Plano, TX

Cybersecurity Jobs in Plano, TX

23 jobs found

Include remote jobs

Today

Cybersecurity Program Manager

PAM Health, LLC Plano, TX

Plano, TX

Today

Full time Manager Cybersecurity Tools Data Security

Apply Now

Job Description

Cybersecurity Program Manager role at PAM Health, LLC focused on leading enterprise security programs and technology initiatives to protect operations and support patient care.

Responsibilities

Plan, implement, and continuously improve enterprise cybersecurity programs and security technology initiatives
Coordinate security deployments with Infrastructure, Support, managed service providers, application teams, and business stakeholders to meet security objectives while minimizing operational disruption
Assess security solutions for suitability, effectiveness, risk, operational impact, and alignment with PAM Health requirements
Create phased implementation plans, including project milestones, dependencies, risk controls, communications, and success measures
Identify significant security and operational risks, recommend controls, and escalate items requiring executive direction
Manage security vendor relationships, service delivery, performance reviews, remediation commitments, and accountability
Monitor contracts, service-level agreements, performance metrics, outages, corrective actions, and security provider value
Coordinate vendor incident response, root-cause analysis, post-incident reviews, remediation plans, and contractual follow-up
Lead and expand the cybersecurity awareness program, including employee education, phishing awareness, and recurring communications
Develop security metrics, dashboards, status reports, risk summaries, and executive-level communications
Formalize and improve cybersecurity program processes, including incident response, governance, documentation, and cross-functional coordination
Build collaborative relationships across Cybersecurity, technical, clinical, and business teams; translate business needs into secure, practical solutions
Maintain a forward-looking view of the security technology portfolio and recommend enhancements, replacements, consolidations, or retirements
Support broader technology and organizational planning; provide cybersecurity leadership when coordinated action is needed
Promote cooperation, fairness, equity, respect for people and perspectives, empathy, and team performance
Coach, evaluate, develop, and inspire staff; set expectations and recognize achievements
Demonstrate accountability and sound judgment in managing company resources; adhere to confidentiality, company values, policies, procedures, and safety guidelines
Identify problems, involve others in solutions, conduct analysis, implement appropriate responses, and respond promptly to new challenges
Make clear, consistent decisions with integrity; distinguish relevant from irrelevant information and make timely, appropriate decisions
Align priorities to company vision; measure outcomes; use feedback to redirect; evaluate alternatives and organize complex issues for resolution
Communicate effectively in oral and written form, negotiate, actively listen, and share information clearly across teams
Drive efficient, high-quality performance; maintain resilience during challenging matters; take initiative for improvements
Motivate others, accept responsibility, maintain morale, develop trust and credibility, and expect honest and ethical behavior
Encourage collaboration, build effective teams, work in partnership, and remain flexible to others’ needs
Maintain up-to-date skills through professional organizations and/or continuing education
Maintain the highest level of customer service with courtesy, compassion, and positive communication
Promote PAM Health’s mission and vision within the work environment and community
Respect dignity and confidentiality by following applicable policies and procedures
Work in a manner that promotes safety, wear clothing appropriate to the role, and participate in OSHA required training
Follow universal precautions as appropriate; comply with Employee Health requirements for continued employment; report unsafe practices; know own role in case of an emergency

Requirements

10 (ten) years of progressive information technology experience, including at least 5 (five) years in cybersecurity
3 (three) years leading cybersecurity programs, enterprise technology initiatives, or comparable cross-functional projects
Experience managing security vendors, service providers, contracts, service-level agreements, performance metrics, and remediation commitments
Experience coordinating enterprise security technology deployments across infrastructure, endpoint, network, application, and business teams
Experience creating security awareness communications, program metrics, and executive-level reports
Strong program and project management skills, including planning, prioritization, dependency management, risk tracking, and delivery oversight
Ability to evaluate cybersecurity technologies and services for effectiveness, operational impact, business fit, and risk
Knowledge of security operations, incident response, security awareness, vendor management, enterprise infrastructure, and common cybersecurity controls
Ability to translate technical and security risk into clear business impact, recommendations, and decisions for executive and non-technical audiences
Strong written and verbal communication, negotiation, relationship management, and cross-functional leadership skills
Sound judgment, accountability, initiative, and ability to lead through influence while balancing security requirements with operational needs

