City

The CSIS Invstgtns Lead Analyst is a strategic professional who stays abreast of developments within own field and contributes to directional strategy by considering their application in own job and the business. Recognized technical authority for an area within the business. Requires basic commercial awareness. There are typically multiple people within the business that provide the same level of subject matter expertise. Developed communication and diplomacy skills are required in order to guide, influence and convince others, in particular colleagues in other areas and occasional external customers. Significant impact on the area through complex deliverables. Provides advice and counsel related to the technology or operations of the business. Work impacts an entire area, which eventually affects the overall performance and effectiveness of the sub-function/job family.Responsibilities:<ul><li>An Investigator will be responsible for the coordination and investigation of high level fraud matters and/or network security incidents</li><li>This role will utilize sophisticated expertise in investigative interviewing, fraud identification, loss prevention, network security, cyber enabled fraud, to identify fraud activities, schemes, trends and organized rings that create a risk to our firm, its employees, shareholders, systems, assets and clients</li><li>Develop an approach for analytical assessments that are communicated through succinct narrative reports, presentations and where needed link charts or similar diagrams so that they are easily understood and useful to the client</li><li>Manage and analyze complex fraud referrals from various Citi businesses, external financial institutions, and Law Enforcement agencies; identifying, building, linking and escalating cases to management for review and/or assignment</li><li>Gather data, conduct research and provide analysis of information and data from a variety of sources, both internal and external to the business, to identify, assist investigations and determine fraud trend activity, schemes and organized rings</li><li>Analyze and interpret large data sets and undertake predictive analysis to identify financial wrongdoing issues that create a risk to the company, its employees, shareholders, assets and clients</li><li>Identify and report emerging fraud patterns to CSIS teams, strategic analysts, and local Citi businesses</li><li>Appropriate outreach and interaction with law enforcement, regulators or other industry groups and associations to inform research, analysis and assessments</li><li>Develop and leverage new relationships across Citi and externally with like peer groups to establish partnerships that enhance timely intelligence, prosecution and recovery</li><li>Assist other CSIS teams or businesses requiring assistance or benefiting from the capabilities of this position participation in internal CSIS working groups and/or strategic projects </li><li>Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.</li></ul>Qualifications:<ul><li>6-10 years of experience</li><li>Experience in providing investigative support for a complex and variable case(s) that have substantial impact</li><li>Understanding of forensic and eDiscovery processes and procedures to include the collection, examination, and analysis of data while preserving integrity and maintaining a strict chain of custody</li><li>Advanced abilities in data analysis and interpretation</li><li>Ability to brief management and others on an investigative case or findings</li><li>Knowledge of financial products, frauds and trends</li><li>Previous US Intelligence, military, law enforcement, law firm or government service background</li><li>Experience working in an in-house investigations team</li><li>Proficiency in Microsoft Office products - Word, Excel, Outlook, PowerPoint, &amp; SharePoint for compiling written reports and spreadsheets on an investigation</li><li>Flexibility to work on call off hours/weekends during critical project phases, if necessary</li><li>English Advance Reading, Speaking and Writting</li></ul>Education:<ul><li>Bachelors degree, potentially Masters degree</li></ul>This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.<ul><li>INGLÉS AVANZADO (INDISPENSABLE).</li><li>Sólida experiencia en Ciber Seguridad (Análisis Forense).</li><li>EnCase, Axiom, X-Ways</li><li>CCISP, SANS, Splunk</li></ul>-------------------------------------------------Job Family Group: Corporate Services-------------------------------------------------Job Family:Investigations------------------------------------------------------Time Type:Full time------------------------------------------------------Citi is an equal opportunity and affirmative action employer.Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View the "<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law</a>" poster. View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law Supplement</a>.View the <a href="http://citi.com/citi/diversity/assets/pdf/eeo_aa_policy.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a>.View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Pay Transparency Posting</a>

CSIS Investigations Lead Analyst - Cyber

Atlassian

Working at AtlassianAtlassian can hire people in any country where we have a legal entity. Assuming you have eligible working rights and a sufficient time zone overlap with your team, you can choose to work remotely or from an office (unless it’s necessary for your role to be performed in the office). Interviews and onboarding are conducted virtually, a part of being a distributed-first company.Our office is in Bengaluru, but we offer flexibility for eligible candidates to work remotely across India. Whatever your preference—working from home, an office, or in between— you can choose the place that’s best for your work and your lifestyle.Here at Atlassian we're growing our India footprint. We have a number of opportunities for a Recruiter to join our India Recruiting team and be part of our growth trajectory. With an innovative suite of products and an ever-evolving approach to our mission of building successful teams, there is an exciting story to tell about joining our company today!Do you enjoy getting creative about finding awesome talent and guiding them through a legendary hiring experience? If yes, then this is the role for you. We're looking for someone who wants to push the boundaries on how recruitment is currently done in the technical and non-technical space. You thrive in a dynamic, sometimes ambiguous environment and enjoy sourcing, driving candidate pipeline, branding the company as an employer of choice, and guiding hiring manager relationships. You innovate and use experience to produce results in a collaborative and agile environment while enjoying the freedom to develop new initiatives and programs.<h3>More about you</h3><ul><ul><li>12 + years’ recruiting experience. An understanding of Technology space, its pace and competitiveness with a drive to thrive in it.</li><li>Pride in being the face of Atlassian, showcasing our values and opportunities to internal and external candidates.</li><li>Ability to adopt a consultative and customer focused approach with our hiring manager community and crafting winning outcomes.</li><li>A focus on building balanced teams. Atlassian places huge value in making our TEAM a place where everyone can be themselves. You will help drive that.</li><li>High sense of urgency and the ability to adapt quickly to changing priorities while maintaining high quality experience.</li><li>Enthusiastic about experimenting with innovative sourcing methodologies and non-traditional channels to find new candidates; be resourceful in hunting for information and unafraid to ask questions.</li></ul></ul>More about our teamWe are growing rapidly so you will enjoy working in a fast-paced, fun environment with people on the same mission: find the perfect person for the role! We take pride in playing as a team and contributing to the success of the company through hiring. We love to exchange data-driven ideas so we can hire smarter, tackle recruitment hindrances, and continuously improve the hiring workflow. You will spend time with a diverse group of people globally who are just as motivated, talented, and creative as you are.Our perks &amp; benefitsTo support you at work and play, our <a href="https://www.atlassian.com/company/careers/resources/perk-and-benefits/global" rel="noopener noreferrer nofollow ugc" target="_blank">perks and benefits </a>include ample time off, an annual education budget, paid volunteer days, and so much more.About AtlassianThe world’s best teams work better together with Atlassian. From medicine and space travel, to disaster response and pizza deliveries, Atlassian software products help teams all over the planet. At Atlassian, we're motivated by a common goal: <a href="https://www.atlassian.com/company" rel="noopener noreferrer nofollow ugc" target="_blank">to unleash the potential of every team</a>.We believe that the unique contributions of all Atlassians create our success. To ensure that our products and culture continue to incorporate everyone's perspectives and experience, we never discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status. All your information will be kept confidential according to EEO guidelines.To learn more about our culture and hiring process, explore our <a href="https://www.atlassian.com/company/careers/resources" rel="noopener noreferrer nofollow ugc" target="_blank">Candidate Resource Hub</a>.

Bangalore

Senior Recruiter

As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and, in our clients’, best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations &amp; Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do. We keep the bank safe and provide the technical tools our workers need to be successful. We design our digital architecture and ensure our platforms provide a first-class customer experience. Our operations teams manage risk, resources, and program management. We focus on enterprise resiliency and business continuity. We develop, coordinate, and execute strategic operational plans. Essentially, Enterprise Operations &amp; Technology re-engineers, client and partner processes to deliver excellence through secure, reliable, and controlled services.Trust is part of our DNA at Citi. As such, we take safeguarding our customer data very seriously. The Chief Information Security Office (CISO) is made up of deeply dedicated and talented colleagues who work together to ensure the safety of Citi’s and our clients’ assets and information. We manage information security as an end-to-end program – one with a clear mandate and accountability. Our mission is to continually execute and enhance a global security program that is fully anchored to modern control and security frameworks, fully aligned with the technology of the firm, threat-focused and data-driven, and deeply integrated across all Citi businesses globally.Being talent-driven, we are focused on attracting, developing, and retaining diverse and inclusive talent with a high technical skill level. As a member of our team, we will provide you with career development opportunities at all stages of your career. Our employees model a passion for protecting Citi and our clients and believe in treating others with dignity and respect.Our commitment to diversity includes a workforce that represents the clients we serve globally from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together. #CISODescription In support to the Cyber Security Fusion Center (CSFC) mission, the CSFC Global Cyber Threat Exercise Team is responsible for preparing our executives for a potential cyber bad day through tabletop exercises. This in turn protects the Citi brand, global business operations, technology infrastructure and client trust against cyber threats worldwide. In order to achieve the above results, this position will be responsible for the below functions:Responsibilities:<ul><li>Work with cross-functional teams to create and facilitate cyber tabletop exercises along with development of post-exercise report</li><li>Support and coordinate participation in external industry cyber exercises</li><li>Observe live incidents to incorporate lessons learned into exercise design and planning</li><li>Engagement with executives in the APAC region and globally to understand priorities to be incorporated in exercise design</li></ul>Qualifications:<ul><li>A minimum 5-10 years hands on experience within the field of Cyber Exercise Design, Cyber Readiness, Cyber Governance</li><li>Established problem solving and analytical skills with the ability to collect and analyze information</li><li>Strong communication skills with the ability to brief, document and explain details to business executives</li><li>Strong understanding of information security requirements, policies, regulations, and resilience</li><li>General understanding of incident response and project management</li><li>Must be able to keep an open mind to pivot quickly between activities based on changing priorities</li><li>Ability to understand client, stakeholder needs and translating that into service</li><li>Able to build and maintain strong relationships with stakeholders across the firm</li><li>Self-driven professional who is passionate about delivering excellence</li><li>Must be a self-starter, self-motivated and able to work independently with little oversight.</li></ul>Education:<ul><li>Bachelor’s degree/University degree or equivalent experience</li></ul>This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.-------------------------------------------------Job Family Group: Technology-------------------------------------------------Job Family:Information Security------------------------------------------------------Time Type:Full time------------------------------------------------------Citi is an equal opportunity and affirmative action employer.Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View the "<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law</a>" poster. View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law Supplement</a>.View the <a href="http://citi.com/citi/diversity/assets/pdf/eeo_aa_policy.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a>.View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Pay Transparency Posting</a>

