Skip to content
All teams

Team

Security

42 roles included, with the handoffs between them already defined.

Roles included

Engineering & Technology

Audited

IAM Specialist

IC / Practitioner

The IAM Specialist controls who can access what, and makes sure access is granted correctly, reviewed regularly, and removed promptly.

Identity & Access (SSO/IAM)HRIS & Payroll

$24.99 once

View

Security, Privacy & GRC

Audited

Risk Manager

Manager

The Risk Manager runs an organization's security and technology risk-management program: the risk register, the assessment cadence, the scoring methodology, the treatment and acceptance workflow, and the reporting that turns technical findings into business decisions.

GRC & ComplianceAnalytics & BIThreat Detection (SIEM/EDR/SOAR)

$74.99 once

View

Security, Privacy & GRC

Audited

GRC Manager

Manager Level

The GRC Manager runs the enterprise governance, risk, and compliance program as a working operation: they lead the GRC team, own the risk register and the audit-and-exam calendar, own the policy lifecycle, and answer to leadership for the program's outcomes across the whole organization - not only the security function.

GRC & ComplianceControl-library crosswalkProject & Work Management

$74.99 once

View

Security, Privacy & GRC

Audited

Security Director

Director Level

The Security Director owns a portfolio of security programs and the teams that deliver them - typically a related slice of the security function (for example, security engineering + detection + IAM, or GRC + vendor risk + privacy operations).

Roadmapping & PortfolioProject & Work ManagementFP&A & Planning

$124.99 once

View

Security, Privacy & GRC

Audited

Security Manager

Manager Level

The Security Manager is the first management tier of a security organization: the front-line people manager who runs a single security team day to day.

Project & Work ManagementObservability & MonitoringTeam's core security tooling

$74.99 once

View

Security, Privacy & GRC

Audited

Senior Security Ops Engineer

Senior / Lead / Staff

The Senior Security Operations Engineer builds and runs the security-operations engineering backbone - the SIEM and telemetry pipelines, the SOAR and automation framework, the detection-as-code infrastructure, and the tool integrations that the whole security-operations function runs on.

Observability & MonitoringThreat Detection (SIEM/EDR/SOAR)Version Control & Code Review

$49.99 once

View

Security, Privacy & GRC

Audited

Vendor Risk Analyst

IC / Practitioner

The Vendor Risk Analyst is the execution engine of a third-party risk management (TPRM) program - the individual contributor who runs assessments at volume: sends the questionnaire, reads the responses, evaluates the evidence, scores and tiers the vendor against the program's rubric, logs the findings, and tracks remediation to closure.

GRC & ComplianceSecurity ratings (input)ITSM / Service Desk

$24.99 once

View

Security, Privacy & GRC

Audited

Vendor Risk Manager

Manager Level

The Vendor Risk Manager owns and runs the third-party / vendor-risk-management (TPRM) program and leads the team that executes it.

GRC & ComplianceObservability & MonitoringContract Lifecycle (CLM)

$74.99 once

View

Security, Privacy & GRC

Audited

Application Security Engineer

IC / Practitioner

The Application Security Engineer secures the software as it is built: they make sure vulnerabilities are found and fixed in the code before it ships, not discovered by an attacker after.

Vulnerability & Cloud PostureQA & TestingCI/CD

$24.99 once

View

Security, Privacy & GRC

Audited

Blue Team Engineer

IC / Practitioner

The Blue Team Engineer is the proactive-defense practitioner who makes an organization measurably harder to attack - hunting for the intrusion the alerts didn't catch, hardening the environment so whole classes of technique stop working, building behavioral detections, and partnering with the offensive side to close the gaps they prove.

Observability & MonitoringThreat Detection (SIEM/EDR/SOAR)Identity & Access (SSO/IAM)

$24.99 once

View

Security, Privacy & GRC

Audited

GRC Analyst

IC / Practitioner

The GRC Analyst is the hands-on individual contributor who keeps the control environment honest.

GRC & ComplianceITSM / Service DeskDocs & Knowledge

$24.99 once

View

Security, Privacy & GRC

Audited

Head of Information Security

Director Level

The Head of Information Security owns the whole security program and is the most senior security voice in the organization - often the de facto CISO before that title formally exists.

Endpoint & Device (MDM/UEM)Vulnerability & Cloud PostureIdentity & Access (SSO/IAM)

$124.99 once

View

Security, Privacy & GRC

Audited

Incident Response Lead

Senior / Lead / Staff

The Incident Response Lead takes command when a security incident is declared and drives it to resolution.

Endpoint & Device (MDM/UEM)Observability & MonitoringForensics / DFIR

$49.99 once

View

Security, Privacy & GRC

Audited

Product Security Engineer

IC / Practitioner

The Product Security Engineer secures the product customers actually use - the running application, its APIs, its authentication and authorization, its data handling, and the security features enterprise buyers require to sign.

