Mendix

Mendix – the leading low-code application development platform:The Mendix Platform uses visual modeling to abstract long-form coding out of application development. Our customers use Mendix to create and deploy better software for the enterprise, faster. Mendix is collaborative - the people who use the software and the people who build the software work together throughout the development process.Read our Customer Stories to learn more about the wealth of software and solutions global organizations have built with the Platform.At Mendix we strive to maintain a diverse, open, and safe working environment where people can be their true selves. We value every voice, celebrate individuality, and appreciate the diversity of thought and experience. People who work here are driven, smart, and really good at what they do.As this market evolves, we encourage people of all skill levels to work with the platform, both for clients and candidates. Apply today to discover how you can make a meaningful impact with Mendix.We are recruiting for a Principle Information Security Officer to join our Product Security team in Rotterdam, Netherlands.Actively drive product &amp; solution security, advising executive, product and engineering management with regard to appropriate processes and structures to enhance security of products, solutions and services. Coordinate and adapt relevant standardization and regulatory requirements to be most effectively integrated in Mendix’ way of working. Coordinate communication between relevant stakeholders in Mendix, Siemens and other relevant (third-party) organizations. Thoroughly understand and discuss implications of proposed processes, structures and security or compliance controls to ensure continuous high quality value delivery by Mendix Product and Technology team. Measure, track and report on the status and application of product and solution security standards, processes and policies as well as the implementation policy of the organization. 
<h3>Qualifications &amp; Requirements</h3>
<ul>
The ideal candidate will hold a relevant Masters/Bachelors degree i.e. Information Security, Cyber Security etcStrong experience gained within a position with significant information security responsibilities.Background in and knowledge of software development and or security engineering (either offensive or defensive).Excellent stakeholder manager who’s successfully implemented complex projects or programs in a large organizationHigh level of initiative and self-direction. </ul>If you see a job description and think, “I’d be perfect for that” but your experience doesn’t align perfectly with the qualifications – don’t let that hold you back. We’re always eager to hire talented, passionate candidates – so give it a try and apply.Equal Employment Opportunity StatementMendix/Siemens is an Equal Opportunity and Affirmative Action Employer encouraging diversity in the workplace. All qualified applicants will receive consideration for employment without regard to their race, color, creed, religion, national origin, citizenship status, ancestry, sex, age, physical or mental disability unrelated to ability, marital status, family responsibilities, pregnancy, genetic information, sexual orientation, gender expression, gender identity, transgender, sex stereotyping, order of protection status, protected veteran or military status, or an unfavorable discharge from military service, and other categories protected by federal, state or local law.EEO is the LawApplicants and employees are protected under Federal law from discrimination. To learn more, Click here.Pay Transparency Non-Discrimination ProvisionSiemens follows Executive Order 11246, including the Pay Transparency Nondiscrimination Provision. To learn more, Click here.California Privacy NoticeCalifornia residents have the right to receive additional notices about their personal information. To learn more, click here.

Principle Information Security Officer

Xtremax

We are looking for experienced security professionals who can help ourselves achieve a secured environment for our applications, system, and network infrastructure. You must have strong experience in performing penetration testing and vulnerability management services for applications, network systems, operating systems, and databases. Candidates should have experience with black box and grey box. Responsibilities <ul><li>Conduct security assessments such as penetration and vulnerability tests. </li></ul><ul> <li>Perform Blackbox/Graybox testing of Web/Mobile or Thick client applications. </li> <li>Perform Network Vulnerability Assessments and Penetration Testing. </li> <li>Risk Evaluation of observed vulnerabilities based on common risk scoring techniques such as CVSS. </li> <li>Perform Configuration Review to check compliance with Security Hardening baselines. </li> <li>Keep updated on knowledge of the IT security industry: including awareness of new or revised security solutions, security standards, trends / best practices, offensive techniques, and tools. </li> </ul><ul> <li>Knowledge-share with team on techniques and results. </li> <li>Create detailed report of findings and recommendations after testing is complete and present to stakeholders. </li> <li>Coordinate with developers/stakeholders on the findings for appropriate fixes. </li> <li>Prepare project plans, ensure it is followed and track projects until closure. </li> <li>Stay up-to-date in current tools, techniques, and vulnerabilities to incorporate into testing practices. </li> </ul><ul> <li>Coordinating with client to give best security solution for them </li> <li>Coordinating a team of security specialists for both Singapore and Indonesia team</li> </ul>Requirements<ul><li>Degree in Computer Science / IT Security or other related disciplines  </li></ul><ul> <li>Should have an overall exposure and understanding of Application and Network Security testing (VAPT)  </li> <li>Strong knowledge of the OWASP Top 10, OWASP Mobile Top 10, SANS top 25. Detailed knowledge of common web application attack vectors.  </li> <li>Experience in manual application, mobile penetration testing, automated web application vulnerability scanners, and performing Network VA  </li> <li>Should have knowledge on Risk Rating Standards like DREAD, CVSS etc.  </li> <li>Knowledge in Configuration Review based on standard CIS security hardening baselines or custom baselines  </li> </ul><ul> <li>Should have performed Black Box / Grey Box Application penetration testing.   </li> <li>Good understanding of application protocols, network technologies and protocols   </li> <li>Certifications that would be added advantage – OSCP, GIAC Certifications (GWAPT, GPEN) CREST CRT, OWSE, CEH  </li> </ul>BenefitsBenefits:<ul> <li>Competitive salary</li> <li>14 Days of annual leave</li> <li>BPJS &amp; Private Health Insurance</li> <li>Various extracurricular activities (sports, music, etc.)</li> <li>Opportunity to work in Singapore Headquarter</li> <li>Young, dynamic and vibrant atmosphere</li> <li>All around snacks, drinks, coffee, tea and regular culinary day</li> <li>Located in the center of Bandung</li> </ul>By submitting your resume/CV, you consent and agree to allow the information provided to be used and processed by or on behalf of Xtremax Pte Ltd for purposes related to your registration of interest in current or future employment with us and for the processing of your application for employment. The personal data held by us relating to your application will be kept strictly confidential and in accordance with the PDPA. You may also refer to our Privacy Policy for more details here: https://www.xtremax.com/privacy-policy.

IT Security Consultant (Indonesia)

Rubrik

Professional Services Field Consultant
Location: Bangalore
As a Professional Services Field Consultant, you will use your knowledge and experience to help drive Rubrik’s product adoption with key customers. You must possess a unique blend of technical and customer facing skills to help discover, plan, and execute project requirements to drive customer success. Responsibilities: ● Participate in the pre-delivery process to understand customer business and technical objectives and    product requirements ● Work directly with customers to drive adoption of Rubrik solutions and integrated services ● Provide initial implementation and configuration services for new and existing customers ● Provide deep technical product knowledge, helping educate customers on adoption and operations of    Rubrik solutions ● Document best practices deploying, configuring, automating, and managing Rubrik solutions ● Drive client and internal resources and activities to ensure deliverables within scope and time ● Ability to work with customers for multiple months, assisting and driving various workload ingestion    with customer resources ● Ability to work in fast pace, dynamic environment Requirements: ● 5-8 years of experience in networking, storage, and overall data center activities ● Strong network and storage conceptual and industry knowledge ● Ability to translate complex technical requirements into project management tasks ● Strong presentation skills ● Strong cross-functional collaboration / communication skills Key technologies: ● VMware ○ Snapshot technologies ○ General networking    ■ Distributed switching    ■ Standard switching
● SQL ○ Full recovery model ○ Simple recovery model ○ Always On Availability Group ○ Windows Clustering
● Networking ○ Access Switch Ports ○ Trunk Switch Ports ○ LACP ○ Fiber 
ABOUT RUBRIK
Rubrik is one of the fastest growing companies in Silicon Valley, revolutionizing data protection and management in the emerging multi-cloud world. We are the leader in cloud data management, delivering a single platform to manage and protect data in the cloud, at the edge, and on-premises. Enterprises choose Rubrik to simplify backup and recovery, accelerate cloud adoption, enable automation at scale, and secure against cyberthreats. Rubrik has raised over $553 million in venture funding, most recently at a valuation of $3.3 billion. We’ve been recognized as a Forbes Cloud 100 Company two years in a row and as a LinkedIn Top 10 startup. 
Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age or disability. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
#LI-AS2About Rubrik:
Rubrik, the Zero Trust Data Security Company™, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including Zero Trust Data Protection, Ransomware Investigation, Incident Containment, Sensitive Data Discovery, and Orchestrated Application Recovery. This means your data is ready so you can recover the data you need, and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.
We are a leader in data security, have been recognized as a Forbes Cloud 100 Company, named as a LinkedIn Top 10 Startup and are proud to have earned Great Place to Work® Certification™. There has never been a more exciting time to join Rubrik, and our future is even brighter. The work you do will help propel our next chapter of growth as you do the best work of your career.
Linkedin | Twitter | Instagram | Rubrik.com | 
Diversity, Equity &amp; Inclusion @ Rubrik: 
At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.
Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation. This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.
Our DEI strategy focuses on three core areas of our business and culture:
<ul>
<li>
Our Company: Build a diverse company that provides equitable access to growth and success for all employees globally. 