Singapore

Cyber Security Fusion Center -  Exercise Planner (VP/Hybrid)

Deloitte

<h3>Company Description</h3>About Africa TalentAfrica Talent by Deloitte (Africa Talent) is a standalone division of Deloitte, owned by Deloitte Africa and Deloitte Netherlands, based in South Africa. Our goal is to meet the growing demand for Talent in Africa and Europe; by recruiting and developing Talent throughout Sub Saharan Africa in order to service the diverse needs to enable projects at our clients. Talent employed will have the full experience of Deloitte, while getting both local and international exposure to a diverse set of clients, working remotely from Africa.  It will take advantage of the demographic reality of Africa as a future source of talent for both Africa and Europe and at its core is the goal to create employment in Africa and invest in African talent.The ethos of our organisation is characterised by vision, purpose beyond profit and an appetite to innovate and deliver creative, high impact solutions to urgent client challenges.Every day, your work will make an impact that matters, while you thrive in a dynamic culture of inclusion, collaboration, and high performance. As the undisputed leader in professional services, Deloitte – Africa Talent - is where you will find unrivalled opportunities to succeed and realize your full potential.This space is a true encapsulation of hybrid work, whereby individuals and teams gain access and exposure to learn from and engage with their global colleagues, while working virtually from their local Deloitte office or from home.What’s in it for you?<ul><li>An ever dynamic and growing internal scaleup with a purpose</li><li>The stability and trustworthiness of a purpose driven global brand, ready to build your own future and add to Africa’s prosperity</li><li>Being the driver of Africa Talent’s day-to-day operations</li><li>A competitive package of benefits</li><li>A hybrid work environment with possibility to work at home some days</li><li>A driven and ambitious team that looks to you for making the team tick</li></ul><h3>Job Description</h3>About the opportunityWe are looking for Application Security cyber cloud assistant managers who work with our clients based in Ireland. Applicants will be required to have:<ul><li>The ability to devise, analyse, and systematically assess the ability of systems and networks to withstand sophisticated adversaries (i.e., adversaries who have not only advanced technical skills, but also knowledge of the architecture and systems they are targeting).</li><li>Experience in conducting sophisticated, methodical, comprehensive technical testing of configurations, pathways, and interactions between systems that mimic the techniques employed by advanced adversaries.</li><li>Experience of advanced attack strategies to devise superior processes for security monitoring, event analysis, security architecture and engineering to defeat these strategies – whether mounted by external adversaries or insiders – which might otherwise result in data exfiltration or captured command and control of internal systems and processes.</li><li>Note: Penetration tests can be required to cover both the logical and physical perimeter and involve multi vector attacks.</li></ul><h3>Qualifications</h3>Minimum requirements<ul><li>A bachelor’s degree in Computer Science, Information Systems or a related field.</li><li>Minimum of 5  Years’ working experience</li></ul><h3>Additional Information</h3>We are always interested in talking with professionals about their next career experience. If you have a passion for learning from talented people and benefit from the support of a global organisation and network, apply online now.If you believe that you meet most of the criteria above, we encourage you to apply. Deloitte is an equal opportunities employer and will ensure any reasonable accommodations are implemented as part of the recruitment and selection process.At Africa Talent by Deloitte, we want everyone to feel they can be themselves and to thrive at work—in every country, in everything we do, every day. We aim to create a workplace where everyone is treated fairly and with respect, including reasonably accommodating persons with disabilities. We seek to create and leverage our diverse workforce to build an inclusive environment across the African continent.At Deloitte, we want everyone to feel they can be themselves and to thrive at work—in every country, in everything we do, every day. We aim to create a workplace where everyone is treated fairly and with respect, including reasonable accommodation for persons with disabilities. We seek to create and leverage our diverse workforce to build an inclusive environment across the African continent.At Deloitte, we want everyone to feel they can be themselves and to thrive at work—in every country, in everything we do, every day. We aim to create a workplace where everyone is treated fairly and with respect, including reasonable accommodation for persons with disabilities. We seek to create and leverage our diverse workforce to build an inclusive environment across the African continent.

Africa Talent by Deloitte – IRL Application Security, Cyber cloud Assistant Manager

<h3>Company Description</h3>About Africa TalentAfrica Talent by Deloitte (Africa Talent) is a standalone division of Deloitte, owned by Deloitte Africa and Deloitte Netherlands, based in South Africa. Our goal is to meet the growing demand for Talent in Africa and Europe; by recruiting and developing Talent throughout Sub Saharan Africa in order to service the diverse needs to enable projects at our clients. Talent employed will have the full experience of Deloitte, while getting both local and international exposure to a diverse set of clients, working remotely from Africa.  It will take advantage of the demographic reality of Africa as a future source of talent for both Africa and Europe and at its core is the goal to create employment in Africa and invest in African talent.The ethos of our organisation is characterised by vision, purpose beyond profit and an appetite to innovate and deliver creative, high impact solutions to urgent client challenges.Every day, your work will make an impact that matters, while you thrive in a dynamic culture of inclusion, collaboration, and high performance. As the undisputed leader in professional services, Deloitte – Africa Talent - is where you will find unrivalled opportunities to succeed and realize your full potential.This space is a true encapsulation of hybrid work, whereby individuals and teams gain access and exposure to learn from and engage with their global colleagues, while working virtually from their local Deloitte office or from home.What’s in it for you?<ul><li>An ever dynamic and growing internal scaleup with a purpose</li><li>The stability and trustworthiness of a purpose driven global brand, ready to build your own future and add to Africa’s prosperity</li><li>Being the driver of Africa Talent’s day-to-day operations</li><li>A competitive package of benefits</li><li>A hybrid work environment with possibility to work at home some days</li><li>A driven and ambitious team that looks to you for making the team tick</li></ul><h3>Job Description</h3>About the opportunity<ul><li>Experience in conducting operational testing of applications before initial deployment and as they are subsequently updated.</li><li>Ability to identify the programmes which are vulnerable to malicious access to important content or systems.</li><li>Ability to identify the web applications which are vulnerable to malicious exploitation, frequently infecting visitors’ computers with troublesome viruses and other malware that can create access pathways for data exfiltration.</li><li>Experience in finding and exploiting an application vulnerability to allow better code reviews, forensics analysis, threat analysis, and incident response.</li></ul><h3>Qualifications</h3>Minimum requirements<ul><li>A bachelor’s degree in Computer Science, Information Systems or a related field.</li><li>Minimum of 5  Years’ working experience</li></ul><h3>Additional Information</h3>We are always interested in talking with professionals about their next career experience. If you have a passion for learning from talented people and benefit from the support of a global organisation and network, apply online now.If you believe that you meet most of the criteria above, we encourage you to apply. Deloitte is an equal opportunities employer and will ensure any reasonable accommodations are implemented as part of the recruitment and selection process.At Africa Talent by Deloitte, we want everyone to feel they can be themselves and to thrive at work—in every country, in everything we do, every day. We aim to create a workplace where everyone is treated fairly and with respect, including reasonably accommodating persons with disabilities. We seek to create and leverage our diverse workforce to build an inclusive environment across the African continent.At Deloitte, we want everyone to feel they can be themselves and to thrive at work—in every country, in everything we do, every day. We aim to create a workplace where everyone is treated fairly and with respect, including reasonable accommodation for persons with disabilities. We seek to create and leverage our diverse workforce to build an inclusive environment across the African continentAt Deloitte, we want everyone to feel they can be themselves and to thrive at work—in every country, in everything we do, every day. We aim to create a workplace where everyone is treated fairly and with respect, including reasonable accommodation for persons with disabilities. We seek to create and leverage our diverse workforce to build an inclusive environment across the African continent.

