Angi

Angi® is transforming the home services industry, creating an environment for homeowners, service professionals and employees to feel right at “home.” For most home maintenance needs, our platform makes it easier than ever to find a qualified service professional for indoor and outdoor jobs, home renovations (or anything in between!). We are on a mission to become the home for everything home by helping small businesses thrive and providing solutions to financing and booking home jobs with just a few clicks.  
Over the last 25 years we have opened our doors to a network of over 200K service professionals and helped over 150 million homeowners love where they live. We believe home is the most important place on earth and are embarking on a journey to redefine how people care for their homes. Angi is an amazing place to build your dream career, join us—we cannot wait to welcome you home! About the team
At Angi, security is tightly woven into product and infrastructure development. We challenge our teams to build systems that are secure-by-default and to protect our users’ most sensitive data. You will be joining a team of engineers who will champion security initiatives throughout the organization. You will be building tools to make secure-by-default easy. You will be conducting regular audits/tests to identify risks and prioritizing fixes for the identified risks. You will continue to raise the bar to make our systems secure.
What you’ll do
<ul>
<li>Implement security best practices in our cloud and on-premise IT environment following industry standards / recommendations.</li>
<li>Identify vulnerabilities, missing patches, and misconfigurations across our cloud, on-premise, and employee infrastructure and ensure there is a scalable approach to prioritizing fixes for any issues identified.</li>
<li>Implement various types of scanning in our CI/CD pipelines and ensure results are appropriately surfaced to developers.</li>
<li>Ensure relevant audit and security logs are collected to a central location and exposed to the correct teams for triage, analysis, and incident response.</li>
<li>Work with auditors and compliance teams to meet required policies and collect required evidence.</li>
<li>Work with infrastructure engineering teams to ensure that all endpoints throughout the organization are configured with industry aligned security standards, that they have the relevant security tools (MDM, EDR, etc.) installed, and that administrative rights are not needed for non-power users.</li>
<li>Actively participate in the design and implementation of applications, services, and infrastructure to ensure security and privacy design principles are being followed.</li>
<li>Triage, escalate, and remediate vulnerabilities found as part of our bug bounty program.</li>
<li>Work with the product management teams to prioritize fixes for vulnerabilities and work with engineering teams to understand how to fix these issues.</li>
<li>Get your hands dirty by fixing vulnerabilities, building in security telemetry/instrumentation, and adding security features to our products/applications.</li>
<li>Design tooling and frameworks to make adoption of security best practices easier for developers when working in our code bases.</li>
<li>Deploy, manage, and tune infrastructure used to protect our applications from common vulnerability exploitation, account takeover, and denial of service attacks.</li>
<li>Assist in the creation and maintenance of security training</li>
<li>Actively participate in all facets of the incident response lifecycle by participating in a 24/7 on-call rotation.</li>
</ul>
Who you are
<ul>
<li>You have a BS or an MS in Computer Science, Computer Engineering, Cyber Security, or a related field</li>
<li>You have 5+ years of experience working on a security team supporting product/engineering functions, cloud infrastructure, and corporate infrastructure development</li>
<li>You have in-depth knowledge of security threats, applied cryptography, and risk assessments</li>
<li>You have hands-on experience in AWS specifically with one or more of the following AWS services: GuardDuty, Config, WAF, Shield, Macie, CloudTrail, SecurityHub.</li>
<li>You have hands-on experience writing infrastructure-as-code in languages such as Terraform, CloudFormation, Helm, etc.</li>
<li>You have software engineering experience (Python/Java/Scala/Ruby preferred) and an engineering mindset for building reliable and maintainable security infrastructure to support a large organization with CI/CD software engineering practices</li>
<li>You have experience working with product development teams to empower them on advancing security initiatives</li>
<li>You are familiar with the OWASP Top 10 vulnerabilities and how to remediate them</li>
<li>You are familiar with authentication and authorization frameworks or standards such as OAuth, OIDC, SAML, etc.</li>
<li>You have a willingness to learn and apply new skills and technologies</li>
<li>You have hands-on experience working with container technologies and Kubernetes</li>
<li>You have hands-on experience with data analytics and observability concepts and associated tooling (SQL, Looker/Tableau, Grafana LGTM stack, NewRelic, etc.)</li>
<li>Experience defining and implementing internal practices and controls for the PCI-DSS and Sarbanes-Oxley (SOX) information security and compliance standards is a plus</li>
<li>Experience presenting at industry conferences or contributing to open source communities is a plus</li>
<li>Experience with penetration testing methodologies and tools (BurpSuite, OWASP Zap, etc.) is a plus</li>
<li>Experience with infrastructure vulnerability scanning tools (Qualys, Rapid7, Tenable, etc.) is a plus</li>
<li>Experience with static analysis tools (Qwiet.ai, ShiftLeft, Fortify, Veracode, Snyk, etc.) is a plus</li>
</ul>
We value diversity
We know that the best ideas come from teams where diverse points of view uncover new solutions to hard problems. We welcome and value individuals who bring diverse life experiences, educational backgrounds, cultures, and work experiences.
Compensation &amp; Benefits
<ul>
<li>The salary band for this position ranges from $175,000 - $185,000 commensurate with experience and performance. Compensation may vary based on factors such as cost of living. </li>
<li>This position will be eligible for a competitive year end performance bonus &amp; equity package. </li>
<li>Full medical, dental, vision package to fit your needs </li>
<li>Flexible vacation policy; work hard and take time when you need it </li>
<li>Pet discount plans &amp; retirement plan with company match (401K) </li>
<li>The rare opportunity to work with sharp, motivated teammates solving some of the most unique challenges and changing the world </li>
</ul>
#LI-Remote#BI-Remote

Senior Security Engineer

Sigma Defense

Sigma Defense is a leading technology company serving the Department of Defense (DoD), providing tactical communications systems and services for digital modernization since 2006. Through our acquisitions of SOLUTE in January 2022 and Sub U Systems in May 2022, we have expanded our software and communications hardware solutions to better support JADC2, C5ISR, SATCOM, and DEVSECOPS for customers in the Army, Navy, Air Force, Marine Corps, and Space Force. Through a combination of hardware, software, and industry expertise, we provide a complete portfolio of solutions and services that accelerates information collection and sharing for faster decision making and better mission outcomes.Why would you work for us? Quite simply, the work we do is meaningful and stimulating. We promote initiative and independent thought; we encourage direct client engagement to ensure we are delivering what the customer wants; and our engineers and scientists are working on cutting-edge projects that move the state-of-the-art closer to the people who need them. If you're looking for technical challenges and an opportunity to take a leadership role in an environment that encourages you to excel, then WE are your destination.We are a company of innovative professionals thriving in a highly motivating work environment that fosters creativity and independent thinking. If you are a motivated individual with a desire to support our service men and women, now is a great time to join Sigma Defense!To learn more about our company, find and follow us at Sigma Defense Systems LLC: Overview | LinkedIn.We are looking for a Senior DevSecOps Engineer to help lead our team of motivated and experienced Software, DevOps, and Cyber Security engineers to build and maintain a modern development environment and Software Integration Facility. The environment will host an innovative software development, integration, and test environment tailored to support our customer's mission and applications. This role will entail helping define the architecture and design, coordinating with the customer to determine system requirements and priorities, building and running a team to develop and run the environment and associated CI/CD pipelines.What are some key technologies you will work with?The exact technical stack for this program is not fully defined, and you will be responsible for helping architect and build the environment. However, there are a few technologies we often reach for when exploring a new problem:<ol> <li>Linux is the most common development and deployment platform we encounter.</li> <li>Terraform is our go-to infrastructure automation tool.</li> <li>Ansible is the most common configuration management tool you will see.</li> <li>Git is the source control system we use for our projects with Gitlab being the most common tooling.</li> <li>Kubernetes is used for container management with RKE2 being our go to distribution.</li> </ol>What are we looking for in a Senior Engineer?First and foremost, a senior engineer should be able to operate independently based on a set of tasks assigned to them. Secondly, a senior engineer must evaluate technical decisions within the context of the larger project. They need to analyze the rippling impacts of technical decisions and they impact other system components. Furthermore, a senior level candidate should be willing and able to mentor other engineers in the organization. Our senior engineers are typically seen as prime technical resources and must be willing to share their opinions and experiences effectively.Requirements<ol> <li>Ability to obtain a DoD Security Clearance. (Secret)</li> <li>Ability to work on site a minimum of 3 days a week.</li> <li>Comfortable working in a Linux CLI environment.</li> <li>Experience deploying and operating Kubernetes clusters.</li> <li>Experience with containerizing applications and deploying into Kubernetes environments.</li> </ol> What will differentiate my application? <ol> <li>Certifications in key technologies areas (Red Hat, AWS, Kubernetes)</li> <li>Experience deploying and operating Rancher RKE2</li> <li>Experience with Gitlab CI pipelines</li> <li>Experience with common software build tools (e.g. Maven, make, etc).</li> <li>Familiarity with the DoD DevSecOps Reference Design</li> <li>Familiarity with the DoD RMF process</li> <li>B.S. Degree in Computer Science, Information Technology, Computer Engineering, Information Systems, or related field.</li> <li>An active DoD Security Clearance.</li> <li>Experience working on Military systems.</li> <li>Experience leading a team. </li> </ol> Salary Range: $140,000 to $180,000 annually.Benefits<ul> <li>Medical Insurance to Include an HSA Plan and HRA Plan Which Features a $6,000 Health Reimbursement</li> <li>Life and A&amp;D coverage</li> <li>Employee Assistance Program (EAP)</li> <li>401(k) Plan with Company Matching Contributions</li> <li>160 Hours of Paid Time Off (PTO) with Carry-Over up to 240 hours</li> <li>12 (Floating) Holidays</li> <li>Educational Assistance</li> <li>Highly Competitive Salary</li> <li>Flexible Schedule </li> </ul> We are an equal opportunity employer. All applicants will be considered for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, marital status, veteran status or any other applicable legally protected status or characteristic.

Senior DevSecOps Engineer

EMW, Inc.

