Coalfire

About CoalfireCoalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Denver, Colorado with offices across the U.S. and U.K., and we support clients around the world.  But that’s not who we are – that’s just what we do. We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.   And we’re growing fast. We are looking for an Associate to join Coalfire's Cyber Risk Advisory team.Job SummaryAs an Associate on our Cyber Risk Advisory team, you will support client engagements by conducting research, reviewing documents, participating in client interviews, and report preparation.  You’ll work collaboratively with a team to address client’s most pressing cybersecurity needs.  
<h3>What You'll Do</h3>

<h3>What You'll Bring</h3>
<ul>
<li>Bachelor's degree (four-year college or university) or equivalent combination of education and work experience. </li><li>Zero to two years of experience in IT and/or cybersecurity</li><li>An interest and a desire to advance your career in cybersecurity </li><li>Strong analytical and communications (written and oral) skills</li><li>Team player who thrives on collaboration </li></ul>
<h3>Bonus Points</h3>
<ul>
<li>Consulting/professional services experience</li><li>An understanding of cybersecurity frameworks such as the NIST Cybersecurity Framework and Risk Management Framework, the Center for Internet Security Top Critical Security Controls, FAIR Risk Analysis methodology</li><li>An understanding of Cloud services (IaaS, PaaS, SaaS) and underlying technologies</li></ul>Why You'll Want to Join UsAt Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.At Coalfire, equal opportunity and pay equity is integral to the way we do business. A reasonable estimate of the compensation range for this role is $53,000 to $92,00 based on national <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> averages. The actual salary offer to the successful candidate will be based on job-related education, geographic location, training, licensure and certifications and other factors. You may also be eligible to participate in annual incentive, commission, and/or recognition programs. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.#LI-JM3<a href="https://infosec-jobs.com/remote-jobs/" rel="noopener noreferrer nofollow ugc" target="_blank">#LI-Remote</a>

Associate, Cyber Risk Advisory | Remote US

Farfetch

THE ROLEWe are looking for a passionate expert to join our security team who loves to reveal potential weaknesses and then think of creative solutions to eliminate any issues. Your expertise is key in building the foundation of security projects that protect the security and privacy of our clients. People will rely on you to provide engineering and product teams with the security expertise necessary to make product decisions.
<h3>WHAT YOU’LL DO</h3>
<ul>
<li>Further, develop our <a href="https://infosec-jobs.com/insights/incident-response-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">Incident Response</a> program</li><li>Review logs/events from IDS, <a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a>, WAF, and NG Firewall / Web Proxy</li><li>Identify and find Indicators of Compromise within the corporate network and infrastructure</li><li>Be part of the on-call team responsible for detecting and responding to Cyber Security incidents</li><li>Analyse effectiveness of security controls and propose alternative cost effective solutions;</li><li>Assess the maturity level and map current detection &amp; prevention capabilities against know frameworks such as MITRE ATT&amp;CK</li><li>Help maintain our data and systems secure and protected throughout all the Cyber Kill Chain stages.</li></ul>
<h3>WHO YOU ARE</h3>
<ul>
<li>You are a graduate of a program in Computer Science, Information Security, or a related field</li><li>You have more than 3 years in a similar position or in a Security Operations Center (SOC) environment</li><li>You are comfortable being hands-on with experience in SIEM, Web Application Firewall, IDS/IPS</li><li>You are experienced in analytical and problem-solving within a complex IT environment</li><li>You are experienced in Malware and Forensics analysis</li><li>You are experienced in working under compliance or regulatory environments (SOX, PCI, etc)</li><li>You are a team player with experience working with remote, global teams</li><li>You are a holder of certifications on Information Security (OSCP, CEH, GCIH or similar).</li></ul>We are looking for a passionate expert to join our security team who loves to reveal potential weaknesses and then think of creative solutions to eliminate any issues. Your expertise is key in building the foundation of security projects that protect the security and privacy of our clients.

Senior Security Incident Response Analyst

Deloitte

Job Requisition ID: 35801 
<ul>
<li>Work in a highly innovative and transformative business</li>
<li>Mentoring, growth and training – receive support and coaching to progress your career</li>
<li>Preventive and supportive mental health initiatives</li>
</ul>

What will your typical day look like?  
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.

Key Role Responsibilities:
<ul>
<li>You will be leading a small team of Red Team Operators in the planning, execution, and reporting of Red Team engagements around the globe. This includes, but is not limited to:
<ul>
<li>Performing intelligence gathering against target networks, people, processes, and technologies.</li>
<li>Finding creative ways to obtain a foothold in a target network.</li>
<li>Delivering malware and establishing command and control (C2).</li>
<li>Moving stealthily within target networks, satisfying the campaign objectives, while staying undetected by the blue teams.</li>
<li>Establishing persistence and strategically tuning long-haul beacons to maintain long-term footholds where necessary.</li>
<li>Ensuring adherence to the Rules of Engagement during every step of the Red Team engagements.</li>
<li>Maintaining operational oversite of all actions conducted during Red Team engagements. Ensuring that every action is planned, executed, and logged properly at all times by every operator.</li>
<li>Maintaining in-depth documentation and auditing of actions taken during Red Team operations, at all times, for the purposes of deconfliction and non-repudiation.</li>
</ul>
</li>
<li>Identifying and acting on opportunities to train and mentor other members of the Red Team.</li>
<li>Assisting in the management of the Red Team Attack Network and the implementation of new tools and techniques to improve the team’s tradecraft.</li>
<li>Sharing your research within the Deloitte Global Red Team community, and with the broader security organization, by writing blogs, speaking at conferences, or publishing code.</li>
<li>Developing operational processes, field manuals, and attack methodologies to continuously improve the quality of engagements and knowledge sharing amongst the team.</li>
<li>Ensure deliverables meet the quality and timeliness expected of a world-class Red Team.</li>
<li>Working closely with a wide variety of Deloitte’s industry leading information security teams to identify and reduce risk around the globe.</li>
</ul>

About the team
Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.

Enough about us, let’s talk about you. 
You are someone with: 
Required:
<ul>
<li>3+ years of Red Team experience.</li>
<li>A passion for offensive security and Red Team operations, and a drive to stay up to date with modern attack techniques, public breaches, and new vulnerabilities.</li>
<li>A deep understanding of threat actor tactics, techniques, and procedures (TTPs).</li>
<li>Experience with, and a deep understanding of, digital forensics and incident response capabilities and procedures.</li>
<li>Experience with leading Red Team Operations against companies and their associated people, processes, and technologies.</li>
<li>The ability to create, update, and maintain documentation ranging from Red Team TTPs to governing documentation as needed.</li>
<li>Experience with enumerating and attacking Windows Active Directory and Azure EntraID environments.</li>
<li>Experience leading the designing, building, maintaining, and utilization of covert C2 infrastructure in various <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> platforms and environments. Automation experience is a plus!</li>
<li>Experience with modern malware development and obfuscation techniques.</li>
<li>A deep understanding of enterprise security architecture and the associated security controls.</li>
<li>A deep understanding of monitoring, detections, and indicators of compromise/attack, and the implications they have on covert Red Team Operations.</li>
<li>Hands on experience working with industry leading Red Team tools like Cobalt Strike, Nighthawk C2, Bloodhound, Evilginx2, etc...</li>
</ul>

Preferred:
<ul>
<li>Relevant certifications such as OSCP, OSCE, OSEP, OSED, OSEE, CRTP, CRTE, etc.</li>
<li>Public examples of blogs, conference talks, and open-source tooling demonstrating your expertise.</li>
<li>Experience operating against security products such as Microsoft Defender for Endpoint/Identity and CrowdStrike Falcon.</li>
<li>Experience with Social Engineering (physical, phishing).</li>
<li>Experience with Outflank OST.</li>
<li>Experience automating infrastructure deployment with Ansible and Terraform.</li>
<li>Experience leading red teaming efforts.</li>
</ul>

Why Deloitte? 
At Deloitte, we focus our energy on interesting and impactful work. We’re always learning, innovating and setting the standard; making a positive difference to our clients and our society. We put coaching at the heart of what we do, helping our people grow their careers in any direction – whether it be up, moving into something new, or even moving across the world.  
We embrace diversity, equity and inclusion. We have a diverse collection of people from different backgrounds, with different experiences, gender identities, abilities and thinking styles. What binds us together is a shared commitment to value everyone’s perspective and to cultivate inclusion; so that our work environment is a safe space we can all belong. 
 We prioritise flexibility and choice. At Deloitte, you get trust on Day 1. We know our people get their best work done when they’re in control of where and how they work, designing their work week around their client, team and personal commitments.
We help you live and work well. To support your personal and professional life, we offer a range of <a href="https://www2.deloitte.com/au/en/pages/careers/articles/benefits-discounts.html" rel="noopener noreferrer nofollow ugc" target="_blank">perks and benefits</a>, including retail discounts, wellbeing leave, paid volunteering days, twelve flexible working options, market-leading parental leave and return to work support package.

 Next Steps 
Sound like the sort of role for you? Apply now. 

By applying for this job, you’ll be assessed against the Deloitte Talent Standards. We’ve designed these standards so that you can grow in your career, and we can provide our clients with a consistent and exceptional Deloitte employee experience globally. The preferred candidate will be subject to background screening by Deloitte or by their external third-party provider.

