Guidewire Software

<h3>Responsibilities:</h3>
<ul>
<li>The candidate will work with the Product Security team to build, maintain and run necessary automation for security and compliance. The candidate will have the following core responsibilities:</li><li>Lead, design &amp; develop automated workflows using APIs to tackle vulnerability management gaps</li><li>Research and Implement security-focused tools to defend our infrastructure &amp; applications from risks. Adopt open source, enterprise security scanners to define &amp; automate security development lifecycle processes at scale.</li><li>Develop custom scripts to increase system efficiency and lower the human intervention time on any tasks. Ensure that security requirements and considerations are woven by automation into the development of each system</li><li>Work closely with stakeholders to define and enforce security policies and access controls</li><li>Improve security team efficiency through process automation</li><li>Work in an agile team, pair programming, and support deliverables</li><li>Collect &amp; report metrics on automation effectiveness</li><li>Collaborate with peers to integrate secure DevOps principles into CI/CD pipelines and automated builds</li><li>Be a part of on-call PagerDuty rotations</li><li>Drive continuous process feedback improvement</li></ul>
<h3>Skills And Experience Baseline:</h3>
<ul>
<li>5-10 years of relevant experience</li><li>Demonstrate coding skills in Python, Java Script, Node.js, React.</li><li>Extensive experience with AWS <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> environment, using its APIs, Serverless Application Model (AWS SAM)  and Lambda functions</li><li>Experience working with CI/CD (e.g., TeamCity, Jenkins) pipelines and associated tools. </li><li>Working knowledge of react, Kubernetes, Docker Containers</li><li>Experience in general security concepts, OWASP secure coding practices and standards (MITRE ATT&amp;CK, Cyber Kill Chain, cybersecurity detection and response lifecycle)</li><li>Bachelor's degree or higher in Computer Science or a related field</li><li>Understanding of Rest APIs and ability to utilize them in the code</li><li>Experienced in design patterns and best coding practices.</li><li>Excellent written and verbal communication skills, and experience working with remote teams</li><li>Have an agile, systematic problem-solving approach, coupled with strong interpersonal skills and a sense of ownership and drive.</li><li>Unimpeachable integrity, character, courage and honesty</li></ul>About GuidewireGuidewire is the platform P&amp;C insurers trust to engage, innovate, and grow efficiently. We combine digital, core, analytics, and AI to deliver our platform as a cloud service. More than 540+ insurers in 40 countries, from new ventures to the largest and most complex in the world, run on Guidewire.As a partner to our customers, we continually evolve to enable their success. We are proud of our unparalleled implementation track record with 1600+ successful projects, supported by the largest R&amp;D team and partner ecosystem in the industry. Our Marketplace provides hundreds of applications that accelerate integration, localization, and innovation.For more information, please visit <a href="http://www.guidewire.com/" rel="noopener noreferrer nofollow ugc" target="_blank">www.guidewire.com</a> and follow us on Twitter: <a href="https://twitter.com/Guidewire_PandC" rel="noopener noreferrer nofollow ugc" target="_blank">@Guidewire_PandC</a>.Guidewire Software Inc. provides equal employment opportunities to all applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. All offers are contingent upon passing a criminal history and other background checks where it's applicable to the position.We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Senior Security Engineer (Security Automation)

Nisum

Nisum is a leading global digital commerce firm headquartered in California, with services spanning digital strategy and transformation, insights and analytics, blockchain, business agility, and custom software development. Founded in 2000 with the customer-centric motto “Building Success Together®,” Nisum has grown to over 1,800 professionals across the United States, Chile,Colombia, India, Pakistan and Canada. A preferred advisor to leading Fortune 500 brands, Nisum enables clients to achieve direct business growth by building the advanced technology they need to reach end customers in today’s world, with immersive and seamless experiences across digital and physical channels.Required Skills:- Advanced experience with <a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a> administration, including watch list creation, alerting tuning, threat feeds, use case development, and case/incident management.- Proven experience working with leading EDR solutions, CAS, IDS/IPS, network- and host-based firewalls, data leakage protection (DLP), DAM (Database activity monitoring)- In-depth, hands-on experience with at least two of the following technologies: Unix administration, Windows Server administration, Active Directory, Windows Workstation, Routers /Switches management, Firewall Management, SANS/NAS, Web servers, IAM/AAA, IDS/HDS, System vulnerability scanning tools, Application/Database vulnerability scanning tools.- Ability to analyze possible attack activities such as network probing/ scanning, DDOS, malicious code activity, and possible abnormal activities, such as worms, Trojans, viruses, etc., and coordinating remediation actions as necessary.- Understanding and working knowledge of MITRE ATT&amp;CK Framework and security forensics.- Experience with security industry standards and best practices. Proven experience with the interpretation and implementation of those standards in a corporate environment. - Strong knowledge of cybersecurity frameworks, regulations, and compliance standards (e.g., NIST, ISO 27001, FERPA)- Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate strategic information security topics, policies, and standards, as well as risk-related concepts, to technical and non-technical audiences at various hierarchical levels.- Understanding of network devices such as routers and switches. TCP/IP knowledge- Understanding of common network services (web, mail, FTP, etc.), network vulnerabilities, and network attack patterns.- Ability to work effectively under pressure and in a fast-paced environment.Qualifications:- 7+ years of proven experience in a SOC Analyst role- 10+ years working in the Cybersecurity Domain, securing enterprise-level networks- Industry certifications such as CYSA+, CEH, OWASP or GIAC certifications (preferred)- Bachelor's degree in Cybersecurity or related field (Master’s preferred)- Advanced proficiency in security tools, including SIEM (Splunk or Devo), EDR (Carbon Black or CrowdStrike), IDS/IPS, and threat intelligence platforms.- Excellent analytical, problem-solving, and communication skills¿What can we offer you?- Belong to an international and multicultural company that supports diversity.- Be part of international projects with a presence in North America, Pakistan, India and Latam.- Work environment with extensive experience in remote and distributed work, using agile methodologies.- Culture of constant learning and development in current technologies.- Pleasant and collaborative environment, with a focus on teamwork.- Access to learning platforms, Google Cloud certifications, Databricks, Tech Talks, etc.- Being part of various initiatives and continuous participation in internal and external activities of innovation, hackathon, technology, agility, talks, webinars, well-being and culture with the possibility not only to participate but also to be an exhibitor.- Since you live in Chile you will also have access to several benefits related to our center :)!Nisum is an Equal Opportunity Employer and we are proud of our ongoing efforts to foster diversity and inclusion in the workplace.

Senior Security Engineer  N5767

Everly Health, Inc.

Everly Health's mission is to transform lives with modern, diagnostics-driven care, and we believe that the future of healthcare is meeting people where they are. Headquartered in Austin, Texas, Everly Health is the parent company to Everlywell, Everly Health Solutions, Natalist, and Everly Diagnostics. We've set a new standard of people-focused, diagnostic-driven care that puts patients at the center of their own health journey. Our infrastructure guides the full testing experience with the support of a national clinician network that's composed of hundreds of physicians, nurses, genetic counselors, PharmDs, and member care specialists. Our solutions make world-class virtual care more attainable with rigorous clinical protocols and best-in-class science to tackle some of the healthcare industry's biggest problems.We are hiring a <a href="https://infosec-jobs.com/insights/devsecops-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">DevSecOps</a> Manager to be a leader coach for our DevSecOps team to support Engineering. You will serve as a mentor and coach for engineers, work with theVP of Engineering and the CISO to enable more efficient processes and best practices across our teams, work with the team members on career development, and jump in and get your hands dirty with DevOps bugs and features when the need arises.You will work on optimizing DevOps processes including on call management, systems monitoring, CI/CD pipeline performance, vendor management, infrastructure testing, supporting our engineers, ensuring developer happiness and overall fostering a world classDevSecOps team. You will also be responsible for picking up DevOps tasks and handling escalations as the need arises.The ideal candidate would be someone who believes no task is beneath them and knows how to achieve sustainable pace. If you are passionate about building a world class DevSecOps team and looking for anopportunity to learn, build, optimize, and grow, Everly Health is the place for you.
<h3>What You'll Do:</h3>
<ul>
<li>Balance your time between team management, managing on call operations and developing systems that help increase site reliability and performance.</li><li>Provide ownership of our monitoring tools and systems through our SREs. Drive improvement on the observability and usefulness of the alerts and logs generated.</li><li>Collaborate closely with our engineering development teams to ensure that designed solutions respond to non-functional requirements such as availability, performance, security, and maintainability.</li><li>Maintain metrics and ensure that the software delivery pipeline is as efficient as possible</li><li>Conduct interviews and recruitment activities, performance reviews, career planning and team coaching.</li><li>Partner closely with our Product Management and Engineering Leadership to accelerate our maturity.</li><li>Participate in disaster recovery planning, testing and readiness, and incident post mortems.</li><li>Inspire, mentor and coach the team to provide the best solutions in the DevOps space.</li><li>Oversee DB performance, systems performance, CI/CD pipeline performance, and monitoring tools through delegation as well as hands on participation.</li><li>Collaborate with the Security team to ensure best-in-class <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> security.</li><li>Ensure good communication and relationships with vendors.</li><li>Promote solid DevOps patterns along with helping the team architect and code reliable and fault tolerant solutions.</li><li>Help to document our systems along with ensuring the team is documenting as we go.</li><li>Ensure that our systems and infrastructure are both compliant and secure.</li><li>Participate in audits and security assessments.</li><li>Own the DevSecOps space.</li></ul>
<h3>Who You Are:</h3>
<ul>
<li>A continuous improvement aficionado that analyzes impact of changes today, and identifies potential risks down the road. </li><li>You understand the importance of psychological safety within a team environment and you proactively work on establishing trust.</li><li>Comfortable in a regularly changing environment and knows how to solve problems effectively, learn on the fly, and can make decisions quickly but carefully.</li><li>You naturally communicate context, and you demonstrate strong reasoning behind decisions. </li><li>You are a decision maker, but you also take counsel from others including your team members.</li><li>You take the time to document processes as you go.</li><li>You favor pragmatism. </li><li>Advocates for DevOps initiatives across the company with confidence and humility.</li><li>You are aware of what is happening across the organization and can see the big picture. </li><li>You have the ability to work cross functionally across multiple departments.</li><li>You are an excellent communicator and have great written and verbal communication skills.</li><li>At least 8 years of engineering experience with a focus on DevOps and/or similar roles.</li><li>At least 2-3 years of experience managing teams.</li><li>Bachelor’s degree in Computer Science / related discipline or equivalent work experience.</li><li>Experience with Infrastructure Monitoring tools such as Prometheus, AWS CloudWatch, AWS Cloudtrail, AWS Event Bridge, Grafana, and Datadog preferred</li><li>Version control with Github/Gitlab.</li><li>Experience with CI/CD.</li><li>Experience with safely handling sensitive data in a regulated environment.</li><li>Experience with threat detection, security protocols, security audits and security scanning tools.</li><li>Experience with Infrastructure as Code and Terraform.</li><li>Knowledge and experience with AWS, EC2, EKS, Kubernetes.</li><li>Experience using APM tools and interpreting associated data/metrics.</li><li>Experience with database services and management such as Amazon RDS, PostgreSQL, and MySQL.</li><li>Ruby on Rails with ActiveJob and/or Sidekiq experience is preferred but not required.</li></ul>

