THE POSITION
Our roster has an opening with your name on it

As a Product Security Engineer, you will play a critical role in securing AI-enabled software. You will partner directly with engineering teams to identify and remediate security risks in modern web, mobile, cloud, and AI-driven systems. In parallel, you will help design and build intelligent automation that reduces repetitive manual review work and improves developer velocity. This role equally balances hands-on product security engineering with building scalable security automation. This is an opportunity to both secure next-generation AI capabilities and shape how Product Security evolves to meet growing demand.

In addition to the specific responsibilities outlined above, employees may be required to perform other such duties as assigned by the Company. This ensures operational flexibility and allows the Company to meet evolving business needs.

THE GAME PLAN
Everyone on our team has a part to play

• Be part of a bleeding-edge security engineering organization enabling secure, reliable, AI-enabled applications and products.
• Embed security within product development teams to define and implement secure design patterns for distributed and AI-integrated systems.
• Conduct thorough security assessments including penetration testing, code reviews, threat modeling, and architecture reviews.
• Deliver AI/LLM-focused threat modeling and evaluate risks in model integrations, data flows, and external AI services.
• Identify recurring security review patterns and design automation to streamline lower-risk use cases.
• Design and build internal tooling and workflows that accelerate security reviews.
• Develop structured, scalable review processes that maintain rigor while improving speed.
• Partner with technology leaders to establish metrics, demonstrating both security posture and review efficiency.
• Collaborate with development and operations teams to evolve modern product security standards and guardrails.
• Ensure processes associated with key systems are documented, maintained, and continuously improved.
• Other duties as required.
  
  
  

THE STATS
What we're looking for in our next teammate

• Experience in product security engineering, with a focus on web applications
• Deep understanding of secure coding practices, security architecture, and secure development methodologies.
• Proficiency in conducting security assessments including penetration testing, vulnerability scanning, code reviews, and threat modeling.
• Strong experience securing modern API-driven and cloud-native architectures.
• Strong software engineering skills (Python or similar) with experience building tooling or automation.
• Experience reviewing or securing AI/LLM-integrated systems.
• Experience designing or building automation that improves security workflows or reduces manual effort.
• Strong knowledge of industry-standard security frameworks such as ISO 27001, NIST, and OWASP.
• Ability to communicate and influence in a highly distributed environment.
• Strong verbal and written communication skills.
  
  
  

ABOUT FANDUEL

FanDuel Group is the premier mobile gaming company in the United States and Canada. FanDuel Group consists of a portfolio of leading brands across mobile wagering including: America’s #1 Sportsbook, FanDuel Sportsbook; its leading iGaming platform, FanDuel Casino; the industry’s unquestioned leader in horse racing and advance-deposit wagering, FanDuel Racing; and its daily fantasy sports product.  

In addition, FanDuel Group operates FanDuel TV, its broadly distributed linear cable television network and FanDuel TV+, its leading direct-to-consumer OTT platform. FanDuel Group has a presence across all 50 states, Canada, and Puerto Rico.

The company is based in New York with US offices in Los Angeles, Atlanta, and Jersey City, as well as global offices in Canada and Scotland. The company’s affiliates have offices worldwide, including in Ireland, Portugal, Romania, and Australia.

FanDuel Group is a subsidiary of Flutter Entertainment, the world's largest sports betting and gaming operator with a portfolio of globally recognized brands and traded on the New York Stock Exchange (NYSE: FLUT).

PLAYER BENEFITS
We treat our team right

We offer amazing benefits above and beyond the basics. We have an array of health plans to choose from (some as low as $0 per paycheck) that include programs for fertility and family planning, mental health support, and fitness benefits. We offer generous paid time off (PTO & sick leave), annual bonus and long-term incentive opportunities (based on performance), 401k with up to a 5% match, commuter benefits , pet insurance, and more - check out all our benefits here: FanDuel Total Rewards. *Benefits differ across location, role, and level.

FanDuel is an equal opportunities employer and we believe, as one of our principles states, “We are One Team!”. As such, we are committed to equal employment opportunity regardless of race, color, ethnicity, ancestry, religion, creed, sex, national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, gender expression, veteran status, or any other characteristic protected by state, local or federal law. We believe FanDuel is strongest and best able to compete if all employees feel valued, respected, and included.

