Twilio

<h3>See yourself at Twilio</h3>
Join the team as our next Product Security Engineer
<h3>Who we are &amp; why we’re hiring</h3>
Twilio powers real-time business communications and data solutions that help <a href="https://customers.twilio.com/" rel="noopener noreferrer nofollow ugc" target="_blank">companies and developers worldwide</a> build better applications and customer experiences.
Although we're headquartered in San Francisco, we have presence throughout South America, Europe, Asia and Australia. We're on a journey to becoming a globally anti-racist, anti-oppressive, anti-bias company that actively opposes racism and all forms of oppression and bias. At Twilio, we support <a href="https://www.twilio.com/company/diversity" rel="noopener noreferrer nofollow ugc" target="_blank">diversity, equity &amp; inclusion</a> wherever we do business. We employ thousands of Twilions worldwide, and we're looking for more builders, creators, and visionaries to help fuel our growth momentum.
<h3>About the job</h3>
This position is needed to support the Product Security team’s security initiatives, and we’re seeking skilled security engineers who are eager to aid us in creating a more secure product. As a product security engineer at Twilio, you’ll collaborate with other security engineers and the rest of the engineering organization to develop tooling, processes, and services that enable our company to operate more securely while maintaining agility and flexibility.
<h3>Responsibilities</h3>
In this role, you’ll:
<ul>
<li>Assist in the development of security tools, automation, and frameworks to streamline security testing.</li>
<li>Participate in the team's on-call rotation to triage and address security vulnerabilities. This includes vulnerability analysis, validating and verifying fixes, and supporting engineering teams, among other responsibilities.</li>
<li>Conduct design reviews, threat modeling, and code reviews for upcoming features and products.</li>
<li>Stay updated on the latest security trends, vulnerabilities, and industry best practices to proactively address emerging threats.</li>
</ul>
<h3>Qualifications </h3>
Not all applicants will have skills that match a job description exactly. Twilio values diverse experiences in other industries, and we encourage everyone who meets the required qualifications to apply. While having “desired” qualifications make for a strong candidate, we encourage applicants with alternative experiences to also apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!
Required:
<ul>
<li>You have 3+ years of professional experience in Product Security or Vulnerability Assessments.</li>
<li>You have a solid understanding of software security principles, secure coding practices, common attack vectors and have experience with threat modeling</li>
<li>You can perform a code review and discover security problems. </li>
<li>You have experience with automation and are not afraid of software development</li>
<li>Excellent communication skills and ability to effectively collaborate with cross-functional teams.</li>
<li>You can manage a project from start to finish by setting goals, defining scope, and determining deliverables.</li>
<li>You can break down complex security problems into measurable and solvable pieces with timelines and milestones to ensure timely completion.</li>
</ul>
Desired:
<ul>
<li>You have familiarity with AWS, Docker, Golang, Node.js - huge plus</li>
<li>You have experience working in enterprise software and SaaS domains</li>
<li>Knowledge of code scanning tools including Static Application Security Testing (SAST) engines or Software Composition Analysis (SCA)</li>
<li>You have run a bug bounty program </li>
<li>You’re involved in the InfoSec community. </li>
<li>Is willing to share their projects with the wider application security community through open source, blogs, podcasts, and conference talks.</li>
</ul>
<h3>Location </h3>
This role will be remote and based in the USA.
Approximately &lt;5% travel is anticipated. Travel is not required, however there may be some occasional travel opportunities due to meetings, conferences, etc.
<h3>What We Offer</h3>
There are many benefits to working at Twilio, including, in addition to competitive pay, things like generous time-off, ample parental and wellness leave, healthcare, a retirement savings program, and much more. Offerings vary by location.
<h3>Twilio thinks big. Do you?</h3>
We like to solve problems, take initiative, pitch in when needed, and are always up for trying new things. That's why we seek out colleagues who embody our values — something we call<a href="https://www.twilio.com/company/values" rel="noopener noreferrer nofollow ugc" target="_blank"> Twilio Magic</a>. Additionally, we empower employees to build<a href="https://www.twilio.org/impact-fund/" rel="noopener noreferrer nofollow ugc" target="_blank"> positive change in their communities</a> by supporting their volunteering and donation efforts.
So, if you're ready to unleash your full potential, do your best work, and be the best version of yourself, apply now!
If this role isn't what you're looking for, <a href="https://www.twilio.com/company/jobs#open-positions" rel="noopener noreferrer nofollow ugc" target="_blank">please consider other open positions</a>.
The estimated pay ranges for this role are as follows:
<ul>
<li>Based in Colorado: $99,000 - $124,000</li>
<li>Based in New York, Washington State or California (outside the San Francisco Bay Area): $105,000 - $131,500</li>
<li>This role may be eligible to participate in Twilio’s equity plan. All roles are eligible for the following benefits: health care insurance, 401(k) retirement account, paid sick time, paid personal time off, paid parental leave.</li>
</ul>
The successful candidate’s starting <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location within the state. 




Twilio is proud to be an equal opportunity employer. Twilio is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Additionally, Twilio participates in the E-Verify program in certain locations, as required by law.
Twilio is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please contact us at <a href="mailto:accommodation@twilio.com" rel="noopener noreferrer nofollow ugc" target="_blank">accommodation@twilio.com</a>.

Product Security Engineer

Rackspace

FLSA Status: Exempt H1-B Status: Not Eligible for Sponsorship  Job Family Summary The Full Stack Software Engineer uses initiative and standard programming practices to ensure the stability and security of Rackspace’s automated solutions. Provides a high level of technical support through the ownership of complex automations that enable Rackspace to better serve our internal and external customers. Applies creative problem-solving techniques to identify the source of problems, while at the same time keeping these customer aware of every step along the way. Responsible for adhering to company security policies and procedures and any other relevant policies and standards as directed.  Career Level Summary ·       Requires in-depth conceptual and practical knowledge in own job discipline and basic knowledge of related job disciplines·       Solves complex problems·       Works independently, receives minimal guidance·       May lead projects or project steps within a broader project or may have accountability for on-going activities or objectives·       Acts as a resource for colleagues with less experienceCritical Competencies·       Systems Thinking: Takes a whole systems approach to analyze issues and implements holistic solutions by ensuring that linkages between structure, people, process and technology are made·       Idea Creation: Designs completely new solutions, methods and products, where nothing existed prior Key Responsibilities ·       Lead the development and implementation of system enhancements that will improve the capabilities, performance, and reliability of automations ·       Define, design, and implement automated solutions ·       Build and support automations for deployment, diagnostics, and remediations run on customer devices including bulk and on demand solutions for end-user use ·       Create and oversee testing plans and test against and document automation scripts and programs ·       Design and develop automation scripts and programs in support of Rackspace and its customers ·       Create a series of automated actions that will allow for faster deployments and service restoration for internal systems and tools ·       Develop against current versions of the platforms supported by Rackspace ·       Contribute and develop new and alternate ideas, approaches, and designs to evolve own feature area or to solve problems encountered in own feature area ·       Focus on a specific feature area or component ·       Influences functionalities that make broad contribution to our product and service offerings ·       Work within team to ensure projects and goals are being communicated and to reduce duplication of efforts ·       Collaborate and share knowledge with other Engineers and Administrators on the support floor  Person Specification Knowledge ·       Strong knowledge of Network fundamentals, including diagnostics with OS or Netsec system tools·       Strong knowledge of SMTP, and TCP/IP·       Strong knowledge of DNS, including diagnostics with system tools·       Strong knowledge of Docker and/or Kubernetes and its use in a production environment·       Strong knowledge of developer supporting tools such as various VCS (GitHub, Git, etc.)·       Strong development competency in Python·       Strong knowledge working with CI/CD pipelines (Jenkins, Travis, etc.) and version control systems such as Git·       Strong knowledge of Project Management/Agile methodologies·       Strong understanding of services and protocols commonly used in hosting environments: web servers, database servers, mail servers, name servers·       Strong knowledge in the application of current and emerging network software and hardware technology and protocols·       Requires in-depth conceptual and practical knowledge in own job discipline and basic knowledge of related job disciplines ·       Has knowledge of best practices and how own area integrates with others; is aware of the competition and the factors that differentiate them in the marketSkills ·       Passionate about technology and has a desire to constantly expand technical knowledge·       Ability to resolve a wide range of issues in imaginative as well as practical ways·       Detail-oriented in documenting information and practice good follow through techniques·       Able to handle multiple tasks and prioritize work under pressure·       Demonstrate sound problem-solving skills coupled with a desire to take on responsibility·       Strong written and verbal communication skills, both highly technical and non-technical·       Ability to make appropriate decisions considering the relative costs and benefits of potential actionsEducation Required·       Bachelor’s degree in Computer Science, Management Information Systems, or a related technical field·       At the Manager's discretion, 4 years of additional related experience may substitute for the degree requirement; if substitution allowed, regional equivalent to High School Diploma is required.Certifications ·       Desired o   Netsec Platform Certification (Cisco, Palo Alto, Etc,..)·       Preferred: o    Specialist Certifications that apply to role including development tools and platforms Experience Required·       5 - 7 years of technical engineering and automation experience·       A minimum of 3 years of automation engineering experience with Netsec deployment, diagnostics, and remediationsPhysical Demands ·       General office environment: no special physical demands required·       May require long periods sitting and viewing a computer monitor·       May require work on non-traditional shifts·       Schedule flexibility to include working weekends and/or evenings and holidays as required by the business for 24/7 operations·       A willingness to work weekends and/or holidays when required as the business dictatesTravel ·       Occasional domestic travel, less than 10%    The above information has been designed to indicate the general nature and level of work performed by employees in this classification.  It is not designed to contain or to be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of the employee assigned to this job. Last Updated: September 01 ,2020Created: June 30 ,2020   About Rackspace TechnologyWe are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.  More on Rackspace TechnologyThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