Red Team Senior Operator

Xtremax

Security Engineer – Governance We are looking for an experienced and knowledgeable IT Security Governance to join our Security Engineer team. You will be responsible for the management and advances of our security policies, standards, and procedures.  Responsibilities:  <ul> <li>Ensure the strategy and implementation of information security in accordance with the needs &amp; applicable regulations  </li> <li>Develop an information security framework and architecture in accordance with the company's needs  </li> <li>Develop and maintain policies, standards, and procedures that support the information security framework in accordance with best practices and applicable regulations.  </li> <li>Actively identify, analyze, measure, provide control recommendations, and monitor follow-up on risk control &amp; information security.  </li> <li>Carry out regular evaluations of the implementation of IT security management policies, standards, and procedures  </li> </ul>RequirementsRequirements:  <ul> <li>Bachelor’s Degree in Software Engineering / Computer Science / Information Technology / equivalent or relevant work experience.  </li> <li>Minimum 2 years experiences in IT industry  </li> <li>Familiar and able to implement and lead various best practices &amp; regulations for IT Security &amp; Cyber Security such as ISO 27000, CSA Star, CIS, NIST, GDPR, etc.  </li> <li>Familiar with Security compliance or assessment tools  </li> <li>Having experience implement ISO 27017 and 27018 is a plus point  </li> <li>Familiar with <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> environment is a plus point.  </li> </ul>

IT Security Engineer - GRC

City

Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients’ best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations &amp; Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do from keeping the bank safe, managing global resources, and providing the technical tools our workers need to be successful to designing our digital architecture and ensuring our platforms provide a first-class customer experience. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services.Our commitment to diversity includes a workforce that represents the clients we serve from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.About Our Team:The Chief Information Security Office (CISO) is home to deeply talented colleagues that work to ensure the safety of Citi's clients', our revenue, our employees and our proprietary data. We manage information security as one end-to end program – one with a clear mandate and accountability. Our mission is a program that is fully anchored to modern control and architectural frameworks, is fully aligned with the enterprise architecture of the firm and is deeply integrated into the sectors and functions.Citi’s Cyber Intelligence Center (CIC) plays a key role in keeping Citi safe from cyberthreats. CIC collects, analyzes, and disseminates cyber intelligence to provide Citi leaders with decision advantage at the tactical, operational, and strategic levels. CIC ensures Citi’s Chief Information Security Office (CISO) is threat-focused and data-driven to best protect Citi from unique cyberthreats, better positioning Citi to accomplish its core mission of serving as a trusted partner to our clients globally. CIC uses a follow-the-sun model to provide timely intelligence around-the-clock.Citi’s Cyber Intelligence Center is seeking a senior leader to manage the CIC Internal Engagement (IE) team. CIC IE manages cross-team functions in CIC, and is a hybrid team with members in many locations and time zones. This role must coordinate and collaborate with cross-functional cyber intelligence and fusion center teams and engage with other business elements, partners, or clients, as necessary. The ideal candidate is an experienced leader with an in-depth knowledge of intelligence and cyberthreat principles and strong critical thinking and interpersonal skills.Primary Duties:<ul><li>Lead a team of cybersecurity and intelligence professionals</li><li>Liaise with other CIC Leadership team members to facilitate cross-team functions and communication and identify / meet needs of other teams</li><li>Manage administrative / business office functions such as budget, staffing, travel, and recordkeeping</li><li>Manage CIC coordination with internal and external auditors and assess risk</li><li>Lead / coordinate cybersecurity and intelligence training</li><li>Engage with intelligence consumers in CISO and Citi’s Businesses, Functions, and Technologies</li><li>Oversee a global network of information security officers who function as CIC intelligence collectors and local SMEs</li><li>Produce clearly-written, grammatically-correct communications of behalf of the CIC Director and CIC Leadership team</li><li>Demonstrate ability to consistently refine critical thinking skills; openness to constructive criticism</li></ul>Preferred Qualifications:<ul><li>Knowledge of banking, financial systems, and regulators</li><li>Analytic experience in covering cyberthreats, geopolitical, or financial crimes</li><li>Experience communicating in Smart Brevity and/or Bottom Line Up Front (BLUF) format</li><li>Good technical comprehension (banking, cyber, etc) with ability to appropriately customize technical details to intended audiences</li><li>Demonstrated use of analytic tools or cyber intelligence principles, such as Structured Analytic Techniques, OSINT tools, indicator pivoting, or cyberthreat frameworks, such as Mitre ATT&amp;CK or Cyber Kill Chain</li></ul>Job Skills/Qualifications:<ul><li>Bachelor’s degree required; a plus if education includes competency in an analytic or technical discipline</li><li>10+ years’ experience working in an intelligence analysis job function; cyberthreat, geopolitical, or financial crimes subject matter expertise preferred</li><li>Advanced intelligence analysis experience and skills</li><li>Excellent written and verbal communication and presentation skills</li><li>Ability to effectively communicate with all levels of senior management</li><li>Familiarity with open-source intelligence research and methodologies</li><li>Previous Intelligence background a plus</li></ul>Education:Bachelor’s degree/University degree or equivalent experienceMaster’s degree preferredThis job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.The Cyber Security Intelligence Group Manager is a senior management level position responsible for accomplishing results through the management of a team or department to drive efforts to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy.Responsibilities: <ul><li>Leading intelligence analysis of complex security and fraud matters, using advanced open-source intelligence resources and approved tradecraft</li><li>Applying and executing the intelligence cycle</li><li>Strategic and operational qualitative analysis of complex problem sets</li><li>Project management coordination and balancing multiple competing priorities</li><li>Building productive engagement models with internal and external stakeholders</li><li>Identifying intelligence gaps and development of innovative intelligence-driven solutions</li><li>Developing and delivering high quality written products and oral intelligence briefings to senior decision makers</li><li>Lead and manage a multidisciplinary team of analysts. This requires hiring, training, and mentoring analysts, including ongoing professional development.</li><li>Lead sub-programs. This requires management of people, management of vendors or outside resources, case/project assignments and oversight, approval of final products, and program reporting</li><li>Manage intelligence collection capabilities, including identification and vetting of new and innovative intelligence sources, methodologies, and collection tradecraft - Utilizing multiple intelligence concepts for collection and validation of both raw and processed information (structured and unstructured data).</li><li>Partner with Citi stakeholders, business partners, and external colleagues on open-source methodologies and tools for finding disparate data.</li><li>Deliver detailed and professional briefings on advanced analytics capabilities, resources, and tradecraft.</li><li>Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards.</li></ul>Qualifications:<ul><li>Minimum 10+ years of experience in program management, security and open-source intelligence analysis, and stakeholder engagements</li><li>Proven record of accomplishment in helping business partners understand control needs and driving the impact of the analytical assessment</li><li>Experience is utilizing visualization software applications - Specifically link analysis (e.g., Palantir, Semantica Pro, Link Explorer, I-2 or ESRI)</li><li>Demonstrated ability to analyze, evaluate and interpret complex data with a strong understanding and application of analytical techniques.</li><li>Self-starter and resourceful individual, with experience of operating in fast paced and dynamic operational settings</li><li>Ability to work independently and with minimal oversight, while producing high quality analysis</li></ul>Education:<ul><li>Bachelor's/University degree, Master's degree preferred</li></ul>This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.------------------------------------------------------Job Family Group: Technology------------------------------------------------------Job Family:Information Security------------------------------------------------------Time Type:Full time------------------------------------------------------Primary Location:New York New York United States------------------------------------------------------Primary Location Full Time Salary Range:$176,720.00 - $265,080.00In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental &amp; vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.------------------------------------------------------Anticipated Posting Close Date:May 16, 2024------------------------------------------------------Citi is an equal opportunity and affirmative action employer.Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View the "<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law</a>" poster. View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law Supplement</a>.View the <a href="http://citi.com/citi/diversity/assets/pdf/eeo_aa_policy.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a>.View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Pay Transparency Posting</a>

Cyber Security Intelligence Group Manager, SVP

Rackspace

Overview:Rackspace Managed Public Cloud is looking for a product manager to own and rapidly evolve our services and product portfolio for our Managed Google Cloud solution in line with the overall direction and strategy of the organizationThis role will be critical to building new, flexible offers focused on Google Cloud and ensuring such offers are able to deliver managed cloud solutions to Rackspace customersWith your peers, including other product managers and architects, you will act as a business and subject matter leader, managing the roadmap, feature set, and overall business results owner for your product areaThis includes working with product engineering, delivery, and development, assisting the marketing team with the collateral generation, launch activities, and marketing assets, engaging with prospects and customers to gather insights, understanding customer issues, supporting customer success and engaging with sales in enablement and pursuit as well as any other activities needed to execute on product business strategy<h3>You Will: </h3><ul><ul><li>Build and manage Google Cloud offers and customer journeys based on overall Managed Public Cloud solution strategy, customer feedback, industry trends, and other research, coordinating with Product Management peers as required</li><li>Own the execution of the roadmap, coordinate with internal engineering and delivery teams as well as selected partners</li><li>Define product requirements and use cases</li><li>Build relationships and coordinate with Google and Rackspace’s partner leaders to define managed service solutions based on Google Cloud technology</li><li>Develop a build/buy/partner framework for evaluating how to fill product gaps</li><li>Work with Engineering to manage and prioritize the product backlog</li><li>Collaborate with delivery to build capacity and skill set planning models</li><li>Perform market research to inform the roadmap and understand the competition</li><li>Coordinate with marketing on GTM planning and collateral development</li><li>Support sales on customer calls to pursue deals and gather customer feedback</li><li>Enable sales with training appropriate to positioning and supporting the product</li><li>Work with marketing to develop appropriate collateral, perform PR, and communicate bi-directionally with analysts</li><li>Develop business cases for new offers and releases</li><li>Ability to work within a remote team</li></ul></ul><h3>You Have:</h3><ul><ul><li>7-10+ years of product management, or equivalent, experience in the public cloud industry with a proven track record of product ownership and success growing products and services</li><li>Significant exposure and knowledge of the public cloud market with a focus on cloud-native solutions</li><li>Ability to define and launch innovative services products</li><li>Experience working with Agile engineering teams</li><li>Experience working with partners in the development and delivery of service products</li><li>Demonstrated ability to communicate with stakeholders clearly, experience communicating with industry analysts</li><li>Ability to own execution without continuous oversight</li><li>Demonstrated flexibility to wear multiple hats as required</li></ul></ul><h3>Education:</h3><ul><ul><li>Bachelor’s degree required</li><li> BS in Technology or Business preferred</li><li>MBA preferred</li></ul></ul><h3>Physical Demands</h3><ul><ul><li>General office environment: no special physical demands required.</li><li>May require long periods of sitting and viewing a computer monitor.</li></ul></ul><h3>Travel</h3><ul><ul><li>As per business needs and requirements	</li></ul></ul><h3>Sponsorship</h3><ul><ul><li>Candidates must be legally allowed to work with any employer</li></ul></ul>The following information is required by the Colorado Equal Pay Transparency Act and the New York City Pay Transparency Act. This applies only to individuals working in the state of Colorado or in New York City. The anticipated starting pay range of Colorado and New York City applicants for this role is $ 143,700 - $ 191,600 for CO and $ 153,000 - $ 204,000 for NYC.  Based on eligibility, compensation for the role may include variable compensation in the form of bonus, commissions, or other discretionary payments. These discretionary payments are based on company and/or individual performance, and may change at any time. Actual compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, licenses and certifications, and specific work location. Information on <a href="https://rackspace.jobs/benefits/" rel="noopener noreferrer nofollow ugc" target="_blank">benefits</a> offered is here.#LI-VM1#LI-Remote#LI-USA#rackspaceAbout Rackspace TechnologyWe are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.  More on Rackspace TechnologyThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

United States

Texas

Google Cloud Technical Product Manager

Wiz, Inc.

