senior Security Engineer

We’re looking for an experienced security engineer to join our highly collaborat...

Location

Canada; United States

Salary:

143000.00 - 210000.00 USD; CAD / Year

1Password

Expiration Date

Until further notice

Requirements

Minimum of 5+ years of combined experience in security, GRC, risk, or a related space with hands-on technical work building automation solutions as they relate to compliance controls, evidence, GRC platforms, etc.
experience in effectively analyzing data and programs for security risk, compliance, and maturity
willingness to wear different hats and work on areas where needed
must excel in communication, and demonstrate the ability to explain technical security concepts to a non-technical audience
must have a highly collaborative and teamwork-focused approach, as well as a heart for mentoring and leveling up your teammates
must be able to assess and mitigate corporate risk within the organization
sophisticated program/project management abilities

Job Responsibility

Own, design and manage the continued enhancement of various GRC programs including but not limited to strategy, roadmap, and controls to address regulatory requirements across multiple jurisdictions
communicate our compliance framework and various program requirements to all relevant stakeholders (internal and external)
engage cross-functionally with groups such as Engineering, Finance, Legal, Product, and Sales to establish a thoughtful, strategic and tactical approach to multiple GRC programs and related processes
assist with analysis and preparation for internal and external audits
accurately and effectively communicate our compliance position and programs to auditors and customers
partner with other members of the security team to establish security guidelines that enable the organization to move fast in a safe and secure manner
operate as a technical leader by helping define the GRC roadmap and by leveling up junior employees
build strong relationships with partner and stakeholder teams in order to build a scalable GRC program

What we offer

Maternity and parental leave top-up programs
wellness spending allowance
generous PTO policy
company-wide wellness days off scheduled throughout the year
wellness coach membership
comprehensive health coverage
company equity for all full-time employees
retirement matching program
training budget, 1Password University access, and learning sessions
free 1Password account (and friends and family discount!)

Fulltime

New

Senior Information Security Engineer

Serve as a technical leader in our Security team reporting to our Information Se...

Location

United States , Boston

Salary:

150000.00 - 190000.00 USD / Year

Whoop

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Computer Science, Information Security, or a related technical field and/or advanced certifications (CISSP, CISM, AWS Security Specialty, SANS, etc.)
8+ years of hands-on experience in Information Security, IT Security, or a related role, including at least 2 years in a senior or lead capacity
Proven track record implementing and managing advanced security technologies (e.g., CASB, CNAPP, CSPM, SIEM, SOAR, DLP, SWG)
Experience securing AI/ML systems or APIs, including governance of third-party AI integrations and organizational use of AI tools
Strong understanding of modern cloud security architecture (AWS, Azure, GCP) and experience performing threat modeling and risk assessments on cloud-based systems
Hands-on experience with application security tooling (SAST, SCA, DAST) and embedding secure development practices
Demonstrated leadership in security incident response, investigations, and root cause analysis
Effective communicator with the ability to influence stakeholders and explain security concepts to technical and non-technical audiences
Strong project management skills and the ability to drive initiatives to completion in a fast-paced environment
Experience mentoring engineers and setting operational standards

Job Responsibility

Implement and enhance security controls by leading the deployment, integration, and tuning of solutions such as CNAPP, SIEM, CASB, EDR, DLP, and MDM to maximize effectiveness
Support security design decisions by providing subject matter expertise on cloud and SaaS security best practices while influencing architecture led by the Security Architect role
Lead incident response and investigations by guiding containment, remediation, root cause analysis, and post-incident improvements
Strengthen application security by overseeing secure development practices and managing SAST, SCA, and DAST tooling
Advance identity and access management by supporting IAM policy enforcement, SSO, MFA, SCIM, RBAC, and user lifecycle governance
Secure AI systems and integrations by assessing and protecting embedded APIs and organizational AI tool usage to ensure resilience, privacy, and compliance
Collaborate cross-functionally by working with Engineering, IT, and GRC teams to embed security into systems and workflows
Mentor and influence by providing technical guidance, reviewing work, and promoting security-first thinking across the organization
Stay ahead of threats and regulations by tracking emerging risks, technologies, and compliance requirements to inform forward-looking strategies
Participate in and help improve the on-call rotation by providing guidance, escalation support, and driving improvements in response processes

What we offer

competitive base salaries
meaningful equity
generous equity package

Fulltime

Security Engineer

AnaVation is looking for a Security Engineer to assist the client leadership wit...