Manager, DevSecOps (Development, Security and Operations)

Boohoo Group

<h3>About Us</h3>Having started in 2006 with just three team members, we've evolved into a multi-brand, ecommerce giant with offices worldwide and a passionate team of over 4,000. In the past year alone, we've achieved remarkable milestones including automating our Sheffield distribution centre, launching our US warehouse, and initiating our tech re-platforming. In Tech, we’re proud to support every function. We’re a digital-first company that is totally <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> native. We embrace change and future-proof the business, delivering critical customer facing and internal stakeholder facing systems. Everything from colleague tech to frontend websites and apps, buying and merchandising tooling, and all that’s in-between, we take care of it. Our ideas support and drive the Group’s agenda.<h3>The Role</h3>As the Group Information Security Manager at boohoo group, you will play a crucial role in ensuring the security and integrity of our systems, infrastructure, and data. You will join the biggest online fashion retailer in the industry, where you will have the opportunity to contribute to our success story and be part of a vibrant and fast-paced work environment. At boohoo group, we value creativity, innovation, and teamwork, and we believe in providing endless opportunities for our employees to grow and excel.In this role, you will be responsible for developing, implementing, and managing comprehensive security strategies, policies, and procedures to ensure the confidentiality, integrity, and availability of our information assets. Working collaboratively with cross-functional teams, you will implement best practices to identify and mitigate security risks. You will have the opportunity to work on diverse projects and collaborate with talented professionals across the organization. This role offers a rewarding and fulfilling opportunity for individuals who are passionate about information security and thrive in a dynamic, ever-changing environment.<h3>Your Team</h3>Your peer group are a range of driven and dynamic individuals who see security as important as their own domains. In addition, your team are a passionate set of individuals, keen to continue to grow and improve the security posture of the Group. You will have a team of Cyber Security Analysts and GRC Analyst helping deliver the Cyber Security Strategy.<h3>Responsibilities</h3><ul> <li>Acting as the operational lead for Information Security, including Security Operations, Threat and <a href="https://infosec-jobs.com/insights/vulnerability-management-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">Vulnerability Management</a>, and GRC functions.</li> <li>Establishing and maintaining effective security policies, standards, and procedures.</li> <li>Developing and overseeing the threat and vulnerability management program, including threat hunting, penetration testing, and remediation activities.</li> <li>Developing and executing cyber incident response plans to improve the handling and mitigation of security incidents.</li> <li>Conducting regular risk assessments to identify vulnerabilities and threats and developing strategies to mitigate them.</li> <li>Horizon scanning to monitor emerging risks, changes to regulations, standards, and best practices.</li> <li>Collaborating with senior leadership to align security initiatives with business objectives and priorities.</li> <li>Managing budgetary requirements and forecasting, including stakeholder and vendor relationships.</li> <li>Developing and delivering information security awareness and training programs to educate employees about security policies, procedures, and best practices.</li> <li>Promoting a culture of security awareness and accountability throughout the organisation.</li> <li>Providing guidance and expertise in designing, developing, and implementing secure architectures and solutions.</li> <li>Reviewing and evaluating proposed IT projects and systems to ensure compliance with security requirements and best practices.</li> <li>Assessing the security posture of third-party vendors and service providers to identify and mitigate potential security risks.</li> <li>Establishing and maintaining security requirements and standards for third-party contracts and agreements.</li> </ul>Requirements<ul> <li>Bachelor's degree in Computer Science, Information Security, or a related field.  Advanced degree or professional certifications (e.g., CISSP, CISM, CISA) preferred.</li> <li>Proven experience of working in information security, and experience in a managerial or leadership role.</li> <li>Experience in leading a team of security professionals, providing guidance, mentoring and cultivating their development.</li> <li>Strong knowledge of information security principles, standards, and best practices, including a thorough understanding of OWASP 10 for Web App and API security.</li> <li>Experience with security risk management, incident response, and security awareness training.</li> <li>Hands-on experience with security technologies, such as firewalls, intrusion detection/prevention systems, <a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a>, and endpoint security solutions.</li> <li>Excellent communication, leadership, and interpersonal skills.</li> <li>Ability to work effectively in a fast-paced, dynamic environment and collaborate with cross-functional teams.</li> <li>Ability to coordinate and lead security audits, assessments, and compliance reviews.</li> <li>Demonstrable technical ability in web application, network, and cloud security.</li> <li>Knowledge of regulatory requirements such as UK GDPR and PCI DSS.</li> <li>Expert understanding of Secure by Design, Shift Left, and the CI/CD Pipeline.</li> </ul>BenefitsWe offer them some amazing benefits:<ul> <li>25 days holiday</li> <li>Free on-site gym with daily classes (due to current restrictions, live PT sessions)</li> <li>Discretionary Bonus Scheme</li> <li>Company shares schemes - including a ' Save As You Earn' scheme</li> <li>Up to 40% staff discount (including PLT, Boohoo, Boohoo MAN, Nasty Gal, Coast, Warehouse, Misspap)</li> <li>Social events (including pay day drinks, Employee Appreciation Day etc.)</li> <li>Salary sacrifice pension scheme with employer contribution</li> <li>Flexible working hours</li> <li>Cycle to work scheme</li> <li>Childcare support through the Government</li> <li>Health cash plan</li> <li>Personal development opportunities to learn and grow at work</li> </ul>#LI-GS1 #LI-ONSITE

Group Information Security Manager

DigitalOnUs

Who is Tech Mahindra? 
At Tech Mahindra we not only provide Agile and DevOps methodologies to our customers, we have adopted the same within the company as well. Our nimble processes are not mired in red tape, yet robust, flexible and result-oriented. We are Software Engineers, Technical Architects, Cloud and DevOps specialists. But the most important, we are dreamers, creators and challengers. Each day, we strive to make great come alive. Our lemma: “work smart and play hard”
Our technology partners are Hashicorp, Cloudbees, Chef, Pagerduty, Docker, SAP and Google Cloud.
We are always looking for the brightest candidates to come and we offer a work environment with everything you need to be your best. Does Ambition, Success, Fun, Friends &amp; Learning define your idea of a career? Join us and be part of our family!
We’re looking for a Security Engineer
Location: Mexico- remote
Technical Capabilities:
<ul>
<li>Understand complex technical issues and managing them within a fast-paced business environment.</li>
<li>Identify and define system and configuration requirements.</li>
<li>Maintain all software and configurations in relation to given project.</li>
<li>Configure and troubleshoot security SaaS products</li>
<li>Implement specific process flows using the available technology stack</li>
<li>Document processes, workflows, and configurations for standardization</li>
<li>Liaise with vendor to implement security solutions to meet business objectives</li>
<li>Coordinate and collaborate with internal business units to achieve technical requirements </li>
<li>Required Skills, Knowledge, and Experience</li>
<li>Detailed understanding of modern cybersecurity tool stacks (<a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a>, SOAR, TIP, etc.) and how each system interacts with peers.</li>
<li>Understanding of SaaS and <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> services and the underlying architecture supporting those services.</li>
<li>Experience with network security and networking technologies and with system, security, and network monitoring tools</li>
<li>Excellent problem-solving ability and attention to detail.</li>
<li>Past use of Agile/Scrum or similar collaborative tools</li>
</ul>


 


What you can expect from us
At Tech Mahindra what distinguishes us from other teams is the comfortable environment which engenders trust within teams and with our customers. Trust and openness leads to quality, innovation, commitment to deliverables, efficiency and cost-effectiveness for all our customers.
<ul>
<li>Work with some truly remarkable IT engineers, architects, specialists and more.</li>
<li>We’re growing at a phenomenal pace and we’d like some company.</li>
<li>Hear your voice, nurture your talent and help you strengthen your foot print!</li>
<li>Benefits above the law</li>
<li>Mentorship, and opportunities to grow and learn</li>
</ul>If you apply for this opportunity we will get you resume and its contain personal data whose treatment has been authorized by its owner for Digital OnUs, S. de RL de CV (the "Company”). If you are not the owner of this information or have no relation whatsoever with the subjects treated in it, you are requested in the most attentive way not to make copies of it and / or its attached files and delete it immediately, under the risk of being considered as responsible for the unauthorized treatment of personal data in accordance with the Federal Law on Protection of Personal Data Held by Private Parties, its Regulations, and other applicable regulations. If you are the owner of personal data in possession of the Company and wish to obtain further information regarding the processing of your personal data or the exercise of your ARCO rights, please consult our integral privacy notice on the website https://www.digitalonus.com/privacy-policy/

Security Engineer

Deloitte

To join Deloitte is to participate in the transformation of leading national and international organisations. At Deloitte we are committed to making an impact on society, our clients and you.

Are you in?


Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.

Cyber Attack Surface Analyst is responsible for monitoring and maintaining Deloitte’s scores across the three major cyber risk rating services, and drive remediation for identified vulnerabilities, technical gaps, and data score discrepancies.


What will your day-to-day be like?

<ul>
<li>Perform cyber reconnaissance to illuminate a potential attack surface area.</li>
<li>Must have experience with the identification and implementation of counter-measures or mitigating controls for deployment and implementation in the enterprise network environment.</li>
<li>Maintain vulnerability data integrity by evaluating data set for duplication, missing legal entities, scan ranges, scan authentication failures, etc.</li>
<li>Act as a SME for attack surface posture and recommended next steps for remediation</li>
<li>Respond to time-sensitive requests from member firm and cyber leadership teams</li>
</ul>


What do we expect from you?

<ul>
<li>Required:
<ul>
<li>Minimum of 2 years of <a href="https://infosec-jobs.com/insights/vulnerability-management-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">Vulnerability Management</a> experience.</li>
<li>Minimum of 3 years of experience working in Information Security.</li>
<li>Experience in scripting especially in Python, Bash and PowerShell or other languages.</li>
<li>Experience with Vulnerability scanning tools (such as Qualys, Nessus, Nexpose/Rapid7).</li>
<li>Mastery of English language skills (oral and written).</li>
</ul>
</li>
</ul>

<ul>
<li>Preferred:
<ul>
<li>Experience working with large data sets.</li>
<li>Experience automating processes and procedures.</li>
<li>Familiarity with <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> platforms (Azure, AWS and GCP).</li>
</ul>
</li>
</ul>

What do we offer?