India

Python Developer II / III

Rackspace Technology is a leading provider of expertise and managed services across all the major public and private cloud technologies. We’ve evolved Fanatical Support to encompass the entire customer journey — providing Fanatical Experience™ from first consultation to daily operations. Our passionate experts combine the power of proactive, always-on service and expertise with best-in-class tools and automation to deliver technology when and how our customers need it.Using cloud-native approaches based on leading DevOps practices, we work at the forefront of technology to help organisations modernize applications and data, build in the leading security solutions and deploy everything on the right cloud infrastructure for maximum effectiveness. We are seeking a Senior DevOps Engineer with skills in AWS to deliver cloud transformational outcomes into our clients. Ideally, you will have experience working in a consulting role, leading other engineers to deliver automated, secure and robust cloud infrastructure solutions. We like people who get involved in all levels of technical discussions, from architecture to hands on coding. We are looking for a strong technical expert, with experience leading world-class teams of engineers on complex projects from inception to delivery. You will join a friendly, highly-collaborative team in Poland with immediate access to the latest certifications and world-class training schemes!Work location - Fully remote<h3>Responsibilities</h3><ul><ul><li>Design and implementation of scalable software services, alongside engineering and architecture teams.</li><li>Execution of Cloud engineering tasks within migration sprint cycles aligned to best practices and templates within a customer project team.</li><li>Build out of new customer cloud solutions using cloud native components.</li><li>Usage of foundational architecture and components to build out automated cloud environments, CI/CD pipelines and supporting services frameworks</li><li>Present architecture to clients of varying levels, from Developers, Business Analysts and Senior Client Leadership.</li><li>Brief senior leadership and end users at varying levels of familiarity with cloud technologies, about the technology selections, best practices, and benefits.</li><li>Enable major DevOps projects for successful production state</li><li>Lead critical deployments and align with the customer, creating direct value for individual projects. </li><li>Lead technical root cause analysis</li><li>Manage the production change approval process</li></ul></ul><h3>Job Requirements: </h3><ul><ul><li>You’ll be a strong technical expert, with experience on complex projects from inception to delivery, to deliver automated, secure and robust cloud infrastructure solutions. Using your deep technical expertise, you will help customers optimize their workloads by providing application focused assistance to build, deploy, integrate, scale and heal using native AWS and 3rd party toolchains and automation oriented agile principles.</li><li>Through both hands-on and consultative approaches, you will be responsible for supporting customers with tasks including provisioning resources and modifying Cloud environments, performing upgrades, and addressing day-to-day customer issues. You’re happy to get involved in all levels of technical discussions, from architecture to hands on coding.</li><li>A good grounding in infrastructure technology is highly advantageous, as is a programming background. Leveraging personal subject matter expertise, working closely with peers, the role will be accountable for delivering engineering consulting services in a client-facing role, often on-site with customers. You’ll be the voice of Rackspace within the customer.</li></ul></ul><h3>Skills &amp; Experience</h3><ul><ul><li>Proven hands-on experience with AWS.</li><li>Proficiency in API design and development, including hands-on experience with GraphQL</li><li>Expertise in authentication and authorization protocols, with a focus on OpenID Connect (OIDC) and Security Assertion Markup Language (SAML).</li><li>Proficient in observability tools and practices, including monitoring, logging, and tracing. </li><li>Experience building cloud automation, including CI/CD pipelines using technologies equivalent to Ansible, Terraform, Kubernetes, Jenkins, Docker. </li><li>Scripting and automation methods such as Terraform, Ansible, Python, YAML, Go.</li><li>Technical skills in as many of these as possible: Public Cloud architecture (AWS), PaaS (Containers, Kubernetes, Pub/Sub, FaaS etc.)</li><li>Awareness of security best practices (e.g. using IAM Roles, KMS, etc.) </li><li>Previous exposure to large-scale system design.</li><li>Maintains an in-depth knowledge of cloud related technologies and can articulate best practice approaches and practices.</li><li>Strong communication skills, customer facing experience desirable.</li></ul></ul>#LI-LP2#LI-RemoteAbout Rackspace TechnologyWe are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.  More on Rackspace TechnologyThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

Poland

Senior DevOps Engineer (AWS)

AWS Cloud EngineerOverview &amp; ResponsibilitiesRackspace is seeking an AWS Cloud Engineer II focused on cloud deployments to join our team in India. In this role you will be part of the team that architects, implements, and deploys our AWS cloud-based offerings.  Customer Focus: Our Cloud Engineers get to build one-of-a-kind, cutting-edge cloud solutions for some of our top enterprise customers. Our primary focus is to distill confidence in our customers by creating customized solutions and a top-notch customer onboarding experience.  Automation: Customer deployments should be solidly reliable and repeatable. Knowledge of tools like Github, Terraform, and CDK are critical to achieving this goal. If you enjoy writing programmatic solutions to reduce customer turnaround time and your own workload, this team is for you.Responsibilities:·Work with a talented and highly engaged team of Engineers, Relationship Managers and Product Team·Automatedeployments utilizing custom templates and modules for customer environments on AWS.·Architect AWS environment best practices and deployment methodologies·Create automation tools and processes to improve Team and Racker day to day functions·Educate customers on AWS and Rackspace best practices and architecture·Ability to configure CloudWatch and Serverless Alerts·Assist in educational briefings for teammates to advance in technical trainings for continued growth·Act as an escalation point for our AWS Support Engineers when required·Provide a continuous Fanatical Support experience for our customersQualifications: ·       5-7 years experience as a Deployment engineer.·       Working knowledge of Amazon Web Services Products &amp; Services, CloudWatch, Caching, Object and Block Storage, Scaling, Load Balancing, CDNs, Networking etc·       Excellent working knowledge of Windows or Linux operating systems – experience of supporting and troubleshooting issues and performance·       Intermediate understanding of central networking concepts: VLANs, layer2/3 routing, access lists &amp; load balancing·       Good understanding of design of native Cloud applications, Cloud application design patterns and practices·       Working knowledge using CloudFormation and Terraform·       Kubernetes exp. is a plus, as is exp. w/Relational and NoSQL Databases·       Knowledge of databases (SQL Server and MySQL)·       Working knowledge of Backup and Recovery methodology and implementations·       Good knowledge of application development using Agile, and DevOps best practices·       Excellent written and verbal communication skills with ability to communicate both technical issues to nontechnical and technical audiences·       Effective with time management and expected deliverables·       An ability to multi-task and work on multiple concurrent projects·       AWS Certified Solutions Architect Associate·       AWS Certified Solutions Architect ProfessionalReady to work in Night Shift and 24x5 EnvironmentAbout Rackspace TechnologyWe are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.  More on Rackspace TechnologyThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

AWS Cloud Engineer - II (R-17703)

Amazon.com

Amazon Web Services (AWS) is one of Amazon’s fastest growing businesses. We are passionate about thinking big, innovating on behalf of our customers, and tackling problems at scale. Cloud computing is disrupting, and we are eagerly seeking talented, entrepreneurial-minded individuals to join us as we continue build on the AWS platform. AWS is the largest <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> provider in the world, serving nearly 1/3 of all internet traffic. One in two of our customers come to us for help creating the future of the internet, and you will own the customer experience for the cloud based tools they use.The AWS Application Security's Prevention Engineering team is looking for a curious and motivated engineer and leader to deliver solutions that provide secure-by-default libraries and components that delight AWS builders. The team has a bold mission of making developing with the highest security bar the fastest and most delightful software building experience. You will be responsible building tooling that AWS product teams use to build secure code in partnership with AWS Security Engineers and Product Teams.A Software Engineer must produce results in the face of ambiguity and imperfect knowledge, and foster constructive dialogue and seek resolution when confronted with disagreement. They are also expected to mentor more junior engineers and be security through leader for their organization. Amazon’s Leadership Principles of “Dive Deep”, “Earn Trust”, and “Customer Obsession” will be called upon daily, so a successful candidate will need a combination of technical and communication skills, as well as the ability to handle a mix of complex decisions while keeping customer security first!Key job responsibilitiesDesign, build and test Software Solutions that deliver industry leading secure-by-default components to AWS builders that meets the bar for durability, performance, scalability.Provide software development expertise in support of AWS SecurityDirectly represent the team to business leader and technical staff at all levels of the companyDemonstrate “exceptional” judgment, integrity, business acumen, and communication skills.Prepare and present detailed, written technical information for internal and external audiences.About the teamInclusive Team CultureHere at AWS, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust.Work/Life BalanceOur team puts a high value on work-life balance. It isn’t about how many hours you spend at home or at work; it’s about the flow you establish that brings energy to both parts of your life. We believe striking the right balance between your personal and professional life is critical to life-long happiness and fulfillment. We offer flexibility in working hours and encourage you to find your own balance between your work and personal lives.Mentorship &amp; Career GrowthOur team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge sharing and mentorship. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded professional and enable them to take on more complex tasks in the future.We are open to hiring candidates to work out of one of the following locations:Toronto, ON, CAN<h3>Basic Qualifications</h3>- 3+ years of non-internship professional software development experience- 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience- Experience programming with at least one software programming language<h3>Preferred Qualifications</h3>- 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience- Bachelor's degree in computer science or equivalentAmazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, disability, age, or other legally protected status. If you would like to request an accommodation, please notify your Recruiter.

Software Engineer - Security Prevention Engineering, AWS AppSec - Prevention Engineering

EMW, Inc.