<li>
Our Culture: Create an inclusive environment where authenticity thrives and people of all backgrounds feel like they belong.
</li>
<li>
Our Communities: Expand our commitment to diversity, equity, &amp; inclusion within and beyond our company walls to invest in future generations of underrepresented talent and bring innovation to our clients.
</li>
</ul>
Equal Opportunity Employer/Veterans/Disabled: Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.
Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. 
Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.
EEO IS THE LAW
EEO IS THE LAW - POSTER SUPPLEMENT
PAY TRANSPARENCY NONDISCRIMINATION PROVISION
NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS

Professional Services Field Consultant

Panorama Education

About Panorama: Panorama is a fast-growing national technology company focused on radically improving education. More than 2,000 school systems serving 15 million students across all 50 states have adopted our platform to understand students’ academic and social-emotional strengths and to identify those in need of additional support. School systems turn to our suite of tools to ensure that every child gets the support they need, including school climate and social-emotional learning surveys, tiered intervention planning, and professional development.
Panoramians can choose to work fully remote anywhere within the Continental United States, in-person from our Boston office, or a hybrid option.About the Role:
We are looking for an Information Security Manager - GRC to help improve Panorama’s stewardship of student data. Reporting to the Director of Information Security, a person in this role will be responsible for maintaining and improving the company information security risk management program and supporting our Sales and Contracts teams by serving as an Information Security subject matter expert. A person in this role will have a significant impact on our Information Security program through highly collaborative work with departments across the company to protect data stored in our product as well as business applications. This role will require hands-on work, have a lot of autonomy, and carries the opportunity to help plan and build the capacity of the department.

Responsibilities:
<ul>
<li>
Become part of the growing Information Security team to understand and mitigate potential or present cyber threats and risks against Panorama.
</li>
<li>
Lead Panorama’s external risk assessment and audit process, further improving Panorama’s security posture. 
</li>
<li>
Use security risk assessments, penetration test results, and threat models to estimate risk levels for prioritizing security projects.
</li>
<li>
Maintain company risk register and business impact analysis and recommend priorities through cross-functional collaborations.
</li>
<li>
Collaborate across departments to help build processes for vendor risk management processes.
</li>
<li>
Participate in the Trust Council, a cross-functional body focused on security and privacy, to properly represent assessed risks to the company and to weigh in on various Information Security matters.
</li>
<li>
Identify and communicate emerging trends, threats, and industry best practices.
</li>
<li>
Collaborate with the Sales and Contracts teams to complete client questionnaires, contracts, and RFPs.
</li>
<li>
Assist in development, maintenance, and communication of security best practice training.
</li>
</ul>

Our Ideal Candidate Has:
<ul>
<li>
5+ years of experience in Information Security, with at least 3 years in governance, risk, and compliance. 
</li>
<li>
Experience reviewing inbound and outbound security due diligence materials such as third party risk assessments.
</li>
<li>
Experience aligning to security control frameworks, including undergoing audits and developing security policies and procedures (Panorama aligns to NIST CSF and 800-171, but any framework is helpful)
</li>
<li>
Implemented new systems or practices across different product teams, and effectively aligned stakeholders to goals and process. 
</li>
<li>
Familiarity with risk management frameworks. 
</li>
<li>
Experience with IT governance, cloud security posture management, Software Development Life Cycle (SDLC), and web application programming.
</li>
<li>
Effectively performed in a cross-functional environment with an emphasis on leading through influence rather than authority.
</li>
<li>
Exceptional communication across all levels of an organization, stakeholder alignment, and driving business objectives 
</li>
<li>
A passion for protecting data, especially the data of K-12 students.
</li>
<li>A Security+, CISSP, or equivalent certification is not required, but helpful.</li>
</ul>

Base Salary: $162,000 to $212,000
The “Base Salary” range represents the low and high end of the anticipated salary range for this position across all US locations. The determination of this anticipated Base Salary range involves the consideration of many factors in making compensation decisions including but not limited to: unique skill sets, experience, training, performance, licensure and certifications, as well as other business and organizational needs. Our anticipated Base Salary determination is just one component of Panorama’s competitive total rewards strategy that also includes annual bonus or commission awards, equity awards, as well as other region-specific health and welfare benefits.

Panorama Education is dedicated to building a diverse and inclusive company because we serve students, educators and families from tremendously diverse backgrounds and identities across the country; we’ve seen how our product and impact are strengthened the more we reflect that diversity. In addition, we have found (and we believe the research) that diverse teams are higher-performing, and we embrace the varied perspectives that our team members share with each other. As such, we are an Equal Opportunity Employer. Panorama also has a policy on maintaining a drug-free workplace.
#LI-Remote #BI-Remote

Information Security Manager - GRC

Datacom

Our purposeHere at Datacom, we connect people and technology in order to solve challenges, create opportunities and discover new possibilities for the communities we live in. Our team Our Cyber Defence Operation Centre (“CDOC”) runs across Auckland, Wellington and Brisbane from where we provide our full stack of Cybersecurity Managed services. The CDOC is a well-established team made up of Cybersecurity Analysts, Engineers, Dev Engineers and Incident Responders who have been managing customers, both commercial and government, for over 10+ years. We are a matured operational team that not only responds to security events, incidents, and triggers, but also hunts for anomalous, suspicious, and potentially unwanted activities within our customers environments. We Partner with industry leaders to provide our services and to provide you with a broad technical skillset, certifications, and experience. This is an exciting time of growth, and our driven team need to grow to meet the increased demand and activity. About the Role The Cybersecurity Threat Hunter is a key part of Datacom's Incident Response Team (CSIRT) within the Cyber Defence Operations Centre (CDOC). You will be responsible for developing and executing threat hunt missions. Your will work closely with colleagues from the Incident Response, Threat Intel and Security Analysts teams to help us locate and respond to previously undetected adversary activities. What you’ll do <ul> <li>Develop hunt missions using attack modelling techniques and knowledge of relevant adversary tactics and techniques to build your hunt hypothesis. </li> <li>Identify data requirements and prerequisites for the hunt, assess how they match to available data-sources and work with CDOC colleagues and Customer teams to address any potential collection gaps. </li> <li>Gather data needed to test the hunt hypothesis and validate completion of collection and search activities. </li> <li>Analyse the output of the search activities to test the original hunt hypothesis; revising or pivoting your approach based on the results of the analysis. </li> </ul><ul> <li>Work with colleagues from the CSIRT and Security Operations Centre (SOC) team to initiate incident response procedures and where required support CSIRT Incident Response engagements, working under direction of the Incident Commander or Incident Responders. </li> <li>Build and update threat detection rules based off each hunt, engaging with our SOC and Automation specialists to optimise future detection and alerting. </li> <li>Produce Hunt Reports and brief stakeholders on the hunt findings, including opportunities to improve security controls and posture. </li> <li>Work with members of our Threat Intelligence team to ensure the Hunt Team’s intelligence requirements are understood and delivered. </li> </ul>What you’ll bring <ul> <li>The mindset of a hunter! We are looking for someone who loves the chase and thrill of searching for previously undetected adversary behaviour. </li> <li>A strong understanding of current and emerging attacker behaviours, tools, tactics and techniques that you will apply when building the hunt missions. </li> <li>A solid understanding of how and when to leverage appropriate frameworks such as Mitre ATT&amp;CK, D3FEND and CAPEC, Unified Kill Chain and Diamond Model of Intrusion Analysis. </li> </ul><ul> <li>Knowledge and experience of efficiently searching large datasets across multiple log sources and underlying platforms including XDR and SIEM products. </li> <li>Ability to conduct independent research to validate or supplement other sources of threat intelligence, indicators and feeds, including malware analysis in order to extract indicators of interest. </li> <li>Familiarity with coding and / or scripting skills such as Python, Powershell or KQL. </li> <li>Knowledge and familiarity of Splunk or Sentinel would be desirable. </li> <li>Proven experience in a technical IT or security operations role such as: </li> </ul><ul> <li>Cyber Threat Intelligence / Cyber Threat Hunting </li> <li>Penetration Testing / Red-team </li> <li>Security Operations </li> <li>Digital Forensics / Incident Response </li> <li>Security Architecture </li> </ul><ul><li>IT Operations / Networks </li></ul>The Finer DetailsWe have over 6,200 people across our global offices, and generate an annual revenue of over $1.2 billion, this makes us one of Australasia’s largest professional IT services companies. We have extensive expertise in operating data centres, providing IT services, software engineering and application management, as well as payroll and customer service design and operations. With this comes a long list of significant clients Datacom is committed to hiring, developing, and promoting the best talent from a diverse range of backgrounds. We are local at heart, yet world-class in capability. If you are keen to be part of a great team, please apply online! All applications will be treated in the strictest confidence. Due to the Nature of the Clients you will be working with you will need to be an NZ Citizen/Permanent Resident and have the ability to pass additional security clearances which will require you to have lived in a 5 eyes country for the last 5 years. We do however consider work visas for other opportunities across Datacom so please keep an eye on our careers page for any roles of interest.