Deadline Date: Tuesday 28 March 2023 Requirement: Online Vulnerability Tool Manager Location: Mons, BE Full time on-site: Yes Time On-Site: 100% NATO Grade: G15/88 Total Scope of the request (hours): 654 Required Start Date: 27 April 2023 End Contract Date: 31 December 2023 Required Security Clearance: NATO SECRET Duties and Role: As Online Vulnerability Tool Manager (OVA), the incumbent will be responsible for supporting Cyber Defence operations, maintaining and updating Vulnerability Assessment (VA) systems. He will report to the Head, Security Tools Management Section and collaborating with the personnel from Cyber Hygiene and CS Operations Branches. They will also work with the Staff of Platform and Infrastructure Management Section for the maintenance of the platform. The tasks include - but are not limited to – define, install and maintain advance VA configuration and associated operational functionalities, as well as and ensuring they are integrated with other NCIRC capabilities where possible. The OVA Tool Manager will be in charge of ensuring VA systems meet security requirements defined by NCSC, identifying also areas of improvement. Main responsibilities: <ul> <li>Install, deploy, update, monitor, maintain, configure, troubleshoot and keep in operational conditions the Vulnerability Assessment (VA) systems.</li> <li>Configure the VA systems to support vulnerability, compliance and remediation verification scanning.</li> <li>Define, maintain, update advanced VA configurations, e.g. low performance impact VA scans, and audit files that implement specific hardening guides.</li> <li>Troubleshoot issues arising from vulnerability scanning and serve as technical expert for online vulnerability assessment tools.</li> <li>Ensure the level of security (Confidentiality, Integrity, and Availability) of the VA systems meet or exceed the minimum security requirements defined by NATO security authorities.</li> <li>Compile, draft, review and deliver inputs on all aspects relevant to VA capabilities and VA scan results and processes, and associated documentation.</li> <li>Develop reports and dashboards that reflect the Online VA systems availability, scans performance, success/failure effectiveness and efficiency and perform targeted historical analysis, review historical trending data and recommend improvement opportunities.</li> <li>Perform functions to ensure Cyber Security Hygiene Indicators (CSHI) programme is implemented effectively and efficiently.</li> <li>Develop the NCI Agency specific Request for Change formal documentation for VA products, configure the test of the VA systems and provide support for conducting functional and security tests required by the Change Management processes for having the systems approved to be used on NCI Agency managed networks.</li> <li>Produce metrics to be integrated into wider CSSL or NCI Agency products that are being delivered up to NATO executive management level.</li> <li>Initiate, prepare, follow and defend the specialist applications upgrades in front of the Change Management Board.</li> <li>Implement the approved changes.</li> <li>Proactively recommend optimizations to VA capabilities to provide effective and efficient service operations.</li> <li>Maintain awareness of new technologies and developments, industry standards and best practices within the wider IA community and provide support for the selection of the vulnerabilities management and vulnerabilities assessment tools.</li> <li>Produce technical reports and support the production of executive level reports.</li> <li>Review security documentation and provide technical advice.</li> </ul>RequirementsSkill, Knowledge &amp; Experience: <ul> <li>The candidate must have a currently active NATO SECRET security clearance </li> <li>Essential to have a Bachelor's Degree in Computer Science combined with a minimum of 2 years' experience in Vulnerability Assessment related post as Tool Manager or similar position involving Technical ICT Engineering knowledge, or a Secondary education and completed advanced vocational education (leading to a professional qualification or professional accreditation) with 5 years post related experience.</li> </ul> Mandatory <ul> <li>Experience in implementation of INFOSEC policies and procedures.</li> <li>Software engineering including programming and/or scripting knowledge (python, shell scripting, PowerShell).</li> <li>Knowledge of Windows and Linux Operating Systems.</li> <li>Knowledge of risk based Security Assessment of systems and networks.</li> <li>Comprehensive knowledge of the principles of computer and communication security, networking, and the vulnerabilities of modern operating systems and applications.</li> <li>Practical hands-on experience in systems and tools administration.</li> <li>Demonstrable expert knowledge of Tenable Security Center / Tenable Nessus products</li> <li>Ability to investigate and analyse complex scenarios and solve problems in innovative ways</li> <li>Excellent communication abilities, both written and verbal, with the ability to clearly and successfully articulate complex issues to a variety of audiences and teams</li> </ul> Desirable <ul> <li>Experience in defining, implementing and validating NCIA CSSL security settings</li> <li>Industry leading certification in the area of Cybersecurity such as CISSP, CISM, MCSE/S, CISA, GSNA, SANS GIAC.</li> <li>Tenable Certified Security Engineer</li> <li>Prior experience of working in an international environment comprising both military and civilian elements.</li> </ul>

C002481 Online Vulnerability Tool Manager (NS) - TUE 28 Mar RELAUNCH

PEAK6

Apex Fintech Solutions (AFS) powers innovation and the future of digital wealth management by processing millions of transactions daily, to simplify, automate, and facilitate access to financial markets for all. Our robust suite of fintech solutions enables us to support clients such as Stash, Betterment, SoFi, and WeBull, and more than 20 million of our clients' customers. 
Collectively, AFS creates an environment in which companies with the biggest ideas in fintech are empowered to change the world. We are based in Dallas, TX and also have offices in Austin, New York, Chicago, Los Angeles, Portland, and Belfast. 
If you are seeking a fast-paced and entrepreneurial environment where you'll have the opportunity to make an immediate impact, and you have the guts to change everything, this is the place for you. 
AFS has received a number of prestigious industry awards, including:
<ul>
<li>2021, 2020, 2019, and 2018 Best Wealth Management Company - presented by Fintech Breakthrough Awards</li>
<li>2021 Most Innovative Companies - presented by Fast Company</li>
<li>2021 Best API &amp; Best Trading Technology - presented by Global Fintech Awards</li>
</ul>We are looking for a hands-on Manager, Information Security to join our cyber security team. This role is responsible for the day-to-day operations of the programs Cyber Operations (SOC, Cyber Threat Intelligence, Vulnerability Management, Cyber Incident Response, Penetration Testing, Email Security, and Insider threat) program. The position is responsible for the planning, design, and the support of the Security Engineering and Security Operations and Compliance functions and all its components. This role is also expected to be able to troubleshoot complex problems with little oversight, take ownership and work independently as needed to resolve issues. 
Primary Responsibilities: 
<ul>
<li> Lead team of Information Security analysts and engineers to promote information security services, while maintaining stability and governance, and putting team to success.</li>
<li>Help develop the Information Security strategy to identify gaps in security posture and drive the implementation of risk remediation programs and continuous improvements. </li>
<li> Serves as the primary Information Security threat expert keeping apprised of emerging and ongoing industry trends as well as the most likely strategies needed to mitigate the threats.</li>
<li>Participate in the software design life cycle, total cost of ownership of security appliances, application security, and infrastructure services.</li>
<li> Develop and enhance real-time monitoring of security threats, detection, and proactive response of security incidents and intrusion – enterprise wide </li>
<li> Develops key input into the development of cyber security strategies, employing existing and new resources required to mitigate the ever-changing threat landscape. </li>
<li> Perform comprehensive risk analysis of new and existing business initiatives and processes.</li>
<li>Manages the development and delivery of Information Security standards, best practices, architecture, and systems to ensure information system security across the enterprise.</li>
<li>Establish process to Identify and monitor all applications, systems, and assets on the network</li>
<li>Implement KPI/KRI metrics for continuous improvement as well as information regarding the overall security hygiene of the environment </li>
<li> Managing the event monitoring and triaging processes to detect and respond to events quickly and efficiently. Perform correlations to improve event tracking and incident detection processes</li>
<li>Managing project planning, engagement administration, budget management, and successful completion of engagements </li>
<li> Serves as organizational point person for business-critical incidents </li>
<li> Manage recruitment, training, and development for security staff </li>
<li> Foster an innovative and inclusive team- oriented work environment and play an active role in counseling and mentoring team members </li>
<li> Monitor progress, manage risk and ensure key stakeholders are kept informed about progress and expected outcomes.</li>
</ul>
Qualifications:
<ul>
<li> 7+ years experience in an Information Security or Information Technology with 3+ years of work experience leading Information Security teams </li>
<li> Expertise in working with colleagues throughout the firm and in leading collaborative teams to achieve common goals </li>
<li> Knowledge of major cloud service providers (e.g., AWS, Azure, GCP) and associated technologies • Expertise in security measures such as network access controls, network segmentation, firewalls, and intrusion detection and prevention systems (IDS/IPS) </li>
<li> Experience and familiarization with a variety of information, application, and network security monitoring tools (SIEM, EDR/XDR, IDS/IPS, firewall, WAF, SAST, DAST, IAST, among others) • Understanding of vulnerability management (VM) and application security (AppSec) management </li>
<li> Ability to demonstrate analytical expertise, close attention to detail, critical thinking, logic, and solution orientation and to learn and adapt quickly </li>
<li> Proven success in developing, implementing, sustaining, and enhancing enterprise information security and risk management programs. </li>
<li> Decision-making capabilities, with an ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one </li>
<li> Bachelor's degree or equivalent experience </li>
<li> CISSP, CISA, CISM, CRISC, CIPP or similar security or data privacy certification is a plus. </li>
</ul>
Core Competencies:
<ul>
<li> Accountable for the successful completion of multiple, individual projects simultaneously.</li>
<li>Communicate effectively by contributing significantly to the development and delivery of a variety of written and visual documents for diverse audiences. </li>
<li> Manage change and demonstrate adaptability by adjusting priorities or processes and approaching as needs dictate. </li>
<li> Work independently as a team representative of InfoSec as well as showing excellent teamwork skills. </li>
<li> Good understanding of system and network hardening practices. </li>
</ul>
Culture &amp; Core Values
<ul>
<li> InfoSec team is comprised of independent thinkers and doers who can positively impact our clients and shape Apex Fintech Solutions. </li>
<li> We strive to build and maintain a collaborative environment and engaging work—guided by Open and Honest Communication; Teamwork and Collaboration; Involving Everyone; Leaders Who Serve; and Personal Accountability </li>
</ul>
We offer:
<ul>
<li> 28 days annual leave plus 10 NI national holidays </li>
<li> Pension matched up to 7% </li>
<li> Private health insurance for medical and dental</li>
<li> Life Insurance </li>
<li> Great work/life balance and flexible working hours • Monthly catered lunches </li>
<li> Unlimited drinks and snacks </li>
<li> Poker tournaments </li>
<li> Charitable matching gift program</li>
</ul>
#IT #mid-senior #full-time