Deadline Date: Wednesday 11 October 2023 Requirement: Security Risk Consultant 2 Location: The Hague, NL Full time on-site: Yes Time On-Site: 100% Not to Exceed Rate: 97 EUR Total Scope of the request (hours): 150 Required Start Date: 27 November 2023 End Contract Date: 31 December 2023 Required Security Clearance: NATO SECRET Duties and Role: The contractor will effectively and efficiently provide, with minimal supervision, the following services, with a special focus on cybersecurity risk management: <ul> <li>Support the accreditation of NATO CIS by assessing potential cybersecurity risks following a risk management methodology. This includes the identification and assessment of risks for specific NATO CIS in close coordination with NATO accreditation stakeholders (including technical and security authorities).</li> <li>Measurement: To the NATO CIO satisfaction with the degree of support on security accreditation of identified NATO CIS and service and the identification, quantification and qualification of possible deficiencies and associated residual risks.</li> <li>Support the development of Security Risk Assessment documentation (SRA) in support of NATO CIS accreditation activities, in coordination with the NATO Technical and Security Authorities (e.g. NCIA, SAAs, NSAB).</li> <li>Measurement: To the NATO CIO satisfaction with the degree of support in the development of security risks assessment documentation in line with the NATO provided directions and guidance.</li> <li>Support the development of mitigation and remediation plans following the identification and assessment of cybersecurity risks for NATO CIS, specifically assessing the residual risks after the application of cybersecurity risk mitigation measures.</li> <li>Measurement: To the NATO CIO satisfaction with the degree of support in the qualifying and quantifying possible residual risks linked to the security posture of identified CIS and services before and after the application of risks mitigation measures. </li> </ul> Some in-country teleworking may be authorised in coordination with the Line Management. This requirement is foreseen to be extended into 2024 for the full year.RequirementsSkill, Knowledge &amp; Experience: <ul> <li>The candidate must have a currently active NATO SECRET security clearance</li> <li>The candidate must have knowledge and multiyear experience in organization, management and support of various (international) operations, activities, units and projects related to defence, security, electronics and communications, in the NATO environments.</li> <li>The candidate must have previous experience within NATO and/or Industry CIS Security accreditation methodologies and tools;</li> <li>The candidate must have previous experience within NATO and/or Industry Enterprise Risks assessment and Management methodologies and tools;</li> <li>The candidate must have previous experience in the assessment of risks and the development of risk mitigation plans and contingency measures</li> <li>The job requires knowledge of the NATO and Industry risk management frameworks</li> <li>The job requires experience with Risks assessment and Risk Management as applied to CIS Security and Cyber Security Fields.</li> <li>The candidate must have experience in leading staff work on large and complex projects and to coordinate multiple stakeholders in different and separate locations.</li> <li>The candidate must have excellent English writing skills and the ability to brief their work in English.</li> </ul> Desirable experience: <ul> <li>Demonstrate interest and passion for Cyber Security and Network Security.</li> <li>Structured cable deployment, installation and documentation</li> </ul>

SC2023-003099 Security Risk Consultant 2 (NS) - WED 11 Oct

Help us protect not only the Amazon Web Services (AWS) <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> computing environment but all of our customers as well! Since 2006, our great team at AWS has been enabling our customers to bring great ideas to life in ways that aren’t possible in traditional IT environments. With AWS you can flexibly harness compute, storage, security, and other services from across the globe as your business demands them. AWS Security is on the cutting edge of many security issues for a wide variety of platforms and technologies including cloud services, Internet of things (IoT), identity and access management, mobile devices, virtualization and custom hardware, all operating at massive scale. Similarly, our highly collaborative team is committed to each team member’s growth as our business grows. AWS Security is looking for an Application Security Engineer to help validate that our services, applications, and websites are designed and implemented to the highest security standards. You will be responsible for analyzing the security of applications and services, discovering and addressing security issues, building security automation, and quickly reacting to new threat scenarios. You will have the opportunity to learn from, and be mentored by, those who are building and securing our cutting-edge services. A Security Engineer at Amazon is expected to be strong in multiple domains and provide significant contributions to the AWS IT Security team and to multiple groups throughout Amazon. Security engineers are expected to develop elegant solutions to complex business problems and apply appropriate technologies while following security engineering best practices. You are also expected to mentor more junior engineers and be a security thought leader for the organization. A Security Engineer must foster constructive dialogue and seek resolution when confronted with discordant views. Engineers in this role are expected to participate fully in the planning of the AWS IT Security team's work and constantly seek opportunities for process improvement. They should also have a deep understanding of at least one specialty for which they are a sought out resource (both within AWS IT Security and by groups throughout Amazon), while having an understanding of the application of Information Security in a broad range of technical areas. You will have the combination of troubleshooting, technical, and communication skills, as well as the ability to handle a mix of disparate tasks which may include project and software development work. This role will provide career growth opportunities as you gain new security skills in the course of your duties. Key job responsibilitiesResponsibilities:• Application security reviews • Mobile security reviews • Secure architecture design • Threat modeling • Projects and research work as needed • Security training and outreach to internal development teams • Security guidance documentation • Security tool development • Security metrics delivery and improvements • Assistance with recruiting activities and administrative workAbout the teamInclusive Team CultureHere at AWS, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust.Work/Life BalanceOur team puts a high value on work-life balance. It isn’t about how many hours you spend at home or at work; it’s about the flow you establish that brings energy to both parts of your life. We believe striking the right balance between your personal and professional life is critical to life-long happiness and fulfillment. We offer flexibility in working hours and encourage you to find your own balance between your work and personal lives.Mentorship &amp; Career GrowthOur team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge sharing and mentorship. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded professional and enable them to take on more complex tasks in the future.We are open to hiring candidates to work out of one of the following locations:Austin, TX, USA | Boston, MA, USA | Charlotte, TX, USA | Herndon, VA, USA | New York, NY, USA | Quincy, MA, USA | San Diego, CA, USA | Santa Clara, CA, USA | Seattle, WA, USA<h3>Basic Qualifications</h3> - BS in Computer Science or related field, or equivalent work experience. - Minimum of 5 years of experience with any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security. - Minimum of 5 years of experience with security engineering, system and network security, authentication and security protocols, cryptography, or application security.<h3>Preferred Qualifications</h3>- Meets/exceeds Amazon’s leadership principles requirements for this role - Meets/exceeds Amazon’s functional/technical depth and complexity for this role - Experience implementing security solutions at the business division level - An understanding of network and web related protocols (such as, TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols) - An understanding of web services - Experience with multiple programming languages (such as, Java, C++, Ruby, Python, Perl, etc.) - Excellent written and verbal communication skills - Demonstrable teamwork skills and resourcefulness - Possess self-drive to keep moving things forward even in the face of ambiguity and imperfect knowledge (avoid “analysis paralysis”) - Strong sense of ownership, urgency, and drive - Sharp analytical abilities and proven design skills Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $135,500/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits. Applicants should apply via our internal or external career site.

AWS Application Security Engineer

Logicalis

As an Information Security, Risk and Governance Lead, you will have a solid understanding of security, auditing and privacy principles and a sound understanding of the regulatory environment affecting Logicalis and its customers. In this position, you will coordinate and own the ISM process for Logicalis' Managed Operations. You will possess a strong ability to influence and establish close relationships with key business stakeholders across the organisation. You will be the subject matter expert in Privacy and Information Security and be responsible for the governance framework that reports on the effectiveness of processes and controls compliance. You will<ul> <li>Have a broad range of security experience, with distinct experience in at least one of these areas; cyber strategy, security target operating models, privacy, security standards (such as ISO 27001, NIST CSF and ISM).</li> <li>Proven experience working across business units, understanding current threats and information security risks, vulnerability management and developing sustainable governance processes. </li> </ul>Requirements<ul> <li> Previous experience as an Information Security Officer in a managed service environment </li> <li>Experience working across business units, understanding current threats and information security risks, vulnerability management and developing sustainable governance processes. </li> <li>ISO 27001 Lead Implementer experience</li> <li>ISO 27001 Lead Auditor experience (preferred) </li> </ul>AccountabilitiesDAILY <ul> <li>Monitor new threats as they evolve and adjust risk management plans and security controls as necessary. </li> <li>Review Logicalis internal security compliance reporting and address any gaps in policy, systems, or procedures. </li> <li>(As required) Supervise the conduct of incident response workshops and assist with incident response to security incidents. </li> </ul>WEEKLY <ul> <li>Provide delivery teams security guidance to ensure projects and applications are designed and implemented in line with security policy and best practices.</li> <li>Lead the design, implementation, operation, and maintenance of the information security management system throughout the organisation. </li> </ul>MONTHLY <ul> <li>Maintain compliance compliance-ready state for Logicalis’ certifications (e.g., ISO 27001, 9000, 2000, Azure Expert MSP) </li> <li>Review changing requirements and implement delta changes to maintain compliance. </li> <li>Conduct vulnerability assessments to validate compliance with security policy. </li> <li>Review and evaluate security controls and practices for introduction into the organisation to reduce risk. </li> </ul>QUARTERLY <ul> <li>Review, maintain, and disseminate security policies in line with the Logicalis’ risk appetite, security strategy, relevant laws and security standards, and best practice. </li> <li>Initiates, facilitates, and promotes security awareness activities across the organisation. </li> </ul>ANNUALLY <ul> <li>Manages Logicalis’ business continuity capability and conducts workshops and tests to validate its effectiveness. </li> <li>Implement and maintain a systematic and structured process for the identification and management of security risks. </li> <li>ISO 27001 annual audit </li> </ul>BenefitsAs a valued member of ‘Logicalis Australia’ you will enjoy several benefits, such as;<ul> <li>Supportive team environment: Confidential pulse checks tell us we are known for being "Unselfish with knowledge", "Flexible and Diverse" and "Give a shout-out and there will always be help"</li> <li>Pick your own adventure: Our people have moved from Help-desk to Cloud-Engineering. Admin to Project/Program Management. Project Management to Product Development. If something interests you, we’ll fund you to learn it, so you can become it!</li> <li>Breadth of experience and purpose: People here can have an idea, make a plan, and see it through. Our people enjoy genuinely impacting change and controlling their professional success.</li> <li>Flexible, modern, working arrangements: Flexible model that allows for productive remote working and in person collaboration. #LI-Hybrid</li> </ul>*Do I need to meet all the requirements to apply?*No. Studies by several different sources have shown that, on average, men will apply for a job if they meet 60% of the requirements. In contrast, women, non-binary, and neurodivergent people aim for closer to 90%! Please don’t let us miss out on everything you have to offer just because there is some upskilling to do. We can teach the specifics of the job. What we can’t teach is Character – ie Confidence, Capability, CuriosityAbout usWe are Logicalis, Architects of Change™. We assist organizations in succeeding in a digital-first world by harnessing our collective technology expertise. Our lifecycle services, including <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a>, connectivity, collaboration, and security, optimize operations, reduce risk, and empower employees. As a global tech service provider, we also deliver managed services to provide real-time visibility and insights across clients' digital ecosystems. With 7000+ employees in 27 countries, we help 10,000+ clients globally create sustainable outcomes through technology.For people living with disabilities, chronic illnesses, or neurodiversity; adjustments and support will be made available to create a more comfortably aligned application process. If you need any specific accommodations (tools, time, etc.), and feel comfortable disclosing this, please let us know and we’ll be glad to facilitate.