<ul>
<li>You will have a hybrid-flexible working model.</li>
<li>You will be eligible for a flexible remuneration system, medical service, health insurance, life insurance and accident insurance.</li>
<li>You will have a training plan throughout your career.</li>
<li>You will develop in a feedback culture where you will be encouraged to learn continuously.</li>
<li>If you are interested, you will participate in national and international social action and volunteering programmes.</li>
<li>You will enjoy a cultural and sporting offer.</li>
</ul>


Now the choice is yours! If you think this position is right for you, click 'Apply now' and complete your profile so we can assess your application. If you fit the profile, our recruitment team will contact you to get to know you.
From there we will guide you through our recruitment process and your Deloitte story will begin.


What impact will you make?

Senior - Cyber Attack Surface Analyst

Remitly

Job Description:Job Description:Compliance Analyst, Global Compliance Internal TestingThe Compliance Analyst, Global Compliance Internal Testing (GCIT) will support the planning, design, and execution phases of testing projects. You will be responsible for evaluating the efficiency and effectiveness of our internal controls, document findings, and recommendations. You will work closely with senior members of the Global Compliance Internal Testing team to evaluate Remitly's control environment and drive forward Annual Testing Plan priorities. This role will be based in Managua, Nicaragua.You will play an important role in providing assurance and advisory services and your responsibilities will include:<ul><li>Understand end to end processes and identify and document key controls/risks.</li><li>Perform Compliance testing reviews to determine the effectiveness of the internal controls.</li><li>Prepare scope documents, define test procedures, using a sample to test controls, perform root cause analysis, and make recommendations on improvements in alignment with root cause.</li><li>Build collaborative and trusting relationships with business and cross-functional partners.</li><li>Perform other duties as required.</li></ul>You Have:<ul><li>Bachelor's degree from accredited University in Information Systems, Accounting, or Finance.</li><li>3-5+ years or experience in Internal Audit, Compliance, 2nd Line of Defense Testing, or Quality Assurance within a financial services company, Fintech, or a consulting firm.</li><li>Experience in end-to-end testing cycle management and operating in a fast-paced, dynamic environment while supporting multiple projects/initiatives.</li><li>Must be technically adaptable and able to be comfortable with systems/process analysis.</li><li>Experience in process mapping techniques, design and analysis of processes, systems and organizations.</li><li>Experience conducting testing projects in the technology, compliance, and regulatory space.</li><li>Strong focus on quality and attention to details.</li><li>Strong project management and communication skills.</li><li>Exceptional analytical skills with a strong focus on technology, financial, and compliance risk.</li><li>Experience using Microsoft Excel, PowerPoint, and flowcharts (e.g. Lucidchart/Visio)</li><li>Preferred: Experience associated to Anti-Money Laundering /Combating the Financing of Terrorism (AML/CFT), Consumer Protection or Consumer Fraud compliance.</li><li>Preferred: Certified Information Systems Auditor (CISA), Certified Information Systems Security Professionals (CISSP); Certified Information Security Manager (CISM) or Certified Information Privacy Professional (CIPP) or equivalent.</li><li>Preferred: Experience with data analytics and data analytics tools (Tableau, Alteryx, Power BI, Snowflake or Microsoft Excel).</li></ul>Our Benefits<ul><li>In Site Subsidized Meals</li><li>Transportation</li><li>Birthday Program</li><li>Employee Discount Catalog (Eyewear, Entertainment, Lodging, Food, Beauty, Shipping)</li><li>Payroll Deductions Benefits (Eyewear, Book Stores and Department Store Membership)</li><li>Premium Language Bonus</li><li>Annual Salary Review</li><li>Employee Stock Purchase Plan (ESPP)</li><li>Premium Language Bonus</li><li>Private Life Insurance</li><li>Remitly Wellness Program (Modern Health App, Lactation Room, Nutritionist, Phycologist, On site Clinic and Remitly Doctor)</li><li>Continuous Learning Tools &amp; Certification programs</li><li>Loyalty Award</li><li>Reduced Working Hours per Week (from 48 to 40)</li><li>Two consecutive days off</li><li>Benefits established by law (13th Month, Vacations, Seniority, INSS, Paid leave for Marriage, Bereavement, Paternity, Maternity, Lactation, etc.)</li></ul>We are committed to nondiscrimination across our global organization and in all of our business operations. Employment is determined based upon personal capabilities and qualifications without discrimination on the basis of race, creed, color, religion, sex, gender identification and expression, marital status, military status or status as an honorably discharge/veteran, pregnancy (including a woman's potential to get pregnant, pregnancy-related conditions, and childbearing), sexual orientation, age (40 and over), national origin, ancestry, citizenship or immigration status, physical, mental, or sensory disability (including the use of a trained dog guide or service animal), HIV/AIDS or hepatitis C status, genetic information, status as an actual or perceived victim of domestic violence, sexual assault, or stalking, or any other protected class as established by law.Remitly is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.Remitly is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Compliance Analyst, Global Compliance Internal Testing

Cohesity

<a href="https://www.cohesity.com/" rel="noopener noreferrer nofollow ugc" target="_blank">Cohesity</a> is on a mission to radically simplify how organizations secure and manage their data, while unlocking limitless value. As a leader in data security and management, we make it easy to secure, protect, manage and derive value from data—across the data center, edge, and <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a>. At Cohesity, we're a group of builders and go-getters who are committed to doing the right thing. We encourage you to come as you are, as our differences make us stronger.
We’ve been named a Leader by <a href="https://www.cohesity.com/company/awards/" rel="noopener noreferrer nofollow ugc" target="_blank">multiple analyst firms</a> and are prominently featured in the <a href="https://www.cohesity.com/press/cohesity-is-named-to-the-2021-forbes-cloud-100-for-the-third-year-in-a-row/" rel="noopener noreferrer nofollow ugc" target="_blank">Forbes Cloud 100</a> and <a href="https://www.cohesity.com/press/cohesity-featured-among-crns-100-coolest-cloud-companies-for-the-third-time-in-a-row/" rel="noopener noreferrer nofollow ugc" target="_blank">CRN’s Coolest Cloud companies</a>. 
Join us and we'll lead the way together.
About This Role:
We are actively seeking seasoned, senior trendsetters in a role as Staff Software Technical Leader, Security Products. As part of our Security Engineering team, you will be responsible for architecture, end-to-end system design from inception through product delivery and lifecycle of multiple security products in one or more of: Detection, Remediation, Prevention of any “kill-chain” at any stage. This can include research, development and delivery, partner integrations among but not limited to Malware, Ransomware, IAM, KMS, DSPM, CSPM, UEBA, <a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a>/SOAR and many more. 
Day-to-day role involves developing system security software service at a fast paced development environment in a hybrid cloud &amp; on-prem deployment and continuously improving product security posture. The role will serve as a Security Specialist in cloud, container, Kubernetes security, coherence caching, control plane - data plane connectivity and associated security &amp; hardening needs, scale-out DB &amp; managed services, monitoring &amp; metrics, hands-on with cloud-infra CI/CD tools, performant and efficient cloud backend development (full-stack would be a benefit), KMS, identify &amp; access management. 
You are working in lock step with cross-BU platform, cloud SaaS engineering and infrastructure teams, enabling and delivering security products in the ecosystem with monthly release cycles. Writing design specs, implementing the design, and communicating with stakeholders will be a regular part of the job. We’re looking for an individual who is motivated by technology and enjoys problem-solving, mentoring, reviewing and collaborating with engineers (not as a people manager, but as their tech lead and architect).  
Responsibilities
<ul>
<li>Architect, technically leads teams as a hands-on Principal to guide, mentor and deliver Cloud Security Products in SaaS distributed environments. This includes Anti-Ransomware solutions, AI/ML based attack vector analysis with solution &amp; product design to address customer needs to ensure Data Security, Data Sovereignty. </li>
<li>Bring core value with current and innovative solutions for Cohesity leadership in securing customer data in hosted SaaS and enterprise environments.</li>
<li>Engineering, implementing and supervising security measures for the protection of Cloud Infrastructure and integrations</li>
<li>Perform security architecture reviews for Cloud Infrastructure for existing and new services</li>
<li>Conduct assessments of security controls and configuration and continuous verification with automation</li>
<li>Threat Modeling and Pen Testing of Cloud security Infrastructure &amp; services</li>
<li>Design and implement Cloud Infrastructure Monitoring use cases.</li>
<li>Implement and Manage Egress and Ingress security controls Network Firewall, WAF, DDoS</li>
<li>Perform Security training and outreach to internal development tools.</li>
<li>An advocate for policy of code, security, and automation. Embracing <a href="https://infosec-jobs.com/insights/devsecops-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">DevSecOps</a> towards all cloud activities</li>
<li>Design, develop, and implement system, container, and Cloud Security related product features (MUST HAVE)</li>
<li>Deep understanding of Linux Internals, Containers, and Cloud security that can be efficient at running as On-Prem software or as SaaS on public clouds</li>
<li>Coordinate features and deliverables across multiple teams to achieve project goals</li>
<li>Collaborate with cloud operations to establish KPI for different services and own end to end delivery and lifecycle management</li>
<li>Lead initiatives and projects. Provide technical leadership and mentoring to team members.</li>
<li>An advocate for policy as a code, security, and automation. </li>
</ul>
Requirements
<ul>
<li>B.S. or M.S. in Computer Science, Electrical Engineering or related experience.</li>
<li>At least 10+ years of experience in Information Security including 4+ years of experience in Cloud Security.</li>
<li>Demonstrated success and influence in the Cloud Security space with relevant experience in one or more of: AD, WAF,  Firewall, Intrusion Prevention, Data Encryption and Compliance needs.</li>
<li>Hands-on working experience in architecting/operating solutions and security frameworks built on AWS, Azure, or Google Cloud.</li>
<li>Meaningful experience in high level programming languages (Java, Python, C++, Go).</li>
<li>Experience defining security policy, technology requirements, and control objectives.</li>
<li>Experience in logging, monitoring, and responding to detected incidents in the cloud environment.</li>
<li>Ability to translate compliance requirements into technical controls.</li>
<li>Strong working experience in protecting databases, networks, and compute security controls including Docker / Kubernetes architecture and security configuration.</li>
<li>Deep understanding of Cloud Security fundamentals (Cloud networks and Cloud-based Systems), including cryptography and the shared responsibility model</li>
<li>Expert knowledge of secure infrastructure architectures, application architectures, encryption, Cloud Security and broader security technologies.</li>
<li>An interest and desire to stay abreast of emerging security threats, vulnerabilities, and controls.</li>
<li>Experience in implementing Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platforms (CWPP) is a plus</li>
<li>Experience working in a regulated environment (SOC, ISO, PCI, DSS, HIPAA, etc.)</li>
<li>Hands-on development experience using Cryptography algorithms, API / User Authentication, and authorization design and implementations</li>
<li>Strong cloud backend development experience in one or more of: Java, Golang, C++</li>
<li>REST API and GRPC-based application development.</li>
<li>Deep understanding of Cloud Security (Cloud networks and Cloud-based Systems)</li>
<li>Motivated to solve complex problems and challenges. </li>
<li>Distributed systems design and development is plus</li>
<li>Strong analytical and problem-solving skills</li>
</ul>

#LI-NK1

Data Privacy Notice for Job Candidates:
For information on personal data processing, please see our <a href="https://www.cohesity.com/legal/privacy/candidate-privacy-policy/" rel="noopener noreferrer nofollow ugc" target="_blank">Privacy Policy</a>.
Equal Employment Opportunity Employer (EEOE)
Cohesity is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status or any other category protected by law. 
If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process, or are limited in the ability or unable to access or use this online application process and need an alternative method for applying, you may contact us at 1-855-9COHESITY or <a href="mailto:talent@cohesity.com" rel="noopener noreferrer nofollow ugc" target="_blank">talent@cohesity.com</a> for assistance.
In-Office Expectations
Cohesity employees who are within a reasonable commute (e.g. within a forty-five (45) minute average travel time) work out of our core offices 2-3 days a week of their choosing.