Manager, Information Security

SAIT

SAIT's School for Advanced Digital Technology (SADT) is committed to preparing our students to thrive in the borderless, global economy. We offer an exciting range of media and technology programs built on a foundation of applied, technology-immersed experiences and enhanced with work-integrated learning opportunities. How do we make this happen? Through a committed school of experts focused on the values of excellence in learning and learners, partnerships and collaboration, and being flexible and forward thinking. SADT is SAIT’s boldest transformation to date — designed with the future in mind and working closer with industry than ever. Join us as we strive to instigate a new world!The OpportunitySAIT requires instructors to teach in the Information Systems Security (ISS) Program.  The ISS program prepares students to enter the security profession with confidence and solid fundamental knowledge. The contract instructor position encompasses teaching classes in all our semesters. The instructor's role is to professionally manage the learning process of the students and to ensure that students achieve established learning objectives to the maximum of their potential.  The instructor is to make use of any and all available resources, methods, techniques and strategies, to ensure student success.  The candidate is expected to work collaboratively with colleagues, and check in regularly with course leads, to create a learning environment which is pedagogically sound, technically supported and innovative in nature. 
<h3>The Role</h3>
<ul>
<li>Prepare and present lessons, lectures, assignments, quizzes, exams, lab activities, and lab demonstrations for learners </li><li>Maintain records for the purposes of grading, assessing professionalism and tracking attendance in both theory and lab classes</li><li>Manage the classroom or lab to ensure a positive learning environment</li><li>Show personal interest in the learner and create a climate conducive to optimal learning</li><li>Provide on-going support, guidance and advice to students</li><li>Assist in the development of Curriculum</li><li>Manage the student lab environment including scheduling, and proper use and storage of lab equipment and supplies</li><li>Maintain close contact with relevant industry sectors</li><li>Participate in curriculum/program reviews</li></ul>
<h3>Qualifications</h3>
<ul>
<li>Relevant post-secondary education (minimum two-year diploma from a recognized institute) and a minimum of five years related industry experience.</li><li>Teaching experience at a post-secondary institute in Canada is an asset.</li><li>Excellent communication skills; the ability to organize and present written information</li><li>Strong commitment to delivering high quality instruction within set deadlines</li>Expertise in one or more of the following competencies:<li>Designing, and using tools to create user interfaces for desktop, web, and mobile applications</li><li>Programming language C, Python, and Assembly</li><li>Networking: configure, connect and troubleshoot Windows and Linux virtual machines</li><li>Cloud Security</li><li>System Exploitation, detect/defense techniques </li><li>Web application security</li><li>Malware analysis and disassembly</li><li>Computer forensics</li><li>Encryption and decryption</li><li>Security policies within operating systems and networks</li></ul>Job Classification: InstructorHourly rate: $38.36# of positions: 4Position closing date: Sept 1, 2023About SAIT SAIT is a global leader in applied education. Named one of Alberta’s Top Employers, we offer the chance to work with a purpose — preparing the next generation of industry leaders, entrepreneurs, advocates and explorers.  Building on our 100+ year history, we’re looking for innovative, bold and collaborative employees who embrace change and deliver world-class customer experiences. Your future starts now at SAIT. Equity, diversity and inclusion (EDI) is essential to achieving SAIT’s vision to be a global leader in applied education. We encourage applications from women, Indigenous people, racialized people, people with disabilities, people from gender and sexually diverse communities, and/or people with intersectional identities. Learn more about EDI at SAIT. At SAIT, we understand that experience comes in many forms. We’re dedicated to adding diverse perspectives to SAIT - so if your experience is close to what we’re looking for, please consider applying.SAIT is committed to supporting persons with disabilities throughout the recruitment process. We will work with applicants to provide accommodations upon request to the Talent Advisor.   Personal information that you provide is collected under the authority of the Freedom of Information and Protection of Privacy Act (FOIP Act) section 33(c) and will be used for the purposes of managing the application, selection and interview process. Should you require further information about the collection, use and disclosure of personal information, please contact the SAIT FOIP Coordinator at foip.coordinator@sait.ca. BEWARE FALSE POSTINGS AND RECRUITING OFFERS SAIT has been made aware of individuals or organizations posing as SAIT using false postings to attract job seekers and collect personal information. Please be aware that SAIT will never request sensitive personal information beyond what is required for an application.  Career opportunities at SAIT will always be posted on the SAIT career site and we encourage applicants to only apply directly through there. When your application is completed you will receive an email confirmation, if you did not receive one please check your junk mail or try applying through the SAIT career page again.

Instructor, Information Systems Security Diploma

Ivanti

Who We Are:The CompanyIvanti is a global technology leader, enabling organizations to thrive in the Everywhere Workplace – automating the tasks that discover, manage, secure and service all their IT assets. We deliver innovative solutions to exceed customer expectations.Ivanti's platform makes it possible for employees to stay productive, secure, and engaged wherever they are. That starts with us. With headquarters in Utah, offices in London and Paris and nearly 3,200 employees in 25 countries around the world, we are the Everywhere Workplace – it's a great time to work for Ivanti!The TeamIvanti’s Information Security is a global team of experienced professionals dedicated to ensuring the security of Ivanti’s products, corporate and production networks, and environments, and of course, its data. Ivanti’s innovated solutions are used by customers in every industry and every part of the world. To stay ahead of potential threats, Information Security has a strong partnership with all parts of the business, providing proactive solutions that are deeply integrated throughout the organization and our products.Our Culture:Teamwork is intrinsic to what we do and who we are. We are accountable to each other – and support one another. We provide opportunities to grow, learn, add value, and thrive while working to achieve new levels of performance. We value integrity, dignity, and respect, and place importance on demonstrating appreciation through both action and words.The technology world is battling cyberterrorism.  We wake up every day with a commitment to enable, prepare, and protect our customers so they can drive their own business success. When our customers, our governments, and our people are protected from threats – We WIN! We start with the end goal in mind – for our customers, employees, partners, and investors. With performance-driven attitudes – our victory is reaching target outcomes. Why We Need You!As part of the Information Security Architecture and Risk team, you will lead the execution of multiple functions: Taking ownership of and providing review of third-party access requests, vendor on-boarding requests, and partner on-boarding requests; conducting risk assessments of third parties and suppliers; documenting assessment findings; and supporting the architecture and risk team in other projects.Critical priorities include: Becoming familiar with Ivanti’s vendor risk management and corporate risk management procedures; familiarizing yourself with the tools Ivanti uses to conduct assessments; integrating with the proactive project-based work the Information Security Architecture and Risk team follows; and supporting necessary compliance activitiesYou will also use your skills and experience to provide input to the Risk Management Framework process activities and related documentationThe primary focus of this position in Information Security is to assist in reducing the overall risk exposure Ivanti faces by conducting risk assessments against third parties and suppliers. Your work will be instrumental in further developing Ivanti’s supplier and third-party risk management program. You will accomplish this with the help of a team of highly skilled analysts and architects. Your performance in this role will be rated on your ability to think critically and independently and work autonomously to complete challenging projects and long-term work. You will leverage best-in-class frameworks, tools, and technologies to complete your work. As part of this team, you will collaborate with members of Ivanti’s Privacy, Legal, IT, and Sales and Marketing teams.To Be Successful in The Role, You Should Be Able to:<ul><li>Apply Confidentiality, Integrity, and Availability principles.</li><li>Assess security controls based on cybersecurity principles and tenets.</li><li>Write and speak technically.</li><li>Conduct reviews of systems.</li><li>Utilize feedback to improve processes.</li><li>Perform additional job duties as required.</li></ul>You Can Leverage Your Expertise to:<ul><li>Communicate complex information, concepts, or ideas in a confident and well-organized manner.</li><li>Prepare and present briefings.</li><li>Produce technical documentation.</li><li>Evaluate information for reliability, validity, and relevance.</li><li>Function effectively in a dynamic, fast-paced environment</li><li>Work autonomously and manage time, projects, and tasks effectively.</li><li>Think critically.</li><li>Understand the basic concepts and issues related to cyber and its organizational impacts.</li></ul>You Should be Knowledgeable In:<ul><li>The risk assessment process.</li><li>Cyber threats and vulnerabilities.</li><li>Cybersecurity principles used to manage risks related to the use, processing, storage, and transmission of information or data.</li><li>The organization’s core business/mission processes.</li><li>Information technology supply chain risk management policies, requirements, and procedures.</li></ul>Qualifications:<ul><li>A minimum of an associate degree in information systems or bachelor’s in business with a focus in Econ</li><li>One to two years of work experience of one year of technical experience</li><li>Critical thinking, technical writing, self-starter and self-motivated</li><li>Security+, ISC2 CC, or ITIL Foundations, a plus</li></ul>At Ivanti, we are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates without regard to race, color, religion, sex, pregnancy (including childbirth, lactation and related medical conditions), national origin, age, physical and mental disability, marital status, sexual orientation, gender identity, gender expression, genetic information (including characteristics and testing), military and veteran status, and any other characteristic protected by applicable law. Ivanti believes that diversity and inclusion among our teammates is critical to our success as a global company, and we seek to recruit, develop, and retain the most talented people from a diverse candidate pool.

Associate Security Analyst

Cruise LLC

We're Cruise, a self-driving service designed for the cities we love.
We’re building the world’s most advanced, self-driving vehicles to safely connect people to the places, things, and experiences they care about. We believe self-driving vehicles will help save lives, reshape cities, give back time in transit, and restore freedom of movement for many.
Cruisers have the opportunity to grow and develop while learning from leaders at the forefront of their fields. With a culture of internal mobility, there's an opportunity to thrive in a variety of disciplines. This is a place for dreamers and doers to succeed.
If you are looking to play a part in making a positive impact in the world by advancing the revolutionary work of self-driving cars, join us.Cruise’s Security Data team consists of several engineers who develop data and backend infrastructure to defend Cruise. This leadership role maintains broad scope and impact with VP-level visibility.Security Data serves security and privacy teams with capabilities to secure our autonomous vehicles &amp; technology, our customers, and our employees. We are relied upon to deliver comprehensive, accurate, and timely data for both detection and response purposes.As a senior member of our team, you will design and develop software for producing security telemetry, data pipelines to collect data in batch and realtime, and automate at all stages of the attack killchain. We need strong software engineering talent to help Cruise scale ridehail safely. Our team has autonomy to define what we build and how we build it. We welcome and thrive on outside-the-box thinking, which we need in order to make the cyber security problem tractable.<h3>WHAT YOU'LL BE DOING:</h3><ul><li>Writing testable software using modern cloud architectures (i.e. AWS, GCP, Azure)</li><li>Reviewing peer software and designs</li><li>Designing novel systems to automate and streamline Security’s defense and privacy capabilities</li><li>Exemplifying software engineering best practices and mentoring members of the team</li><li>Collaborating with blue team and red team to design novel attack behavior model</li></ul><h3>WHAT YOU MUST HAVE:</h3><ul><li>Extensive experience writing software using any modern language and technology stack (i.e Golang, Python, C++, Java, etc.)</li><li>Extensive experience with SQL for querying complex data sets</li><li>Passion to independently design and deliver software solutions to the security domain</li></ul><h3>BONUS POINTS:</h3><ul><li>Familiarity with Information security principles and common attack patterns</li><li>Experience with static or dynamic malware analysis</li><li>Contributions to the open source community (public research, blogging, presentations, etc)</li></ul>The salary range for this position is $176,800 - 260,000. Compensation will vary depending on location, job-related knowledge, skills, and experience. You may also be offered a bonus, restricted stock units, and benefits. These ranges are subject to change.Why Cruise?
<ul>
<li>Our benefits are here to support the whole you:</li>
<ul>
<li>Medical / dental / vision, AD+D and lifeinsurance</li>
<li>Subsidized mental health benefits</li>
<li>One Medical membership</li>
<li>Flexible Spending Account </li>
<li>Monthly wellness stipend</li>
<li>401(k) match </li>
<li>Paid time off: vacation, sick, public health emergency, jury duty, bereavement and company holidays. </li>
<li>Paid parental, family care and medical leave</li>
<li>Family care benefits: fertility benefits, Dependent Care Flexible Spending Account (subsidized by Cruise).</li>
<li>Non-remote employees: Pre-tax Commuter Benefit Plan, healthy meals and snacks </li>
<li>CruiseFlex - a working policy for US-Based Cruisers that lets you and your manager find what working style is best for you, whether it’s primarily in-person, primarily at home or a combination of home and in-office time.</li>
</ul>
</ul>
<ul>
<li>We’re Integrated</li>
<ul>
<li>Through our partnerships with General Motors and Honda, we are the only self-driving company with fully integrated manufacturing at scale.</li>
</ul>
</ul>
<ul>
<li>We’re Funded</li>
<ul>
<li>GM, Honda, Microsoft, T. Rowe Price &amp; Walmart have invested billions in Cruise. Their backing for our technology demonstrates their confidence in our progress, team, and vision and makes us one of the leading autonomous vehicle organizations in the industry. Our deep resources greatly accelerate our operating speed.</li>
</ul>
</ul>
<ul>
<li>We’re Independent</li>
<ul>
<li>We have our own governance, board of directors, equity, and investors. Our independence allows us to not just work on the edge of technology, but also define it.</li>
</ul>
</ul>
<ul>
<li>We’re Vested</li>
<ul>
<li>You won’t just own your work here, you’ll have the potential to own equity in Cruise, too. We are competing in a market that is projected to grow exponentially, which gives our company valuation room to grow.</li>
<li>Recurring Liquidity Opportunity (RLO) - a unique equity program where employees, both current and former, have the option to sell any amount of their vested equity on a recurring basis, currently quarterly.</li>
</ul>
</ul>
<ul>
<li>We’re Safety Conscious
<ul>
<li>We integrate #staysafe, our top priority at Cruise, into our everyday work. Through our Safety Management System, every Cruiser is asked to do their part by reporting any potential issues or hazards they observe and making continuous improvements. You’ll be able to contribute to safety at Cruise, no matter your job function or title.</li>
</ul>
</li>
</ul>
Cruise LLC is an equal opportunity employer. We strive to create a supportive and inclusive workplace where contributions are valued and celebrated, and our employees thrive by being themselves and are inspired to do the best work of their lives. 
We seek applicants of all backgrounds and identities, across race, color, ethnicity, national origin or ancestry, citizenship, religion, sex, sexual orientation, gender identity or expression, veteran status, marital status, pregnancy or parental status, or disability. Applicants will not be discriminated against based on these or other protected categories or social identities. Cruise will consider for employment qualified applicants with arrest and conviction records, in accordance with applicable laws.
Cruise is committed to the full inclusion of all applicants. If reasonable accommodation is needed to participate in the job application or interview process please let our recruiting team know or email HR@getcruise.com.
We proactively work to design hiring processes that promote equity and inclusion while mitigating bias. To help us track the effectiveness and inclusivity of our recruiting efforts, please consider answering the following demographic questions. Answering these questions is entirely voluntary. Your answers to these questions will not be shared with the hiring decision makers and will not impact the hiring decision in any way. Instead, Cruise will use this information not only to comply with any government reporting obligations but also to track our progress toward meeting our diversity, equity, inclusion, and belonging objectives.
Note to Recruitment Agencies: Cruise does not accept unsolicited agency resumes. Furthermore, Cruise does not pay placement fees for candidates submitted by any agency other than its approved partners.