Come join the company that is reinventing <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> security and empowering businesses to thrive in the cloud. As the <a href="https://www.wiz.io/blog/100m-arr-in-18-months-wiz-becomes-the-fastest-growing-software-company-ever" rel="noopener noreferrer nofollow ugc" target="_blank">fastest-growing startup ever,</a> Wiz is on a mission to help organizations secure cloud environments that will accelerate their businesses. Trusted by security teams all over the world, we have a proven <a href="https://www.g2.com/products/wiz-wiz/reviews" rel="noopener noreferrer nofollow ugc" target="_blank">track record of success</a> and a culture that values world-class talent.  
Our Wizards from over 13 countries work together to protect the infrastructure of our hundreds of customers, including over 40% of the Fortune 100, who trust us to scan and secure over 230 billion files daily. We’re the leading player in a massive and growing market, but it’s still early enough for you to make a significant impact. At Wiz, you’ll have the freedom to think creatively, dream big, and use your full range of skills to contribute to our record growth. Come join our team and help us create secure cloud environments that allow the best companies to move faster. <h4>SUMMARY</h4>
We're looking for an experienced Network Security Analyst to join the Wiz Threat Research team to investigate network security threats affecting our customers’ cloud environments, in support of product development of Wiz features such as the <a href="https://www.wiz.io/blog/wiz-enhances-dynamic-scanner-to-analyze-and-validate-external-exposure" rel="noopener noreferrer nofollow ugc" target="_blank">Dynamic Scanner</a> and <a href="https://www.wiz.io/blog/detect-critical-application-misconfiguration-risks" rel="noopener noreferrer nofollow ugc" target="_blank">Host Configuration scanning</a>.
WHAT YOU'LL DO
<ul>
<li>Investigate network security risks in customer environments.</li>
<li>Develop network threat models of new cloud services and cloud-deployed applications.</li>
<li>Work closely with product management to support product roadmap decision-making.</li>
<li>Operationalize your knowledge of cloud network security by building security controls and detection rules related to public exposure, potential external attack vectors, lateral movement, and more.</li>
</ul>
<h4>WHAT YOU'LL BRING</h4>
<ul>
<li>5+ years experience in the field of cybersecurity analysis</li>
<li>Understanding of core cybersecurity topics related to networking and/or cloud</li>
<li>Well-acquainted with network and API security risks and their potential impact</li>
<li>Proficient in scripting languages (Python, Rego, R, MATLAB, or similar)</li>
<li>Familiar with network and application scanning tools (Burp Suite, nmap, Metasploit, Nuclei, or similar)</li>
<li>Strong writing and presentation skills</li>
<li>Capable of applying analytic techniques to complex problems</li>
<li>An independent self-learner</li>
<li>Good communication and teamwork skills</li>
</ul>
<h4>BONUS SKILLS</h4>
<ul>
<li>Familiar with cloud service architectures</li>
<li>Hands-on experience in penetration testing and/or exploitation</li>
<li>Data analysis experience (e.g., using SQL)</li>
</ul>
#LI-hybrid
#LI-LE1If your experience is close but doesn’t fulfill all requirements, please apply. Wiz is on a mission to build a special company. To achieve our goal, we are focused on hiring Wizards with different backgrounds, perspectives, and experiences.
Wiz is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law.
By submitting your application, you acknowledge that Wiz will process your personal data in accordance with <a href="https://www.wiz.io/legal/privacy" rel="noopener noreferrer nofollow ugc" target="_blank">Wiz's Privacy Policy.</a>

Network Security Analyst

Du willst im Bereich Corporate Functions – Risk &amp; Reputation ein bedarfsgerechtes Risiko-und Compliance Management umsetzen? Unser Team setzt sich mit vielfältigen und innovativen Maßnahmen dafür ein, die fachliche Qualität im Einklang mit den regulatorischen Anforderungen zu sichern. Sichere unseren gemeinsamen Erfolg und mach mit uns den Unterschied: als Information Security Auditor Schwerpunkt IT-Prüfung (m/w/d).
Standorte: Düsseldorf und Berlin.
<h3>Dein Impact:</h3>
Als Information Security Auditor (m/w/d) im Bereich des CISO überprüfst Du die Wirksamkeit unseres Security Management Systems durch Audits von Businessprozessen, IT-Services und -Systemen, Dienstleistern und Bürogebäuden.
<ul>
<li>Auditprogramm: Du planst das Auditprogramm nach den Vorgaben von ISO27001, TISAX sowie Deloitte Policies und stimmst dieses mit den Normverantwortlichen innerhalb der 2nd Line of Defense ab.</li>
<li>Audits: Du leitest Audits von der Planung, Abstimmung, Durchführung, Dokumentation bis zum Verfolgen der Maßnahmen.</li>
<li>Cloud- und KI-Systeme: Dein fachlicher Schwerpunkt sind IT-Systeme aus den Bereichen Cloud und KI. Für diese definierst Du markt- und compliance-gerechte Auditkriterien.</li>
<li>International: Du begleitest und vertrittst in internationalen Deloitte Arbeitsgruppen die Abstimmung von Kriterien an IT-Systeme hinsichtlich Information Security Anforderungen.</li>
<li>Beratung: Du trägst zur Verbesserung und Angemessenheit des Information Security Management Systems (ISMS) nach ISO 27001 / TISAX und den Erhalt unserer Zertifikate bei.</li>
</ul>
<h3>Dein Skillset:</h3>
<ul>
<li>Studium, Ausbildung oder Berufserfahrung in den Bereichen IT-Prüfung, ISMS nach ISO27001, Informationssicherheit und Cyber Security</li>
<li>Idealerweise Personenzertifizierung in Bezug auf ISMS, ISO 27001, TISAX oder SOC 2 oder vergleichbare Standards</li>
<li>Starke analytische und konzeptionelle Fähigkeiten sowie Durchsetzungsvermögen</li>
<li>Kommunikationsstärke, Deutsch und Englisch sehr gut in Wort und Schrift sowie Reisebereitschaft (ca. 5% der Arbeitszeit)</li>
</ul>
<h3>Deine Chance:</h3>
<ul>
<li>Best-in-class Weiterbildung an der Deloitte University sowie im Rahmen individueller Qualifikationsangebote und Trainings</li>
<li>Umfassende Entwicklungschancen durch strukturierte Karriereplanung, Inclusive Leadership, Entsendungsprogramme, projektbasierte Job-Rotation sowie Förderung sozialen Engagements und Corporate Volunteering</li>
<li>Vereinbarkeit von Beruf &amp; Familie dank Mobile Working &amp; Teilzeit, Sabbaticals und Familienservice, z. B. zur Unterstützung für pflegende Angehörige, Elternzeit-Beratung und vielem mehr</li>
<li>Gesundheit &amp; Fitness im Fokus durch regelmäßige Gesundheitstage, Kooperationen mit Fitness-Anbietern und die Unterstützung von Sport- und Teamevents</li>
<li>Attraktive Arbeitgeberleistungen inklusive Bike- und Pkw-Leasing, Firmen-Smartphone zur privaten Nutzung sowie flexiblen Arbeitsmodellen wie z. B. Vertrauensarbeitszeit und EU Remote Working</li>
<li>Vielfältige Gestaltungsräume und aktive Förderung einer inklusiven Unternehmenskultur - u. a. durch unsere globale Diversity &amp; Inclusion-Initiative ALL IN und lokale Mitarbeiter:innen-Netzwerke</li>
</ul>
<h3>Bist du bereit? Mach mit uns den Unterschied!</h3>
Unser Recruiting-Team freut sich auf deine Bewerbungsunterlagen (CV sowie Abitur-, Hochschul- und Arbeitszeugnisse) über unser Online-Formular. Ein Anschreiben und ein Bewerbungsfoto sind bei uns nicht erforderlich.

Gleiche Chancen für alle: Wir freuen uns über Bewerbungen von Menschen, die so vielfältig sind wie wir – unabhängig von Alter, Behinderung, ethnischer Herkunft und Nationalität, Geschlecht, Religion, sexueller Orientierung oder sozialer Herkunft. Noch Fragen? Alle Infos zu unserem Bewerbungsprozess findest du in unseren <a href="https://job.deloitte.com/bewerbung/faq" rel="noopener noreferrer nofollow ugc" target="_blank">Bewerbungs-FAQs</a>.

