CareRev

CareRev is bringing the future of work to Healthcare! CareRev's mission is to build a sustainable future for healthcare professionals. CareRev is a modern marketplace platform offering professionals the freedom to choose how and when they work, tools and training to develop their careers, and personalized growth opportunities.We are growing our security team at CareRev! As a key member of the security team, you'll collaborate across the organization streamlining procurement and vendor risk management to build awareness, understanding, and mitigation of risk while building trust with cross-divisional stakeholders. You will work within the security team and facilitate discussions with third party vendors, enhance processes and controls for new vendor procurement, and draft materials for reporting to leadership and management committees.
You will also work with the security and broader engineering team to lead, create, and document scalable processes for risk assessment and decision making, additionally supporting CareRev’s own internal and external security documentation. You will be an instrumental contributor and leader in building a scalable security program for our growing organization. Depending on the skills and interest of the successful candidate, this role has the opportunity to grow additional cybersecurity skills sets as we continue developing our security team.
What We're Looking for
While you should have many of these skills, not all are required.
<ul>
<li>Able to communicate relevant information clearly and concisely, both verbally and in writing</li>
<li>Experience in 3rd party management, audit, oversight, internal controls, operational risk management and mitigation</li>
<li>Independent judgment with strong analytical and risk assessment skills</li>
<li>Proven track record of building effective working relationships with internal and external business partners and senior leaders</li>
<li>Project management skills with ability to work independently and with a team, prioritize and manage multiple projects and succeed in a fast-paced, heavy workload environment</li>
<li>Demonstrated success in introducing process improvements and automation for security / operational risk management teams</li>
<li>Knowledge of relevant information security control frameworks, such as ISO 27002, SOC 2 Trust Services Criteria, PCI DSS, NIST Cyber Security Framework (CSF) / 800-53, CIS Critical Security Controls</li>
<li>A critical problem solver, detailed oriented, and highly motivated self-starter with a passion for constant learning &amp; improvement</li>
<li>A bias for action and ability to work efficiently with minimal oversight/direction and collaborate effectively in cross functional projects</li>
<li>Experience and interest in other aspects/bodies of cybersecurity work (e.g. vulnerability management, cloud security) a plus</li>
<li>Knowledge of/familiarity with AWS, Heroku, and kubernetes are all a plus</li>
<li>Certifications are not required, but CompTIA Security+, CASP+, CISM, or PMP could be helpful</li>
<li>Programming background is plus</li>
</ul>
What you’ll do:
<ul>
<li>Assess the security posture of 3rd parties as a part of the onboarding process for new tools and services (organization-wide) with a view on technology and security risk</li>
<li>Oversee, monitor, assess, and report on third-party risk</li>
<li>Lead/create and maintain security process documentation (e.g. documenting organizational standards for risk decision making)</li>
<li>Review and maintain security policy documents in preparation for annual audits</li>
<li>Provide consultative support and collaborate with business partners and external stakeholders to identify enhancement opportunities to strengthen third party management processes and controls</li>
<li>Communicate efficiently about risk review results to concerning businesses and key partners as per plan</li>
<li>Continuously iterate on improvement opportunities to optimize GRC processes across the organization and relevant stakeholders to maximize efficiency and scalability</li>
<li>Execute ad-hoc projects as needed (we’re working as a team for each one of us to grow and develop our skills in areas of interest and company need)</li>
</ul>Reasons to Consider Us:
<ul>
<li>100% remote company</li>
<li>Comprehensive medical, dental, and vision benefits</li>
<li>Short term disability 100% covered by CareRev</li>
<li>Life insurance covered by CareRev</li>
<li>Paid parental leave</li>
<li>Generous paid holidays &amp; unlimited PTO</li>
<li>401K and company match</li>
<li>Office equipment stipend</li>
<li>Learning reimbursement program</li>
</ul>
Physical Requirements: 
<ul>
<li>Prolonged periods of sitting and/or standing at a desk</li>
<li>Prolonged periods of working on a computer</li>
<li>Repeating motions that may include the wrists, hands and/or fingers</li>
<li>Ability to lift up to 15 pounds of work equipment</li>
<li>Ability to set up home office to include desk and chair</li>
</ul>
CareRev is committed to the full inclusion of all qualified individuals. In keeping with our commitment, we will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please discuss with your Recruiter.
We are an equal opportunity employer and will not discriminate against any employee or applicant for employment in an unlawful manner. We celebrate diversity and are committed to creating an inclusive environment for all individuals. CareRev treats all employees and job applicants based on merit, qualifications, and competence without regard to any qualified individuals' sex, race, color, religion, national origin, ancestry, gender (including pregnancy, breastfeeding, or related medical condition), sexual orientation, gender identity, gender expression, age, physical or mental disability, medical condition, genetic characteristic or information, marital status, military, and veteran status, or any other characteristic protected by state or federal law. CareRev also considers qualified applicants with criminal histories consistent with applicable local, state, and federal law.
If you are an applicant in Washington State, Colorado or New York City and have compensation questions, please contact us directly at <a href="mailto:compensation@carerev.com" rel="noopener noreferrer nofollow ugc" target="_blank">compensation@carerev.com</a>. Include in the email request: your Full Name, Job Name, and the City and State in which you reside. Please allow 48 business hours for a response. All other applicants: PLEASE NOTE, this email is not for candidates to apply to jobs directly. Resumes sent via this email address are not in our Applicant Tracking System, and therefore can not be included in our recruiting process. Please Apply following the steps below.