Africa Talent by Deloitte – IRL Application Security, Infrastructure Security Senior Consultant

Amazon.com

This role can be in Seattle, Austin, Nashville, Arlington, or TorontoAmazon is seeking a talented and seasoned Senior Applications Security Engineer to focus on securing the ecosystem that powers Amazon Customer Service (CS). CS is one of the largest customer service organizations in the world. Our business operations include tens of thousands of Customer Service Associates around the globe who provide world-class support to customers 24 hours a day, 7 days a week, and in over 15 languages (and growing).This position will provide you with a challenging opportunity to solve difficult security problems at planetary scale. As a senior security engineer, you will help define short-term and long-term security strategy. You will balance your efforts between strategic and operational deliverables. You will have the opportunity to work with talented engineering teams within Amazon to ensure applications are designed and built securely. You care deeply about keeping Amazon customers secure and therefore are passionate about finding, and mitigating vulnerabilities/risks by providing actionable guidance to product teams and drive long term security improvements. You're well-known for your excellent prioritization skills as well as your ability to communicate at all levels of an organization (technical and non-technical). The successful candidate must be autonomous, comfortable operating in highly ambiguous situations, and must deliver results in a fast-paced environment.Your responsibilities will include:<ul><li>Perform security reviews including secure design and architecture, threat modeling, threat assessments, secure code reviews, security testing, and security certifications</li><li>Identify security gaps in applications, services, and products including internally developed, as well as third party solutions</li><li>Determine findings criticality taking into account the relevant business, technical, and threat environment</li><li>Produce reports that describes the work perform for a variety of audiences including technical and non-technical stakeholders</li><li>Communicate findings to relevant stakeholders through a combination of verbal and written reports. Identify owners, and drive mitigation of findings within established SLAs</li><li>Record findings and supporting evidence, work product, and testing results following established policies and procedures</li><li>Design, develop, deploy, and maintain security automation, secure-by-default solutions, and other solutions that will enable developer and security engineering productivity using scripting or programming languages</li><li>Develop a broad and deep technical understanding of the services, architectures, and products pertaining to the Customer Service organization</li><li>Contribute to the long-term and short-term security strategy to ensure that applications are designed and built securely</li><li>Comfortably transition between big picture, strategic thinking and tactical, day-to-day operational execution</li><li>Review technical solutions to provide guidance to help mitigate security vulnerabilities as well as provide actionable long-term and short-term risk mitigation recommendations</li><li>Improve secure software development life-cycle (SSDLC) practices across multiple organizations in Amazon</li><li>Influence decision-makers and stakeholders to achieve a consistently high security bar</li><li>Create relevant documentation, security guidance, and metrics to report to your stakeholders and business leaders and deliver these in a clear, concise manner</li><li>Lead security initiatives with end-to-end ownership</li><li>Participate in security escalations support including on-call rotation</li><li>Evaluate and recommend new and emerging security products and technologies</li><li>Support for mentoring, team building, recruiting activities, onboarding of new team members</li><li>Own and carry out new, reoccurring, or ad-hoc security engineering projects and consultations</li><li>Deliver practical security solutions providing the most customer-centric experience on the planet</li><li>Must be a kind human who enjoys working in a fun team</li></ul><h3>Basic Qualifications</h3><ul><li>BS in Computer Science, Information Security, or equivalent professional experience</li><li>8+ years of experience in application security, product security, or systems security</li><li>5+ years writing production-level code in at least one scripting or compiled language such as Java, Python, JavaScript, Go, Ruby, C# or C/C++</li><li>Proven experience in threat modeling, code reviews, security testing, vulnerability detection, attacker exploit techniques, and methods for their remediation.</li><li>5+ years of experience securing cloud services such as AWS, Azure, and Google Cloud</li></ul><h3>Preferred Qualifications</h3><ul><li>Master’s degree in Computer Science, Information Security, Computer Engineering, Electrical Engineering or equivalent</li><li>Relevant industry certifications from SANS, GIAC, CISSP, OSCP, etc.</li><li>3+ years of software development experience with at least one programing language such as Java, Python, JavaScript, Go, Ruby, C# or C/C++</li><li>3+ years of experience in penetration testing, offensive security, or red teaming • Deep technical understanding of OWASP Top 10, and SANS 25 vulnerability identification and remediation</li><li>Excellent written and verbal communication skills with the ability to adapt messaging to technical and non-technical audiences at all levels including senior leadership</li><li>History of working autonomously and delivering results in a fast-paced, highly ambiguous environment</li><li>Experience driving multiple technically complex security initiatives while remaining effective at providing security guidance to stakeholders</li></ul>Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $136,000/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits. Applicants should apply via our internal or external career site.

Senior Security Engineer, WWCS Application Security

Riverside Research

Riverside Research is an independent National Security Nonprofit dedicated to research and development in the national interest. We provide high-end technical services, research and development, and prototype solutions to some of the country’s most challenging technical problems.
Job Number: 1274
Riverside Research, one of America’s premier not-for-profit providers of independent, trusted technical and scientific expertise, is seeking a full time Security Specialist in the Dayton, OH area. This is a full-time position located at Wright-Patterson Air Force Base in Dayton, Ohio.  This position requires an active Top Secret clearance with SCI or eligibility for SCI.
All Riverside Research opportunities require U.S. Citizenship.
Job Responsibilities:
<ul>
<li>Provide security support to ensure the protection and safeguarding of Collateral, SCI, and SAP activities</li>
<li>Provide direct support to the customer in the day-to-day administration and oversight responsibilities of classified activities and development of local policies and procedures in accordance with applicable directives</li>
<li>Provide comprehensive Security Management, including but not limited to, Personnel Security, Information Security, Security Awareness, Training, and Education and Operations Security (OPSEC)</li>
<li>Perform self-inspections, and maintain continuous control over all media</li>
<li>Perform 1st Tier adjudication reviews, assist with system accountability, and provide information security advice</li>
<li>Other duties as assigned</li>
</ul>
Required Qualifications:
<ul>
<li>Requires an active Top Secret clearance with SCI or eligibility for SCI.</li>
<li>Minimum of 2+ years of experience working in a multi-level classified environment consisting of SCI and SAP</li>
<li>High school diploma required</li>
<li>Knowledge of DoDM 5105.07 V1-4, DoDM 5105.21 V1-3, DoDM 5100.01 V1-4, and related directives</li>
<li>Ability to make effective decisions in both crisis and routine situations and establish work priorities</li>
<li>Strong verbal and written communication skills</li>
<li>Experience maintaining a SAPF/SAR vaults</li>
</ul>
 Desired Qualifications:
<ul>
<li>5+ years of experience working in a multi-level classified environment consisting of SCI and SAP</li>
</ul>
Riverside Research strives to be one of America's premier providers of independent, trusted technical and scientific expertise. We continue to add experienced and technically astute staff who are highly motivated to help our DoD and Intelligence Community (IC) customers deliver world class programs. As a not-for-profit, technology-oriented defense company, we believe service to customers and support of our staff is our mission. Our goal is to serve as a destination company by providing an industry-leading, positive, and rewarding employee experience for all who join us. We aspire to be a valued partner to our customers and to earn their trust through our unwavering commitment to achieve timely, innovative, cost-effective and mission-focused solutions.
All positions at Riverside Research are subject to background investigations. Employment is contingent upon successful completion of a background investigation including criminal history and identity check.
Riverside Research does not mandate COVID vaccination as a condition of employment. However, proof of vaccination or negative test may be required to enter certain government facilities and sites. Vaccination requirements will depend on the status of the federal contractor mandate and customer site-specific requirements. To protect the health and safety of its employees, their families, and to comply with customer requirements, the company requires all employees to disclose vaccination status (upon hire). 
Our EEO PolicyRiverside Research is an equal opportunity employer. We recruit, employ, train, compensate and promote without regard to race, religion, sex, color, national origin, age, gender identity, sexual orientation, marital status, disability/veteran, status as a protected veteran, or any other basis protected by applicable federal, state and local law.
If you need assistance at any time in our application or interview process, please contact Recruiting at email Recruiting@RiversideResearch.org. A member of the Recruiting team will be available to assist.
This contractor and subcontractor shall abide by the requirements of 41 CFR 60-741.5(a). This regulation prohibits discrimination against qualified individuals on the basis of disability and requires affirmative action by covered prime contractors and subcontractors to employ and advance in employment qualified individuals with disabilities.
This contractor and subcontractor shall abide by the requirements of 41 CFR 60-300.5(a). This regulation prohibits discrimination against qualified protected veterans and requires affirmative action by covered contractors and subcontractors to employ and advance in employment qualified protected veterans.
For more information on "EEO is the Law," please visit:http://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf
https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf

Security Specialist

XOR Security

Job Description:
XOR Security is currently seeking a Splunk Engineer.
Primary Responsibilities: 
<ul>
<li>The candidate should be proficient with recognizing and onboarding new data sources into Splunk, analyzing the data for anomalies and trends, and building dashboards highlighting the key trends of the data. The Splunk engineer should be proficient within a Linux environment, editing and maintaining Splunk configuration files and apps.</li>
<li>The selected candidate will assist with providing engineering, and administration in supporting a very large distributed clustered Splunk environment consisting of search heads, indexers, deployers, deployment servers, heavy/universal forwarders and Splunk Enterprise Security premium app, spanning security, performance, and operational roles.</li>
<li>The Splunk engineer will assist the Enterprise Splunk team, Cybersecurity Engineering team members and will be required to interact with end users to gather requirements, perform troubleshooting, and provide assistance with the creation of Splunk search queries and dashboards. The Splunk engineer will be required interact with management, as necessary.</li>
</ul>
Basic Qualifications:
<ul>
<li>Must be a US citizen, no clearance required and in addition, must have a current BI or be able to favorably pass a (BI) Background Investigation to join this program.</li>
<li>A minimum of a Bachelor’s degree coupled with 5+ years of experience in the Information Technology arena</li>
<li>2+ years of experience in a Splunk engineering role supporting SOC or NOC environments</li>
<li>2+ Years of experience in Linux and SQL/ODBC interfaces</li>
<li>1+ Years of experience in app interface development, using REST APIs</li>
<li>Experience with Ansible and GIT</li>
<li>Knowledge of Splunk Clustering.</li>
<li>Ability to follow Change &amp; Configuration Management</li>
<li>Strong problem solving abilities with an analytic and qualitative eye for reasoning under pressure</li>
<li>Self-starter with the ability to independently prioritize and complete multiple tasks with little to no supervision</li>
<li>Ability to script in one more of the following computer languages Python, Bash, Visual Basic or Powershell</li>
<li>Splunk Certified Administrator Certification</li>
</ul>
Desired Qualifications:
<ul>
<li>Experience in SQL</li>
<li>Current or former completed Splunk training</li>
<li>Experience in automating Splunk Deployments and orchestration with in a Cloud environment</li>
<li>Experience in linux environment</li>
<li>Splunk Certified Architect Certification</li>
</ul>
XOR Security offers a very competitive benefits package including health insurance coverage from the first day of employment, 401k with a vested company match, vacation and supplemental insurance benefits.
XOR Security is an Equal Opportunity Employer (EOE). M/F/D/V.
Citizenship Clearance RequirementApplicants selected may be subject to a government security investigation and must meet eligibility requirements - US CITIZENSHIP REQUIRED and Secret Clearance.