Information Security, Risk and Governance Lead

Amazon Payments processes millions of transactions every day across numerous countries and payment methods. Over 100 million customers and merchants send tens of billions of dollars through our systems annually. We are re-inventing the vision of our platform to provide our internal and external clients the best payment gateway service, benchmarked against the top external alternatives. Paramount to our success is ensuring that customer data is secure across Amazon Payments products and services. At the Payments Proactive Security Team, we are influencing the internal Payments ecosystem to pursue best security practices as well as driving the improvement of product security at scale by leveraging the automated solution and feedback loop mechanism established internally.A Security Engineer in Amazon will be strong in multiple security domains and sought out for advice on technical issues. Efficient time management skills are required along with the ability to deliver results in the face of uncertainty. Engineers in this role must show exemplary judgment in making technical trade-offs between short versus long term security and business goals. They must also demonstrate resilience and navigate difficult situations with composure and tact. The successful candidate must be one that can handle several difficult challenges and problems, can make risk-based assessments founded on data and facts. Additionally, the successful candidate will be: - Methodically empirical and experimental in approach and evaluation without being bound by over paralysis-by-analysis;- Work ceaselessly to improve knowledge of the security field, threat landscape, security intelligence, moving proactively toward prevention and detection of threats;- Be an enthusiastic learner and curiosity seeker, focusing on what can be done rather than hindered by notions of what cannot be;- Possess effective verbal and written communication skills, be passionate about sharing knowledge, tactics, strategy, as well as advocating for the project mission;- Have excellent time management skills along with the ability to deliver results in the face of uncertainty; and- Evangelize security within Amazon.com and be an advocate for customer trust.A successful candidate will be a deeply curious individual who brings technical expertise, and ability to work within a fast-paced startup culture in a large company that has broad business impact. This is a unique opportunity to start with Amazon Payments and innovating and scaling security to protect customer trust.Key job responsibilities- Work closely with service teams to identify threats and vulnerabilities throughout Software Development Life Cycle and provide guidance on mitigating the issues. - Identify and prioritize security problems that can be detected using automation.- Develop detection prototypes for these security problems to enhance our tool-set for static and dynamic analysis.- Work with builders and service teams to address detected security problems in an appropriate and timely fashion.- Identify opportunities to prevent security problems at scale.- Develop prototypes to prevent these security problems.- Document and provide security guidance that will be used across Amazon Payments. - Deliver metrics to show effectiveness of our security initiatives.About the teamPayments Proactive Security team's mission is to build mechanisms that help prevent security issues from affecting Amazon's Payment Applications. A security engineer in Payments Proactive Security team will work closely with application developers, evangelize security and build scalable vulnerability detection mechanisms that help secure applications. We are open to hiring candidates to work out of one of the following locations:Vancouver, BC, CAN<h3>Basic Qualifications</h3> BASIC QUALIFICATIONS - BS/B.Tech in Computer Science, Information Security, or equivalent professional experience.- 5+ years of experience in application security, product security, or systems security.- 5+ years writing production-level code in at least one scripting or compiled language such as Java, Python, JavaScript, Go, Ruby, C# or C/C++- Proven experience in threat modeling, code reviews, security testing, vulnerability detection, attacker exploit techniques, and methods for their remediation.- Strong technical understanding of OWASP Top 10 and application security concepts.- 5+ years of experience securing <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> services, preferably AWS.- A strong understanding of payments processing and financial services technologies.<h3>Preferred Qualifications</h3>PREFERRED QUALIFICATIONS - Master’s degree in Computer Science, Information Security, Computer Engineering or equivalent.- Relevant industry certifications from SANS, GIAC, CISSP, OSCP, etc.- 5+ years of software development experience with at least one programing language such as Java, Python, JavaScript, Go, Ruby, C# or C/C++.- 3+ years of experience in penetration testing, offensive security, or red teaming.- In-depth technical understanding of OWASP Top 10, and SANS 25 vulnerability identification and remediation.- 5+ years of experience securing cloud services, preferably AWS, with an in-depth understanding of various cloud technologies.- Experience with securing financial and payment processing systems, evaluating from Layer 3 to Layer 7 and with end-to-end security ownership.- Excellent written and verbal communication skills with the ability to adapt messaging to technical and non-technical audiences at all levels including senior leadership.- History of working autonomously and delivering results in a fast-paced, highly ambiguous environment.- Experience driving multiple technically complex security initiatives while remaining effective at providing security guidance to stakeholders. - Meets/exceeds Amazon’s leadership principles requirements for this role - Meets/exceeds Amazon’s functional/technical depth and complexity for this role Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, disability, age, or other legally protected status. If you would like to request an accommodation, please notify your Recruiter.

Sr. Product Security Engineer, Payments Security - Core Security Services

Bitpanda

Who we are 
We simplify wealth creation. Founded in 2014 in Vienna, Austria by Eric Demuth, Paul Klanschek and Christian Trummer, we’re here to help people trust themselves enough to build their financial freedom — for now and the future. Our user-friendly, trade-everything platform empowers both first-time investors and seasoned experts to invest in the cryptocurrencies, crypto indices, stocks*, precious metals and commodities* they want — with any sized budget, 24/7. Our global team works across different cultures and time zones, bringing our products to more than 4 million customers, making us one of Europe’s safest and most secure platforms that powers modern investing.
Headquartered in Austria but operating across Europe, our products are built by fast-moving, talented, “roll-up-your-sleeves-and-make-it-happen” kind of people. It’s these diverse perspectives and innovative minds operating as ONE TEAM that keep Bitpanda at the cutting edge of our industry. So if you’re someone who thinks big, moves fast and wants to make an impact right from day one, then get ready to join our industry-changing team. Let’s go!Your mission
As an Information Security Specialist, you will have a key role in ensuring security posture at Bitpanda in the InfoSec team. You will be responsible for the planning and implementation of compliance standards, improving IT governance level and participate in IT Risk management. You will also conduct regular cyber risk assessments to ensure an overview of the risk situation is always maintained.
What you’ll do 
<ul>
<li>Plan and implement an Information Security Management System (ISMS)</li>
<li>Conduct risk assessments, tracking of incidents and vulnerabilities</li>
<li>Define and implement cyber security policies and procedures</li>
<li>Provide insights on our security landscape and track the efficiency of our efforts</li>
<li>Assist the business with security gap analyses and security documentation within projects</li>
</ul>
Who you are
<ul>
<li>University degree with a specialisation in IT, Technology, Security, Business IT or similar</li>
<li>Excellent verbal and written German and English skills</li>
<li>Knowledge of relevant standards and regulations like ITIL, GDPR, ISO27001, BSI, NISG</li>
<li>Previous experience with AWS</li>
<li>Holding a certification such as CISA, CISM, CISSP, CRISC, ITIL etc. is an advantage.</li>
<li>3 plus years of experience in security, governance, compliance, risk management or similar</li>
</ul>What’s in it for you
<ul>
<li>Hybrid-working model with 60-Work From Anywhere days </li>
<li>Competitive total compensation package including participation in our stock option plan</li>
<li>Market-leading benefits programs and policies shaped by our flexibility-first philosophy. </li>
<li>Exclusive premiums when trading on Bitpanda</li>
<li>Company-wide and team events — both in-person and virtually!</li>
<li>Bitpanda swag to keep you living the brand</li>
</ul>
And, above all, the opportunity to learn and grow as part of Bitpanda’s incredible journey towards being Europe’s future #1 investment platform.
Bitpanda is committed to fostering a fair and equal environment based on trust and mutual respect. We believe that a diverse and inclusive workplace is paramount to our success and we are committed to building a team that represents a wide variety of backgrounds, perspectives, and skills.

