Mid Level Information Security Advisor Jobs
Mid level information security advisor jobs go to professionals ready to own security initiatives end to end, guide junior analysts, and make risk-based decisions with limited oversight. 35% of openings are remote or hybrid, concentrated across Healthcare & Medical Services, Education, and Technology & Software, with employers like Indiana University Health, Rexel, and Walmart hiring at this level now.
Find JobsOverview
Showing 5 of 84+ Mid Level Information Security Advisor jobs
Job Description:
Roles and Responsibilities
- Design, build, and maintain AI-enabled security solutions that automate vulnerability triage, enrichment, prioritization, and ticket routing.
- Use AI-assisted development (“vibe coding”) and modern engineering practices to rapidly prototype security tools, then harden them for production use.
- Build automation workflows and integrations across scanners, cloud control planes, CI/CD pipelines, ticketing systems such as Azure DevOps, and SIEM and SOAR platforms.
- Develop cloud security posture management capabilities, including automated misconfiguration detection, policy-as-code, drift remediation, and guardrails for multi-cloud environments.
- Embed security into DevSecOps pipelines through automated SAST, DAST, SCA, secrets detection, container and infrastructure-as-code scanning, and AI-assisted code review and fix suggestions.
- Engineer AI solutions for risk management, such as evidence collection, control testing, risk register enrichment, and automated assessment support.
- Build security dashboards and metrics pipelines that give leadership and practitioners accurate, timely views of posture, backlog, remediation performance, and risk trends.
- Design human-in-the-loop controls, approval gates, and audit logging for automated and AI-driven actions, so that automation is safe, governed, and explainable.
- Evaluate and validate AI models, agents, and tools for accuracy, false-positive rates, cost, and security, and document their limitations.
- Apply secure coding and engineering practices to security tooling itself, including secrets management, least-privilege access, dependency hygiene, and testing.
- Produce clear technical documentation, runbooks, and knowledge articles so that solutions can be operated and handed off reliably.
- Partner with the security operations, governance, and IT teams to identify manual processes that are good candidates for automation and deliver them iteratively.
Skills and Attributes for Success
- Strong programming skills in Python and PowerShell, with working knowledge of JavaScript or TypeScript and familiarity with infrastructure-as-code tools such as Terraform or Bicep.
- Practical experience using AI-assisted coding tools and LLM APIs, with an understanding of prompt design, evaluation, and the limits of model output.
- Experience building API integrations and event-driven automation, including REST APIs, webhooks, and message queues.
- Working knowledge of cloud security posture management and cloud platforms, particularly Azure and Microsoft 365, with exposure to AWS or GCP.
- Familiarity with DevSecOps tooling and CI/CD platforms such as Azure DevOps, GitHub Actions, or GitLab.
- Understanding of vulnerability management, threat intelligence, and risk frameworks such as NIST CSF, NIST AI RMF, and CIS Benchmarks.
- Ability to design dashboards and metrics using tools such as Power BI, Kusto (KQL), or similar platforms.
- Strong problem-solving skills, a bias toward action, and comfort turning ambiguous security problems into working solutions.
- Clear communication skills, with the ability to explain technical designs to both engineers and non-technical stakeholders.
Requirements
- Bachelor’s degree in computer science, Information Systems, Engineering, or a similar discipline, or equivalent experience.
- Minimum of 3 years of experience in security engineering, security automation, DevSecOps, or software engineering with a security focus.
- Demonstrated experience building automation or tooling that is in production use, ideally in a security context.
- Hands-on experience with at least one of: vulnerability management platforms, cloud security posture management tools, SAST/DAST/SCA tooling, or SIEM/SOAR platforms.
- Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Defender for Endpoint, or equivalent platforms.
- Familiarity with Azure DevOps and Git-based version control workflows.
- Experience with AI or LLM application development, including retrieval-augmented generation, agent frameworks, or evaluation of model outputs, is strongly preferred.
Compensation
- A reasonable estimate of the current compensation range for this position is $132,400 - $245,800.