Splunk Engineer

VerSprite

VerSprite
VerSprite is an Inc. 5000 2020 fastest growing company and industry leader in PASTA threat modeling. Founded in 2007, VerSprite is a private cybersecurity consulting firm helping organizations tighten their risk-gaps with evolved security solutions and advanced threat intel tools.
VerSprite has a 97% client retention rate providing organizations with services like penetration tests, evolved red teaming engagements, vCISO, vSOC and VerSprite’s advanced security tools Cloud Security Assessment Platform and Cyber Threat Intelligence Portal.GRC Team
The VerSprite GRC team focuses on managing risks for our customers via the following umbrella of services: Virtual CISO, Enterprise Risk Assessment, Privacy Assessment and Vendor Risk Assessments among others. To do so, we leverage industry frameworks such as ISO 27001, NIST cybersecurity framework, CIS and a methodology unique to VerSprite based on its extensive experience managing GRC projects. We are a dynamic group of threat-inspired professionals working in a fast-paced, collaborative environment to help our clients with Governance, Risk, and Compliance issues. We strive to understand both the business context of our clients and the behaviors of threat actors to transform issue identification, evaluation, and remediation strategy from theoretical and generic to realistic and tailored.
You will be helping clients by:
<ul>
<li>working with a wide variety of clients to deliver professional services and manage business development activities;</li>
<li>addressing client issues such as: security transformation in business processes, policy, and technological implementation; IT risk identification, remediation planning, and project management; and compliance mapping, gap analysis, and strategic recommendations</li>
<li>demonstrating knowledge of trends and expertise in IT, security, compliance, and business;</li>
<li>analyzing, evaluating, and enhancing information technology systems to develop and improve security maturity;</li>
<li>monitoring progress, managing risks and ensuring key stakeholders are kept informed about progress and expected outcomes;</li>
</ul>
Requirements:
<ul>
<li>A bachelor or master’s degree and approximately 2-3 years of related work experience;</li>
<li>Understanding of CyberSecurity Frameworks (NIST CSF, ISO 27001, COBIT, CIS);</li>
<li>Ability to respond to a variety of Compliance issues (PCI-DSS, HIPAA, GDPR, CCPA, Privacy);</li>
</ul>Benefits
We offer a competitive compensation package where you’ll be recognized for the value you bring to our business, along with:
<ul>
<li>Opportunities to develop new skills and progress your career;</li>
<li>The freedom and flexibility to handle your role in a way that’s right for you; and</li>
<li>A collaborative environment where everyone works together to create a better working world</li>
</ul>
If this seems intriguing to you, please apply! We will reach out promptly to discuss your fit and additional job details.

GRC Consultant

Cloudflare, Inc.

About Us

At Cloudflare, we have our eyes set on an ambitious goal: to help build a better Internet. Today the company runs one of the world’s largest networks that powers approximately 25 million Internet properties, for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. 
We realize people do not fit into neat boxes. We are looking for curious and empathetic individuals who are committed to developing themselves and learning new skills, and we are ready to help you do that. We cannot complete our mission without building a diverse and inclusive team. We hire the best people based on an evaluation of their potential and support them throughout their time at Cloudflare. Come join us! 
<h3>Senior Software Engineer - Zero Trust Clients</h3>
<h3>What you'll do</h3>
We’re looking for a Senior Software Engineer to join our Zero Trust team. You will be working on the Zero Trust desktop client, which protects corporate devices by securely and privately sending traffic from those devices to Cloudflare’s global network, which can apply advanced web filtering and advanced Zero Trust policies.
In your role, you will predominantly be using Rust along platform-native languages &amp; APIs to implement high-performance networking code that runs on multiple desktop platforms. You’ll be expected to improve the code quality and to build solid, testable, and well-documented foundations. You will be most successful in this role if you have a good understanding of operating system concepts (virtual memory, multi-threading, process lifecycle, etc.) and networking protocols (TCP/IP, UDP, DNS, QUIC, H/3, proxying, etc.). You will also have to interact with other languages, such as Swift, C#, C, and python.
As a Senior Software Engineer, you will be expected to make significant contributions to the design and implementation of major development projects, working closely with our product managers and other teams to implement customer-impacting features. You will work on stimulating problems born out of the scale of our deployment, and the stringent quality, performance, and security requirements of our product.
<h3>Examples of desirable skills, knowledge, and experience</h3>
<ul>
<li>Excellent programming skills, with experience writing very high-quality and low-complexity code with thorough documentation.</li>
<li>Strong experience writing easily-testable and thoroughly-tested code (e.g. using dependency injection with the right abstractions)</li>
<li>Experience with systems programming and familiarity with core OS concepts of one or more desktop OSes (macOS, Windows, Linux)</li>
<li>Great experience using lower-level languages, such as Rust, C, C++</li>
<li>Very comfortable writing multithreaded, asynchronous code</li>
<li>Strong experience with debugging network-related problems</li>
<li>An understanding of how VPN technologies work, and the trade-offs between privacy, security, and anonymity</li>
<li>Good understanding of, and experience with, security protocols and standards</li>
<li>Empathetic, proactive, and constructive communication skills, verbal and written</li>
</ul>
Compensation
Compensation may be adjusted depending on work location.
<ul>
<li>For Colorado-based hires: Estimated annual salary of $168,000 - $206,000.</li>
<li>For New York City-based and California (excluding Bay Area) and Washington D.C. hires: Estimated annual salary of $187,000 - $229,000.</li>
<li>For Bay Area-based hires: Estimated annual salary of $194,000 - $240,000.</li>
</ul>
Equity
This role is eligible to participate in Cloudflare’s equity plan.
Benefits
Cloudflare offers a complete package of benefits and programs to support you and your family.  Our benefits programs can help you pay health care expenses, support caregiving, build capital for the future and make life a little easier and fun!  The below is a description of our benefits for employees in the United States, and benefits may vary for employees based outside the U.S.
Health &amp; Welfare Benefits
<ul>
<li>Medical/Rx Insurance</li>
<li>Dental Insurance</li>
<li>Vision Insurance</li>
<li>Flexible Spending Accounts</li>
<li>Commuter Spending Accounts</li>
<li>Fertility &amp; Family Forming Benefits</li>
<li>On-demand mental health support and Employee Assistance Program</li>
<li>Global Travel Medical Insurance</li>
</ul>
Financial Benefits
<ul>
<li>Short and Long Term Disability Insurance</li>
<li>Life &amp; Accident Insurance</li>
<li>401(k) Retirement Savings Plan</li>
<li>Employee Stock Participation Plan</li>
</ul>
Time Off
<ul>
<li>Flexible paid time off covering vacation and sick leave</li>
<li>Leave programs, including parental, pregnancy health, medical, and bereavement leave</li>
</ul>What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
Project Galileo: We equip politically and artistically important organizations and journalists with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
Athenian Project: We created Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration.
Path Forward Partnership: Since 2016, we have partnered with Path Forward, a nonprofit organization, to create 16-week positions for mid-career professionals who want to get back to the workplace after taking time off to care for a child, parent, or loved one.
1.1.1.1: We released 1.1.1.1 to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our privacy commitment and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer.  We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness.  All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law. We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities.  Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.  If you require a reasonable accommodation to apply for a job, please contact us via e-mail at hr@cloudflare.com or via mail at 101 Townsend St. San Francisco, CA 94107.