The applicable salary range for this position is $134,000 - $176,400 USD, which is dependent on a variety of factors including relevant experience, location, business needs and market demand. This role may offer the following benefits: medical, vision, and dental insurance; life insurance; disability insurance; a 401(k) matching program; among other employee benefits. This role may also be eligible for short-term or long-term incentive compensation, including, but not limited to, cash bonuses and stock program participation. This role includes paid personal time off and 14 paid company holidays. FanDuel offers paid sick time in accordance with all applicable state and federal laws.

FanDuel is committed to providing reasonable accommodations for qualified individuals with disabilities. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please email Benefits@fanduel.com.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

#LI-Hybrid

THE POSITION
Our roster has an opening with your name on it

As a Product Security Engineer, you will play a critical role in securing AI-enabled software. You will partner directly with engineering teams to identify and remediate security risks in modern web, mobile, cloud, and AI-driven systems. In parallel, you will help design and build intelligent automation that reduces repetitive manual review work and improves developer velocity. This role equally balances hands-on product security engineering with building scalable security automation. This is an opportunity to both secure next-generation AI capabilities and shape how Product Security evolves to meet growing demand.

In addition to the specific responsibilities outlined above, employees may be required to perform other such duties as assigned by the Company. This ensures operational flexibility and allows the Company to meet evolving business needs.

THE GAME PLAN
Everyone on our team has a part to play

• Be part of a bleeding-edge security engineering organization enabling secure, reliable, AI-enabled applications and products.
• Embed security within product development teams to define and implement secure design patterns for distributed and AI-integrated systems.
• Conduct thorough security assessments including penetration testing, code reviews, threat modeling, and architecture reviews.
• Deliver AI/LLM-focused threat modeling and evaluate risks in model integrations, data flows, and external AI services.
• Identify recurring security review patterns and design automation to streamline lower-risk use cases.
• Design and build internal tooling and workflows that accelerate security reviews.
• Develop structured, scalable review processes that maintain rigor while improving speed.
• Partner with technology leaders to establish metrics, demonstrating both security posture and review efficiency.
• Collaborate with development and operations teams to evolve modern product security standards and guardrails.
• Ensure processes associated with key systems are documented, maintained, and continuously improved.
• Other duties as required.
  
  
  

THE STATS
What we're looking for in our next teammate

• Experience in product security engineering, with a focus on web applications
• Deep understanding of secure coding practices, security architecture, and secure development methodologies.
• Proficiency in conducting security assessments including penetration testing, vulnerability scanning, code reviews, and threat modeling.
• Strong experience securing modern API-driven and cloud-native architectures.
• Strong software engineering skills (Python or similar) with experience building tooling or automation.
• Experience reviewing or securing AI/LLM-integrated systems.
• Experience designing or building automation that improves security workflows or reduces manual effort.
• Strong knowledge of industry-standard security frameworks such as ISO 27001, NIST, and OWASP.
• Ability to communicate and influence in a highly distributed environment.
• Strong verbal and written communication skills.
  
  
  

ABOUT FANDUEL

FanDuel Group is the premier mobile gaming company in the United States and Canada. FanDuel Group consists of a portfolio of leading brands across mobile wagering including: America’s #1 Sportsbook, FanDuel Sportsbook; its leading iGaming platform, FanDuel Casino; the industry’s unquestioned leader in horse racing and advance-deposit wagering, FanDuel Racing; and its daily fantasy sports product.  

In addition, FanDuel Group operates FanDuel TV, its broadly distributed linear cable television network and FanDuel TV+, its leading direct-to-consumer OTT platform. FanDuel Group has a presence across all 50 states, Canada, and Puerto Rico.

The company is based in New York with US offices in Los Angeles, Atlanta, and Jersey City, as well as global offices in Canada and Scotland. The company’s affiliates have offices worldwide, including in Ireland, Portugal, Romania, and Australia.

FanDuel Group is a subsidiary of Flutter Entertainment, the world's largest sports betting and gaming operator with a portfolio of globally recognized brands and traded on the New York Stock Exchange (NYSE: FLUT).