Senior Security Software Engineer

Two Six Technologies

Two Six Technologies is seeking a Senior Mobile Reverse Engineer to join projects on our Mobile Systems team.The role is focused on the reverse engineering iOS and Android applications on mobile devices within a team of developers, research scientists, and reverse engineers.
Responsibilities Include:
<ul>
<li>Developing, debugging, and reverse engineering code mobile Applications implemented in popular mobile programming languages (i.e., Java, Objective-C, Swift, C, C++, etc.)</li>
<li>Using open source and commercial software reverse engineering tools to determine how an application works and processes data</li>
<li>Leveraging dynamic analysis tooling to instrument mobile applications</li>
<li>Documenting and presenting research findings in useful and accessible ways for team members and customers</li>
</ul>
Minimum Qualifications:
<ul>
<li>Interested in cybersecurity and passionate about learning new things, taking things apart, and getting stuck into new problems and challenges.</li>
<li>Experience conducting application or network security assessments, security research, reverse engineering, or mobile development.</li>
<li>Experience using disassemblers/decompilers and reverse engineering tools, such as IDA Pro, JEB, Ghidra, Hopper, or Binary Ninja</li>
<li>Experience in modern scripting languages such as Python</li>
<li>Minimum of 5 years of experience writing programs in a variety of programming languages, such as Java, Objective-C, Swift, C, C++</li>
<li>Experience in understanding at least one Assembly language, such as x86/64, ARM/64, and MIPS</li>
<li>Solid understanding of TCP/UDP ports and protocols and web requests including POST, GET, HTTP headers, user agents, request parameters, cookies, etc.</li>
<li>BS Degree in Computer Science or related technical areas</li>
<li>Ability to hold or obtain a Top Secret clearance</li>
</ul>
Nice If You Have:
<ul>
<li>Experience with rooting or jailbreaking mobile devices</li>
<li>Experience using Frida or other hooking frameworks to trace and modify code execution</li>
<li>Familiarity with scripting reverse engineering tasks with reverse engineering tools, such as IDA Pro</li>
<li>Familiarity or experience in vulnerability research and exploit development on mobile platforms (iOS, Android) or their desktop analogs (macOS, Linux)</li>
<li>Experience with methods to bypass anti-tampering, exploit mitigations, and exploit detection techniques</li>
<li>Familiarity with basic cryptography design and implementation concepts</li>
<li>Experience in using intercepting proxies to interrogate or modify application traffic</li>
</ul>
Clearance/Citizenship:
<ul>
<li>TS/SCI preferred </li>
<li>US Citizenship is required</li>
</ul>
#LI-ZS1
#LI-HYBRID
Two Six Technologies is an Equal Opportunity Employer and does not discriminate in employment opportunities or practices based on race (including traits historically associated with race, such as hair texture, hair type and protective hair styles (e.g., braids, twists, locs and twists)), color, religion, national origin, sex (including pregnancy, childbirth or related medical conditions and lactation), sexual orientation, gender identity or expression, age (40 and over), marital status, disability, genetic information, and protected veteran status or any other characteristic protected by applicable federal, state, or local law. 
If you are an individual with a disability and would like to request reasonable workplace accommodation for any part of our employment process, please send an email to accomodations@twosixtech.com. Information provided will be kept confidential and used only to the extent required to provide needed reasonable accommodations.
Additionally, please be advised that this business uses E-Verify in its hiring practices.
EOE, including disability/vets.

Senior Mobile Reverse Engineer

Stripe

<h3>Who we are</h3>
<h3>About Stripe</h3>
Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.
<h3>About the team</h3>
The team performs offensive security assessments and penetration testing to identify vulnerabilities and weaknesses in Stripe's systems, applications, and networks before they impact Stripe’s business or users. We partner with other Stripe teams to defend against external attacks and respond to security incidents. The team is distributed, working primarily in Eastern and Pacific time zones, and will regularly coordinate with stakeholders in Europe and Asia.
<h3>What you’ll do</h3>
Using your security expertise, you'll uncover security weaknesses within Stripe by simulating the tactics, techniques, and procedures (TTPs) of real-world adversaries. This will involve utilizing both threat intelligence and collected telemetry to emulate cyber and criminal threat actors who may target Stripe.  Lastly, your analytic capabilities will be critical during security incidents to reduce uncertainty, uncover root causes, and inform future prevention and detection mechanisms. 
<h3>Responsibilities</h3>
<ul>
<li>Conduct complex offensive security assessments across a variety of environments, including on-premise, cloud, and mobile applications. </li>
<li>Develop scripts and tools to automate offensive security assessments.</li>
<li>Provide technical expertise in areas such as network protocols, operating systems, and web application security. </li>
<li>Work closely with other members of the Stripe security team to identify and mitigate security risks and vulnerabilities. </li>
<li>Lead offensive security projects and mentor junior team members. </li>
<li>Produce clear and concise reports testing plans, engagement models, findings, risks, and recommendations for remediation.</li>
<li>Keep up-to-date with the latest security threats, vulnerabilities, and attack methods. </li>
<li>Act as the subject-matter expert and primary contact for stakeholder teams invested in offensive security programs and Stripe-wide security initiatives.</li>
<li>Collaborate effectively with teammates, leading projects, mentoring others, and developing and championing quality standards within the team.</li>
</ul>
<h3>Who you are</h3>
We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement
<h3>Minimum requirements</h3>
<ul>
<li>5+ years experience in offensive security or related field.</li>
<li>B.S. or M.S. Computer Science or related field, or equivalent experience.</li>
<li>Proven knowledge of web application security, including vulnerabilities such as OWASP Top10.</li>
<li>Experience with cloud computing platforms such as AWS, Azure, or Google Cloud Platform.</li>
<li>Knowledge of Python and SQL, and familiarity with other programming languages.</li>
<li>Ability to analyze and interpret application logs to identify and investigate potential security incidents.</li>
<li>Excellent written and verbal communication skills, including the ability to produce clear and concise reports.</li>
<li>Ability to think creatively and holistically about identifying risk in a complex environment.</li>
</ul>
<h3>Preferred qualifications</h3>
<ul>
<li>Experience in conducting offensive security activities in the fintech or financial sectors.</li>
<li>An adversarial mindset, understanding the goals, behaviors, and TTPs of threat actors.</li>
<li>Experience partnering with threat intelligence and incident response teams to perform log analysis, digital forensics, and incident response investigations.</li>
<li>Experience with engineering, data processing and analysis tools (e.g. Databricks, Trino, etc.).</li>
<li>Familiarity with common open-source frameworks for big data processing and/or data science (PySpark, Pandas, Sci-kit Learn, etc.).</li>
</ul>

Security Engineer, Offensive Security

Wonde

Associate Security EngineerReports to: VP of EngineeringLocation: Primarily on-site (Newmarket)Hours: 32hours across a 4-day week (no salary sacrifice) Salary: £30,000 - £40,000 Who we are and what is important to us:Wonde is an innovative and fast-growing, ed-tech scale-up that is on a mission to deliver cutting-edge technologies to improve ways of working for the education sector.Our goal is to ensure the focus is always on the learning outcomes for the students. We do this by transforming how school data is maintained, managed and accessed by third-party applications (apps) via our simple API platform.We are trusted by over 27,000 schools globally in the security and reliability of their technology and data.We’re committed to changing the lives of students, teachers and parents and want the help of talented individuals who will support our journey in driving better outcomes for the education sector.The Job:As an Associate Security Engineer at Wonde, you will support the implementation, assessment and continuous improvement of security at Wonde. We use modern cloud-based technologies in Amazon Web Services, perform regular PEN testing and take security seriously, but we know that we could do more and want you to help us with this.You will work closely with our Senior Security Engineer and the wider Infrastructure team to support their agenda of improving all areas of our security. We’d like someone with strong IT and technical knowledge with the skills and desire to utilise them daily. What you’ll be doing:<ul> <li>Performing regular checks on IT equipment to ensure security and efficiency</li> <li>Assisting with any needed software/hardware upgrades </li> <li>Helping respond to any security incidents</li> <li>Supporting in the development of processes &amp; systems and looking to improve how things get done </li> <li>Being aware of ISO27001 and Cyber Essentials certification requirements and making sure we are doing better than the minimum required for these</li> <li>Acting as a point of contact for any internal IT support queries. We make heavy use of cloud based services for our IT solutions (Google Workspace, Slack, Atlassian Cloud, Aircall, Zendesk)</li> <li>Installing and configuring new starters and current team members IT equipment in line with our security guidelines. We mainly use Apple Mac laptops, but do have a number of Windows devices</li> <li>Supporting colleagues with any troubleshooting queries </li> <li>Occasional out of hours working</li> </ul>RequirementsWhat you’ll have: <ul> <li>Strong IT experience with the ability to troubleshoot issues</li> <li>The skill set to implement and configure systems to ensure they are secure </li> <li>A keen interest in security and how IT systems can help</li> <li>Self-starter attitude, taking ownership and driving forward the work from concept to delivery </li> <li>Ability to work collaboratively in a team and to interact efficiently with others </li> <li>Experience with cloud hosting providers - AWS (a nice to have)</li> <li>The capabilities and desire to help a scaling business</li> <li>Strong analytical and problem-solving skills paired with an innovative mindset </li> </ul>BenefitsWhat you’ll get: Wonde is much more than just a place to work. It is a place to grow, innovate, excel and learn. We have tech people, creative people and people people, all focused on providing a superior customer experience. We value, support and champion those we work with - promoting personal growth and happiness. We get that our success is dependent on the collective energy, intelligence and contributions of all our team members and we are committed to ensuring our work environment is the best it can be. We value your commitment and have worked hard to create adaptable and comprehensive benefits packages to suit individual needs, although you can expect the below as standard:<ul> <li>4-day working week </li> <li>Flexible working schedule/work-from-home opportunities</li> <li>Onsite gym and well-being (quiet room) facilities </li> <li>Buying and selling holiday scheme (unlimited)</li> <li>Additional holiday for length of service </li> <li>Annual allowance for volunteering days </li> <li>Onsite trained mental health and well-being champions </li> <li>Monthly lunch club (on us) </li> <li>Comprehensive wellness programmes (think meditation retreats and continuous access to well-being apps/initiatives) </li> <li>Enhanced maternity, paternity and adoption benefits </li> <li>Electric car scheme </li> <li>Cycle to Work Scheme </li> <li>Eye examination scheme </li> <li>Financial contribution to the set up of work-from-home environments </li> <li>Use of new and leading technology in the form of apple products </li> <li>Frequent company-funded social events</li> <li>Office closure between Christmas &amp; New Year </li> <li>Access to continuous learning and development opportunities</li> <li>Comprehensive employee referral scheme </li> <li>Casual Dress Code</li> </ul>In addition to the above, you’ll have access to our ‘take your pick’ benefits scheme which is tailored specifically to you!Wonde is an equal-opportunity employer. We encourage interest from all candidates and do not discriminate against any non-merit factors. If you require any adjustments to the application or selection process please call or email us so we can ensure you have the correct support. careers@wonde.com/01638 438094Please only use this number for needed amendments. If you're looking to understand more about an opportunity you’ll need to apply or confirm a time with the talent team at the above email address.