United States

Cybersecurity Risk Analyst

Chipper Cash

Chipper Cash is the largest mobile cross-border money transfer platform in Africa. We are a passionate team, dedicated to expanding financial inclusion in some of the global regions most in need of accessible, interoperable, easy-to-use, and affordable financial services.
<ul>
<li>We are a small team. You will be encouraged to engage in high-level technical decision making, and there will be a lot of room for growth for early hires as the company continues to expand.</li>
<li>The Chipper team is truly global on a daily basis, you might be interacting with team members in San Francisco, Los Angeles, New York City, London, Accra, Lagos, and Nairobi</li>
<li>You will not be micromanaged. We have an engineering team culture centered on open-communication, honest feedback, and personal responsibility.</li>
</ul>
<h3>About Our Tech Stack</h3>
<ul>
<li>Node.js + Typescript service-based architecture</li>
<li>React Native Android/iOS application</li>
<li>PostgreSQL application databases</li>
<li>RabbitMQ for inter-server communication</li>
<li>Server hosting on Heroku and Google Cloud Platform</li>
<li>Fully automated CI/CD using Heroku CI and Github</li>
<li>Application monitoring with Datadog, <a href="http://logz.io/" rel="noopener noreferrer nofollow ugc" target="_blank">Logz.io</a>, and Amplitude</li>
<li>Snowflake for data warehousing and analysis</li>
<li>Python for in-depth data analysis, transformation, and reporting</li>
</ul>
<h3>What You Will Work On</h3>
Security engineering at Chipper spans the full-stack - this role involves gaining an understanding of the technical architecture of the Chipper Platform, continuously examining different attack surfaces, and proactively identifying and implementing security-hardening measures.
Security engineering at Chipper is also a heavily collaborative role. Security is a principle that permeates everything that we work on, and the security engineering team works with a wide variety of other teams in order to spread understanding of potential vulnerabilities and to instill a security-focused mindset within everything we do.
Some examples of responsibilities include:
<ul>
<li>Actively participating in project planning, code reviews, and spec reviews, to assist in hardening the design and implementation of a wide variety of projects</li>
<li>Collaborating with the the data intelligence team to identify new queries, analysis pipelines, ML models, and alerts to be built in order to detect security-relevant activity</li>
<li>Working with the DevOps team to verify full firewall coverage, and managing internal key storage and access controls</li>
<li>Integrating with new security software vendors and managing current security-related software integrations</li>
<li>Orchestrating penetration tests and other security-related accreditations with external firms</li>
<li>Working with different product teams to harden various 3rd-party API integrations with enhanced connection verification and scheduled credential rotations</li>
<li>Brainstorming with the design team to create user-facing systems that are secure and easy to use</li>
</ul>
<h3>What You Should Have</h3>
The role isn't very focused on being an expert on any specific security domain (such as in a specific language or framework or layer of the application stack) - the most important skills are:
<ul>
<li>Having an inquisitive, curious, and investigative mindset - thriving at independently reviewing designs and codebases and seeking out potential vulnerabilities</li>
<li>Broad full-stack technical ability - being able to quickly gain familiarity with different technologies in-use throughout the team in order to competently understand the code and system designs</li>
</ul>
<h3>Great To Have</h3>
<ul>
<li>Past experience in a role with significant security engineering responsibilities</li>
<li>Past experience with fintech and early-stage startups</li>
<li>Leadership interest and/or experience</li>
<li>Familiarity with our tech stack - Node.js, Typescript, Python, React Native, RabbitMQ, PostgreSQL, Snowflake</li>
<li>Familiarity with our tool stack - ELK, Datadog, Cloudflare, Heroku, AWS, GCP, Retool</li>
</ul>
<h3>Next Steps</h3>
If you feel you are a fit, please apply because we would love to hear from you. It means a lot to us that you have taken the time to read through our job description so thank you so much for your time. We wish you all the best in your job search.
We hire candidates of any race, color, ancestry, religion, sex, national origin, sexual orientation, gender identity, age, marital or family status, disability, Veteran status, and any other status. Chipper Cash is proud to be an Equal Opportunity Employer and will consider qualified applicants with criminal histories in a manner consistent with the San Francisco Fair Chance Ordinance. If there are any accommodations that we can provide during the interview process that help you to be confident and do your best work, don’t hesitate to let us know.

