Contentful

<h3>About the Opportunity</h3>
Contentful strives to build a secure and safe service and commits considerable effort and resources to security. Our Security team supports corporate-wide information security management programs and collaborates closely with internal teams. We believe that Security must be anchored by DevOps principles with strong repeatable processes.
We are looking for a committed and driven Security Analyst with experience performing analysis and incident management of information security events. As an analyst, you will have daily alert investigation responsibilities, but you will be empowered to proactively drive change to shape and support the growth of our Security Operations program. Candidates should be skilled in detection management and demonstrate knowledge and understanding of common Information Security principles and frameworks, coupled with excellent communications skills and a continuous desire to learn and grow.
You will be expected to work independently, work as a part of a team, and partner with stakeholders throughout the organization to ensure comprehensive risk mitigation while reducing impact to end users throughout the organization.
<h3>What to expect? </h3>
<ul>
<li>Perform daily alert investigation and response in a hybrid environment.</li>
<li>Collaborate with the team and actively assist in major response exercises.</li>
<li>Conduct detail-oriented analysis across challenging and complex ecosystems.</li>
<li>Be capable of reporting or summarizing your findings to a broad audience.</li>
<li>Create processes, documentation, and runbooks to support a rapidly growing organization.</li>
<li>Take ownership of tuning, refinement, and development of detection use cases.</li>
<li>Drive continuous improvement across all aspects of threat detection and response.</li>
<li>Identify systemic issues and collaborate on approaches to address root causes.</li>
<li>Play an active role in scaling Operation practices by contributing to team roadmaps.</li>
<li>Provide delightful and informative interactions with all end users.</li>
<li>Proactively identify opportunities for user training and awareness programs.</li>
<li>Collaborate on threat models by incorporating detection use cases into designs.</li>
<li>Assist in the creation of requirements and testing of security solutions.</li>
</ul>
<h3>What you need to be successful</h3>
<ul>
<li>3+ years of Security Operations or <a href="https://infosec-jobs.com/insights/incident-response-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">Incident Response</a> experience.</li>
<li>Proficiency in analysis methods (e.g., log analysis, live response, forensics, etc.)</li>
<li>Firm understanding of the evolving attacker Tactics, Techniques, and Procedures.</li>
<li>Strong network fundamentals (e.g., TCP/IP, Layer 7 protocols, etc.)</li>
<li>Ability to perform detailed host analysis on Mac, Windows, &amp; Linux systems.</li>
<li>Familiarity analyzing Software-as-a-Service log sources to support investigations.</li>
<li>Practical experience using security technologies (e.g., <a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a>, EDR, AntiVirus, Email, etc.)</li>
<li>Exposure using Splunk in support of alert investigation across multiple data sources.</li>
<li>Experience performing investigations in <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> service providers (e.g., AWS, GCP, Azure, etc.)</li>
<li>Hands-on experience with malware analysis using dynamic and static analysis tools.</li>
<li>Practical mindset to balance business needs with security requirements.</li>
<li>Ability to drive change through continuous improvement.</li>
<li>Capable of working independently and collaboratively as a team.</li>
<li>Comfortable working with a geographically dispersed team.</li>
</ul>
<h3>What’s in it for you?</h3>
<ul>
<li>Join an ambitious tech company reshaping the way people build digital experiences</li>
<li>Full-time employees receive Stock Options for the opportunity to share ownership and the success of our company</li>
<li>We value Work-Life balance and You Time!A generous amount of paid time off, including vacation days, education days, and volunteer days</li>
<li>Access to our Employee Assistance Program (EAP) for information, support, discussion, and counseling for life’s challenges</li>
<li>Use your personal education budget to improve your skills and grow in your career. </li>
<li>Use your physical fitness budget to get away from your desk and support your physical wellness</li>
<li>Enjoy a full range of virtual and in-person events, including workshops, guest speakers, and fun team activities, supporting learning and networking exchange beyond the usual work duties </li>
<li>A monthly phone/internet stipend and phone upgrade reimbursement after 2 years</li>
<li>New hire office equipment stipend. Get the gear you need to work at your best</li>
</ul>
<a href="https://infosec-jobs.com/remote-jobs/" rel="noopener noreferrer nofollow ugc" target="_blank">#LI-Remote</a><h3>Who are we?</h3>
Contentful is the intelligent composable content platform that unlocks all of an organization’s digital content to deliver impactful customer experiences, making content a strategic business asset. The Contentful Platform, Contentful Studio, and the Contentful Ecosystem combine the flexibility of composable content with the intelligence of AI, empowering digital teams to drive business momentum through collaboration, speed, and scale. Contentful powers innovative content experiences across brands, regions, and channels for organizations around the world, including nearly 30% of the Fortune 500. Nearly 800 people from more than 70 nations contribute their energy and creativity to Contentful, working from hubs in Berlin, Denver and distributed around the world.
<h3>Everyone is welcome here!</h3>
“Everyone is welcome here” is a celebrated component of our culture. At Contentful, we strive to create an inclusive environment that empowers our employees. We believe that our products and services benefit from our diverse backgrounds and experiences and are proud to be an equal opportunity employer. All qualified applications will receive consideration for employment without regard to race, color, national origin, religion, sexual orientation, gender, gender identity, age, physical [dis]ability, or length of time spent unemployed. We invite you to apply and join us!
If you need reasonable accommodations at any point during the application or interview process, please let your recruiting coordinator know.
Please be aware of scammers who may fraudulently allege to be from Contentful. These types of fraud can be carried out through copycat websites, fake email addresses claiming to be from our company, or social media. We do not ask for your personal information such as bank account numbers, identification numbers, etc through social media or chat-based apps, nor do we request or send money for the purchase of business equipment. If you suspect fraud, please report it to your local authorities, as well as reaching out to us at <a href="mailto:security-esk@contentful.com" rel="noopener noreferrer nofollow ugc" target="_blank">security-esk@contentful.com</a> with any information you may have.
By clicking “Apply for this job,” I acknowledge that I have read the “<a href="https://www.contentful.com/legal/us/privacy-notice-to-candidates/privacy/" rel="noopener noreferrer nofollow ugc" target="_blank">Contentful’s Candidate Privacy Notice</a>”, and hereby consent to the collection, processing, use, and storage of my personal information as described therein.

Security Analyst (f/m/d)

Amazon.com

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a>, devices, retail, entertainment, healthcare, operations, and physical stores.Amazon Security SecDevOps is a team of world-class software development engineers responsible for shaping the future of internal security tooling within Amazon Security. We build innovative technologies at massive scale to help keep Amazon and our customers secure. As a software development engineer on this team you will leverage modern technologies and Amazon services to empower Amazon security response engineers to be more productive.You are a software developer who likes to deliver software solutions that solve business problems and delight your customers with efficiency and productivity gains. You’ve got development experience with technologies like AWS, Java, TypeScript, React, Python, MongoDB, and SQL, though you don't need experience with all of those to start. You might be a front end developer, a back end developer, or a full stack engineer - our team is growing and we have several positions open. If you have some background in security that is helpful, but not required.We are the Amazon SecDevOps team. We build all of the APIs, websites, and tools for Amazon Security Operations including a Security Orchestration, Automation, and Response (SOAR) platform. Our team tackles the most challenging internal development efforts within AWS Security - the ones which require massive scale, constant availability, and integration with numerous other services and tools. To help delight our customers we incorporate real-time collaboration features and use purpose-built databases, while maintaining close contact with our customers throughout the development process.Location is flexible and can be one of:- Dublin, Ireland- Paris, France- Berlin, GermanyOur team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge sharing and mentorship. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded engineer and enable them to take on more complex tasks in the future.Our team also puts a high value on work-life balance. Striking a healthy balance between your personal and professional life is crucial to your happiness and success here, which is why we aren’t focused on how many hours you spend at work or online. Instead, we’re happy to offer a flexible schedule so you can have a more productive and well-balanced life—both in and outside of work.Here at Amazon, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust.About the teamDiverse ExperiencesAmazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Why Amazon Security?At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.Inclusive Team CultureIn Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.Training &amp; Career GrowthWe’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.Work/Life BalanceWe value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.Mentorship and Career GrowthWe’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. We are open to hiring candidates to work out of one of the following locations:Courbevoie, FRA<h3>Basic Qualifications</h3>- Bachelor’s degree in Computer Science, related field, or equivalent work experience.- Experience (non-internship) in professional software development.- Experience designing or architecting (design patterns, reliability and scaling) of new and existing systems.- Experience developing for Linux OS (or developing on macOS, Mac command-line experience )- Programming experience with at least one software programming language- Java, Python, or TypeScript.<h3>Preferred Qualifications</h3>- Experience with full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations.- Experience developing using SQL and NoSQL databases.- Experience in Cloud Technologies.Amazon est un employeur engagé pour l'égalité des chances. Nous sommes convaincus qu'une main d'oeuvre diversifée est essentielle à notre réussite. Nous prenons nos décisions de recrutement en fonction de votre expérience et de vos compétences. Nous apprécions votre envie de découvrir, d'inventer, de simplifier et de construire. La protection de votre vie privée et la sécurité de vos données constituent depuis longtemps une priorité absolue pour Amazon. Veuillez consulter notre Politique de Confidentialité pour en savoir plus sur la façon dont nous collectons, utilisons et traitons les données personnelles de nos candidats.

Software Development Engineer, AWS Security SecDevOps

Coalfire

About Coalfire Coalfire is on a mission to make the world a safer place by solving our clients’ toughest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Denver, Colorado with offices and remote positions across the U.S. and U.K., and we support clients around the world.   But that’s not who we are – that’s just what we do.  We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.    And we’re growing fast.  We’re looking for a Senior Consultant to support our Application Security team.   Position SummaryThe Senior Consultant works closely with Project Managers, Delivery Directors, and other Delivery team members to lead engagements, assessing the security and compliance of various types of client applications and supporting infrastructure against regulatory and industry requirements and standards, as well as security best practice frameworks.  The Senior Consultant is a technical leader with broad and deep technical skills, meeting the objectives of their engagements, collaborating with clients, mentoring teammates, and providing subject matter expertise across one or more technical domains. The Senior Consultant is a trusted advisor to clients, and through objective testing and results reporting, supports the client in making well-informed, risk-based decisions to improve overall security posture.  
<h3>What You'll Do </h3>
<ul>
<li>Working independently and collaboratively with a team to both lead and support</li><li>Application Penetration Testing (Browser-based, API, Mobile, IoT)</li><li>Threat Modeling</li><li>Source Code Reviews</li><li>Advise clients on technical security or compliance activities</li><li>Manage priorities and tasks to achieve utilization targets</li><li>Operate with professionalism both internally and with clients</li><li>Ensure quality reports and services are delivered efficiently and on time</li><li>Continue to develop professional skills with relevant industry specific certifications or training. Maintains strong depth of knowledge in the practice area</li><li>Collaborate with project managers, quality management, sales and other delivery team members to drive customer satisfaction and meet project deliverables</li><li>Escalate client and project-related issues to management in a timely manner to inform and engage the necessary resources to address the issue</li><li>Contribute to thought leadership initiatives through blogs, conference speaking, and/or R&amp;D functions</li></ul>
<h3>What You'll Bring</h3>
<ul>
<li>Application penetration testing and assessment tradecraft and methodologies (including browser-based, API, thick client, and Mobile)</li><li>Strong working knowledge of at least two programming or scripting languages</li><li>Strong understanding of security principles, policies, and industry best practices</li><li>Strong understanding of various compliance frameworks (PCI DSS, FedRAMP, HIPAA, etc.).</li><li>Minimum of 5 years’ experience in a consulting/professional services role</li><li>Minimum of 5 years’ experience in Application Security and/or Software Development</li><li>Experience testing against one or more IT security compliance frameworks, such as PCI, FISMA, HIPAA, FedRAMP, or HITRUST</li><li>Familiarity with Open Source Security Testing Methodology Manual (OSSTMM), Open Web Application Security Project (OWASP), Software Assurance Maturity Model (SAMM), National Institute of Standards and Technology (NIST) Special Publications, and PTES (Penetration Testing Execution Standard)</li><li>Excellent verbal and written communication skills, including technical writing of assessment reports, presentations, and operating procedures</li><li>Client-centric consulting with high level of collaboration</li><li>Shows an aptitude for leadership both through practice maturation and by mentoring junior teammates</li><li>High school diploma required</li></ul>
<h3>Bonus Points</h3>
<ul>
<li>Software development/engineering</li><li>Cloud Service penetration testing tradecraft and methodologies across multiple service providers (e.g. AWS, GCP, etc.).</li><li>Mobile platform penetration testing tradecraft and methodologies across both widely-used platforms (iOS and Android).</li><li>Network/host-based penetration testing tradecraft and methodologies.</li><li>Cloud Service penetration testing specifically against AWS and GCP services</li><li>Mobile device and application penetration testing on both iOS and Android platforms</li><li> Red/Purple team operations</li></ul>Why You'll Want to Join UsAt Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.At Coalfire, equal opportunity and pay equity is integral to the way we do business. A reasonable estimate of the compensation range for this role is $86,000 to $148,000 based on national <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> averages. The actual salary offer to the successful candidate will be based on job-related education, geographic location, training, licensure and certifications and other factors. You may also be eligible to participate in annual incentive, commission, and/or recognition programs. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.<a href="https://infosec-jobs.com/remote-jobs/" rel="noopener noreferrer nofollow ugc" target="_blank">#LI-Remote</a>#LI-HJ1