PLAYER BENEFITS
We treat our team right

We offer amazing benefits above and beyond the basics. We have an array of health plans to choose from (some as low as $0 per paycheck) that include programs for fertility and family planning, mental health support, and fitness benefits. We offer generous paid time off (PTO & sick leave), annual bonus and long-term incentive opportunities (based on performance), 401k with up to a 5% match, commuter benefits , pet insurance, and more - check out all our benefits here: FanDuel Total Rewards. *Benefits differ across location, role, and level.

FanDuel is an equal opportunities employer and we believe, as one of our principles states, “We are One Team!”. As such, we are committed to equal employment opportunity regardless of race, color, ethnicity, ancestry, religion, creed, sex, national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, gender expression, veteran status, or any other characteristic protected by state, local or federal law. We believe FanDuel is strongest and best able to compete if all employees feel valued, respected, and included.

The applicable salary range for this position is $134,000 - $176,400 USD, which is dependent on a variety of factors including relevant experience, location, business needs and market demand. This role may offer the following benefits: medical, vision, and dental insurance; life insurance; disability insurance; a 401(k) matching program; among other employee benefits. This role may also be eligible for short-term or long-term incentive compensation, including, but not limited to, cash bonuses and stock program participation. This role includes paid personal time off and 14 paid company holidays. FanDuel offers paid sick time in accordance with all applicable state and federal laws.

FanDuel is committed to providing reasonable accommodations for qualified individuals with disabilities. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please email Benefits@fanduel.com.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

#LI-Hybrid

The Impact You’ll Make

• Define and lead product security strategy across web, mobile, API, cloud, infrastructure, and container security — conducting threat modeling, risk assessments, and security reviews throughout the development lifecycle with a strong shift-left focus.
• Embed secure development practices by designing and implementing secure coding standards, encryption, and security testing methodologies in close collaboration with development and ML teams, ensuring products are secure, resilient, and trustworthy.
• Own Enterprise AI Security end-to-end — from securing LLM integrations, agentic pipelines, and ML model ingestion to defending against AI-specific threats (prompt injection, data poisoning, model extraction, RAG poisoning, ), building AI incident response playbooks, and red-teaming AI systems across Recursion's product surfaces.
• Secure the AI supply chain and MLOps infrastructure by vetting third-party foundation models, open-source weights, and AI APIs before production integration, and partnering with ML engineering to protect training pipelines, feature stores, and model serving endpoints.
• Champion compliance and AI governance by operationalizing frameworks such as OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act requirements — collaborating with legal, privacy, and responsible AI teams to support audits and evolving regulatory expectations.
• Scale security as a force multiplier by evaluating and deploying security tooling, detecting policy violations, driving security outcomes, and ensuring security initiatives never become a bottleneck to business objectives.
• Elevate the security culture across the organization by serving as a subject matter expert, mentoring engineering teams, and leading incident response efforts from investigation through mitigation and prevention.
• Maintain the security foundation through thorough documentation — including security requirements, guidelines, and incident response plans — and hands-on penetration testing and code reviews to simulate and get ahead of real-world threats.

The Team You'll Join

• You will join a growing Information Security team at Recursion, focused on enabling Recursion to decode biology by providing world class technology services that are designed and fit for purpose. You'll collaborate with your teammates and across departments to agree on what the most important challenges and capabilities are, then figure out how to get us there.