Information Security Auditor - Schwerpunkt IT-Prüfung (m/w/d)

Minitab

Act as a technical subject matter expert for the department regarding information and cyber security technologies and landscape. Perform software security tasks of a highly complex nature which require extensive research and analysis.  Assume project and technical leadership roles across the department. 
Responsibilities 
<ul>
<li>Perform a digital footprint analysis, classifying assets and their sensitivity levels.  Define, harmonize, centralize, and manage the security logging and monitoring practice across customer facing products and development infrastructure.  Monitor and manage suspicious activity.  Prioritize and fine-tune settings and recommend hardening techniques to move issues towards resolution.</li>
<li>Evaluate, test and implement new security technologies and/or tools that enhance detection and response capabilities. Install and configure firewalls, <a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a>S, and endpoint security software.  Stay up to date on the latest emerging security technologies and how they might impact or be leveraged for the security of Software Development products and systems. </li>
<li>Assume a leadership role and drive consensus in educating teams regarding security strategy, landscape, protocol, and technologies.  Collaborate with team members to identify key security gaps and areas for improvement.  Conduct training sessions and workshops for team members and employees to raise awareness about security threats.  Assist with the high-level architectural design of software products as it relates to software security.</li>
<li>Anticipate, audit and act as a critical business continuity team member. Assist in real-time security incident handling to ensure efficient mitigation and remediation efforts, minimizing risk and impact to the company.  Work closely with teams to ensure that learnings are used to make development’s internal systems and products more secure and resilient to future attacks.</li>
</ul>
Qualifications
<ul>
<li>Bachelor's degree in Cybersecurity, Computer Science, IT, or a closely related discipline or equivalent experience.</li>
<li>Deep knowledge of <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> security principles and tools including SIEMS, intrusion detection and prevention systems, log analytics, Microsoft Defender, Azure Sentinel and Azure DevOps.</li>
<li>Experience managing application or <a href="https://infosec-jobs.com/insights/devsecops-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">DevSecOps</a> “Blue Team” security programs.</li>
<li>Proven experience in application security, including threat modeling, secure coding, and vulnerability management.</li>
<li>Strong understanding of web application architectures, technologies, and protocols.</li>
<li>Familiarity with industry standards and frameworks such as OWASP, ISO 27001, and NIST.</li>
</ul>
The following is also desirable:
<ul>
<li>Information/Cyber Security certification such as CISSP or CompTIA+.</li>
<li>Experience with source control systems such as Team Foundation Server or Git.</li>
<li>Ability to discover and patch SQLi, XSS, CSRF, SSRF, authentication and authorization flaws, and other web-based security vulnerabilities (OWASP Top 10 and beyond).</li>
<li>Experience with standard web application security tools such as Arachni, Brakeman, and BurpSuite.</li>
<li>Familiarity with security best practices for Kubernetes based cloud applications.</li>
<li>Experience using an agile development process.</li>
</ul>
Minitab is an equal opportunity employer

Senior Security Engineer

CloudLinux

We are seeking a compliance Analyst to be responsible for managing the overall corporate risk profile, assisting in policy development and risk register updates, supporting compliance audits and monitoring, and maintaining documentation of compliance activities. This role plays a key part in ensuring the company's adherence to regulatory requirements. It will reporting to Compliance Officer.Join us and become part of a company that goes beyond just business. At CloudLinux, we believe in making a meaningful impact in the Linux and hosting industry. You'll be joining a supportive team that promotes collaboration and shared success. Learn more about us: <a href="https://&lt;a href=" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a>linux.com/" rel="nofollow noreferrer noopener" target="_blank"&gt;https://cloudlinux.com/ As our Jr. Compliance Analyst you’ll be responsible for: <ul> <li>Completing the risk assessments for assigned third-party relationships and gather due diligence documentation following the internal vendor risk assessment procedure (incl., KYC of our clients, Due Diligence of our critical vendors);</li> <li>Managing the Enterprise-Wide Risk Register with the relevant Risk Owners and monitoring the implementation of the Remediation actions plan;</li> <li>Contributing to internal audits to identify areas of compliance vulnerabilities and risks;</li> <li>Managing the updating of the Business Continuity and Disaster Recovery Plan and regular testing of its main scenarios;</li> <li>Contributing to quarter compliance monitoring with the final report preparation;</li> <li>Manage the AV/AM solution installation on the laptops/PCs.</li> </ul>RequirementsTo be successful in this role you should have:<ul> <li>A University Degree (Bachelor of Laws, Finance or higher).</li> <li>Experience in compliance and legal is advantageous, but not mandatory.</li> <li>Knowledge of key compliance regulations such as GDPR, CCPA, SOC 2, and ISO 27001.</li> <li>Proficiency in developing, revising, and implementing compliance policies and procedures.</li> <li>Ability to conduct risk assessments for the company's operations, products, and services.</li> <li>Skills in performing compliance audits and monitoring to ensure policy adherence.</li> <li>Competence in documenting compliance activities and incidents, and in preparing detailed reports for both internal and external stakeholders.</li> <li>Strong interpersonal skills for effective collaboration across various departments including legal, IT, product development, and customer support.</li> <li>Analytical skills to understand and apply complex regulatory requirements to the company’s practices.</li> <li>Exceptional attention to detail to ensure thorough compliance with all regulations and internal policies.</li> </ul>BenefitsWhat's in it for you?<ul> <li>A focus on professional development; </li> <li>Interesting and challenging projects</li> <li>Flexible working hours</li> <li>Paid one month vacation per year and unlimited sick leave</li> <li>Medical insurance reimbursement</li> <li>Co-working and gym/sports reimbursement</li> <li>The opportunity to receive a reward for the most innovative idea that the company can patent</li> </ul>By applying for this position, you agree with <a href="https://cloudlinux.com/privacy-policy" rel="noopener noreferrer nofollow ugc" target="_blank">Cloudlinux Privacy Policy</a> and give us your consent to maintain and process your personal data with this respect. Please read our Privacy Policy for more information.

Junior Compliance Analyst (remote opportunity, work anywhere)

<a href="https://www.wpp.com/about" rel="noopener noreferrer nofollow ugc" target="_blank">WPP</a> is the creative transformation company. We use the power of creativity to build better futures for our people, planet, clients, and communities.
Working at WPP means being part of a global network of more than 115,000 accomplished people in 110 countries. WPP has headquarters in New York, London and Singapore and a corporate presence in major markets worldwide.
We create transformative ideas and outcomes for our clients through an integrated offer of communications, experience, commerce, and technology.
WPP and our award-winning agencies work with most of the world's biggest companies and organisations – from Ford, Unilever and P&amp;G to Google, HSBC, and the UN. Our clients include 61 of the FTSE 100, 307 of the Fortune Global 500, all 30 of the Dow Jones 30 and 62 of the NASDAQ 100. WPP are the leader in the Bloomberg Gender Equality Index and 20th in the FTSE 100 rankings for Women on Boards.Why we're hiring:
This is an excellent opportunity for an experienced Security Analyst to join our Growing Cyber Security team. The Security Operations Analyst will work within a multi-national team comprised of both internal and external analysts. They will play a key role in ensuring the effectiveness of WPPs cyber security detection, analysis, and response capabilities. They will work with multiple stakeholders including engineers and incident responders to ensure that security events are appropriately triaged and effectively resolved.
The role holder will help to ensure that the security operations function continually improves, remains tuned to specific organisational threats, and operates an effective security toolset. They will be help review, improve, maintain and operate a suite of security incident response procedures and playbooks and contribute to  management reporting artefacts.

What you'll be doing:
<ul>
<li>Monitor and support the Security Incident and Event Monitoring (<a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a>) solution for the detection of Alerts - SOC Level 1 Analysis</li>
<li>24*7*365 Shifts on a rotational basis - Performing the Monitoring, Alert Detection and Alert Response</li>
<li>Adherence to Shift Schedules, shift hand-over and completion of activities designated for the shift within the designated SLAs and KPIs</li>
<li>Familiarity with SIEM Platforms such as splunk, Sentinel, QRadar etc</li>
<li>Perform Alert Triage, Investigation, Alert context enrichment and opening of Incident, as per the documented playbooks.</li>
<li>Ability to learn additional security tools and platforms depending on the situational needs and ability to operate on those tools in optimum levels End-point security tools, MDR tools,  Email gateway, Phishing investigation tools etc.</li>
<li>Ability to engage with customer and internal teams for providing technical insights and analysis.</li>
<li>Contribute to regular management reporting artefacts.</li>
<li>Follow the escalation matrix as per defined process.</li>
</ul>
What you'll need:
Qualification Requirements (Desirable)
<ul>
<li>Computer Science Degree or equivalent</li>
<li>Certifications such as CEH, CCNA and other SOC tools/platforms</li>
</ul>
Skills / Experience Requirements
<ul>
<li>Monitoring and Alert investigation experience on 1 or more SIEM tools and/or SOAR Platforms</li>
<li>Minimum of 1 year of experience in Information Security</li>
<li>In depth operational experience with SIEM technologies.</li>
<li>Demonstrated process orientation and ability to manage out of the ordinary cyber threat detection and investigation steps</li>
<li>Strong communicator and fluent in English and ability to work smoothly with multinational clients</li>
<li>Good understanding on networking concepts</li>
<li>Be alert and reliable for rotating shift work</li>
<li>Good Coordination skills with various other teams for faster resolution/completion</li>
</ul>
Who you are:
You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are accepting: of new ideas, new partnerships, new ways of working.
You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.
You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.

What we'll give you:
Passionate, inspired people – We promote a culture of people that do extraordinary work.
Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.
Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?WPP is an equal opportunity employer and considers applicants for all positions without regard to race, color, religion or belief, sex, age, national origin, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability. We believe in creating a dynamic work environment that values diversity and inclusion and strives to recruit a diverse slate of candidates to help us achieve that goal.
Please read our Privacy Notice (<a href="https://www.wpp.com/people/wpp-privacy-policy-for-recruitment" rel="noopener noreferrer nofollow ugc" target="_blank">https://www.wpp.com/people/wpp-privacy-policy-for-recruitment</a>) for more information on how we process the information you provide.

