{"id":709138,"url":"https://alion.io/job/fictiv-lead-security-engineer","title":"Lead Security Engineer","company":{"id":1859,"name":"Fictiv","domain":"fictiv.com","url":"https://alion.io/company/fictiv","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":72,"open_postings":18,"ghost_share":0.056,"stale_share":0.944,"repost_share":0.056,"time_to_fill_p50_days":49,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Oakland, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":180240,"max":216120,"currency":"USD","period":"year","gross":null,"usd_annual":216120},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Claude","optional":false},{"name":"CMMC","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"NIST 800-171","optional":false},{"name":"NIST 800-53","optional":false},{"name":"Okta","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-09-11T03:39:35Z","employer_posted_date":"2026-09-16","last_verified_at":"2026-10-29T17:10:49Z","board_verified":true,"closed_at":null,"days_open":48,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":48},"description":"About MISUMI Americas\nMISUMI Americas, a division of MISUMI Group, is a leading provider of standard, configurable, and custom manufacturing solutions. By integrating a vast catalog of components with a world-class digital manufacturing platform, MISUMI Americas empowers engineers and procurement teams to accelerate innovation across the entire product lifecycle. With operations in the San Francisco Bay Area and Chicago, the company serves as a vital partner for the most innovative companies in the Americas.\nLead Security Engineer\nLocation: Oakland, CA; Salary Range: $180,240 - $216,120; Citizenship Requirement: Must be a U.S. Citizen or Green Card holder\nThis is a hands-on security engineering job that covers the full range of a lead security engineer role across all of MISUMI Americas. You'll be the person who does a lot of the security day-to-day work: securing our infrastructure, running access audits, setting up controls, reviewing our systems and code, and helping investigate incidents. You'll also have a real say in the policies and priorities that shape how we handle security across the company.\nA good portion of your time will go to keeping our infrastructure secure. That spans both physical networking and cloud, and it means staying on top of IAM, security groups, permission policies, and application permissions so access to our systems is tight and scoped the way it should be.\nThreat detection and incident response at MISUMI Americas is handled by a group across multiple departments, and you'll be part of it. When something comes up, you'll help investigate, both hands-on and by helping coordinate the response. You will also be the escalation point for routine security issues that end up being more than expected or the existing teams can handle on their own.\nAs Lead Security Engineer, you'll make security decisions and help us figure out which security projects matter most across MISUMI Americas' global operations. You'll be doing the audits, checks, and reviews, and you'll help shape our security policies and standards alongside security leadership.\nA big and growing part of the job is how we handle AI. You'll manage the way our AI tools are set up and help determine what's safe to turn on and what needs to be disabled. You'll also work closely with Information Security to contribute and maintain evidence for J-SOX, NIST 800-171, CMMC 2, and SOC 2 across a global business.\nAreas of Responsibility\nSecurity Decisions & Prioritization\nBe the hands-on security lead across IT and engineering, making everyday security calls and acting as the main point of execution for security work\nLook at security risk across the environment and help decide which security projects and initiatives to tackle first across MISUMI Americas' global operations\nHelp write, shape, and enforce our security policies, standards, and governance alongside security leadership\nIncident Response & Escalation\nServe as part of our threat detection and incident response group, a cross-departmental team, helping investigate incidents both hands-on and by coordinating the response\nAct as the escalation point for the IT team, giving them direction, mitigations, or solutions when an issue is beyond the routine security task\nDig into root cause on the tougher problems and help put fixes in place so the same thing doesn't keep coming back\nInfrastructure Security\nKeep our infrastructure secure across both physical networking and cloud, from firewalls, segmentation, and wireless to the way our cloud accounts and workloads are set up and protected\nDesign and manage IAM at the infrastructure level, including roles, security groups, and permission policies, all scoped to least privilege\nReview and tighten application permissions and access policies as the environment grows, and catch misconfigurations and permission drift before they turn into problems\nIdentity, Access & User Audits\nRun user access audits and regular access reviews across our identity and application layers\nDecide what user groups and roles we need to manage access to systems\nHandle access as people join, move, and leave, and keep permissions in line with policy\nAI Security\nManage our enterprise AI tools such as Claude, keeping configurations, roles, and access up to date\nLook at new AI capabilities one at a time (Claude for Chrome, for example) and make the call on whether to turn them on and what guardrails they need\nVet new AI integrations before they go live, including running