{"id":4104942,"url":"https://alion.io/job/vizient-lead-security-engineer-hybrid","title":"Lead Security Engineer (Hybrid)","company":{"id":15164,"name":"Vizient","domain":"vizient.com","url":"https://alion.io/company/vizient","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":85,"open_postings":18,"ghost_share":0,"stale_share":0.556,"repost_share":0.056,"time_to_fill_p50_days":45,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Irving, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":102400,"max":179000,"currency":"USD","period":"year","gross":null,"usd_annual":179000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"RAG","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-11-11T22:25:04Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T22:25:04Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"When you’re the best, we’re the best. We instill an environment where employees feel engaged, satisfied and able to contribute their unique skills and talents while living and working as their authentic selves. We provide extensive opportunities for personal and professional development, building both employee competence and organizational capability to fuel exceptional performance through an inclusive environment both now and in the future.\nWe are seeking an experienced Lead Security Engineer to serve as a dedicated security engineering partner supporting the VIP program. This position will work closely with software engineering, product development, enterprise architecture, and infrastructure teams to ensure security is incorporated throughout the entire technology development lifecycle.\nThis role will require working in the Irving, TX office 3 days per week.\nAn in-person interview required.\nThe ideal candidate brings deep technical expertise across application security, cloud security, secure software development, and emerging artificial intelligence technologies. This individual will play a critical role in translating enterprise security requirements into practical technical solutions, identifying security risks early in the development process, and ensuring appropriate security controls are implemented and validated before production deployment.\nThe Lead Security Engineer will also serve as a technical subject matter expert for AI-enabled applications and architectures, including large language models (LLMs), AI agents, retrieval-augmented generation (RAG), and integrations with enterprise systems and data.\nThis is a highly collaborative, hands-on technical leadership position requiring the ability to work independently, influence technical decisions, and establish effective partnerships across Security, Engineering, and Enterprise Architecture.\nKey Responsibilities\nSecurity Engineering and Architecture\nServe as the primary technical security partner for the VIP program, providing security engineering expertise throughout discovery, design, development, testing, and deployment.\nCollaborate with software engineers, architects, and infrastructure teams to incorporate security requirements into applications, APIs, cloud services, and supporting infrastructure.\nConduct security architecture and design reviews to identify vulnerabilities, architectural weaknesses, and potential security risks.\nLead threat modeling activities to identify attack surfaces, trust boundaries, potential threats, and appropriate security controls.\nTranslate enterprise security policies, standards, and requirements into actionable technical implementation guidance.\nReview proposed architectures and technical solutions to ensure alignment with enterprise security requirements and secure-by-design principles.\nIdentify gaps in existing security standards and develop recommendations for new or updated technical security controls, guardrails, and reference architectures.\nArtificial Intelligence Security\nServe as a technical security subject matter expert for AI-enabled applications and solutions developed within the VIP program.\nEvaluate the security of AI architectures, including LLM integrations, autonomous AI agents, RAG implementations, and model-to-application integrations.\nIdentify and assess AI-specific security threats, including prompt injection, sensitive information disclosure, insecure tool integrations, excessive agency, and unauthorized data access.\nPartner with engineering teams to establish secure implementation patterns for AI applications, including identity, authentication, authorization, data protection, and monitoring.\nReview AI application designs to identify potential security weaknesses and recommend appropriate mitigating controls.\nEvaluate emerging AI security risks and recommend improvements to enterprise security standards and engineering practices.\nSupport the development of reusable security guardrails for AI applications and integrations.\nApplication Security and Secure Development\nIntegrate security considerations throughout the software development lifecycle (SDLC).\nProvide technical guidance on secure coding practices, dependency management, secrets management, API security, and application authentication and authorization.\nCollaborate with Application Security teams to review vulnerability findings and determine appropriate remediation approaches.\nSupport the evaluation and interpretation of static application security testing (SAST), dynamic application security testing (DAST), and software composition analysis (SCA) findings.\nReview application security risks associated with third-party libraries, open-source dependencies, and software supply chain components.\nProvide security guidance for CI/CD pipelines, infrastructure as code (IaC), and automated deployment processes.\nWork with development teams to ensure identified security vulnerabilities and control deficiencies are appropriately addressed before production deployment.\nCloud and Infrastructure Security\nEvaluate security controls across cloud-based architectures and supporting infrastructure.\nProvide technical guidance on cloud identity, access management, network segmentation, encryption, secrets management, and secure configuration.