Staff CyberSecurity Software Engineer - IAM Job at General Motors (Austin)

Staff Software Engineer - Security

We are seeking experienced generalist application/cloud Security Software Engine...

Location

United States , Boston, NYC, Cambridge

Salary:

250000.00 - 325000.00 USD / Year

Suno

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Cybersecurity, or a related field
5+ years of experience in cloud security or related roles
Proficiency in AWS and associated security services
Strong experience in cloud security principles, compliance frameworks, and best practices
Experience with Infrastructure as Code tools (e.g., CDK, Terraform)
Familiarity with containerization technologies and their security implications
Understanding of network security concepts and protocols
Experience with scripting languages (e.g., Python, Bash) for application security, automation, and tool development

Job Responsibility

Design and implement secure cloud architectures across multiple cloud platforms (e.g., AWS, GCP)
Build and maintain Infrastructure as Code (IaC) libraries with embedded security controls
Conduct regular security assessments, in-depth code reviews, and audits of application code and cloud infrastructure
Design and implement secure coding guidelines, CI/CD, and best practices for development teams
Manage vulnerability tracking and remediation efforts, providing guidance to development teams
Work closely with IT to ensure secure system administration and compliance with security policies
Contribute to the design and enforcement of Identity & Access Management (IAM) Governance
Contribute to the creation and maintenance of security documentation, playbooks, and metrics
Keep up to date with emerging threats, security trends, and best practices in cloud-native and AI environments

What we offer

Offers Equity
Generous Company Equity Package
401(k) with 3% Employer Match & Roth 401(k)
Unlimited PTO & Sick Time
Medical, Dental, & Vision Insurance (PPO w/ HSA & FSA options)
Continued / Creative Education Stipend
Generous Commuter Allowance
In-Office Lunch (5 days per week)

Fulltime

Staff Platform Security Engineer

Fivetran is building data pipelines to power the modern data stack for thousands...

Location

United States , Oakland

Salary:

196033.00 - 245041.50 USD / Year

Fivetran

Expiration Date

Until further notice

Requirements

Application Security Expertise: Deep expertise in identifying and mitigating security vulnerabilities within applications (e.g., OWASP Top 10), particularly in Java codebases.
Secure SDLC: Extensive experience integrating security into the software development lifecycle, from design and code review to testing and deployment.
Java Proficiency: Senior-level experience with Java codebases: building, running, profiling, and optimizing Java applications in secure environments.
Container Security: Strong experience with Docker image creation, optimization, and vulnerability mitigation, specifically for applications.
CI/CD & Automation: Proficiency with CI/CD tools (e.g., Jenkins, GitLab CI, GitHub Actions) and experience integrating security tools into automated pipelines.
Tooling Familiarity: Familiarity with a range of security tools for CI/CD security, static analysis (SAST), dynamic analysis (DAST), dependency analysis (SCA), and secrets management.
Adversarial AI & Defense: Familiarity with modern attack techniques, offensive security methodologies, and defense strategies, including OWASP Top 10 for LLMs (e.g., Prompt Injection, Data Poisoning, and Model Inversion).
Scripting: Proficiency in scripting or programming languages (e.g., Bash, Python, Go) to automate security processes and tool integration.
Problem-Solving: Excellent problem-solving and troubleshooting skills, with the ability to work independently in fast-paced environments.
Communication: Strong communication skills with the ability to effectively collaborate with and educate engineering teams on security principles and best practices.

Job Responsibility

Collaborate with engineering teams to integrate and manage security tooling within the SDLC, strategically automating security checks and feedback loops to enhance efficiency and security posture.
Perform vulnerability scanning and participate in penetration testing exercises, automating scanning processes judiciously to identify common weaknesses, while reserving manual efforts for complex and nuanced assessments. Report findings and assist with remediation efforts.
Develop and maintain automation scripts and infrastructure-as-code for security checks related to machine configurations, container images, IAM policies, firewall rules, and cloud storage policies.
Implement and configure security controls within enterprise applications based on security best practices and architectural guidance.
Contribute to threat modeling efforts by providing technical insights and implementing identified security controls.
Work directly with engineering teams to troubleshoot and resolve security challenges across the stack while promoting a security-first mindset, identifying and automating recurring troubleshooting steps or remediation processes where it significantly improves response times and reduces manual intervention.
Implement and operationalize security solutions for cloud-native and hybrid infrastructure based on architectural guidelines.
Collaborate with infrastructure and cloud security teams to implement and maintain security controls across the entire technology stack, strategically prioritizing automation for consistent enforcement, monitoring, and alerting to improve overall security and reduce manual overhead.
Implement and manage security assessment tools, including vulnerability scanners, SIEM agents, DLP endpoints, and EDR sensors.
Participate in security assessment reviews by providing practical implementation feedback and identifying potential operational challenges.