Associate Security Engineer

Menlo Security

Menlo Security's mission is enabling the world to connect, communicate and collaborate securely without compromise. COVID-19 has made our mission all the more real. We support customers across various enterprises including Fortune 500 companies, 9/10 of the largest global banks and the Department of Defense.
The world has fundamentally changed. We are growing from 400 employees into the next phase of our journey, and we need passionate talent filled with empathy and agility. The right candidate for the job is ethical, hyper-organized, fanatical about seeing things through to completion, service-oriented, and humble enough to take feedback and coaching yet confident enough to provide feedback and coaching.
Menlo is well-funded for growth and our investors are second to none. They include Vista Equity Partners (“Vista”), General Catalyst, JPMC, American Express, HSBC, and Ericsson Ventures.About You:
<ul>
<li>The candidate will play a crucial role in building the culture and the ethos of the team. </li>
<li>Excellent communication and people skills – People are our most critical asset. Relationship building and stellar communication will take you far in our fast-moving environment </li>
<li>Team player – This is a highly collaborative and supportive team environment</li>
<li>Self-starter – We trust our employees and have no desire to micro-manage. Seeking a proactive individual who will set and achieve high goals with the right balance of guidance </li>
</ul>
Requirements:
<ul>
<li>Strong computer science fundamentals and a desire to work on large scale data pipelines.</li>
<li>Solid experience in at least one programming language, preferably Python.</li>
<li>Good understanding of software development principles and test driven development discipline.</li>
<li>Knowledge in Microservices architecture / REST APIs and working with application logs to debug problems.</li>
<li>Experience in utilizing CI / CD frameworks &amp; Infrastructure tooling for deployment.</li>
<li>2+ years of experience working with a public cloud provider, preferably AWS.</li>
<li>Experience with analytics engines like ELK / Splunk. </li>
</ul>
Nice to Have:
<ul>
<li>Exposure to workflow management platforms like Airflow.</li>
<li>Familiarity with building, shipping &amp; deploying containers using Docker, Kubernetes.</li>
<li>2+ years of experience in batch data processing using Spark / Map Reduce / Kinesis or similar frameworks. </li>
<li>Experience with Infrastructure tooling like Terraform, Jenkins etc. </li>
<li>Having a DevSecOps mindset: security best practices &amp; controls during every phase of the SDLC.</li>
<li>Prior experience working in / building products or prototypes in the Threat Research &amp; Detection space. </li>
</ul>
As a Data Engineer within the Threat Research Team, you will: 
<ul>
<li>Collaborate with Security Researchers,  Software Engineers, Data Scientists and Product team to build &amp; optimize large scale batch data pipelines</li>
<li>Own the end-end data pipeline that directly impacts the overall detection efficacy on the Menlo Security Product. This pipeline will also power the security data lake that will be used by Security Researchers / Data Scientists on the Team for Threat hunting &amp; detection,  Efficacy Analysis and Dashboarding. </li>
<li>Periodically research new tools / technologies that can enable us to build performant data pipelines &amp; applications, and come up with strategies to reduce the overall cost to maintain the infrastructure. </li>
<li>Participate in technical brainstorming sessions, brown bag discussions and hackathons to come up with novel ideas / projects. </li>
</ul>
MSGL-I4Why Menlo?
Our culture is collaborative, inclusive, and fun! We have five core values: Stay Aligned, Get It Done, Customer Empathy, Think Creatively and Help Each Other Out. We believe in open communication, supporting new ideas, and sharing a mutual mindset of what we’re aiming to achieve together. There are tremendous opportunities to take initiative, implement new ideas, and have a hand in building a legacy.
All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.
<h5>TO ALL AGENCIES: Please, no phone calls or emails to any employee of Menlo Security outside of the Talent organization. Menlo Security’s policy is to only accept resumes from agencies via Greenhouse (ATS). Agencies must have a valid services agreement executed and must have been assigned by the Talent team to a specific requisition. Any resume submitted outside of this process will be deemed the sole property of Menlo Security. In the event a candidate submitted outside of this policy is hired, no fee or payment will be paid.</h5>

Data Scientist - Threat Research

Uptycs

Uptycs builds best-in-class cloud security products that leverage lightweight tools, built on open source software, to collect everything that can help detect, understand, and mitigate a wide variety of security problems. We run on laptops and cloud workloads, monitor Kubernetes and serverless containers, analyze AWS/GCP/Azure configuration and CloudTrail events, you name it. We analyze petabytes of data, process millions of events per second, and run a control plane that enables continuous scanning for vulnerabilities, misconfigurations, and APT malware on all major cloud providers and hundreds of thousands of macOS, Linux, and Windows endpointsUptycs enables security professionals at companies such as Comcast, Flexport and Lookout to quickly prioritize, investigate, and respond to potential threats across a company's entire attack surface.Our Managed Detection and Response team members help turn data into actionable intelligence, spot malicious activity, and determine response actions to help protect our customers from all types of threats. The threat landscape has changed from 'if' to 'when,' and we're building a team that lives in this new reality.Adversaries make mistakes, and you know how to use these to your advantage.Our team members work hand in hand with our customers to provide advice and assistance to ensure threat actors don’t have an easy path to compromise a customer. Defending an organization is a team activity. Our staff aren’t just analysts behind a screen, we’re actively in the fight to defend our customers and ensure they are kept informed and updated on how best to use the tools we provide and manage. You need to be comfortable pouring through data, providing analysis, and talking to customers about your analysis or providing them with recommendations. On a daily basis our team's attention is focused on three areas:Proactive threat hunting: digging through an environment for adversaries who haven’t triggered any alarms or detections yet.Chase down threat actors: when a threat actor trips a detection, our team comes alive to respond and protect our customers.Staying one step ahead of threat actors: the tooling and access you’ll be exposed to put you in a unique position to better protect our customers before a threat actor compromises a system.No overloaded, meaningless, three-letter acronyms were harmed in the making of this job description.
<h3>Key Responsibilities</h3>
<ul>
<li>Proactive trumps reactive, you thrive at hunting through data to find badness that traditional security detections can’t find.</li><li>Communication is your forte, and you can engage various levels of our business and our customers, differentiating opinion from fact.</li><li>You’re just as happy to jump on a Google Hangs or Zoom call and talk to customer as you are to fire off an email. It’s OK, turning on your camera is not mandatory, but you don’t delay delivering information to your peers or customers.   </li><li>Blogging is something you do, you have done, or you will in the future. </li><li>You've got the ability to explain malicious activities to our CEO (he's a smart guy!)</li><li>Methodical and repeatable are your mantra, documentation and taking notes are your friend.</li><li>You have an inherent dislike for false positive alerts and you’d rather spend time preventing them, than triage them. Not only can you squish false positives, but you’re also creative enough to figure out how to tune alerts to better catching threat actors.</li><li>When the time comes, and it will, you can move swiftly and accurately to seek support from customers and your peers to contain and eradicate threat actors.</li><li>We’re proud of our software and we know catching threat actors is a team sport, your input to making the life of a threat actor hard is not only needed, it’s encouraged.</li></ul>
<h3>What You'll Bring:</h3>
<ul>
<li>You can quickly add users, configure the network settings, and use the command line for at least two operating systems - bonus points if you can do this on Windows 3.11 </li><li>The concept of multi-platform excites you (Linux, Windows, Mac) - no organization works on a single operating system today, and neither will you.</li><li>select * from qualifications order by id desc - this means something to you and you could easily talk about “joins”</li><li>Strong verbal and written communication skills - basically talking to people sensibly and clearly - it’s OK, you won’t be doing sales, but we do expect our staff to deliver technical information to other humans.</li><li>The MITRE ATT&amp;CK framework isn’t something you’ve just heard at a conference. </li><li>A strong background in cybersecurity, ideally not just watching four seasons of Mr Robot.</li><li>Antivirus is so 90’s - you know how to protect a system without simply installing anti virus software.</li><li>You have set up and played with two cloud infrastructure vendors and you found this exciting…plus you didn’t manage to hit your credit card limit in the process.</li><li>You know the difference between “containment” and “eradication”. The incident response lifecycle isn’t something you just Googled for the first time today.</li><li>Beaconing, persistence and lateral movement aren't just something you've read about in a book. You know them inside out, how they vary and can spot them a mile away.</li><li>File system sleuth, you understand various file systems and you can explain details about at least two filesystem types.</li><li>We're a globally distributed team, so you're ready to hop on Slack and navigate your way through multiple channels and groups. A sense of humor and thick skin is definitely required.</li><li>You like humans as well as 1's and 0's. This isn't the place for a one-person army, teamwork and collaboration are things that you value.</li></ul>
<h3>Desired Qualifications</h3>
<ul>
<li>Bonus points if you have exposure to osquery - we’re kind of a big champion for the tools we contribute to and use, the more you know about osquery the better.</li><li>Network packet ninja, your skills translate to networks, and you can practically explain what TCP and UDP are.</li><li>Touching the disk is so 2001, you've got memory forensic skills.</li><li>You're not afraid to automate your way out of a job (don't worry, we have plenty of exciting things to do).</li><li>Ideally, you've done all of the above at scale. Some of our customers are very large! </li></ul>Uptycs is an Equal Opportunity Employer. All applicants will be considered for employment without attention to race, color, religion, sexual orientation, gender identity, national origin, veteran or disability status. Uptycs is a progressive and open-minded workplace where we do not tolerate discrimination or harassment in any form. If you are smart, passionate and good at what you do, come as you are.