Education and Training

Required: Bachelor’s degree in Cybersecurity, Information Technology, Information Systems, Business Administration, Project Management, or related field, or an equivalent combination of education and experience
Preferred: Master’s degree in Cybersecurity, Information Technology, Business Administration, or related field
Preferred Certifications: PMP, CISSP, CISM, or comparable cybersecurity, program management, or vendor management certification

Experience (Additional)

Preferred: Cybersecurity experience in healthcare, a health system, or another regulated environment
Preferred: Experience building or maturing cybersecurity awareness, incident response, governance, metrics, or vendor management programs
Preferred: Experience supporting a geographically distributed, multi-facility organization
Preferred: Prior infrastructure, networking, support, systems, or application experience that supports practical evaluation of operational impact

Working Conditions

Location: Plano, TX (onsite)
Remote position with travel up to 15% to facilities across the enterprise
Facility visits occur in operating clinical environments and may require compliance with facility access, screening, and health requirements
Work performed indoors in well-lighted, well-ventilated areas, with potential exposure to hospital clinical surroundings during visits
May be required to coordinate response to significant security incidents outside standard business hours

Organizational Data

Exempt position supervised by the Chief Information Security Officer
No formal line of promotion exists

View full job page →

4d ago

Lead Information Security Engineer - Authentication

USAA Plano, TX

Plano, TX

4d ago

$142k - $274k/yr Full time Data Security Engineer Identity and Access Management

Apply Now

Job Description

USAA is building and modernizing enterprise authentication and privileged access capabilities with a strong Zero Trust lens. In this hybrid/remote-eligible role in Plano, TX, you will set technical direction for workforce identity services and lead engineering work across complex authentication ecosystems and security controls.

Role Overview

You will be responsible for the architecture, engineering, and strategic direction of enterprise authentication and privileged access management capabilities. The work includes modernizing workforce identity services across platforms such as Okta Workforce Identity Engine, Microsoft Entra ID, Active Directory, and federation or authentication protocols, while ensuring secure, scalable, user-friendly access across the enterprise.

What You’ll Do

Ensure security requirements are addressed across the solution/application enablement and sustainment lifecycle.
Design, develop, code, integrate, and test complex cross-functional technical solutions with a security focus, collaborating beyond your immediate team when needed.
Lead code and design reviews, and drive engineering efficiencies to support accurate planning and effective operations.
Independently resolve complex production issues and lead troubleshooting for end-to-end solutions spanning multiple applications and systems.
Partner with architecture to define direction for cross-functional or highly complex key technologies within a specific security domain.
Apply Site Reliability Engineering practices in your domain.
Act as a subject matter expert and influence cross-functional initiatives across USAA.
Monitor and troubleshoot highly complex systems, tools, and vendor integrations, performing continuous research, analysis, and troubleshooting to identify, resolve, and report security issues.
Collaborate with Security Analysts, IT, and business partners to tune, harden, and enhance security solutions and technologies.
Mentor junior engineers, support continuous learning, and help ensure the team stays current with security trends and technologies.
Identify, measure, monitor, and control risks tied to business activities in alignment with risk and compliance policies and procedures.

Minimum Qualifications

Bachelor’s degree; OR 4 years of relevant education and/or experience.
8 years of related experience in Security Engineering and/or Information Technology with a security focus, including experience leading company-wide technology projects or initiatives.

Key Experience

Architecting, engineering, and supporting enterprise authentication solutions using Okta Workforce Identity Engine, Microsoft Entra ID, Active Directory, ADFS, and related identity provider technologies.
Designing and implementing authentication integrations using SAML, OpenID Connect (OIDC), OAuth, and other federation protocols across large, complex application environments.
Defining authentication standards, reference architectures, engineering patterns, and technical roadmaps as a senior technical authority for authentication and identity services.
Hands-on experience implementing MFA, adaptive authentication, risk-based access controls, passwordless authentication, conditional access, and Zero Trust security principles in enterprise environments.
Leading and owning security strategies, solutions, and/or initiatives through to successful completion.
Addressing complex production issues through application and system troubleshooting.
Advising on security architecture methods and controls to meet security, compliance, and audit requirements.