The Experience You'll Need

• Education & Tenure: Bachelor's or Master's degree in Computer Science, Information Security, or a related field, with 10+ years of experience in product security or application security and a proven track record securing complex products.
• Security Fundamentals: Deep understanding of security principles, threats, and countermeasures as they relate to product design and development, with familiarity across standards and frameworks including OWASP, NIST, ISO/IEC 27001, and CVSS-based vulnerability prioritization.
• Offensive Security & Penetration Testing: Hands-on proficiency with penetration testing frameworks and tools (Metasploit, Burp Suite, Nmap, Wireshark), web application attack techniques (SQL injection, XSS, CSRF, OWASP Top Ten), and the ability to simulate real-world attacks and assess their impact.
• Secure Development & Engineering: Expertise in one or more programming languages (e.g., Python, Java, C++) with strong command of secure coding practices, encryption standards, and integrating security tooling into CI/CD and development workflows.
• Enterprise AI Security: Demonstrated experience securing AI/ML systems and LLM-powered or agentic products in production — including familiarity with AI attack surfaces (prompt injection, data poisoning, model extraction, membership inference, RAG poisoning) and hands-on red-teaming of AI pipelines and agentic workflows.
• AI Frameworks & Supply Chain Risk: Working knowledge of AI security frameworks (OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, EU AI Act) and experience vetting third-party foundation models, open-source weights, and AI APIs as part of a structured supply chain security program.
• MLOps & Model Security: Familiarity with securing ML infrastructure — including training pipelines, experiment tracking, model registries, and inference endpoints — and designing least-privilege access controls for AI agents with external system or tool access.
• Leadership & Communication: Excellent communication and influencing skills, with the ability to drive security initiatives across engineering, legal, privacy, and executive stakeholders and mentor teams on security best practices.
• Certifications (Highly Desirable): CISSP, OSCP, or GWAPT for core security credentialing, plus AI-focused certifications such as GAISC, Offensive ML (OffSec), or cloud provider AI security tracks (AWS/GCP).

Working Location & Compensation:

Making SLC your home base is ideal, however, we will consider remote work for this position. We ask that remote employees commit to regular on-site visits for routine work and departmental events.

At Recursion, we believe that every employee should be compensated fairly. Based on the skill and level of experience required for this role, the estimated current annual base range for this role is $186,900 to $220,400 (USD). You will also be eligible for an annual bonus and equity compensation, as well as a comprehensive benefits package. 

#LI-BO1

#LI-REMOTE

Sage is on a mission to improve care and quality of life for older adults, starting with those residing in senior living facilities. Falls are the leading cause of injury-related death among adults over 65. And yet, fall prevention and emergency response systems for older adults are archaic and ineffective. At Sage we've built a more modern way of understanding when older adults need help, including methods for residents to alert caregivers when in need of help, and corresponding software for caregivers to triage response. Our company mission is to create a product that our client counterparts love, and this role is a key part of that objective.

Sage is a small, tight team of ambitious, multi-disciplinary entrepreneurs. We are a software-enabled, mission-driven company, and are focused only on the problems that are central to achieving that mission. At Sage, we work hard and fast but also know that to build a truly important company, we need to treat our work as a marathon, and not a sprint. The journey matters.

About this Role

We are looking for a Senior/Staff Security Engineer to own and advance the security posture of our platform as we scale. You will be the dedicated security practitioner on the engineering team, responsible for hardening our cloud and edge infrastructure, driving compliance programs, building vulnerability management and incident response capabilities, and embedding security into the software development lifecycle.

This is a hands-on individual contributor role reporting to the Engineering Manager of Cloud and Security. You will work across AWS and GCP environments, partner closely with product engineering and platform teams, and have direct impact on Sage's ability to earn and maintain customer trust. Success in this role requires deep technical security skills, comfort operating across a broad surface area, and a bias toward practical, risk-proportionate solutions over checkbox compliance.

Responsibilities

• Harden and continuously improve the security of Sage's cloud infrastructure across AWS and GCP, including IAM policies, VPC configurations, security groups, and network segmentation.
• Own vulnerability management end to end: implement scanning, triage findings, coordinate remediation with engineering teams, and track resolution. Drive penetration test findings to closure on defined timelines.
• Build and maintain incident response capabilities, including detection tooling, runbooks, and post-incident analysis.
• Drive Sage's SOC 2 and HIPAA compliance programs forward, producing evidence, closing control gaps, and coordinating with external auditors.
• Implement and operate supply chain security controls, including dependency scanning, credential leak monitoring, and secret rotation automation.
• Embed security into CI/CD pipelines and the software development lifecycle through automated checks, secure defaults, and developer education.
• Conduct security reviews of architecture decisions, new services, and third-party integrations. Own the vendor security assessment process for evaluating and tracking third-party risk.
• Establish and maintain key and credential rotation policies with clear ownership and audit trails.
• Implement automated compliance scanning across cloud accounts and projects with defined triage workflows.
• Validate that disaster recovery procedures maintain security controls through failover, including encryption, access control, and network segmentation.
• Partner with engineering, product, and executive stakeholders to communicate security risk clearly and advocate for proportionate investment.