Cyber Security Operations Analyst (L1)

About Citi:Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients’ best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations &amp; Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do from keeping the bank safe, managing global resources, and providing the technical tools our workers need to be successful to designing our digital architecture and ensuring our platforms provide a first-class customer experience. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services.Our commitment to diversity includes a workforce that represents the clients we serve from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together. About Our Team:The Chief Information Security Office (CISO) is home to deeply talented colleagues that work to ensure the safety of Citi's clients', our revenue, our employees and our proprietary data. We manage information security as one end-to end program – one with a clear mandate and accountability. Our mission is a program that is fully anchored to modern control and architectural frameworks, is fully aligned with the enterprise architecture of the firm and is deeply integrated into the sectors and functions.As a Cyber Fraud Lead Analyst, you will be working within the Cyber Security Operations Center, leading efforts to prevent, monitor and respond to information/data breaches and cyber-attacks. This role performs monitoring, research, assessment, and analysis of Digital Fraud Attacks leveraging various Security Event Monitoring platforms including Web Threat Detection, Real Time Fraud Risk Assessment, Big Data and Digital Application Monitoring tools (ArcSight, Splunk, SAS, Teradata, and enterprise real time fraud detection tools). The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy. While working with a global SOC team with members in Singapore, Texas, New York, and Florida, you will also work with various fraud teams outside of our organization daily.Responsibilities:<ul><li>Follow Pre-defined actions to handle BAU and High severity issues including escalating to other support groups.</li><li>Execute daily ad-hoc tasks or lead small projects as needed.</li><li>Create and maintain operational reports for Key Performance Indicators and weekly and monthly metrics.</li><li>Perform assessment as well as troubleshooting to help isolate technical issues with the integration of fraud monitoring technologies.</li><li>Participate in daily and ad-hoc conference calls to manage quality assurance and documentation related tasks.</li><li>Identify areas for tuning use cases to enhance monitoring value.</li><li>Engage with Fraud Policy, Operations, Strategy and other teams for early detection, prevention, and mitigation of detected fraudulent activities.</li><li>Reduce risk by analyzing the root cause of issues, their impact, and required corrective actions.</li></ul>Qualifications:<ul><li>6+ years of relevant experience</li><li>Strong knowledge of current Cyber Fraud trends including common Account Takeover techniques and banking malware.</li><li>Experience with Big Data Technologies, ETL Tools, Data Warehouse and Business Intelligence technologies</li><li>Consistently demonstrates clear and concise written and verbal communication</li><li>Deep understanding of Intrusion Detection analysis (TCP/IP, packet level analysis) as well as Application Layer Protocols (HTTP)</li><li>Knowledge of cutting-edge threats and technologies affecting Web Applications</li><li>Proven analytical skills</li></ul>Preferred Qualifications:<ul><li>4+ years working in the security &amp; operations fields is a plus</li><li>Experience with any scripting language (Python, Perl, VBScript) is a plus</li><li>Experience with vulnerability assessment as well as penetration testing or forensic analysis fields is a plus</li><li>Certifications from EC-Council, GIAC, (ISC)² are preferred [CISSP, C|EH, GCIA, CCNA] preferred</li><li>Advanced proficiency with Microsoft Office tools and software is a plus</li><li>Proven influencing and relationship management skills is a plus</li><li>Advanced understanding of various operating systems (Windows/UNIX), and web technologies (focusing on Internet security) is a plus</li></ul>Education:Bachelor’s degree/University degree or equivalent experienceMaster’s degree preferred------------------------------------------------------Job Family Group: Technology------------------------------------------------------Job Family:Information Security------------------------------------------------------Time Type:Full time------------------------------------------------------Primary Location:Irving Texas United States------------------------------------------------------Primary Location Full Time Salary Range:$125,760.00 - $188,640.00In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental &amp; vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.------------------------------------------------------Anticipated Posting Close Date:May 15, 2024------------------------------------------------------Citi is an equal opportunity and affirmative action employer.Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View the "<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law</a>" poster. View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law Supplement</a>.View the <a href="http://citi.com/citi/diversity/assets/pdf/eeo_aa_policy.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a>.View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Pay Transparency Posting</a>

Cyber Fraud Lead Analyst

SecOps Engineer L3 (SIEM Enginering)About Rackspace Cyber DefenceRackspace Cyber Defence is our next generation cyber defence and security operations capability that builds on 20+ years of securing customer environments to deliver proactive, risk-based, threat-informed and intelligence driven security services. Our purpose is to enable our customers to defend against the evolving threat landscape across on-premises, private cloud, public cloud and multi-cloud workloads.Our goal is to go beyond traditional security controls to deliver cloud-native, DevOps-centric and fully integrated 24x7x365 cyber defence capabilities that deliver a proactive, threat-informed, risk-based, intelligence-driven approach to detecting and responding to threats.<h3>Our mission is to help our customers:</h3><ul><ul><li>·       Proactively detect and respond to cyber-attacks – 24x7x365.</li><li>·       Defend against new and emerging risks that impact their business.</li><li>·       Reduce their attack surface across private cloud, hybrid cloud, public cloud, and multi-cloud environments.</li><li>·       Reduce their exposure to risks that impact their identity and brand.</li><li>·       Develop operational resilience.</li><li>·       Maintain compliance with legal, regulatory and compliance obligations.</li></ul></ul><h3>What we’re looking for</h3><ul><ul><li>To support our continued success and deliver a Fanatical Experience™ to our customers, Rackspace Cyber Defence is looking for an Indian based Security Engineer, with a specialism in SIEM Engineering to support Rackspace’s strategic customers. </li><li>This role is particularly well-suited to a self-starting, experienced and motivated Sr. Security Engineer, who has a proven record of accomplishment in the design, delivery, management, operation and continuous improvement of cloud-native SIEM platforms (such as Microsoft Sentinel.)</li><li>The primary focus will be on the design, implementation, management, operation and continuous improvement of cloud-native SIEM platforms; used by the Rackspace Cyber Defence Center to deliver managed security services to our customers.</li><li>You will also be required to liaise closely with the customer’s key stakeholders, which may include incident response and disaster recovery teams as well as information security. </li></ul></ul><h3>Key Accountabilities</h3><ul><ul><li>·       Ensure the Customer’s operational and production environment remains healthy and secure at all the times.</li><li>Critical platform incident handling &amp; closure.</li><li>Assist with customer onboarding – loading of feeds, etc. to Sentinel, Splunk, Qradar, Google Chronical.</li><li>Advance threat hunting.</li><li>Develop custom dashboards and reporting templates.</li><li>Develop complex to customer specific use cases.</li><li>Advance platform administration, ideally through a DevOps-centric approach.</li><li>Solution recommendation for issues.</li><li>Co-ordinate with vendor for issue resolution.</li><li>Basic and Intermediate Playbook and workflow enhancement.</li><li>Maintain close working relationships with relevant teams and individual key stakeholders, such as incident response and disaster recovery teams as well as information security etc.</li><li>Develop the custom parsers for the Incident and alert enrichment.</li><li>Problem specific playbook and workflow creation and enhancements</li><li>·       Required to work flexible timings.</li></ul></ul><h3>Skills &amp; Experience</h3><ul><ul><li>·       Should have experience of 8 years in Security Engineering.</li><li>·       Existing experience as a Security Operations Engineer, or equivalent.</li><li>·       Experience of working in large scale, public cloud environments and with using cloud native security monitoring tools such as: - </li><li>o   SIEM platforms such as Microsoft Sentinel (preferred), Google Chronicle, Splunk, QRadar, LogRhythm, Securonix etc.</li><li>o   Microsoft cloud-native security tools such as Microsoft 365 Defender and Defender for Cloud</li><li>o   Endpoint Detection &amp; Response (EDR) tools such as Crowdstrike, Microsoft Defender for Endpoint.</li><li>o   Firewalls and network security tools such as Palo Alto, Fortinet, Juniper, and Cisco.</li><li>o   Web Application Firewall (WAF) tools such as Cloudflare, Akamai and Azure WAF.</li><li>o   Email Security tools such as Proofpoint, Mimecast and Microsoft Defender for Office</li><li>o   Data Loss Prevention (DLP) tools such as Microsoft Purview, McAfee and Symantec</li><li>o   GCP (Google Cloud Platform) Security Command Centre .</li><li>o   AWS (Amazon Web Services) Security Hub including AWS Guard Duty, AWS Macie, AWS Config and AWS CloudTrail .·       Experience of analysing malware and email headers, and has skills in network security, intrusion detection and prevention systems; operating systems; risk identification and analysis; threat identification and analysis and log analysis. </li><li>·       Experience of security controls, such as network access controls; identity, authentication, and access management controls (IAAM); and intrusion detection and prevention controls. </li><li>·       Knowledge of security standards (good practice) such as NIST, ISO27001, CIS (Center for Internet Security), OWASP and Cloud Controls Matrix (CCM) etc.</li><li>·       Knowledge of scripting and coding with languages such as Terraform, python, javascript, golang, bash and/or powershell.</li><li>·       Knowledge of DevOps practices such as CI/CD, Azure DevOps, CircleCI, GitHub Actions, Ansible and/or Jenkins.</li><li>·       Computer science, engineering, or information technology related degree (although not a strict requirement)  </li><li>·       Holds one, or more, of the following certificates (or equivalent): - </li><li>o   Certified Information Security Systems Professional (CISSP) </li><li>o   Microsoft Certified: Azure Security Engineer Associate (AZ500) </li><li>o   Microsoft Certified: Security Operations Analyst Associate (SC-200) </li><li>o   CREST Practitioner Intrusion Analyst (CPIA) </li><li>o   CREST Registered Intrusion Analyst (CRIA) </li><li>o   CREST Certified Network Intrusion Analyst (CCNIA) </li><li>o   Systems Security Certified Practitioner (SSCP) </li><li>o   Certified Cloud Security Professional (CCSP) </li><li>o   GIAC Certified Incident Handler (GCIH) </li><li>o   GIAC Security Operations Certified (GSOC) </li><li>·       A highly self-motivated and proactive individual who wants to learn and grow and has an attention to detail.</li><li>·       A great analyser, trouble-shooter and problem solver who understands security operations, programming languages and security architecture.</li><li>·       Highly organised and detail oriented. Ability to prioritise, multitask and work under pressure.</li><li>·       An individual who shows a willingness to go above and beyond in delighting the customer.</li><li>·       A good communicator who can explain security concepts to both technical and non-technical audiences.</li></ul></ul><h3>About Rackspace Technology</h3><ul><ul><li>We are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data, and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes, and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.</li>More about Rackspace Technology<li>Though we are all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, colour, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.</li></ul></ul>About Rackspace TechnologyWe are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.  More on Rackspace TechnologyThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