Security Analyst (Managed Detection and Response)

Content+Cloud

As our next Lead Security Engineer, you will be assisting and mentoring team members, as well as delivering hands-on technical solutions using a variety of security toolsets and platforms to meet the requirements of the business and its customers.  Your key focus will be on the development and continuous improvement of Content + Cloud customers’ environments. This is a hands-on role and requires a strong level of technical knowledge, skills, and abilities. The focus is on both Cyber Security, acting as a technical escalation point and mentor to colleagues and providing guidance and contributing to security baseline improvements to assist driving the security posture of our customer environments. Requirements<ul> <li>Work within a multi-disciplined Security team delivering a range of proactive and reactive security tasks</li> <li>Technical escalation point for investigation and remediation of security events and incidents applying sound problem solving methods.</li> <li>Technical mentor for containment and remediation of potential and actual malicious incidents across the customer base where required</li> <li>Perform key security reviews and tasks to enhance the C+C access to customer environments</li> <li>Work with our Vulnerability Specialists, along with internal and external stakeholders to resolve computer security incidents and vulnerability compliance.</li> <li>Act as the main catalyst between the other technical towers to drive resolution of incidents and co-ordinating other actions.</li> <li>Be an integral part of our Security TDA to drive improvements and enhancements to recommended security baselines for a number of vendor security platforms, including Microsoft Defender and Mimecast.</li> <li>Technical ownership for one or more security platforms, for example Microsoft Defender for Endpoint, Mimecast, Microsoft Defender for O365.</li> <li>The individual will be responsible for the Technical Ownership of one or more services delivered, for example Managed Detect and Respond service.</li> <li>Drive customer satisfaction and continuously seek to improve operational performance </li> <li>Maintain a continuous understanding of the threat landscape with in-depth knowledge around threat actors, TTPs and vulnerabilities</li> </ul>Essential <ul> <li>Excellent soft skills in the form of team working, problem solving and written and verbal communication.</li> <li>A keen self-starter who can evidence excellent customer service, collaborate effectively and work independently without supervision.</li> <li>Knowledge of new security exploits in the news, ie major security breaches or attacks against organisations</li> <li>Excellent knowledge and experience of security, network and infrastructure technologies</li> <li>Excellent knowledge and SME of core messaging security platforms, including Mimecast and Microsoft Defender for O365</li> <li>Experience working with security toolsets and one or more vulnerability scanning toolsets</li> <li>Strong knowledge and experience in numerous Microsoft server operating systems</li> <li>Strong experience in secured cloud architectures (Azure, AWS)</li> <li>Experience of the Microsoft Defender suite of security platforms</li> <li>Attainment of one or more Microsoft accreditations, eg AZ-900, MS-900, MS-500</li> </ul>Benefitsclick here for the list of benefits.This is a remote-first hybrid role. See here for details about our C+C hybrid workstyle. #LI-Hybrid Hit the apply button to easily share your details with us and we promise to respond quickly.

Lead Security Engineer

Logicalis

The TeamThe Managed Services Security Operations Centre team is steadfast to deliver a world class managed security services for our customers. This practice consists of a dedicated team focusing on responding to our immediate customer needs and continuous service improvement. Team members rely on each other for success and positive customer outcome is front of mind in each interaction.The RoleThe SOC Senior Security Specialist role is responsible for our Managed Security Service customers. The Senior Security Specialist has the remit of assessing, discovering and directing remediation of security vulnerabilities within client environments whilst working as part of a managed security team on various cyber security projects and tasks. This role involves working with all levels of engineers, SOC Analysts, clients and other stakeholders in managing security services and systems which are kept up-to-date and relevant in the rapidly evolving Managed Security Services industry. This is a senior technical role which interacts with our customers and expected to provide 3rd level support for the current services as well as supporting, mentoring and coaching colleagues. Requirements<ul> <li>Experience of working in a Cyber Security Operations Centre or Cloud Security Operations equivalent.</li> <li>Be a subject matter expert across Managed Security Services and be the primary technical escalation point for escalated SOC incidents.</li> <li>Handle internal and client escalations by engaging with key stakeholders and handling events as part of the Security Incident Management Process</li> <li>Threat intelligence gathering to ensure that detection methods are effective against current threats and hunt for suspicious activity based on anomalous activity.</li> <li>Prepare detailed reports, providing information on findings, status and progress of investigations, as well as vulnerability and risk factors.</li> <li>Produce incident response playbooks to drive a consistent approach to handling common incidents and improve operational processes.</li> <li>Professional security related certifications, for example, CCSP, CISSP CISM, CISA and CEH , Network Security related.</li> <li>Good to have or willing to work towards achieving Microsoft Cyber Security Certifications such as SC-200, SC-300 and AZ-500</li> <li>Broad experience of AD, Azure AD, IAM, PIM, RBAC, PAM, SIEM/SOAR, AV, IDS/IPS and MDM solutions</li> <li>Possess technical knowledge of enterprise and cloud security architecture, including products capabilities and awareness of industry standards – PCI-DSS, ISO 27001, NIST</li> <li>Sound knowledge on Microsoft Azure Cloud Security tools such as Microsoft Sentinel, Microsoft Defender for Cloud and Microsoft Azure security technologies.</li> <li>Excellent written and oral communication skills. Self-motivated to improve knowledge and skills.</li> </ul>BenefitsWhat’s in it for you?As a valued member of ‘Logicalis' you will enjoy several benefits, such as;<ul> <li>Modern offices: located in Melbourne, Sydney, and Malaysia</li> <li>Supportive team environment: Confidential pulse checks tell us we are known for being "Unselfish with knowledge", "Flexible and Diverse" and "Give a shout-out and there will always be help"</li> <li>Pick your own adventure: Our people have moved from Help-desk to Cloud-Engineering. Admin to Project/Program Management. Project Management to Product Development. If something interests you, we’ll fund you to learn it, so you can become it!</li> <li>Breadth of experience and purpose: People here can have an idea, make a plan, and see it through. Our people enjoy genuinely impacting change and controlling their professional success.</li> <li>Flexible, modern, working arrangements: Find your own method for collaboration and productivity to achieve a happy balance.</li> </ul>About Logicalis Asia Pacific MSCLogicalis Asia Pacific is a division of the Logicalis Group, an international IT Solutions Integrator who employs 5,800+ staff, across 65 locations worldwide. With operations in Melbourne, Sydney, Brisbane and Cyberjaya, Malaysia. Logicalis Australia enables organisations to transform their internal capabilities and gain greater business value from their IT investment.

BHG Financial

Are you ready to join a growing team that puts a premium on productivity and has an award-winning culture, centered around transforming talented employees into effective business leaders? Then BHG Financial is the place for you. We offer innovative financial solutions to licensed and highly-skilled professionals, representing the best of both traditional lending and fintech, and are looking for passionate, impact players to help take our company to the next level.  At BHG, you’ll become immersed in the finance industry—with a variety of loan solutions, credit cards, patient financing, bank programs, and collections services, which have helped BHG become one of the leading providers of finance solutions.  With over 20 years in business, we have the stability of an established company with the speed and agility of a startup, where ingenuity and risk-taking are encouraged, and every employee has the opportunity to learn, grow and thrive. Who You AreYou are a motivated IS professional who is passionate about governance, risk, and compliance (GRC). You excel at producing results and have experience in an audited environment. You are an energetic, highly motivated individual, and thrive in a fast-paced environment where you can assist BHG in meeting its compliance requirements and reducing risk to the BHG brands.
<h3>What You'll Do</h3>
<ul>
<li>You will assist in the development, maintenance, and enhancement of the IS GRC Program by collaborating with the overall IS Team as well as multiple BHG stakeholders.</li><li>Serve as a point of contact and subject matter expert for BHG's Business Continuity and Disaster Recovery Program.</li><li>Build relationships with stakeholders, working with them to maintain the BC/DR program to ensure adequate resources and documentation are in place to support recovery efforts.</li><li>Coordinate the resting of BC/DR plans to verify the ability to meet Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO).</li><li>Assisting in the development and maintenance of IS policies, standards, and procedures.</li><li>Maintaining and reporting out IS metrics, detailed and board level.</li><li>Supporting security awareness training and activities throughout the organization.</li><li>Assisting in developing enterprise and functional team-specific presentations to promote a security mindset.</li><li>Perform IS risk assessments on strategic initiatives and internal systems.</li><li>Support developing remediation plans for issues and risks, coordinate activities with owners, and track remediation to completion.</li><li>Analyzing third parties for adherence to BHG policies and standards.</li><li>Evaluating risks related to policy and standard exceptions.</li><li>Helping respond to customer or other third-party inquiries related to BHG’s IS program.</li><li>Coordinating audits and information gathering for financial audits, SOC 2 examinations, third-party assessments, etc. while ensuring a timely response.</li><li>Performing control assessments against BHG’s control framework.</li><li>Identifying opportunities for automation and process efficiencies and assisting in the implementation of GRC toolsets.</li><li>Collaborating with other BHG teams such as Enterprise Risk Management (ERM), product, Legal, People Development (PD), etc. to ensure BHG is complying with policies, standards, and regulatory requirements.</li><li>Working with the GRC Team to ensure the BHG stays abreast of new regulatory, legal, compliance, and security requirements. </li><li>Performing other duties as required.</li></ul>
<h3>What You'll Need</h3>
<ul>
<li>At least four (4) years of proven experience in the IS GRC field or a combination of experience in related disciplines.</li><li>Experience in a BC/DR role, with a solid understanding of planning and testing.</li><li>Bachelor’s Degree, ideally in Computer Engineering, Computer Science, or Information Systems Management or equivalent work experience in the field of IS.</li><li>Possess current or working towards relevant certifications (e.g., CISA, CISM, CRISC, etc.). </li><li>Knowledge of compliance requirements such as FFIEC, PCI, SOX, GLBA, CCPA, etc.</li><li>Knowledge of IS frameworks such as SOC 2, NIST, ISO, FISMA, etc.</li><li>Knowledge of IS risk frameworks such as OCTAVE, FAIR, ISACA Risk IT, ISO 27005, NIST 800-30, etc.</li><li>Problem analysis and resolution at both a strategic and functional level.</li><li>The ability to organize and manage multiple priorities.</li><li>Strong documentation skills.</li><li>Excellent interpersonal and communication skills.</li><li>Ability to translate technical requirements to business objectives.</li></ul>Life at BHGAt BHG, we work hard and aren’t afraid to take risks. Since the beginning, our core values of PMA (positive mental attitude), team player and loyalty have been the driving force behind every interaction we have between each other and our customers. We have a healthy respect for the daily grind, yet we value work/life balance. We believe that all employees should have the opportunity to lead and that good ideas can come from anyone. From the top-down, our leaders are actively involved not only in strategic oversight and running the business, but also in the wellbeing and growth of all employees. We consider people our #1 asset, and help employees realize their full potential, set and exceed their goals, and explore new opportunities for personal and professional development.Why You Should Join BHGWe strive to offer amenities, opportunities, events, and programming that support the interests of our teams, while furthering the culture that makes us Great Place to Work® certified. Some of the benefits you can expect when you join BHG include: ·         100% coverage of monthly health insurance premiums·         Competitive PTO and vacation policies·         Company 401(k) plan with employer contributions after one year·         On-site gym access and memberships, with personal trainers, and certified nutritionists on staff·         Company-sponsored training and certification opportunities·         Monthly award ceremonies where top achievers are celebrated and receive additional bonuses·         Ongoing volunteer opportunities to give back to the community through our BHG Cares program If you’re ready for a career where you can exercise your passions, be surrounded by co-workers who are relentlessly committed to service, and have a team-player mindset, apply today! ** All Remote employees at BHG Financial are required to work within the United States of America. BHG Financial is committed to equal treatment and opportunity in all aspects of recruitment, selection, and employment without regard to gender, race, religion, national origin, ethnicity, disability, gender identity/expression, sexual orientation, veteran or military status, or any other category protected under the law. BHG Financial is an equal opportunity employer; committed to a community of inclusion, and an environment free from discrimination, harassment, and retaliation.#LI-Remote