Full-time hires are eligible to participate in the DXC benefit program. DXC offers a comprehensive, flexible, and competitive benefits program which includes, but is not limited to, health, dental, and vision insurance coverage; employee wellness; life and disability insurance; a retirement savings plan, paid holidays, paid time off.
At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.
If you are an applicant from the United States, Guam, or Puerto Rico
DXC Technology Company (DXC) is an Equal Opportunity employer. All qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, pregnancy, veteran status, genetic information, citizenship status, or any other basis prohibited by law.
We participate in E-Verify. In addition to the posters already identified, DXC provides access to prospective employees for the Federal Minimum Wage Poster, Federal Polygraph Protection Act Poster as well as any state or locality specific applicant posters. To access the postings in the link below, select your state to view all applicable federal, state and locality postings. Postings are available in English, and in Spanish, where required.
Disability Accommodations
If you are an individual with a disability, a disabled veteran, or a wounded warrior and you are unable or limited in your ability to access or use this site as a result of your disability, you may request a reasonable accommodation by contacting us via email.
Please note: DXC will respond only to requests for accommodations due to a disability.
Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.
Job Description:
Roles and Responsibilities
- Design, build, and maintain AI-enabled security solutions that automate vulnerability triage, enrichment, prioritization, and ticket routing.
- Use AI-assisted development (“vibe coding”) and modern engineering practices to rapidly prototype security tools, then harden them for production use.
- Build automation workflows and integrations across scanners, cloud control planes, CI/CD pipelines, ticketing systems such as Azure DevOps, and SIEM and SOAR platforms.
- Develop cloud security posture management capabilities, including automated misconfiguration detection, policy-as-code, drift remediation, and guardrails for multi-cloud environments.
- Embed security into DevSecOps pipelines through automated SAST, DAST, SCA, secrets detection, container and infrastructure-as-code scanning, and AI-assisted code review and fix suggestions.
- Engineer AI solutions for risk management, such as evidence collection, control testing, risk register enrichment, and automated assessment support.
- Build security dashboards and metrics pipelines that give leadership and practitioners accurate, timely views of posture, backlog, remediation performance, and risk trends.
- Design human-in-the-loop controls, approval gates, and audit logging for automated and AI-driven actions, so that automation is safe, governed, and explainable.
- Evaluate and validate AI models, agents, and tools for accuracy, false-positive rates, cost, and security, and document their limitations.
- Apply secure coding and engineering practices to security tooling itself, including secrets management, least-privilege access, dependency hygiene, and testing.
- Produce clear technical documentation, runbooks, and knowledge articles so that solutions can be operated and handed off reliably.
- Partner with the security operations, governance, and IT teams to identify manual processes that are good candidates for automation and deliver them iteratively.
Skills and Attributes for Success
- Strong programming skills in Python and PowerShell, with working knowledge of JavaScript or TypeScript and familiarity with infrastructure-as-code tools such as Terraform or Bicep.
- Practical experience using AI-assisted coding tools and LLM APIs, with an understanding of prompt design, evaluation, and the limits of model output.
- Experience building API integrations and event-driven automation, including REST APIs, webhooks, and message queues.
- Working knowledge of cloud security posture management and cloud platforms, particularly Azure and Microsoft 365, with exposure to AWS or GCP.
- Familiarity with DevSecOps tooling and CI/CD platforms such as Azure DevOps, GitHub Actions, or GitLab.
- Understanding of vulnerability management, threat intelligence, and risk frameworks such as NIST CSF, NIST AI RMF, and CIS Benchmarks.
- Ability to design dashboards and metrics using tools such as Power BI, Kusto (KQL), or similar platforms.
- Strong problem-solving skills, a bias toward action, and comfort turning ambiguous security problems into working solutions.
- Clear communication skills, with the ability to explain technical designs to both engineers and non-technical stakeholders.
Requirements
- Bachelor’s degree in computer science, Information Systems, Engineering, or a similar discipline, or equivalent experience.