Africa Inland Church Kenya

Senior Security Engineer

Smart Pension Ltd

Are you someone who has a passion for modern, shift-left security automation? Are you looking to play a founding role in a new team that’s going to have a big impact at a rapidly growing-scale up? We're looking for a DevSecOps Tech Lead to join our engineering team, and help us launch and run our new security toolchain.Requirements<ul> <li>Demonstrable experience leading the design, development and operation of security tooling integrated into the software delivery lifecycle. Ranging from tactical to strategic, small to large, this may include pre-commit hooks and other local development tools, pre-build assessment like static and policy analysis, post-build tooling like dynamic analysis or artefact scanning.</li> <li>Infrastructure and application post-deployment security experience is also a plus, particularly within pre-production environments.</li> <li>Deep understanding of how developers deliver at scale using CI/CD</li> <li>Most importantly, you have a desire to learn, grow, work with an amazing team and deliver solutions</li> <li>An understanding that security is a team sport and a willingness to lead on the field and foster collaboration between the many teams involved in the SDLC of smart’s deployments.</li> <li>Strong communication skills and demonstrable background in getting things done </li> </ul>Extra points <ul> <li>Significant commercial experience with front-end, back-end, or infrastructure development.</li> <li>Enjoy helping your team improve and become better Engineers and humans</li> <li>Previous experience working at a scale-up FinTech</li> <li>Previous experience in leading a team is useful</li> </ul>Responsibilities <ul> <li>Develop or select and integrate new dev-facing security tooling based on business and engineering requirements, then sustain and evolve it as the Smart Platform grows.</li> <li>Empower our Engineering teams to take ownership of the security standards and practices of their code by:<ul> <li>Providing detailed, code level, security guidance to the teams</li> <li>Working with teams to code review code for security vulnerabilities and embed/improve security threat modelling into the engineering process</li> <li>Train developers on secure coding practices and share industry best practices</li> <li>Oversee continuous code audits</li> </ul> </li> <li>Lead a small agile engineering team as part of a wider Engineering organisation</li> <li>Directly engaged in projects and work alongside product owners, principal engineers and architects </li> <li>Help evolve development standards and practices</li> <li>Take architectural ownership of various critical components and systems</li> <li>Review Pull Requests from your team and provide feedback</li> <li>Work in a collaborative, agile team environment that is continuous improvement</li> <li>Help mentor and coach members of the team to deliver quality code and tools</li> <li>Overall responsible for the technical quality of what the team is producing! </li> </ul> Engineering at Smart At Smart, we build working software that always works - and we do it fast! We’ve managed to thread the needle between speed and reliability, with double digit daily deploys into production and an exceptionally low rate of failure. Smart is disrupting an industry that has been particularly slow to adopt new technology. As a tech company (in culture, tools, and people) that does pensions, we’re uniquely positioned to shake things up!We have the benefit of having adopted many engineering best practices from day 1. Our approach to code is simple: keep it small, clean, and ensure it has thorough test coverage. We don't ship code just to hit a deadline. Pensions are a long game. We're handling peoples retirement income, so the stability, security and accuracy of our platform is everything. But we also recognise that being able to deliver change and innovation at pace are our secret sauce! Some interesting notes on the way we work: <ul> <li>We built Smart on a monolith and we are shifting to a modular, Domain Driven approach to scale.