India

Gurugram

SIEM Enginer- L3

Job DescriptionOverview of the Role Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients’ best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations &amp; Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do from keeping the bank safe, managing global resources, and providing the technical tools our workers need to be successful to designing our digital architecture and ensuring our platforms provide a first-class customer experience. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services.Our commitment to diversity includes a workforce that represents the clients we serve from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.Citi's Data Security organization is responsible for providing support services to all Citi businesses and technology teams globally. The Info Security Tech Sr Analyst is an intermediate level position responsible for leading efforts to provide data security, encryption, key and certificate management solutions to all businesses within Citi. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy.Job Purpose:The Info Security Tech Sr Analyst will be responsible for the L3 operational support of multiple critical Data Security infrastructures / applications including but not limited to Secure File Transfer, Code Signing, Crypto Assets Inventory and other PKI and Encryption solutions. Duties include the oversight, planning, troubleshooting, and management of all the technology components that form the above solutions. Capacity planning for infrastructure growth, as well as coordinating large scale upgrade / migration efforts is among the responsibilities of the position. The candidate will be working on the product strategy with engineering and product vendors, and overseeing the cyber security risk and compliance landscape of the supported applications. Regular weekend work is expected.Responsibilities:<ul><li>Support internal and external customers in leveraging/adopting Data Security services</li><li>Deploy and perform testing of solutions in Development, UAT and Production environments. At all times ensure that solutions are assessed to meet operational and risk requirements</li><li>Interact with engineering and product vendors to investigate problems and understand product functionality, influence enhancements and roadmap as required to meet organizational goals</li><li>Work with strategic technology and business partners to define strategy and day to day operations of the supported products</li><li>Ensure compliance of all the supported applications with Citi published standards.</li><li>Manage operational and security risk of the supported products</li><li>Manage projects aligned to organizational goals</li><li>Identify and develop new and improved technical procedures and process control manuals</li><li>Assume informal/formal mentorship role within teams and assist with the coaching and training of new team members</li><li>Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.</li></ul>Qualifications:<ul><li>5-8 years of relevant experience</li><li>Consistently demonstrates clear and concise written and verbal communication</li><li>Proven influencing and relationship management skills</li><li>Proven analytical skills</li><li>The ability to work on large scale projects with tight deadlines</li></ul>The candidate is expected to have knowledge and experience in the majority of the below:<ul><li>Linux (Red Hat)</li><li>File transfer protocols (SFTP/FTPS/HTTPS)</li><li>Encryption protocols (PGP/TLS/SSH)</li><li>Security protocols and cryptographic algorithms in general</li><li>Experience with large scale integration and hosting environments</li></ul>Knowledge or experience with any of the following technologies is an advantage:<ul><li>Axway SecureTransport</li><li>Linux scripting knowledge (Python, bash, Perl)</li><li>Web / Application Server technologies (e.g. Tomcat, NGINX)</li><li>API and Web services</li><li>Cloud security, containers, OpenShift, Kubernetes</li><li>Oracle Database SQL</li><li>Familiarity with load balancers, proxy servers and firewalls</li></ul>Education:<ul><li>Bachelor’s degree/University degree or equivalent experience</li></ul>This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.------------------------------------------------------Job Family Group: Technology------------------------------------------------------Job Family:Information Security------------------------------------------------------Time Type:Full time------------------------------------------------------Primary Location:New Castle Delaware United States------------------------------------------------------Primary Location Full Time Salary Range:$96,400.00 - $144,600.00In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental &amp; vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.------------------------------------------------------Anticipated Posting Close Date:May 15, 2024------------------------------------------------------Citi is an equal opportunity and affirmative action employer.Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View the "<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law</a>" poster. View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law Supplement</a>.View the <a href="http://citi.com/citi/diversity/assets/pdf/eeo_aa_policy.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a>.View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Pay Transparency Posting</a>

Data Security Sr Analyst, AVP

Sr.  Data Architect–Google Cloud  In this role you will be delivering solutions on Google Cloud.  You will be the expert in the region and support the delivery of our data projects on Google Cloud.  Our Data Architects are experienced technologists with technical depth and breadth, along with strong interpersonal skills. In this role, you will work directly with customers and our team to help enable innovation through continuous, hands-on, deployment across technology stacks, will serve as the Data SME for our customers and be the focal touchpoint in engagements.   You Will: Data Architect is client facing, hands on technologist that works on assigned projects to act as the lead technologist for the engagement.  Design and implement MVP/Pilot GCP cloud solutions, create solution architecture document covering deep technical aspects of the implementation. Be "hands on" with technology and to contribute to the design, development and support development teams with recommendations and adoption of tools. You will work in teams to deliver innovative solutions on Google Cloud using core cloud data warehouse tools like Spark, Event Stream platforms, and other Big Data related technologies. Build and Deploy Data Pipelines on Google Cloud to enable AI &amp; ML capabilities. Drive the development of cloud-based and hybrid data warehouses &amp; business intelligence platforms. Build Data Pipelines to ingest structured and Unstructured Data. Training – Develop and execute a professional plan that will enhance skills. Contribute to sales process improvement, including developing knowledge bases, creating sales tools, and mentoring other Solutions Architects <h3>Technical Requirements: </h3><ul><ul><li>3+ years of Google Cloud experience and 5+ years of experience as a Data Architect with a proven track record and experience leading engagements from design to implementation of data analytics solutions.  </li><li>Hands-on experience with Google Cloud Platform. </li><li>Experience leading data warehousing, data ingestion, and data profiling activities. </li><li>Advanced SQL skills, including the ability to write, tune, and interpret SQL queries; tool specific experience in the RDBMS listed above is ideal. </li><li>Hands-on experience with Google cloud platform technologies: Google Cloud Platform Pub/Sub, Cloud Functions, DataFlow, DataProc (Hadoop, Spark, Hive), Cloud Machine Learning, Cloud Data Store and BigTable, BigQuery, DataLab, and DataStudio. </li><li>Proven experience in migration databases like mySQL, Postgres, and Oracle to Cloud SQL. </li><li>Certifications in architecture, data engineering and development on Google Cloud. </li></ul></ul><h3>Other Requirements: </h3><ul><ul><li>Highly motivated self-starter and team player and demonstrated success in prior roles. </li><li>Excellent problem solving, analytical, presentation, and whiteboarding skills </li><li>Track record of success dealing with ambiguity (internal and external) and work</li><li>Track record of success dealing with ambiguity (internal and external) and working collaboratively with other departments and organizations to solve challenging problems </li></ul></ul>About Rackspace TechnologyWe are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.  More on Rackspace TechnologyThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

Sr.  Data Architect – GCP

Dark Wolf Solutions

Dark Wolf Solutions is looking for a Penetration Tester who will plan and perform continuous cross-domain vulnerability assessments, full-scale penetration testing and red team operations. The ideal candidate must display familiarity with both <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a>-based and on-premises Windows, Linux and mobile operating systems and environments and be able to conduct network and application security vulnerability analysis. The candidate will analyze both commercial and federal mission systems to help identify potential vulnerabilities and help to provide and implement remediation strategies to customers for these issues. The successful candidate must have prior experience with multiple facets of penetration testing, using and ideally developing or contributing to both open source and proprietary tools. Conducts open-source research on clients and their infrastructure to help identify data leakage that could lead to vulnerabilities. Leverages programming knowledge to develop custom tools and exploits both for targeting unique client systems and building internal testing capabilities. Travels to client sites on a semi-regular basis to conduct onsite assessments and tests. Prepares assessments and presentations of analyses and findings. Develops and maintains analytical procedures to meet changing requirements and ensure effective operations. This position is REMOTE, with the possibility of minimal travel. 
Duties/Responsibilities:
Candidates may be asked to move between projects and participate in either single engagement penetration tests or continuous engagement Red Teams. The position will primarily require the candidate to lead the technical aspect of a specific, long-term penetration testing effort, helping to conduct varied testing efforts against applications and networks for the federal government. Candidates may also be placed on a larger Red Team and be expected to develop a continuous campaign-based assessment that emulates the target’s real-world adversaries by developing new tools specific to the target. Candidates will be expected to integrate into ongoing testing efforts, requiring subject matter expertise in multiple disciplines of vulnerability testing and assessment, the ability to interact and liaison directly with clients and a strong ability to write and document findings. Travel is required on an occasional basis for clients requiring onsite testing. The successful candidate will be willing to be evaluated and sponsored for a security clearance.
Required Qualifications:
<ul>
<li>2+ years’ experience in three or more specific areas to include: intelligence analysis, network engineering, networking security, penetration testing, red team operations, hardware engineering, software engineering, exploit development, reverse engineering, vulnerability assessment, physical security assessments, social engineering</li>
<li>Strong knowledge of testing simulated intrusion attempts and physical penetration testing</li>
<li>Proficiency in the testing and assessment of mobile operating systems, embedded systems and/or IoT devices</li>
<li>Familiarity with unmanned aerial vehicles and associated mobile and wireless technologies</li>
<li>Proficiency of various operating systems: Windows, iOS, Android, Mac or Linux</li>
<li>Proficiency with cloud technology and deployments: Amazon Web Services, Microsoft Azure, Google Cloud Platform</li>
<li>Moderate competency in at least one scripting and/or coding language</li>
<li>Working knowledge of software development, with preference for experience working around software development teams and efforts</li>
<li>Experience in network analysis methodologies</li>
<li>Experience in drafting reports, documenting case details, and being able to summarize findings and recommendations based on system analysis</li>
<li>Demonstrated strong written and verbal communication skills</li>
<li>BS (or equivalent) in Cybersecurity, Information Security, IT, EE, Network Engineering, Computer Science, or related field</li>
<li>Willingness to travel</li>
<li>US Citizenship and clearable at a minimum of the Secret Level</li>
</ul>
Desired Qualifications:
<ul>
<li>Familiarity with container technologies to include container orchestration and microservices</li>
<li>Experience with <a href="https://infosec-jobs.com/insights/devsecops-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">DevSecOps</a> and adjacent tools; strong preference for experience with Kubernetes, software development pipelines</li>
<li>Security Certification: CEH, OSCP, PNPT or similar security/pentesting certs</li>
<li>Experience employing advanced forensic tools and techniques for attack reconstruction, including dead system analysis and volatile data collection and analysis</li>
<li>Experience in performing post-incident computer forensics without destruction of critical data.</li>
<li>Desired experience ensuring quality assurance and the spreading of best practices</li>
<li>MS degree in technical field</li>
</ul>
This position is REMOTE within the United States. Must be located in an area close to a Dark Wolf Office. 
The <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> range for this position is $100,000.00 - $180,000.00 commensurate on experience and location. 
We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.