Minimum Qualifications

• 6+ years of experience in security engineering, with demonstrated depth in cloud security (at least one of AWS or GCP required).
• Hands-on experience with IAM design, VPC architecture, security group management, and infrastructure hardening in production environments.
• Experience building or significantly improving vulnerability management programs, including tooling selection, integration, and triage workflows.
• Direct experience with SOC 2 and HIPAA compliance, including evidence collection, control implementation, and auditor interactions.
• Practical incident response experience: you have detected, investigated, and resolved real security incidents, not just written the plan.
• Experience securing containerized applications and CI/CD pipelines.
• Experience securing device or edge computing environments, including firmware updates, device authentication, and network security for IoT or embedded systems.
• Strong written and verbal communication skills. You can explain a risk finding to an engineer and a business stakeholder in the same day.
• Willing and excited to be in the office Tuesday through Thursday (NYC).

Preferred Qualifications

• Experience with Terraform or similar infrastructure-as-code tools for managing security controls declaratively.
• Familiarity with healthcare or other regulated industries where data protection has real consequences.
• Experience with supply chain security tooling (dependency scanning, SBOM generation, container image signing).
• Track record of building automated credential rotation and secret management pipelines.
• Experience operating security programs at a growth-stage startup where you had to prioritize ruthlessly and build from scratch.
• Relevant certifications (CISSP, AWS Security Specialty, GIAC) are a plus but not required if the experience is there.
• Comfortable reading and reviewing application code (Java preferred) to identify security issues such as overly broad token scoping, improper credential handling, and authentication/authorization flaws. Ability to contribute fixes directly is a plus.

Benefits and Pay

Our headquarters are located in New York City's Union Square. We believe in cross team collaboration. We think good ideas can come from anyone, and we've designed our processes to encourage participation from all. While we take our mission seriously, we don't take ourselves too seriously. We like to host offsites, outings, and team meals where we can connect as people, not just as colleagues. We offer office lunch and a fully stocked snack bar. While we are an in office culture, we allow up to 2 remote days per week.

Our benefits package for employees includes competitive base compensation along with stock options. The expected annual salary range for this role is $190,000-240,000 USD, depending upon the job level, which will depend on your level of expertise, your experience, and your qualifications. We also provide fully-paid health and dental insurance coverage for all of our employees, along with other health benefits including vision insurance, membership to premium primary and urgent care, and online medical health providers. We also have a take as you need time off policy, in addition to 7 paid holidays and a company wide winter break during the holidays.

EEO Statement

Sage is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.

This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship. Sage makes hiring decisions based solely on qualifications, merit, and business needs at the time.

We are looking for a Cybersecurity Engineer to join our Corporate IT Team in NYC!

ROLE AND RESPONSIBILITIES:

The Cybersecurity Engineer is a hands-on technical role responsible for implementing, maintaining, and optimizing security controls across our hybrid infrastructure environment serves as a subject matter expert in designing, implementing, and administering our comprehensive security technology stack. This role combines deep technical expertise in cybersecurity tools with hands-on system administration skills to support our self-hosted, on-premises security infrastructure. The ideal candidate combines infrastructure knowledge with a strong understanding of security operations, compliance requirements, technical implementation and testing and assessing risk.  They will be capable of supporting our security toolset including CyberArk, Splunk, OKTA, Tenable, SOAR platforms, and other security analytics solutions.

Responsibilities:

Vulnerability & Threat Management

• Conduct vulnerability assessments across containerized and traditional infrastructure
• Perform ethical hacking and penetration testing to identify security weaknesses on our applications periodically and at times of new releases.
  • Candidates should have a CEH and be familiar with Nmap, Wireshark, Metasploit, Hydra and Burp to name a few.
• Lead remediation efforts and track vulnerability lifecycle management
• Analyze security alerts and incidents, performing root cause analysis
• Contribute to threat hunting activities and security monitoring

Security Platform Architecture support and administration

• Administer and optimize enterprise security tools including SIEM, EDR, vulnerability scanners, and container security platforms
• Manage security aspects of VMware infrastructure, storage systems, and network segmentation
• Configure and maintain authentication systems (SAML, RADIUS) and identity management platforms such as OKTA.