Senior Consultant, Application Security Penetration Tester | Remote US

Rackspace

Job Description:Rackspace Sitecore Engineers are an extension of our Fanatical Support team and are responsible for providing deep application support and advisory services for the Sitecore platform and associated technologies. Sitecore Engineers are expected to work closely with Rackers, customers, and systems integrators to provide a seamless and customized design, architecture, and support experience. Engineers engage to resolve customer issues, manage ongoing technical projects, and support our Sitecore Architects, who act as thought leaders by shaping and defining the offering.  The Sitecore Engineer will support and maintain customer Sitecore configurations through all phases of the customer lifecycle including initial design, implementation, performance tuning, and security hardening. In addition, this role will assist and support the Sitecore Architect in developing automation around the Sitecore platform, in an effort to provide scalable and repeatable solutions for application installation and customer deployments. Acting as a partner to our customers and internal teams, the Sitecore Engineer is responsible for creating customer loyalty through extensive knowledge in application and infrastructure performance tuning, and by working with internal teams to deliver a comprehensive, consistent and Fanatical customer experience. The Sitecore Engineer takes on the additional responsibilities of representing Rackspace in product meetings and to third party vendors, and in mentoring and developing more junior team members. The Sitecore Engineer will often be tasked with resolving complex customer issues, facilitating OS-specific meetings and training sessions for knowledge sharing, managing long-running projects for internal and external customers, and owning the technical development of the CAS team, specific to Sitecore product &amp; services. Key Accountabilities•            Provide deep applications and infrastructure support to Sitecore customers of Rackspace Technology.•            Design, develop, test, and implement new configurations, architectures, and standards.•            Must possess sound knowledge around technical architecture of Sitecore versions – 8.x, 9.x, and 10.x, hosted on dedicated, IAAS, and PAAS solutions. •            Provide guidance, to customers, 3rd party integration specialists, and/or internal teams, on solutions to increase application availability, redundancy, scalability, and performance•            Assist customers and internal teams to automate processes and incorporate Sitecore best practices &amp; methodologies•            Provide leadership and guidance when customer downtime issues arise and provide RCA support as requested.•            Show ownership of issues through resolution and maintain customer loyalty by serving customers via phone, tickets, and email•            Responsible for the technical development of peers•            Represent the Application Services team and Rackspace in meetings with internal team and third party vendors•            Manage long-running and complex projects for internal &amp; external customers.  Key Performance Indicators•            Customer/Internal Feedback (delivered via Unsat Ratings and/or email &amp; phone)•            Stability and performance of customer applications, as relates to customer uptime, using internal monitoring tools•            Customer retention and growth as a result of consistently delivering high levels of service &amp; support around customer application stability•            On-time and accurate completion of assigned projects Level-appropriate knowledge of and/or professional experience with•            Highly specialized Sitecore skill set.  •            Demonstrated understanding of System Configuration Management tools including PowerShell DSC, Ansible, Chef or Puppet. •            Extensive experience with system architecture, environment sizing.  Working knowledge of web development technologies such as MVC, SOA, WCF, and JavaScript. •            Fundamental understanding of supporting database technologies such as MongoDB, and Microsoft SQL. •            Experience with search technologies such as Solr and Elastic search.  •            Familiarity with Source control systems such as Git, Subversion, TFS.    •            Experience with Sitecore Serialization products such as TDS and Sitecore Courier.  •            Ability to work with development teams on the deployment of web-based applications.  •            Proven ability to develop large scale customer facing internet applications. •            Acts as the escalation point for all Sitecore specific issues. •            Designs environments from specifications, analyzes, evaluates, tests, documents, and implements complex Sitecore solutions.  •            Participates in the evaluations, recommendation, and selection of hardware and software solutions.  •            Performs project management of estimating, scheduling, and monitoring tasks.  •            Performs engineering tasks associated with the analysis, design, and deployment of computer hardware, and/or operating systems.  •            Interfaces with different departments within the organization regarding new deployments.  •            Experience with Code Build and Deployment technologies such as TeamCity, TFS Build, Jenkins, PSake, Octopus Deploy•            Monitors application for expected performance. Focus•            Operates independently with latitude for judgment and independent decision-making.•            8+ years of related experience including experience with .NET, Sitecore, and continuous deployment strategies for Sitecore Solutions.•            Additional experience in network design, operational support, hands-on implementation and configuration of network infrastructure is required.•            May require long periods sitting and viewing a computer monitor. Moderate levels of stress may occur at times. No special physical demands required. Occasional domestic travel, less than 10%•            High School Diploma Required.•            Bachelor’s degree in CS or IS preferredAbout Rackspace TechnologyWe are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.  More on Rackspace TechnologyThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

India

Application Support Engineer IV - IN (SiteCore) (Night Shift-Remote)

Safetica

Are you a master at tackling technical puzzles, not afraid to dazzle partners/customers with your expertise, and eager to roll up your sleeves for a product deployment? 

If you're seeking a role where your growth matches the rapid pace of our company's expansion, then come join our Customer Support Team led by <a href="https://www.linkedin.com/in/michael-skoupy/" rel="noopener noreferrer nofollow ugc" target="_blank">Michael Skoupý.</a> A team of 8 people who help each other and enjoy a beer together🍻!

With the opportunity to grow, you can gradually specialize in project and customer success management, onboarding newcomers, or product e-learning platform. 

<h5>WHAT WILL YOU DO IN SAFETICA</h5>
<ul><li>Resolve product issues and requests raised by customers/partners.</li><li>Implement, manage, and analyze Safetica product according to the requirements of our customers.</li><li>Train customers/partners by sharing the technical knowledge and expertise of Safetica.</li><li>Collaborate with departments (Product Management, Marketing, Sales, etc.) to align the product with various aspects of our business.</li><li>Participate in cross-team or internal company key projects such as implementation of AI ChatBot for knowledgebase or creation of training materials for e-learning portal.</li></ul>

<h3>Requirements</h3>
<ul><li>Proven experience in Technical Support agenda.</li><li>English language proficiency at the B2/C1 level. </li><li>Proficiency in common IT systems, operating systems, and tools, such as CRMs, MS Windows, and M365. Terms such as AD, DNS, and IIS are familiar to you.</li><li>User knowledge of MS SQL Studio - management of permissions, SQL database load, analysis, browsing/searching, and editing basic data in tables. </li><li>Strong communication and presentation skills.</li><li>Self-motivated personality with the ability to bring new ideas/improvements.</li></ul>

<h5>WHAT WE BRING YOU</h5>
<ul><li>Work/life balance - we have a shorter workweek (37.5 hours/week), the option to work in a hybrid mode, 5 weeks of vacation, 5 sick/volunteering days, and flexible working hours.</li><li>Working onsite or partially from home.</li><li>Friendly company culture - yeah, claiming that we are one big family is a cliché, but we like to experience stuff together, be it football, bike rides, board games, or a simple beer at the pub while eagerly discussing local politics. Our HR loves planning events such as company-wide grill parties or humbler occasions like Easter green beer gathering.</li><li>Other benefits you would expect from such a company - free snacks, drinks, vegetables/fruits, relax zone with workout equipment and videogames, a small library, back massages, or an employee referral program.</li><li>A transparent work environment with open communication where all teams work towards common objectives.</li></ul>

If this role could be a fit and you would like to know more, please send us your CV or LinkedIn profile and we will revert shortly to schedule a short call to get to know each other. Or you can also connect with us at <a href="mailto:jobs@safetica.com" rel="noopener noreferrer nofollow ugc" target="_blank">jobs@safetica.com</a>.

Technical Consultant for an expanding data security company

DAZN

DAZN’s Public Watch Party is a platform that allows fans to chat and interact with one another about what they’re seeing as they see it. By embedding live chat into our premium livestreamed content, DAZN’s Public Watch Party creates real-time connectivity at a large scale. For the first time, DAZN fans in the same region can not only watch sports together, but also communicate with one another – allowing for an even better social experience. Our moderators are engaged in text-based online chats, with DAZN customer while they are watching sport events. Your objective is to stimulate conversations and create an engaging and completing experience for customers to be active and come back again and again to Public Watch Parties, whilst making sure that the interactions between the consumers is respectful and according to the standards of DAZN. Chat moderators working at DAZN utilize their language skills, Sports knowhow and the watch party tools to spice up the sport event and create a new experience allowing the customer to take an active part while watching.  This role will be based remotely in either Italy or Germany<h3>As our new Public watch party Moderator, you’ll have the opportunity to:</h3><ul><ul><li>Sync with the editorial teams and DAZN commentators about the specific insights of the event preparing topics for discussion and engagement.</li><li>Prepare relevant Polls, Quizzes, and relevant Gifs/stickers to activate the participants at key movements.</li><li>You are responsible to ensure that there is a safe and respectful interaction between the participants, and you will utilize your chat skills and the tools to create a fun and exciting party, using the right toolset at the right time.</li><li>Stimulate conversion between the participants in the party.</li><li>Use the tools provided to excite participants about the event and keep them engaged in chat.</li><li>Enrich the experience by adding sports relevant data and clips at the right time.</li><li>Keeping conversations safe, positive, and cohesive by removing and/or blocking abusers.</li><li>Deleting inappropriate messages.</li><li>Review and react to reports made by participants in the party of inappropriate activities.</li><li>Put participants on timeout when/if necessary.</li></ul></ul><h3>You’ll have:</h3><ul><ul><li>Active social account as a contributor.</li><li>Sports savvy in a specific sports field.</li><li>Sports Journalist/blogger background (big advantage).</li><li>Software/computer Savvy – you are required to operate the moderation management software and DAZN app simultaneously while hosting the Party</li><li>Fluent German speaker -verbal and written.</li><li>Good English.</li></ul></ul>At DAZN, we bring ambition to life. We are innovators, game-changers and pioneers. So, if you want to push boundaries and make an impact, DAZN is the place to be. As part of our team,you'll have the opportunity to make your mark and the power to make change happen. We're doing things no-one has done before, giving fans and customers access to sport anytime, anywhere. We're using world-class technology to transform sports and revolutionise the industry and we're not going to stop.  DAZN VALUES – THE ‘HOW’ IN WHAT WE DO:   AMBITIOUS – people who want to make a big impact and drive DAZN forward.   INVENTIVE – people with bright ideas who deliver great new experiences for our customers – and improvements for our business.  People who come up with better, simpler ways of doing things.  PASSIONATE – people who are proud of our product, our content and our business – and love to shout about it.  People who love what they do and show commitment every day.  BRAVE – people who take difficult decisions to help us focus on improving DAZN, our performance and our results.   SUPPORTIVE – people who know that we achieve more as a team than as individuals.  People value inclusion and look out for each other, helping their colleagues enjoy their work and develop their careers.  People who consider others before making decisions. At DAZN, we are committed to fostering an inclusive environment that values equality and diversity, where everyone can contribute and have their voices heard. This means hiring and developing talent across all races, ethnicities, religions, age groups, sexual orientations, gender identities and abilities. Everyone has the opportunity to make change and impact our DEI journey by joining our ERGs: Proud@DAZN, Women@DAZN, Disability@DAZN and ParentZone. If you’d like to include a cover letter with your application, please feel free to. Please do not feel you need to apply with a photo or disclose any other information that is not related to your professional experience. Our aim is to make our hiring processes as accessible for everyone as possible, including providing adjustments for interviews where we can. We look forward to hearing from you.

