Lead Security Engineer

Home > Python programming jobs

Lead Security Engineer in USA

Fictiv
Full time
Email

USA
09/12/2026
Report

Oakland, CA

Responsibilities

Act as the hands-on security lead across IT and engineering and prioritize security projects across global operations.
Develop, enforce, and maintain security policies, standards, governance, runbooks, and repeatable processes.
Investigate security incidents, coordinate response activities, perform root-cause analysis, and serve as an escalation point for complex issues.
Secure physical networking and cloud infrastructure, including firewalls, segmentation, cloud workloads, IAM, security groups, and permission policies.
Design and manage least-privilege roles, RBAC, application permissions, user groups, and identity lifecycle access.
Run user access audits, access reviews, compliance checks, security scans, monitoring, alerting, and reporting.
Administer enterprise AI tools such as Claude and evaluate new AI capabilities, integrations, guardrails, and local MCP servers.
Review systems, code, third-party components, and open-source components for security risks and secure integration practices.
Gather and maintain audit evidence and validate controls for J-SOX, NIST, CMMC 2.0, and SOC 2.
Automate manual security work and keep security documentation and internal knowledge bases current.

Requirements

Senior-level expertise across identity and access management, infrastructure and cloud security, governance and compliance, incident response, application and integration security, and AI/LLM security.
Hands-on incident investigation experience and the judgment to handle phishing, spam, and other user-facing threats.
Hands-on experience securing networking and cloud infrastructure, including firewalls, segmentation, IAM, security groups, permission policies, and application permissions.
Cloud security experience with AWS, Azure, or similar platforms and experience designing roles and RBAC with Microsoft Entra ID, Okta, or AWS IAM.
Familiarity with security monitoring and detection tools and experience conducting user access audits, access reviews, and compliance checks.
Experience supporting SOC 2, NIST 800-53/800-171, CMMC 2.0, and J-SOX programs through evidence gathering and control validation.
Application security experience including automation tooling, code review for security issues, and secure integration practices.
Working knowledge of AI and LLM security, including AI tool administration, risk evaluation, and MCP server integrations.
Ability to make independent security decisions, prioritize competing initiatives, automate manual processes, and communicate across a global multi-site organization.
Preferred certifications include CISSP, CISM, Security+, or GIAC certifications such as GSEC or GCIH.
Preferred experience includes CMMC 2.0 assessments, global Japanese-owned company audit and controls work, and scripting with Bash, Python, or PowerShell.

Benefits

Oakland, California location with 0–10% travel expected.
Applicants must be U.S. citizens or Green Card holders.
The role involves primarily computer-based work with extended periods of sitting.

Salary: $180k - $216k/yr

Fictiv

Fictiv builds a digital platform for on-demand manufacturing of custom parts, offering CNC machining, 3D printing, and urethane casting from prototype through low-volume production. Companies use its global manufacturing network and hubs in the U.S., China, India, and Mexico to source parts and m...

Similar positions

Software Developer, Data Engineering

Robinhood
Full time

Canada
10/30/2026

Toronto

Platform Engineer, Biotech

Clera
Full time

USA
10/30/2026
Salary: $180k - $240k/yr

San Francisco, CA

Senior Software Engineer - Compute Engineering

ServiceNow
Full time

USA
10/30/2026
Salary: $143k - $243k/yr

Remote

Engineering Manager - MLOps & Analytics

Canonical
Full time

Remote
10/30/2026

EMEA, Americas

Senior Staff Security Engineer

ServiceNow
Full time

USA
10/30/2026

Remote