Senior Staff Security Software Engineer(Cloud Security)

EMW, Inc.

Deadline Date: Tuesday 12 March 2024Requirement: Security System Accreditation Consultant 2Location: The Hague, NL Full time on-site: YesTime On-Site: 100% Total Scope of the request (hours): 418Required Start Date: 29 April 2024End Contract Date: 31 December 2024Required Security Clearance: NATO SECRETDuties and Role: <ul> <li>Provide security accreditation advice and guidance to NCI Agency Project and System Managers during the whole life cycle of NATO CIS;</li> <li>Conduct Security Risk Assessment in support of NATO CIS; in particular, identify the level of threats and vulnerabilities for all the assets comprising NATO CIS, derive the residual risks and provide risk management recommendations;</li> <li>Identify, plan, request and manage the development of required documents for accreditation (CIS Description, Security Accreditation Plan, Security Risk Assessment Report, Security Requirement Statements, Security Operating Procedures, Security Test and Verification Plan);</li> <li>Build and sustain effective communications with different stakeholders specifically the Security Accreditation Boards, NATO Security Accreditation Authorities and NCI Agency organization units supporting accreditation process;</li> <li>Represent the Agency on security accreditation matters;</li> <li>Stay abreast of technological developments relevant to the area of work;</li> <li>Perform any other duties as may be required from section head or subordinates.</li> <li>Coordination and cooperation of work with activities in other Service Lines within the NCI Agency;</li> <li>Promotion and maintenance of professional relations with senior officials, both military and civilian within NATO, the NATO military authorities, and NATO nations in the area of security accreditation; </li> </ul>Some in-country teleworking may be authorised in coordination with the Line Management.RequirementsSkill, Knowledge &amp; Experience: <ul> <li>The candidate must have a currently active NATO SECRET security clearance</li> <li>A university degree in Information Security / Telecoms / Electronic / Avionics. The lack of degree may be compensated by relevant working experience and the demonstration of particular abilities or experience of interest to the Agency;</li> <li>Good knowledge and experience (at least 2 years) in Security Accreditation of major Communication and Information Systems (CIS) acquisition and/or development projects for a large organization;</li> <li>Good knowledge and experience (at least 2 years) in Security risk assessment methodologies and tools;</li> <li>Good knowledge and experience (at least 2 years) in Planning, design and implementation of security components of major CIS</li> <li>Proven ability to communicate effectively orally and in writing with good briefing skills.</li> </ul> Desirable experience <ul> <li>Demonstrate interest and passion for Cyber Security and Network Security</li> <li>Structured cable deployment, installation and documentation Language Proficiency</li> <li>A thorough knowledge of the English language, both written and spoken is essential, most of the work of the NCI Agency is conducted in the English language</li> </ul>

SC2023-003336 Security System Accreditation Consultant 2 (NS) - TUE 12 MAR

Abnormal Security

<h3>About the Role</h3>
Abnormal Security is looking for a Lead Offensive Security Engineer to join the Security &amp; Privacy team. As a leading cybersecurity company, it is imperative we find, analyze, and remediate vulnerabilities in our products and supporting systems. This role is responsible for proactively identifying vulnerabilities and weaknesses within our systems, network, and applications. Leveraging your expertise in penetration testing, threat modeling, and red teaming, you will conduct comprehensive security assessments to provide actionable recommendations to mitigate risks and strengthen our security posture. 
<h3>Who you are</h3>
<ul>
<li>Strong oral and written communication skills along with presentation skills; the ability to quickly build rapport with internal and external stakeholders.</li>
<li>Analytical skills, with the ability to identify patterns, trends, and anomalies in large and complex data sets.</li>
<li>Team player, collaborative work style.</li>
<li>High attention to detail, process, and organization.</li>
<li>Outstanding analytical skills and exercises good business judgment</li>
<li>Demonstrated experience presenting detailed, technical concepts to both technical and non-technical audiences.</li>
<li>Results-oriented, values collaboration, self-motivated, and willing to adapt to change in a fast-moving environment.</li>
<li>Ability to manage multiple priorities and meet deadlines in a fast-paced environment.</li>
<li>Operate within an agile environment and provide leadership to adapt to dynamics in technology, industry, cyber threats, and our own business.</li>
</ul>
<h3>What you will do </h3>
<ul>
<li>Define the strategic direction and goals of the offensive security program in alignment with organizational objectives.</li>
<li>Mentor and coach team members, fostering their professional development and growth.</li>
<li>Develop and implement threat modeling processes to systematically identify and prioritize potential security threats and attack vectors.</li>
<li>Oversee and conduct security assessments, penetration tests, and red team exercises to identify vulnerabilities and weaknesses.</li>
<li>Conduct <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> penetration testing engagements to assess specific workloads (i.e., AWS, GCP, Azure, containers, or other PaaS and SaaS instances) for vulnerabilities and subsequently attempt to exploit identified weaknesses after receiving permission from client stakeholders.</li>
<li>Design and develop novel threat detection techniques or methodologies, from creating proof-of-concept to productizing the solution.</li>
<li>Replicate attacker techniques and tooling to produce samples for use during detection development and for detection validation and gap identification.</li>
<li>Collaborate with cross-functional teams to integrate security into the software development lifecycle and ensure compliance with regulatory requirements.</li>
</ul>
<h3>Must Haves </h3>
<ul>
<li>Bachelor’s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security, or equivalent years of professional experience to meet job requirements and expectations.</li>
<li>8+ years of experience in the security domain, including both a detailed understanding of attacker techniques and how to emulate those techniques.</li>
<li>Experience with one or many Threat Modeling frameworks and practical application of those frameworks in a SaaS-based environment.</li>
<li>Strong understanding of offensive security techniques, tools, and methodologies, with a focus on ethical hacking and proactive threat hunting.</li>
<li>Experience with AWS/GCP/Azure cloud exploitation, including assessing security configurations, identifying misconfigurations, and exploiting vulnerabilities in AWS/GCP/Azure environments.</li>
<li>Excellent problem-solving skills with a proactive approach to identifying and resolving technical challenges.</li>
<li>Ability to write technical reports and communicate technical content to non-technical audiences.</li>
<li>Strong interpersonal skills with the ability to effectively communicate technical concepts to both technical and non-technical stakeholders. Proven ability to collaborate with cross-functional teams.</li>
</ul>
<h3>Nice to Have </h3>
<ul>
<li>Advanced degree in Computer Science, Engineering, or Cybersecurity.</li>
<li>OSCP, OSCE, GPEN, GCIH, GCPN, GWAPT certifications.</li>
<li>Advanced knowledge of testing modern authentication systems and identity provider integrations.</li>
<li>Knowledge of DevOps practices and tools for automation, continuous integration, and continuous deployment (CI/CD) pipelines.</li>
</ul>

#LI-MT1

Lead Redteam/Offensive Security Engineer

Anduril Industries

Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century’s most innovative companies to the defense industry, Anduril is changing how military systems are designed, built and sold. Anduril’s family of systems is powered by Lattice OS, an AI-powered operating system that turns thousands of data streams into a realtime, 3D command and control center. As the world enters an era of strategic competition, Anduril is committed to bringing cutting-edge autonomy, AI, computer vision, sensor fusion, and networking technology to the military in months, not years.WHY WE’RE HERE 
 
The Mission Software Engineering team builds, deploys, integrates, extends, and scales Anduril's software to deliver mission-critical capabilities to our customers. As the software engineers closest to Anduril customers and end-users, Mission Software Engineers solve technical challenges of operational scenarios while owning the end-to-end delivery of winning capabilities such as Counter Intrusion, Joint All Domain Command &amp; Control, and Air Defense Systems.
 
As a Front End Mission Software Engineer, you will solve a wide variety of problems involving networking, autonomy, systems integration, robotics, and more, while making pragmatic engineering tradeoffs along the way. Your efforts will ensure that Anduril products seamlessly work together to achieve a variety of critical outcomes. Above all, Mission Software Engineers are driven by a “Whatever It Takes” mindset—executing in an expedient, scalable, and pragmatic way while keeping the mission top-of-mind and making sound engineering decisions to deliver successful outcomes correctly, on-time, and with high quality.
 
The Counter Intrusion team builds our Sentry Towers. Sentry uses artificial intelligence to provide highly accurate, persistent autonomous awareness across land, sea and air. With an AI-enabled edge processing, continuous 360 pan / tilt and a variety of radars and sensors, Sentry can autonomously identify, detect and track objects of interest to bring increased security to borders, military bases, oil and gas pipelines, airports and other critical infrastructure.
 