Europe

Flexible Options

Public watch party Moderator

Rackspace Technology is a leading provider of expertise and managed services across all the major public and private cloud technologies. We’ve evolved Fanatical Support to encompass the entire customer journey — providing Fanatical Experience™ from first consultation to daily operations. Our passionate experts combine the power of proactive, always-on service and expertise with best-in-class tools and automation to deliver technology when and how our customers need it. As part of our commitment to our customers, we are dedicated to helping enable creative, automation-based solutions for all sizes of businesses and require an experienced Cloud Engineer to join our team. The ideal candidate will have several years’ experience with Google Cloud design and implementation. You will be working in a dynamic environment and encouraged to come up with innovative solutions to technical problems, analyze and prioritize problems, putting users at the heart of every decision. You will ideally have proven experience in multiple GCP deployments. Your engagements will see you working directly with customers and prospects. You will have confidence in knowing your skills (and limitations), you are calm and collected under pressure and always available to mentor the less experienced. Your colleagues see you as a good team player who is keen to share knowledge as well as to listen and learn from others. Work Location: Remote<h3>Key Responsibilities:</h3><ul><ul><li>Own and complete key tasks and deliverables, and collaborate with others to define and implement optimal, complete solutions based on stake holder’s needs. </li><li>Deliver solutions that solve for new levels of complexity, scale, and performance, and in turn, enable breakthrough innovations. Create and apply frameworks, methods, best practices, and artifacts that deliver prescriptive guidance to customers, and publish and present the min large forums and across various media platforms. </li><li>Technical depth and hands-on implementation experience of various practices and tools in the DevOps toolchain. </li><li>Comfortable rolling up their sleeves to design and code modules for infrastructure, application, and processes. </li><li>Design, Build and maintain cloud-based application that uses Google Kubernetes Engine</li></ul></ul><ul><ul><li>Advanced Networking in GCP</li><li>		VPC Peering</li><li>		Shared VPC</li><li>		Subnetting</li><li>		General Firewall</li><li>		Firewall Policies</li><li>Security in GCP</li><li>		VPC Service Controls</li><li>		IAM</li><li>		Service Principals</li><li>		Org Policies</li><li>GCP Private Services</li><li>		Private Google Access</li><li>		Private Service Access</li><li>		Private Service Connect</li><li>In depth understanding of IP networking, VPN's, DNS, load balancing and firewalls. </li><li>GKE and overall compute in GCP, including GCE</li><li>GCP Storage - Spanner, CloudSQL, MemoryStore, GCS, etc.</li><li>Automation and operations in GCP</li><li>7+ years of relevant experience with GCP, Networking, IaC.</li><li>Practical Linux administration skills in a Cloud or Virtualized environment. </li><li>Expert level familiarity with automating cloud native technologies, deploying applications, and provisioning infrastructure. </li><li>Expert Knowledge of the primary Google services (compute engine, load balancing, Cloud Storage) </li><li>Experience with automating cloud native technologies, deploying applications, and provisioning infrastructure. </li><li>Expert level knowledge and Hands-on experience with Infrastructure as Code utilizing Terraform.  </li><li>·Experience developing cloud native CI/CD workflows and tools, such as Jenkins, Bamboo, TeamCity, Cloud Build (Google) and/or GitLab. </li><li>Hands-on experience with microservices and distributed application architecture utilizing containers, Kubernetes, and/or serverless technology. </li><li>Experience with the full software development lifecycle and delivery using Agile practices.</li><li>Experience with multi-cloud architecture and deployment.</li><li>Bachelor’s degree, or equivalent experience, in Computer Science, Engineering. or a related field. </li></ul></ul>For applicants working in California, Colorado, Washington, or New York City, we are excited to share the base salary ranges for this position exclusive of fringe benefits or potential bonus.  The successful candidate’s starting pay will be determined based on job-related skills, experience, qualifications, work location, and market conditions. The anticipated starting pay range of California, Washington state and New York City applicants for this role is $123,600 - 164,800 The anticipated starting pay range of Colorado applicants for this role is $116,100 - $154,800. Unless already included in the posted pay range and based on eligibility, the role may include variable compensation in the form of bonus commissions, or other discretionary payments.  The discretionary payments are based on company and/or individual performance and may change at any time.  Actual compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, licenses and certifications, and specific work location.#LI-VM1#LI-Remote#Rackspace#LI-USA

United States

Dallas

Google Cloud Engineer - Networking Focused

City

Are you looking for a career move that will put you at the heart of a global financial institution?By Joining Citi, you will become part of a global organisation whose mission is to serve as a trusted partner to our clients by responsibly providing financial services that enable growth and economic progress.Team/Role OverviewThe Technology and Cyber Compliance and Operational Risk Office (TCCORO) at Citi is the firm’s reliable second set of eyes. Our mission is to drive comprehensive and consistent practices designed to identify, measure, monitor, report and manage operational and compliance risks while promoting the implementation of actions to address root causes which may lead to unintended operational losses or regulatory breaches. TCCORO provides the specialist subject matter experts to challenge Enterprise, Infrastructure, Operations and Technology entities across the firm. We are the technology and cyber conscience of the bank. In line with the Operational Risk Management (ORM) and Independent Compliance Risk Management (ICRM) frameworks, we aim to ensure that the internal controls that are designed to mitigate technology and cyber risks are managed, mitigated, and aligned with our risk appetite.The Head of Cyber Risk and Compliance – Security Operations reports to The Head of Cyber Risk and Compliance within TCCORO and will provide leadership for Cyber Risk and Compliance – Security Operations team.  This role is accountable for management of complex, critical professional disciplinary areas and will manage multiple teams through other managers. The role is responsible for establishing and executing the functional strategy within their organisation. They will leverage cyber subject matter expertise (particularly security operational processes), business experience, data analysis techniques, current events, and industry trends and best practices to inform the prioritisation of risks and the second-line’s approach for associated challenge and influence activities. This position actively works with our ORM and Compliance partners and other stakeholders to provide subject matter expertise in line with our operational and compliance risk management frameworks.What you’ll doA successful candidate will be a subject matter expert in cyber risk in global financial services, be able to demonstrate a comprehensive understanding of the subject matter and advise stakeholders on the application to related risks. They should have a strong track record in cyber risk management and/or a strong technical background with excellent analytical skills. The ideal candidate will be a strategic, proven leader, strong technically and with security operational experience. They will provide thought leadership, having strong industry engagement, and will be a strong relationship builder that can influence and challenge effectively. The successful candidate will have experience with building and maintaining global teams, providing guidance and mentorship.<ul><li>Manages a staff of risk officers at various levels, with direct accountability for hiring and organisational structure. Has direct oversight for compensation, performance appraisals, staff development, training, etc. Provides input on performance and compensation recommendations for risk officers and utilities that provide risk related services on a matrix basis.</li><li>Accountable for internal projects on threat issues that support a variety of participants and stakeholders measuring the effectiveness and comprehensiveness of Citi’s first line defences.</li><li>Evaluates the design of controls and communicate the impact of control weaknesses to first line teams and control implementers.</li><li>Oversight of the establishment and implementation of compliance and cyber policies and procedures, technology and tools, and governance processes for the coverage domains.</li><li>Governance and oversight of cyber risk while supporting the development of policy and standards; oversight of Key Operational Risks; challenge risk self-assessments and scenario analysis; issue management oversight and escalations.</li><li>Provides leadership to the Second Line influence, advisory and challenge of operational security capability domains including security incident management, fusion centre and cyber threat intelligence.</li><li>Represents TCCORO in various steering committees, working groups and councils relevant to the functional area.</li><li>Actively engaged in the industry on the latest in cyber risk, and emerging operational risks.</li><li>Oversight of planning, and implementation of cyber programs including their governance, identification of risks and controls.</li><li>Implementation of guidance for overseeing cyber operational risks, aligned with The Office of the Comptroller of the Currency (OCC) Heightened Standards and other global regulations.</li><li>Able to present and lead discussions with key regulators, and internal and external auditors.</li><li>Advises on best practices leveraging expertise and industry insights.</li><li>Reviews and challenges coverage area appropriately consider significant operational risk in their Management Control Assessments (MCAs).</li><li>Evaluates the extent to which first line of defence is aligned with internal and external control standards, as well as regulatory and audit requirements.</li><li>Appropriately assesses risk when business decisions are made, demonstrating knowledge for the firm's reputation and safeguarding Citigroup, its clients, and assets, by driving compliance with applicable laws, rules, and regulations, adhering to Policy, and applying sound ethical judgment.</li></ul>What we’ll need from you  <ul><li>Relevant technical experience and experience managing a team of professionals.</li><li>Practical experience managing, assessing or auditing security operations processes and technologies including Security Operations Centre, Security Information and Event Management, Fusion Centre, Incident Response, etc.</li><li>In-depth knowledge of products within the coverage area, including a technical understanding of current and emerging trends as well as the ability to apply in-depth understanding of the business impacts of technical contributions.</li><li>Experience in cyber risk assessments, metrics, enterprise technology services, risks, and controls within globally complex, dispersed, and diverse organisations.</li><li>In-depth knowledge of cyber risks and controls across various information system architecture and engineering domains including: data protection, identity and access management, vulnerability management, network security, endpoint security, logging and monitoring, incident management, and third-party management; preferred expertise in security operations.</li><li>Subject matter expert in one or more industry standard risk management frameworks (including ISO27001, COBIT, TOGAF and CRI for example), and an in-depth understanding of cyber risk mitigation strategies.</li><li>Self-motivated and goal-oriented with the ability to seize the initiative, garner consensus and develop and implement an effective strategy. Demonstrates a high level of analytical rigor in formulating strategies, goals and measuring results.</li><li>Sense of urgency in implementing programs and evaluating priorities; decisive, action-oriented and practical.</li><li>Willingness to challenge and question the status quo, making recommendations for options and best solutions.</li><li>Demonstrated strategic thinking skills. Organisationally astute, with influencing, collaboration and communication skills. Personal presence, intellect, energy and drive to succeed in a high-performance environment.</li><li>Able to analyse and think through highly complex issues, but then appropriately execute and implement against a well thought through framework in a seamless manner. A global citizen who is comfortable in all geographies, regions and cultures.</li><li>Strong leadership, communication, and presentation skills including the ability to adapt his/her style to suit the different needs of any audience.</li><li>Bachelor’s/University degree, Master’s degree preferred</li><li>Relevant certifications (in CISM, CRISC, CISSP, etc.) a plus</li></ul>What we can offer youBy joining Citi Solutions Centre Poland, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive base salary (which is annually reviewed) and enjoy a whole host of additional benefits such as:<ul><li>Private Medical Care Programme</li><li>Life Insurance Programme</li><li>Pension Plan contribution (PPE Programme)</li><li>Employee Assistance Programme</li><li>Paid Parental Leave Programme (maternity and paternity leave) </li><li>Sport Card</li><li>Holidays Allowance</li><li>Sport and team recreation activities</li><li>Special offers and discounts for employees</li><li>Access to an array of learning and development resources </li><li>A discretional annual performance related bonus</li><li>A chance to make a difference with various affinity networks and charity initiatives</li></ul>Alongside these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self every day.  We want the best talent around the world to be energised to join us, motivated to stay, and empowered to thrive. Sounds like Citi has everything you need? Then apply to discover the true extent of your capabilities. #LI-JD2------------------------------------------------------Job Family Group: Risk Management------------------------------------------------------Job Family:Operational Risk------------------------------------------------------Time Type:Full time------------------------------------------------------Citi is an equal opportunity and affirmative action employer.Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View the "<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law</a>" poster. View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law Supplement</a>.View the <a href="http://citi.com/citi/diversity/assets/pdf/eeo_aa_policy.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a>.View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Pay Transparency Posting</a>