automated scans and reviewing them by hand before any new local MCP server gets approved\nTurn those AI security decisions into policies and practices we can reuse\nApplication & Engineering Security\nReview systems for security problems, including running automated scans\nCheck third-party and open-source components before we adopt them\nWork with engineering to keep security built into how we ship software and infrastructure\nCompliance & Audit Support\nPull together and maintain the evidence behind our security audits for J-SOX, NIST 800, CMMC 2.0, and SOC 2\nRun recurring compliance checks and validate controls across MISUMI Americas' global footprint\nMatch our controls and evidence to what each audit asks for and support the audit from start to finish, focusing on evidence and remediation rather than running the audit yourself\nPolicy, Process & Automation\nTake the security work you do by hand and turn it into documented practices, runbooks, and repeatable processes so it doesn't all live with one person\nAutomate access reviews, monitoring, alerting, and reporting to cut down on manual effort\nKeep our security documentation and internal knowledge base current\nPhysical Demands\nSitting for extended periods of time working with computers, etc.\nTravel Expectations\nTravel 0-10%\nDesired Traits, Qualifications, Education and Experience\nSenior-level, proven expertise across the security domains this role touches: identity and access management, infrastructure and cloud security, governance and compliance, incident response and investigation, application and integration security, and AI/LLM security\nHands-on incident investigation experience, and the judgment to act as an escalation point on user-facing threats like phishing and spam\nStrong, hands-on experience securing infrastructure across networking and cloud, including firewalls and segmentation on the network side and IAM, security groups, permission policies, and application permissions on the cloud side\nCloud security experience (AWS, Azure, or similar), and comfort designing roles and RBAC in platforms like Microsoft Entra ID, Okta, or AWS IAM\nFamiliarity with security monitoring and detection tools, enough to support investigations effectively\nReal experience running user access audits, access reviews, and compliance checks\nExperience supporting audit and compliance programs like SOC 2, NIST 800-53/800-171, CMMC 2.0, and J-SOX, including gathering evidence and validating controls\nSolid application security skills: automation tooling, reading code for security issues, and secure integration practices\nThe confidence to make security decisions on your own and help sort out competing priorities\nA working understanding of AI and LLM security, including administering AI tools, weighing new capabilities for risk, and knowing how integrations like MCP servers fit in\nA habit of turning manual security work into repeatable processes and automation\nClear communication and the ability to work across a spread-out, multi-site, global organization\nBonus\nCertifications like CISSP, CISM, Security+, or GIAC (GSEC, GCIH, and the like)\nFirsthand experience preparing for and going through a CMMC 2.0 assessment\nExperience with audit and controls at a global, Japanese-owned company (J-SOX exposure)\nScripting and automation skills, for example, Bash, Python or PowerShell\nWe’re actively seeking teammates who:\nBring diverse perspectives and experience to our culture and company. \nExcel at being part of a strong, empathetic team.\nThrive in an environment emphasizing respect, honesty, collaboration, and growth.\nHave an ‘always learning’ mindset that celebrates learning, not just wins. \nHelp us continue to build a world-class organization that values the contributions of all of our teammates\nWe encourage applications from members of underrepresented groups, including but not limited to women, members of the LGBTQ community, people of color, people with disabilities, and veterans.","description_format":"text","description_chars":8462,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Contract Manufacturing","Manufacturing & Industrial Software"],"lifecycle":[{"event":"open","at":"2026-09-11T04:20:11Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 3","filings_12m":3,"filings_prev_12m":5,"green_card_filings_12m":0,"median_offered_wage_usd":162500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":41,"band":"fade","label":"Fading","p_open":1,"p_active":0.553,"p_room":0.75,"age_days":48,"expected_fill_days":49,"reasons":["conf:2","stale_co","velocity","win:late"],"computed_at":"2026-10-29T05:49:05Z"},"pay":{"stated_usd_annual":216120,"is_top_pay":true},"html_url":"https://alion.io/job/fictiv-lead-security-engineer","json_url":"https://alion.io/job/fictiv-lead-security-engineer.json","meta":{"generated_at":"2026-10-29T19:48:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29370,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1859},"rest":"https://alion.io/mcp/rest/get_company?id=1859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffictiv-lead-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffictiv-lead-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffictiv-lead-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fictiv-lead-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffictiv-lead-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":709138}},{"tool":"search_jobs","arguments":{"company":"fictiv.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":709138},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}