Cybersecurity Threat Hunter

NiSUS Technologies

Performs as a consultant in highly specialized, leading edge information technologies and methodologies; Provides highly technical and specialized guidance concerning automated solutions to complex information processing problems; Performs elaborate analyses and studies; Prepares reports and gives presentations. Manages the project work. Leads medium to large complex projects and major phases of very large projects. Provides highly technical and specialized guidance and solutions to complex IT problems. Track multiple efforts, ensure timelines are kept, document issues, advise, provide project Status, write SOPsRequirements<h3>TS/SCI with poly required</h3><ul> <li>High School/GED with twenty (20) years of relevant experience.</li> <li>Associate's degree with fifteen (15) years of relevant experience.</li> <li>Bachelor's degree with twelve (12) years of relevant experience</li> <li>Excellent problem-solving skills</li> <li>Minimum 10 years of storage experince </li> <li>Familiar with NAS storage (NetApp, ZFS, Pure, etc.)</li> <li>Familiar with block storage and understanding SAN fabric</li> <li>Familiar with VMWare</li> <li>Familiar with backups (Veritas, Rubrik, Cohesity, etc.)</li> </ul><h3>One or More of the Following Certifications Required</h3><ul> <li>CCNA Security</li> <li>CySA+</li> <li>GICSP</li> <li>GSEC</li> <li>Security+</li> <li>CND</li> <li>SSCP</li> <li>CASP</li> <li>CCNP Security</li> <li>CISA</li> <li>CISSP</li> <li>GCED</li> <li>GCIH</li> <li>CCSP</li> </ul>Benefits<ul> <li>Health &amp; Life Insurance</li> <li>Dental Insurance</li> <li>Disability Insurance</li> <li>401K Retirement Plan with Matching</li> <li>Tuition Assistance</li> <li>Vacation and Sick Leave</li> <li>Hiring Bonuses</li> <li>Referral Recruitment Program</li> </ul>

BP144ITSC5 - Information Technology Senior Consultant - Cleared

Reltio

We’ve earned numerous awards and top rankings for our technology, our culture and our people. Reltio was founded on a distributed workforce and offers flexible work arrangements to help our people manage their personal and professional lives. If you’re ready to work on unrivaled technology where your desire to be part of a collaborative team is met with a laser-focused mission to enable digital transformation with connected data, let’s talk!
How You Make a Difference:
As a member of the Information Security team, the GRC analyst will be responsible for managing the third party security assessment process for new and existing vendors / products, day to day compliance and risk management functions.

This analyst will support management of organizational policies, procedures and standards, including Reltio’s business continuity framework, in support of legal and regulatory compliance needs as well as organizational information security practices.

What You Bring to the Team:
●      Manage and/or contribute to control documents and deliverables associated with governance, compliance, risk management, business continuity and disaster recovery. 
●      Lead Reltio’s annual SOC 1, SOC 2 and HITRUST re-certification assessments.
●      Perform security and compliance assessments on new and existing vendors, systems, processes and technology.
●      Drive the maintenance and upkeep of Reltio’s Risk Register, which includes evaluating likelihood and impact and identifying mitigating controls to determine inherent and residual risk to systems
●      Contribute responses to customer questionnaires
●      Conduct independent research on GRC-related topics and present findings to management
●      Conform to shifting priorities, demands and timelines and make adjustments to effectively prioritize and execute tasks in a fast-paced, dynamic, environment
●      Coordinate with business leads and vendors when completing third party security assessments
●      Lead the efforts of updating the Risk Register as the risk landscape changes over time
●      Contribute content to Reltio’s suite of policies, operating procedures and business continuity deliverables
●      Collect evidence for SOC 1, SOC2, and HITRUST re-certifications annually
●      Coach junior team member(s) to provide guidance on compliance initiatives and oversight on projects
●      Apply critical thinking/problem solving skills at a higher level of complex issues and interface with senior level team members
●      Participate in and contribute to cross functional project teams
●      Recommend and lead business process improvements 

Skills You Must Have:
●      Bachelor of Science degree in Computer or Information Science or related field of study
●      5+ years experience in security risk management, analysis, modeling
●      General understanding of audit methodologies and processes
●      Experience working with virtual teams in a global environment
●      Strong communication and presentation skills 
●      Adaptable and agile
●      Good interpersonal, partnership and leadership skills (without direct authority of others)


Skills That Are Nice to Have:

●      Experience with industry frameworks such as SOC1, SOC2, HITRUST, ISO, NIST, etc.
●      Project Management
●      Working knowledge of team and project development tools such as JIRA, Google Workspaces, MS Office
●      Experience with cloud-based systems (AWS, Azure, GCP)
At Reltio, we carefully consider a wide range of compensation factors to determine your personal top of market. We rely on market indicators to determine compensation and your specific job family, background, skills, and experience to get it right. These considerations can cause your compensation to vary and will also be dependent on your location. Overall Market Range$75,000—$162,000 USD
Reltio is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Reltio is committed to working with and providing reasonable accommodation to applicants with physical and mental disabilities.

Governance, Risk and Compliance (GRC) Analyst

AnaVation

Be Challenged and Make a Difference In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture. Description of Task to be Performed:AnaVation is seeking an IT Security Policy Analyst/ISSO for our mission critical customer in Washington, DC. You will work as part of a fantastic team providing security compliance expertise on a high priority project. Daily duties include, but are not limited to:· Developing, maintaining, and assessing Security Assessment &amp; Authorization (SA&amp;A) packages resulting in an authority to operate (ATO) for IT systems.· Creating and maintaining SSPs and supporting documentation in accordance with agency guidelines and directives. This includes writing implementation statements, creating supporting documentation (e.g., Contingency Plans, Incident Response Plans, Account Management Plans, etc.), and performing self- assessments, while working with system stakeholders.· Develop, coordinate, test, and train personnel on Incident Response Plans and Contingency Plans.· Ensuring that information systems are accredited, maintain their ATO, and are being continuously monitored.· Performing risk assessments for government systems, to include cloud-based systems.· Performing security control assessments to include collecting supporting artifacts/evidence and interviewingsystem owner/owner representatives.· Having an in-depth knowledge of the Risk Management Framework (RMF).· Maintaining and tracking system POA&amp;Ms.· Conducting vulnerability management and analysis.· Reviewing and analyzing government policy. · Taking ownership on various projects and efforts related to the items highlighted above. · Improving on processes and procedures and making recommendations to improve the security posture of the agency's IT systems and applications. This position is currently hybrid (2 days per week on site at the customer location in DC) but is subject to change at the customer’s direction.
<h3>Required Qualifications:</h3>
<ul>
<li>6+ years’ experience with NIST, FISMA, and Security Assessment &amp; Authorization.</li><li>FedRAMP and Cloud (Azure, AWS, Oracle (OCI)) experience.</li><li>Familiarity with various security-related NIST publications (e.g., SP 800-53r5, SP 800-53A, SP 800-18r1, etc.)</li><li>Ability to obtain and maintain a customer Public Trust clearance required. Qualified candidates can be sponsored for this clearance.</li><li>Certifications: CISSP required</li></ul>
<h3>Preferred Qualifications:</h3>
<ul>
<li>Familiarity with the security control families from the NIST guidance covered by the documents that they are responsible for evaluating.</li><li>Ability to provide subject matter expert-level knowledge to the project team to ensure compliance with applicable requirements.</li><li>Demonstrated knowledge of IT Security policy implementation statements, the regulatory structure of policy, the role of the Department of Homeland Security (DHS), the Office of Management and Budget (OMB), and the National Institute of Standards and Technology (NIST).</li><li>Hands-on experience using a Governance, Risk, and Compliance tool, such as CSAM or eMASS.</li><li>Ability to conduct gap analysis on non-federated vendor audit results, such as SOC Type 2, HIPAA comparison review and analyst against NIST SP 800-53 Revision 5 security controls.</li><li>Hands-on experience providing C-Level presentation and reporting.</li><li>Excellent written communication skills and understand the purpose and use of the System Security Plan (SSP).</li><li>Possess an understanding of control inheritance as applied to the Risk Management Framework (RMF) implementation in the CSAM tool.</li><li>Ability to accurately manage complex workstreams, comprehend the application of the RMF, and understand the application of security controls across the interface, application, operating system, network, and database layers of modern information systems. Understand the applicable artifacts used as evidence to assess compliance.</li><li>Experience with multiple tools providing security functions such as vulnerability management (e.g., Nessus), configuration management (e.g., BigFix, SCCM, ePO), endpoint protection (e.g., antivirus, ATP), data loss prevention, and intrusion detection software and hardware.</li><li>Ability to evaluate data flows, network diagrams, and logical security boundaries.</li><li>Excellent oral and written communication skills</li><li>Familiarity with the use of data analysis tools, including the use of Microsoft Excel or PowerBI to combine data from multiple sources.</li></ul>Benefits ·        Generous cost sharing for medical insurance for the employee and dependents ·        100% company paid dental insurance for employees and dependents ·        100% company paid long-term and short term disability insurance ·        100% company paid vision insurance for employees and dependents ·        401k plan with generous match and 100% immediate vesting ·        Competitive Pay ·        Generous paid leave and holiday package ·        Tuition and training reimbursement ·        Life and AD&amp;D InsuranceAbout AnaVation AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team.  If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you!