Security Tools Administration & Management

CyberArk Privileged Access Management

• Administer CyberArk PAS (Privileged Access Security) including Vault, CPM, PSM, and PVWA components
• Configure privileged account onboarding, password management policies, and access workflows
• Implement CyberArk integrations with Active Directory, applications, and infrastructure systems
• Manage CyberArk clustering, disaster recovery, and high availability configurations
• Troubleshoot CyberArk performance issues and optimize system configurations

Splunk Enterprise & Security Operations

• Administer Splunk Enterprise infrastructure including indexers, search heads, and forwarders
• Configure and maintain Splunk Enterprise Security (ES) for security monitoring and incident detection
• Develop custom Splunk searches, dashboards, and alerts for security use cases
• Manage Splunk data models, knowledge objects, and correlation rules
• Optimize Splunk performance, storage management, and cluster operations

Vulnerability Management & Security Testing

• Administer Tenable Security Center and Nessus scanning infrastructure
• Configure vulnerability scanning policies, schedules, and remediation workflows
• Integrate vulnerability data with other security tools and ticketing systems
• Develop custom vulnerability reporting and metrics dashboards
• Coordinate vulnerability assessment activities and penetration testing support

Security Orchestration & Response (SOAR)

• Implement and maintain SOAR platforms for security automation
• Develop automated playbooks for incident response, threat hunting, and remediation activities
• Create custom integrations between the SOAR platform and existing security tools
• Design automated workflows for security alert triage and response coordination
• Maintain SOAR platform performance and troubleshoot automation issues

System Administration & Infrastructure

• Test disaster recovery, and business continuity procedures for security systems

Security Operations Support

• Provide Level 2/3 technical support for security incidents and tool-related issues
• Participate in incident response activities and forensic investigations
• Develop and maintain security procedures and troubleshooting guides
• Support 24/7 security operations center (SOC) activities and on-call rotation
• Collaborate with security analysts to optimize detection rules and reduce false positives

Compliance & Governance

• Support compliance initiatives including SOC 2, PCI DSS, NIST SP 800-53 and regulatory audits
• Maintain security tool documentation, configurations, and change management procedures
• Implement logging and audit trail requirements for compliance frameworks
• Develop security metrics and KPI reporting for management and auditors
• Ensure security tools meet data retention and privacy requirements

Cross-functional Collaboration

• • Partner with IT infrastructure teams on security tool deployment and maintenance
  • Collaborate with application development teams on security tool integrations
  • Work with network teams to implement security monitoring and traffic analysis
  • Support risk management activities with technical security assessments
  • Provide security expertise for project planning and technology implementations

Desired Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience
• Relevant certifications preferred: CCSP, CISSP, GCIH, GCFA, Security+, CySA+, GSEC, or equivalent
• Vendor-specific certifications: CyberArk Defender/Sentry, Splunk Certified Admin/Architect, Tenable Certified Security Practitioner

Technical Skills - Core Platform:

Security Tools Proficiency (3+ years each)

• CyberArk: Deep experience with PAS components, policy configuration, and enterprise deployment
• Splunk: Advanced administration of Splunk Enterprise and Enterprise Security, including clustering and performance optimization
• Tenable: Comprehensive vulnerability management experience with Security Center, Nessus, and enterprise scanning
• SOAR Platforms: Hands-on experience with security orchestration tools (Phantom, Demisto, IBM Resilient, or similar)

System Administration (5+ years combined)

• Advanced Linux administration (RHEL, CentOS, Ubuntu) including shell scripting and automation
• Windows Server administration including PowerShell scripting and Active Directory integration
• Network security concepts and implementation (firewalls, IDS/IPS, network segmentation)

Security Specializations

• Enterprise PKI and certificate management
• Log aggregation, analysis, and correlation techniques
• Incident response procedures and forensic analysis
• Threat intelligence integration and threat hunting methodologies
• Security automation and orchestration best practices

Professional Experience

• 4+ years of cybersecurity experience with focus on enterprise security tools
• 4+ years of hands-on system administration in enterprise environments
• Experience with self-hosted, on-premises security infrastructure
• Proven track record of security tool implementations and migrations
• Experience participating in and supporting compliance audits and regulatory requirements