What we offer

100% employer-paid medical insurance*
Generous paid time-off policy (PTO), plus paid sick time, inclusive parental leave policy, holidays, and volunteer days off
RSU stock grants*
Professional development and training opportunities
Company virtual happy hours, free food, and fun team-building activities
Monthly cell phone stipend
Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents.

Fulltime

Staff Platform Security Engineer

Fivetran is building data pipelines to power the modern data stack for thousands...

Location

United States , Denver

Salary:

171389.00 - 214236.00 USD / Year

Fivetran

Expiration Date

Until further notice

Requirements

Application Security Expertise: Deep expertise in identifying and mitigating security vulnerabilities within applications (e.g., OWASP Top 10), particularly in Java codebases
Secure SDLC: Extensive experience integrating security into the software development lifecycle, from design and code review to testing and deployment
Java Proficiency: Senior-level experience with Java codebases: building, running, profiling, and optimizing Java applications in secure environments
Container Security: Strong experience with Docker image creation, optimization, and vulnerability mitigation, specifically for applications
CI/CD & Automation: Proficiency with CI/CD tools (e.g., Jenkins, GitLab CI, GitHub Actions) and experience integrating security tools into automated pipelines
Tooling Familiarity: Familiarity with a range of security tools for CI/CD security, static analysis (SAST), dynamic analysis (DAST), dependency analysis (SCA), and secrets management
Adversarial AI & Defense: Familiarity with modern attack techniques, offensive security methodologies, and defense strategies, including OWASP Top 10 for LLMs (e.g., Prompt Injection, Data Poisoning, and Model Inversion)
Scripting: Proficiency in scripting or programming languages (e.g., Bash, Python, Go) to automate security processes and tool integration
Problem-Solving: Excellent problem-solving and troubleshooting skills, with the ability to work independently in fast-paced environments
Communication: Strong communication skills with the ability to effectively collaborate with and educate engineering teams on security principles and best practices

Job Responsibility

Collaborate with engineering teams to integrate and manage security tooling within the SDLC, strategically automating security checks and feedback loops to enhance efficiency and security posture
Perform vulnerability scanning and participate in penetration testing exercises, automating scanning processes judiciously to identify common weaknesses, while reserving manual efforts for complex and nuanced assessments. Report findings and assist with remediation efforts
Develop and maintain automation scripts and infrastructure-as-code for security checks related to machine configurations, container images, IAM policies, firewall rules, and cloud storage policies
Implement and configure security controls within enterprise applications based on security best practices and architectural guidance
Contribute to threat modeling efforts by providing technical insights and implementing identified security controls
Work directly with engineering teams to troubleshoot and resolve security challenges across the stack while promoting a security-first mindset, identifying and automating recurring troubleshooting steps or remediation processes where it significantly improves response times and reduces manual intervention
Implement and operationalize security solutions for cloud-native and hybrid infrastructure based on architectural guidelines
Collaborate with infrastructure and cloud security teams to implement and maintain security controls across the entire technology stack, strategically prioritizing automation for consistent enforcement, monitoring, and alerting to improve overall security and reduce manual overhead
Implement and manage security assessment tools, including vulnerability scanners, SIEM agents, DLP endpoints, and EDR sensors
Participate in security assessment reviews by providing practical implementation feedback and identifying potential operational challenges

What we offer

100% employer-paid medical insurance*
Generous paid time-off policy (PTO), plus paid sick time, inclusive parental leave policy, holidays, and volunteer days off
RSU stock grants*
Professional development and training opportunities
Company virtual happy hours, free food, and fun team-building activities
Monthly cell phone stipend
Access to an innovative mental health support platform that offers personalized care and resources in areas such as: therapy, coaching, and self-guided mindfulness exercises for all covered employees and their covered dependents

Fulltime

Senior Solution Sales Specialist, Machine Identity

CyberArk is looking for a highly motivated, energetic and focused Sales Speciali...