IT Security Policy Analyst/ISSO

Upstox

About the company Upstox is one of India's leading Fin-Tech companies with a mission to simplify trading &amp; investing to make it easily accessible to the masses. We aim to enable everyone, from new investors to seasoned traders, to invest across multiple categories with our state-of-the-art trade &amp; investment platform and commission-free pricing. We offer numerous asset categories to invest in, like Stocks, Digital Gold, IPOs, Mutual Funds, and more.   Our mission is simple - to break down the complexities of investing and make it more effortless, accessible, affordable, and easy for the masses to adopt. This key principle when infused with intuitive design and leading-edge technology will help us empower every Indian to take control of their investments.  Role: Cyber Defense Security Engineer - 2The role of a Security Engineer is crucial in the realm of cybersecurity as it covers the incident response aspects. A Security Engineer should possess a total of 5 years of experience in cyber security, out of which, 3 years of experience should be in SOC (Security Operations Center) or Incident Response, and a minimum of 2 years experience as a lead investigator in Incident Response.As a Security Engineer, the responsibilities will primarily involve collaborating with internal and external stakeholders to respond to incidents and collect digital evidence related to them. The ability to perform triaging, analysis &amp; reporting, and performing RCA (Root Cause Analysis) of incidents is also an integral part of the job.In this role, the Security Engineer must possess exceptional communication skills and be able to articulate complex technical information in a clear and concise manner to stakeholders at various levels of the organization. Furthermore, the ability to identify and recommend process improvements, implement mitigation strategies, and provide ongoing support to ensure a proactive approach to incident management is essential.What you’ll do:- Investigate, document, and report on information security issues and emerging threats, utilizing threat intelligence and industry best practices.- Provide Incident Response (IR) support when analysis confirms an actionable incident, including isolating affected systems, collecting and analyzing triage/logs, containing the incident, and providing a remediation strategy.- Gather information from various threat intel sources and initiate remediation steps to neutralize the risk to the organization.- Monitor and analyze logs and alerts from a variety of different technologies across multiple platforms to identify and triage security incidents affecting the enterprise.- Perform threat hunting and in-depth investigations, providing support for incidents escalated from SOC.- Define and document playbooks, standard operating procedures, and processes to streamline incident response and ensure consistency across the organization.- Document the results of cyber threat analysis effectively and prepare comprehensive hand-off and/or escalation for the Incident Response process.- Utilize security tools and technologies to analyze potential threats to determine impact, scope, and recovery.- Collaborate with internal and external stakeholders, including key business units, to make recommendations on mitigation and prevention techniques.- Conduct a detailed analysis of various security-related events like Phishing, Malware, DoS/DDoS, Application-specific Attacks, Ransomware, etc.- Research and explore the enrichment and correlation of existing data sets to provide deep threat analysis.- Contribute to and/or drive special projects by providing expertise, guidance, and leadership in the area of information security.What you’ll need:- Technical expertise in the organization's applications, systems, networks, and infrastructure, including a deep understanding of highly scalable enterprise network technologies and architectures.- Strong knowledge of logging mechanisms on Windows, Linux, and macOS platforms, as well as networking protocols.- Proficiency with several security tools and technologies, such as EDR, Anti-Virus, HIPS, NIDS/NIPS, log analysis, full packet capture, network-based forensics, and encryption.- Advanced certifications, such as SANS GIAC / GCIA / GCIH, CISSP, or CASP, and experience with incident response-specific training and certification is highly desirable.- At least 2 years of experience as a lead investigator and 3 years of experience as an analyst in incident response or SOC.- Expertise in creating and executing incident response playbooks (IRP).Excellent understanding of defensive security strategies and tactics.- Strong scripting skills for automation.- Effective communication skills to coordinate with various stakeholders across the organization.If you fit the above description, we would love to connect with you! APPLY NOWA basic requirement but one that many forget: Make sure you go through our website,download our app and give us feedback!Upstox is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or other characteristics.

Cyber Defense Engineer - II

Coupang

Company IntroWe exist to wow our customers. We know we’re doing the right thing when we hear our customers say, “How did we ever live without Coupang?” Born out of an obsession to make shopping, eating, and living easier than ever, we’re collectively disrupting the multi-billion-dollar e-commerce industry from the ground up. We are one of the fastest-growing e-commerce companies that established an unparalleled reputation for being a dominant and reliable force in South Korean commerce.We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurial surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At Coupang, you will see yourself, your colleagues, your team, and the company grow every day.Our mission to build the future of commerce is real. We push the boundaries of what’s possible to solve problems and break traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world.

Team Description:
This role is an individual contributor on the Security GRC team.  This team member will apply their information security knowledge and skillsets to assist, and may lead tasks, in support of Security GRC activities.  These activities may include coordinating updates to the information security policies, standards, or guidelines or gathering responses in support of our information security certifications.  This team member can work independently and should be able to multitask and manage competing priorities in a fast-paced environment, yet remain flexible.  He/she will have excellent interpersonal skills, work well with others, and quickly learn our business. 

Key Responsibilities: 
<ul>
<li>Understand Korean and International Information Security &amp; Privacy laws, regulation and policies </li>
<li>Perform risk assessments, report results, and track mitigation </li>
<li>Collaborate with key stakeholders to track, manage and reduce risk  </li>
<li>Support for development and maintenance of information security policies and procedures </li>
<li>Change management, exception process operation, and management for Security policies </li>
<li>Communication with relevant departments on topics related to information security and regulatory requirements </li>
<li>Security awareness-raising and training program development, operation, management, and evaluation </li>
<li>Certification compliance requirements coordination and data gathering </li>
</ul>

Basic Qualifications: 
<ul>
<li>Bachelor’s Degree is required. </li>
<li>At least 3 ~ 5 years of information security experience </li>
<li>Experience in information protection and personal information protection management system (ISMS-P), ISO27001, PCI-DSS </li>
<li>Technically high-level experience and understanding of IT infrastructure, services, and cloud service </li>
<li>Experience and understanding of security system operation/management </li>
<li>Understanding and experience of risk management methodology based on ISO27001/2, NIST CSF </li>
<li>Experience with GRC tools, ticketing systems like JIRA, collaboration tools like SharePoint </li>
<li>Experience in checking and responding to government agencies such as KISA, the Ministry of Defense, the Personal Information Protection Commission, and the Financial Supervisory Authority </li>
<li>Passionate about identifying and improving information security </li>
<li>Strong and effective communication skills </li>
</ul>

Preferred Qualifications: 
<ul>
<li> Understanding and experience in laws and regulations such as information security or personal information protection in Korea </li>
<li>C-suite and Board Of Directors reporting experience </li>
<li>Inspection of basic compliance matters such as the Personal Information Protection Act, the Traditional Network Act, and the Electronic Financial Transaction Act </li>
<li>Security certification holders (CISA, CISSP, ISO27001, CISM, Other) </li>
<li>AWS security experience </li>
</ul>