Sr. Information Security GRC Specialist

NiSUS Technologies

<ul> <li>Review Nessus/ACAS scan results and provide direction where required</li> <li>Recognizes potential, successful, and unsuccessful scan results for efficiency in reporting compromises thorough reviews and analyses of relevant event detail and summary information</li> <li>Evaluate systems baseline security state verified through Xacta source of record systems</li> <li>Review and mitigate liens continuous assessment</li> <li>Collaborate and develop Splunk use case dashboard reporting for security baseline. Weekly reporting of system health status</li> <li>100% Scan compliance validation for systems</li> <li>Maintain 98% asset accountability for in scope systems</li> <li>Communicates alerts regarding intrusions and compromises to their network infrastructure, applications and operating systems. Assists with implementation of counter-measures or mitigating controls</li> <li>Conducts regular audits to ensure that systems are being operated securely, and information systems security policies and procedures are being implemented as defined in security plans</li> <li>Develops, tests, and operates firewalls, intrusion detection systems, enterprise anti-virus systems and software deployment tools. Safeguards the network against unauthorized infiltration, modification, destruction or disclosure</li> <li>Responds to queries and requests for computer security information and reports. Conducts investigations of computer security violations and incidents, reporting as necessary to management</li> <li>Researches, evaluates, tests, recommends, communicates and implements new security software or devices</li> <li>Implements, enforces, communicates and develops security policies or plans for data, software applications, hardware, and telecommunications</li> <li>Develops materials for computer security education/awareness programs</li> <li>Provides recommendations to clients on information assurance engineering standards, implementation dependencies, and changing information assurance related technologies</li> <li>Performs periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system and external Web integrity scans to determine compliance</li> <li>Provides information to management regarding the negative impact on the business caused by theft, destruction, alteration or denial of access to information</li> <li>Provides advanced guidance and leadership to less-experienced team members</li> <li>May serve as a team or task leader. (Not a people manager)</li> <li>Provides information assurance project management, technical security staff oversight, and development of critical technical documents</li> <li>Ensure compliance with regulations and privacy laws</li> </ul>Requirements<h3>TS/SCI with poly required</h3><ul> <li>Position requires Five (5) years of experience as an ISSO on projects of similar scope, type, and complexity are required.</li> <li>Experience is to include at least one (1) of the following areas: knowledge of current security tools and hardware/software security implementation; communication protocols; encryption techniques/tools. </li> <li>Bachelor's degree in Computer Science or related discipline from an accredited college or university is required. </li> <li>Four (4) years of additional experience as an ISSO may be substituted for a Bachelor's degree.</li> <li>On call required for 24x7 support - Essential personnel</li> <li>Strong analytical and problem-solving skills</li> <li>Strong communications skills</li> <li>Ability to lead and work as part of a team</li> </ul><h3>One or More of the Following Certifications Required:</h3><ul> <li>A+</li> <li>Network+</li> <li>CCNA Security</li> <li>CySA+</li> <li>GICSP</li> <li>GSEC</li> <li>Security+</li> <li>CND</li> <li>SSCP</li> <li>CASP</li> <li>CCNP Security</li> <li>CISA</li> <li>CISSP</li> <li>GCED</li> <li>GCIH</li> <li>CCSP</li> </ul>Benefits<li>Health &amp; Life Insurance</li><li> Dental Insurance</li><li> Disability Insurance</li><li> 401K Retirement Plan with Matching</li><li> Tuition Assistance</li><li> Vacation and Sick Leave</li><li> Hiring Bonuses</li><li> Referral Recruitment Program</li>

G207ISSO1 - Associate Level Information System Security Officer - Cleared

Riverside Research

Riverside Research is an independent National Security Nonprofit dedicated to research and development in the national interest. We provide high-end technical services, research and development, and prototype solutions to some of the country’s most challenging technical problems.
Job Number:  1137
Riverside Research is seeking a Systems Cybersecurity Engineers to support AFLCMC/HN at Hanscom AFB in Lexington, MA.All Riverside Research opportunities require US citizenship.
Job Responsibilities:
<ul>
<li>Ensure delivery of cybersecurity services are certified in accordance with DoD 8570.01-M standards (CDRL A001).</li>
<li>Ensure that all system deliverables comply with DoD and Air Force cybersecurity policy, specifically DoDI 8500.01, Cybersecurity, and AFI 33-200, Air Force Cybersecurity Program Management.</li>
<li>Ensure that cybersecurity policy is implemented correctly on systems, ensure compliance with DoD and Air Force Certification and Accreditation policies, specifically Department of Defense Instruction (DoDI) 8510.01, Risk Management Framework (RMF) for DoD Information Technology, and AFI 33-210, The Risk Management Framework (RMF) for Air Force Information Technology.</li>
<li>Support activities and meet the requirements of DoDI 8520.02, Public Key Infrastructure (PKI) and Public Key (PK) Enabling, in order to achieve standardized, PKI- supported capabilities for biometrics, digital signatures, encryption, identification and authentication.</li>
</ul>
Required Qualifications:
<ul>
<li>Experience and Education:
<ul>
<li>BA/BS degree and 10 years of experience in the respective technical/professional discipline being performed, of which 3 years must be in the DoD, or</li>
<li>Advanced degree (MA/MS) and 8 years of experience in the respective technical/professional discipline being performed, of which 5 years must be in the DoD or</li>
<li>Directly related experience may also be substituted for degree</li>
</ul>
</li>
<li>Active DoD Secret Security Clearance</li>
</ul>
Riverside Research does not mandate COVID vaccination as a condition of employment. However, proof of vaccination or negative test may be required to enter certain government facilities and sites. Vaccination requirements will depend on the status of the federal contractor mandate and customer site-specific requirements. To protect the health and safety of its employees, their families, and to comply with customer requirements, the company requires all employees to disclose vaccination status (upon hire). 
Riverside Research strives to be one of America's premier providers of independent, trusted technical and scientific expertise. We continue to add experienced and technically astute staff who are highly motivated to help our DoD and Intelligence Community (IC) customers deliver world class programs. As a not-for-profit, technology-oriented defense company, we believe service to customers and support of our staff is our mission. Our goal is to serve as a destination company by providing an industry-leading, positive, and rewarding employee experience for all who join us. We aspire to be a valued partner to our customers and to earn their trust through our unwavering commitment to achieve timely, innovative, cost-effective and mission-focused solutions.
All positions at Riverside Research are subject to background investigations. Employment is contingent upon successful completion of a background investigation including criminal history and identity check.
Our EEO PolicyRiverside Research is an equal opportunity employer. We recruit, employ, train, compensate and promote without regard to race, religion, sex, color, national origin, age, gender identity, sexual orientation, marital status, disability/veteran, status as a protected veteran, or any other basis protected by applicable federal, state and local law.
If you need assistance at any time in our application or interview process, please contact Recruiting at email Recruiting@RiversideResearch.org. A member of the Recruiting team will be available to assist.
This contractor and subcontractor shall abide by the requirements of 41 CFR 60-741.5(a). This regulation prohibits discrimination against qualified individuals on the basis of disability and requires affirmative action by covered prime contractors and subcontractors to employ and advance in employment qualified individuals with disabilities.
This contractor and subcontractor shall abide by the requirements of 41 CFR 60-300.5(a). This regulation prohibits discrimination against qualified protected veterans and requires affirmative action by covered contractors and subcontractors to employ and advance in employment qualified protected veterans.
For more information on "EEO is the Law," please visit:http://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf
https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf

Systems Cybersecurity Engineer

Gojek

About the Role We are hiring for an Associate Accountant to be an integral part of India Finance Team who will be closely working with the team to complete audits required under various acts and various compliances in Direct taxation and Indirect Taxation on a timely basis. This role reports to the Manager, finance  india.<h3>What You Will Do</h3><ul><ul><li>Preparation of financials under International Financial Reporting Standards/ Indian Generally Accepted Accounting Principle (GAAP) / US GAAP</li><li>Coordinating with teams to provide the required data to statutory auditors / group auditors and working towards timely closure of audit</li><li>Timely preparation of Balance sheet schedules and expenses schedule and perform reconciliations and trend analysis on time to ensure that reported financials are correct</li><li>Assess the adequacy and relevance of internal control systems, policies and procedures; report on the extent of compliance with the same (Both SOX compliance and IFCoFR Compliance)</li><li>Ensure consistent and accurate application of the organization’s fixed asset policy</li><li>Manage Direct and Indirect tax compliance, reporting, and periodic filing works. Prepare all the tax calculations and estimates</li><li>Act as the key point of contact and support for our Direct and Indirect taxation matters and Liaise with tax authorities on various Direct and Indirect tax matters</li><li>Serve as subject matter /accounting expert for all payable functions (both vendor/employee payment)</li></ul></ul><h3>What You Will Need</h3><ul><ul><li>Minimum of 5+ years of relevant professional experience and must be a Chartered Accountant</li><li>Technically strong with solid knowledge in Indian Accounting Standards (IGAAP) and international Financial Reporting Standards (IFRS)</li><li>Technically strong with basic knowledge in Direct and Indirect tax compliance</li><li>Service-oriented and conscientious with attention to detail</li><li>Outgoing personality with excellent verbal &amp; written English communication skills, commitment to achieving results</li><li>Ability to effectively interact with internal/external customers and work well within a collaborative team environment</li></ul></ul>About GoTo GroupGoTo is the largest technology group in Indonesia, combining on-demand, e-commerce, and financial services through the Gojek, Tokopedia, and GoTo Financial brands. It is the first platform in Southeast Asia to host these three essential use cases in one ecosystem, capturing a majority of Indonesian consumer household expenditure.GoTo’s mission is to “Empower Progress” by offering an unparalleled selection of goods and services through a comprehensive merchant and partner network and promoting financial inclusion through its leading payments and financial services business.About GojekGojek is a Super App. It is one app for ordering food, commuting, digital payments, shopping, hyper-local delivery, and a dozen other products. We are Indonesia’s first decacorn. We are  also the only Southeast Asian startup to be part of Fortune's list of 'Companies That Changed The World.'Our Mission: To create and scale positive socio-economic impact for our customers, driver-partners, business, and MSMEs.As of 2018, Gojek processed more than $9 billion in annualized gross transaction value across all markets where it operates - in Singapore, Vietnam, and Indonesia. We have the largest food delivery product in Asia (outside of China) and is the largest payments wallet in Southeast Asia.Gojek contributed IDR 249 T to the Indonesian economy (equivalent to 2% of Indonesia's GDP in 2020). As of Q1 2021, the Gojek App witnessed over 190mn downloads by customers. The platform has over 2mn Driver Partners &amp; ~900000 Merchant Partners across SEA.About GoTo FinancialGoTo Financial brings secure, reliable, and user-friendly financial solutions to over 55 million monthly active users, more than 14 million merchants, and over 2.5 million driver-partners eager to benefit from the digital economy in the GoTo ecosystem.GoTo Financial’s consumer services include GoPay, GoPayLater, and other financial services. We also serve businesses of all sizes through leading payment gateway Midtrans, Indonesia’s largest cloud POS network Moka and GoKasir. We also have the all-in-one merchant solution GoBiz, GoBiz Plus, GoStore, and Selly - available in Indonesia and Southeast Asia.GoTo group of companies is committed to building a diverse and inclusive workplace and is an equal opportunity employer. We do not discriminate on the basis of race, religion, national origin, gender, gender identity, sexual orientation, disability, age, education status, or any other legally protected status.