</li> <li>We operate in 4 different countries at this time and plan to establish Smart in many more.</li> <li>We use AWS as our cloud provider, Github as our SCM and CI system, Datadog for monitoring. We use containers to deliver our applications.</li> <li>We are migrating from Heroku to EKS for our application platform and from AWS Codepipeline to Github Actions for our delivery pipelines.</li> <li>We work hard to maintain at least 96% test coverage of our application through collaboration and strong code review practices.</li> <li>We ship software continuously, releasing new features to production up to 30 times a day. </li> <li>We follow Agile practices and are developing a strengthening DevOps culture.</li> <li>We take career progression and personal development seriously, and offer ample opportunities for both.</li> <li>We value in diversity and inclusion, and it’s reflected in both our team shape and in how we spend our time. Over 80% of our Engineering team recently volunteered their time to be coaches at the recent Rails Girls London event – a free workshop aimed at making technology more approachable for women. </li> <li>We empower our engineers to propose new ideas. For instance, we run regular hackathons, and many of these ideas wind up being implemented and put into production!</li> </ul>About us We're a diverse team at Smart, made up of people with backgrounds, experiences and skills. Our goal is to build great products to help people plan for their financial futures. We’re constantly developing new ideas to help people look after their pension schemes around the world. We’ve grown to a team of over 500 talented people, all dedicated to creating the best experience for our customers. If you think you can help us build a smarter future, come and work with us. Smart Pension is committed to crafting an inclusive work environment with a diverse workforce. You will receive consideration for employment without regard to race, religion, gender, sexual orientation, national origin, disability or age. Our Recruitment Data Policy is <a href="https://protect-eu.mimecast.com/s/HjdqC8E8MuXQJ2ru1gD7n?domain=assets-global.website-files.com" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>. Please click on the link if you have any questions about how we store your data or to know your rights.Benefits<ul> <li>£500 personal training budget to spend on books, courses, conferences or training materials to help you develop.</li> <li>Health Insurance (via EquipsMe) including Dental, Eyecare and Employee Assistance Program.</li> <li>Death in Service via Unum (4 x Base Salary).</li> <li>Season ticket loans.</li> <li>5 week sabbatical after 5 years.</li> <li>25 days holiday per year plus bank holidays. 1 extra day holiday after 2 years and then every year up to a max of 30 days holiday.</li> <li>Enhanced maternity and paternity (maternity - 6 months fully paid / paternity - 3 weeks fully paid).</li> <li>Access to PerkBox.</li> <li>Access to Smart Rewards.</li> <li>Pension scheme via salary sacrifice. Smart will match your contributions up to 5% of your salary.</li> <li>Cycle to work scheme.</li> <li>Smart employees also enjoy a 50% discount on orders from our sister company Arena Flowers, Britain's most ethical florist. They offer unique hand-tied bouquets, luxury flowers, letterbox flowers, plants and gifts to spend on friends and loved ones or even for yourself.</li> </ul>

London

DevSecOps Tech Lead

Apply to Heroku Cyber Security Jobs in companies remotely and near you. New Heroku Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Cybersecurity Risk Analyst at CareRev	Remote Full Time CISM Comptia Audit
Senior Security Engineer at Chipper Cash	Android AWS Cloud Cloudflare Devops
DevSecOps Tech Lead at Smart Pension Ltd	Agile Audits Automation AWS Cloud

Heroku Cyber Security Jobs

0 Heroku Cyber Security Jobs. Page 1 of 1

3 closed heroku cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Heroku Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Heroku Cyber Security Jobs

0 Heroku Cyber Security Jobs. Page 1 of 1

3 closed heroku cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Heroku Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter