<p>A leading mortgage company is seeking a talented Application Security Engineer to help secure internally developed applications, APIs, and software delivery processes. This role partners with engineering, architecture, and DevOps teams to embed security throughout the SDLC and strengthen secure-by-design practices. Position is 100% remote and comes with strong company benefits. This is a direct hire position; candidate must be eligible to work in the United States.</p><p><br></p><p>Responsibilities:</p><p>• Perform threat modeling, secure design reviews, and architecture assessments</p><p>• Review SAST, DAST, SCA, and secrets scanning results; support risk-based remediation</p><p>• Help define secure coding standards, guardrails, and security patterns</p><p>• Guide developers on secure coding and vulnerability remediation</p><p>• Support security testing for web, API, and cloud applications</p><p>• Maintain and improve AppSec tools and CI/CD security integrations</p><p>• Deliver developer security training and support audit and compliance efforts.</p>
We are looking for an experienced Cyber Security Manager to lead and strengthen the organization’s security posture across multiple locations. This position will guide enterprise-wide efforts related to risk reduction, regulatory readiness, and incident management while working closely with senior leaders and customer-facing teams. The role is ideal for a strategic security leader who can balance long-term program development with hands-on oversight of daily security operations.<br><br>Responsibilities:<br>• Direct the organization’s information security roadmap and continuously improve security operations to support business goals.<br>• Oversee programs related to risk assessment, policy governance, regulatory compliance, incident preparedness, and employee security education.<br>• Coordinate the response to cybersecurity events, including investigation, containment, recovery, and follow-up remediation activities.<br>• Work with internal stakeholders and external customers to address security questionnaires, audit requests, and client assurance needs.<br>• Establish, update, and enforce security policies, technical standards, and hardening practices across enterprise systems and networks.<br>• Prepare clear updates for executive leadership on threat trends, security risks, compliance status, and overall program effectiveness.<br>• Build, lead, and develop the information security team by providing direction, coaching, and performance support.<br>• Support the ongoing evaluation of security tools and controls, including SIEM, network security, application security, and broader enterprise protection capabilities.
<p>A growing organization is seeking a Cybersecurity Analyst to support and enhance its cybersecurity operations, threat detection, incident response, and data protection initiatives. This role is ideal for a security professional who enjoys investigating threats, improving security controls, and partnering with stakeholders to strengthen overall security posture.</p><p>Position Overview</p><ul><li>Investigate and respond to cybersecurity incidents across cloud, endpoint, identity, email, application, and network environments.</li><li>Monitor and maintain security events within a SIEM environment, including alert triage, threat analysis, and incident escalation.</li><li>Develop and leverage KQL queries for investigations, reporting, threat hunting, and detection tuning.</li><li>Support incident response activities including containment, remediation, recovery, and post-incident reviews.</li><li>Enhance security monitoring capabilities by reducing false positives, identifying gaps, and improving detection coverage.</li><li>Assist with data protection initiatives including DLP investigations, information protection, insider risk monitoring, auditing, and eDiscovery activities.</li><li>Participate in security risk assessments, control reviews, vendor evaluations, and compliance-related initiatives.</li><li>Create and maintain security procedures, runbooks, metrics, and technical documentation.</li><li>Collaborate with stakeholders across the business to communicate risks, findings, and recommended security improvements.</li><li>Participate in an on-call rotation supporting critical cybersecurity incidents.</li></ul><p><br></p>
<p><strong>Security Engineer</strong></p><p><br></p><p><strong>Overview</strong></p><p>A leading global professional services organization is seeking a Security Engineer with Third-Party Risk experience.</p><p><br></p><p>The Security Engineer plays a critical role in safeguarding the organization’s ecosystem by evaluating the security posture of external vendors and partners. This role focuses on conducting technical risk assessments across SaaS platforms, cloud environments, and hosted services while ensuring compliance with industry standards and client expectations. Based remotely, this position partners closely with IT security leadership and cross-functional stakeholders to mitigate risk and strengthen third-party security practices.</p><p><br></p><p><strong>Key Responsibilities</strong></p><ul><li>Conduct technical security assessments of third-party vendors across SaaS platforms, cloud infrastructure, and hosted services</li><li>Evaluate vendor security controls, including access management, encryption, and data protection practices</li><li>Review vendor documentation such as SOC 2 reports, ISO certifications, and security testing results</li><li>Assess cloud environments (AWS, Azure, GCP) for security configurations, segmentation, and identity controls</li><li>Analyze API security, including authentication methods, data transmission, and vulnerability risks</li><li>Evaluate DevSecOps maturity, including secure development practices and CI/CD pipeline security</li><li>Track and manage vendor risk findings, ensuring remediation efforts are completed in a timely manner</li><li>Support client-facing security activities, including questionnaires, audits, and compliance reviews</li><li>Collaborate with internal stakeholders to align vendor security with regulatory requirements (e.g., GDPR, CCPA)</li><li>Prepare risk reports and present key findings to leadership and cross-functional teams</li></ul><p><strong>Additional Details</strong></p><ul><li>Remote (must reside in proximity to a supported office region)</li><li>Core hours: 8:00 AM – 4:00 PM PT (7-hour workday)</li><li>Occasional travel may be required for vendor assessments</li><li>Collaborative environment with direct exposure to senior leadership and security stakeholders</li></ul>
<p>We are looking for a Security Operations Analyst to support critical security initiatives. This role is ideal for someone who is detail oriented and can strengthen day-to-day security operations while contributing to organized project execution and cross-functional coordination. The position blends operational security oversight with structured planning, making it a strong fit for someone who is comfortable working across both analytical and consulting-focused responsibilities.</p><p><br></p><p>Responsibilities:</p><p>• Monitor security operations activities and help maintain consistent response processes across ongoing initiatives.</p><p>• Coordinate with internal stakeholders to track security-related tasks, priorities, and project timelines.</p><p>• Review operational workflows to identify risks, gaps, and opportunities for improved security performance.</p><p>• Support the execution of security programs by organizing deliverables, status updates, and action plans.</p><p>• Assist in documenting procedures, findings, and recommendations to promote clear communication and accountability.</p><p>• Work with teams across the business to align security efforts with project goals and operational requirements.</p><p>• Contribute to issue tracking and follow-up activities to help ensure timely resolution of security concerns.</p>
We are looking for a Network Security Consultant to support secure, resilient network environments for public-facing and internal platforms in Iselin, New Jersey. This Long-term Contract opportunity is ideal for a detail-oriented candidate who can strengthen enterprise security architecture, improve protected connectivity, and advise teams on practical risk reduction. The role will work closely with infrastructure, security, and application stakeholders to deliver scalable safeguards that align with operational and business needs.<br><br>Responsibilities:<br>• Create and deploy secure network architecture for internet-facing applications and connected internal systems.<br>• Develop segmentation approaches that separate critical environments and enforce protected communication across the enterprise.<br>• Administer and refine firewall configurations, access policies, and related security controls to support performance and protection goals.<br>• Design and maintain secure routing and access frameworks that govern connectivity between users, applications, and network resources.<br>• Advise technical teams on hardening externally accessible applications and strengthening service-level security measures.<br>• Implement and support multi-factor authentication, identity management capabilities, digital certificates, and encrypted communication standards.<br>• Deploy and maintain reverse proxy or web application firewall solutions to help defend public-facing services from threats.<br>• Establish effective logging, monitoring, alerting, and system-hardening practices to improve visibility and incident response readiness.<br>• Partner with infrastructure, security, and application teams to review proposed designs, support implementation planning, and recommend governance and risk mitigation improvements.
<p>We are looking for a Senior Microsoft Security Engineer to lead and strengthen the organization’s Microsoft-based security environment in Michigan. This contract opportunity is ideal for a hands-on, detail-oriented candidate who can improve protections across identities, endpoints, servers, Microsoft 365, Azure resources, applications, and sensitive information while working closely with IT and security stakeholders. The role is centered on engineering and optimization, with external monitoring support handling around-the-clock alert observation and initial response activities.</p><p><br></p><p>Responsibilities:</p><p>• Lead the administration, tuning, and ongoing enhancement of Microsoft security platforms across endpoint, identity, server, cloud, and collaboration environments.</p><p>• Strengthen protection coverage by identifying control gaps, unmanaged assets, policy drift, and security weaknesses, then driving corrective actions to closure.</p><p>• Manage and improve Microsoft Entra ID security capabilities, including Conditional Access, identity protection measures, and privileged access controls.</p><p>• Apply Zero Trust and least-privilege practices across user access, devices, applications, workloads, and data to reduce organizational risk.</p><p>• Support Microsoft Purview initiatives such as data classification, information protection, and investigative capabilities for security and compliance needs.</p><p>• Partner with Azure and application teams to implement secure cloud configurations and improve the security posture of hosted workloads.</p><p>• Use Defender for Cloud and related Microsoft tools to evaluate risks in Azure environments and recommend remediation priorities.</p><p>• Coordinate with IT operations and external security providers on monitoring effectiveness, incident escalation, patch compliance reporting, and vulnerability remediation efforts.</p><p>• Automate recurring security administration and reporting tasks through PowerShell, Microsoft Graph, and similar tooling while maintaining accurate standards, procedures, and change documentation.</p>
We are looking for an experienced DevSec Ops Consultant to support compliance-driven security and audit initiatives in Cincinnati, Ohio. This Long-term Contract position is ideal for a senior-level consultant with a services background who can guide internal audit readiness, strengthen control processes, and coordinate cross-functional security activities. The role requires strong familiarity with Jira, Cisco technologies, and regulated benefits-related environments. You will work closely with stakeholders to improve visibility, documentation, and operational alignment across security and compliance efforts.<br><br>Responsibilities:<br>• Lead security and compliance efforts by assessing control effectiveness, identifying gaps, and recommending practical improvements across operational processes.<br>• Partner with audit and business stakeholders to prepare evidence, organize documentation, and support internal audit activities from planning through remediation.<br>• Use Atlassian Jira to track security tasks, manage issue resolution, and maintain clear reporting on project progress and compliance items.<br>• Review environments involving Cisco technologies to help align infrastructure practices with security standards and audit expectations.<br>• Develop and refine procedures, workflows, and supporting records that strengthen governance and improve ongoing compliance readiness.<br>• Coordinate with cross-functional teams to address risk findings, monitor corrective actions, and ensure timely follow-through on open items.<br>• Support initiatives connected to retirement benefits environments by helping maintain secure, well-documented, and compliant operational practices.<br>• Provide senior-level consulting guidance to stakeholders by translating technical and audit-related requirements into actionable plans.
<p>Robert Half Technology is seeking an experienced <strong>Privacy & Data Governance Consultant</strong> to support a client in the travel and insurance industry. This individual will play a key role in assessing and strengthening the organization's privacy and data governance practices, ensuring compliance with applicable regulations, and enhancing existing policies, procedures, and data protection controls.</p><p> </p><p><strong>This is primarily privacy compliance, governance, and policy-focused opportunity rather than a hands-on engineering role.</strong></p><p><strong> </strong></p><p><strong>Duration: </strong>6-month contract, with potential to extend</p><p><strong>Location: </strong>Client is based in Washington State – 100% remote</p><p><strong>Pay rate: </strong>$65-$75/hr</p><p> </p><p><strong>Key Responsibilities</strong></p><ul><li>Assess the organization's current privacy and data governance environment to identify gaps, risks, and opportunities for improvement.</li><li>Develop, review, and update privacy policies, procedures, and data protection practices to align with regulatory requirements and organizational objectives.</li><li>Support compliance with applicable federal and state privacy regulations, with an emphasis on Washington State privacy requirements.</li><li>Utilize Microsoft Purview to support data governance initiatives, including sensitivity labeling, data classification, and policy configuration.</li><li>Evaluate how sensitive information is collected, stored, accessed, protected, and shared across organizational systems.</li><li>Review existing data protection controls and recommend improvements to strengthen privacy compliance and reduce organizational risk.</li><li>Establish and refine data handling guidelines to ensure information is appropriately classified, protected, and shared.</li><li>Collaborate with internal technology, security, compliance, and business teams to align privacy policies with operational practices.</li><li>Provide guidance on privacy considerations related to Microsoft cloud environments, data centers, and emerging technologies.</li><li>Support ongoing privacy and data governance initiatives during organizational changes and process improvements.</li></ul>