Technologies

Okta Workforce Identity Engine
Microsoft Entra ID
Active Directory
ADFS
SAML
OpenID Connect (OIDC)
OAuth
MFA
Passwordless authentication
Adaptive authentication
Risk-based access controls
Conditional access
Zero Trust
Site Reliability Engineering

Location / Travel

Remote eligible in the continental U.S., with occasional business travel.
Individuals residing within a 60-mile radius of a USAA office are expected to work on-site four days per week.

Compensation

USD 142,320 - 273,930 per year.

Benefits

Comprehensive medical, dental and vision plans
401(k)
Pension
Life insurance
Parental benefits
Adoption assistance
Paid time off program with paid holidays plus 16 paid volunteer hours
Wellness programs
Career path planning and continuing education

Visa Sponsorship

USAA does not provide visa sponsorship for this role.

View full job page →

5d ago

Cyber Security Analyst

FedEx Plano, TX

Plano, TX

5d ago

$6,168 - $13,571/mo Full time Active Directory Identity and Access Management Identity Governance

Apply Now

Job Description

FedEx is seeking a Cyber Security Analyst to support Identity and Access Management on the Purple ID platform (enterprise identity powered by Okta) in a hybrid environment.

Responsibilities

Implement, administer, and support technologies across Identity and Access Management and related cybersecurity domains
Support FedEx’s Okta/Purple ID environment, including authentication, Multi-Factor Authentication (MFA), application onboarding, access policies, role-based access, and group permissions
Assist with onboarding applications to Okta using SSO (SAML 2.0, OAuth/OIDC) and support integrations with enterprise directories (Active Directory, LDAP) and governance platforms (SailPoint, PAM)
Troubleshoot authentication, authorization, application access, and identity-related issues across enterprise environments
Apply networking concepts such as IP addressing and connectivity to troubleshoot identity and application integration issues
Manage and resolve cybersecurity and IAM incidents, service requests, and demand requests using ServiceNow and established support processes
Partner with application, infrastructure, security, and business teams to capture access requirements and deliver secure IAM solutions
Support application onboarding and integration with FedEx identity and authentication services
Research and respond to attempted or successful efforts to compromise system security and help design countermeasures
Provide management updates on potential business impacts from theft, destruction, alteration, or denial of access to information and systems
Participate in initiatives to modernize and retire legacy identity environments
Support IAM needs related to acquisitions, divestitures, spin-offs, and other enterprise transformation efforts
Identify manual or repetitive IAM tasks that can be streamlined or automated
Apply AI-enabled tools, agents, and automation to improve IAM process quality, operational efficiency, and service delivery
Use AI-enabled tools, coding assistants, and automated agents to streamline log analysis, improve scripting accuracy, and optimize daily IAM workflows
Evaluate emerging AI capabilities and identify appropriate and secure IAM use cases
Collaborate with technical teams to improve security, reliability, and scalability of enterprise identity services
Participate in an on-call support rotation after reaching required proficiency in the environment
Write, maintain, and debug basic scripts (examples include PowerShell, Python, JavaScript) and automate identity lifecycle tasks using Okta Workflows and REST APIs
Perform other duties as assigned

Requirements

Knowledge of IT security and infrastructure
Strong technical and consulting skills with project management capability
Experience with security and risk frameworks, standards, and best practices
Strong verbal and written communication skills
Knowledge of Identity and Access Management concepts, technologies, and security principles
Experience supporting enterprise IAM, authentication, or access management environments
Understanding of core IAM concepts: authentication vs. authorization, MFA, SSO (SAML 2.0, OAuth/OIDC), and directory services (Active Directory, LDAP)
Knowledge of Okta or comparable enterprise identity platforms
Knowledge of Active Directory and LDAP
Knowledge of Privileged Access Management (PAM) concepts and technologies
Knowledge of identity governance and administration technologies, including SailPoint or similar platforms
Knowledge of MFA, SSO, authentication, authorization, role-based access, and group permissions
Working knowledge of networking fundamentals, including IP addressing and connectivity troubleshooting
Strong analytical and troubleshooting skills across multiple systems and technologies
Experience working within structured incidents, service requests, and ticket management processes
Ability to work independently and collaborate effectively with cybersecurity, infrastructure, application, and business teams
Ability to communicate technical security issues, risks, and business impacts to technical and non-technical stakeholders
Demonstrated ability to learn emerging technologies and apply them to business and technology challenges
Demonstrated knowledge or practical experience with Artificial Intelligence (AI), Machine Learning (ML), Generative AI, or related emerging technologies
Familiarity with AI/ML concepts, Generative AI tools, prompt engineering, or leveraging AI coding assistants (examples: GitHub Copilot, ChatGPT)
Ability to identify and apply AI-enabled automation opportunities to cybersecurity, IAM, or IT operational processes
General knowledge of hardware, software, and network
Minimum experience: 2 years
Education: Bachelor’s degree in computer science, information systems, and/or equivalent formal training or work experience