- Minimum of 3 years of experience in security engineering, security automation, DevSecOps, or software engineering with a security focus.
- Demonstrated experience building automation or tooling that is in production use, ideally in a security context.
- Hands-on experience with at least one of: vulnerability management platforms, cloud security posture management tools, SAST/DAST/SCA tooling, or SIEM/SOAR platforms.
- Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Defender for Endpoint, or equivalent platforms.
- Familiarity with Azure DevOps and Git-based version control workflows.
- Experience with AI or LLM application development, including retrieval-augmented generation, agent frameworks, or evaluation of model outputs, is strongly preferred.
Compensation
- A reasonable estimate of the current compensation range for this position is $132,400 - $245,800.
Full-time hires are eligible to participate in the DXC benefit program. DXC offers a comprehensive, flexible, and competitive benefits program which includes, but is not limited to, health, dental, and vision insurance coverage; employee wellness; life and disability insurance; a retirement savings plan, paid holidays, paid time off.
At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.
If you are an applicant from the United States, Guam, or Puerto Rico
DXC Technology Company (DXC) is an Equal Opportunity employer. All qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, pregnancy, veteran status, genetic information, citizenship status, or any other basis prohibited by law.
We participate in E-Verify. In addition to the posters already identified, DXC provides access to prospective employees for the Federal Minimum Wage Poster, Federal Polygraph Protection Act Poster as well as any state or locality specific applicant posters. To access the postings in the link below, select your state to view all applicable federal, state and locality postings. Postings are available in English, and in Spanish, where required.
Disability Accommodations
If you are an individual with a disability, a disabled veteran, or a wounded warrior and you are unable or limited in your ability to access or use this site as a result of your disability, you may request a reasonable accommodation by contacting us via email.
Please note: DXC will respond only to requests for accommodations due to a disability.
Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.
See All 84 Mid Level Information Security Advisor Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsMid Level Information Security Advisor Job Market
Who's Hiring
Top Industries Hiring
- Healthcare & Medical Services23
- Education11
- Technology & Software9
- Distribution & Wholesale5
- Retail3
Mid Level Information Security Advisor Jobs: Frequently Asked Questions
How do I get a mid level information security advisor job?
Position your existing experience around ownership and outcomes, not just task completion. Highlight projects where you led the security assessment, drove the remediation plan, or served as the primary point of contact for a risk review. Certifications like CISSP, CISM, or Security+ strengthen your profile, but concrete examples of independent judgment and cross-functional collaboration are what mid level hiring managers look for most.
Which companies hire mid level information security advisors?
Companies hiring mid level information security advisors right now include Indiana University Health, Rexel, and Walmart, based on current listings on Migrate Mate as of November 2026. At this level, hiring comes from a wide range of organizations, including large enterprises building out security teams, government contractors managing compliance programs, and mid-size firms that need advisors who can work independently without heavy supervision.
Are there remote mid level information security advisor jobs?
Yes, remote and hybrid options are common at this level. About 35% of mid level information security advisor openings are remote or hybrid as of November 2026, reflecting the nature of advisory and assessment work that can be done effectively outside a physical office. On-site roles do still exist, particularly in sectors with strict data handling or clearance requirements.
How do I move up to a mid level information security advisor role?
Moving from entry level into a mid level information security advisor role takes deliberate skill-building over your first few years. Focus on deepening expertise in a specific domain, such as cloud security, risk management, or compliance frameworks like SOC 2 or NIST. Taking on project ownership, earning a recognized certification, and building a record of measurable impact, like reducing vulnerabilities or improving audit outcomes, signals readiness for mid level responsibility.
Which industries hire the most mid level information security advisors?
Mid Level information security advisor roles concentrate in Healthcare & Medical Services, Education, and Technology & Software, based on current listings on Migrate Mate as of November 2026. These sectors tend to drive hiring at this level because they handle sensitive data, face significant regulatory scrutiny, or manage large, complex infrastructure that requires experienced advisors working with limited day-to-day supervision.