Senior Information Security Specialist

Workato

<h3>About Workato</h3>
Workato is the only integration and automation platform that is as simple as it is powerful — and because it’s built to power the largest enterprises, it is quite powerful. 
Simultaneously, it’s a low-code/no-code platform. This empowers any user (dev/non-dev) to painlessly <a href="https://academy.workato.com/quickstart-introduction" rel="noopener noreferrer nofollow ugc" target="_blank">automate workflows</a> across any apps and databases.
We’re proud to be named a leader by both <a href="https://resources.workato.com/forrester-wave-ipaas/" rel="noopener noreferrer nofollow ugc" target="_blank">Forrester</a> and <a href="https://discover.workato.com/gartner-ipaas-mq/p/1" rel="noopener noreferrer nofollow ugc" target="_blank">Gartner</a> and trusted by 7,000+ of the world's top brands such as <a href="https://blog.workato.com/2019/09/box-workflow-automation/#.XysqY5NKjlw" rel="noopener noreferrer nofollow ugc" target="_blank">Box</a>, <a href="https://blog.workato.com/2018/12/how-grab-asias-hottest-startup-has-saved-3000-man-hours-with-chatops-and-automation/#.Xys-i_gzblx" rel="noopener noreferrer nofollow ugc" target="_blank">Grab</a>, <a href="https://medium.com/slack-developer-blog/slack-on-slack-delivering-impactful-internal-products-9f3e62403492" rel="noopener noreferrer nofollow ugc" target="_blank">Slack</a>, and more. But what is most exciting is that this is only the beginning. 
<h3>Why join us?</h3>
Ultimately, Workato believes in fostering a flexible, trust-oriented culture that empowers everyone to take full ownership of their roles. We are driven by innovation and looking for team players who want to actively build our company. 
But, we also believe in balancing productivity with self-care. That’s why we offer all of our employees a vibrant and dynamic work environment <a href="http://www.workato.com/careers" rel="noopener noreferrer nofollow ugc" target="_blank">along with a multitude of benefits</a> they can enjoy inside and outside of their work lives. 
If this sounds right up your alley, please submit an application. We look forward to getting to know you!
Also, feel free to check out why:
<ul>
<li>
<a href="https://www.businessinsider.com/47-enterprise-startups-to-bet-your-career-on-in-2020-2019-12" rel="noopener noreferrer nofollow ugc" target="_blank">Business Insider</a> named us an “enterprise startup to bet your career on”
</li>
<li>
<a href="https://www.forbes.com/&lt;a href=" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a>100/#a57477b5f941"&gt;Forbes’ Cloud 100 recognized us as one of the top 100 private cloud companies in the world
</li>
<li>
<a href="https://www2.deloitte.com/us/en/pages/technology-media-and-telecommunications/articles/fast500-winners.html" rel="noopener noreferrer nofollow ugc" target="_blank">Deloitte Tech Fast 500</a> ranked us as the 17th fastest growing tech company in the Bay Area, and 96th in North America
</li>
<li>
<a href="https://qz.com/work/2053446/the-best-companies-for-working-from-home/" rel="noopener noreferrer nofollow ugc" target="_blank">Quartz</a> ranked us the #1 best company for remote workers
</li>
</ul><h3>Responsibilities</h3>
We are looking for an exceptional Enterprise Security Engineer  to join our growing team. In this role, you will work closely with our Business Systems and Security Teams. You will have a lead role in monitoring and securing our cloud-based business systems. We are seeking a security-savvy person with experience in managing a diverse technical environment, developing and promoting best practices, monitoring systems, and proactively responding to security issues.
 In this role, you will also be responsible to:
<ul>
<li>
Understand and remain up-to-date on Workato’s security measures, policies, and practices as well as industry trends and evolving standards.
</li>
<li>
Provide guidance, policies and recommendations to internal teams on security best practices for systems and applications.
</li>
<li>
Administer, set up, configure, and troubleshoot as needed internal business security applications.
</li>
<li>
Author scripts, tools, and Workato based automations to streamline security operations.
</li>
<li>
Monitor access to and activity in business systems to proactively detect and prevent security incidents.
</li>
<li>
Evaluate and recommend new internal tools for system management and security.
</li>
<li>
Respond to security incidents involving internal business systems.
</li>
<li>
Maintain recordkeeping for audit purposes and assist Workato’s annual security audit.
</li>
</ul>
<h3>Requirements</h3>
<h3>Qualifications / Experience / Technical Skills</h3>
<ul>
<li>
Bachelor’s degree in CS or a related field.
</li>
<li>
3+ years of experience working in security engineering and operations teams.
</li>
<li>
Perimeter Security – Firewall, IPS, Proxy, email gateway, URL filtering etc.
</li>
<li>
Endpoint Security – AV, Next Gen AV, EDR, Encryption, HIPS, Email Security (Dmarc), JAMF etc.
</li>
<li>
Cloud Security – AWS experience is preferred, including native security controls in AWS, cloud security controls available on marketplace.
</li>
<li>
Knowledge of all domains within security covering people, process and technology
</li>
<li>
Solid understanding of security concepts, security policies, risks, and corresponding mitigation strategies.
</li>
<li>
Ability to write bash, python scripts and automate ops tasks using security automation frameworks.
</li>
<li>
Ability to create and automate Incident response plans on Internal endpoints and Cloud Assets
</li>
<li>
Knowledge of IT Operations best techniques, including strategies, and technologies for monitoring, alerting, automation, and return-to-service strongly preferred.
</li>
<li>
SOC/<a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a>/MDR/Security Orchestration and Automation
</li>
<li>
Good understanding of ITIL concepts Incident/Change/Problem and ticketing tools
</li>
<li>
Familiarity with MacOS system administration.
</li>
<li>
Familiarity with data warehousing systems especially Snowflake.
</li>
<li>
Experience with ISO27001 certification or SOC-2 audit is a plus.
</li>
<li>
Security certification (CSSLP, CISSP, GIAC, GSE for example) is a plus.
</li>
</ul>
<h3>Soft Skills / Personal Characteristics</h3>
<ul>
<li>
Detail-oriented with superior organizational and time-management skills - balancing multiple projects, deadlines, and requests
</li>
<li>
Ensuring high quality and timely delivery of features
</li>
<li>
Demonstrate a strong sense of security operations ownership
</li>
<li>
Driven with a can-do attitude and determination to succeed
</li>
<li>
Excellent written and verbal communication skills
</li>
</ul>

Enterprise Security Engineer

Snowflake Inc.

Build the future of data. Join the Snowflake team.
There is only one Data Cloud. Snowflake’s founders started from scratch and designed a data platform built for the <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> that is effective, affordable, and accessible to all data users. But it didn’t stop there. They engineered Snowflake to power the Data Cloud, where thousands of organizations unlock the value of their data with near-unlimited scale, concurrency, and performance. This is our vision: a world with endless insights to tackle the challenges and opportunities of today and reveal the possibilities of tomorrow.
Snowflake forms the data platform for the most security sensitive customers and they rely on the data platform to secure and protect their most sensitive data assets. It is critical that our customers are able to manage access to their data, audit its usage and ensure its safety. The security infrastructure also enables customers of Snowflake to share data and protect privacy which is a key ingredient of the <a href="https://www.snowflake.com/use-cases/modern-data-sharing/" rel="noopener noreferrer nofollow ugc" target="_blank">Data Sharehouse.</a>

<h3>AS AN ENGINEERING MANAGER IN DATA GOVERNANCE, YOU WILL:</h3>

<ul>
<li>Lead and drive projects from idea formulation, to design, and to implementation.</li>
<li>Drive great partnership with the product management team.</li>
<li>Set team strategy and be accountable for team plans and deliverables.</li>
<li>Grow and build a strong, healthy, and diverse team through hiring as well mentoring and coaching.</li>
<li>Collaborate with other engineering teams and cross functional teams.</li>
<li>Provide strong technical leadership to the team and partner teams.</li>
<li>Understand deeply the state of art research and industry trends, and lead the team to build data governance features into Snowflake as an integrated service.</li>
</ul>
We expect our engineering managers to demonstrate a strong engineering background via their past experience both as engineers and as managers.
<h3>OUR IDEAL ENGINEERING MANAGER WILL HAVE:</h3>
<ul>
<li>10+ years of experience in building large scale distributed systems, some of which are in databases, security and/or privacy domains.</li>
<li>5+ years of experience in managing and leading engineering teams to build services and framework in the above domains.</li>
<li>Strong track record of delivering large scale and resilient distributed systems and services.</li>
<li>Extensive and strong development experience in cloud environments, such as AWS, Azure, and GCP.</li>
<li>Strong collaboration and communication skills.</li>
<li>Experience in different security areas like identity and access management, cryptography, secret management, network security, etc.</li>
<li>Knowledge of industry standard security concepts and protocols like SAML, SCIM, OAuth, RBAC, cryptography is a plus.</li>
<li>Strong hands-on skills. Can drill deep into the complex system design and implementation when needed.</li>
</ul>

Engineering Manager - Database Security

Cloudflare, Inc.

About Us

At Cloudflare, we have our eyes set on an ambitious goal: to help build a better Internet. Today the company runs one of the world’s largest networks that powers approximately 25 million Internet properties, for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. 
We realize people do not fit into neat boxes. We are looking for curious and empathetic individuals who are committed to developing themselves and learning new skills, and we are ready to help you do that. We cannot complete our mission without building a diverse and inclusive team. We hire the best people based on an evaluation of their potential and support them throughout their time at Cloudflare. Come join us! 
<h3>Software Engineer - Zero Trust Client</h3>
<h3>What you'll do</h3>
We’re looking for a Software Engineer to join our <a href="https://www.&lt;a href=" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a>flare.com/zero-trust/"&gt;Zero Trust team. You will be working on the <a href="https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/" rel="noopener noreferrer nofollow ugc" target="_blank">Zero Trust desktop client</a>, which protects corporate devices by securely and privately sending traffic from those devices to Cloudflare’s global network, which can apply advanced web filtering and advanced Zero Trust policies.
In your role, you will predominantly be using Rust alongside platform-native languages &amp; APIs to implement high-performance networking code that runs on multiple desktop platforms. You’ll be expected to improve the code quality and to build solid, testable, and well-documented foundations. You will be most successful in this role if you have a good understanding of operating system concepts (virtual memory, multi-threading, process lifecycle, etc.) and networking concepts &amp; protocols (VPNs, firewalls, TCP/IP, UDP, DNS, QUIC, H/3, proxying, etc.). You will also have to interact with other languages, such as Swift, C#, C, and python.
As a Senior Software Engineer, you will be expected to make significant contributions to the design and implementation of major development projects, working closely with our product managers and other teams to implement customer-impacting features. You will work on stimulating problems born out of the scale of our deployment, and the stringent quality, performance, and security requirements of our product.
<h3>Examples of desirable skills, knowledge, and experience</h3>
<ul>
<li>Excellent programming skills, with experience writing very high-quality and low-complexity code with thorough documentation.</li>
<li>Strong experience writing easily-testable and thoroughly-tested code (e.g. using dependency injection with the right abstractions)</li>
<li>Experience with systems programming and familiarity with core OS concepts of one or more desktop OSes (macOS, Windows, Linux)</li>
<li>Great experience using lower-level languages, such as Rust, C, C++</li>
<li>Very comfortable writing multithreaded, asynchronous code</li>
<li>Strong experience with debugging network-related problems, especially on desktop devices</li>
<li>An understanding of how VPN technologies work, and the trade-offs between privacy, security, and anonymity</li>
<li>Good understanding of, and experience with, security protocols and standards</li>
<li>Empathetic, proactive, and constructive communication skills, verbal and written</li>
</ul>
What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
<a href="https://blog.cloudflare.com/protecting-free-expression-online/" rel="noopener noreferrer nofollow ugc" target="_blank">Project Galileo</a>: We equip politically and artistically important organizations and journalists with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
<a href="https://www.cloudflare.com/athenian/" rel="noopener noreferrer nofollow ugc" target="_blank">Athenian Project</a>: We created Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration.
<a href="https://blog.cloudflare.com/tag/path-forward/" rel="noopener noreferrer nofollow ugc" target="_blank">Path Forward Partnership</a>: Since 2016, we have partnered with Path Forward, a nonprofit organization, to create 16-week positions for mid-career professionals who want to get back to the workplace after taking time off to care for a child, parent, or loved one.
<a href="https://1.1.1.1/" rel="noopener noreferrer nofollow ugc" target="_blank">1.1.1.1</a>: We released<a href="https://1.1.1.1/" rel="noopener noreferrer nofollow ugc" target="_blank"> 1.1.1.1</a> to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our<a href="https://developers.cloudflare.com/1.1.1.1/privacy/public-dns-resolver" rel="noopener noreferrer nofollow ugc" target="_blank"> privacy commitment</a> and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer.  We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness.  All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law. We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities.  Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.  If you require a reasonable accommodation to apply for a job, please contact us via e-mail at hr@cloudflare.com or via mail at 101 Townsend St. San Francisco, CA 94107.