WHAT YOU'LL DO:

<ul>
<li>Design, build, and deploy a real-time, map-based interface for displaying and interacting with sensor data and commanding physical assets</li>
<li>Fetch and manage large streams of data while maintaining performant rendering in a low-friction user experience</li>
<li>Build and design immersive image-viewing experiences in a web-based platform</li>
<li>Partner with end-users to turn needs into features while balancing user experience with engineering constraints</li>
<li>Travel up to 30% of time to build, test, and deploy capabilities in the real world</li>
</ul>
REQUIRED QUALIFICATIONS:
<ul>
<li>Degree in Computer Science, Operations Research, Electrical Engineering or related technical degree</li>
<li>Experience building scalable and responsive web-based user interfaces.</li>
<li>Experience working on frontend applications</li>
<li>Proficiency with a programming language such as Javascript or Typescript</li>
<li>Must be eligible to obtain and maintain a U.S. TS clearance</li>
</ul>
PREFERRED REQUIREMENTS
<ul>
<li>Experience working on frontend applications with data-intensive or map-based systems.</li>
<li>Experience working with React</li>
</ul>
US Salary Range$132,000—$240,000 USD
The <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offer may vary based on (but not limited to) work experience, education and/or training, critical skills, and/or business considerations. Highly competitive equity grants are included in the majority of full time offers; and are considered part of Anduril's total compensation package. Additionally, Anduril offers top-tier benefits for full-time employees, including:
<ul>
<li>Platinum Healthcare Benefits: For U.S. roles, we offer top tier platinum coverage (medical, dental, vision) that are 100% covered by Anduril for you and 90% covered for your dependents.</li>
<ul>
<li>For UK roles, Private Medical Insurance (PMI): Anduril will cover the full cost of the insurance premium for an employee and dependents.</li>
<li>For AUS roles, Private health plan through Bupa: Coverage is fully subsidized by Anduril.</li>
</ul>
<li>Basic Life/AD&amp;D and long-term disability insurance 100% covered by Anduril, plus the option to purchase additional life insurance for you and your dependents.</li>
<li>Extremely generous company holiday calendar including a holiday hiatus in December, and highly competitive PTO plans.</li>
<li>16 weeks of paid Caregiver &amp; Wellness Leave to care for a family member, bond with your baby, or tend to your own medical condition.</li>
<li>Family Planning &amp; Parenting Support: Fertility (eg, IVF, preservation), adoption, and gestational carrier coverage with additional benefits and resources to provide support from planning to parenting.</li>
<li>Mental Health Resources: We provide free mental health resources 24/7 including therapy, life coaching, and more. Additional work-life services, such as free legal and financial support, available to you as well.</li>
<li>A professional development stipend is available to all Andurilians.</li>
<li>Daily Meals and Provisions: For many of our offices this means breakfast, lunch and fully stocked micro-kitchens.</li>
<li>Company-funded commuter benefits available based on your region.</li>
<li>Relocation assistance (depending on role eligibility).</li>
<li>401(k) retirement savings plan - both a traditional and Roth 401(k).</li>
</ul>
The recruiter assigned to this role can share more information about the specific compensation and benefit details associated with this role during the hiring process.
Anduril is an equal-opportunity employer committed to creating a diverse and inclusive workplace. The Anduril team is made up of incredibly talented and unique individuals, who together are disrupting industry norms by creating new paths towards the future of defense technology. All qualified applicants will be treated with respect and receive equal consideration for employment without regard to race, color, creed, religion, sex, gender identity, sexual orientation, national origin, disability, uniform service, Veteran status, age, or any other protected characteristic per federal, state, or local law, including those with a criminal history, in a manner consistent with the requirements of applicable state and local laws, including the CA Fair Chance Initiative for Hiring Ordinance. We actively encourage members of recognized minorities, women, Veterans, and those with disabilities to apply, and we work to create a welcoming and supportive environment for all applicants throughout the interview process. If you are someone passionate about working on problems that have a real-world impact, we'd love to hear from you!
To view Anduril's candidate data privacy policy, please visit <a href="https://anduril.com/applicant-privacy-notice/" rel="noopener noreferrer nofollow ugc" target="_blank">https://anduril.com/applicant-privacy-notice/</a>.

Counter Intrusion Mission Software Engineering, Front-End

ION Group

The IT/Cyber Security Analyst is a global role within the ION Markets Division. The role will support the division’s security strategy through the identification, mitigation and remediation of information security risks to the business. This role reports to the divisional CISO.As a member of the Markets’ IT Security Team, the successful candidate will be responsible for handling escalations from the Group-wide CSIRT Team, improving the security posture, vulnerability management/reporting through to remediation, ensuring security standards are upheld as well as providing input in to security control configuration and policies. The Security Analyst’s other responsibilities include meeting KPI targets defined by management and performing various other duties assigned by the divisional CISO.We are looking for a hard-working, dedicated and motivated individual. Excellent communication skills are a must and the role holder will be expected to cultivate working relationships with other teams and colleagues of varying technical ability. The role would suit a technically strong candidate looking to drive forward career progression within a dedicated security team. Ideally the candidate will have come from related security and systems administration roles, focusing on workstation, server and network technologies.Your roleKey ResponsibilitiesThe primary responsibilities of this role are to:●      Protect and defend: identify, analyze and mitigate threats to IT systems and/or networks.●      Use defensive measures and information collected from a variety of sources to identify, analyze, and report events that occur or might occur within the network to protect information, information systems, and networks from threats.●      Respond to security alerts to mitigate immediate and potential threats. Use mitigation, preparedness, and response and recovery approaches, as needed, to maintain information security and minimize impacts.●      Conduct assessments of threats and vulnerabilities; determine deviations from acceptable configurations, enterprise or local policy; assess the level of risk; and develop and/or recommend appropriate mitigation countermeasures.●      Operate and maintain: configure, tune, maintain and operate key security controls, technologies, and other risk mitigations.As a member of the Security team, it is expected that the person in this role will:●      Execute ongoing, operational business-as-usual (BAU) tasks to meet management-defined KPIs and SLAs, and deliver security projects in line with management-defined priorities and deadlines●      Stay current with the latest security news, threats, intelligence, tactics, techniques, and vulnerabilities. Research and analyze new threats and vulnerabilities to determine exposure.●      Perform threat hunting and review, triage, investigate and escalate security alerts raised by the Group-Wide SOC team, security tools, technologies, and services (e.g. endpoint security, network security, DLP, <a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a>, etc.)●      Assist and/or lead efforts to isolate, contain, respond to, and recover from security incidents●      Identify, review, prioritize, plan, coordinate, and follow-up on the remediation of vulnerabilities●      Configure, customize, tune, manage, troubleshoot, and maintain to ensure effective and efficient operation of security technologies, such as SIEM &amp; endpoint security, intrusion detection/prevention systems, etc. This may also include scripting, automation, and orchestration across various platforms.●      Define, document, and follow approved processes for all the responsibilities included in this job description. Create and maintain documentation for systems, including design and operation.●      Review systems, configurations, and process to ensure and report on compliance with ION policy, client requirements, audit controls, regulations, and industry best practices. Provide best practice security recommendations to IT and other teams within ION, based on review results.●      Respond to information security-related inquiries and requests.Required Skills, Qualifications, and Experience●      Degree/certifications in a technology-related field and/or relevant working experience; highly desired certifications include:●      PenTest+, Security+, OSCP, CCSP, CEH, GCIH, GMON●      3+ years' experience in IT Security and/or IT●      Must have fundamental programming/scripting capabilities (e.g. python, powershell, bash, etc.)●      Must have in-depth understanding of operating systems (Windows/Linux) The following general characteristics are required:●      A team player with the ability to work independently and unsupervised●      Ability to own delegated tasks and see them through to completion●      Ability to manage time and prioritize work to maximize productivity●      Excellent communication skills (both written and verbal)●      Exceptional attention to detail and quality●      Excellent problem-solving techniques and trouble analysis skills The candidate should have a good knowledge of:●      Endpoint security concepts, controls, and best practices for Servers (e.g. Windows and Linux)●      General IT networking concepts, protocols, standards and network security concepts, controls, and best practices●      Cryptography fundamentals and data security controls and best practices●      Forensic investigation techniques●      Prior experience deploying, configuring, managing, and/or operating security technologies is preferred, such as endpoint security (e.g. AV/EPP/EDR), SIEM, DLP, SWG, CASB, UEBA, IDS, IPS, firewalls, IAM/PIM/PAM, vulnerability management, MDM, etc.About Us:We’re a diverse group of visionary innovators who provide trading and workflow automation software, high-value analytics, and strategic consulting to corporations, central banks, financial institutions, and governments. Founded in 1999, we’ve achieved tremendous growth by bringing together some of the best and most successful financial technology companies in the world.·       Over 2,000 of the world’s leading corporations, including 50% of the Fortune 500 and 30% of the world’s central banks, trust ION solutions to manage their cash, in-house banking, commodity supply chain, trading and risk.·       Over 800 of the world’s leading banks and broker-dealers use our electronic trading platforms to operate the world’s financial market infrastructure.ION is a rapidly expanding and dynamic group with 13,000 employees and offices in more than 40 cities around the globe.Our ever-expanding global footprint, cutting edge products, and over 40,000 customers worldwide provide an unparalleled career experience for those who share our vision.ION is committed to maintaining a supportive and inclusive environment for people with diverse backgrounds and experiences. We respect the varied identities, abilities, cultures, and traditions of the individuals who comprise our organization and recognize the value that different backgrounds and points of view bring to our business.ION adheres to an equal employment opportunity policy that prohibits discriminatory practices or harassment against applicants or employees based on any legally impermissible factor.Important notes:According to the Italian Law (<a href="http://l.68/99" rel="noopener noreferrer nofollow ugc" target="_blank">L.68/99</a>) please note that candidates from the disability list will be given priority. Due to the high volume of applications, only those candidates that meet the required criteria for selection will be contacted. Please do not apply if you don’t currently have the legal right to work in Italy, or if that right is just about to expire, or if that right has restrictions imposed which would prevent you from undertaking a full-time employment contract.

Cyber Security Analyst, Italy

Coupang

회사 소개
쿠팡은 고객 감동 실현을 위해 존재합니다. 고객들이 "쿠팡 없이 그동안 어떻게 살았을까?" 라고 말할 때, 비로소 우리의 미션을 실현하고 있음을 알 수 있습니다. 고객들의 쇼핑과 식사, 생활 전반을 편하게 만들겠다는 유일한 집념으로 쿠팡은 수억 달러 규모의 이커머스 산업 전반의 혁신을 이끌고 있습니다. 쿠팡은 가장 빠르게 성장하는 이커머스 기업 중 하나로, 국내 커머스 업계에서의 독보적인 입지와, 고객 신뢰를 구축했습니다.  
쿠팡은 스타트업 문화를 기반으로 한 글로벌 대형 상장사라고 자부합니다. 이것이 창립 당시의 기민함을 지하며, 신규 서비스를 끊임없이 출시하며 비즈니스를 확장해 나가는 우리의 성장 동력입니다. 쿠팡의 모든 임직원에게는 기업가 정신을 갖추고 새로운 혁신과 이니셔티브를 추진할 수 있는 기회가 주어집니다. 주저 없이 일에 뛰어들어 성과를 이루고자 하는 과감성이, 바로 쿠팡이 일하는 방식의 본질입니다. 쿠팡에서는 여러분 자신, 동료, 팀 그리고 회사 전체가 매일 성장하는 모습을 목격할 것입니다.  
쿠팡의 모든 직원은 커머스의 미래를 만들겠다는 쿠팡의 미션에 진심입니다. 우리는 고객의 문제를 해결해 나가고, 전통적인 관념과 통념에 맞서며 실현 가능한 한계를 뛰어넘고 있습니다. 고가용성 (always-on) 과 최첨단의 앞선 기술 (high-tech), 초연결사회 (hyper-connected world) 에서의 놀라운 업무 경험을 원하신다면, 지금 바로 쿠팡에 합류하세요. 