Cyber Risk Director

Job Description:The Cyber Security Fusion Centre Response &amp; Readiness Senior Analyst is responsible for driving firm-wide effort to prepare, respond and recover from potential cyber threats and attacks. This role ensures the firm is globally prepared to respond to cyber incidents (resulting from a cyber or technology nexus).  This is accomplished through proactive monitoring of emerging incidents, development and execution of cyber incident exercises, and review and maintenance of procedures and runbooks necessary to ensure an orderly response and recovery from cyber events. Incident Analyst operates a virtual war room and incident management function during events to ensure coordination, mitigation, and recovery from events in a timely manner. This role also provides a single source of consolidated information, and subsequent incident communication/notifications, including notifications to our external stakeholders and prudential regulators.We are looking for proactive and curious individuals to join our team to run exercises and activities to put our most senior leaders to the test, with the mission to keep Citi and Citi’s customers safe!Responsibilities:·       Facilitate the coordination, communication and escalation response of major cyber incidents impacting our businesses, 3rd parties, vendors and clients.·       Serve as a liaison between the CISO, Business and 3rd Party oversight teams, promoting rapid escalation of cyber events and translating cyber technical details into laymen’s terms.·       Executes under crisis conditions regardless of the seniority of the audience, with a sense of urgency and mission.·       Monitor information sources, including, but not limited to – SIRTS, intelligence updates, major incident channels (ServiceNow), and external news sources – to triage and assess events that may impact Citi, our clients or 3rd parties.·       Leads design, planning, coordination and execution of global cyber incident exercises.·       Engages country leadership, global business leaders and internal functional teams to assess requirements and identify opportunities to incorporate innovation and improve exercise scope.·       Analyzes and presents team outcomes to senior leadership, regulatory bodies and internal business stakeholders.·       Supports external exercising activities and client exercise/simulation engagement.Job Skills/Qualifications:·       Extensive of relevant experience with a focus on senior stakeholder engagement experience and Team leadership experience in leading exercise.·       Proven leadership Experience in Financial Services a positive·       Incident/Crisis management experience including: Ownership, Assessment and initial support, Escalation/Notification, Business Impact Analysis, Resolution Tracking, Senior escalations·       Experience in exercise design, planning and execution.·       Excellent written and verbal communication skills required to influence and negotiate with senior leaders across functions (including experience in communications with external parties)·       Understanding of Project Management Standards and Stakeholder Management·       Desired professional qualifications: ISC2 Certified in Cybersecurity, Comptia Security+Education: Bachelor’s degree/University degree or equivalent experience------------------------------------------------------Job Family Group: Technology------------------------------------------------------Job Family:Information Security------------------------------------------------------Time Type:Full time------------------------------------------------------Citi is an equal opportunity and affirmative action employer.Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View the "<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law</a>" poster. View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law Supplement</a>.View the <a href="http://citi.com/citi/diversity/assets/pdf/eeo_aa_policy.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a>.View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Pay Transparency Posting</a>

Cyber Security Fusion Center Response & Readiness Senior Analyst

Huntress

Reports To: Manager, Security Operations Center, UK
Location: Remote UK; one weekend shift a week required; flexibility between Saturday or Sunday
Compensation Range: £55,000 to £65,000 base <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a>, plus bonus and equity 

What We Do:
Founded in 2015 as a fully remote company by former NSA cyber operators, Huntress was built on a simple premise: to force hackers to earn every inch of their access. 
Today’s cyber-attacks aren’t limited to large organizations with the security tools that can ward off threats. Hackers don't discriminate and will find a way to penetrate any vulnerability in any size business, which is why Huntress focuses on protecting those small to midsize businesses that make up the backbone of our economy.
Huntress stops hidden threats that sneak past preventive security tools by utilizing our award-winning security platform and expert human threat hunters through dynamic products, including Managed EDR, MDR for Microsoft 365, and Managed Security Awareness Training.
Join the hunt and help us stop hackers in their tracks!
What You’ll Do:
The Huntress Security Operations Center is an elite team of individuals who wake up every day to combat threat actors. In this role, you will get to triage, investigate, respond, and remediate intrusions on a daily basis. You’ll be surrounded by passionate individuals who are mission-driven to help protect companies around the world from cyber-attacks.You will get daily opportunities to progress your analysis skills while being at the forefront of what’s happening in the wild. If you’re looking to accelerate your career and skills, this is the team for you!
Responsibilities:
<ul>
<li>Triage, investigate, and respond to alerts coming from the Huntress platform</li>
<li>Perform tactical forensic analysis to determine the root cause of attacks where possible and provide remediations needed to remove the threat</li>
<li>Perform entry-level malware analysis as part of investigating systems and identities</li>
<li>Investigate suspicious Microsoft M365 activity and provide remediations</li>
<li>Assist in escalations from the product support team for threat-related and SOC-relevant questions</li>
<li>Contribute to detection efforts. Helping to create or request net new detections as well as tuning detections</li>
<li>Contribute to our collaboratively mentored team (we're all here to make each other better!) </li>
</ul>
What You Bring To The Team:  
<ul>
<li>2+ years experience in a SOC or Digital Forensics (DFIR) role</li>
<li>Understanding of Malware Analysis (Configuration of isolated Malware Analysis VM, Identification of File Formats, Basic Static &amp; Dynamic analysis)</li>
<li>Competent command of digital forensic concepts, tools, and telemetries</li>
<li>Demonstrated experience and understanding of Threat Actor Tools and techniques. </li>
<ul>
<li>Particularly persistence, lateral movement, remote access, and command-and-control </li>
</ul>
<li>Demonstrated experience with Windows Administration or Enterprise Domain Administration and upkeep (Active Directory, Group Policy, PowerShell, Windows Server Update Service, and Domain Trusts)</li>
<li>Network Administration Skills: (Network Protocols and ports, OSI Layers, Network Segmentation techniques such as VLANs, Network Address Translation, Public and private IP Addresses, Default Gateways, Subnet Masks, IP Address assignment, DNS, Firewalls, IDS, Load Balancers, and Proxy Servers, Remote Access Methods such as VPNs, RDP, SSH, VNC, and Telnet)</li>
<li>The ability to explain possible complex alerts/events in a non-complex way and mentor other analysts to grow the team</li>
</ul>
Preferred Qualifications:
<ul>
<li>Experience with scripting languages (such as PowerShell, Python, Bash, PHP, JavaScript, or Ruby)</li>
<li>Demonstrated experience on platforms such as HackTheBox, TryHackMe, Blue Team Labs Online, etc. </li>
<li>Experience with Cloud-based investigations such as M365, Azure, AWS, GCP, etc.</li>
<li>Participation in cybersecurity competitions such as Capture the Flags, the Collegiate Cyber Defense Competition, etc.</li>
<li>Familiarity with MSP tools such as RMMs</li>
</ul>
<ul>
<li>Previous experience in an MSP/MSSP/MDR role </li>
</ul>
What We Offer:
<ul>
<li>100% remote work environment - since our founding in 2015</li>
<li>New starter home office set up reimbursement (£392)</li>
<li>Generous personal leave entitlements</li>
<li>Digital monthly reimbursement (£91)</li>
<li>Travel to the US 1-2 times/year for various company events</li>
<li>Pension</li>
<li>Access to both Udemy and BetterUp platforms for coaching, personal, and professional growth</li>
</ul>

Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to show up to work every day as their full self. 
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. 
We do discriminate against hackers who try to exploit small businesses.
Accommodations:
If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or participating in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com. Please note that non-accommodation requests to this inbox will not receive a response.  
If you have questions about your personal data privacy at Huntress, please visit our <a href="https://support.huntress.io/hc/en-us/articles/14695525600915-Candidate-Privacy-Notice" rel="noopener noreferrer nofollow ugc" target="_blank">privacy page</a>.
#BI-Remote

Security Operations Center Analyst - UK

Job Profile  : Data Engineer III – IN Job Description SummaryThe Data engineer is responsible for managing and operating upon Azure Data Lake Storage, Databricks, Azure Data Factory, Synapse, Snowflake, Azure event hub, Tidal, Pyramid, Collibra, PowerBI, Tableau, MSTR, Alteryx. The engineer will work closely with the customer and team to manage and operate cloud data platform.  Job Description ·       Provides Level 3 operational support covering: ·       Resolving pipeline issues / Proactive monitoring for sensitive batches  / RCA and retrospection of issues ·       Create/update runbooks as needed / Entitlements  ·       Configuration changes to batches and infrastructure (cloud platform) ·       Manually controlling the pipeline runs due to scheduled maintenance.  ·       On-demand changes as based on steps given by the data engineering team.  ·       Handle user requests – if the request is not runbook-based coordinate with the L3 team ·       DR testing – twice a year / Dev and Prod data sync  / Weekly change board representation  KNOWLEDGE/SKILLS/ABILITY:Good hands on Azure Data Lake Storage, Databricks, Azure Data Factory, Synapse, Snowflake, Azure event hub, Tidal, Pyramid, Collibra, PowerBI, Tableau, MSTR, Alteryx. Ability to read and write sql and stored procedures. Good hands on experience in configuring, managing and troubleshooting along with general analytical and problem solving skills. Excellent written and verbal communication skills. Ability to communicate technical info and ideas so others will understand. Ability to successfully work and promote inclusiveness in small groups.  JOBCOMPLEXITY:  This role requires extensive problem solving skills and the ability to research an issue, determine the root cause, and implement the resolution; research of various sources such as microsoft documentation that may be required to identify and resolve issues. Must have the ability to prioritize issues and multi-task. SUPERVISION:  Works under moderate supervision. EXPERIENCE/EDUCATION: Requires a Bachelor’s degree in computer science or other related field plus 6+ years of hands-on experience in configuring and mangaing azure data analytics solution.  Experience with Azure environment is desired. PHYSICAL DEMANDS: General office environment. No special physical demands required. Schedule flexibility to include working a weekend day regularly and holidays as required by the business for 24/7 operations.  Occasional travel, less than 10%. POLICY COMPLIANCE: Responsible for adhering to company security policies and procedures and any other relevant policies and standards

Job Opportunity : Data Engineer II/III

Acronis

Acronis is a world leader in cyber protection—empowering people by providing them with cutting-edge technology that enables them to monitor, control, and protect the data that their businesses and lives depend on.
As the Sports Partnership Manager, you will manage #TeamUp partnerships and associated sports events. The Sports Partnership Manager will work alongside the managed service providers (MSP) to supervise and help them activate their sports marketing rights. 
WHAT YOU'LL DO

<ul>
<li>Develop working relationships with #TeamUp MSPs and Sports Teams under persons control</li>
<li>Advise and help MSP’s negotiate and plan the use of rights to deliver on set marketing objectives</li>
<li>Lead regular cadence calls with Sports Teams and #TeamUP MSPs</li>
<li>Content Approvals with sports team and Acronis brand team.</li>
<li>Advise and train #TeamUP MSP on how to use sports rights</li>
<li>MSP focused marketing. Region-specific #TeamUp Partnerships</li>
<li>Onboard and activate multiple partnership simultaneously</li>
<li>Work with MSPs to develop a marketing plan in line with Acronis sports marketing plan</li>
<li>Work closely with partner marketing managers and partner account managers in EMEA who work alongside the same MSPs – aligning goals</li>
<li>Advise and help MSPs negotiate and plan the use of rights to deliver on set marketing objectives</li>
<li>Be completely involved in the region – work day to day with sales and marketing to ensure all #TeamUp MSPs are working towards shared goals</li>
<li>Management of sport event activations and logistics – both gameday and non-gameday, driving maximum ROI for both Acronis and partners (MSPs and distributors)</li>
<li>Be embedded in the EMEA region– joining, contributing and reporting on all regional meetings matters related to sports</li>
<li>Proactive management of Acronis sports tickets. Work closely with GM to ensure they drive the most lucrative opportunities.</li>
<li>Help support sports events e.g. liaising with sports team to book event space and make introductions to the key personal to allow RMM or Events team to manage.</li>
<li>Proactively manage the MSPs with sports partnerships and be seen as the ‘Trusted Advisor’ and expert on maximizing the usage of sport rights for the MSP.</li>
<li>Review rights package of sports team proposals to ensure maximizing cash investment based on experience and suggesting any new rights offering that would be more tailored to MSP objectives e.g. B2B events</li>
</ul>
WHAT YOU BRING (EXPERIENCE &amp; QUALIFICATIONS)