Penetration Tester

Grammarly

Grammarly is excited to offer a <a href="https://www.grammarly.com/blog/remote-first-hybrid-work-model/" rel="noopener noreferrer nofollow ugc" target="_blank">remote-first hybrid working model</a>. Team members work primarily remotely in the United States, Canada, Ukraine, Germany, or Poland. Certain roles have specific location requirements to facilitate collaboration at a particular Grammarly hub.
All roles have an in-person component: Conditions permitting, teams meet 2–4 weeks every quarter at one of Grammarly’s hubs in San Francisco, Kyiv, New York, Vancouver, and Berlin, or in a workspace in Kraków. This flexible approach gives team members the best of both worlds: plenty of focus time along with in-person collaboration that fosters trust and unlocks creativity.Grammarly team members in this role must be based in the United States, and they must be able to collaborate in person 3 weeks per quarter, traveling if necessary to the hub(s) where the team is based.
<h3>The opportunity </h3>
<a href="http://grammarly.com/about" rel="noopener noreferrer nofollow ugc" target="_blank">Grammarly</a> is the world’s leading AI writing assistance company, trusted by over 30 million people and 70,000 professional teams daily. From instantly creating a first draft to perfecting every message, Grammarly’s product offerings help people at 96% of the Fortune 500 get their point across—and get results. Grammarly has been profitable for over a decade because we’ve stayed true to our values and built an enterprise-grade product that’s secure, reliable, and helps people do their best work—without selling their data. We’re proud to be one of Inc.’s best workplaces, a Glassdoor Best Place to Work, one of TIME’s 100 Most Influential Companies, and one of Fast Company’s Most Innovative Companies in AI.
To achieve our ambitious goals, we’re looking for a strong technical leader to join the Grammarly Security Engineering Team. These initiatives include developing solutions for reproducibly integrating security into our platform and accelerating our security automation and self-healing journey. This role is an excellent opportunity for someone interested in leading security efforts and a chance to grow and develop as a builder, maintaining a high-security bar for our enterprise customer data while empowering engineering teams to operate fast and safely.
Grammarly’s engineers and researchers have the freedom to innovate and uncover breakthroughs—and, in turn, influence our product roadmap. The complexity of our technical challenges is growing rapidly as we scale our interfaces, algorithms, and infrastructure. You can hear more from our team on our <a href="http://grammarly.com/blog/engineering" rel="noopener noreferrer nofollow ugc" target="_blank">technical blog</a>.
<h3>Your impact</h3>
As a Teach Lead Security Engineer, you will:
<ul>
<li>Explore cutting-edge techniques and develop innovative solutions to increase engineering efficiency while maintaining a high-security bar for our customers.</li>
<li>Drive company-wide processes and define the bar for engineering-wide quality and best practices to give the company a significant security advantage and shape the future of our security landscape. You’ll oversee the implementation of security measures across all Engineering Product Development (EPD) teams.</li>
<li>Collaborate with cross-functional teams, including all-stack developers, ML engineers, data scientists, and security operations, GRC, to integrate security improvements and best practices into Grammarly's development lifecycle, from quick wins to long-term investments.</li>
<li>Review security for the most business-critical and complex areas significantly contributes to the architectural designs for multiple teams.</li>
<li>Identify new high-level systems to meet strategic security objectives and influence leadership and C-suite to pursue.</li>
<li>As a Technical Lead Security Engineer, you will be at the forefront of our security efforts. Your work will not only provide the company with a significant security advantage but also shape the future of our security landscape. Your contributions will genuinely make a difference. </li>
<li>Scale their team by mentoring security engineers.</li>
<li>Represent Grammarly's security engineering within and outside of the company.</li>
</ul>
<h3>We’re looking for someone who</h3>
<ul>
<li>Embodies our EAGER values—is ethical, adaptable, gritty, empathetic, and remarkable.</li>
<li>It is inspired by our MOVE principles, which are the blueprint for how things get done at Grammarly: move fast and learn faster, obsess about creating customer value, value impact over activity, and embrace healthy disagreement rooted in trust.</li>
<li>Can collaborate in person 3 weeks per quarter, traveling if necessary to the hub where the team is based.</li>
<li>Has a proven record of security-focused contributions in both application/product security and securing <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> infrastructures as a security practitioner.</li>
<li>Operates primarily as a 'security builder, a role that combines security expertise with software development skills. They’ll design, implement, and operate services with a strong focus on security.</li>
<li>Is proficient in programming languages such as Python, Java, and Go and has experience with relevant CI/CD, Kubernetes, and Cloud Infrastructures (AWS/GCP/Azure).</li>
<li>Understands security fundamentals, such as threat modeling, vulnerabilities, and detection engineering.</li>
<li>Can scale themselves by managing a small team of software engineers if needed.</li>
<li>Effectively sets and communicates priorities for security initiatives across the company and leads execution.</li>
<li>Model a 'standard of excellence' that supports a 'culture of high-performance '. Consistently deliver high-quality work, set a positive example for the team, and foster a work environment that encourages innovation, collaboration, and continuous learning. </li>
</ul>
<h3>Support for you, professionally and personally</h3>
<ul>
<li>Professional growth:We believe that autonomy and trust are key to empowering our team members to do their best, most innovative work in a way that aligns with their interests, talents, and well-being. We support professional development and advancement with training, coaching, and regular feedback.</li>
<li>A connected team: Grammarly builds a product that helps people connect, and we apply this mindset to our own team. Our remote-first hybrid model enables a highly collaborative culture supported by our EAGER (ethical, adaptable, gritty, empathetic, and remarkable) values. We work to foster belonging among team members in a variety of ways. This includes our employee resource groups, Grammarly Circles, which promote connection among those with shared identities, such as BIPOC and <a href="https://www.grammarly.com/blog/supportive-workplace-for-lgbtqia/" rel="noopener noreferrer nofollow ugc" target="_blank">LGBTQIA+</a> team members, women, and parents. We also celebrate our colleagues and accomplishments with global, local, and team-specific programs. </li>
</ul>
<h3>Compensation and benefits</h3>
Grammarly offers all team members competitive pay along with a benefits package encompassing the following and more: 
<ul>
<li>Excellent health care (including a wide range of medical, dental, vision, mental health, and fertility benefits)</li>
<li>Disability and life insurance options</li>
<li>401(k) and RRSP matching </li>
<li>Paid parental leave</li>
<li>Twenty days of paid time off per year, eleven days of paid holidays per year, and unlimited sick days </li>
<li>Home office stipends</li>
<li>Caregiver and pet care stipends</li>
<li>Wellness stipends</li>
<li>Admission discounts</li>
<li>Learning and development opportunities</li>
</ul>
Grammarly takes a market-based approach to compensation, which means base pay may vary depending on your location. Our US and Canada locations are categorized into compensation zones based on each geographic region’s cost of labor index. For more information about our compensation zones and locations where we currently support employment, please refer to <a href="https://www.grammarly.com/jobs/openings/compensation-zones" rel="noopener noreferrer nofollow ugc" target="_blank">this page</a>. If a location of interest is not listed, please speak with a recruiter for additional information. 
Base pay may vary considerably depending on job-related knowledge, skills, and experience. The expected <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> ranges for this position are outlined below by compensation zone and may be modified in the future. 
United States: 
Zone 1: $350,000 - $450,000/year (USD)
Zone 2: $310,000 - $410,000/year (USD)
<h3>We encourage you to apply</h3>
At Grammarly, we value our differences, and we encourage all—especially those whose identities are traditionally underrepresented in tech organizations—to apply. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, ancestry, national origin, citizenship, age, marital status, veteran status, disability status, political belief, or any other characteristic protected by law. Grammarly is an equal opportunity employer and a participant in the US federal E-Verify program (US). We also abide by the Employment Equity Act (Canada).
Please note that EEOC is optional and specific to US-based candidates.
#LI-PM1#LI-Hybrid
All team members meeting in person for official Grammarly business or working from a hub location are strongly encouraged to be vaccinated against COVID-19.

Area Tech Lead, Security Engineer

bunq

Our mission is to change the future of banking by creating the best and most secure banking experience! Your challenge will be supporting the security function in bunq you will monitor performance and dig under the hood of the first line ownerships in order to prevent security incidents. 🔐  You will also make sure that bunq has effective processes and automations in place to track all types of risks.
Up for the challenge?
Kick off your application by taking our assessment and find out if bunq🌈 is your perfect match! 

Take ownership
As bunq's Security Analyst, you'll be responsible to make sure that we keep our promises to keep our users safe.<ul><li>Detect and respond to security threats and incidents within bunq's environment to make sure bunq's operational processes and IT systems are continuously running to deliver me uninterrupted services</li><li>Continuously run to deliver me a uninterrupted service with a high quality standard and seamless experience.</li><li>Own logical access management involves controlling and managing user access to digital resources, systems, and data within bunq.</li></ul>
<h3>Requirements</h3>
<ul><li>You use security tools and technologies such as <a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a> systems, IDS/IPS, DLP and vulnerability management tools</li><li>You know regulations such as GDPR,PCI DSS and especially financial sector specific regulations guidelines</li><li> You are able to assess and prioritize security risks within the financial environment including identifying, evaluating and mitigating potential threats to our users. </li><li>You know incident response and recovery from security incidents such as breaches or cyberattacks </li><li>You are an excellent communicator and speak English fluently. </li></ul>

Your space to perform
We give you the space and the tools you need to succeed 💪🏼
  ＄ A base <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> between €55,000 -€63,000 and profit sharing
 
  
🤟 Join forces with great colleagues across the globe to revolutionize banking
 👩‍💻 Working hybrid possibilities that only get better with time
📚 Accelerate your career growth with bunq Academy 
🚴‍♀️ Stay fit &amp; healthy with a fierce discount for OneFit
🚌 Travel reimbursements, whatever transport you prefer (we like green choices 🌳)
 💻 A Macbook to keep with you while you're with us
 👩‍🍳 Meal voucher for lunch and unlimited snacks
 💸 Monthly contribution to your phone and internet bills
 ⚕️ Pension contribution for your future
 🍻 Friday drinks and other celebrations - bunq style