팀 소개 
Privacy Compliance팀은 민감 정보, 개인 정보 등의 기밀 정보를 취급하는 국내/외 모든 지역의 비즈니스 전반에 걸쳐 직원 및 서비스가 법 규정, 인증 요구 사항을 준수하는지 여부를 모니터링하여 평가하고, 식별된 미준수 사항이 신속하게 수정 될 수 있도록 관리하는 업무를 수행하고 있습니다.

업무 내용
• 개인정보보호 규정 준수 모니터링 체계 구축 및 관리
• 개인정보보호 규정 준수 모니터링 계획 수립 및 실행
• 감사를 통해 확인된 결함에 대한 개선 또는 대안 제안
• 개인정보보호 규정 준수 위험을 평가하고 위험 수준에 따라 우선순위를 설정
• 개인정보보호 규정 준수 위험 완화 및 개선 지원

자격 요건
• 학사 이상 졸업하신 분
•국내/외 개인정보보호 관련 컴플라이언스 업무 경험 10년 이상이신 분
• 개인정보 컴플라이언스 문제를 검토하고 가이드를 할 수 있는 역량있으신 분
• 개인정보 흐름분석 및 PI flow 기반 관리 경험 있으신 분
• 다양한 내/외부 이해관계자들과 효과적으로 협업을 수행할 수 있는 커뮤니케이션 능력 있으신 분
• 주도적으로 업무를 수행하고, 문제를 해결하고자 하는 열정 있으신 분

우대 사항
• Cloud 기반 서비스 환경에 대한 높은 수준의 경험과 이해 있으신 분
• 이커머스, IT 기업 등의 개인정보보호 담당 업무 경험 있으신 분
• 개인정보 컴플라이언스 관련 국/내외 자격증 보유(CPPG, CISA, CISSP, ISMS-P, ISO27001, 정보보안 기사 등) 하신 분

전형 절차 및안내사항
전형절차
<ul>
<li>
<ul>
<li>
<ul>
<li>서류전형 - 전화면접 - 화상(대면)면접 – 최종 합격</li>
<li>전형 절차는 직무별로 다르게 운영될 수 있으며, 일정 및 상황에 따라 변동될 수 있습니다. </li>
<li>전형 일정 및 결과는 지원서에 등록하신 이메일로 개별안내드립니다. </li>
</ul>
</li>
<li>참고사항
<ul>
<li>고용형태는 정규직으로 수습기간은 12주를 포함합니다.</li>
<li>본 공고는 모집 완료 시 조기 마감될 수 있습니다.</li>
<li>지원서 내용 중 허위사실이 있는 경우에는 합격이 취소될 수 있습니다. </li>
<li>보훈대상자 및 장애인 여부는 채용 과정에서 어떠한 불이익도 미치지 않습니다. </li>
<li> 직급과 담당 업무 범위는 후보자의 전반적인 경력과 경험 등 제반 사정을 고려하여 변경될 수 있습니다. 이러한 변경이 필요할 경우, 최종 합격 통지 전 적절한 시기에 후보자와 커뮤니케이션 될 예정입니다. </li>
</ul>
</li>
</ul>
</li>
</ul>

[Coupang] Privacy Compliance (경력직 채용)

<h3>Responsibilities:</h3>
<ul>
<li>The candidate will work with the Product Security team to build, maintain and run necessary automation for security and compliance. The candidate will have the following core responsibilities:</li><li>Lead, design &amp; develop automated workflows using APIs to tackle vulnerability management gaps</li><li>Research and Implement security-focused tools to defend our infrastructure &amp; applications from risks. Adopt open source, enterprise security scanners to define &amp; automate security development lifecycle processes at scale.</li><li>Develop custom scripts to increase system efficiency and lower the human intervention time on any tasks. Ensure that security requirements and considerations are woven by automation into the development of each system</li><li>Work closely with stakeholders to define and enforce security policies and access controls</li><li>Improve security team efficiency through process automation</li><li>Work in an agile team, pair programming, and support deliverables</li><li>Collect &amp; report metrics on automation effectiveness</li><li>Collaborate with peers to integrate secure DevOps principles into CI/CD pipelines and automated builds</li><li>Be a part of on-call PagerDuty rotations</li><li>Drive continuous process feedback improvement</li></ul>
<h3>Skills And Experience Baseline:</h3>
<ul>
<li>3-5 years of relevant experience</li><li>Demonstrate coding skills in Python, Java Script, Node.js, React.</li><li>Extensive experience with AWS <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> environment, using its APIs, Serverless Application Model (AWS SAM)  and Lambda functions</li><li>Experience working with CI/CD (e.g., TeamCity, Jenkins) pipelines and associated tools. </li><li>Working knowledge of react, Kubernetes, Docker Containers</li><li>Experience in general security concepts, OWASP secure coding practices and standards (MITRE ATT&amp;CK, Cyber Kill Chain, cybersecurity detection and response lifecycle)</li><li>Bachelor's degree or higher in Computer Science or a related field</li><li>Understanding of Rest APIs and ability to utilize them in the code</li><li>Experienced in design patterns and best coding practices.</li><li>Excellent written and verbal communication skills, and experience working with remote teams</li><li>Have an agile, systematic problem-solving approach, coupled with strong interpersonal skills and a sense of ownership and drive.</li><li>Unimpeachable integrity, character, courage and honesty</li></ul>About GuidewireGuidewire is the platform P&amp;C insurers trust to engage, innovate, and grow efficiently. We combine digital, core, analytics, and AI to deliver our platform as a cloud service. More than 540+ insurers in 40 countries, from new ventures to the largest and most complex in the world, run on Guidewire.As a partner to our customers, we continually evolve to enable their success. We are proud of our unparalleled implementation track record with 1600+ successful projects, supported by the largest R&amp;D team and partner ecosystem in the industry. Our Marketplace provides hundreds of applications that accelerate integration, localization, and innovation.For more information, please visit <a href="http://www.guidewire.com/" rel="noopener noreferrer nofollow ugc" target="_blank">www.guidewire.com</a> and follow us on Twitter: <a href="https://twitter.com/Guidewire_PandC" rel="noopener noreferrer nofollow ugc" target="_blank">@Guidewire_PandC</a>.Guidewire Software Inc. provides equal employment opportunities to all applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. All offers are contingent upon passing a criminal history and other background checks where it's applicable to the position.We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Security Engineer (Security Automation)

Axur

Axurians are passionate professionals! We value the obsession towards efficiency and trust mature people to deal with all the freedom we provide in our environment. We truly believe in respect and true ownership, since these are essential to our culture and an excellent relationship with our customers. We are guided by “more data, less opinion" and intellectual humility. At Axur, you will directly work with the latest technology in a challenging environment and have the autonomy to bring your own ideas and make your own decisions!Like all our other openings, this opportunity is also open to professionals with disabilities (PwD).Are you into cybersecurity? Are you looking for continuous development?We are looking for a Security Operations Analyst to join our team, performing a support role in the configuration of alerts and analysis of incident triage. A communicative, curious, proactive person willing to analyze processes which results in the growth of the whole Axur business. And you can choose whether you will work in the office, in Porto Alegre-RS, or remotely, from anywhere in the world!A typical workday might include: <ul> <li>Responsible for managing client outcomes on the Axur platform, performing alert configuration and incident triage analysis;</li> <li>Engage with clients proposing improvements to platform configurations;</li> <li>Act in response to critical incidents with clients, participating in war rooms, recommending and executing corrective actions on the Axur platform.</li> </ul>Requirements<ul> <li>Experience or knowledge in Security Operations Centers (SOC);</li> <li>Experience or knowledge in security incident response;</li> <li>Experience or knowledge in Threat Hunting;</li> <li>Availability for work shifts, on-call duty, and weekend rotations;</li> <li>Portuguese fluency;</li> <li>Proficiency in the English language (written and spoken).</li> </ul>Benefits<ul> <li>Home office assistance: an allowance of R$ 2,000.00 in the first month to buy all the items for your home office. Axur will send only the laptop (which must be returned to the company in case of departure);</li> <li>Flexible benefit of R$ 924,00 per month;</li> <li>Health insurance and dental plan (Bradesco Top Nacional);</li> <li>Annual Employee Bonus Plan;</li> <li>Possibility of Employee Stock Options Plan (equity participation in the company);</li> <li>Anywhere Office work model;</li> <li>Super flexible hours;</li> <li>TotalPass;</li> <li>Language classes and a platform for study with more than 25 idioms.</li> <li>Culture focused on the individual development of Axurians (360º evaluation and Individual Development Plan (IDP);</li> <li>Agreements and partnerships for individual development (Coursera, Udemy, OpenEnglish, Fisk, MBA USP ESALQ, and others);</li> <li>Internal Rewards Programs (Best Recruiters, and others)</li> <li>Parental Leave Program (Pregnant and Companion; Adopter and Adaptation period).</li> </ul>

Security Operations Analyst (Remote)