<ul>
<li>Excellent project management and organizational skills</li>
<li>Proactive approach to account management</li>
<li>3 year+ experience within sports team or marketing activations previously.</li>
<li>Team Player</li>
<li>Take ownership for their division of work</li>
<li>Strives to make improvements and adaptations to process and adds value to MSP and Sports conversations.</li>
<li>Proven track record working with senior stakeholders both internally and externally</li>
<li>Keen eye for branding details</li>
<li>Excellent interpersonal and communication skills</li>
<li>Ability to solve problems both logically and creatively</li>
<li>Ability to adapt to different cultures</li>
<li>Efficient time management</li>
<li>Strong attention to detail</li>
<li>Experience working with sports legends and celebrities</li>
<li>Experience reviewing contracts</li>
<li>Experience of working on / managing events including hotel blocks, transportation, and large private dinners</li>
<li>Process and ROI driven</li>
<li>Experience working with PR / media</li>
<li>Experience working with or in IT / Tech preferred</li>
<li>Fluent English (other languages would be considered an advantage)</li>
<li>Ability to travel up to 30% of the time</li>
</ul>

WHO WE ARE
Acronis is revolutionizing cyber protection by unifying backup, disaster recovery, storage, next-generation anti-malware, and protection management into one solution. This all-in-one integration removes the complexity and risks associated with non-integrated solutions and offers easy, complete and reliable data protection for all workloads, applications, and systems across any environment—all at a low and predictable cost.
Founded in Singapore in 2003 and incorporated in Switzerland in 2008, Acronis now has more than 2,000 employees and offices in 34 locations worldwide. Its solutions are trusted by more than 5.5 million home users and 500,000 companies, and top-tier professional sports teams. Acronis products are available through over 50,000 partners and service providers in over 150 countries and 26 languages.
Our corporate culture is focused on making a positive impact on the lives of each employee and the communities in which we live. Mutual trust, respect, personal achievement, individual leadership, and a belief that we can contribute to the world everyday are the cornerstones of the Acronis Team.
Acronis is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, marital status, national origin, physical or mental disability, medical condition, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, gender identity or expression, or any other characteristic protected by applicable laws, regulations and ordinances.
#LI-VB1

London

Sports Partnership Manager

About the Team: 
The Security team at STR is comprised of highly skilled professionals who are responsible for maintaining compliance IAW with Government protocol and directives.   
The Classified Cybersecurity (CCS) team consists of a collaborative group of ISSM’s, ISSO’s, and ISSE’s who are passionate about national security that take great pride in maintaining confidentiality, integrity, and availability of our systems.   
The Role: 
STR has an exciting opportunity for an ISSM that will be responsible for classified programs Cybersecurity/Risk Management Framework (RMF) posture in accordance with government directives and program requirements.   
In this dynamic position you will interface directly with the government cognizant security agency (CSA) and collaborate with other Cybersecurity professionals, Security professionals, System Administrators, engineering community, and other government customers on overall compliance and configuration change management. 
Please note…this is not a remote and/or hybrid role and a requires you to be onsite. 
What you will Do: 
<ul>
<li>Responsible for the Cybersecurity program as stipulated by various US Government requirements including (but not limited to): Joint Special Access Implementation Guide (JSIG), National Industrial Security Operating Manual (NISPOM), and the DCSA Assessment and Authorization Process Manual (DAAPM) </li>
<li>Supervisor and Team Lead for assigned Cybersecurity staff supporting accredited networks </li>
<li>Monitor cybersecurity compliance by performing periodic self-inspections, tests, and reviews of information systems to ensure that workstations/servers are operating as authorized/accredited </li>
<li>Coordinate with program/project stakeholders, Cybersecurity staff (other ISSM’s, ISSO’s, ISSE’s), the Facility Security Officer (FSO), Contractor Program Security Officer (CPSO), and other Security and IT team members to define, implement and maintain an acceptable information systems security posture </li>
<li>Maintain day-to-day security posture and continuous monitoring of IS including security event log review and analysis </li>
<li>Performs Assessment and Authorization (A&amp;A) activities such as information system certification testing of required configuration controls and preparing/maintaining various documentation including Standard Operating Procedures (SOP), System Security Plan (SSP), Risk Assessment Report (RAR), Security Controls Traceability Matrix (SCTM), etc. </li>
<li>Manages and maintains Continuous Monitoring (ConMon)/Plan of Action and Milestones (POA&amp;M) reports </li>
<li>Responsible for security sustainment activities including (but not limited to): hardware change management, software change management, account management, media protection, user interface, file transfers, etc</li>
<li>Assists the FSO, CPSO and Computer <a href="https://infosec-jobs.com/insights/incident-response-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">Incident Response</a> Team (CIRT) in data spill incident response </li>
<li>Maintain thorough understanding of NIST 800-53 controls, determines controls applicable to the application, and documents control implementation in the SCTM </li>
<li>Perform other tasks as assigned by manager </li>
</ul>
Who you Are:  
<ul>
<li>This position requires an active Top Secret security clearance, with the ability to obtain an SAP and SCI access for which U.S. citizenship is needed by U.S. Government  </li>
<li>Two (2) to four (4) years’ experience as an ISSM implementing DAAPM, JSIG, and/or ICD503 IS requirements </li>
<li>DoD 8570 IAM Level III certification (CISM, CISSP, etc.) or the ability to obtain within 6 months upon being hired </li>
<li>Experience with configuration/certification and auditing/analysis of Windows/Linux operating systems in a Peer-to-peer, LAN &amp; WAN network environment </li>
<li>Familiarity/understanding using authorization/accreditation databases (eMASS, Xacta, etc.) </li>
<li>Excellent communications skills </li>
<li>Demonstrated strong critical thinking and problem-solving skills </li>
<li>Detail oriented and self-motivated </li>
<li>Ability to effectively prioritize multiple projects </li>
<li>Ability to work with people in a team environment and deal effectively with changing project priorities </li>
<li>Strong customer service skills </li>
</ul>STR is a growing technology company with locations near Boston, MA, Arlington, VA, near Dayton, OH, Melbourne, FL, and Carlsbad, CA. We specialize in advanced research and development for defense, intelligence, and national security in: cyber; next generation sensors, radar, sonar, communications, and electronic warfare; and artificial intelligence algorithms and analytics to make sense of the complexity that is exploding around us.
STR is committed to creating a collaborative learning environment that supports deep technical understanding and recognizes the contributions and achievements of all team members. Our work is challenging, and we go home at night knowing that we pushed the envelope of technology and made the world safer.
STR is not just any company. Our people, culture, and attitude along with their unique set of skills, experiences, and perspectives put us on a trajectory to change the world. We can't do it alone, though - we need fellow trailblazers. If you are one, join our team and help to keep our society safe! Visit us at <a href="http://www.str.us/" rel="noopener noreferrer nofollow ugc" target="_blank">www.str.us</a> for more info.
STR is an equal opportunity employer. We are fully dedicated to hiring the most qualified candidate regardless of race, color, religion, sex (including gender identity, sexual orientation and pregnancy), marital status, national origin, age, veteran status, disability, genetic information or any other characteristic protected by federal, state or local laws.
If you need a reasonable accommodation for any portion of the employment process, email us at <a href="mailto:appassist@str.us" rel="noopener noreferrer nofollow ugc" target="_blank">appassist@str.us</a> and provide your contact info.
Pursuant to applicable federal law and regulations, positions at STR require employees to obtain national security clearances and satisfy the requirements for compliance with export control and other applicable laws.

Information Systems Security Manager (ISSM)

Coupang

Company Introduction 
We exist to wow our customers. We know we’re doing the right thing when we hear our customers say, “How did we ever live without Coupang?” Born out of an obsession to make shopping, eating, and living easier than ever, we’re collectively disrupting the multi-billion-dollar e-commerce industry from the ground up. We are one of the fastest-growing e-commerce companies that established an unparalleled reputation for being a dominant and reliable force in South Korean commerce.

We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurial surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At Coupang, you will see yourself, your colleagues, your team, and the company grow every day. 

Our mission to build the future of commerce is real. We push the boundaries of what’s possible to solve problems and break traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world.

Job Overview
The Director of Security Technical Program Management is an interdisciplinary security leadership role in the Security Organization (Information Security, Privacy, Governance, Risk, Compliance).  You will lead the planning, communication, tracking and execution of highly technical security initiatives and transformative programs and projects. You will work closely with the Chief Information Security Officer, Internal Control, Finance, Communications, Compliance and other security and engineering leaders.  

Key Responsibilities
Responsibilities will include, but not be limited to, the following:
<ul>
<li>Manage technical security projects and programs, defining milestones and success criteria, resource allocation, and successful on-time delivery.</li>
<li>Define and lead strategy, tactical planning and execution of multiple technical programs and projects across the Security Organization, and in close collaboration with internal partner organizations and teams.</li>
<li>Work with various product and domain owners to come up with solutions to address security, privacy and compliance issues.</li>
<li>Strengthen Coupang’s overall security posture and culture by acting as the bridge between security, engineering, product, infrastructure and other technical teams, while coordinating high impact security programs and projects.</li>
<li>Standardization and optimization of project reporting.</li>
<li>Enhance our capabilities to protect Coupang, our customers and partners.</li>
</ul>

Basic Qualifications
<ul>
<li>Bachelor’s degree in Computer Science or a related technical discipline.</li>
<li>15+ years of technical program, project or product management and/or software engineering experience.</li>
<li>Proven experience moving large scale technical programs from inception to delivery and articulating progress and impact through clear metrics, analytics and reporting.</li>
<li>Ability to solve problems through creative thinking and partnerships with other teams.</li>
<li>Highly organized and with the ability to multi-task and context switch effectively.</li>
<li>Drive consensus between stakeholders through skilled communication and collaboration.</li>
<li>Skilled communicator with acute active listening abilities.   </li>
</ul>

Preferred Qualifications
<ul>
<li>Exposure to security concepts, problems and solutions</li>
<li>Experience with agile development or methodology, DevOps CI/CD or secure development lifecycle practices</li>
<li>Has worked in a high growth, fast-paced, start-up environment</li>
<li>Led or participated in establishing and running a Project Management Office (PMO)</li>
<li>Certified Project Management Professional (PMP) or Program Management Professional (PgMP), CISSP, CISM, CISA, Cloud certificates</li>
<li>Experience in leading audit and compliance program including PCI-DSS, ISO.</li>
<li>Experience in handling cyber security regulatory matters</li>
</ul>

Recruitment Process &amp; Others
Recruitment Process  
<ul>
<li>Application Review - Phone Interview - Onsite (or Virtual Onsite) Interview – Offer  </li>
<li>The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances.  </li>
<li>Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage.  </li>
</ul>
Details to Consider  
<ul>
<li>This job posting may be closed prior to the stated end date for application if all openings are filled.     </li>
<li>Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process.     </li>
<li>Coupang does not discriminate against disabled applicants or those with veteran status. We are proud to offer equal opportunities for all applicants.  </li>
<li>Job titles and responsibilities may be subject to change depending on the candidate’s overall experience, etc. This will be communicated to the candidate at the appropriate time before the offer. </li>
</ul>
Privacy Notice  
<ul>
<li>Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below.  </li>
<li><a href="https://www.coupang.jobs/en/privacy-policy/" rel="noopener noreferrer nofollow ugc" target="_blank">https://www.coupang.jobs/en/privacy-policy/</a></li>
</ul>