Technologies

Okta, Purple ID
Multi-Factor Authentication (MFA)
SSO, SAML 2.0, OAuth/OIDC
Active Directory, LDAP
SailPoint, PAM
ServiceNow
Okta Workflows, REST APIs
PowerShell, Python, JavaScript
GitHub Copilot, ChatGPT

Location and Work Model

Location: Plano, TX (hybrid)
Hybrid placement also listed for Pittsburgh, PA and Memphis, TN
Candidates must live within 50 miles of the campus location
Employees will be required to work at the FedEx campus location several times per week

Compensation

Salary range: USD 6,168 - 13,571 per month

Application Criteria

Application required via the applicable FedEx career site or internal career portal
Application deadline: October 15th
Position anticipated to remain posted for 7 calendar days, subject to FedEx posting requirements and business needs

View full job page →

5d ago

Sr Cyber Security Analyst

FedEx Plano, TX

Plano, TX

5d ago

$7,094 - $15,607/mo Full time Senior Identity and Access Management Identity Federation

Apply Now

Job Description

FedEx is seeking a Sr Cyber Security Analyst to join the Identity and Access Management team supporting Purple ID, an Okta-powered identity environment. This hybrid role focuses on administering IAM and authentication capabilities, resolving identity-related incidents and onboarding needs, and using AI-enabled tools and automation to improve day-to-day IAM operations.

What you’ll do

Implement, administer, and support technologies deployed across Identity and Access Management and related cybersecurity domains.
Support the FedEx Okta/Purple ID environment, including authentication, Multi-Factor Authentication (MFA), application onboarding, access policies, and role-based access with group permissions.
Onboard applications to Okta using SSO/SAML/OIDC and support integrations with enterprise directories such as Active Directory and LDAP, along with governance platforms including SailPoint and PAM.
Troubleshoot authentication, authorization, application access, and identity-related issues across enterprise environments.
Use networking fundamentals, including IP addressing and connectivity concepts, to isolate identity and application integration problems.
Manage and resolve cybersecurity and IAM incidents, service requests, and demand requests using ServiceNow and established support processes.
Partner with application, infrastructure, security, and business teams to understand access requirements and implement secure IAM solutions.
Research attempted or successful efforts to compromise system security and assist with countermeasure design and implementation.
Provide information to management on potential business impacts from theft, destruction, alteration, or denial of access to information and systems.
Support initiatives to modernize and retire legacy identity environments.
Support IAM requirements tied to acquisitions, divestitures, spin-offs, and other enterprise transformation initiatives.
Identify manual or repetitive IAM processes that can be streamlined or automated.
Apply AI-enabled tools, agents, and automation to improve IAM processes, operational efficiency, and service delivery.
Use AI-enabled tools, coding assistants, and automated agents to streamline log analysis, improve scripting accuracy, and optimize daily IAM workflows.
Evaluate emerging AI capabilities and identify appropriate and secure use cases within Identity and Access Management.
Collaborate with technical teams to improve security, reliability, and scalability of enterprise identity services.
Participate in an on-call support rotation after developing the required level of proficiency in the environment.
Write, maintain, and debug basic scripts (including PowerShell, Python, and JavaScript) and use tools like Okta Workflows or REST APIs to automate identity lifecycle tasks.
Perform other duties as assigned.