Security Analyst

Acronis

Acronis is a world leader in cyber protection—empowering people by providing them with cutting-edge technology that enables them to monitor, control, and protect the data that their businesses and lives depend on. We are looking for a Cloud Partner Success Manager who is ready to join us in creating a #CyberFit future and protecting the digital world!
As an Onboarding Advisor you will be focused on driving consumption and engagement of the newly signed Service Providers in the assigned region.
Every member of our “A-Team” has an instrumental role and impact on the success of Acronis’ innovative and growing business, so we are looking for someone who enjoys working in dynamic, global teams and thrives in a fast-paced and rapidly changing work environment. Just like everyone at Acronis, the ideal candidate will embody all of our company values: responsive, alert, detail-oriented, makes decisions, and never gives up.
WHAT YOU'LL DO
<ul>
<li>Make sure new commit Service Providers (Partners) are engaged into the Onboarding process, actively participatein it and follow the 60-days training/learning plan</li>
<li>New Service Providers include the following categories:o Service Providers that signed for a monthly commitment model in the current periodo Service Providers that have been signed by Acronis Cloud Advisors or by the Distributors or signedthemselves on one of the Distributor’s marketplaces or via the Express signup on the Acroniswebsite/console</li>
<li>Ensure that a newly signed Service Provider is using Acronis products actively, which includes, but is not limitedto:o Service Provider pass at least 1 certification during the Onboarding, which lasts 60 days, unless anyexceptional prolongation is requiredo Service Provider starts protecting workloads and adds new oneso Service Provider starts backing up his own or his Customer’s datao Service Provider logs in to the Management Console, Partner Portal, Academy</li>
<li>To ensure the engagement, run, prepare or actively participate in the following activities: public webinars, one onone zoom sessions, email communications, surveys, calls</li>
<li>Connect with Acronis Service Providers using the approved tools, including but not limited to Avaya, Zoom,Outlook, Gainsight, etc. to verify Service Provider’s profile, such as: the environment, technical/finance decisionmakers, number of workloads they want to protect</li>
<li>Do the research before reaching out to a Service Provider and prepare questions based on it, using company’sweb site, LinkedIn profile, any other public information about the company or contact• Co-operate with all related departments at Acronis to onboard Service Provider successfully: Solution Engineers,Support, Sales Enablement, Product Management, etc.</li>
</ul>
WHAT YOU BRING (EXPERIENCE &amp; QUALIFICATIONS) 
<ul>
<li>Minimum of 1 year of sales and marketing experience in the MSP channel software industry on similar positions</li>
<li>Experience in Onboarding</li>
<li>Channel and field sales knowledge with understanding of the cloud market business model</li>
<li>Strong presentational, communication and interpersonal skills with the ability to clearly articulate product’s different features and answer all customer questions</li>
<li>Self-motivated with a high level of discipline, attention to detail, and ability to meet deadlines in a fast-paced environment while still maintaining a high-level of accuracy</li>
<li>Team-player with a positive attitude who thrives in a global environment, eager to do more and help out, views challenging situations as opportunities</li>
<li>Comfortable with ambiguity and willingness to adapt to changes in responsibilities and strategies</li>
<li>Highly persistent in follow-up conversations, negotiations and closing sales skills</li>
<li>Strong presentational, communication, interpersonal, planning and time management skills</li>
<li>Fluent English</li>
<li>Fluent Spanish</li>
<li>Fluent Portuguese would be considered an advantage </li>
<li>Passion and commitment to succeed by working hard and never giving up</li>
</ul>
WHO WE ARE
Acronis is revolutionizing cyber protection by unifying backup, disaster recovery, storage, next-generation anti-malware, and protection management into one solution.  This all-in-one integration removes the complexity and risks associated with non-integrated solutions and offers easy, complete and reliable data protection for all workloads, applications, and systems across any environment—all at a low and predictable cost.
Founded in Singapore in 2003 and incorporated in Switzerland in 2008, Acronis now has more than 2,000 employees and offices in 34 locations worldwide. Its solutions are trusted by more than 5.5 million home users and 500,000 companies, and top-tier professional sports teams. Acronis products are available through over 50,000 partners and service providers in over 150 countries and 26 languages.
Acronis is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, marital status, national origin, physical or mental disability, medical condition, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, gender identity or expression, or any other characteristic protected by applicable laws, regulations and ordinances.
#LI-VB1

Bogotá

Onboarding Advisor (LATAM)

The Competency focussed Advisor is responsible for bookings targets, go-to-market interactions and pipeline development for the competency he/she owns approached through an Advisory/Consultative led selling process. The role supports Rackspace sellers (Acquisition sellers and Account Client Partners) in promoting and selling the competency into existing and new customer base. The role will work with the Sales teams to devise account strategies relating to the competency and also advise customers on the competency. The Client Partner helps to build the RXT brand as the preferred consulting partner for cloud transformation projects, spanning business and technology for this area of competency. This role will be dedicated to delivering exceptional outcomes for RXT clients, thereby expanding existing accounts and facilitating access to new ones. The role will also deliver solutions that further develop RXT’s transformation story and build on RXT’s strong foundation. The role is responsible for adhering to company security policies and procedures and any other relevant policies and standards as directed. The role will build and maintain a solid working relationship with coworkers and clients, from pre-sales efforts to providing oversight during project delivery. The ability to manage customer expectations, understand people, process and technology challenges to recommend holistic solutions in area of the specialisation, establish long-term partnerships is critical to the role. <h3>Career Level Summary</h3><ul><ul><li>Requires specialized depth and/or breadth of expertise in own job discipline or field.</li><li>Leads others to solve complex problems.</li><li>Works independently, with guidance in only the most complex situations.</li><li>May provide functional leadership to teams or projects.</li><li>Vision: Bring to life our vision that "we accelerate business outcomes for our enterprise customers with unique expertise in the competency, becoming their trusted cloud consulting partner of choice via our thought-leadership”</li><li>Competency Portfolio Management: Ability to support GTM initiatives within UK, NE and MEA region </li><li>Client Relationships: executive presence to build relationships within the client organization through demonstrated competency knowledge and skills.</li><li>Business Development: generate sales opportunities, grow the RXT brand and network, grow executive relationships, collaborate with practice area leaders to create proposals, and support responses to client RFPs.</li><li>Service Line Collaboration: work collaboratively with RXT Service Lines to define and sell service offerings </li><li>Partner Collaboration: work collaboratively with Hyperscalers and other partners to define and sell offerings </li><li>#LI-CS1</li></ul></ul><h3>Key Responsibilities. </h3><ul><ul><li>Drive bookings via ACV and TCV targets as defined for each area of engagement or competency</li><li>Oversight of delivery excellence on the competency for active engagements at accounts.</li><li>People Management: provide guidance, supervision, and coaching to team members assigned to projects on the account. Drive employee satisfaction within community of consultants working on the account(s).</li><li>Strategy: member of the market leadership team supporting technology industry client portfolio direction, strategy, and goal setting.</li><li>Public Relations: promote RXT in the market by attending / speaking at industry events, panels, etc.</li><li>Other Incidental tasks related to the job, as necessary. </li><li>The success of the services agenda and successful sales will rely on the successful partnerships with others; Engage and coordinate with partners and/ or vendors to drive select deals through vendor-based opportunities, engage with the broader organization such as the Offer </li><li>Management, Commercial Architecture, and Delivery teams to promote and support high-value services opportunities, and participate in regional sales governance processes and Deal Clinics to profile opportunities</li></ul></ul><h3>Skills Required. </h3><ul><ul><li>10+ years of sales experience with 5+ years of competency related experience at the leadership level in Data Advisory. </li><li>Hands-on experience with business case, proposal creation and leading competency presentations</li><li>Specialised IT Competency and business consulting engagement experience</li><li>Experience managing the performance of individual consultants, either direct reports and/or as members of project team</li><li>Demonstrated experience delivering high-impact consulting services</li><li>Experience managing transformational cloud based programs that incorporate people, processes, and technology.</li><li>Being data-driven and kind of a data-geek: clear understanding of data, analytics, metrics and statistics.</li><li>Being relentless in pursuit of growth. Ability to develop sales strategies.</li><li>Being performance and results-oriented. Problem-solving aptitude.</li><li>Hands-on experience with proposal creation and leading proposal presentations</li><li>Strong leadership, interpersonal, communication, and presentation skills</li><li>Ability to develop and use performance KPIs.</li><li>High Energy. Having a startup mindset and ability to work in a team environment.</li></ul></ul>About Rackspace TechnologyWe are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.  More on Rackspace TechnologyThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

United Kingdom

Greater London

Competency Advisory Partner - Data

The leading job board for Cyber Security Jobs. Start your career in Information Security Industry. Jobs are updated daily.

Job Position and Company	Location	Tags	Posted
Associate, Cyber Risk Advisory \| Remote US at Coalfire	Remote Full Time Consulting
Senior Security Incident Response Analyst at Farfetch	Remote Full Time Analyst Incident Response
Red Team Senior Operator at Deloitte	Full Time Incident Response Windows Red Team
IT Security Engineer - GRC at Xtremax	Full Time
Cyber Security Intelligence Group Manager, SVP at City	Full Time CISM CISO Manager Chief
Google Cloud Technical Product Manager at Rackspace	Remote Full Time Manager
Network Security Analyst at Wiz, Inc.	Full Time Analyst
Information Security Auditor - Schwerpunkt IT-Prüfung (m/w/d) at Deloitte	Remote Full Time CISO
Senior Security Engineer at Minitab	Full Time Blue Team Comptia Audit Application Security
Junior Compliance Analyst (remote opportunity, work anywhere) at CloudLinux	Remote Full Time Analyst
Cyber Security Operations Analyst (L1) at WPP	Remote Full Time Analyst Incident Response
Cyber Fraud Lead Analyst at City	Full Time CISO Forensic Analyst Chief
SIEM Enginer- L3 at Rackspace	Full Time Analyst Incident Response Javascript CCSP
Data Security Sr Analyst, AVP at City	Full Time Analyst
Sr. Data Architect – GCP at Rackspace	Remote Full Time
Penetration Tester at Dark Wolf Solutions	Remote Full Time Forensic Application Security Windows
Area Tech Lead, Security Engineer at Grammarly	Remote Full Time
Security Analyst at bunq	Full Time Analyst Incident Response
Onboarding Advisor (LATAM) at Acronis	Remote Full Time Manager
Competency Advisory Partner - Data at Rackspace	Full Time Consulting

Cyber Security Jobs

387 Cyber Security Jobs. Page 2 of 20

Subscribe to the weekly
Cyber Security Jobs Newsletter