Document Return Policy  
<ul>
<li>This notification is given pursuant to Article 11 (6) of the Fair Hiring Procedure Act.   </li>
<li>A job applicant, who has applied but not been finally selected for a position at Coupang (the “Company”), may request the Company to return his/her hiring documents submitted pursuant to the Fair Hiring Procedure Act.  However, this will not apply where the hiring documents were submitted via the website of the Company or e-mail, or where the job applicant submitted those documents voluntarily without a request from the Company.  In addition, if the hiring documents were destroyed due to a natural disaster or any other reasons not attributable to the Company, such documents will be deemed to have been returned to the job applicant.  </li>
<li>A job applicant who wishes to request the return of his/her hiring documents pursuant to the main sentence of paragraph 2 above should fill out a “Request for Return of Hiring Documents” [Annex Form No. 3 in the Enforcement Rule of the Fair Hiring Procedure Act] and submit the request to the Company (Coupang Recruiting Team, Tower 730, 570 Songpa-daero, Songpa-gu, Seoul). In such case, within fourteen (14) days from the date of identifying the receipt of the request, the Company will send the hiring documents to the job applicant’s designated address via registered mail.  Please be informed that the job applicant is required to pay the postage on the registered mail.  </li>
<li>In preparation for a job applicant’s request for the return of hiring documents pursuant to the main sentence of paragraph 2 above, the Company shall retain the original hiring documents submitted by the job applicant for 180 days from the completion of the recruiting process.  If no request is made until the end of this period, all of his/her hiring documents will be destroyed immediately in accordance with the Personal Information Protection Act. </li>
</ul>

Senior Staff Engineer, Technical Program Management (Information Security)

NiSUS Technologies

<ul> <li>Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction</li> <li>Monitors and analyzes Intrusion Detection Systems (IDS) to identify security issues for remediation</li> <li>Conducts regular audits to ensure that systems are being operated securely, and information systems security policies and procedures are being implemented as defined in security plans</li> <li>Develops, tests, and operates firewalls, intrusion detection systems, enterprise antivirus systems and software deployment tools</li> <li>Researches, evaluates, tests, and implements new security software or devices</li> <li>Implements, enforces, communicates, and develops security policies or plans for data, software applications, hardware, telecommunications, and information systems security education/awareness programs</li> <li>Performs periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system and external Web integrity scans to determine compliance</li> <li>Communicates alerts to agencies regarding intrusions and compromises to their network infrastructure, applications, and operating systems</li> </ul>Requirements<h3>TS/SCI with poly required</h3><ul> <li>4 years of related experience and a Bachelor of Science</li> <li>10 years of additional experience may be substituted for a degree</li> <li>Configuration and Document Management</li> <li>Security Policy</li> <li>Security Vulnerability Scanning Tools</li> <li>System Security Plan (SSP)</li> <li>Ticketing System experience is desired</li> </ul><h3>One of the Following Certifications Required:</h3><ul> <li>A+</li> <li>CCNA Security</li> <li>CND</li> <li>Network+</li> <li>SSCP</li> <li>CySA+</li> <li>GICSP</li> <li>GSEC</li> <li>Security+</li> <li>CASP+</li> <li>CCNP Security</li> <li>CISA</li> <li>CISSP (or Associate)</li> <li>GCED</li> <li>GCIH</li> <li>CCSP</li> </ul>Benefits<li>Health &amp; Life Insurance</li><li> Dental Insurance</li><li> Disability Insurance</li><li> 401K Retirement Plan with Matching</li><li> Tuition Assistance</li><li> Vacation and Sick Leave</li><li> Hiring Bonuses</li><li> Referral Recruitment Program</li>

G230ISSO2 - Mid Level Information System Security Officer - Cleared

Node.Digital

Senior Cyber Security EngineerLocation: Dulles, VAMust have an active Secret Security ClearanceNode is supporting a U.S. Government customer on a large mission-critical development and sustainment program to design, build, deliver, and operate a network operations environment, including introducing new cyber capabilities to address emerging threats.Node is seeking a Senior Cyber Security Engineer to support the design, development, and deployment of advanced cybersecurity capabilities.The Sr Cyber Security Engineer designs, develops, documents, analyzes, tests, integrates, debugs, conducts research, and/or discovers and analyzes security flaws or vulnerabilities in software, networks, systems, and applications. The Senior Cyber Security Engineer ensures system security needs are established and maintained for various objects/matters.Responsibilities:• Identify Security Requirements for systems.• Ensure security requirements are planned, implemented, and tested.• Test and verify requirements are implemented and documented for ATO purposes.• Manage RMF process to obtain and maintain system ATO.• Responsible for reviewing and commenting on security risks and security issues related to any Change Requests, Infrastructure Change Requests, and Configuration Change Requests• Analyze output from various security devices and malware and incident reports to improve detection of and to minimize future incidents.• Assess and analyze system security to identify and mitigate risks and vulnerabilities.• Recommend countermeasures to mitigate risks and vulnerabilities.• Prepare/Update documentation, including incident reports, security recommendations, etc.• Assist in identifying, prioritizing, and coordinating the protection of critical cybersecurity infrastructure and key resources.• Perform basic system design functions, including interpretive analyses, chart preparation, and associated diagrams/enhancement plans.• Test existing and new technologies.• Review/analyze requested changes for equipment, technology, and/or other factors/trends, which are planned for deployment in the customer space.• Support the configuration and administration of cyber security tools and systems.RequirementsRequired Skills:• U.S. Citizenship• Must hold an active Secret clearance and be able to obtain a TS/SCI clearance• Must be able to obtain DHS Suitability• 6+ years of applicable experience in cybersecurity• Experience with commercial cyber tools and technologies• Experience with standard security principles, policies, standards, and industry best practices• Experience and knowledge of networking (TCP/IP, topology, sockets, and security) and web technologies (Internet security)• Experience or knowledge of intrusion detection and prevention systems (IDS/IPS), log analysis, malware analysis, network traffic flow and packet analysisDesired Skills:• Experience in ServiceNow• Experience with AWS Security Hub and Guard Duty• Experience editing /auditing Security Groups, NACLs, or Access-Lists.• Experience or knowledge of Endpoint Protection/Detection/Response and Extended Detection and Response solution• Understanding and ideally experience with Windows or Linux/Unix operating systems.• Experience with Security Event Incident Management (SEIM), Log Correlation, and Network Behavior Anomaly detection systems• Experience and/or familiarity with development languages such as Java, Swing, JUnit, Perl, Python, HTML• Demonstrated experience and/or familiarity with VMware and virtual machines.• Experience with SAFe• Experience with automated testing tools• Experience with one or more of the following:• Security COTS integration• Security Incident Event Management• Insider Threat Monitoring• Operating System hardening tools• Vulnerability assessment testing• Penetration Testing• Dynamic and Static Testing tools operations• Identification and Authentication schemes• Public Key Infrastructure and Identity Management• Cross Domain Solutions• Computer Network Exploitation (CNE)• Computer Network Operations (CNO)• Malware Analysis• Reverse Software Engineering• Ability to write custom tools and modify existing intrusion detection toolsRequired Education:BS Cyber Engineering, Computer Science, Computer Engineering, Computer Information Systems, OR a related field. Two years of related work experience may be substituted for each year of degree-level education.Desired Certifications:• Information Systems Security Engineering Professional (ISSEP)• Certified Ethical Hacker (CEH)• SANS/GIAC Reverse Engineering Malware (GREM)• ArcSight Certified Security Analyst (ACSA) or ArcSight Certified Advance Security Analyst (ACASA)- Certified Information Systems Security Professional (CISSP)Company Overview:Node. Digital is an independent Digital Automation &amp; Cognitive Engineering company that integrates best-of-breed technologies to accelerate business impact.Our Core Values help us in our mission. They include:OUR CORE VALUESIdentifying the~RIGHT PEOPLE~and developing them to their full capabilitiesOur customer’s “Mission” is our “Mission”. Our~MISSION FIRST~approach is designed to keep our customers fully engaged while becoming their trusted partnerWe believe in~SIMPLIFYING~complex problems with a relentless focus on agile delivery excellenceOur mantra is “~Simple*Secure*Speed~” in the delivery of innovative services and solutions.BenefitsWe are proud to offer competitive compensation and benefits packages to include:<ul> <li>Medical</li> <li>Dental</li> <li>Vision</li> <li>Basic Life</li> <li>Long-Term Disability</li> <li>Health Saving Account</li> <li>401K</li> <li>Three weeks of PTO</li> <li>10 Paid Holidays</li> <li>Pre-Approved Online Training</li> </ul>

Senior Cyber Security Engineer

Company Introduction 

We exist to wow our customers. We know we’re doing the right thing when we hear our customers say, “How did we ever live without Coupang?” Born out of an obsession to make shopping, eating, and living easier than ever, we’re collectively disrupting the multi-billion-dollar e-commerce industry from the ground up. We are one of the fastest-growing e-commerce companies that established an unparalleled reputation for being a dominant and reliable force in South Korean commerce.

We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurial surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At Coupang, you will see yourself, your colleagues, your team, and the company grow every day. 

Our mission to build the future of commerce is real. We push the boundaries of what’s possible to solve problems and break traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world.

Job Overview

Coupang’s Identity &amp; Access Management (IAM) Team is responsible for managing the company’s IAM Infrastructure. IAM is responsible for providing a platform that defines and manages the correct access to enterprise assets by the right users in the right context. This is a critical position within the company that requires creative thinking, careful implementation, and the ability to effectively communicate with other teams.
As Identity and Access Management (IAM) Solutions Engineering Director, you will provide strategic direction and leadership to develop and enhance our IAM program with an in-depth knowledge of IAM tools, technologies, processes, and best practices. Your responsibilities will encompass leading the IAM solutions architecture, staying abreast of emerging trends, overseeing day-to-day IAM operations, managing the overall IAM strategic roadmap, executing related activities, and ensuring the appropriate implementation of architecture and design for our IAM technology landscape.
This role will report directly to the Head of Identity and Access Management and act as the senior IAM representative in discussions with both internal and external partners on all matters relating to IAM improvements, enhancements, and efficiency gains as outcomes from the strategy.