Skills and qualifications

Knowledge of IT security and infrastructure.
Strong technical and consulting skills, including project management capability.
Experience with security and risk frameworks, standards, and best practices.
Strong verbal and written communication skills.
Knowledge of Identity and Access Management concepts, technologies, and security principles.
Experience supporting enterprise IAM, authentication, or access management environments.
Understanding of core IAM concepts including authentication versus authorization, MFA, and SSO (SAML 2.0, OAuth/OIDC), plus directory services (Active Directory, LDAP).
Knowledge of Okta or comparable enterprise identity platforms.
Knowledge of Active Directory and LDAP.
Knowledge of Privileged Access Management (PAM) concepts and technologies.
Knowledge of identity governance and administration technologies, including SailPoint or similar platforms.
Working knowledge of networking fundamentals, including IP addressing and connectivity troubleshooting.
Strong analytical and troubleshooting skills across multiple systems and technologies.
Experience working within structured incidents, service requests, and ticket management processes.
Ability to work independently and collaborate effectively with cybersecurity, infrastructure, application, and business teams.
Ability to communicate technical security issues, risks, and business impacts to both technical and non-technical stakeholders.
Demonstrated ability to learn emerging technologies and apply them to business and technology challenges.
Demonstrated knowledge or practical experience with Artificial Intelligence (AI), Machine Learning (ML), Generative AI, or related emerging technologies, including familiarity with AI concepts and use of AI coding assistants (e.g., GitHub Copilot, ChatGPT).
Ability to identify and apply AI-enabled automation opportunities to cybersecurity, IAM, or IT operational processes.

Technologies

Okta, Purple ID
Multi-Factor Authentication (MFA), SSO (SAML 2.0), OAuth/OIDC
Active Directory, LDAP, SailPoint, PAM
ServiceNow
PowerShell, Python, JavaScript
Okta Workflows, REST APIs
GitHub Copilot, ChatGPT

Location and work setup

Hybrid position located in Pittsburgh, PA, Memphis, TN, or Plano, TX.
Candidates must live within 50 miles of the campus location.
Employees will work at the FedEx campus location several times per week.

Compensation

US: $7,094.23/mo - $15,607.31/mo
CO: $7,094.23/mo - $14,957.01/mo
MD: $7,488.36/mo - $15,607.31/mo
NY: $7,488.36/mo - $15,607.31/mo
NYC: $9,064.85/mo - $15,607.31/mo
WA: $7,488.36/mo - $15,607.31/mo

Application criteria

To be considered, submit your application through the applicable FedEx career site or internal career portal.
Posting is anticipated to remain open for seven (7) calendar days, subject to FedEx posting requirements and business need.
Applications are due by October 15th.

Minimum qualifications

4 years minimum experience.
Bachelor’s degree in computer science, information systems, or related degree, and/or equivalent formal training or work.

View full job page →

5d ago

Principal Cybersecurity & Technology Risk Architect - AI/Cloud

Fannie Mae Plano, TX

Plano, TX

5d ago

$175k - $239k/yr Full time Ai Security Cloud Architecture Risk Cloud Platforms

Apply Now

Job Description

The Principal Cybersecurity & Technology Risk Architect (AI/Cloud) is a first-line senior risk position focused on independent, evidence-based risk challenge for enterprise architecture and emerging technology decisions. The role translates technical conditions and incomplete evidence into decision-ready enterprise risk positions while driving scalable improvements to risk remediation and control effectiveness at Fannie Mae.

Role Focus

Provide senior, first-line risk challenge for material architecture, AI (including GenAI and agentic AI), cloud, and engineering decisions. Convert complex technical detail into clear risk positions, actionable decisions, and sustainable remediation outcomes across interconnected environments.

Responsibilities

Lead first-line risk analysis and credible challenges for architecture, AI/GenAI, agentic AI, cloud, and engineering decisions, producing enterprise risk positions and decision-ready outcomes.
Assess architecture and engineering risk early across security design, trust boundaries, threat scenarios, inherited controls, data flows, identity and privilege, APIs, cloud services, software supply chains, and resilience dependencies.
Deliver senior risk challenge for AI systems and emerging AI architectures, including risks tied to model and data integrity, prompt injection, sensitive-data exposure, excessive agency, non-human identities, tool access, third-party models or components, and agentic workflows.
Evaluate control design and operating effectiveness using evidence, distinguishing implemented and effective controls from policies, activities, dashboards, or assertions, and identifying where assurance remains insufficient.
Create reusable risk scenarios, assessment approaches, and minimum evidence expectations for established and emerging technology patterns to reduce reliance on one-off reviews.
Interpret threat modeling and scenario analysis to identify credible failure modes, attack paths, concentration risks, and associated business consequences.
Connect technical exposures to enterprise impact, including critical business services, sensitive data, operational resilience, regulatory obligations, and strategic initiatives.
Frame decision-ready recommendations for senior management, clearly describing exposure, evidence, uncertainty, alternatives, conditions, accountable owners, and the decision required.
Identify systemic and emerging cyber risks by connecting signals from architecture reviews, risk assessments, incidents, issues, exceptions, audit findings, technology change, and industry threat intelligence.
Drive accountable remediation and sustainable risk reduction by challenging whether corrective actions address root causes and validating that closure evidence demonstrates meaningful exposure reduction.
Partner across Cybersecurity, Technology, Engineering, Data, AI, and Risk while maintaining independence of judgment and clear accountability boundaries.
Act as a senior technical risk integrator and mentor by improving the quality of risk reasoning, technical challenge, and executive communication across the broader risk organization.