Location

United States , Chicago

Salary:

264000.00 - 363000.00 USD / Year

Palo Alto Networks

Expiration Date

Until further notice

Requirements

Bachelor’s degree or equivalent experience
10+ years prior sales experience in cybersecurity, identity, endpoint management, or related markets
A demonstrated history of strategic account management and software sales consistently meeting or exceeding a quota in excess of $2M
A demonstrated history of successfully collaboration as part of a sales/account team in a strategic selling capacity
Ability to engage in a variety of account situations balancing strategic and tactical thought leadership
Strong presentation skills as well as the ability to build and present high-quality product overviews to both internal and external audiences
In-depth knowledge on Identity Security and Endpoint Security best practices and associated terminology and technology employed by large enterprises
In depth knowledge on Identity Security and Endpoint Security vendors and products and able to compare with CyberArk products
Interaction with Product Management to articulate nonstandard / custom requirements based upon customer needs
Excellent oral and written communications skills and capable of presenting technical concepts and product solutions to audiences ranging from IT staff to business executives

Job Responsibility

Establish and maintain customer relationships at the executive, business decisionmaker level including but not limited to CISO, CIO, and other executives responsible for Identity, IAM, security, risk, compliance, and operations
Develop & present compelling business cases to customers, maintain expert-level knowledge of all elements of the business case, including the drivers of cost, benefits, and risk
Partner closely with Sales Account Teams, Solutions Engineers and Professional Services to align the technology architecture to the customer's desired business outcomes
Work closely with the Customer Success team to ensure successful product adoption and realization of the full value of Customer’s technology investment
Work with Channel Partners, Resellers and Systems Integrators to penetrate new accounts and extend reach of CyberArk’s endpoint solution in the assigned geography
Improve CyberArk’s Identity solution portfolio by understanding and communicating key customer requirements and use cases that will both meet prospects and customers’ strategic initiatives but also broaden CyberArk product and solution capabilities
Drive account management responsibilities including solution creation, solution offering configuration management, order issuance, service delivery, service management and revenue recognition
Be recognized internally as a subject-matter expert on Identity including how to best position against competitors in our market(s)
Work independently and as part of a sales team to Identify, scope, negotiate, and close new sales opportunities to meet and exceed established sales quota
Provide comprehensive account plans and strategies to win new business with new and existing customers

What we offer

Restricted stock units
Bonus

Fulltime

Information System Security Manager Level 3

Provide management support for a program, organization, system, or enclave's Inf...

Location

United States , Annapolis Junction

Salary:

Not provided

Columbia Technology Partners

Expiration Date

Until further notice

Requirements

U.S. Citizenship is required for all applicants
All applicants and employees are subject to random drug testing in accordance with Executive Order 12564
Employment is contingent upon successful completion of a security background investigation and polygraph
DOD 8570 compliance with IAM III is required
This position requires an active Security Clearance with appropriate Polygraph
Twelve (12) years of work-related experience in the field of security authorization is required
Experience in the following areas is required: knowledge of current security tools, hardware/software security implementation
communication protocols
or encryption tools and techniques
Familiarity with commercial security products, security authorization techniques, security incident management, and PKI and authorization services

Job Responsibility

Provide management support for a program, organization, system, or enclave's Information Assurance program
Provide management support for proposing, coordinating, implementing, and enforcing Information System Security policies, standards, and methodologies
Manage operational security posture for an Information System or program to ensure Information System Security policies, standards, and procedures are established and followed
Provide management of security aspects of the Information System and perform day-to-day security operations of the system
Assist ISSEs and ISSOs with evaluating security solutions to ensure they meet security requirements for processing classified information
Manage the performance of vulnerability/risk assessment analysis to support security authorization
Provide management support to configuration management (CM) for information system security software, hardware, and firmware
Manage changes to systems and assess the security impact of those changes
Manage the process and preparation of documentation reviews to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs)
Support security authorization activities in compliance with NSA/CSS Risk Management Framework (RMF) process and DoD Information Assurance Certification and Accreditation Process (DIACAP)