Sr Software Engineer - Zero Trust Clients

Xero

Xero is a beautiful, easy-to-use platform that helps small businesses and their accounting and bookkeeping advisors grow and thrive. At Xero, our purpose is to make life better for people in small business, their advisors, and communities around the world. This purpose sits at the centre of everything we do. We support our people to do the best work of their lives so that they can help small businesses succeed through better tools, information and connections. Because when they succeed they make a difference, and when millions of small businesses are making a difference, the world is a more beautiful place.What’s the Role?We are looking for Mid-level and Senior Security Engineers at to join our Security Engineering Function. As a Security Engineer at Xero, you’ll ensure our platform security systems are deployed and maintained to support the requirements of our teams. You’ll be hands-on solving problems at scale in a massive AWS environment. In time you'll become deeply familiar with the capabilities of our vendors to build and support modern and adaptable security services that will delight our customers. We run mission-critical infrastructure, and you’ll build resilient and scalable systems. Automation will be the standard for you, and you’ll seek new and interesting ways to reduce our operational overheads. Most importantly, you’ll be a team player and get to work with an awesome group of engineers in an amazing and unique working environment.If you have knowledge of network security fundamentals and exposure to WAF &amp; CDN technologies, we would love to hear from you! Meet The TeamThe Edge team is one of three Security Engineering pods made up of Edge, Defence and Asset. The vision of the edge team is to secure Xero’s edge with innovative technologies that deliver availability and scalability. We’re responsible for designing, maintaining and servicing tools and infrastructure that defends against threats from entering or spreading through Xero's network infrastructure. We’re looking for an Engineer that will help us create automated security processes that empower product teams to build #beautiful secure software. While we don’t require you to have worked with our tech stack previously, what is important is you are happy to learn and work with it. 
<h3>Generally, the technologies we work with are:</h3>
<ul>
<li>AWS is our main cloud provider, however knowledge of Azure and GCP is beneficial</li><li>WAF technologies; Content Delivery Networks (CDNs) such as Akamai and/or Cloudfront</li><li>Python scripting and automation tools such as Terraform </li><li>Check Point firewall products</li><li>NGINX or other Web Service Products</li><li>JSON, YAML, and AWS Cloudformation templates</li></ul>
<h3>What you'll do:</h3>
<ul>
<li>This is a hands on, on the tools role; you’ll be the focal point where technical decisions meet strategic thinking.</li><li>Day to day you'll develop software and automation as agreed with the team, help to develop and maintain documentation, and participate in the 24/7 oncall roster as required.</li><li>Regardless of your skill level, you'll be part of a team with a strong sense of collaboration; sharing knowledge, coaching and mentoring other team members.</li><li>Work with other Xero Security Teams and Product teams to ensure that any escalated incidents and problems are resolved in a timely and comprehensive manner.  </li></ul>
<h3>What you'll bring: </h3>
<ul>
<li>Previous experience in a security engineering position, ideally in an environment that uses AWS and DevOps principles </li><li>Knowledge of network security fundamentals and exposure to Firewalls, WAF, and CDN technologies</li><li>A keen desire to mentor and grow others, whilst staying up to date with all industry trends </li><li>Any experience or knowledge around automation tools and/or Python scripting would be a plus</li></ul>
<h3>What we offer: </h3>
<ul>
<li>Employee Share Plan, alongside an additional 5 annual Leave days, PLUS bonus holiday Leave.  </li><li>Wellbeing leave, Parental and Partner Leave, Life Insurance and Private Health Insurance.</li><li>Flexible working arrangements and weekly social events. </li></ul>Flexible Working!Xero is continuing to grow and so are the opportunities to join us! You can choose to perform this role:- In one of our #beautiful offices (Wellington or Auckland)- Flexibly, through a hybrid of in office and remote working styles- Permanently remote from anywhere within New Zealand!Our collaborative and inclusive culture is one we’re immensely proud of. We know that a diverse workforce is a strength that enables businesses, including ours, to better understand and serve customers, attract top talent and innovate successfully.  At Xero we embrace diversity and inclusion and value a #challenge mindset. Research has shown that women and underrepresented groups are less likely to apply to jobs unless they meet every single competency or experience . If you are excited about this role, but your past experience doesn't align perfectly, we encourage you to apply anyway. You could be just the right person for this role and Xero. If you have any support or access requirements, we encourage you to advise us at time of application and throughout the interview process.Xero is an NZ Immigration Accredited Employer and Rainbow Tick certified too.

Security Engineers (Mid &amp; Senior)

Riot Games, Inc.

Continuously delivering content to a global audience of millions of players while also building new games affords Riot's InfoSec discipline with a mountain of exciting and complex challenges. And of course, the attention of very interesting adversary groups.That's where you come in. Riot Security Operations Engineers hold an in-depth knowledge of specific areas of expertise. We don't just focus on breaking things; we proactively support teams across Riot to develop robust security capabilities which help protect player experiences. We relish the opportunity to work with new tech stacks and product teams, each with their own unique security risk profile.At the most fundamental level, their goal is to help deliver value to players and make life harder for troublemakers.
Our Security Operations team is responsible for regularly monitoring and analyzing Riot’s security efforts across the organization and for our players. Its mission is to quickly detect, analyze, and respond to various threat actors from across the globe. The ability to not only think critically when it comes to security threats, but technically by developing tools (e.g. automating security processes) is vital to their success. From working closely with local and federal law enforcement agencies around security incidents to defending against the next DDoS, they are here to protect Riot and our players. 
You will report to the Manager of Security Operations and be based in the Dublin office.
<h3>Responsibilities:</h3>
<ul>
<li>Lead, mentor, and develop engineers who are part of our global Security team</li>
<li>Probe, research, and analyze security risks that directly impact players</li>
<li>Triage and investigate security events </li>
<li>Help identify new exploits, threats and mitigations for detection engineering</li>
<li>Contribute to and drive Riot’s global Security Operations roadmap</li>
<li>Work with product teams throughout the incident investigation cycle to ensure proper remediation, eradication, and lessons learned are rolled back into day to day operations.</li>
<li>Part of European team acting as the escalation point for all security events and investigations</li>
<li>You will be expected to do a small amount of travel as part of a global team</li>
</ul>
<h3>Required Qualifications:</h3>
<ul>
<li>3-5 years experience in Cybersecurity operations, threat hunting, incident response and digital forensics</li>
<li>Experience as an engineer assisting in incident response efforts. This should include hands on experience completing malware analysis, memory analysis and disk forensic</li>
<li>2+ years of computer network defense (identify, protect, detect, respond, recover) experience within a Computer Incident Response organization</li>
<li>Understanding of the life cycle of network threats, attack vectors, and methods of exploitation and common tactics, techniques, and procedures of advanced attackers</li>
<li>Experience needed in automating common tasks using a scripting language (Python, PowerShell, Go or similar)</li>
<li>Demonstrated understanding of IT and security related technologies and practices including endpoint incident detection and response, firewalls, secure remote access, authentication, networking and operating systems</li>
<li>As comfortable communicating in distributed teams as with people sitting right next to you</li>
</ul>
<h3>Desired Qualifications:</h3>
<ul>
<li>Experience working with cloud infrastructure and services such as AWS, Azure, Google Cloud, SoftLayer or Private Clouds</li>
<li>Experience working with security tooling and logging technology (e.g. ELK, Splunk, SentinelOne, Defender ATP, Carbon Black, etc.)</li>
<li>Knowledge of container security and automation such as docker, kubernetes, terraform and ansible</li>
<li>Industry certifications (GCFE, GCFA, GNFA, GCIH, EnCE, CISSP) a plus, but not required</li>
</ul>
For this role, you'll find success through craft expertise, a collaborative spirit, and choices that focus on your fellow Rioters, who are the customers of your work. Being a dedicated fan of games is not necessary for this position!
<h3>Our Perks:</h3>
<ul>
<li>Open paid time off</li>
<li>Retirement benefits with company matching</li>
<li>Medical and dental plans that cover you, your spouse/domestic partner, and children</li>
<li>Life insurance, short-term and long-term disability</li>
<li>Family Bonding leave</li>
<li>Commuting allowance</li>
<li>Flexible benefits allowance</li>
<li>Vision allowance</li>
<li>Daily lunch, snacks and fruit in the office</li>
<li>We will double down on your donations of time and money to nonprofits</li>
</ul>
<h3>Let's Thrive Together:</h3>
Because together we are better, we know that fresh and varied perspectives will make us better at what we do, so however you identify and whatever background you bring with you, we're excited to hear from you. Don't be discouraged if you feel you don't fully meet every single one of the requirements for a particular role, there's always room for growth at Riot. If you spot a role that will make you want to jump out of bed in the morning, we are waiting to hear from you! Don't forget to include a resume. We receive many applications, but we'll notice a fun, well-written intro that shows us you Dare to Dream and Execute with Excellence.

Senior Cybersecurity Engineer Incident Responder

<h3>Job Description:</h3>
XOR Security is currently seeking talented Baseline Network Security Engineer for an exciting position supporting one of our premier clients. Our project is aimed at establishing cutting-edge techniques for information assurance, network defense, identifying vulnerable systems.
The ideal candidate will have hands-on experience with all phases of network engineering, and Security Engineering on an operational network.  In addition, the candidate should have an in-depth understanding of networks and be able to perform the assessment and tuning of a Cisco-based data communications network and network security devices.  The candidate will implement network security best practices; develop and maintain ‘acceptable use policies’ for IP network, firewall, and filtering policies.  Additionally, the ideal candidate should have experience in administering a Microsoft environment and have solid skills in Powershell and Regex.  The associated duties will include the configuration, tuning, and scripting of Microsoft server platforms, including Active Directory. 
This effort will require a skilled engineer with experience performing analysis of network security solutions, including identifying gaps, recommending and implementing configuration changes to the SIEM.  The candidate will also ensure existing network infrastructure and configuration standards are adhered to when delivering projects.
The candidate should be able to coordinate engineering and analysis efforts between network, incident response and management teams. The candidate must have a strong understanding of networking, analysis and system administration.  Additionally, the candidate should be comfortable interacting with all levels of a security team. The ideal candidate will have experience with the following tools:  Stealthwatch, ESA/WSA, Cisco AMP, Splunk ES, Firesight, Symantec DLP and SEP.
Location:
Washington D.C., USA 
<h3>Skills and Qualifications:</h3>
<h4>Required Qualifications:</h4>
<ul>
<li>An industry technical certification such as CCNA, MCSE, GCIH, or GISP</li>
<li>Experience with administering and deploying tap aggregation technology such as A10 and next-gen firewalls such as Palo Alto.</li>
<li>Experience with deployment and documentation of enterprise project management and change management processes</li>
<li>Ability to identify solutions to potential network issues</li>
<li>Experience with running scripts, collecting and analyzing data generated from those scripts to identify vulnerable systems, and generating reporting with presentation to security management.</li>
<li>Collaborate on problem management and root cause analysis discussions with fellow network engineers, security engineers and analysts</li>
<li>Draft technical requirements, configuration management, and planning documentation</li>
<li>Support the Security Impact Analysis (SIA), an analysis that is conducted by the security team to review the extent to which changes to the information system will affect the security state of the system</li>
<li>Participate in testing and planning of operational network segmentation</li>
<li>Perform implementation of security and compliance-based use cases based on the NIST 800-53 Rev4 security controls</li>
<li>Three (3) years of experience in network defense environments.</li>
</ul>
<h4>Desired Qualifications:</h4>
<ul>
<li>Understanding of command line scripting and implementation. (e.g., Python, Powershell)</li>
<li>Understanding of scripting and content creation. (e.g., Splunk dashboards, SNORT signatures, Python scripts, Powershell scripts.)</li>
<li>Strong understanding of networking. (TCP Flags, TCP Handshake, IP addressing, Firewalls, Proxy, IDS, IPS)</li>
<li>Ability to perform Netflow / packet capture (PCAP) analysis.</li>
<li>Experience with cyber threat hunting.</li>
<li>Bachelor’s Degree in Computer Science, Computer Engineering, Information Systems or equivalent experience.</li>
</ul>
<h3>Closing Statement:</h3>
XOR Security offers a very competitive benefits package including health insurance coverage from the first day of employment, 401k with a vested company match, vacation and supplemental insurance benefits.
XOR Security is an Equal Opportunity Employer (EOE). M/F/D/V.
Citizenship Clearance RequirementApplicants selected may be subject to a government security investigation and must meet eligibility requirements - US CITIZENSHIP and PUBLIC TRUST CLEARANCE REQUIRED.