Arctic Wolf Networks

Ready to further your career in the fast-paced, exciting world of cyber security?Arctic Wolf, with its unicorn valuation, is the leader in security operations in an exciting and fast-growing industry—cybersecurity. We have won countless awards for our excellence in security operations and remain dedicated to providing an industry-leading customer and employee experience.Our mission is simple: End Cyber Risk. We’re looking for a Lead Governance, Risk, and Compliance Analyst to be part of making this happen.  The Lead Governance, Risk, &amp; Compliance Analyst works with cross-functional stakeholders to understand the business and the risks and compliance needs of the organization to establish and maintain governance, risk and compliance processes. This role excels in organizing, planning and delivering results and relishes working with others to achieve critical security outcomes. This role champions the customer’s right to privacy and security and build in those requirements into product offerings &amp; services as well as day-to-day business processes.  Responsibilities:<ul><li>Collaborate with multiple organizational stakeholders to drive development, maintenance and implementation of internal security &amp; privacy policies, standards, procedures/guidance and governance program documents that allow Arctic Wolf to comply with several security/privacy frameworks, contractual obligations and regulatory requirements.</li><li>Facilitate security and privacy policy &amp; standards lifecycle management.</li><li>Ensure approved security &amp; privacy policies and standards are communicated to appropriate audiences and accounted for in various Standard Operating Procedures.</li><li>Lead and support Arctic Wolf’s internal and external audit/assessment activities</li><li>Lead and support Arctic Wolf’s internal Risk and Compliance program execution to identify and drive remediation of Security &amp; Privacy risks/findings.</li><li>On an as-needed basis, provide advisory services to other teams on applicability and implementing/maintaining compliance with the Privacy and Security policies and standards through the course of their business operations.</li><li>Administer and operate GRC toolset to automate processes and programs to gain efficiencies.</li><li>Provide Program level metrics &amp; reporting for consumption by Senior &amp; Executive management.</li></ul>Skills and Requirements: <ul><li>5+ years of experience in a GRC lead/program management capacity – preference in a technology/SaaS company.</li><li>Strong project management skills to ensure accountability and results.</li><li>Ability to put into practice security &amp; privacy frameworks &amp; standards such as ISO 27001, SOC2, GDPR, IRAP, FedRAMP, StateRAMP, CMMC, PCI DSS and HIPAA.</li><li>Excellent written and verbal communication skills, especially translating between business and GRC/technical terminology.</li><li>Ability to work under pressure with multiple stakeholders.</li></ul>Preferred Qualifications<ul><li>A Bachelor’s Degree in Computer Science, Information Systems, Engineering, or related technical field; or equivalent experience.</li><li>Certifications such as CRISC, CISA, CISSP, CISM, etc. are considered preferentially.</li></ul>About Arctic Wolf:At Arctic Wolf we’re cultivating a collaborative and productive work environment that welcomes a diversity of backgrounds, cultures, and ideas to make our teams even stronger as we grow globally. We’ve been named one of the 50 Most Innovative Companies in the world for 2022 (Fast Company)—and the 2nd Most Innovative Security Company. This is in addition to consecutive awards from Top Workplace USA (2021, 2022), Best Places to Work - USA (2021, 2022) and Great Place to Work - Canada (2021, 2022). Our Values Arctic Wolf recognizes that success comes from delighting our customers, so we work together to ensure that happens every day. We believe in diversity and inclusion, and truly value the unique qualities and unique perspectives all employees bring to the organization. And we appreciate that—by protecting people’s and organizations’ sensitive data and seeking to end cyber risk— we get to work in an industry that is fundamental to the greater good. We celebrate unique perspectives by creating a platform for all voices to be heard through our Pack Unity program. We encourage all employees to join or create a new alliance. See more about our Pack Unity <a href="https://arcticwolf.com/company/careers/diversity-equity-inclusion-and-belonging/" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>.  We also believe and practice corporate responsibility, and have recently joined the Pledge 1% Movement, ensuring that we continue to give back to our community. We know that through our mission to End Cyber Risk we will continue to engage and give back to our communities. All wolves receive compelling compensation and benefits packages, including: <ul><li>Equity for all employees </li><li>Bonus or commission pay based on role</li><li>Flexible time off, paid volunteer days and paid parental leave </li><li>401k match</li><li>Medical, Dental, and Vision insurance</li><li>Health Savings and Flexible Spending Agreement</li><li>Voluntary Legal Insurance</li><li>Training and career development programs </li></ul> Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law. Arctic Wolf is committed to fostering a welcoming, accessible, respectful, and inclusive environment ensuring equal access and participation for people with disabilities. As such, we strive to make our entire employee experience as accessible as possible and provide accommodations as required for candidates and employees with disabilities and/or other specific needs where possible. Please let us know if you require any accommodations by emailing <a href="mailto:recruiting@arcticwolf.com" rel="noopener noreferrer nofollow ugc" target="_blank">recruiting@arcticwolf.com</a>. Security Requirements:<ul><li>Conducts duties and responsibilities in accordance with AWN’s Information Security policies, standards, processes and controls to protect the confidentiality, integrity and availability of AWN business information (in accordance with our employee handbook and corporate policies).</li><li>Background checks are required for this position. </li></ul>Come join the Pack during this exciting time of rapid growth where every employee makes a difference and their contributions are recognized and rewarded.

Lead Governance, Risk, and Compliance Analyst

Lucid Motors

Leading the future in luxury electric and mobilityAt Lucid, we set out to introduce the most captivating, luxury electric vehicles that elevate the human experience and transcend the perceived limitations of space, performance, and intelligence. Vehicles that are intuitive, liberating, and designed for the future of mobility. We plan to lead in this new era of luxury electric by returning to the fundamentals of great design – where every decision we make is in service of the individual and environment. Because when you are no longer bound by convention, you are free to define your own experience. Come work alongside some of the most accomplished minds in the industry. Beyond providing competitive salaries, we’re providing a community for innovators who want to make an immediate and significant impact. If you are driven to create a better, more sustainable future, then this is the right place for you.We are currently seeking a Senior Software Engineer for our Cloud Microservices team. This position will concentrate on new charging initiatives to provide exceptional user experience to our customers.  Our ideal candidate exhibits a can-do attitude and approaches their work with vigor and determination. Candidates will be expected to demonstrate excellence in their respective fields, to demonstrate the ability to learn quickly and to strive for perfection within a fast-paced environment. You will have the opportunity to build a comprehensive vehicle charging infrastructure as we move into new business areas and improve our existing vehicle lineup.<h3>The Role:</h3><ul><ul><li>Design, develop, and enhance cloud-based microservices</li><li>Design implement applications using Golang, C#, and <a href="http://Node.js" rel="noopener noreferrer nofollow ugc" target="_blank">Node.js</a></li><li>Develop and deploy containerized applications using Docker and Kubernetes</li><li>Create and maintain Architecture, Design, Troubleshooting, Deployment, Configuration documents</li><li>Make key technical decisions and guide engineering vision</li><li>Develop frameworks, services, and the necessary tooling to help other engineers build high quality applications</li><li>Evangelize software engineering best practices and lead by example</li><li>Collaborate with other engineers, product owners, and designers to identify and solve challenging problems</li></ul></ul><h3>Qualifcations:</h3><ul><ul><li>B.S. or M.S. degree in Computer Science, Engineering</li><li>3+ years of professional software development experience</li><li>Proficiency in a major programming language like Golang, C/C++, Python, Ruby, Java, or Scala.</li><li>Knowledge with Cloud Native Platforms including Kubernetes, Open Shift, Docker, or Cloud Foundry in the public cloud</li><li>Knowledge with Containers and/or Serverless, Microservices, Functions, Event-driven/reactive programming or other Cloud Native architectures</li><li>Knowledge about deploying systems into a production Cloud Native Environment</li><li>Knowledge with NoSQL data stores such as Cassandra and MongoDB</li><li>Knowledge of message or event-driven architectures (such as RabbitMQ/Queues or Kafka)</li><li>Skilled with integrations with various platforms and systems</li><li>Strong analytical and problem-solving skills</li><li>Ability to thrive in a cross-functional team on high profile, critical projects</li><li>Excellence in communication (both written and spoken) with peers and non-technical people alike</li><li>Excited about designing, building, and maintaining of distributed systems</li></ul></ul><h3>Preferences:</h3><ul><ul><li>Understanding of OCPI and/or OCPP protocols for EV charging stations</li><li>Understanding of the ISO 15118 protocol between chargers and EVs</li><li>Familiarity with principles of residential wiring including wiring codes and regulations</li><li>Previous work with IoT or embedded network connected devices</li></ul></ul>Salary Range: The compensation range for this position is specific to the locations listed below and is the range Lucid reasonably and in good faith expects to pay for the position taking into account the wide variety of factors that are considered in making compensation decisions, including job-related knowledge; skillset; experience, education and training; certifications; and other relevant business and organizational factors.·       California (Bay Area) - $145,600 - $200,200 Additional Compensation and Benefits: Lucid offers a wide range of competitive benefits, including medical, dental, vision, life insurance, disability insurance, vacation, and 401k. The successful candidate may also be eligible to participate in Lucid’s equity program and/or a discretionary annual incentive program, subject to the rules governing such programs.  (Cash or equity incentive awards, if any, will depend on various factors, including, without limitation, individual and company performance.) Lucid maintains your privacy according to its <a href="https://www.lucidmotors.com/s3fs-public/pdf/candidate-privacy-notice.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Candidate Privacy Notice</a>. If you are a California resident, please refer to our <a href="https://www.lucidmotors.com/s3fs-public/pdf/california-candidate-privacy-notice.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">California Candidate Privacy Notice</a>. At Lucid, we don’t just welcome diversity - we celebrate it! Lucid Motors is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, national or ethnic origin, age, religion, disability, sexual orientation, gender, gender identity and expression, marital status, and any other characteristic protected under applicable State or Federal laws and regulations. To all recruitment agencies: Lucid Motors does not accept agency resumes. Please do not forward resumes to our careers alias or other Lucid Motors employees. Lucid Motors is not responsible for any fees related to unsolicited resumes.

Newark

Sr. Software Engineer, Cloud Microservices

Leading the future in luxury electric and mobilityAt Lucid, we set out to introduce the most captivating, luxury electric vehicles that elevate the human experience and transcend the perceived limitations of space, performance, and intelligence. Vehicles that are intuitive, liberating, and designed for the future of mobility. We plan to lead in this new era of luxury electric by returning to the fundamentals of great design – where every decision we make is in service of the individual and environment. Because when you are no longer bound by convention, you are free to define your own experience. Come work alongside some of the most accomplished minds in the industry. Beyond providing competitive salaries, we’re providing a community for innovators who want to make an immediate and significant impact. If you are driven to create a better, more sustainable future, then this is the right place for you.We are currently seeking a Senior/Lead Audio Engineer.  This position requires an experienced professional with a solid background in Audio, Acoustics and Electronics industry; proven record in premium audio system development to be applied to future EV environment. [Office1]Our ideal candidate exhibits a can-do attitude and approaches his or her work with vigor and determination. Candidates will be expected to demonstrate excellence in their respective fields, to possess the ability to learn quickly and to strive for perfection within a fast-paced environment<h3>The Role:</h3><ul><ul><li>Define and develop advance in-car audio system for Lucid vehicle to ensure a high bar in audio quality and sound experience.</li><li>Responsible for audio electronic modules specification &amp; development. eg. Microphones, acoustic sensors, amplifiers &amp; speakers.   </li><li>Setup audio lab and define performance and testing criteria.</li><li>Tune and optimize acoustic performances and advance audio features in vehicle</li></ul></ul><h3>Qualifications:</h3><ul><ul><li>Expertise in loudspeaker system design/tuning, power amplifier specification and design, audio DSP, microphone array for voice pickup, acoustic simulation/measurement and analysis.  </li><li>Experience in audio or acoustic measurement instruments and equipment - free field microphones, binaural manikins, mouth simulators, audio precision etc.</li><li>Experience designing circuits using OrCAD &amp; Allegro that meet international compliance and safety regulations</li><li>Understanding of various microphone and speaker technologies.</li></ul></ul><h3>Preferred Qualifications: </h3><ul><ul><li>Experience in binaural/3D audio, in-vehicle multi-zone audio.</li><li>Familiar with sensors and transducers technologies and their application in automotive</li><li>Understand ANC and ARNC technologies and application in voice and speech application</li><li>Automotive experience</li></ul></ul><h3>Education Requirement: </h3><ul><ul><li>BS or MS in Electrical Engineering</li></ul></ul>Salary Range: The compensation range for this position is specific to the locations listed below and is the range Lucid reasonably and in good faith expects to pay for the position taking into account the wide variety of factors that are considered in making compensation decisions, including job-related knowledge; skillset; experience, education and training; certifications; and other relevant business and organizational factors.California (Bay Area) - $156,600 - $229,680Additional Compensation and Benefits: Lucid offers a wide range of competitive benefits, including medical, dental, vision, life insurance, disability insurance, vacation, and 401k. The successful candidate may also be eligible to participate in Lucid's equity program and/or a discretionary annual incentive program, subject to the rules governing such programs. (Cash or equity incentiveawards, if any, will depend on various factors, including, without limitation, individual and company performance.)Lucid maintains your privacy according to its <a href="https://www.lucidmotors.com/s3fs-public/pdf/candidate-privacy-notice.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Candidate Privacy Notice</a>. If you are a California resident, please refer to our <a href="https://www.lucidmotors.com/s3fs-public/pdf/california-candidate-privacy-notice.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">California Candidate Privacy Notice</a>. At Lucid, we don’t just welcome diversity - we celebrate it! Lucid Motors is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, national or ethnic origin, age, religion, disability, sexual orientation, gender, gender identity and expression, marital status, and any other characteristic protected under applicable State or Federal laws and regulations. To all recruitment agencies: Lucid Motors does not accept agency resumes. Please do not forward resumes to our careers alias or other Lucid Motors employees. Lucid Motors is not responsible for any fees related to unsolicited resumes.