Software Engineer - Zero Trust Desktop Client

Marco Technologies LLC

Marco is a high-performing technology services company with a track record of creating rewarding careers. Whether you are early in your career ready for an exciting opportunity, or an experienced professional eager to elevate your skills with a Print &amp; IT services and consulting industry leader, then you have come to the right spot.More about us. We make business technology Simple. Secure. Better.  We do it all – from hosted/cloud services, copiers/printers, managed services, phone systems, document management, business IT services and audio/video systems.  We are an organization with strong partnerships between sales and service.  We have hundreds of sales professionals, engineers, and technicians ready to fix any and all customer problems. With over 50 years in the industry, Marco has a Gold Standard Culture with a focus on employee engagement, client satisfaction, vendor partnerships, and community partnership.   Join our growing team. You won’t regret it.POSITION SUMMARY/OBJECTIVE:The Support Desk Specialist is responsible for providing quality services and solutions to our clients while maintaining a high level of client satisfaction. You will provide phone support, remote troubleshooting and administration.   ESSENTIAL FUNCTIONS:1.     Provide technical support and remote help desk services to Marco clients, escalating when necessary.2.     Review current systems and make technical/process recommendations for improving efficiency.3.     Identify reoccurring issues in client’s environment and proactively provide recommendations to improve efficiency, performance and reliability of client’s network.4.     Maintain client documentation.5.     Stay up to date with relevant state-of-the-art technology, equipment, and/or systems.6.     Accurately maintain documentation and comply with service administrative procedures in a timely basis to include time entry.7.     Ability to perform in a call center environment.8.     Supporting multiple companies with end user requests and third-party business applications.9.     Efficiently communicate with technical and non-technical end <a href="http://users.10" rel="noopener noreferrer nofollow ugc" target="_blank">users.</a><a href="http://users.10" rel="noopener noreferrer nofollow ugc" target="_blank">10</a>.  Perform other related duties as assigned. OTHER DUTIES:Please note the job description is not designated to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice. QUALIFICATIONS:EDUCATION AND EXPERIENCEBachelor’s degree and two years of relevant experience; or equivalent combination of education and experience.          Current certifications to include any of the following: MCSA (Microsoft Certified Solutions Associate), CMNA, CCENT (Cisco Certified Entry Networking Technician), CCA (Citrix Certified Administrator), VCA, EMC-SA, BAIS, A+, N+ or Security+ preferred. REQUIRED SKILLS:1.     Solid understanding of the administration of network operating systems, applications and services found in a client environment.2.     Proficiency with business collaboration tools such as MS Office applications.3.     Communication – Must possess strong communication skills in working with technical and non-technical people and the ability to develop and maintain collaborative relations among all levels of an organization.4.     Commitment – See that tasks are completed from start to finish. Demonstrate thoroughness and commitment.5.     Initiative – Must possess the ability to be a self-starter and take initiative. Work to identify and resolve problems in a timely manner however if you can’t resolve it yourself, use resources to find someone who can.6.     Flexibility – Adapt to changes in the work environment. Change approach or method to best fit the situation.  7.     Teamwork – Contribute to a positive team spirit by working with others on a combined task.  Make contributions to the task and share the responsibility of the outcome. Exhibit objectivity and openness to others’ views and welcome feedback.8.     Time Management – Must possess the ability to prioritize several tasks and keep them running simultaneously (multitasking).  Be able to recognize and respond to changing priorities in order to meet deadlines. EXPECTED HOURS OF WORK:This job operates in a professional office environment, while working remotely from a home office. Office hours are Monday - Friday from Noon (12:00PM) - 9:00PM, CST. Hours may include nights, weekends and holidays.TRAVEL:None.Benefits: We’re not just competitive when it comes to business tech – we’re also pretty proud of what we offer our employees. Our benefits include medical, dental, and vision insurance. We also have paid holidays and vacation, 401k with generous company match, flexible spending accounts, employee purchase program, employer-paid life insurance, voluntary-term life insurance, short and long-term disability, critical illness and accident benefits, and pet insurance. Yes, we care about your furry family too.*all benefits are dependent on employment status    Equal Opportunity Employer /AA Employer/Minorities/Women/Protected Veterans/Individuals with Disabilities <a href="https://postings.govdocs.com/#/E2PFy8lSN8YjxOp" rel="noopener noreferrer nofollow ugc" target="_blank">Applicant Labor Law Posters</a>

Support Desk Specialist - 12 Hour Team

JOB TITLE: Linux Operations Engineer I  PRIMARY RESPONSIBILITY:- Monitor alerts and correct issues, or create tickets accordingly. Handle level-appropriate escalation support requests (phone/ticket/chat) according to escalation procedures. As an escalation point, create and maintain customer loyalty by serving customers above and beyond their expectations, exercise judgment in decision-making in order to routinely deliver FANATICAL SUPPORT. Schedule and coordinate level-appropriate maintenance.  Provide basic troubleshooting of system services (i.e., web, API backend services, SSH and DNS).  Work as part of a team and interact with our engineering, developer and support groups to identify and correct issues, increase efficiency and improve best practices.  Identify operational problems by observing and studying system functioning and performance results; investigating complaints and suggestions; completing troubleshooting procedures. Improve operational quality results by studying, evaluating, and recommending process re-design; implementing changes; contributing information and opinions to product development and engineering teams. ·        KNOWLEDGE/SKILLS/ABILITY:Basic to intermediate knowledge of:OSes and distributions, patching, monitoring, backups; RAID, hardware, virtualization, networking, firewalls,load balancing, storage, security, highavailability, root cause analysis, systemsoptimization; APIs, Shell Scripting(python, bash); SSL, Web servers, auth/directory services, cachingservices ; SSH, HTTP, DNS, FTP, SNMP, SMTP; Intermediate troubleshooting abilities. ·        JOB COMPLEXITY:Works mainly in a reactive or supportive role while they developtheir skills and broaden their experience.Executes specific operational tasks to achieve project goals withguidance from senior Rackers.Understands, responds positively, andfollows directions providedby senior Rackers.Contributes to internal objectives and actively shares point of view.  Focuses on building relationships with Support and Engineeringteams.Excellent verbal and written skills.  Creative and collaborative team player.  Ownership and followup skills.  Ability to respond effectively under pressure.  Attendsinterdepartmental meetings. ·        SUPERVISION:Operates under general supervision.  ·        EXPERIENCE/EDUCATION: This role is generally equivalent in skills/experience to an L3 Linux Systems Administrator in the Support organization. Bachelor’s degree in a technology related field required.  At themanager’s discretion, additional relevant experience may substitute for the degree requirement.  RHCSA or equivalent certification or professional experience.Yearsof professional experience typically required: 3+ years.   ·        PHYSICAL DEMANDS:  General office environment.  May require long periods sitting and viewing a computer monitor.  Moderate levels of stress may occur at times.  No special physical demands required.   About Rackspace TechnologyWe are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.  More on Rackspace TechnologyThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

Linux Operations Engineer I - IN (R17653)