Information Security GRC Senior Specialist

Worldcoin

<h3>About the Company:</h3>
Worldcoin (www.worldcoin.org) is an open-source protocol, supported by a global community of developers, individuals, economists and technologists committed to expanding participation in, and access to, the global economy. Its community is united around core beliefs in the inherent worth and equality of every individual, the right to personal privacy, and open and public collaboration. These beliefs are reflected in what the community is building: a public utility to connect everyone to the global economy.
The Worldcoin Foundation (www.worldcoin.foundation) is the protocol’s steward and will support and grow the Worldcoin community until it becomes self-sufficient.  Tools for Humanity (www.toolsforhumanity.com)  is a global hardware and software development company.  It helped launch Worldcoin and continues to provide support to the Foundation, in addition to operating the World App.<h3>About the Opportunity:</h3>
Security at Tools for Humanity is not merely a procedural obligation, but an integral part of our mission. In this role you will have the opportunity to scale up and lead several security teams and create the vision for the company wide security strategy. Your areas of responsibility range from hardware security over infrastructure security and office security to blockchain security. In this role, you will:
<ul>
<li>Create the security roadmap by establishing clear priorities based on risk analysis.</li>
<li>Lead the recruitment, development, and retention of a highly skilled security team.</li>
<li>Foster a strong security culture within the organization by promoting security awareness and best practices.</li>
<li>Formulate and enforce security policies, protocols, standards, and guidelines across the organization.</li>
<li>Proactively identify and mitigate evolving threats in line with the dynamic nature of the security landscape.</li>
<li>Act as the company's security ambassador at public forums and conferences, highlighting our commitment to robust security measures.</li>
<li>Advise senior leadership on information security risks, proposing effective strategies to minimize these risks.</li>
<li>Oversee internal and external security measures, such as bug bounty programs and various security audits like penetration testing, black box, and white box testing.</li>
<li>Facilitate security training and awareness programs to equip all employees with a strong understanding of potential security risks and their role in minimizing these risks.</li>
<li>Collaborate with other senior leadership to ensure the integration of security considerations in all project and product development stages.</li>
</ul>
<h3>About You:</h3>
<ul>
<li>Strong analytical thinking, communication, and leadership skills</li>
<li>Strong ethical and moral values</li>
<li>Energized by working in a fast-paced, collaborative environment</li>
<li>Proven experience in leading and managing information security teams.</li>
<li>Expertise in various security technologies and engineering domains, including application security, cloud security, IT security and physical security.</li>
<li>Proven track record in recruiting and developing high-quality team members.</li>
<li>Proficiency in risk assessment methodologies and able to apply them in diverse contexts.</li>
<li>Leadership abilities: Thrives in a leadership role, isn't afraid to make tough decisions, fosters open and challenging debates, provides guidance in crises, confronts adversity bravely, and is driven by difficult challenges.</li>
<li>Prioritization skills: Excels in focusing on what's important, swiftly identifies critical tasks, removes obstacles, and maintains focus.</li>
<li>Prior fast-growing startup experience</li>
</ul>

Head of Security

We are looking for an experienced and knowledgeable IT Security Governance to join our Security Engineer team. You will be responsible for the management and advances of our security policies, standards, and procedures.  Responsibilities:<ul> <li>Ensure the strategy and implementation of information security in accordance with the needs &amp; applicable regulations </li> <li>Develop an information security framework and architecture in accordance with the company's needs </li> <li>Develop and maintain policies, standards, and procedures that support the information security framework in accordance with best practices and applicable regulations. </li> <li>Actively identify, analyze, measure, provide control recommendations, and monitor follow-up on risk control &amp; information security. </li> <li>Carry out regular evaluations of the implementation of IT security management policies, standards, and procedures  </li> </ul>Requirements<ul> <li>Bachelor’s Degree in Software Engineering / Computer Science / Information Technology / equivalent or relevant work experience.  </li> <li>Minimum 2 years experiences in IT industry  </li> <li>Familiar and able to implement and lead various best practices &amp; regulations for IT Security &amp; Cyber Security such as ISO 27000, CSA Star, CIS, NIST, GDPR, etc.  </li> <li>Familiar with Security compliance or assessment tools</li> <li>Having experience implement ISO 27017 and 27018 is a plus point </li> <li>Familiar with cloud environment is a plus point.  </li> </ul>Benefits<ul> <li>Competitive salary</li> <li>14 Days of annual leave</li> <li>BPJS &amp; Private Health Insurance</li> <li>Various extracurricular activities (sports, music, etc.)</li> <li>Opportunity to work in Singapore Headquarter</li> <li>Young, dynamic and vibrant atmosphere</li> <li>All around snacks, drinks, coffee, tea and regular culinary day</li> <li>Located in the center of Bandung.</li> </ul>By submitting your resume/CV, you consent and agree to allow the information provided to be used and processed by or on behalf of Xtremax Pte Ltd for purposes related to your registration of interest in current or future employment with us for the processing of your application for employment. The personal data held by us relating to your application will be kept strictly confidential and in accordance with the PDPA. You may also refer to our Privacy Policy for more details here: https://www.xtremax.com/privacy-policyThe ideal candidate will be responsible for developing high-quality applications. They will also be responsible for designing and implementing testable and scalable code.

Security Engineer - Governance (Indonesia)

Diligent Corporation

About Us
Diligent is the global leader in modern governance, providing SaaS solutions across governance, risk, compliance, audit and ESG. Empowering more than 1 million users and 700,000 board members and leaders with a holistic view of their organization’s GRC practices so they can make better decisions, faster. No matter the challenge.
At Diligent, you are an agent of positive change. You are joining a team of passionate, smart, creative people who not only want to help build the software company of the future, but who want to make the world a more sustainable, equitable and better place. Be a part of a global community on a mission to make a real impact.
Learn more at diligent.com.Position Overview: 
The Application Security Engineer will be a member of the Security group and will work closely with Product and Software Development teams. The Application Security team at Diligent is primarily responsible with overseeing secure development, creating best practices and processes for the technology organization, and maintaining security tools and procedures.
The ideal candidate will come from a development, security engineer, QA, or DevOps background with a strong passion and interest in security. This person should be self-motivated, enjoy security work, and thrive working in a global, dynamic, growing company environment.
Key Responsibilities:
<ul>
<li>Own vulnerability management and mitigation approaches with product teams</li>
<li>Perform security-critical code reviews, and application security testing</li>
<li>Contribute to security policy, standards, and guidelines related to application security</li>
<li>Research emerging technologies and maintain awareness of current security risks</li>
</ul>
Required Experience/Skills:
<ul>
<li>Knowledge of security concepts for Internet technologies, architectures, and protocols</li>
<li>Excellent understanding of OWASP Top Ten and CWE/SANS Top 25 vulnerabilities and mitigations</li>
<li>Experience with code analysis and/or penetration testing tools</li>
<li>Understanding of CI/CD pipelines</li>
<li>Experience with container technologies</li>
<li>Experience with automation</li>
</ul>What Diligent Offers You 
<ul>
<li>Creativity is ingrained in our culture. We are innovative collaborators by nature. We thrive in exploring how things can be differently both in our internal processes and to help our clients</li>
<li>We care about our people. Diligent offers a flexible work environment, global days of service, comprehensive health benefits, meeting free days, generous time off policy and wellness programs to name a few</li>
<li>We have teams all over the world. We may be headquartered in New York City, but we have office hubs in Washington D.C., Vancouver, London, Galway, Budapest, Munich, Bengaluru, and Sydney.</li>
<li>Diversity is important to us. Growing, maintaining and promoting a diverse team is a top priority for us. We foster and encourage diversity through our Employee Resource Groups and provide access to resources and education to support the education of our team, facilitate dialogue, and foster understanding.</li>
</ul>
Diligent created the modern governance movement. Our world-changing idea is to empower leaders with the technology, insights and connections they need to drive greater impact and accountability – to lead with purpose. Our employees are passionate, smart, and creative people who not only want to help build the software company of the future, but who want to make the world a more sustainable, equitable and better place. 
Headquartered in New York, Diligent has offices in Washington D.C., Baltimore, London, Galway, Budapest, Vancouver, Bengaluru, Munich, and Sydney. 

We are a drug free workplace. Diligent is proud to be an equal opportunity employer. We do not discriminate based on race, color, religious creed, sex, national origin, ancestry, citizenship status, pregnancy, childbirth, physical disability, mental disability, age, military status, protected veteran status, marital status, registered domestic partner or civil union status, gender (including sex stereotyping and gender identity or expression), medical condition (including, but not limited to, cancer related or HIV/AIDS related), genetic information, or sexual orientation in accordance with applicable federal, state and local laws. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Diligent's EEO Policy and Know Your Rights. We are committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, you may contact us at recruitment@diligent.com.
To all recruitment agencies: Diligent does not accept unsolicited agency resumes. Please do not forward resumes to our jobs alias, Diligent employees or any other organization location. Diligent is not responsible for any fees related to unsolicited resumes.