Location

United States , Washington, DC

Salary:

Not provided

AnaVation

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, or a related field. In lieu of a degree, a minimum of twelve (12) years of hands-on relevant experience is required
8 years of experience in information system engineering and configuration management
5 years of experience in system security analysis and implementation and secure system engineering or design
Excellent communication skills
Hands on experience with: Security monitoring and evaluation, including audits, assessment, and risk management
Splunk
Tenable
Nessus
Bigfix
Crowdstrike

Job Responsibility

Perform system administration for security tools such as vulnerability scanning tools (e.g., Tenable SC/IO, Burpsuite), EDR tools (e.g., Crowdstrike), SIEM tools (e.g., Splunk) and other security tools (e.g., McAfee (NSM), GRC tool (CSAM))
Perform system administration tasks to include audit and log management, availability monitoring and remediation, account management and access reviews, and configuration update scheduling and performance
Perform application updates and patches to security tools
Conducting, managing, and scheduling vulnerability scans
Understanding and advising the client regarding critical application data and vulnerability points, coordinating with industry partners to advise the government regarding those security vulnerabilities, and providing recommendations and advice on incident response and recovery plans
Providing Incident Response (IR) activities to includes triage, investigating, interviewing, resolving, and reporting on events. Creating, updating, and/or revising the IR Playbook and IR Plan
Promoting information security awareness across the program, ensuring security controls and processes are implemented, and developing appropriate security-related documentation
Presenting vulnerability analysis to system admins, system owners, and leadership
Complying with the CRM and DOJ program management guidance for new and decommissioned tools
Being the POC during security audits that pertain to vulnerability scanning and analysis.

What we offer

Generous cost sharing for medical insurance for the employee and dependents
100% company paid dental insurance for employees and dependents
100% company paid long-term and short term disability insurance
100% company paid vision insurance for employees and dependents
401k plan with generous match and 100% immediate vesting
Competitive Pay
Generous paid leave and holiday package
Tuition and training reimbursement
Life and AD&D Insurance

Fulltime

Senior Systems Security Engineer

AnaVation is looking for a Sr. Systems Security Engineer to assist the customer ...

Location

United States , Washington

Salary:

Not provided

AnaVation

Expiration Date

Until further notice

Requirements

5-10 years of experience in information system engineering and configuration management
5 years of experience in control implementation and secure system engineering or design
Excellent communication skills
Hands on experience with: Security monitoring and evaluation, including audits, assessments, and risk management
SIEM tools (e.g., Splunk)
Vulnerability Scanning tools (e.g., Tenable, Nessus)
EDR tools (e.g., Crowdstrike)
Web App Scanning tools (e.g., Burpsuite, Acunetix)
Active Directory
SANs

Job Responsibility

Performing hands-on engineering, administration, and securing of multiple operating systems (e.g., Windows, RHEL, Unix variants), and applying DISA STIGs across diverse vendor technologies, including virtualization platforms (VMWare, Hyper-V), cloud environments (AWS, Azure, Google Cloud), and enterprise applications
Perform system administration tasks to include audit and log management, availability monitoring and remediation, account management and access reviews, and configuration update scheduling and performance
Contribute to the design and development of secure system architectures, ensuring security is integrated through system and network lifecycles
Evaluate, implement, and document security architecture solutions, aligning with compliance requirements and organizational mission needs
Ensure technical compliance with applicable security frameworks, standards, and regulations (e.g., DISA SITGs, NIST 800-53, RMF)
Conducting, configuring, and managing vulnerability scans
Conducting vulnerability remediations, patching, and system hardening
Collaborate with ISSOs, Assessors, System Owners, and other stakeholders to implement security controls
Support security assessments, audits, and accreditation/authorization (ATO) activities
Document security configurations, engineering solutions, and compliance evidence

What we offer

Generous cost sharing for medical insurance for the employee and dependents
100% company paid dental insurance for employees and dependents
100% company paid long-term and short term disability insurance
100% company paid vision insurance for employees and dependents
401k plan with generous match and 100% immediate vesting
Competitive Pay
Generous paid leave and holiday package
Tuition and training reimbursement
Life and AD&D Insurance

Fulltime

Product Security Engineer

HPE Aruba Networking is looking for a person excited to work at the intersection...