Marco is a high-performing technology services company with a track record of creating rewarding careers. Whether you are early in your career ready for an exciting opportunity, or an experienced professional eager to elevate your skills with a Print &amp; IT services and consulting industry leader, then you have come to the right spot.More about us. We make business technology Simple. Secure. Better.  We do it all – from hosted/cloud services, copiers/printers, managed services, phone systems, document management, business IT services and audio/video systems.  We are an organization with strong partnerships between sales and service.  We have hundreds of sales professionals, engineers, and technicians ready to fix any and all customer problems. With over 50 years in the industry, Marco has a Gold Standard Culture with a focus on employee engagement, client satisfaction, vendor partnerships, and community partnership.   Join our growing team. You won’t regret it.The Network Systems Architect is responsible for providing quality services and solutions to our clients while maintaining a high level of client satisfaction.  You will routinely perform project-based installations and service-based needs for our clients. You are responsible for design, management, administration and integration of products, services, applications and operating level systems code.  You will handle responsibilities from basic system installations to the overall architecture and design of custom solutions.  <h3>ESSENTIAL FUNCTIONS: </h3><ul><ul><li>Architect the design, installation, support and maintenance of production networks and systems to completion</li><li>Design, integrate and maintain network services including but not limited to switching, routing, firewalls, wireless networks and network security as well as data center solution, virtualization and storage.</li><li>Develop and follow Marco best practices and operational procedures and create visual and written documentation </li><li>Analyze system utilization, perform growth analysis and capacity planning and make technical/process recommendations for improving efficiency</li><li>Provide on-call support advice and technical support to various users/clients regarding operational/applications issues</li><li>Troubleshoot networks, systems, and applications to identify and correct malfunctions and other operational problems</li><li>Provide Mentoring for other Marco technical team.</li><li>Stay up to date with relevant state-of-the-art technology, equipment, and/or systems  </li><li>Function collaboratively as part of a fast-paced, client orientated team including assisting Sales Representatives in performing presales, development of processes and procedures along with SOW refinements </li><li>Accurately maintain documentation and comply with service administrative procedures in a timely basis to include pick tickets, collecting client signatures and time entry</li><li>Plan and manage projects independently</li></ul></ul><h3>QUALIFICATIONS: </h3><ul><ul><li>Bachelor’s Degree and 7+ years of experience or equivalent combination of degree experience</li><li>Cisco Certified Internetwork Expert (CCIE) certification required </li><li>Specialization with any of the following: QoS, Network Analysis and Troubleshooting, Wireless Networking, SD-WAN, Network Security preferred</li><li>Extensive Cisco networking expertise</li><li>Advanced troubleshooting skills</li><li>Security proficiency</li><li>Understanding of automation and scripting</li></ul></ul>Benefits: We’re not just competitive when it comes to business tech – we’re also pretty proud of what we offer our employees. Our benefits include medical, dental, and vision insurance. We also have paid holidays and vacation, 401k with generous company match, flexible spending accounts, employee purchase program, employer-paid life insurance, voluntary-term life insurance, short and long-term disability, critical illness and accident benefits, and pet insurance. Yes, we care about your furry family too.*all benefits are dependent on employment status    Equal Opportunity Employer /AA Employer/Minorities/Women/Protected Veterans/Individuals with Disabilities <a href="https://postings.govdocs.com/#/E2PFy8lSN8YjxOp" rel="noopener noreferrer nofollow ugc" target="_blank">Applicant Labor Law Posters</a>

Network Systems Architect - CCIE

XOR Security

Job Description:
XOR Security an Agile Defense Company is currently seeking talented, experienced Vulnerability Assessment Analysts for an exciting position supporting one of our premier clients. Our project is aimed at establishing cutting-edge techniques for network defense, identifying threats and detecting malicious activity using advanced toolsets.  The ideal candidate will have experience with Vulnerability Assessment/Analysis, Security Controls Assessment, Continuous Monitoring, Continuous Authorization, and FedRAMP assessments and will keep up to date on emerging trends in the cyber security field. 
Location:
Washington D.C., USA – On site 1-2 times a week
Skills and Qualifications:
Required Qualifications:
<ul>
<li>An industry certification such as CASP, CAP, CISSP, CISM, GSEC, GMON, Security+</li>
<li>7 years of experience in Information Assurance</li>
<li>Bachelor’s Degree in Computer Science, Computer Engineering, Information Systems or equivalent experience. </li>
<li>In-depth understanding and hands-on experience with Qualys, to include scanning with Security Technical Information Guides (STIG) and CIS benchmarks</li>
<li>MS Excel pivot tables</li>
</ul>
Job Duties:
<ul>
<li>Leverage enterprise scanning applications or tools approved by the government to complete this task. The vulnerability management support will require the Contractor to provide routine and ad-hoc automated vulnerability scans, scans in support of audits, scan result analysis, and validation scans of remediated vulnerabilities identified during Vulnerability Assessment &amp; Penetration Testing engagements.</li>
<li>Support vulnerability scans of information systems that are on-premises and hybrid cloud systems as necessary</li>
<li>Support scanning and testing at the application and database level and shall refine and mature scanning metrics and thresholds to positively affect program maturity</li>
<li>Work with system owners, system administrators and ISSOs to define the scope, develop a test plan, and rules of engagement as necessary</li>
<li>Analyze weekly DHS Cyber Hygiene reports, facilitate remediation of findings therein, and promote comprehensive scanning coverage of all Internet- reachable IT assets</li>
<li>Identify corrective actions, compensating controls, and assist with POA&amp;M development in CSAM</li>
<li>Identify mitigations for non-compliance, notify stakeholders of compliance issues and, where required, perform these mitigations</li>
<li>Take into account any infrastructure challenges and make recommendations for improvements where needed. This includes third party service provider hosted Software as a Service (SaaS), Platform as a Service (PaaS) instances as well as Infrastructure as a Service (IaaS)</li>
<li>Provide expertise in the review of new vulnerability technologies and capabilities and shall interact with other technology divisions to facilitate deployment</li>
</ul>
 Closing Statement:
XOR Security an Agile Defense Company offers a very competitive benefits package including health insurance coverage from the first day of employment, 401k with a vested company match, vacation and supplemental insurance benefits.
XOR Security an Agile Defense Company is an Equal Opportunity Employer (EOE). M/F/D/V.
Citizenship Clearance RequirementApplicants selected may be subject to a government security investigation and must meet eligibility requirements - US CITIZENSHIP and PUBLIC TRUST CLEARANCE REQUIRED.

Vulnerability Assessment Analyst - Hybrid

GuidePoint Security

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.
At this time, we can only accept candidates with an active TS/SCI WITH A COUNTERINTELLIGENCE POLY GRAPH (US Citizen) and local to northern VA.
Responsibilities include, but are not limited to:
<ul>
<li>Perform tasks and complete customer requests using the ServiceNow delivery platform.</li>
<li>Resolve incident tickets issued through ServiceNow.</li>
<li>On-board customer’s assets consisting of operating systems, applications and network devices in multiple enclaves.</li>
<li>Participate in Beta-testing future enhancements to the Audit Enterprise system and provide valuable feedback.</li>
<li>Assist the Program/Project engineers in testing and implementing future enhancements.</li>
<li>Utilize, evaluate and update all engineer instruction sets and SOPs.</li>
<li>Ability to learn and perform the testing of sophisticated Audit <a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a> platform applications in a physical and virtual environment.</li>
<li>Perform various Linux and Windows systems administration tasks related to the operational system.</li>
<li>Verification and validation that the segments are operating as desired, audit events are being processed, metrics generation, and ensuring that all required systematic audit events are being accomplished.</li>
<li>Operate and multitask in a dynamic high tempo environment.</li>
<li>Perform the engineering, integration, and administration support required for successful delivery of capabilities and services to the operational baseline.</li>
<li>Perform work duties in a government environment as part of a multi-contractor team.</li>
<li>Facilitate the enablement, collection, and verification of customer data within SIEM tools.</li>
<li>Develop SIEM search queries to support Enterprise Audit service requirements.</li>
<li>Ability to learn custom audit solutions with flex connectors and regex parsing.</li>
</ul>
Position Requirements:• Minimum Education: B.S. or relevant experience in related field.• Minimum/General Experience: 2-5 years of related experience.• Must possess the required DoD Directive 8570.1 IAT Level II or higher certification or ability to obtain within 6 months.• The ideal candidate will be able to work independently and in team environments and be able to take on tasks quickly with minimal direction.• Strong organizational, analytical, and troubleshooting skills with a high level of attention to detail are required to succeed in this diverse environment.• Should be able to demonstrate understanding and appropriate application of DoD policy and technical security guidance to information systems.• A good understanding of Linux and Windows systems administration, general operating system security practices, TCP/IP networking, and network security concepts is required.• Familiarity with the Certification &amp; Accreditation process is preferable but not required.
Desired Skills:• Ability to learn and comprehend from provided training in an individual contributor and team capacity.• Experience with Security Information and Event Management (SIEM) platforms, preferable NetWitness and ArcSight.• Experience with Linux, Windows Server and workstations, Red Hat and CentOS.• Cloud environment experience and/or certifications.• Ability to modify feed creation to ingest customer logs in a standard format to meet policy requirements.• Experience with creating custom parsers to ingest unique metadata into a standardized log format.• Working knowledge of current COTS Cybersecurity technologies.• Familiarization with other Enterprise security services Host Base Security Service, and Enterprise Vulnerability Scanning Service, and Enterprise Audit• Ability to clearly articulate ideas for executive – level as well as technical staff consumption• Ability to make decisions and resolve problems effectively – Seek out information and data to evaluate, prioritize and formulate best solution or practice.• Must be able to multi-task, work independently and as part of a team, share workloads, and deal with sudden shifts in project priorities.
Clearance Requirement:• Must possess an active TS/SCI w/ a CI polygraph.We use Greenhouse Software as our applicant tracking system and Free Busy for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application.
Why GuidePoint?GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 800 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 3,500 customers.
Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.  
This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.Some added perks….
<ul>
<li>Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)</li>
<li>100% employer-paid medical premiums (employee only $0 deductible and HSA plans) along with 75% employer-paid family contributions</li>
<li>100% employer-paid dental premiums (employee only) along with 75% employer-paid family contributions</li>
<li>12 corporate holidays and a Flexible Time Off (FTO) program</li>
<li>Healthy mobile phone and home internet allowance</li>
<li>Eligibility for retirement plan after 2 months at open enrollment</li>
<li>Pet Benefit Option</li>
</ul>

Cyber Security Engineer (SIEM) (TS/SCI Poly)