Requirements

8 years of progressively responsible experience in cybersecurity and security architecture, including cloud security and AI/ML security, plus years of relevant professional experience.
Bachelor’s degree or equivalent practical experience in cybersecurity, computer science, engineering, technology, risk, or a related discipline.
Proven expertise in enterprise security architecture and modern engineering environments, including cloud architectures, APIs, identity and access patterns, data protection, application or platform security, and software supply-chain risk.
Demonstrated experience assessing AI/ML, Generative AI, or emerging technology risk, including model and data security implications, third-party AI services, and risks in increasingly autonomous or agentic systems.
Experience conducting threat modeling, architecture risk assessments, control evaluations, and scenario-based risk analysis for complex technology environments.
Ability to assess control design and operating effectiveness from technical evidence, differentiating effectiveness from policy compliance or completion of risk-management activities.
Capability to translate technical vulnerabilities, architectural weaknesses, and control gaps into business exposure and executive-level risk decisions.
Working knowledge of relevant frameworks and practices including NIST CSF, NIST 800-53, NIST AI RMF, NIST SSDF/SP 800 218, ISO 27001, and comparable cybersecurity and AI-risk frameworks.
Demonstrated ability to operate with incomplete evidence, articulate assumptions and uncertainty, and reach defensible risk conclusions without false precision.
Strong executive writing, synthesis, and presentation skills for communicating technical risk to senior technology, cybersecurity, business, and risk leaders.
Ability to provide constructive, credible challenges to senior engineers, architects, and executives while maintaining productive working relationships.
Experience operating in a complex, regulated enterprise with first-line ownership, independent risk oversight, and audit or assurance accountability.

Technologies and Tools

Active Directory (AD)
Amazon Web Services (AWS)
Artificial Intelligence (AI)
Atlassian JIRA
CyberArk
NIST CSF
NIST 800-53
NIST AI RMF
NIST SSDF/SP 800 218
ISO 27001

Desired Experience

Significant experience in financial services, critical infrastructure, or another highly regulated industry, including understanding how cybersecurity, operational resilience, and regulatory expectations intersect.
Hands-on or architecture-level experience with public cloud environments and cloud-native security, including shared responsibility models, workload identity, containers/serverless services, APIs, and modern software-delivery pipelines.
Experience evaluating GenAI, RAG, AI agents, AI-enabled applications, or ML platforms, including associated identity, data, model, tool-use, supply-chain, and runtime risks.
Experience with secure software development and DevSecOps, including software supply-chain controls, CI/CD security, secrets management, dependency risk, and secure-by-design engineering practices.
Experience establishing security architecture patterns, risk scenarios, reference controls, or minimum evidence requirements that can be reused across an enterprise.
Experience analyzing systemic and emerging risk by connecting multiple findings, exceptions, incidents, or technical conditions into an enterprise-level risk theme and recommended action.
Experience developing risk metrics and leading indicators that measure exposure and control effectiveness rather than activity volume.
Experience presenting complex technology-risk positions to executive management, governance committees, auditors, and/or regulators.
Experience influencing material technology or investment decisions without direct engineering delivery ownership.
Experience coaching or mentoring senior cyber-risk or technology professionals; formal people-management experience is beneficial but not required.
Certifications such as CISSP, CCSP, CISM, CRISC, SABSA, or relevant cloud/security architecture credentials.
Experience working with enterprise GRC platforms and workflows for risk assessments, issues, exceptions, control evidence, risk acceptance, and remediation tracking.