\nReview cloud application architectures for compliance with established enterprise security requirements.\nAssess security implications associated with infrastructure automation, containerized workloads, and cloud-native services.\nCollaborate with Cloud Operations and Infrastructure teams to validate the implementation of required security controls.\nIdentify opportunities to strengthen cloud security through reusable configurations, security patterns, and automated guardrails.\nSecurity Standards and Risk Management\nIdentify gaps in enterprise security standards and develop proposed technical requirements, implementation guidance, and security guardrails.\nCollaborate with Enterprise Security, Enterprise Architecture, and Engineering stakeholders to review and align proposed security standards.\nConduct technical security risk assessments for applications, architectures, and emerging technologies.\nDocument identified security risks, recommended remediation actions, and compensating controls.\nCoordinate with Governance, Risk, and Compliance (GRC) teams when formal risk acceptance or security exceptions are required.\nProvide technical recommendations to support informed security risk decisions.\nEnsure security decisions and implementation requirements are appropriately documented.\nSecurity Validation and Cross-Functional Collaboration\nValidate the implementation of security controls and agreed remediation actions throughout the development lifecycle.\nPartner with Application Security, Security Operations, Identity and Access Management, Cloud Security, and other specialized security teams.\nParticipate in technical discussions to resolve security concerns and provide practical, risk-informed recommendations.\nCoordinate security testing and validation activities with appropriate technical stakeholders.\nIdentify opportunities to improve security engineering processes, technical standards, and development practices.\nCommunicate complex technical security concepts clearly to engineering teams, architects, product owners, and leadership.\nRequired Qualifications\n8+ years of experience in information security engineering, application security, cloud security, or related technical security disciplines.\nDemonstrated experience working with software engineering and architecture teams to implement security requirements.\nStrong understanding of secure software development practices, application security vulnerabilities, and common attack techniques.\nExperience performing security architecture reviews, threat modeling, and technical security risk assessments.\nStrong knowledge of authentication, authorization, identity management, encryption, secrets management, and API security.\nExperience securing cloud-based applications and infrastructure.\nFamiliarity with CI/CD pipelines, DevSecOps practices, and infrastructure as code.\nUnderstanding of modern AI architectures and associated security risks, including LLMs, AI agents, RAG, and enterprise AI integrations.\nExperience interpreting security assessment results and providing actionable remediation guidance.\nAbility to develop technical security standards, reference architectures, and implementation guidance.\nStrong analytical, problem-solving, and technical communication skills.\nAbility to work independently and influence technical decisions across multiple teams.\nExperience with Security Architecture Reviews and Vulnerability Management\nPreferences\nPowerShell, Python, Okta, Entra ID, Splunk, SIEM\nAbility to review and read code\nEstimated Hiring Range:\nAt Vizient, we consider skills, experience, and organizational needs in our compensation approach. Geographic factors may adjust the range estimate and hires typically fall below the top range. Compensation decisions are tailored to individual circumstances. The current salary range for this role is $102,400.00 to $179,000.00.This position is also incentive eligible.\nVizient has a comprehensive benefits plan! Please view our benefits here:\nhttp://www.vizientinc.com/about-us/careers\nEqual Opportunity Employer: Females/Minorities/Veterans/Individualswith Disabilities\nThe Company is committed to equal employment opportunity to all employees and applicants without regard to race, religion, color, gender identity, ethnicity, age, national origin, sexual orientation, disability status, veteran status or any other category protected by applicable law.","description_format":"text","description_chars":9697,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Medical Equipment Distribution","Health Data & Interoperability","Healthcare & Life Sciences Consulting"],"lifecycle":[{"event":"open","at":"2026-11-11T22:25:04Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 27 · green card filings: 5","filings_12m":27,"filings_prev_12m":39,"green_card_filings_12m":5,"median_offered_wage_usd":141719,"route":null,"cap_exempt":false,"checked_at":"2026-11-11T07:38:50+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":45,"reasons":["conf:2","win:early","comp:brand"],"computed_at":"2026-11-12T00:39:16Z"},"pay":{"stated_usd_annual":179000,"is_top_pay":false},"html_url":"https://alion.io/job/vizient-lead-security-engineer-hybrid","json_url":"https://alion.io/job/vizient-lead-security-engineer-hybrid.json","meta":{"generated_at":"2026-11-12T00:39:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1514,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":15164},"rest":"https://alion.io/mcp/rest/get_company?id=15164"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvizient-lead-security-engineer-hybrid"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvizient-lead-security-engineer-hybrid"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvizient-lead-security-engineer-hybrid"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/vizient-lead-security-engineer-hybrid\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvizient-lead-security-engineer-hybrid"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4104942}},{"tool":"search_jobs","arguments":{"company":"vizient.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4104942},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}