What we offer

Medical: CTP offers 3 superior plans, bringing our employees both in-network and out-of-network options
Vision + Dental: Both free to you + paid in full by CTP
Retirement: 401k - 6% company contribution
PTO + Leave: A work life balance is extremely important to our team here at CTP, which is why our paid time off plans are so lucrative. Offering customizable leave plans to meet your needs is just one of our many perks! Jury Duty, Bereavement + Military Leave provided
Career Growth: Up to $10,000 provided for approved career-related learning, training, education, and/or tuition
Life and AD&D Insurance/Short-Term & Long-Term Disability: More peace of mind, at zero cost to you
Profit Sharing Bonus: End of year cash gets added to your bottom-line
Referral Bonus Program: Our tiered program provides an incentive with each stage of the hiring process your referral passes. Our bonuses range from $7,000-$20,000, if your referral joins the team

Fulltime

Information Systems Security Officer Level 3

Provide support for a program, organization, system, or enclave's information as...

Location

United States , Annapolis Junction

Salary:

Not provided

Columbia Technology Partners

Expiration Date

Until further notice

Requirements

Ten (10) years of combined work-related experience in the fields of IT, cybersecurity or security authorization is required
Experience in at least two of the following areas is required: knowledge of current security tools, hardware/software security implementation
communication protocols
or encryption tools and techniques
Familiarity with commercial security products, security authorization techniques, security incident management, and PKI and authorization services
Bachelor's degree in Computer Science or a related field (e.g. General Engineering, Computer Engineering, Electrical Engineering, Systems Engineering, Mathematics, Computer Forensics, Cybersecurity, Information Technology, Information Assurance, Information Security, and Information Systems) is required
In lieu of a Bachelor's degree, four (4) additional years of work-related experience may be substituted
U.S. Citizenship is required for all applicants
All applicants and employees are subject to random drug testing in accordance with Executive Order 12564
Employment is contingent upon successful completion of a security background investigation and polygraph

Job Responsibility

Provide support for a program, organization, system, or enclave's information assurance program
Provide support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies
Maintain operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed
Assist with the management of security aspects of the information system and perform day-to-day security operations of the system
Evaluate security solutions to ensure they meet security requirements for processing classified information
Perform vulnerability/risk assessment analysis to support security authorization
Provide configuration management (CM) for information systems security software, hardware, and firmware
Manage changes to system and assess the security impact of those changes
Prepare and review documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs)
Support security authorization activities in compliance with National Institute of Standards and Technology Risk Management Framework (NIST RMF)

What we offer

Medical: CTP offers 3 superior plans, bringing our employees both in-network and out-of-network options
Vision + Dental: Both free to you + paid in full by CTP
Retirement: 401k - 6% company contribution
PTO + Leave: Offering customizable leave plans
Jury Duty, Bereavement + Military Leave provided
Career Growth: Up to $10,000 provided for approved career-related learning, training, education, and/or tuition
Life and AD&D Insurance/Short-Term & Long-Term Disability: at zero cost to you
Profit Sharing Bonus: End of year cash gets added to your bottom-line
Referral Bonus Program: Our bonuses range from $7,000-$20,000

Fulltime

Information Systems Security Officer Level 2

Provide support for a program, organization, system, or enclave's information as...

Location

United States , Annapolis Junction

Salary:

Not provided

Columbia Technology Partners

Expiration Date

Until further notice

Requirements

Eight (8) years of combined work-related experience in the fields of IT, cybersecurity or security authorization is required
Experience in at least two of the following areas is required: knowledge of current security tools, hardware/software security implementation
communication protocols
or encryption tools and techniques
Familiarity with commercial security products, security authorization techniques, security incident management, and PKI and authorization services
Bachelor's degree in Computer Science or a related field (e.g. General Engineering, Computer Engineering, Electrical Engineering, Systems Engineering, Mathematics, Computer Forensics, Cybersecurity, Information Technology, Information Assurance, Information Security, and Information Systems) is required
In lieu of a Bachelor's degree, four (4) additional years of work-related experience may be substituted
U.S. Citizenship is required for all applicants
All applicants and employees are subject to random drug testing in accordance with Executive Order 12564
Employment is contingent upon successful completion of a security background investigation and polygraph