Additional Qualifications

Active Directory (AD)
Amazon Web Services (AWS)
Artificial Intelligence (AI)
Atlassian JIRA
Authentication Management
Backup and Recovery (Software)
CyberArk
Cybersecurity Analysis
Cleaning and Transforming Data
Cloud Technology
Communicating in Technical Writing
Communicating Technical Information
Configuration Management (CM)
Coordination
Conflict Resolution
Data Analysis
Data Analysis Interpretation {+ 60 more}

Location and Work Type

Location: Plano, TX
Work arrangement: Onsite
Employment type: Full-time

Compensation

Salary range: USD 175,000 - 239,000 per year
Requisition compensation: 175000 to 239000

Benefits

Health, Life, Voluntary Lifestyle, and other benefits and perks that enhance an employee’s physical, mental, emotional, and financial well-being.

View full job page →

5d ago

Full Stack Lead Security Engineer

JPMorganChase Plano, TX

Plano, TX

5d ago

Full time Ai Security Ai/llm Security Application Security

Apply Now

Job Description

JPMorgan Chase is hiring for a Full Stack Lead Security Engineer position supporting Cybersecurity & Technology Controls for AI/ML. This onsite role in Plano, TX focuses on building secure software and strengthening AI and LLM security through practical red teaming, secure architecture, and automated adversarial testing. You will help deliver tamper-proof, audit-defensible solutions while working closely with teams across product, data science, cyber, legal, and risk.

What you’ll do

Develop and improve security strategies, red teaming programs, and solution designs, including troubleshooting technical issues and producing scalable outcomes.
Design secure, high-quality AI and software architectures, reviewing designs and code to ensure adversarial resilience.
Lower AI and LLM security vulnerabilities by applying industry standards and emerging AI safety research, updating policies, testing protocols, and controls.
Partner with stakeholders across product, data science, cyber, legal, and risk to understand AI use cases and recommend changes during periods of heightened vulnerability or regulatory shifts.
Automate discovery and adversarial testing for generative AI, RAG pipelines, and ML systems to identify issues such as prompt injection, jailbreaking, and data poisoning.
Provide guidance on secure design, logging, monitoring, and compensating controls for AI applications and platforms.
Define and implement AI red teaming methodologies, playbooks, and success metrics, enabling continuous testing and safe rollout of new AI models and features.
Collaborate with platform and cloud security teams to ensure secure infrastructure configuration and alignment with enterprise security architecture.
Track emerging AI threats by engaging with external researchers, vendors, and standards bodies, and bring best practices into the organization.
Contribute to a team culture that emphasizes diversity, opportunity, inclusion, and respect.
Work within a cross-functional environment to build relationships, influence senior stakeholders, and drive alignment on AI risk tolerance and mitigation priorities.

Required qualifications

Formal training or certification covering Public Cloud environment concepts and advanced hands-on experience with cloud-native AI services such as Bedrock.
Practical experience with Infrastructure as Code (IaC), including Terraform and CloudFormation.
Proficiency in Python scripting.
Strong understanding of AI/ML concepts and trends, including foundational knowledge of AI red teaming to design and implement exercises for complex AI architectures.
Ability to conceptualize, design, validate, and communicate creative technical solutions for enterprise-level security problems, including building internal tools, dashboards, and automation for red teaming.

Technologies you may use

Bedrock
Terraform
CloudFormation
Python
PyRIT
Garak
MITRE ATLAS
OWASP Top 10 for LLMs
IAM, Authentication
OIDC, SAML

Benefits

Competitive total rewards package including base salary determined based on role, experience, skill set, and location.
Eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in cash and/or forfeitable equity.
Comprehensive health care coverage.
On-site health and wellness centers.
Retirement savings plan.
Backup childcare.
Tuition reimbursement.
Mental health support.
Financial coaching.

Preferred qualifications, capabilities, and skills

Expertise in planning, designing, and implementing AI red teaming exercises and enterprise-level security solutions for generative AI, LLMs, and ML systems.
Experience using specialized AI security and red teaming tools and frameworks such as PyRIT, Garak, and custom LLM evaluation harnesses, including contributions to AI security or open-source security projects.
Experience with threat modeling, discovery, vulnerability, and penetration testing such as MITRE ATLAS and OWASP Top 10 for LLMs, plus foundational cybersecurity concepts including IAM and Authentication with OIDC and SAML.