Bug bounty platformQA & TestingAPI & Integration (iPaaS)

$24.99 once

View

Security, Privacy & GRC

Audited

Red Team Engineer

IC / Practitioner

The Red Team Engineer is the offensive-security practitioner who safely emulates real adversaries to prove where an organization is actually exploitable - under strict, signed authorization.

Recon / OSINTExploitation frameworkC2 / adversary emulation

$24.99 once

View

Security, Privacy & GRC

Audited

Security Analyst

IC / Practitioner

The Security Analyst is the broad analytical layer of a security team - the generalist who assesses vulnerabilities, reviews architectures, analyzes threats, reports on posture, and advises project teams.

Vulnerability & Cloud PostureExploit / threat signalArchitecture & Diagramming

$24.99 once

View

Security, Privacy & GRC

Audited

Security Architect

IC / Practitioner

The Security Architect designs the security architecture for the organization - the blueprints, standards, patterns, and technology decisions that determine how security is implemented across every system.

Architecture & DiagrammingCloud Infrastructure & IaCVulnerability & Cloud Posture

$24.99 once

View

Security, Privacy & GRC

Audited

Security Engineer

IC / Practitioner

The Security Engineer builds, deploys, hardens, and automates the security infrastructure that protects the organization.

Endpoint & Device (MDM/UEM)Observability & MonitoringVulnerability & Cloud Posture

$24.99 once

View

Security, Privacy & GRC

Audited

Security GRC Analyst

IC / Practitioner

The Security GRC Analyst is the audit-readiness workhorse of the security program.

GRC & ComplianceSurvey & FormsITSM / Service Desk

$24.99 once

View

Security, Privacy & GRC

Audited

Senior Application Security Engineer

Senior / Lead / Staff

The Senior Application Security Engineer owns application security for a domain or product area, not a queue of assigned tasks.

Vulnerability & Cloud PostureQA & TestingCI/CD

$49.99 once

View

Security, Privacy & GRC

Audited

Senior Product Security Engineer

Senior / Lead / Staff

The Senior Product Security Engineer owns product security for a whole product line or hardware/embedded platform - not a single feature or app, but the security posture of everything customers run under that product, and the standard everyone building it works to.

Bug bounty / disclosure platformQA & TestingAPI & Integration (iPaaS)

$49.99 once

View

Security, Privacy & GRC

Audited

Cyber GRC Analyst

IC / Practitioner

The Cyber GRC Analyst applies governance, risk, and compliance specifically to cyber risk.

GRC & ComplianceControl-framework / crosswalk sourceCyber-risk / threat signal

$24.99 once

View

Security, Privacy & GRC

Audited

Detection & Response Engineer

IC / Practitioner

The Detection & Response Engineer builds and maintains the systems that identify threats across the environment and the automated response that contains them faster than a human can.

Observability & MonitoringThreat Detection (SIEM/EDR/SOAR)Detection-as-code

$24.99 once

View

Security, Privacy & GRC

Audited

Governance, Risk, and Compliance Lead

Lead

The GRC Lead owns the enterprise-wide governance, risk, and compliance function - not just security compliance, but the integrated program spanning cybersecurity, privacy, regulatory, financial, and operational risk.

GRC & ComplianceAnalytics & BI

$49.99 once

View

Security, Privacy & GRC

Audited

GRC Engineer

IC / Practitioner

A GRC Engineer is the hands-on technical builder behind a governance, risk, and compliance program.

GRC & ComplianceCloud provider APIsIdentity & Access (SSO/IAM)

$24.99 once

View

Security, Privacy & GRC

Audited

Information Security Engineer - Generalist

IC / Practitioner

The Information Security Engineer - Generalist is the security team-of-one (or few) - the full-stack IC who covers the entire security surface because there is no one else to.

Vulnerability & Cloud PostureEndpoint & Device (MDM/UEM)Observability & Monitoring

$24.99 once

View

Security, Privacy & GRC

Audited

Infrastructure Security Engineer

IC / Practitioner

The Infrastructure Security Engineer secures the foundational layers - network, compute, storage, and cloud infrastructure - that every application and service runs on.

Vulnerability & Cloud PostureCloud Infrastructure & IaCNetwork / firewall

$24.99 once

View

Security, Privacy & GRC

Audited

Infrastructure Security Engineer, Datacenter

IC / Practitioner

The Infrastructure Security Engineer, Datacenter secures the physical compute fabric - bare-metal servers, hypervisors, the storage and datacenter network layer, and everything beneath the operating system: firmware, BIOS/UEFI, baseboard management controllers (BMC/IPMI), and the hardware root-of-trust.

IT Ops (RMM/Asset/Backup)Hypervisor / virtualizationOut-of-band management (BMC)

$24.99 once

View

Security, Privacy & GRC

Audited

IT Security Engineering Intern

Intern

The IT Security Engineering Intern is an early-career, supervised member of the IT team learning to secure the corporate IT environment - the laptops and phones employees carry, the identity/login layer, email, and the applications and network the workforce uses every day.