Job Responsibility

Provide support for a program, organization, system, or enclave's information assurance program
Provide support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies
Maintain operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed
Assist with the management of security aspects of the information system and perform day-to-day security operations of the system
Evaluate security solutions to ensure they meet security requirements for processing classified information
Perform vulnerability/risk assessment analysis to support security authorization
Provide configuration management (CM) for information systems security software, hardware, and firmware
Manage changes to system and assess the security impact of those changes
Prepare and review documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs)
Support security authorization activities in compliance with National Institute of Standards and Technology Risk Management Framework (NIST RMF)

What we offer

Medical: CTP offers 3 superior plans, bringing our employees both in-network and out-of-network options
Vision + Dental: Both free to you + paid in full by CTP
Retirement: 401k - 6% company contribution
PTO + Leave: Offering customizable leave plans
Jury Duty, Bereavement + Military Leave provided
Career Growth: Up to $10,000 provided for approved career-related learning, training, education, and/or tuition
Life and AD&D Insurance/Short-Term & Long-Term Disability: at zero cost to you
Profit Sharing Bonus: End of year cash gets added to your bottom-line
Referral Bonus Program: Our bonuses range from $7,000-$20,000

Fulltime

New

Embedded Software Engineer (Chinese Speaking)

Analyze, design, develop, and maintain complex embedded software components base...

Location

Vietnam , Ho Chi Minh City

Salary:

Not provided

Robert Bosch Sp. z o.o.

Expiration Date

Until further notice

Requirements

Bachelor's degree or higher in Computer Science, Software Engineering, Electrical Engineering, Electronics, Telecommunications, Control and Automation Engineering, Mechatronics, or a related field
3+ years of proven professional experience in embedded software development
Hands-on experience with microcontroller architecture, device drivers, and real-time operating systems (RTOS)
Strong programming skills in C/C++, with experience in scripting languages like Python or others such as C#
Solid foundation in Control Systems, Automation, Embedded Systems, and familiarity with automotive communication protocols (e.g., CAN, LIN, Ethernet)
Experience in areas such as Automotive Ethernet, Base Software (BSW), Bootloader, COM Stack, Cyber Security, Device Drivers, Diagnostics, and Real-Time Operating Systems
Proficient in English Communication
Advanced Chinese Proficiency: Must be able to communicate fluently in technical and business contexts and read/understand technical documents in Chinese (HSK5 or above)
Results-driven with a quality-focused, structured, and disciplined engineering approach
Possesses a safety-critical mindset and an architecture-first approach

Job Responsibility

Analyze, design, develop, and maintain complex embedded software components based on business and technical requirements
Perform software requirement engineering, including analyzing, validating, and maintaining customer requirements
Perform software integration activities, including configuring and merging software modules into a unified build
Create and execute unit, component, and integration test cases to verify software functionality and ensure compliance with quality standards
Apply established software development processes and coding standards to produce reliable and maintainable code for embedded systems
Utilize debugging and analysis tools to investigate, troubleshoot, and resolve complex software defects and performance issues
Mentor junior engineers by providing guidance on technical tasks, coding practices, and problem-solving techniques
Contribute to technical reviews and team knowledge-sharing sessions
Ensure compliance with applicable industry standards, regulatory requirements, company policies, and quality frameworks applicable to the role and assigned projects

What we offer

Working in one of the Best Places to Work in Vietnam and Top 30 of the Most Innovative Companies all over the world
Join a dynamic and fast growing global company (English-speaking environment)
13th-month salary bonus + attractive performance bonus (you'll love it!) + annual performance appraisal
100% monthly salary and mandatory social insurances in 2-month probation
Onsite opportunities: short-term and long-term assignments
15++ days of annual leave + 1 day of birthday leave
Premium health insurance for employee and 02 family members
Flexible working time
Lunch and parking allowance
Various training on hot-trend technologies/ foreign language (English/Chinese/Japanese) and soft-skills

Fulltime

Select Country

Staff CyberSecurity Software Engineer - IAM

Job Description

Job Responsibility

Requirements

Nice to have

Looking for more opportunities?