View full job page →

7d ago

Principal Cybersecurity & Technology Risk Architect - AI/Cloud

Fannie Mae Plano, TX

Plano, TX

7d ago

$175k - $239k/yr Full time Ai Security Cloud Risk Management Cyber Risk Management

Apply Now

Job Description

Fannie Mae is seeking a Principal Cybersecurity & Technology Risk Architect - AI/Cloud to act as a first-line senior technical risk authority for enterprise architecture and AI and cloud engineering decisions. In this role, you will provide independent, evidence-based risk challenge, translate technical conditions into decision-ready risk positions, and help drive reusable risk patterns and sustainable remediation across critical technology domains.

Role Responsibilities

Lead first-line risk analysis and credible technical challenges for material architecture, AI/GenAI, agentic AI, and cloud and engineering decisions, converting technical complexity into clear enterprise risk positions and actionable outcomes.
Assess architecture and engineering risks early across security design, trust boundaries, threat scenarios, inherited controls, data flows, identity and privilege, APIs, cloud services, software supply chain risks, and resilience dependencies.
Provide senior risk challenge for AI systems and emerging AI architectures, including risks related to model and data integrity, prompt injection, sensitive data exposure, excessive agency, non-human identities, tool access, third-party models or components, and agentic workflows.
Evaluate control design and operating effectiveness using evidence, distinguishing implemented and effective controls from policies, activities, dashboards, or assertions, and flagging where evidence or assurance is insufficient.
Create reusable risk scenarios, assessment approaches, and minimum evidence expectations for established and emerging technology patterns to reduce reliance on one-off reviews and enable consistent risk decisions at scale.
Interpret threat modeling and scenario analysis to identify credible failure modes, attack paths, concentration risks, and business consequences across interconnected technology environments.
Link technical exposures to enterprise impact, including critical business services, sensitive data, operational resilience, regulatory obligations, and strategic initiatives.
Formulate decision-ready recommendations for senior management by articulating exposure, evidence, uncertainty, alternatives, conditions, accountable owners, and the specific decision required.
Identify systemic and emerging cyber risks by connecting signals across architecture reviews, risk assessments, incidents, issues, exceptions, audit findings, technology change, and industry threat intelligence.
Drive accountable remediation and sustainable risk reduction, challenging whether corrective actions address root causes and validating that closure evidence demonstrates meaningful reduction in exposure.
Partner across Cybersecurity, Technology, Engineering, Data, AI, and Risk while maintaining independence of judgment and clear accountability boundaries.
Serve as a senior technical risk integrator and mentor, improving the quality of risk reasoning, technical challenge, and executive communication across the broader risk organization.

Required Qualifications

8 years of progressively responsible experience in cybersecurity, security architecture, cloud security, AI/ML security, and related professional experience.
Bachelor’s degree (or equivalent practical experience) in cybersecurity, computer science, engineering, technology, risk, or a related discipline.
Demonstrated expertise in enterprise security architecture and modern engineering environments, including cloud architectures, APIs, identity and access patterns, data protection, application/platform security, and software supply-chain risk.
Demonstrated experience assessing AI/ML, Generative AI, or emerging technology risk, including security implications of models, data, AI applications, third-party AI services, and autonomous or agentic systems.
Experience conducting threat modeling, architecture risk assessments, control evaluations, and scenario-based risk analysis for complex technology environments.
Demonstrated ability to assess control design and operating effectiveness from technical evidence, distinguishing effectiveness from policy compliance or completion of risk-management activities.
Ability to translate technical vulnerabilities, architectural weaknesses, and control gaps into business exposure and executive-level risk decisions.
Working knowledge of relevant frameworks and practices, including NIST CSF, NIST 800-53, NIST AI RMF, NIST SSDF/SP 800-218, ISO 27001, and comparable cybersecurity and AI-risk frameworks.
Demonstrated ability to operate effectively when evidence is incomplete by articulating assumptions and uncertainty and reaching defensible conclusions without false precision.
Strong executive writing, synthesis, and presentation skills to communicate technical risk to senior technology, cybersecurity, business, and risk leaders.
Ability to provide constructive, credible challenges to senior engineers, architects, and executives while maintaining productive working relationships and supporting business mission.
Experience working within a complex, regulated enterprise with first-line ownership, independent risk oversight, and audit or assurance accountability.