Baseline Network Security Engineer

VerSprite
VerSprite is an Inc. 5000 2020 fastest growing company and industry leader in PASTA threat modeling. Founded in 2007, VerSprite is a private cybersecurity consulting firm helping organizations tighten their risk-gaps with evolved security solutions and advanced threat intel tools.
VerSprite has a 97% client retention rate providing organizations with services like penetration tests, evolved red teaming engagements, vCISO, vSOC and VerSprite’s advanced security tools Cloud Security Assessment Platform and Cyber Threat Intelligence Portal.

What it’s like to work here:


We foster a collaborative and innovative culture where you will be empowered to do your best work. All of our employees bring everything they have to their job and are part of a larger team working towards a greater goal. We do right by our employees, our partners, and our customers.
You’re perfect for this role if you have:
<ul>
<li>6+ years experience in a similar role</li>
<li>Strong experience with systems deployed on AWS, GCP or Azure</li>
<li>Strong working experience with Java, Maven, Jenkins, and Docker/Kubernetes</li>
<li>Experience with MySQL, Linux/Unix scripts, bash, Python, and Ansible</li>
<li>Demonstrated experience using SAST, DAST, SCA/OSS tools and services</li>
<li>Experience with triaging and remediating application security issues</li>
<li>Experience with agile development, continuous integration, and continuous delivery</li>
<li>Experience with Linux and Windows</li>
<li>Intrinsic understanding of software development life cycles</li>
<li>Excellent oral and written communication skills</li>
<li>Ability to mentor junior DevOps engineers</li>
</ul>
Why you’ll like working here:
This isn’t a place where you will fill a seat and keep your head down. This is a place where everybody is expected to help build something. This is a place where you can be involved and lead in your areas of expertise. So, how much do you believe in yourself? If you believe in your skills, in your drive and determination, we’ll give you the resources and room to show the world what you can do.




Benefits
We offer a competitive compensation package where you’ll be recognized for the value you bring to our business, along with:
<ul>
<li>Opportunities to develop new skills and progress your career;</li>
<li>The freedom and flexibility to handle your role in a way that’s right for you; and</li>
<li>A collaborative environment where everyone works together to create a better working world</li>
</ul>
If this seems intriguing to you, please apply! We will reach out promptly to discuss your fit and additional job details.

Senior Security DevSecOps Engineer - REMOTE

Amazon’s Offensive Security, Red Team is seeking a Program Manager (PM) to help keep Amazon's infrastructure secure for its customers. This team is responsible for attacking Amazon’s services, infrastructure, processes, and controls, and partnering with defensive &amp; service teams to remediate weaknesses and sharpen our detective, preventative, and response capabilities. You will have technological and leader opportunities and have fun hacking Amazon. You will be in direct contact with teams in a variety of business verticals, giving you first hand knowledge about how Amazon is built and how it operates at a deep, technical level. Additionally, you will leverage the knowledge you gain about Amazon to find new ways to drive improvements to services, processes, and technologies throughout the company.Key job responsibilitiesIn this role you’ll be using your program/project management and technical skills to orchestrate and enable engineers to execute on engagements in order to maintain and raise Amazon’s high security bar. You’ll be backed up by a team of skilled security engineers focused on attacking Amazon from a variety of perspectives, all working with a singular focus of maintaining our customer’s trust. You’ll be exposed to the reality of how Amazon functions on a technical and process level, work with a variety of teams across Amazon, and will build a comprehensive base of knowledge around how it all works together. In doing so, you’ll be playing a role in helping keep Amazon secure, bringing security findings to these teams, and contributing to raising the security bar across the company.Responsibilities include:<ul><li>Manage the full lifecycle of Red Team operations</li><li>Drive internal program and process improvements</li><li>Collaborate with partner and service owners to help drive the resolution of discovered security findings</li><li>Communicate with SVPs, VPs, Directors, and Managers to prioritize and execute remediation plans</li><li>Coordinate across Amazon to understand and support initiatives that raise the security bar of the company</li></ul><h3>Basic Qualifications</h3><ul><li>5+ years of program or project management experience</li><li>Experience using data and metrics to determine and drive improvements</li><li>Experience owning program strategy, end to end delivery, and communicating results to senior leadership</li><li>Experience working cross functionally with tech teams</li><li>Demonstrated knowledge or experience in Information Security, with knowledge of security fundamentals, common vulnerabilities, and Red Team processes, methodologies, and tools.</li></ul><h3>Preferred Qualifications</h3><ul><li>2+ years of driving process improvements experience</li><li>Master's degree, or MBA in business, operations, human resources, adult education, organizational development, instructional design or related field</li><li>Experience driving security programs across large diverse organizations</li></ul>Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $92,500/year in our lowest geographic market up to $185,000/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits. Applicants should apply via our internal or external career site.

Senior Program Manager, Red Team

VerSprite
VerSprite is an Inc. 5000 2020 fastest growing company and industry leader in PASTA threat modeling. Founded in 2007, VerSprite is a private cybersecurity consulting firm helping organizations tighten their risk-gaps with evolved security solutions and advanced threat intel tools.
VerSprite has a 97% client retention rate providing organizations with services like penetration tests, evolved red teaming engagements, vCISO, vSOC and VerSprite’s advanced security tools Cloud Security Assessment Platform and Cyber Threat Intelligence Portal.
Penetration Tester / Offensive Security ConsultantAre you an ethical hacker looking to turn your early experience into a long-term career? Do you strive to upgrade your technical skills, and take on challenging pentests? VerSprite is looking for a Penetration Tester who’s passionate about deep-dive pentesting and eager to expand their offensive security knowledge. If this sounds like you, we’d like to chat.

 

---Responsibilities
<ul>
<li>Perform Web (Apps/Services/APIs) and Network (Internal/External/Cloud) Pentests</li>
<li>Elaborate and properly document proof-of-concepts for real-world exploitation scenarios of the discovered vulnerabilities with enough details so they can be easily reproduced</li>
<li>Analyze vulnerabilities and deliver clear and coherent written reporting</li>
<li>Provide clients the technical risk associated to all findings reported while recognizing their true business impact</li>
<li>Support all reported vulnerabilities with their remediation guidance</li>
<li>Collaborate with other team members (Test Lead, Team Lead and fellow consultants) on penetration tests and red teaming engagements</li>
<li>Execute projects according to the alignments defined by the rules of engagements and complete them within defined deadlines as required.</li>
<li>Continuously learning and staying up-to-date with the latest attack techniques, tools, methodologies</li>
</ul>














--- Requirements





<ul>
<li>Solid fundamentals in Web (Apps/Services/APIs) and network pentesting (2+ years). Pentesting experience in mobile apps (iOS/Android) is desirable.</li>
<li>Experience with Social Engineering through Phishing Campaigns, Source Code Analysis, Cloud environments and Auditing Smart Contracts definitely a great bonus.</li>
<li>
Solid understanding of common webapp vulnerabilities, exploitation techniques, and remediation options
</li>
<li>
Solid foundation on network protocols (HTTP, SSH, SMTP, etc) and their typical security issues
</li>
<li>Solid knowledge of common security concepts (crypto, AAA, AD security, SSO, OS Security, etc.) and practical offensive techniques (SSH tunneling, pivoting, OSCP equivalent knowledge)</li>
<li>Proficient in developing in at least two languages, ideally one Web and one Scripting: Python, Ruby, Swift, Golang, C/C++, .NET, PHP, JS, BASH, etc.</li>
<li>Passion for learning new technologies and processes, and contributing to refining existing capabilities</li>
<li>Experience developing custom scripts or tools to enhance penetration testing and improve automation of repetitive tasks</li>
<li>Work well under pressure and in a fast pace environment</li>
</ul>


















 




























Benefits
We offer a competitive compensation package where you’ll be recognized for the value you bring to our business, along with:
<ul>
<li>Opportunities to develop new skills and progress your career;</li>
<li>The freedom and flexibility to handle your role in a way that’s right for you; and</li>
<li>A collaborative environment where everyone works together to create a better working world</li>
</ul>
If this seems intriguing to you, please apply! We will reach out promptly to discuss your fit and additional job details.