Bangalore

Associate Accountant

Marco Technologies LLC

Marco is a one-stop shop for all things business tech. Our employees are “movers and shakers” and our company is always striving to do what’s right. Does this sound like a culture you want to be a part of? We’re hiring a new team member to help take Marco’s technology further – working full-time, Monday - Friday, 8am-5pm. More about us. We do it all – from copy and print solutions to IT and managed services. We are an organization led by salespeople with 650+ engineers ready to fix any and all issues. We have offices in 12 states and service nationally. Join our growing team. You won’t regret it.The Network Systems Engineer is responsible for providing quality services and solutions to our clients while maintaining a high level of client satisfaction. You will routinely perform project-based installations and service-based repair calls at client locations and will occasionally assist the Managed Service group. You are responsible for management, administration and integration of products, services, applications and operating level systems code. You will handle responsibilities from basic system installations to the overall architecture.<h3>ESSENTIAL FUNCTIONS:</h3><ul><ul><li>Installation, support and maintenance of production networks and systems to completion.</li><li>Integrate and/or consolidate servers and services between different client business units and technologies.</li><li>Integrate and maintain network services including but not limited to switching, routing, firewalls, wireless networks and network security.</li><li>Integrate and maintain high-performance groups of Windows servers for resource-intensive network applications including advanced data center solutions, virtualization and storage.</li><li>Develop and follow Marco best practices and operational procedures and create visual and written documentation.</li><li>Analyze system utilization, perform growth analysis and capacity planning and make technical/process recommendations for improving efficiency.</li><li>Provide on-call support advice and technical support to various users/clients regarding operational/applications issues.</li><li>Install new and/or upgraded software on server and client platforms.</li><li>Design archive and backup systems.  Work closely with client’s technical staff to ensure that backup and archiving designs and procedures are implemented properly .</li><li>Troubleshoot networks, systems and applications to identify and correct malfunctions and other operational problems.</li><li>Stay up to date with relevant state-of-the-art technology, equipment, and/or systems  .</li><li>Function collaboratively as part of a fast-paced, client orientated team .</li><li>Maintain parts inventory .</li><li>Accurately maintain documentation and comply with service administrative procedures in a timely basis to include pick tickets, collecting client signatures and time entry.</li><li>Plan and manage service requests independently.</li><li>Consistently maintain a revenue-to-wage ratio of 2.5 or above.</li><li>Attend required company and departmental meetings.</li><li>Perform other related duties as assigned.</li></ul></ul><h3>EDUCATION AND EXPERIENCE:</h3><ul><ul><li>Bachelor’s Degree and six years of relevant experience; or equivalent combination of education and experience.</li></ul></ul><h3>LICENSE AND CERTIFICATIONS:</h3><ul><ul><li>Current high level industry recognized certifications including one or more of the following: CCNA/Specialization, MCSE, EMC-PE, EMC-IE, CCP, VCP, BCNE, Voice Application Certifications (MSL, SRC, MAS, MBG, UCM, MCA or NPM), Voicemail Platforms, Call Recording or ATP Flex Network.</li><li>Valid Driver’s License, proof of personal insurance and an acceptable driving record.</li></ul></ul><h3>REQUIRED SKILLS:</h3><ul><ul><li>Solid understanding of routing and switching.</li><li>Proficiency with business collaboration tools such as MS Office applications and Visio.</li><li>Communication – Must possess strong communication skills in working with technical and non-technical people and the ability to develop and maintain collaborative relations among all levels of an organization.</li><li>Commitment - This is needed to see a project or task from start to finish. Showing that you are a hard worker and committed to your job and improving yourself shows you can take something on and finish it.</li><li>Initiative - Being able to demonstrate that you can handle problems on your own and deal with them. Not waiting to be told what to do when you see a problem. If you can’t solve it yourself go find someone who can.</li><li>Confidence - When you are assured of your own ability it shows you may need assistance for  the tough situations that can arise.</li><li>Team Work - The ability to work with others on a combined task, make contributions to the task and share the responsibility of the outcome.</li><li>Time Management - Your ability to prioritize several tasks and keep them running simultaneously (multitasking). Also being able to recognize and respond to changing priorities in order to meet deadlines.</li><li>Enthusiasm - You need to be able to motivate yourself..</li><li>Flexibility – Adapt to changes in the work environment.  Change approach or method to best fit the situation..</li><li>Current CCNP certification and general IT knowledge of virtualization, network systems and SAN technology preferred.</li></ul></ul>Benefits: We’re not just competitive when it comes to business tech – we’re also pretty proud of what we offer our employees. Our benefits include medical, dental, and vision insurance. We also have paid holidays and vacation, 401k with generous company match, flexible spending accounts, employee purchase program, employer-paid life insurance, voluntary-term life insurance, short and long-term disability, critical illness and accident benefits, and pet insurance. Yes, we care about your furry family too.*all benefits are dependent on employment status    Equal Opportunity Employer /AA Employer/Minorities/Women/Protected Veterans/Individuals with Disabilities <a href="https://653988.extforms.netsuite.com/app/site/hosting/scriptlet.nl?script=70&amp;deploy=1&amp;compid=653988&amp;h=6d5262aa43dfefb771d6&amp;customerId=16724572&amp;token=15433092" rel="noopener noreferrer nofollow ugc" target="_blank">Applicant Labor Law Posters</a>

Hutchinson

Network Systems Engineer

Rackspace

Rackspace Technology is a leading provider of expertise and managed services across all the major public and private cloud technologies. We’ve evolved Fanatical Support to encompass the entire customer journey — providing Fanatical Experience™ from first consultation to daily operations. Our passionate experts combine the power of proactive, always-on service and expertise with best-in-class tools and automation to deliver technology when and how our customers need it.As part of our commitment to our customers, we are dedicated to helping enable creative, automation-based solutions for all sizes of businesses and require an experienced OpenStack Architect to join our EMEA team.You will be working in a dynamic environment and encouraged to come up with innovative solutions to technical problems, analyse and prioritise problems, putting users at the heart of every decision.The ideal candidate for the role will have several years’ experience with OpenStack cloud design and implementation.Your engagements will see you working directly with customers and prospects. You will have confidence in knowing your skills (and limitations), you are calm and collected under pressure and always available to mentor the less experienced. Your colleagues see you as a good team player who is keen to share knowledge as well as to listen and learn from others. You will ideally have proven experience in the production of OpenStack deployments, including large scale deployment and physical integration experience. Travel to a customer-site in Saudi Arabia will be required.Arabic language skills will be highly advantageous.<h3>Technical Skills</h3><ul><ul><li>Very strong experience with Canonical distribution of OpenStack technologies – Ubuntu Server, MAAS, Juju, Charms, LXD, Ceph</li><li>Good understanding of all OpenStack Services - nova, cinder, swift, glance, keystone, and neutron</li><li>Have experience with Canonical’s latest version of OpenStack</li><li>Strong Linux, shell scripting and Networking experience is a plus</li><li>Solid understanding of Charmed Kubernetes and related techonlogies – Landscape, Livepatch </li><li>Experience of deploying Charmed Kubeflow and related techonlogies – Argo workflows, Dex, Jupyter, Pytorch, Tensorflow</li><li>Good understanding of private cloud environments, including vCloud Director is a plus</li><li>Proven experience in building PaaS or private cloud platforms including CI/CD automation, monitoring, log management, telemetry, and database solutions (DBaaS) – Postgresql and MySQL clusters</li><li>Experience of working with Elastic ELK Stack is beneficial</li><li>Experience of DevOps toolsets and principles</li><li>Demonstrate ability to analyze and solve problems both independently and within cross-functional teams.</li></ul></ul><h3>Other skills</h3><ul><ul><li>Degree in computer science, information systems, or other technology/engineering subject</li><li>Analytical thinking and creative problem solving; you will own issues until full resolution</li><li>Good time management skills</li><li>Good communication skills - both verbal and written – with an ability to create and share project-related documentation</li><li>Producing design documents such as HLDs and LLDs</li><li>Willingness to learn and a quick learner</li><li>Relevant certifications a big plus.</li></ul></ul>#LI-LP2#LI-RemoteAbout Rackspace TechnologyWe are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.  More on Rackspace TechnologyThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

United Arab Emirates

Dubai

OpenStack Ubuntu Architect

The leading job board for Cyber Security Jobs. Start your career in Information Security Industry. Jobs are updated daily.

Job Position and Company	Location	Tags	Posted
Senior Security Engineer at Angi	Remote Full Time Audit Incident Response
Senior DevSecOps Engineer at Sigma Defense	Full Time DOD Devsecops
C002481 Online Vulnerability Tool Manager (NS) - TUE 28 Mar RELAUNCH at EMW, Inc.	CISM Audit Manager Full Time Contract
Manager, Information Security at PEAK6	Full Time CISM Manager Incident Response Application Security
Instructor, Information Systems Security Diploma at SAIT	Full Time Contract Application Security Windows
Associate Security Analyst at Ivanti	Remote Full Time Analyst
Senior Security Software Engineer at Cruise LLC	Remote Full Time Blue Team Manager Red Team
Senior Mobile Reverse Engineer at Two Six Technologies	Full Time
Security Engineer, Offensive Security at Stripe	Remote Full Time Incident Response Application Security
Associate Security Engineer at Wonde	Full Time Windows
Data Scientist - Threat Research at Menlo Security	Full Time DOD Devsecops
Security Analyst (Managed Detection and Response) at Uptycs	Full Time Forensic Analyst Incident Response Windows
Lead Security Engineer at Content+Cloud	Remote Full Time
Senior Security Engineer at Logicalis	Remote Full Time CISM Soc Analyst Incident Response
Sr. Information Security GRC Specialist at BHG Financial	Remote Full Time CISM
G207ISSO1 - Associate Level Information System Security Officer - Cleared at NiSUS Technologies	Full Time Manager CCSP
Systems Cybersecurity Engineer at Riverside Research	Full Time DOD
Associate Accountant at Gojek	Full Time Audit Manager
Network Systems Engineer at Marco Technologies LLC	Full Time Windows
OpenStack Ubuntu Architect at Rackspace	Remote Full Time

Cyber Security Jobs

1006 Cyber Security Jobs found. Page 4 of 51

Subscribe to the weekly
Cyber Security Jobs Newsletter