Application Security Engineer

PointClickCare

For more than 20 years, PointClickCare has been the backbone of senior care. We’ve amassed the richest senior care dataset making our market density untouchable and our connections to the healthcare ecosystem exponentially more powerful than those of any other platform. With Collective Medical &amp; Audacious Inquiry, we’ve become the most expansive, full-continuum care collaboration network, offering care teams immediate, point-of-care access to deep, real-time insights at every stage of a patient’s journey.For more information on PointClickCare, please connect with us on Glassdoor and LinkedIn.Position SummaryAs part of the Professional Services, Practice Delivery team, the Software Implementation Consultant II, will act as the principal liaison with the customer to implement leading practices to optimize workflows and drive business outcomes within the Long-Term and Post-Acute Care (LTPAC) settings. The Consultant will be diligent, customer focused, agile, transparent and a strong communicator. This individual will build relationships with our customers to become the trusted advisor, guiding them on recommended business practices and use of the solution, that will drive value and impact for their business. The successful candidate will lead an in-depth analysis of the customers’ desired business process, operations and practices and lead the configuration and setup. Working as part of a high performance, cross collaborative team you will be an integral driver of customer value and solution adoption.  The applicant should expect up to 30%  travel to customer sites and regional meetings.  The Software Implementation Consultant will report to the Manager, Professional Services.
<h3>Key Responsibilities</h3>
<ul>
<li>Principal implementation liaison on the project team documenting customer requirements, translating technical requirements into configuration setup,  business processes and goals </li><li>Lead a detailed business discovery developing recommendations to execute a delivery approach that will drive outcomes and deliver value </li><li>Translate technical requirements and execute system configuration setup(more complex than entry) </li><li>Ensure data quality, integrity, and security requirements for all customer databases</li><li>Assess and validate the implementation plan and manage communication among project stakeholders </li><li>Troubleshoot and resolve configuration issues with great attention to detail </li><li>Update and maintain training databases to incorporate new product releases, enhancements, and leading practices</li><li>Identify and suggest configuration improvements to drive efficiency and enhanced customer outcomes </li><li>Establish and maintain stakeholder relationships by utilizing excellent communication and collaboration skills</li><li>In collaboration with the project team, proactively anticipate, identify, and communicate issues, risks, escalations, timelines and delays to ensure an exceptional customer experience and successful implementation </li><li>Support customer change management strategies, including the plans for user readiness and acceptance.</li><li>Develop and maintain expertise and knowledge in multiple product offerings, including the knowledge of the end-to-end solution and product value outcomes</li><li>When needed, travel to customer on-site locations to lead and direct meetings and presentations (entry supports documentation)</li><li>CC – 50% configuration, 50% consulting</li></ul>
<h3>Required Experience</h3>
<ul>
<li>Post-secondary education in business or technology related field (preferred)</li><li>Excellent communication, organizational and collaboration skills</li><li>Previous experience configuring or implementing a software solution, database testing and end-user support, preferred</li><li>Strong analytical and problem-solving skills</li><li>Demonstrated attention to detail and quality validation process adherence</li><li>Consulting experience within a software organization performing workflow analysis and documenting and delivering recommendations to drive operational excellence </li><li>Experience working on a multiple project teams simultaneously balancing milestones and objectives efficiently and on time</li><li>Proven ability to take accountability for a project, demonstrating initiative, and delivering on </li><li>Self-starter, able to work independently, prioritize to deliver on time and adapt priorities and a flexible approach to sharing client insights</li><li>Must be results oriented, and demonstrate a can-do attitude with adaptability, problem-solving and critical thinking skills</li><li>2-4+ years in a software implementation role </li><li>Healthcare market experience,preferred</li></ul>It is the policy of PointClickCare to ensure equal employment opportunity without discrimination or harassment on the basis of race, religion, national origin, status, age, sex, sexual orientation, gender identity or expression, marital or domestic/civil partnership status, disability, veteran status, genetic information, or any other basis protected by law. PointClickCare welcomes and encourages applications from people with disabilities. Accommodations are available upon request for candidates taking part in all aspects of the selection process. Please contact recruitment@pointclickcare.com should you require any accommodations.When you apply for a position, your information is processed and stored with Lever, in accordance with Lever’s Privacy Policy. We use this information to evaluate your candidacy for the posted position. We also store this information, and may use it in relation to future positions to which you apply, or which we believe may be relevant to you given your background. When we have no ongoing legitimate business need to process your information, we will either delete or anonymize it.  If you have any questions about how PointClickCare uses or processes your information, or if you would like to ask to access, correct, or delete your information, please contact PointClickCare’s human resources team: recruitment@pointclickcare.com PointClickCare is committed to Information Security. By applying to this position, if hired, you commit to following our information security policies and procedures and making every effort to secure confidential and/or sensitive information.

(Canada) Software Implementation Consultant, Clinical

XOR Security

Job Description:
XOR Security is currently seeking a talented and ambitious self-starting, Mid Cloud SOC (Security Operations Center) Analyst for a challenging position supporting one of our premier clients who is performing a lift and shift to the Azure cloud. This is a unique opportunity for the right candidate to embed themselves into the next generation of operational environments which is now taking place across the US government. The existing team is a multi-faceted interdisciplinary set of experts with ever-increasing prowess in this unique environment. Our security operations project is aimed at establishing innovative techniques for a comprehensive, cloud-first network enclave defense, identifying the emerging threats, and detecting malicious activity using advanced toolsets provided in the Microsoft cloud security ecosystem. 
The ideal candidate will have hands-on experience as a SOC analyst performing Incident Response and Intrusion Detection on an operational Federal network, ideally having been migrated to a cloud environment, specifically, the Microsoft Sentinel SIEM and related security portals in Azure.  The candidate will monitor and analyze network traffic in these and other traditional network security toolsets, sign-ins, application endpoints and data lakes for security events, reporting any findings to Level II analysts and the SOC Lead.  The candidate will perform incident response to investigate and resolve security incidents which present themselves as alarms and those incidents which are a product of proactive investigations.  The candidate will be able to determine between false and true positives events, prioritizing them appropriately and ferrying them through the approved process from beginning to end.  Additionally, the candidate will perform, or review, root cause analysis efforts following incident recovery.  The candidate will compose security alert notifications and other communications on behalf of the SOC.
In addition, the candidate will remain up to date with current vulnerabilities, attacks, and countermeasures and develop follow-up action plans to resolve reportable issues and communicate with the other technologists to address security threats and incidents.  Also, the candidate will continually develop new use cases for automation and tuning of security tools, define and create privacy and security reportable issues metrics and reports.  The candidate will need to contribute to security strategy and security posture by identifying security gaps, evaluating and implementing enhancements.  The ideal candidate will possess a strong technical understanding of log and monitoring management systems, security event monitoring systems, network-based and host-based intrusion detection systems, security system technologies, malware detection and enterprise-level antivirus solutions/systems, VPN technologies and encryptions standards.
Location:
Washington D.C., USA
***On site once or twice a week
Skills and Qualifications:
Required Qualifications:
<ul>
<li>Bachelor’s Degree in Computer Science, Computer Engineering, Information Systems or equivalent experience</li>
<li>An industry technical certification such as GCIH, MS-SC200 or equivalent</li>
<li>3 years of experience with tools such as Active Directory, Azure Active Directory, AD Connect, SAML, Kerberos, Cisco IOS, MS Server, Azure cloud environments, Incident Handling, Threat hunting experience, fundamental knowledge of IEEE 7 layers</li>
<li>Experience with deployment and documentation of enterprise project management and change management processes</li>
<li>Ability to identify solutions to potential network issues/embrace network simplification and strengthened security</li>
<li>Ability to conduct event triage and analysis and incident investigation</li>
<li>Write threat reports and incident reports</li>
<li>Read and ingest various govt. regulations for application to agency environment</li>
<li>One to two  (1-2) years of experience in network defense environments</li>
</ul>
Desired Qualifications:
<ul>
<li>Understanding of command line scripting and implementation (e.g., Python, Powershell)</li>
<li>Ability to write latest content/searches/scripts (e.g., Create dashboards, Sentinel alerts, , Python scripts, Powershell scripts)</li>
<li>Familiarity with differences in on-prem OPSEC in relation to cloud-based security</li>
<li>Strong understanding of networking (TCP Flags, TCP Handshake, IP addressing, Firewalls, Proxy, IDS, IPS)</li>
<li>Ability to perform Netflow / packet capture (PCAP) analysis</li>
<li>Experience with cyber threat hunting</li>
</ul>
Closing Statement:
XOR Security offers a very competitive benefits package including health insurance coverage from the first day of employment, 401k with a vested company match, vacation, and supplemental insurance benefits.
XOR Security is an Equal Opportunity Employer (EOE). M/F/D/V.
Citizenship Clearance RequirementApplicants selected may be subject to a government security investigation and must meet eligibility requirements - US CITIZENSHIP and PUBLIC TRUST CLEARANCE REQUIRED.