Offensive Security Consultant

Flexport

We are reinventing global trade.

Flexport helps more than 10,000 clients and suppliers lead all aspects of their supply chain operations. Started in 2013, we've raised over $1.3B from investors that include the Founders Fund, Google Ventures, First Round Capital, Bloomberg Beta, Y Combinator, Wells Fargo, &amp; Softbank. 

With offices on three continents, our team is as global as our client base and we’re excited to continue building a product and service they love. Wherever you are, whichever role you play, you’re guaranteed to share your day with committed, encouraging, and resourceful team members. 

Flexport is looking for Software Security Engineers to help Flexport establish itself as the most trusted company in the global trade ecosystem. As a Software Engineer on our Security team, you will build services and products that help us better secure our products and position security as an enabler.
What you’ll do:

<ul>
<li>Design, develop, and implement security libraries and services in collaboration with product and infrastructure engineering teams. </li>
<li>Develop and maintain APIs and integrations for security products with other systems and services.</li>
<li>Develop software solutions for security monitoring, threat detection and response, and vulnerability management.</li>
<li>Work collaboratively with cross-functional teams to identify and prioritize security needs and translate them into product requirements.</li>
<li>Assist with code reviews and quality assurance testing to ensure the security and reliability of the software products.</li>
<li>Stay up-to-date with emerging security threats and trends, and implement proactive measures to mitigate risks.</li>
<li>Document and communicate technical specifications and user guides to stakeholders and end-users.</li>
</ul>
What you’ll need:
<ul>
<li>6+ years of full-stack software engineering experience using languages such as Java, Python, or Ruby.</li>
<li>Experience building and securing APIs.</li>
<li>Strong knowledge of CI/CD and DevOps automation.</li>
<li>Experience with IaaS cloud infrastructure, Kubernetes, containers, web related technology, and service-oriented architectures.</li>
<li>Excellence in problem-solving, strategic thinking, and collaboration with cross-functional teams.</li>
<li>Strong written and verbal communication skills and ability to connect with empathy when delivering constructive feedback regarding security matters to engineers and product designers.</li>
</ul>
Nice to have:
<ul>
<li>Experience developing security services or products.</li>
<li>Experience with identity management and identity federation (SAML, Oauth, SCIM, XACML).</li>
</ul>
<ul>
<li>Experience building and securing GraphQL </li>
</ul>
<ul>
<li>Experience performing code audits on internal and open source libraries for inclusion in our products.</li>
</ul>

If you are a self-motivated individual who is passionate about building and maintaining cloud-based infrastructure, we encourage you to apply.

<h3>Culture &amp; Values</h3>
<h3>Learn more at www.keyvalues.com/flexport</h3>
<h3>Worried about not having any freight forwarding experience?</h3>
Don’t be! Our mission is to make global trade easy for everyone. That’s why it’s important to bring people from diverse backgrounds and experiences together with our industry veterans to help move the global logistics industry forward.
We know this industry is complex. That’s why we invest in education starting day one with Flexport Academy, a one week intensive onboarding program designed specifically to set every new Flexport employee up for success. 
At Flexport, our ability to fulfill our mission of making global trade easy for everyone relies on having a diverse, dedicated and engaged workforce. That is why Flexport is committed to creating and nurturing an environment where anyone can be their authentic self. All qualified applicants will receive consideration for employment regardless of race, color, religion, sex, national origin, age, physical and mental disability, health status, marital and family status, sexual orientation, gender identity and expression, military and veteran status, and any other characteristic protected by applicable law.
To learn more about what our tech teams have been up to, head to the Engineering Blog.







The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Our salary ranges are determined by role, level, and location. Within the range displayed, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education and / or training. 







The US base salary range for this full-time position: (exclusive of bonus, equity and benefits.)$206,200—$229,100 USD

Senior Software Engineer, Security

Bandwidth

Who We Are:











Bandwidth (NASDAQ: BAND) is a global communications software company that helps enterprises connect people around the world with cloud-ready voice, messaging and emergency services. Backed by a network reaching 60+ countries covering 90 percent of global GDP, companies like Cisco, Google, Microsoft, RingCentral, Uber and Zoom use Bandwidth's APIs to easily embed communications into software and applications. Bandwidth has more than 20 years in the technology space and was the first Communications Platform-as-a-Service (CPaaS) provider to offer a robust selection of APIs built around our own global network. Our award-winning support teams help businesses around the world solve complex communications challenges every day.











At Bandwidth, your music matters when you are part of the BAND.  We celebrate differences and encourage BANDmates to be their authentic selves.  #jointheband
What We Are Looking For:
The Information Security Program Manager will lead the security team in day-to-day execution and compliance with prescribed methodology process, including program charter development, program initiation and facilitation, project development, risk and issues management, quality planning, and communications planning.
What You'll Do:
<ul>
<li>Oversees and manages multiple projects with broad scope, ambiguity, and high degree of difficulty for the global information security program</li>
<li>Responsible for ensuring communication, timeline, resource needs and tasks are in alignment with the program roadmap and strategy</li>
<li>Leads global project security compliance enforcement for the organization</li>
<li>Interfaces and manages communication with internal and external customers</li>
<li>Supports the execution of product components across global security programs and services</li>
<li>Serves as liaison between global program stakeholders, program/project team, and senior management</li>
<li>Sets strategic vision to achieve global security objectives and key results</li>
<li>Provides dashboards, program status reports and risk assessments to Infosec executive leadership</li>
<li>Assesses program/project level risks and issues and develops mitigation plans to resolve program objectives</li>
<li>Manages complex multifunction relationships across multiple global teams and identifies dependencies between projects</li>
</ul>
What You Need:
<ul>
<li>BS in Information Security, Computer Science, Business, or a related field or other equivalent combination of education and/or experience that is focused on Information Security/Privacy or Project/Program management.</li>
<li>3 years of program/project management experience, preferably in information security</li>
<li>Understanding of information security fundamentals and general security technologies</li>
<li>Strong organization, prioritization, and rationalization skills</li>
<li>Extensive understanding of critical program/project management techniques and an ability to motivate and lead team members</li>
<li>Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one</li>
</ul>
Bonus Points:
<ul>
<li>Certified Information Systems Security Professional (CISSP) and/or Project Management Professional (PMP) Certification.</li>
</ul>
<h3>The Whole Person Promise: </h3>

At Bandwidth, we’re pretty proud of our corporate culture, which is rooted in our “Whole Person Promise.” We promise all employees that they can have meaningful work AND a full life, and we provide a work environment geared toward enriching your body, mind, and spirit. How do we do that? Well…
<ul>
<li>100% company-paid Medical, Vision, &amp; Dental coverage for you and your family with low deductibles and low out-of-pocket expenses.</li>
<li>All new hires receive four weeks of PTO.</li>
<li>PTO Embargo. When you take time off (of any kind!) you’re embargoed from working. Bandmates and managers are not allowed to interrupt your PTO - not even with email.</li>
<li>Additional PTO can be earned throughout the year through volunteer hours and Bandwidth challenges.</li>
<li>“Mahalo moments” program grants additional time off for life’s most important moments like graduations, buying a first home, getting married, wedding anniversaries (every five years), and the birth of a grandchild.</li>
<li>90-Minute Workout Lunches and unlimited meetings with our very own nutritionist.</li>
</ul>

Are you excited about the position and its responsibilities, but not sure if you’re 100% qualified? Do you feel you can work to help us crush the mission? If you answered ‘yes’ to both of these questions, we encourage you to apply! You won’t want to miss the opportunity to be a part of the BAND.
Applicant Privacy Notice

Information Security Program Manager

Tanium Inc.