Additional Skills

• Strong scripting abilities (Python, Bash, PowerShell) for automation and integration
• Experience with API integration and custom security tool development
• Knowledge of cloud security platforms (AWS Security Hub, Azure Security Center) preferred
• Understanding of DevSecOps practices and CI/CD pipeline security
• Excellent troubleshooting and analytical problem-solving skills
• Strong documentation and technical writing capabilities

Key Competencies

• Technical Leadership: Ability to serve as subject matter expert across various Security tool sets.
• Problem-Solving: Advanced analytical skills for complex security tool issues and integrations
• Communication: Ability to explain technical concepts to both technical and non-technical stakeholders
• Project Management: Experience leading security tool implementations and upgrades
• Continuous Learning: Commitment to staying current with emerging security technologies and threats

Preferred Qualifications

• Degree in Cybersecurity or related field
• Experience in regulated industries (government)
• Advanced certifications: CISSP, SABSA, TOGAF, or specialized vendor certifications
• Experience with additional security tools: QRadar, Rapid7, Carbon Black, CrowdStrike
• Background in security architecture and enterprise security frameworks

*The salary reflected is a good faith estimate of base pay for the primary location of the position. Our compensation reflects the cost of labor across several U.S. geographic markets, and we pay differently based on those defined markets. The U.S. pay for this position is up to $155,000 annually. Pay will vary by work location and may also depend on job -related knowledge, skills, experience and abilities of the successful candidate. Your recruiter can share more about the specific salary range for the job location during the hiring process.

Keywords: #NYC #NewYorkCity #Manhatten, #Cybersecurity, Cybersecurity, CISSP, #CISSP, SecurityTools ,#SecurityTools, SIEM, #SIEM, #InfrastructureEnvirnonments, #CyberArk, CyberArk, #Splunk, Splunk, OKTA, #OKTA, Tenable, #Tenable, #SOARPlatforms, SOARPlatforms, #Telecom, Telecom, #Troubleshoot, #Engineering

Opportunity

Brunswick Group is seeking a Director to join our Insight team, focused on evaluating the effectiveness of integrated communications campaigns and communications activity. Based in New York or Washington, D.C., this role will play a central part in how Brunswick defines, measures, and learns from communications activity performance, combining campaign data, primary research, and strategic judgment to inform client decision-making.

You will drive the design and delivery of evaluation frameworks and research that assess not only what happened, but why it mattered and what should change next. Working in close partnership with Brunswick’s Creative, Digital and wider Communications colleagues, you will help shape measurement approaches for paid and organic activity across both established and emerging channels, including podcasts, TikTok, LinkedIn, and creator-led platforms. The role also requires active and responsible use of AI tools and large language models (LLMs) to enhance analysis, synthesis, and insight generation.

About Brunswick Insight

At Brunswick Insight, we support all phases of client engagement, from proposal through final deliverable. We provide the research, data, and analysis that form the strategic foundation of Brunswick’s advice. Our work helps clients understand stakeholder response, reputational impact, and the effectiveness of their communications in complex environments.

As part of the Insight team, you will help strengthen and evolve Brunswick’s campaign and communications evaluation offer, ensuring our clients benefit from integrated, defensible, and decision-oriented measurement that informs creative strategy, media investment, and future communications choices.

About the Role

• Lead the evaluation of integrated communications campaigns, from defining objectives and success measures through post-campaign learning
• Establish measurement frameworks that align campaign activity with delivering companies’ strategic and reputational goals
• Work closely with Creative, Digital and wider Communications colleagues to align evaluation with campaign strategy, messaging, audience targeting, and paid media objectives
• Design and conduct primary research (quantitative or qualitative work) to assess awareness, understanding, credibility, and message impact
• Design and conduct media and social media analysis to assess engagement, message penetration and differentiation
• Integrate research findings across bespoke and wider data sources to provide a coherent view of campaign effectiveness
• Use AI tools and LLM-based techniques to analyze large-scale data, while applying appropriate governance and quality controls
• Apply test-and-learn and experimental approaches where appropriate, and advise on what can and cannot be credibly inferred from the data
• Present metrics and frameworks in a visual and easily consumable format
• Translate complex, mixed-method evidence into clear, actionable insight and strategic recommendations
• Develop benchmarks and context to help clients understand performance over time and across campaigns
• Support new business development by shaping proposals and articulating Brunswick’s approach to campaign evaluation
• Mentor and develop junior colleagues, providing coaching on research design, analytical rigor, and insight storytelling
• Collaborate with Insight colleagues globally to share methodologies, tools, and best practices