Cloud(Azure) Cyber Security Analyst

Atlassian

Working at AtlassianAtlassian can hire people in any country where we have a legal entity. Assuming you have eligible working rights and a sufficient time zone overlap with your team, you can choose to work remotely or from an office (unless it’s necessary for your role to be performed in the office). Interviews and onboarding are conducted virtually, a part of being a distributed-first company.Our office is in Bengaluru, but we offer flexibility for eligible candidates to work remotely across India. Whatever your preference—working from home, an office, or in between— you can choose the place that’s best for your work and your lifestyle.Your future teamOur Talent Acquisition Operations Team is comprised of people with backgrounds in Recruiting and Operations support. We help the Recruiting team in Sourcing, Screening, Scheduling interviews and provide Pre-Hire administrative support to develop a positive customer experience to recruiters, interviewers, candidates and new hires.We're hiring a People Operations Associate, reporting to the People Operations Lead. You are a People Operations Associate with a background in Recruiting and Pre-Hire administrative support.<h3>What you'll do</h3><ul><ul><li>You will develop lasting relationships within Atlassian – with recruiters, interviewers and the hiring managers</li><li>You will partner with Recruiters to support them in screening and scheduling interviews</li><li>You will provide sourcing support by attracting passive and active talent within the designated markets to create and maintain a healthy pipeline of candidates for our active and incoming positions.</li><li>You will provide Pre-Hire administrative support</li><li>You will improve the integrity of data in our Applicant Tracking System</li><li>You will share your awesome ideas to the team and collaborate on impactful projects</li></ul></ul><h3>Your background</h3><ul><ul><li>You have at least 1 year of experience in Talent Acquisition support</li><li>You have excellent verbal and written English skills</li><li>You experienced supporting global teams</li><li>You love technology and have experienced working with HR Systems (Workday, ICiMs)</li></ul></ul>Our perks &amp; benefitsTo support you at work and play, our <a href="https://www.atlassian.com/company/careers/resources/perk-and-benefits/global" rel="noopener noreferrer nofollow ugc" target="_blank">perks and benefits </a>include ample time off, an annual education budget, paid volunteer days, and so much more.About AtlassianThe world’s best teams work better together with Atlassian. From medicine and space travel, to disaster response and pizza deliveries, Atlassian software products help teams all over the planet. At Atlassian, we're motivated by a common goal: <a href="https://www.atlassian.com/company" rel="noopener noreferrer nofollow ugc" target="_blank">to unleash the potential of every team</a>.We believe that the unique contributions of all Atlassians create our success. To ensure that our products and culture continue to incorporate everyone's perspectives and experience, we never discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status. All your information will be kept confidential according to EEO guidelines.To learn more about our culture and hiring process, explore our <a href="https://www.atlassian.com/company/careers/resources" rel="noopener noreferrer nofollow ugc" target="_blank">Candidate Resource Hub</a>.

Bangalore

People Operations Associate- Talent Acquisition

Working at AtlassianAtlassian can hire people in any country where we have a legal entity. Assuming you have eligible working rights and a sufficient time zone overlap with your team, you can choose to work remotely or from an office (unless it’s necessary for your role to be performed in the office). Interviews and onboarding are conducted virtually, a part of being a distributed-first company.Job descriptionAtlassian is revolutionizing the software development industry and helping teams all around the world like Nasa, Nike, Pixar and Tesla to advance humanity through the power of software &amp; collaboration. We have over 250,000 customers worldwide, and the Enterprise Development Representatives (EDR’s) help the largest of those accounts identify opportunities to scale their investments in Atlassian.This Inside Sales role is fully remote. Our Enterprise Development Representatives partner with our Enterprise Advocates (Account Executives) to build and implement an effective sales pipeline strategy to drive adoption of select products and services to our Enterprise customer base. At the same time, we want to ensure our EDR’s operate with a sense of grace and professionalism that ensures a delightful customer experience. All of this is done in tight coordination with our Sales Operations &amp; Marketing organizations.Enterprise Development Representatives are customer-focused and creative. They are able to think strategically and effectively adjust their approach to meet the needs of our customers. You need to have an understanding of the Enterprise Sales process &amp; be able to thrive in Atlassian’s unique sales model.<h3>We are looking for:</h3><ul><ul><li> a self-motivated, proactive, organized, and self-sufficient team-player to join our team</li><li>You are customer-focused, creative, an effective communicator in both written and verbal forms, and analytical by nature</li><li>You have at least 1 year of experience in software sales and a track record of achieving targets in a lead-generation role</li><li>Experience with our portfolio is a preference</li><li>You can effectively build pipeline in coordination with our Enterprise Advocate and Enterprise Marketing teams.</li><li>You are someone who wants to help us challenge the traditional sales model and optimize sales processes</li><li>You love working in a fast-paced international environment, take the initiative to get stuff done or try something new, and love sharing your findings with your team to ensure we all benefit from your knowledge</li></ul></ul><h3>In this role, you'll get to</h3><ul><ul><li>Work closely with an enterprise advocate on following up on inbound leads</li><li>Qualify new opportunities </li></ul></ul><h3>On your first day, we'll expect you to have:</h3><ul><ul><li>A minimum of one year business development or closely related experience</li></ul></ul>More about our teamThe Enterprise Development team works remotely and from our offices in Sydney, Austin, Amsterdam, New York and Boston. We worked in a variety of roles in well-established Fortune 500 companies as well as exciting start-ups. We share a commitment to reach our numbers and ambition to make our team successful. However, above all we believe in the Atlassian values and want to use them as our compass in building out a revolutionary sales model. We are looking forward to have you join the team!CompensationAt Atlassian, we tie our base pay ranges to role and level. In the United States, that means your base pay ranges will fall into one of three geographic pay zones depending on your location. Our current base pay ranges for new hires in each zone are:Zone A: $60,750 - $93,200Zone B: $54,675 - $83,900Zone C: $50,423 - $77,400Within each range, base pay is ultimately determined based on your skills, expertise, and experience. This role may also be eligible for benefits, bonuses, commissions, and/or equity.Please visit <a href="http://go.atlassian.com/payzones" rel="noopener noreferrer nofollow ugc" target="_blank">go.atlassian.com/payzones</a> for more information on which locations are included in each of our geographic pay zones. However, please confirm the zone for your specific location with your recruiter.Our perks &amp; benefitsTo support you at work and play, our <a href="https://www.atlassian.com/company/careers/resources/perk-and-benefits/global" rel="noopener noreferrer nofollow ugc" target="_blank">perks and benefits </a>include ample time off, an annual education budget, paid volunteer days, and so much more.About AtlassianThe world’s best teams work better together with Atlassian. From medicine and space travel, to disaster response and pizza deliveries, Atlassian software products help teams all over the planet. At Atlassian, we're motivated by a common goal: <a href="https://www.atlassian.com/company" rel="noopener noreferrer nofollow ugc" target="_blank">to unleash the potential of every team</a>.We believe that the unique contributions of all Atlassians create our success. To ensure that our products and culture continue to incorporate everyone's perspectives and experience, we never discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status. All your information will be kept confidential according to EEO guidelines.To learn more about our culture and hiring process, explore our <a href="https://www.atlassian.com/company/careers/resources" rel="noopener noreferrer nofollow ugc" target="_blank">Candidate Resource Hub</a>.

Austin

Enterprise Development Representative

Working at AtlassianAtlassian can hire people in any country where we have a legal entity. Assuming you have eligible working rights and a sufficient time zone overlap with your team, you can choose to work remotely or from an office (unless it’s necessary for your role to be performed in the office). Interviews and onboarding are conducted virtually, a part of being a distributed-first company.To help our teams work together effectively, this role is fully remote but requires you to be located in the Pacific Standard Time Zone.We're looking for a Senior Engineering Manager to lead a team of 15 backend engineers. You'll be part of the Data Management Platform Team and will report to the Head of Engineering based in the US. We are expanding from Australia, and as one of the first members, you will shape the culture and strategy of the organization. We provision and operate data stores to satisfy Atlassian's storage needs. The services you will develop and operate are at the core of our infrastructure and require high quality while moving fast to keep up with our customers' needs.<h3>What you'll do:</h3><ul><ul><li>Be responsible for high-quality software delivery, grow individuals and groom leaders on the team and contribute to architecture</li><li>Work with leadership and partners to strategize, evolve a roadmap and provide high quality solutions</li><li>Identify blockers, goals, success metrics ensuring awareness, OKR/roadmap awareness, and expectations</li><li>Manage projects, process, partners and timelines</li><li>Manage a growing team of Tech Leads and Software Engineers</li><li>Hire a team of Senior and Principal Engineers </li></ul></ul><h3>Your background:</h3><ul><ul><li>5+ years of experience managing software engineering teams</li><li>Bachelor's or Master's degree with a preference for Computer Science degree</li><li>Expertise with one or more prominent languages such as Java, Kotlin, Go, or Scala is required.</li><li>Understanding of SaaS, PaaS, IaaS industry with hands-on experience with public cloud offerings (e.g., AWS, GCP, or Azure)</li><li>Knowledge to evaluate trade-offs between correctness, robustness, performance, space and time</li></ul></ul><h3>If you've got these skills, even better:</h3><ul><ul><li>Proficiency in K8s and Cloud Native technologies</li><li>Experience building and operating world-scale storage systems</li><li>Proficiency in Elastic Search, RDS, Aurora, or DynamoDB</li></ul></ul>CompensationAt Atlassian, we tie our base pay ranges to role and level. In the United States, that means your base pay ranges will fall into one of three geographic pay zones depending on your location. Our current base pay ranges for new hires in each zone are:Zone A: $187,500 - $287,500Zone B: $168,700 - $258,800Zone C: $155,600 - $238,700Within each range, base pay is ultimately determined based on your skills, expertise, and experience. This role may also be eligible for benefits, bonuses, commissions, and/or equity.Please visit <a href="http://go.atlassian.com/payzones" rel="noopener noreferrer nofollow ugc" target="_blank">go.atlassian.com/payzones</a> for more information on which locations are included in each of our geographic pay zones. However, please confirm the zone for your specific location with your recruiter.Our perks &amp; benefitsTo support you at work and play, our <a href="https://www.atlassian.com/company/careers/resources/perk-and-benefits/global" rel="noopener noreferrer nofollow ugc" target="_blank">perks and benefits </a>include ample time off, an annual education budget, paid volunteer days, and so much more.About AtlassianThe world’s best teams work better together with Atlassian. From medicine and space travel, to disaster response and pizza deliveries, Atlassian software products help teams all over the planet. At Atlassian, we're motivated by a common goal: <a href="https://www.atlassian.com/company" rel="noopener noreferrer nofollow ugc" target="_blank">to unleash the potential of every team</a>.We believe that the unique contributions of all Atlassians create our success. To ensure that our products and culture continue to incorporate everyone's perspectives and experience, we never discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status. All your information will be kept confidential according to EEO guidelines.To learn more about our culture and hiring process, explore our <a href="https://www.atlassian.com/company/careers/resources" rel="noopener noreferrer nofollow ugc" target="_blank">Candidate Resource Hub</a>.