Endpoint & Device (MDM/UEM)Identity & Access (SSO/IAM)Email security

$14.99 once

View

Security, Privacy & GRC

Audited

Lead Cyber Security Specialist

Lead

The Lead Cyber Security Specialist is the senior technical authority over a hands-on security-specialist workstream - the person who sets direction, defines the standards and playbooks others follow, owns the hardest problems personally, and coordinates a group of specialists through expertise rather than reporting lines.

Vulnerability & Cloud PostureIdentity & Access (SSO/IAM)Project & Work Management

$49.99 once

View

Security, Privacy & GRC

Audited

Physical Security Systems Engineer

IC / Practitioner

The Physical Security Systems Engineer deploys and runs the technical systems that protect people and facilities - access control and badging (the PACS/ACS), video surveillance (CCTV/VMS), intrusion and alarm systems, and visitor management - plus the growing convergence of physical and logical security, where badge credentials and networked devices share an identity lifecycle with IT.

Workplace & FacilitiesVideo / VMSAlarms / intrusion

$24.99 once

View

Security, Privacy & GRC

Audited

Privacy Engineer

IC / Practitioner

The Privacy Engineer builds privacy into how systems collect, use, share, and delete personal data - the person who turns a regulation into a control that runs in production.

GRC & ComplianceAnalytics & BIDSAR / rights automation

$24.99 once

View

Security, Privacy & GRC

Audited

Security Engineering Intern

Intern

The Security Engineering Intern is an early-career, supervised member of the security engineering team - learning to build and operate security controls by taking well-scoped pieces of real work: writing and tuning detections, automating repetitive security tasks, assisting with vulnerability and cloud-security basics, applying secure-config baselines, and documenting what they do.

Threat Detection (SIEM/EDR/SOAR)Scripting / automationVuln / cloud security

$14.99 once

View

Security, Privacy & GRC

Audited

Security GRC Manager

Manager

The Security GRC Manager runs the GRC function as a working operation: they lead the team that performs the assessments, own the audit and compliance program end to end, and answer to a security leader for the program's outcomes - clean audits, current certifications, a defensible risk register, and customer trust reviews that don't stall deals.

GRC & ComplianceFramework crosswalkProject & Work Management

$74.99 once

View

Security, Privacy & GRC

Audited

Security GRC Specialist

IC / Practitioner

The Security GRC Specialist is the hands-on individual contributor of a GRC function - the person who goes deep in one domain rather than covering the whole field broadly.

GRC & ComplianceSurvey & FormsDocs & Knowledge

$24.99 once

View

Security, Privacy & GRC

Audited

Security Specialist

IC / Practitioner

The Security Specialist is the broad, hands-on generalist of a security team - often the "security team of one" or a flexible contributor who covers a bit of everything rather than owning one deep lane.

Vulnerability & Cloud PostureIdentity & Access (SSO/IAM)ITSM / Service Desk

$24.99 once

View

Security, Privacy & GRC

Audited

Security Trainer

IC / Practitioner

The Security Trainer owns the human layer of security - turning employees from the most-targeted attack surface into an active line of defense.

Vulnerability & Cloud PostureLearning & Development (LMS)Content & Asset Management (CMS/DAM)

$24.99 once

View

Security, Privacy & GRC

Audited

Senior GRC Specialist

Senior

The Senior GRC Specialist is the senior individual contributor of a GRC function - the person handed the hardest, most ambiguous, cross-framework work when a base specialist's defined-domain execution isn't enough.

GRC & ComplianceSurvey & FormsDocs & Knowledge

$49.99 once

View

Security, Privacy & GRC

Audited

SOC Analyst

IC / Practitioner

The SOC Analyst is the front line of security operations - the first human to see an alert and decide, in real time, whether it is real, noise, or something no one has seen before.

Observability & MonitoringEndpoint & Device (MDM/UEM)Threat Detection (SIEM/EDR/SOAR)

$24.99 once

View

Security, Privacy & GRC

Audited

Vendor Risk Officer

IC / Practitioner

The Vendor Risk Officer owns the third-party risk management (TPRM) program - the systematic evaluation, monitoring, and governance of the security and compliance risk introduced by every vendor, SaaS tool, contractor, and partner that touches the organization's data or systems.

GRC & ComplianceObservability & MonitoringContract Lifecycle (CLM)

$24.99 once

View

Security, Privacy & GRC

Audited

Vulnerability Analyst

IC / Practitioner

The Vulnerability Analyst is the hands-on individual contributor who turns a firehose of scanner output into a defensible, prioritized remediation program.

Vulnerability & Cloud PostureExploit intelIT Ops (RMM/Asset/Backup)

$24.99 once

View

Security, Privacy & GRC

Audited

Watch Officer (Security Operations Center)

IC / Practitioner

The Watch Officer is the shift commander of the SOC watch floor - the single person who runs the watch during a shift.

Observability & MonitoringEndpoint & Device (MDM/UEM)ITSM / Service Desk

$24.99 once

View