About Us

At Cloudflare, we have our eyes set on an ambitious goal: to help build a better Internet. Today the company runs one of the world’s largest networks that powers approximately 25 million Internet properties, for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. 
We realize people do not fit into neat boxes. We are looking for curious and empathetic individuals who are committed to developing themselves and learning new skills, and we are ready to help you do that. We cannot complete our mission without building a diverse and inclusive team. We hire the best people based on an evaluation of their potential and support them throughout their time at Cloudflare. Come join us! 
<h3>Engineering Manager - Magic Firewall</h3>
About the role
Cloudflare provides a full stack of networking-as-a-service products that allow customers to build and operate secure, reliable, and fast networks without purchasing traditional network hardware. Cloudflare’s network underpins mission-critical infrastructure, always-on applications, small businesses, and everything in between. Our customers rely on the performance, security, reliability, and visibility provided by our network to power their business. 
We’re looking for an Engineering Manager to help lead and grow a team to execute on the vision to replace “next generation” network firewalls with a modern, network-as-a-service offering leveraging the full power and threat data of the Cloudflare network. Traditional network firewalls, and their virtualized equivalents, all suffer from the same scale, cost, and administration challenges of other network hardware that Cloudflare replaces. It’s time to build a better solution and reinvent the market.
Examples of desirable skills, knowledge and experience
<ul>
<li>Experience leading and growing software engineering teams working on products from early stage through scale.</li>
<li>Experience building full-stack security products with an understanding of the challenges faced with modern firewalls.</li>
<li>Excel at planning, creating teams and overseeing execution to meet commitments and deliver with predictability.</li>
<li>Demonstrate a track record of managing a team including hiring, onboarding, and professional development. You inspire your team to reach higher. You’re as good as explaining “why” as you are “how”.</li>
<li>Experience implementing tools, process, internal instrumentation, methodologies and resolving blockages.</li>
<li>Comfortable managing teams/projects in multiple locations and time zones, with tight deadlines and short release cycles.</li>
</ul>
Compensation
Compensation may be adjusted depending on work location.
<ul>
<li>For Colorado-based hires and Washington hires: Estimated annual <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> of $225,000 - $275,000</li>
<li>For New York City-based and California (excluding Bay Area): Estimated annual salary of $239,000 - $293,000</li>
<li>For Bay Area-based hires: Estimated annual salary of $252,000 - $308,000</li>
</ul>
Equity
This role is eligible to participate in Cloudflare’s equity plan.
Benefits
Cloudflare offers a complete package of benefits and programs to support you and your family.  Our benefits programs can help you pay health care expenses, support caregiving, build capital for the future and make life a little easier and fun!  The below is a description of our benefits for employees in the United States, and benefits may vary for employees based outside the U.S.
Health &amp; Welfare Benefits
<ul>
<li>Medical/Rx Insurance</li>
<li>Dental Insurance</li>
<li>Vision Insurance</li>
<li>Flexible Spending Accounts</li>
<li>Commuter Spending Accounts</li>
<li>Fertility &amp; Family Forming Benefits</li>
<li>On-demand mental health support and Employee Assistance Program</li>
<li>Global Travel Medical Insurance</li>
</ul>
Financial Benefits
<ul>
<li>Short and Long Term Disability Insurance</li>
<li>Life &amp; Accident Insurance</li>
<li>401(k) Retirement Savings Plan</li>
<li>Employee Stock Participation Plan</li>
</ul>
Time Off
<ul>
<li>Flexible paid time off covering vacation and sick leave</li>
<li>Leave programs, including parental, pregnancy health, medical, and bereavement leave</li>
</ul>What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
<a href="https://blog.&lt;a href=" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a>flare.com/protecting-free-expression-online/"&gt;Project Galileo: We equip politically and artistically important organizations and journalists with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
<a href="https://www.cloudflare.com/athenian/" rel="noopener noreferrer nofollow ugc" target="_blank">Athenian Project</a>: We created Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration.
<a href="https://blog.cloudflare.com/tag/path-forward/" rel="noopener noreferrer nofollow ugc" target="_blank">Path Forward Partnership</a>: Since 2016, we have partnered with Path Forward, a nonprofit organization, to create 16-week positions for mid-career professionals who want to get back to the workplace after taking time off to care for a child, parent, or loved one.
<a href="https://1.1.1.1/" rel="noopener noreferrer nofollow ugc" target="_blank">1.1.1.1</a>: We released<a href="https://1.1.1.1/" rel="noopener noreferrer nofollow ugc" target="_blank"> 1.1.1.1</a> to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our<a href="https://developers.cloudflare.com/1.1.1.1/privacy/public-dns-resolver" rel="noopener noreferrer nofollow ugc" target="_blank"> privacy commitment</a> and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer.  We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness.  All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law. We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities.  Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.  If you require a reasonable accommodation to apply for a job, please contact us via e-mail at hr@cloudflare.com or via mail at 101 Townsend St. San Francisco, CA 94107.

Engineering Manager - Magic Firewall

Starling Bank

Hello, we’re Starling. We built a new kind of bank because we knew technology had the power to help people save, spend and manage their money in a new and transformative way. We’re a fully licensed UK bank with the culture and spirit of a fast-moving, disruptive tech company. We’re a bank, but better: fairer, easier to use and designed to demystify money for everyone. We employ more than 2,500 people across our London, Southampton, Cardiff and Manchester offices.As a Vulnerable Customer specialist, you will provide care and guidance for our customers with complex, additional needs.The role will help us to develop our processes in order to improve the customer journey and deliver good outcomes.This role will do the first 6 weeks full time in the office, followed by 2 days a week after this period.Key Accountabilities and Responsibilities:<ul> <li>Provide exceptional customer service by offering solutions to help and benefit customers in need of specialist support, across a variety of channels including the telephone, email and in-app messaging. </li> <li>Support our customers with additional needs by providing an empathetic and bespoke service to enable them to manage their account. </li> <li>Provide support and guidance to other departments and colleagues across the Bank. </li> <li>Capture and maintain detailed and accurate customer records.</li> <li>Work with third parties to aid in developing expertise and business understanding of customer vulnerabilities. </li> <li>Build and maintain effective working relationships with colleagues.</li> <li>Identify areas for process, policy and service improvements.</li> </ul>RequirementsBehaviours &amp; Competencies:<ul> <li>Integrity- Always do the right thing for our customers, colleagues and Starling. </li> <li>Resilience -An individual with the ability to handle complex issues. </li> <li>Passionate about helping customers with additional needs. </li> <li>Maintain own knowledge of regulatory requirements and best industry practices. </li> <li>A positive “can-do” attitude whilst working in a changeable, fast paced environment.</li> <li>Proactive and self motivated.</li> </ul>Skills:<ul> <li>Experience in supporting customers with additional needs in the financial services sector. (Essential) </li> <li>Ability to interact professionally and empathetically with customers. </li> <li>Ability to plan and prioritise in a changing, busy environment.</li> <li>Effective communication style that’s adaptable to a diverse range of customers and colleagues. </li> <li>Excellent administrative skills</li> <li>Good problem solving skills</li> </ul>BenefitsBenefits<ul> <li>25 days holiday (plus take your public holiday allowance whenever works best for you)</li> <li>An extra day’s holiday for your birthday</li> <li>Annual leave is increased with length of service, and you can choose to buy or sell up to five extra days off</li> <li>16 hours paid volunteering time a year</li> <li>Salary sacrifice, company enhanced pension scheme</li> <li>Life insurance at 4x your <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a></li> <li>Private Medical Insurance with VitalityHealth including mental health support and cancer care. Partner benefits include discounts with Waitrose, Mr&amp;Mrs Smith and Peloton</li> <li>Generous family-friendly policies</li> <li>Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks</li> <li>Access to initiatives like Cycle to Work, Salary Sacrificed Gym partnerships and Electric Vehicle (EV) leasing</li> </ul>About us:You may be put off applying for a role because you don't tick every box. Forget that! While we can’t accommodate every flexible working request, we're always open to discussion. So, if you're excited about working with us, but aren’t sure if you're 100% there yet, get in touch anyway.We’re on a mission to radically reshape banking – and that starts with our brilliant team. Whatever came before, we’re proud to bring together people of all backgrounds and experiences who love working together to solve problems.Starling Bank is an equal opportunity employer, and we’re proud of our ongoing efforts to foster diversity &amp; inclusion in the workplace. Individuals seeking employment at Starling Bank are considered without regard to race, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, physical or mental disability, military or veteran status, or any other characteristic protected by applicable law.By submitting your application, you agree that Starling Bank may collect your personal data for recruiting and related purposes. Our Privacy Notice explains what personal information we may process, where we may process your personal information, its purposes for processing your personal information, and the rights you can exercise over our use of your personal information.

Vulnerable Customer Specialist

The leading job board for Cyber Security Jobs. Start your career in Information Security Industry. Jobs are updated daily.

Job Position and Company	Location	Tags	Posted
Product Security Engineer at Twilio	Remote Full Time CISM Application Security
Python Developer II / III at Rackspace	Remote Full Time Manager
Senior DevOps Engineer (AWS) at Rackspace	Remote Full Time Consulting
AWS Cloud Engineer - II (R-17703) at Rackspace	Remote Full Time Windows
Software Engineer - Security Prevention Engineering, AWS AppSec - Prevention Engineering at Amazon.com	Full Time Internship Application Security
SC2023-003099 Security Risk Consultant 2 (NS) - WED 11 Oct at EMW, Inc.	Consultant Full Time Contract
AWS Application Security Engineer at Amazon.com	Full Time Application Security
Information Security, Risk and Governance Lead at Logicalis	Remote Full Time Audit Incident Response
Sr. Product Security Engineer, Payments Security - Core Security Services at Amazon.com	Full Time Javascript Application Security
Senior Information Security Specialist at Bitpanda	Remote Full Time CISM
Enterprise Security Engineer at Workato	Remote Full Time Audit Incident Response
Engineering Manager - Database Security at Snowflake Inc.	Full Time Audit Manager
Software Engineer - Zero Trust Desktop Client at Cloudflare, Inc.	Full Time Windows
Support Desk Specialist - 12 Hour Team at Marco Technologies LLC	Remote Full Time Administrator Consulting
Linux Operations Engineer I - IN (R17653) at Rackspace	Remote Full Time Administrator
Network Systems Architect - CCIE at Marco Technologies LLC	Remote Full Time Consulting
Vulnerability Assessment Analyst - Hybrid at XOR Security	Full Time CISM Analyst
Cyber Security Engineer (SIEM) (TS/SCI Poly) at GuidePoint Security	Remote Full Time Audit DOD Windows
Engineering Manager - Magic Firewall at Cloudflare, Inc.	Remote Full Time Manager
Vulnerable Customer Specialist at Starling Bank	Full Time

Cyber Security Jobs

1025 Cyber Security Jobs. Page 1 of 52

Subscribe to the weekly
Cyber Security Jobs Newsletter