Key Responsibilities
Responsibilities will include, but not be limited to, the following:
<ul>
<li>In-depth knowledge of IAM technologies, including access management, access control, access review, privileged access, and identity governance and administration.</li>
<li>Build deep relationships with engineering leaders across the company to drive security risk decisions and influence technical architecture at the earliest time possible.</li>
<li>Provide expertise and leadership in the implementation of identity and access management services, such as role-based access control, frictionless access, and critical system access control.</li>
</ul>
<ul>
<li>Define, manage, and automate (where it makes sense) the end-to-end process for application security design, development, testing and deployment.</li>
<li>Act as a senior level of escalation on any issues and concerns with IAM services.</li>
</ul>

Basic Qualifications
<ul>
<li>Minimum of 10 years architecting, implementing, managing, and supporting IAM solutions</li>
<li>Minimum of 7 years in a leadership role</li>
<li>Expert experience and knowledge of Access Management systems such as Okta, Azure AD, ADFS, Ping, etc.</li>
<li>Expert experience and knowledge of Identity Governance and Administration systems such as Saviynt, SailPoint, etc.</li>
<li>Expert experience and knowledge of Privileged Access Management systems such CyberArk, BeyondTrust, Teleport, AWS SSM, etc.</li>
<li>Proficient knowledge of Dynamic Authorization systems such as Axiomatics, PlainID, etc.</li>
<li>Proficient knowledge of Active Directory, Radiant Logic FID, or a comparable product</li>
<li>Expert knowledge of DevOps/CICD/IAC for IAM and Automation/Orchestration Tools (Ansible, Jenkins, Terraform, etc.)</li>
<li>Deep knowledge on IAM controls, processes and procedures</li>
<li>Exceptional ability to consistently deliver creative, thoughtful and business-orientated results that appropriately balances growth and risk in a fast-paced and high-pressure environment</li>
<li>Ability to adapt easily to rapid and diverse business changes</li>
<li>Strong leadership skills, with the ability to inspire and motivate a team to achieve goals.</li>
<li>Excellent communication skills, both verbal and written, with the ability to articulate complex technical concepts to non-technical stakeholders.</li>
<li>Strong problem-solving skills, with the ability to identify root causes and develop solutions.</li>
</ul>

Preferred Qualifications
<ul>
<li>Okta</li>
<li>Saviynt</li>
<li>PlainID</li>
<li>Radiant Logic FID</li>
<li>Teleport, CyberArk, BeyondTrust Privileged Identity, Netwrix NPS, or a comparable product</li>
<li>Desired certification: CISSP</li>
</ul>

Recruitment Process &amp; Others
Recruitment Process  
<ul>
<li>Application Review - Phone Interview - Onsite (or Virtual Onsite) Interview – Offer  </li>
<li>The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances.  </li>
<li>Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage.  </li>
</ul>
Details to Consider  
<ul>
<li>This job posting may be closed prior to the stated end date for application if all openings are filled.     </li>
<li>Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process.     </li>
<li>Coupang does not discriminate against disabled applicants or those with veteran status. We are proud to offer equal opportunities for all applicants.  </li>
<li>Job titles and responsibilities may be subject to change depending on the candidate’s overall experience, etc. This will be communicated to the candidate at the appropriate time before the offer. </li>
</ul>
Privacy Notice  
<ul>
<li>Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below.  </li>
<li><a href="https://www.coupang.jobs/en/privacy-policy/" rel="noopener noreferrer nofollow ugc" target="_blank">https://www.coupang.jobs/en/privacy-policy/</a></li>
</ul>

Document Return Policy  
<ul>
<li>This notification is given pursuant to Article 11 (6) of the Fair Hiring Procedure Act.   </li>
<li>A job applicant, who has applied but not been finally selected for a position at Coupang (the “Company”), may request the Company to return his/her hiring documents submitted pursuant to the Fair Hiring Procedure Act.  However, this will not apply where the hiring documents were submitted via the website of the Company or e-mail, or where the job applicant submitted those documents voluntarily without a request from the Company.  In addition, if the hiring documents were destroyed due to a natural disaster or any other reasons not attributable to the Company, such documents will be deemed to have been returned to the job applicant.  </li>
<li>A job applicant who wishes to request the return of his/her hiring documents pursuant to the main sentence of paragraph 2 above should fill out a “Request for Return of Hiring Documents” [Annex Form No. 3 in the Enforcement Rule of the Fair Hiring Procedure Act] and submit the request to the Company (Coupang Recruiting Team, Tower 730, 570 Songpa-daero, Songpa-gu, Seoul). In such case, within fourteen (14) days from the date of identifying the receipt of the request, the Company will send the hiring documents to the job applicant’s designated address via registered mail.  Please be informed that the job applicant is required to pay the postage on the registered mail.  </li>
<li>In preparation for a job applicant’s request for the return of hiring documents pursuant to the main sentence of paragraph 2 above, the Company shall retain the original hiring documents submitted by the job applicant for 180 days from the completion of the recruiting process.  If no request is made until the end of this period, all of his/her hiring documents will be destroyed immediately in accordance with the Personal Information Protection Act. </li>
</ul>

Director, Identity and Access Management (Information Security)

EMW, Inc.

Previously proposed candidates were non-compliant for the following reasons: Candidate lacks knowledge of the NCDF concepts and no API design and standardization experience indicated; Candidate lacks knowledge of the NCDF concepts and of the FMN security approach/requirements not indicated Deadline Date: Thursday 23 May 2024Requirement: Specialised Consultants for Security Profile and Interface developmentLocation: OFF-SITE Note: Please refer to your Subcontract Agreement, article 6.4.1.a, which states “Off-Site Discount: 5% (this discount is applicable to all requirements, and applies when the assigned personnel are permitted to work Off-Site, such as at- home)". Please be sure to price this discount in your overall price proposal when submitting bids against off-site RFQsPeriod of Performance: Base period: 24 June 2024 – 31st December 2024 with possibility to exercise 1 (one) one‐year option: 1st January 2025 until 31st December 2025.  Start date is as soon as possible but not later than 24 June 2024Required Security Clearance: NATO SECRET1 INTRODUCTIONThe NATO Communications and Information Agency (NCI Agency) located in The Hague, The Netherlands, is involved in the development of new capabilities for NATO as well as in the support of existing capabilities. In light of these, Command and Control (C2) Service Line have a requirement for subject matter experts to be embedded with a team of NCI Agency staff in support of the Scientific Programme of Work for 2021.2 OBJECTIVESThe main objective of this statement of work are:Support the development and validation of C2 Services Enabling requirements, architectural products and technical specifications;Support the Alliance Federation information sharing concepts, services and specifications; supporting TIDE and CWIX activities and;Providing technical support for C3S activities in the area of identity and access management,  API security, Data Management and Message and Information transformation and standardisation.3 SCOPE OF WORKThe consultant is requested to participate and provide expert support to NCI Agency in the execution of scientific activities advancing the following objectives:ACT Interoperability Standardization (IOS) ‐ Joint C2 Cross‐COI Concepts: Maintenance of standards to support seamless information sharing techniques.ACT Interoperability Standardization (IOS) ‐ Joint C2 Cross‐COI Concepts (NATO Core Data Framework (NCDF) implementation development and support): Assist ACT with the maturing of the NATO Core Data Framework (NCDF), AFSC, Data Centric Security (DCS)This work will further develop and contribute to the definition of Information Sharing Scenarios for Core and C2 Services. This includes knowledge and expertise in Metadata Labelling, Binding, Binding Profiles, Label to Marking mapping, label interoperability cross domain information exchanges including , NATO Common Cross-Community Semantic Reference Model (CXCSRM) , MIP Information Model (MIM), Cross‐Domain Information Sharing (CDIS) solutions and the validation of information sharing Core and C2 Services at various exercise venues such as TIDE Sprint, CWIX and further support may be required for Steadfast Cobalt as added scope to this task.The consultants will work off‐site and regularly coordinate their efforts with the team using the Agile/Sprint procedures already established. This requires both face‐to‐face meetings and remote tele‐ or video‐conferences.The expertise is focused on:‐ requirement elicitation, formalization and validation‐ API design with specific attention to the security aspects‐ System and services architecture design‐ Design, validate, implement and test identity and data management infrastructures and API security.‐ Design, validate, implement and test messages and information transformation and standardization.Other related areas will be the technical input and validation of the NATO Core Metadata Specification (NCMS), NATO Core Data Framework (NCDF) and technical input for the NCDF adoption of the NATO Core Metadata Specification (NCMS), of the data centric security and metadata labelling.This expertise is required to supplement the current level of expertise within the C2 SL so the consultants must be ready to quickly integrate with the current team and take up duties. The work required will be based on submitted Delivery Acceptance Sheets indicating the effort completed for each of deliverables as defined below.A request for available staff has not been successful in this request for consultancy support4 DELIVARABLESThe consultant, directed from the NCIA team and following an agile methodology shall deliver:Deliverable 1 ‐ D001:The architecture for the protection of the NATO Core Data Framework API. The architecture shall adhere to the API security Best Practices, shall be based on the adoption and profiling of the NATO standards and of the Federated Mission Network (FMN) adopted protocols and methodologies. The API architecture shall cover at least the aspects of the user authentication/authorization and the propagation of the user identity to the backend services via the impersonation and/or the delegation approaches.An initial “NCDF API security implementation guide” document to guide the API implementation. It shall contain enough information to guide the implementation of the security services and the configuration of the security infrastructure.This deliverable will be provided in form a single document, the “NCDF API security architecture and implementation guide” containing both the architecture definition and the implementation guide.Deliverable 2 ‐ D002:Shall participate to the design, implementation and test of the secure NCDF Data Lake API for the NCDF Data Lake services.Those activities will be executed using the agile methodologies and the expected deliverables and timeline will be decided at runtime as part of the sprint planning activities.Deliverable 3 (Optional) ‐ D003:May participate to further improvements of the NCDF Data Lake API and of the related NCDF Data Lake services.Those activities will be executed in 2024 and will be using the agile methodologies. The expected deliverables and timeline will be decided at runtime as part of the sprint planning activities.Deliverable 4 (Optional) ‐ D004May participate to further improvements of the NCDF Data Lake API and of the related NCDF Data Lake services.Those activities will be executed in 2025 and will be using the agile methodologies. The expecteddeliverables and timeline will be decided at runtime as part of the sprint planning activities.Optional deliverables D003 and D004 may be exercised at the discretion of NCIA.For the mentioned deliverables, the consultant is expectedTo co‐author with the NCI Agency publications in international conferences and journals contributing to discoveries and advances made during the period of performance.To prepare documentation and make presentations to sponsors and stakeholders throughout the contract period. This may require the consultants to independently represent specific technical areas on behalf of NCI Agency without direct support of Agency staff e.g. TIDE Sprint, CWIX execution.5 PAYMENT MILESTONESAll of the defined deliverables are briefings, reports, designs or specifications with a well‐defined NCI Agency‐specified format.All deliverables are to be peer reviewed within the deliverable cycle. Input and guidance will be provided by NCI Agency in written from or/and during the targeted review meetings.D001: “NCDF API security architecture and implementation guide”Delivery Date: 08 July 2024Payment Milestones: 100% upon completion and acceptance of deliverables.D002:  Participation to the design, implementation and test of the secure NCDF Data Lake APIDelivery Date: 30 September 2024Payment Milestones: 100% upon completion and acceptance of deliverables.D003 (Optional): Up to 10 (Ten) one‐week sprints for additional NCDF Data Lake related development work.  Note that these sprints may be activated in increments (due as agreed, no later than December 2024).Delivery Date: 31 Dec 2024Payment Milestones: Upon completion of each second sprint.D004 (Optional): Up to 16 (sixteen) one‐week sprints for additional NCDF Data Lake related development work. Note that these sprints may be activated in increments (due as agreed, no later than December 2025).Delivery Date: 31 Dec 2025 Payment Milestones: Upon completion of each second sprint.The NCIA team reserves the possibility to exercise a number of options sprints, based on the same deliverable timeframe and cost, at a later time, depending on the project priorities and  requirementsThe payment shall be dependent upon successful acceptance of the Delivery Acceptance Sheet (DAS) – (Annex B) including the EBA Receipt numberPayment will be provided based on these deliveries as indicated in the table Invoices shall be accompanied with a Delivery Acceptance Sheet (Annex B) signed by the Contractor and project authority.6 SCHEDULEThis task order will be active immediately after signing of the contract by both parties.The BASE period of performance is as soon as possible but not later than 24 June 2024 and will end no later than 31st December 2024.If exercised the options, the period of performance is 01st January 2025 to 31st December 2025.7 CONSTRAINTSAll the deliverables provided under this statement of work will be based on NCI Agency templates or agreed with the project point of contact.All code, scripts, documentation, etc. will be stored under configuration management and/or in the provided NCI Agency tools.NATO will retain the intellectual property rights for all products developed in relation to this project.8 SECURITYThe duties of the consultants require a valid NATO SECRET security clearance.The expected classification level of the deliverables is NATO UNCLASSIFIED. However, in some particular circumstances it might be decided that a part of the deliverables will be classified as NATO RESTRICTED.The execution of duties may require the consultants to access information, as well as CIS systems, classified up to NATO SECRET.9 PRACTICAL ARRANGEMENTSService on the contract will be performed off‐site at the consultant’s own office. Office space and computer equipment will be provided at NCI Agency‐NL for access during scheduled visits for the duration of this contract; contractor is responsible for office space and computer equipment at their own facilities.Extraordinary travel (Purchaser Directed Travel) may be required to other NATO or non‐NATO locations as necessary so agility must be maintained.Travel expenses will be reimbursed in accordance with Article 5.5 of AAS+ Framework Contract.Requirements10 QUALIFICATIONS10.1 THE FOLLOWING EXPERTISE AND KNOWLEDGE IS ESSENTIAL FOR THIS REQUIREMENT:<ul> <li>The duties of the consultants require a valid NATO SECRET security clearance.</li> <li>Knowledge of Information Management principles;</li> <li>Knowledge of the Modern Data Architecture. Data Lakes, Hubs &amp; Warehouses concepts and experience in design related system and services architecture;</li> <li>Knowledge of design and implementation of architectures and protocols for distributed and federated systems.</li> <li>Detailed knowledge and experience with Web Service‐specific security standards and products including Security Policy Information File (SPIF), SAML 1.x and 2.0, XACML, WS‐Security, WS‐Trust, OpenId Connect, OAuth 2.0, Microsoft Active Directory Federation Services (ADFS) v3.0, and competing products in this space;</li> <li>Detailed knowledge and experience with Service Oriented Architecture (SOA) implementation concepts including Web Services, SOAP, REST, Publish‐Subscribe, XML and WSDL, as well as Web Services specifications;</li> <li>Knowledge and experience with NATO Core Data Framework (NCDF) concepts, technologies and business cases, standard specifications and related implementations.</li> <li>Ability to independently produce and edit technical documentation and scientific reports in English;</li> <li>Excellent communications skills;</li> <li>Good understanding of the project management methodologies, including PRINCE 2 and Agile/Scrum</li> </ul>10.2 DESIRABLE EXPERTISE:The following expertise and knowledge is desirable for this requirement:<ul> <li>Knowledge of NATO Confidentiality Label Syntax specifications (specifically ADatP‐4774 &amp; 4778), profiles and emerging standards;</li> <li>Knowledge of NATO Metadata Binding Mechanism specifications, profiles and emerging standards, including Metadata Labelling Strategy and the Data Centric Security Strategy;</li> <li>Knowledge of NATO Core Metadata Specification (NCMS), profiles and emerging standards;</li> <li>Knowledge of the NATO C3 Policies, including the Data Management Policy</li> <li>knowledge of methods and mechanisms to resolve security label translation/mapping between NATO and NATO national systems;</li> <li>Knowledge and experience with Standards Transformation Framework (STF) concepts, technologies, business cases.</li> <li>Expertise in security labelling and object level protection solutions;</li> <li>Expertise in secure communication and API security.</li> <li>Familiarity with NATO organisational and political structures (especially NHQC3S, ACT HQ and NCI Agency) and relationships with NATO and Partner nations;</li> </ul>