The Basics
The Detection Engineer is responsible for facilitating the development and continuous improvement of Tanium’s internal cybersecurity detection program. Candidates will work closely with operations, engineering, architects and business units throughout Tanium to collaborate on threat models and ensure adequate detection mechanisms are in place for a changing threat landscape. This role will be required to balance strategic thinking and tactical hands-on execution. Candidates will enhance existing methods to measure the coverage and quality of detection while also prioritizing and driving efforts to close gaps. As such, candidates will often create or enhance existing detections mechanisms while ensuring alerts are properly transitioned to the security operations team. Candidates are expected to question the status quo to identify opportunities for continuous improvement and are enabled to take action to ensure the effectiveness of a distributed security program operating within DevOps centric workflows. 
This position is available for remote workers with flexible working hours. When support for incident response is required, this role may require occasional work outside of normal business hours. 
What you'll do
<ul>
<li>Drive continuous development and tuning of detection measures </li>
<li>Partner with security teams and business units to define appropriate log visibility &amp; detection related gaps </li>
<li>Lead continuous improvement efforts to evaluate detection capabilities &amp; related tooling efficiency </li>
<li>Build innovative ways to detect potential threats within on premise and cloud environments </li>
<li>Collaborate with operations personnel to prioritize and close detection gaps</li>
<li>Work with security architects and engineers to develop security controls based on threat models</li>
<li>Drive standardization and repeatable processes and procedures within operations as it pertains to responding to threats</li>
<li>Participate in the development and execution of threat hunting exercises</li>
<li>Develop, implement, document and maintain SIEM &amp; Detection engineering tooling management controls, standard operating procedures, narratives and test scripts.</li>
<li>Plan, run, and participate in table top exercises</li>
<li>Collaborate with engineering teams to develop automation to improve the efficiency of security operations</li>
<li>Provide incident response support</li>
<li>Leverage threat intelligence reporting to develop new detection capabilities </li>
</ul>
We’re looking for someone with
<ul>
<li>Experience
<ul>
<li>In accordance with Department of Defense requirements, applicants for this role must be a U.S. citizen, national, or resident pursuant to 8 U.S.C. 1101(a)(20) and 8 U.S.C. 1324b(a)(3) </li>
</ul>
<ul>
<li>2+ years working in a Security Operations or equivalent role </li>
<li>2+ years responding to threats in cloud environments (Azure and AWS preferred) </li>
<li>Working knowledge of common frameworks (Mitre ATT&amp;CK) </li>
<li>Ability to use data to derive meaningful metrics to drive prioritization </li>
<li>Firm understanding of attacker tactics, techniques, and procedures and means of detection </li>
</ul>
<ul>
<li>Ability to synthesize risks and derive detection countermeasures </li>
<li>Proficiency with security tools and platforms (e.g., SIEMs, vulnerability scanners, and malware analyzers) </li>
<li>Familiarity with IDS/IPS systems and endpoint Antivirus and EDR products </li>
<li>Malware analysis experience preferred </li>
<li>Working knowledge of Python or other scripting languages preferred </li>
</ul>
</li>
</ul>
About Tanium 
Tanium, the industry’s only provider of converged endpoint management (XEM), leads the paradigm shift in legacy approaches to managing complex security and technology environments. Only Tanium protects every team, endpoint, and workflow from cyber threats by integrating IT, Operations, Security, and Risk into a single platform that delivers comprehensive visibility across devices, a unified set of controls, and a common taxonomy for a single shared purpose: to protect critical information and infrastructure at scale. Tanium has been named to the Forbes Cloud 100 list for six consecutive years and ranks on Fortune’s list of the Best Large Workplaces in Technology. In fact, more than half of the Fortune 100 and the U.S. armed forces trust Tanium to protect people; defend data; secure systems; and see and control every endpoint, team, and workflow everywhere. That’s the power of certainty. Visit www.tanium.com and follow us on LinkedIn and Twitter.
On a mission. Together. 
At Tanium, we are stewards of a culture that emphasizes the importance of collaboration, respect, and diversity. In our pursuit of revolutionizing the way some of the largest enterprises and governments in the world solve their most difficult IT challenges, we are strengthened by our unique perspectives and by our collective actions.   
We are an organization with stakeholders around the world and it’s imperative that the diversity of our customers and communities is reflected internally in our team members. We strive to create a diverse and inclusive environment where everyone feels they have opportunities to succeed and grow because we know that only together can we do great things. 
Each of our team members has 5 days set aside as volunteer time off (VTO) to contribute to the communities they live in and give back to the causes they care about most.   
What you’ll get
The annual base salary range for this full-time position is $90,000 to $275,000. This range is an estimate for what Tanium will pay a new hire. The actual annual base salary offered may be adjusted based on a variety of factors, including but not limited to, location, education, skills, training, and experience.
In addition to an annual base salary, team members will receive equity awards and a generous benefits package consisting of medical, dental and vision plan, family planning benefits, health savings account, flexible spending account, transportation savings account, 401(k) retirement savings plan with company match, life, accident and disability coverage, business travel accident insurance, employee assistance programs, disability insurance, and other well-being benefits.

For more information on how Tanium processes your personal data, please see our Privacy Policy

Detection Engineer

GuidePoint Security

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.This position is performed on-site at Fort Liberty (Bragg), Fayetteville, NC.  An active security clearance (and US Citizen) is required for this position.
<ol>
<li>Be experienced with security engineering as well as subject matter expert in the DoD/DISA Information Assurance (IA) requirements and have expert knowledge of policies and processes, the DOD Risk Management Framework (RMF), NIST SP 800-53 and CNSSI 1253 security controls, the DoD network environment, industry computer/security standards/best practices, and DoD CND initiatives.</li>
<li>Have experience in providing specialized technical subject matter expertise in the planning, and orchestration of the defense-in- depth security engineering, relevant technology and process development, implementation such as security testing, certification and accreditation, intrusion detection policy development, security baseline management as well as IA focused software development in a mixed Windows/Linux environment.</li>
<li>Have working knowledge of enclave protection technologies to include Firewalls, Network IDS/IPS systems, Host Based IDS/IPS and Security Incident and Event Management (ArcSight SIEM). Must have solid working experience in designing secure network architectures, virtualization technologies, MySQL/MSSQL database platforms, identity and access management principles, application security, encryption technologies, DNS, web applications, ADFS, Nessus.</li>
<li>Formulates and designs specifications; developing, modifying, and/or maintaining complex systems and subsystems; defining work problems, designing technology solutions, and developing procedures to resolve problems; analyzing methods of approach; reviewing task proposal requirements, gathering information, analyzing data, preparing synopsis, comparing alternatives, preparing specifications, resolving processing problems, and coordinating work with others; and preparing recommendations for improvement for management consideration.</li>
</ol>
Skills and Knowledge Requirements
<ul>
<li>Experience with implementing IPS/IDS capabilities.</li>
<li>Experience with Assured Compliance Assessment Solution (ACAS/NESSUS), DISA Security Content Automation Protocol (SCAP), Host Based Security System (HBSS); Continuous Monitoring and Risk Scoring (CMRS) cybersecurity applications and tools.</li>
<li>Experience with implementing capabilities within VMware virtual environments.</li>
<li>Experience with implementing McAfee products.</li>
<li>Working knowledge of network infrastructure technologies/practices to include Cisco IOS, VLAN segmentation, Network Access Control (802.1x), and wireless detection tools.</li>
<li>Cross Domain data access and transfer technologies and related DISN Connection Approval Process.</li>
<li>Working knowledge of protection of data in transit and data at rest to include Suite B and IPsec encryption.</li>
<li>Experience with Microsoft Visio diagram development for systems data flow representation.</li>
<li>Experience with the DoD COCOM cybersecurity environment, organization, policies, and programs (ie SOCOM, SOUTHCOM, CENTCOM).</li>
</ul>
Education and Certification Requirements
Bachelor’s Degree in Computer Science, or a related technical discipline, or the equivalent combination of education, technical certifications or training, or work experience.
<ul>
<li>5+ years of experience as a cyber-security engineer</li>
<li>CompTIA Security+ or equivalent certification required for DoD 8570 compliance</li>
<li>At least one relevant and current security related professional certification</li>
</ul>
Desired Education and Skills:
<ul>
<li>ITIL v3 Foundation certification desired</li>
<li>Certified Information Systems Security Professional (CISSP)</li>
<li>Virtualization experience, specifically with VMware vSphere and VMware Horizon View, a strong plus</li>
<li>Microsoft Certified Professional a plus</li>
<li>CCNA Certification</li>
</ul>
We use Greenhouse Software as our applicant tracking system and Free Busy for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application.
Why GuidePoint?GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 750 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 3,000 Enterprise-Level customers.
Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.  
This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.Some added perks….
<ul>
<li>Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)</li>
<li>100% employer-paid medical premiums (employee only $0 deductible and HSA plans) along with 75% employer-paid family contributions</li>
<li>100% employer-paid dental premiums (employee only) along with 75% employer-paid family contributions</li>
<li>12 corporate holidays and a Flexible Time Off (FTO) program</li>
<li>Healthy mobile phone and home internet allowance</li>
<li>Eligibility for retirement plan after 2 months at open enrollment</li>
<li>Pet Benefit Option</li>
</ul>

Zero Trust Security Architect (TS/SCI - Ft Bragg)

The leading job board for Cyber Security Jobs. Start your career in Information Security Industry. Jobs are updated daily.

Job Position and Company	Location	Tags	Posted
CSIS Investigations Lead Analyst - Cyber at City	Full Time Forensic Analyst
Senior Recruiter at Atlassian	Remote Full Time Manager
Cyber Security Fusion Center - Exercise Planner (VP/Hybrid) at City	Remote Full Time CISO Chief Incident Response
Africa Talent by Deloitte – IRL Application Security, Cyber cloud Assistant Manager at Deloitte	Remote Full Time Manager Application Security
Africa Talent by Deloitte – IRL Application Security, Infrastructure Security Senior Consultant at Deloitte	Remote Full Time Consultant Incident Response Application Security
Senior Security Engineer, WWCS Application Security at Amazon.com	Full Time Javascript Application Security
Security Specialist at Riverside Research	Full Time DOD
Splunk Engineer at XOR Security	Full Time Administrator
GRC Consultant at VerSprite	Remote Full Time CISO Consultant Consulting
Sr Software Engineer - Zero Trust Clients at Cloudflare, Inc.	Remote Full Time Windows
Security Engineers (Mid & Senior) at Xero	Remote Full Time
Senior Cybersecurity Engineer Incident Responder at Riot Games, Inc.	Remote Full Time Forensic Manager Incident Response
Baseline Network Security Engineer at XOR Security	Full Time Incident Response
Senior Security DevSecOps Engineer - REMOTE at VerSprite	Remote Full Time CISO Consulting Application Security
Senior Program Manager, Red Team at Amazon.com	Full Time Manager Red Team
Offensive Security Consultant at VerSprite	Remote Full Time CISO Ethical Hacker Consultant
Senior Software Engineer, Security at Flexport	Full Time
Information Security Program Manager at Bandwidth	Full Time Manager
Detection Engineer at Tanium Inc.	Remote Full Time Incident Response DOD
Zero Trust Security Architect (TS/SCI - Ft Bragg) at GuidePoint Security	Remote Full Time Comptia DOD Application Security

Cyber Security Jobs

958 Cyber Security Jobs found. Page 5 of 48

Subscribe to the weekly
Cyber Security Jobs Newsletter