Senior/Lead Audio Hardware Engineer

Rackspace

Job Summary:  In this role, you will be a part of an Elastic Engineering for Security team prioritizing vulnerability management, incident response reporting, compliance advisement, developing and coordinating strategic projects and initiatives, including capabilities such as static and dynamic security testing, and supporting and establishing the reporting, processes, and automation to make remediation of any findings above successful. If you like a challenge, you’ll love it here, because we’re solving complex business problems every day, building and promoting great technology solutions that impact our customers’ success. The best part is, we’re committed to you and your growth, both professionally and personally. Work Location: Remote<h3>Key Responsibilities: </h3><ul><ul><li>Be a technical leader for security, developing a strategy to improve the security posture and overall program, including capabilities, processes, metrics, user experience, partnerships, and overall maturity.</li><li>Select, build, improve, integrate, and/or manage tools to perform automated and manual application security testing of web applications, APIs, containers, and other software components</li><li>Interpret, prioritize, and summarize findings into clear remediation actions, and create a vulnerability reporting process to ensure successful follow through</li><li>Respond to external vulnerability disclosure, or bug bounty, reports</li><li>Prioritize projects and vulnerability findings based on expected value and impact to the organization</li><li>Identify, track, and report KPIs for the health of the application security program</li><li>Create and improve security processes through automation, integration, and documentation</li><li>Build up security brand and team by regularly sharing skills, knowledge, and advice</li><li>Be called on as a subject matter expert for challenging and sometimes time sensitive security events</li><li>Work independently with general guidance on new assignments</li></ul></ul><h3>Qualifications: </h3><ul><ul><li>5+ years in the information security field</li><li>Experience being a member of, or leading, security and or SOC team</li><li>Strong understanding of the SDLC, security concepts and strategy, and vulnerability assessments</li><li>Experience with or strong understanding of programming and scripting languages including one or more of the following:  Python, C, Java, <a href="https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fnode.js%2F&amp;data=05%7C02%7Cstorm.hostetter%40rackspace.com%7Ccf0d53e42fec45d3478f08dc3a2235db%7C570057f473ef41c8bcbb08db2fc15c2b%7C0%7C0%7C638449165803063801%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&amp;sdata=BgMOUwhxwxDajGL8GvswNH6Hu3reqGffIgP%2B9qgu1bk%3D&amp;reserved=0" rel="noopener noreferrer nofollow ugc" target="_blank">Node.js</a>, Go, Ruby, Groovy, PHP, and Scala; databases such as SQL; and other related tools such as Github, Gitlab, Jenkins, and CircleCI</li><li>Deep understanding of vulnerabilities, remediation, and industry-standard classification and prioritization schemes (CVE, CWE, CVSS, OWASP Top 10) and how to prioritize and communicate vulnerabilities to stakeholders</li><li>A general understanding of relevant compliance regulations, such as PCI, SOX, HIPAA, HITRUST, or FedRAMP</li><li>Passion for security, staying up to date on new technologies and security vulnerabilities</li><li>Desire to be a team player that help train and build team members up, and partner closely with key contacts external to the team and company to solve complex problems</li><li>At least two advanced security certifications, or equivalent work experience. For example, GIAC certification (GCIH, GWAPT, or GPEN), or (ISC)2 certification (CISSP, SSCP, CCSP), and/or Security certifications such as CompTIA Security+, A+, Network+ .</li><li>Prefer Bachelor’s Degree within an Information Technology field of study; HS diploma is required</li>Discover your inner Racker: <a href="https://rackspace.jobs/culture/" rel="noopener noreferrer nofollow ugc" target="_blank">Racker Life</a></ul></ul>For applicants working in California, Colorado, Washington, or New York City, we are excited to share the base salary ranges for this position exclusive of fringe benefits or potential bonus.  The successful candidate’s starting pay will be determined based on job-related skills, experience, qualifications, work location, and market conditions. The anticipated starting pay range of California, Washington state and New York City applicants for this role is $112,900 - $150,500. The anticipated starting pay range of Colorado applicants for this role is $103,700-$137,400. Unless already included in the posted pay range and based on eligibility, the role may include variable compensation in the form of bonus commissions, or other discretionary payments.  The discretionary payments are based on company and/or individual performance and may change at any time.  Actual compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, licenses and certifications, and specific work location.#LI-STORMAbout Rackspace TechnologyWe are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.  More on Rackspace TechnologyThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

United States

CyberSecurity Engineer III- US

capital.com

We are a leading trading platform that is ambitiously expanding to the four corners of the globe. Our top-rated products have won prestigious industry awards for their cutting-edge technology and seamless client experience. We deliver only the best, so we are always in search of the best people to join our ever-growing talent team. We are looking for an OSINT Analyst to collect and analyse information from open sources not limited to; social media, public records, and traditional and non-traditional media to create reports and briefings for internal stakeholders.We are looking for candidates with 1-3 years of experience in corporate intelligence consulting to perform detailed research on specific areas, using advanced tools to extract actionable insights from data. The role also includes conducting due diligence on potential business ventures and assessing their viability and risks to aid strategic decision-makers.
<h3>Responsibilities:</h3>
<ul>
<li>Collection and analysis of open-source intelligence (OSINT) from a variety of public sources not limited to news articles, social media posts, and public records</li><li>Writing intelligence products such as reports, briefings, and presentations to communicate findings and recommendations to internal stakeholders</li><li>Undertake detailed, multi-source research and analysis on designated topics or areas of interest</li><li>Interrogate structured and unstructured data with in-house and premium tools to extract meaningful, actionable insights</li><li>Conduct corporate due diligence exercises to evaluate the risks, opportunities, liabilities, and overall health of potential business ventures or partnerships.</li></ul>
<h3>What we expect from you:</h3>
<ul>
<li>Analytical Proficiency: Demonstrable analytical and critical thinking skills. An ability to draw coherent conclusions from multiple sources of information</li><li>Technical Skills: Proficiency in the use of OSINT tools. Please highlight any public records aggregators, network analysis, or other relevant tools in your application</li><li>Communication Skills: Strong written and verbal communication skills for creating clear, concise, and impactful intelligence products</li><li>Research Skills: Advanced research skills, with the ability to conduct thorough multi-source investigations and maintain attention to detail in high-volume information environments.</li></ul>
<h3>Nice to have:</h3>
<ul>
<li>Demonstrate, describe, or provide a link to an OSINT project you have completed</li><li>Exposure to/Understanding of international financial regulation</li><li>Interest/knowledge in trading and financial markets</li><li>Familiarity with Python and/or any open-source data science libraries open-source</li><li>OSINT tool development</li></ul>
<h3>Personal qualities: </h3>
<ul>
<li>A persistent, tenacious, and investigative mindset with the enthusiasm to pursue difficult subject matter and identify hard-to-find information</li></ul>
<h3>In return, you will get:</h3>
<ul>
<li>You will join the Company, that cares about work and life balance</li><li>Competitive Salary</li><li>Annual Performance review cycle</li><li>Referral program</li><li>25 days annual leave</li><li>Private Medical Insurance for you and your family, after the probation period</li><li>Death In Service</li><li>EAP</li><li>Season Ticket Loan after the probation period.</li></ul>Be a key player at the forefront of the digital assets movement, propelling your career to new heights!Join a dynamic and rapidly expanding company that values and rewards talent, initiative, and creativity. Work alongside one of the most brilliant teams in the industry.

OSINT Analyst

The leading job board for Cyber Security Jobs. Start your career in Information Security Industry. Jobs are updated daily.

Job Position and Company	Location	Tags	Posted
Senior Security Engineer (Security Automation) at Guidewire Software	Remote Full Time
Senior Security Engineer N5767 at Nisum	Remote Full Time Soc Analyst Analyst Windows
Manager, DevSecOps (Development, Security and Operations) at Everly Health, Inc.	Full Time CISO Manager Devsecops
Group Information Security Manager at Boohoo Group	Remote Full Time CISM Analyst Manager
Security Engineer at DigitalOnUs	Remote Full Time
Senior - Cyber Attack Surface Analyst at Deloitte	Full Time Analyst
Compliance Analyst, Global Compliance Internal Testing at Remitly	Full Time CISM Audit Analyst Manager
Senior Staff Security Software Engineer(Cloud Security) at Cohesity	Full Time Analyst Manager Devsecops
SC2023-003336 Security System Accreditation Consultant 2 (NS) - TUE 12 MAR at EMW, Inc.	Consultant Full Time Contract
Lead Redteam/Offensive Security Engineer at Abnormal Security	Full Time Red Team
Counter Intrusion Mission Software Engineering, Front-End at Anduril Industries	Full Time Javascript
Cyber Security Analyst, Italy at ION Group	Remote Full Time CISO Forensic Audit
[Coupang] Privacy Compliance (경력직 채용) at Coupang	Full Time
Security Engineer (Security Automation) at Guidewire Software	Remote Full Time
Security Operations Analyst (Remote) at Axur	Remote Full Time Analyst Incident Response
Lead Governance, Risk, and Compliance Analyst at Arctic Wolf Networks	Remote Full Time CISM Audit Analyst
Sr. Software Engineer, Cloud Microservices at Lucid Motors	Full Time
Senior/Lead Audio Hardware Engineer at Lucid Motors	Full Time
CyberSecurity Engineer III- US at Rackspace	Remote Full Time Comptia Incident Response Application Security
OSINT Analyst at capital.com	Full Time Analyst Consulting

Cyber Security Jobs

424 Cyber Security Jobs. Page 21 of 22

Subscribe to the weekly
Cyber Security Jobs Newsletter