2024-0086 Specialised Consultants for Security Development (NS) - THU 23 May

About CoalfireCoalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Denver, Colorado with offices across the U.S. and U.K., and we support clients around the world.  But that’s not who we are – that’s just what we do. We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.   And we’re growing fast. We are looking for a Consultant to join Coalfire's Cyber Risk Advisory team.Job SummaryAs a Consultant on our Cyber Risk Advisory team, you will work as part of a team assessing the security, privacy and risk of client firms to best provide advice on cybersecurity programs, industry requirements and standards, and support remediation activities. You will have a strong understanding of framework requirements, and the ability to perform assessments and lead interviews and will be responsible for developing plans, policies, and reports for clients.  You will work closely with Project Managers, Directors and other Delivery team members to effectively manage project timelines and deliverables.    
<h3>What You'll Do</h3>
<ul>
<li>Support and guide information risk and security discussions with technical and non-technical groups</li><li>Identify enterprise information security, privacy and compliance related problems and challenges; research and develop technical solutions to rectify them</li><li>Participate in design and operationalization of tactical response and recovery activities in the event of an information security breach</li><li>Provide guidance on the administration and maintenance of security systems infrastructure, applications, devices, tools and software services</li><li>Perform information risk, security and related compliance assessments, including testing of related controls</li><li>Develop and operationalize enterprise information security programs and related components</li><li>Assess cyber-related policy, procedures, legislation, and implementation directives</li><li>Assess and remediate compliance with industry regulations and frameworks across multiple industries that are relevant to cybersecurity (e.g. NIST CSF, PCI, SOX 404, HIPAA, ISO, FEDRAMP, GLB, CCPA, GDPR)</li></ul>
<h3>What You'll Bring</h3>
<ul>
<li>At least 2 (2+) years working experience in cyber security, GRC, and cyber related risk management</li><li>Knowledge and awareness of the latest information risk, security and privacy innovations, trends, challenges and solutions</li><li>Exposure to industry acclaimed information governance, risk and security standards/frameworks and professional practices (NIST, ISO, CIS Critical Security Controls, ISSA, etc.)</li><li>Knowledge of the typical enterprise risk and security operational practices</li><li>Knowledge of information security related solutions, tools and utilities</li><li>Bachelor’s degree in Business Administration, Computer Science, Information Systems, Engineering or related field, or equivalent combination of education and experience</li></ul>
<h3>Bonus Points</h3>
<ul>
<li>CISM, CCSK, CIPP, CISA, CGEIT, or CRISC certification(s)</li><li>Consulting experience or security experience in an industry segment (finance, healthcare, energy, technology, etc.) </li><li>Cyber <a href="https://infosec-jobs.com/insights/incident-response-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">Incident Response</a> Experience</li><li>AWS, Azure, Google Cloud Platform certification(s) and experience</li></ul>Why You'll Want to Join UsAt Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.At Coalfire, equal opportunity and pay equity is integral to the way we do business. A reasonable estimate of the compensation range for this role is $64,000 to $112,00 based on national <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> averages. The actual salary offer to the successful candidate will be based on job-related education, geographic location, training, licensure and certifications and other factors. You may also be eligible to participate in annual incentive, commission, and/or recognition programs. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.#LI-JM3<a href="https://infosec-jobs.com/remote-jobs/" rel="noopener noreferrer nofollow ugc" target="_blank">#LI-Remote</a>

Consultant, Cyber Risk Advisory | Remote US

Ardent MC

Why do you need to choose between doing important work and having a fulfilling life? At Ardent, we have both. Ardent employees are committed to solving our customers’ most difficult problems—and we are committed to the well-being, personal goals, and professional development of our employee. We are “All In.” We put forth our strongest effort possible to get the mission accomplished and we do it together. We respect the skills and experience you bring to the Ardent team. And we provide a rewarding environment to help you succeed. 
We offer highly competitive benefits, professional development opportunities, and an exceptional culture that embraces flexibility, innovation, collaboration, and career growth. A collective service mindset underpins our work, and a shared camaraderie to serve clients, colleagues and our communities set us apart. Our full commitment to being "All In" for our employees and our clients is not just our approach, it is our standard. If this sounds like the perfect fit for you, choose Ardent and make a difference with us. 
Ardent is seeking a <a href="https://infosec-jobs.com/insights/devsecops-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">DevSecOps</a> Engineer to join our team.  
This is a remote position. 
Position Description:
Ardent and its partners are seeking a DevSecOps Engineer. Your responsibilities encompass integrating security practices seamlessly throughout the development and deployment processes. Your focus will be around automating security measures, ensuring they're ingrained in continuous integration, delivery, and deployment pipelines. 
Requirements
· The DevOps Engineer requires minimum of 7 years of programming experience. Includes 3+ years of experience in working within software engineer team who leveraged DevOps with development o Includes 3+ years of experience in at least two of the following fields in information security, computer or information science or related fields
· Experience using a wide variety of open source and COTS technologies and tools
· Experience in providing Analysis of Alternatives for tools and capabilities from various on premise, Cloud-based, and hybrid resources
· Experience in managing a Platform-as-a-Service environment (i.e., create blueprints, provision, maintain, upgrade and track inventory)
· Solid understanding of and experience implementing and integrating CI/CD Tools from the ground up, such as Atlassian (JIRA and Confluence), Github, Jenkins, Ansible, Artifactory, Docker, Kubernetes, Selenium, SonarQube, Gatling, JMeter, JUnit, AMP, aChecker, Jaws, Netsparker, OWASP ZAP, Tenable Nessus, Splunk, Prometheus, CloudWatch, New Relic, Grafana. Includes experience with Docker containerized application deployment and monitoring, cluster management
· Strong background working in an agile development environment, collaborating with Application Development and Architecture Teams
· Experience with service-oriented architecture, web services, Application Programming Interfaces
· Experience working in a High Availability environment with 99.99%+ uptime
· Strong background in Amazon Web Service (AWS), Azure and Google <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a>, MySQL, PostgreSQL, MongoDB Apache, NGINX, PHP
· Comfortable writing deployment scripts in languages such as Python, Shell, AWS Cloud Formation, Groovy, and Golang
· Experience with systems and IT operations
· Comfort with automated, frequent, incremental code testing and deployment as part of a set of mature DevOps practices
· Strong grasp of automation tools (e.g., Cloudwatch, Lamdba, GitOps, Cloud Formation, Terraform, etc.,)
· A strong focus on achieving value for business objectives
· Comfort with collaboration, open communication and reaching across functional borders
· Strong analytical, communication, and decision-making skills. Proficiency in a variety of computer programs and applications including VMWare, Windows, Linux, Oracle and Solaris.
· BA or BS degree in Science, Technology, Engineering, or Mathematics
Qualifications
· BA/BS in related fields (Computer Science, Software Engineering, or Business Management preferred).
· Expert knowledge of the underlying concepts of Branching, Merging, and Archiving software throughout the development lifecycle
· Minimum of five (5) years of relevant professional experience
· Proven experience managing system changes without interruption to the user
· Familiarity with Continuous Integration tools such as source control (GIT preferred), build (Maven), and automation (Jenkins)
· Understanding of the Agile SDLC and how DevOps play a role in it
· Good communication skills
Due to the nature of the work we support, all candidates in consideration for this role must be U.S. Citizens willing to undergo the government issued background investigation process.

DevSecOps Engineer - U.S. Citizenship Required

The leading job board for Cyber Security Jobs. Start your career in Information Security Industry. Jobs are updated daily.

Job Position and Company	Location	Tags	Posted
Security Analyst (f/m/d) at Contentful	Remote Full Time Analyst Incident Response Windows
Software Development Engineer, AWS Security SecDevOps at Amazon.com	Full Time Internship
Senior Consultant, Application Security Penetration Tester \| Remote US at Coalfire	Remote Full Time Consultant Consulting Application Security
Application Support Engineer IV - IN (SiteCore) (Night Shift-Remote) at Rackspace	Remote Full Time Javascript
Technical Consultant for an expanding data security company at Safetica	Full Time Consultant Windows
Public watch party Moderator at DAZN	Remote
Google Cloud Engineer - Networking Focused at Rackspace	Remote Full Time
Cyber Risk Director at City	Full Time CISM Audit Incident Response
Cyber Security Fusion Center Response & Readiness Senior Analyst at City	Full Time CISO Comptia Analyst
Security Operations Center Analyst - UK at Huntress	Remote Full Time Blue Team Forensic Entry Level
Job Opportunity : Data Engineer II/III at Rackspace	Remote Full Time
Sports Partnership Manager at Acronis	Remote Full Time Manager
Information Systems Security Manager (ISSM) at STR	Remote Full Time CISM Manager Incident Response
Senior Staff Engineer, Technical Program Management (Information Security) at Coupang	Full Time CISM Audit Chief
G230ISSO2 - Mid Level Information System Security Officer - Cleared at NiSUS Technologies	Full Time CCSP
Senior Cyber Security Engineer at Node.Digital	Full Time Ethical Hacker Analyst Windows
Director, Identity and Access Management (Information Security) at Coupang	Full Time Application Security
2024-0086 Specialised Consultants for Security Development (NS) - THU 23 May at EMW, Inc.	Remote Consultant Contract
Consultant, Cyber Risk Advisory \| Remote US at Coalfire	Remote Full Time CISM Consultant Incident Response
DevSecOps Engineer - U.S. Citizenship Required at Ardent MC	Remote Full Time Windows Devsecops

Cyber Security Jobs

387 Cyber Security Jobs. Page 1 of 20

Subscribe to the weekly
Cyber Security Jobs Newsletter