What We're Looking For

Knowledge, Skills, and Abilities

• An experienced campaign evaluation, measurement, or insight professional with a strong grounding in integrated communications
• Comfortable operating at the intersection of research, analytics, creative strategy, and digital activation
• Able to design and conduct evaluation approaches that combine primary research, campaign performance data, and qualitative insight
• Fluent in the modern media ecosystem, including traditional news, social platforms, paid digital channels, podcasts, TikTok, LinkedIn, and emerging creator-led formats
• Confident exercising judgment around measurement trade-offs, attribution limits, and data quality
• Able to present frameworks and metrics in a visually compelling way
• A clear and persuasive communicator, able to explain methodology, AI-assisted analysis, and implications to senior, non-technical audiences
• Experienced in agency or consultancy environments where speed, rigor, and practicality must be balanced
• Curious and forward-looking, with an interest in experimentation, test-and-learn approaches, and innovation in measurement
• Collaborative, perceptive, and comfortable managing relationships across disciplines, offices, and seniority levels
• Discreet and trusted, with strong judgment when handling confidential client matters

Ideal Candidate

• 8+ years of experience in campaign evaluation, communications measurement, insight, or opinion research, ideally within an agency or consultancy
• Demonstrated experience of conducting primary and secondary research, and integrating this with wider campaign performance data
• Strong understanding of earned, owned, paid, and shared media, including paid digital and emerging formats
• Experience working alongside creative, digital, or media teams to evaluate campaign effectiveness
• Familiarity with analytics and listening platforms such as Brandwatch, Meltwater, Talkwalker, Quid, Tubular, Podchaser or comparable tools
• Practical experience using AI tools and large language models in research or analysis workflows, with sound judgment around their limitations
• Strong analytical and strategic skills, with the ability to connect evidence to reputational, stakeholder, and business outcomes
• Excellent writing and presentation skills, with a track record of synthesizing complex information into clear narratives
• Client management experience, including contributing to proposals, pitches, and evaluation-led recommendations
• Advanced project management skills, with experience leading complex, time-sensitive workstreams
• Advanced proficiency in PowerPoint; familiarity with additional analytical tools or languages (e.g., Python, R, Tableau) is an advantage

Why Join Us

Whether you are joining a client facing team, a core services team, or starting out on your professional career journey, joining Brunswick unlocks a range of exceptional employee benefits to support your financial future, health and wellness, family and community and continuous professional development.

The successful applicant will be eligible for the following compensation and benefits package: 

Base Pay: The annual base compensation range for this role is $190,000 - $240,000. The base pay offered will be determined by factors including experience, skills, training, office location, certifications, and education.

Bonus Eligibility: Annual discretionary bonus contingent upon individual and firm-wide performance.

Benefits: Medical, Dental, and Vision insurance. Disability insurance. Employee assistance program. Flexible spending account. Health savings account. Life insurance. Commuter Benefits. Generous Paid Time Off: 25 vacation days and 10 days sick leave, as well as 11 paid company holidays. Firm-sponsored 401(k) Plan with 3% automatic company contribution of base and bonus with an additional 1.5% profit share– immediate vesting. Career training and development opportunities. Employee discounts.

Office Policy: At Brunswick, our work is a craft that thrives in teaching environments – whether in our offices or on-site with clients – through real-time observation, collaboration, human connection, clear guidance and by challenging one another to keep getting better. Our policy is that our team members are in person – either in the office or on-site with clients – at least four days each week.

The firm will provide reasonable accommodation to qualified applicants or employees, as defined by applicable law. In addition to the application, the process may include virtual and in-person interviews, as well as an assessment, which may be timed. To request an accommodation during our application and hiring process, email americasaccommodations@brunswickgroup.com.