Location

United States , San Juan

Salary:

Not provided

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

BS in Information Security, Computer Science, or related technical field
A background in software security, either academic or work experience, including reverse engineering, vulnerability classes such as buffer overflows and their prevention, web application security, and/or cloud security
Programming knowledge of at least one programming language with the ability to look at source code and figure out what it’s doing
Familiarity with the purpose of tools such as IDEs, compilers, source code revision control systems, ASPM, SCA and code scanners
Minimum 3 years of experience working directly in software engineering or in an adjacent field with exposure to the software engineering environment
Experience conducting risk assessments, threat modeling, and/or compliance assessments
Experience supporting the integration of security practices through the software development lifecycle

Job Responsibility

Assist in the execution of product compliance assessments against various frameworks (e.g. NIST SSDF, NIST SP 800-218, SP 800-53, CIS Benchmarks)
Assist in the development and/or maintenance of GRC and SDLC tooling implementations, including scripting and automation
Operate as a representative of HPE Aruba in working groups, with government representatives, and with auditors
Provide consulting, information, and advice to product teams around implementing and improving the maturity of our SDLC
Document known issues and provide information to product teams in a manner which allows for easy interpretation and corrective actions to be performed
Monitor worldwide government standards and communicate to management and product teams when changes are made that may impact an existing control or introduce new requirements

What we offer

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

Fulltime

Security Engineer 4 - FedRAMP Compliance Architect

PagerDuty is seeking a Security Engineer 4 - FedRAMP Compliance Architect to joi...

Location

United States

Salary:

176000.00 - 281000.00 USD / Year

PagerDuty

Expiration Date

Until further notice

Requirements

5+ years of experience in cloud security architecture, compliance, or cybersecurity engineering
at least 3 years of experience supporting FedRAMP Moderate or High authorization
deep expertise in FedRAMP, NIST 800-53, FISMA, and cloud security best practices
strong ability to assess security risks and recommend technical and procedural mitigations
experience working with AWS GovCloud, Azure Government, or other federal cloud environments
experience with audit preparation, risk assessments, and working with third-party assessors (3PAOs)
exceptional written and verbal communication skills for creating and managing FedRAMP documentation

Job Responsibility

Design, implement, and maintain system architectures to align with FedRAMP requirements
serve as the subject matter expert (SME) on FedRAMP, advising internal teams on security best practices, control implementations, and risk mitigation strategies
collaborate with engineering, operations, product, and corporate IT teams to develop secure cloud-based architectures that meet federal compliance mandates
implement governance strategy on technical security controls, including access management, configuration, encryption, logging, monitoring, and vulnerability management
support annual assessments, security control reviews, and audits, coordinating with third-party assessors (3PAO) and government sponsors
technical support for external stakeholders on customer responsibilities
key contributor to the development and maintenance of the System Security Plan (SSP), Policies and Procedures, Configuration Management Plan, Secure System Development Life Cycle, and other FedRAMP documentation
partner with the GRC (Governance, Risk, and Compliance) team to efficiently track and resolve security findings

What we offer

Competitive salary
comprehensive benefits package from day one
flexible work arrangements
company equity
ESPP (Employee Stock Purchase Program)
retirement or pension plan
generous paid vacation time
paid holidays and sick leave
Dutonian Wellness Days & HibernationDuty - companywide paid days off in addition to PTO
paid parental leave: 22 weeks for pregnant parent, 12 weeks for non-pregnant parent

Fulltime

Security GRC Engineer

Atlassian

Location:
India, Bengaluru

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
March 19, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Security GRC Engineer

Senior Security GRC Engineer

Product Security Engineer - Secure SDLC Analyst

Senior Security Engineer

Senior Information Security Engineer

Security Engineer

Senior Systems Security Engineer

Product Security Engineer

Security Engineer 4 - FedRAMP Compliance Architect

Security GRC Engineer

Atlassian

Location:India, Bengaluru

Category:IT - Administration

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:March 19, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Security GRC Engineer

Senior Security GRC Engineer

Product Security Engineer - Secure SDLC Analyst

Senior Security Engineer

Senior Information Security Engineer

Security Engineer

Senior Systems Security Engineer

Product Security Engineer

Security Engineer 4 - FedRAMP Compliance Architect

Location:
India, Bengaluru

Category:
IT - Administration

Contract Type:
Not provided

Job Posted:
March 19, 2025