Mountain View South

Senior Engineering Manager - Cloud, Scale

Ninja Van

Ninja Van is a tech-enabled logistics company on a mission to provide hassle-free delivery services for businesses of all sizes across Southeast Asia. Launched in 2014, we started operations in Singapore and have become the region's largest and fastest growing last-mile logistics company, partnering with over 35,000 merchants and delivering more than 1,000 parcels every minute across six countries. In January 2018, we raised one of the largest Series C rounds ever in Southeast Asia and are well-positioned for our next phase of rapid growth.At our core, we are a technology company that is disrupting a massive industry with cutting-edge software and operational concepts. Powered by algorithm-based optimisation, dynamic routing, end-to-end tracking and a data-driven approach, we provide best-of-class delivery services that delight both the shippers and end customers. But we are just getting started! We have much room for improvement and many ideas that will further shape the industry.You will be responsible for setting up our location information security capabilities, while advising the country management on information security issues.
<h3>Requirements</h3>
<ul>
<li>Manage delivery of Group Information Security tools and capabilities in PH </li><li>Liaise with HODs to align on requirements and project delivery timeline</li><li>Coordinate incident response with Group Information Security</li><li>investigate local security incidents to determine if it is a true or false positive </li><li>Lead and / or participate in post incident reviews</li><li>Run local security training programs, adapting group resource where relevant</li><li>Communicate and ensure implementation of group Information Security policies, procedures and processes locally</li><li>Adapt security procedures as per local needs where required</li><li>Support local team(s) with questions related to regulatory compliance and IT / Information Security audits</li><li>Manage delivery of Group fraud initiatives in PH</li><li>Support incident response and fraud investigations where necessary</li><li>Provide digital forensics support for cases within and outside of PH</li><li>Develop investigation standards for PH together with Group Information Security</li></ul>
<h3>Qualifications</h3>
<ul>
<li>Bachelors in Information Security / STEM (science, technology, engineering and mathematics) degree</li><li>At least 6+ years of experience in IT / Information Security</li><li>Experience in leading IT security, attestation and assurance audits locally </li><li>Experience in incident response, cybersecurity investigations and / or digital forensics</li><li>Effective influencing and negotiating skills and demonstrated sensitivity to working and interacting with senior stakeholders</li><li>Ability to work independently</li></ul>Submit a job applicationBy applying to the job, you acknowledge that you have read, understood and agreed to our Privacy Policy Notice (the “Notice”) and consent to the collection, use and/or disclosure of your personal data by Ninja Express Tech Philippines, Inc. (the “Company”) for the purposes set out in the Notice. In the event that your job application or personal data was received from any third party pursuant to the purposes set out in the Notice, you warrant that such third party has been duly authorised by you to disclose your personal data to us for the purposes set out in the the Notice.

Country Information Security Lead

The roleThe Security Analyst specializing in Email Triage and Vulnerability Management is a crucial role within the group security team, focused on managing company risk exposure, they will investigate and analyse suspicious emails, triage security incidents, and collaborate with incident response teams for timely handling. The analyst conducts comprehensive vulnerability assessments, coordinates remediation efforts. They stay updated on the latest email threats and apply their knowledge to enhance email security. Clear and concise reporting on email triage, vulnerability assessments, and remediation progress is a key responsibility. The analyst collaborates with cross-functional teams, provides guidance on effective mitigation strategies. They play a proactive role in identifying and addressing security threats and vulnerabilities. This role combines email incident response, vulnerability management, and other security analytical work as required. The Security Analyst's expertise helps maintain a robust security posture and safeguards the organization's digital assets.This role can be based across Brisbane, Melbourne, Sydney and Adelaide. Key Responsibilities. <ul> <li>Perform vulnerability assessments and prioritize risks.</li> <li>Coordinate timely remediation with IT teams.</li> <li>Stay updated with security patches and ensure implementation.</li> <li>Generate concise vulnerability assessment reports.</li> <li>Provide guidance for effective mitigation strategies.</li> <li>Stay informed about emerging threats and trends.</li> <li>Perform triage of security incidents and emails.</li> <li>Analyse suspicious or malicious emails.</li> <li>Collaborate with incident response teams for actions.</li> <li>Coordinate response and resolution with stakeholders.</li> <li>Stay updated with email security threats and techniques.</li> <li>Provide guidance on email security best practices.</li> <li>Collaborate with IT teams for email security enhancements.</li> <li>Maintain documentation of email security incidents.</li> </ul>It is preferred the candidate is Au/NZ citizen and ability to gain defence clearance if required. The person:<ul> <li>Strong analytical skills and attention to detail</li> <li>Excellent problem-solving abilities</li> <li>Effective communication and interpersonal skills</li> <li>Ability to work collaboratively in a dynamic team environment.</li> <li>Proactive and self-motivated with a drive for continuous improvement</li> <li>Strong organizational and time management skills</li> <li>Ability to handle and prioritize multiple tasks efficiently.</li> <li>Familiarity with security frameworks and compliance requirements</li> <li>Up-to-date knowledge of emerging threats and trends in the field</li> <li>Ability to adapt to a dynamic and fast-paced work environment</li> <li>Strong ethical mindset and commitment to maintaining confidentiality</li> <li>Ability to remain calm and composed under pressure</li> <li>Continuous learning mindset and willingness to acquire new skills</li> </ul>The Finer Details We have over 6,900 people across our global offices, and generate an annual revenue of over $1.4 billion. This makes us one of Australasia’s largest professional IT services companies. We have extensive expertise in providing IT services, operating data centres, software engineering and application management, as well as payroll and customer service design and operations. Datacom is committed to hiring, developing and promoting the best talent from a diverse range of backgrounds. We are local at heart, yet world-class in capability. If you are keen to be part of a great team, please apply online! All applications will be treated in the strictest confidence.

Security Analyst L2

The leading job board for Cyber Security Jobs. Start your career in Information Security Industry. Jobs are updated daily.

Job Position and Company	Location	Tags	Posted
Principle Information Security Officer at Mendix	Full Time Manager
IT Security Consultant (Indonesia) at Xtremax	Full Time Consultant
Professional Services Field Consultant at Rubrik	Full Time Consultant Windows
Information Security Manager - GRC at Panorama Education	Remote Full Time Audit Manager
Cybersecurity Threat Hunter at Datacom	Full Time Incident Response Red Team
BP144ITSC5 - Information Technology Senior Consultant - Cleared at NiSUS Technologies	Full Time Consultant CCSP
Governance, Risk and Compliance (GRC) Analyst at Reltio	Full Time Audit Analyst
IT Security Policy Analyst/ISSO at AnaVation	Full Time Audit Analyst Incident Response
Cyber Defense Engineer - II at Upstox	Full Time Analyst Incident Response Windows
Information Security GRC Senior Specialist at Coupang	Full Time CISM
Head of Security at Worldcoin	Full Time Application Security
Security Engineer - Governance (Indonesia) at Xtremax	Full Time
Application Security Engineer at Diligent Corporation	Full Time Audit Application Security
(Canada) Software Implementation Consultant, Clinical at PointClickCare	Remote Full Time Consultant Manager Consulting
Cloud(Azure) Cyber Security Analyst at XOR Security	Full Time Soc Analyst Analyst Incident Response
People Operations Associate- Talent Acquisition at Atlassian	Remote Full Time
Enterprise Development Representative at Atlassian	Remote Full Time
Senior Engineering Manager - Cloud, Scale at Atlassian	Remote Full Time Manager
Country Information Security Lead at Ninja Van	Full Time Incident Response
Security Analyst L2 at Datacom	Full Time Analyst Incident Response

Cyber Security Jobs

968 Cyber Security Jobs found. Page 1 of 49

Subscribe to the weekly
Cyber Security Jobs Newsletter