Halvik

If you are looking for a rewarding career with a highly successful company that puts people first, Halvik Corp is the place for you! We are committed to delivering smarter IT-driven solutions bolstered by quality and innovation to help the US Federal Government succeed. Join our growing team and make a difference!Job Description:Performs assessment and authorization coordination. Advises and assists the customer with Risk Management Framework (RMF) and develops a Plan of Action and Milestones for resolving network deficiencies in accordance with DODI <a href="http://8510.01" rel="noopener noreferrer nofollow ugc" target="_blank">8510.01</a> and ICD 503. The duties of this task include assessing network compliance against controls listed in NIST 800-53 and creating A&amp;A packages. Performs assessment, compliance, and validation of IT systems to support the Cybersecurity program at USSOCOM, its Component Commands, TSOCs, and deployed forces. The Contractor shall execute a comprehensive assessment, compliance and validation of customer networks to ensure compliance with regulations and security and standards. The end goal is to ensure the integrity of customer systems by identifying and mitigating potential shortcomings and vulnerabilities. Advise USSOCOM, its Component Commands, TSOCs, and deployed forces on network and system risks, risk mitigation courses of action, and operational. Additionally, the Cybersecurity Systems Analyst should be able to perform security evaluations and vulnerability assessments using the DOD Assured Compliance Assessment Solution (ACAS), Nessus vulnerability scanning tool and Security Content Automation Protocol tool. Identify applicable STIGs and perform assessments using the Security Content Automation Protocol tool. The Cybersecurity Systems Analyst will liaison with network and system administrators to correct identified deficiencies. The Cybersecurity Systems Analyst will also scan (or review scans) for new systems and applications being introduced into the SOF environment, identify issues, and draft certification letters for the government. The contractor will liaison with the Site Integration Facility (SIF) to ensure systems and application meet the standards in the DISA Security Technical Implementation Guides (STIG). The Cybersecurity Systems analyst should be knowledgeable of cyber network defense tools such as end point security, SIEM, comply to connect, etc. Typical duties include:  Tracks A&amp;A status of SIE governed ISs. Ensures these artifacts and documentation are available in the USSOCOM-chosen automated tool.  Advises stakeholders on the adequacy of implementation of cybersecurity requirements.  Provide DoD &amp; IC RMF subject matter expertise to USSOCOM, its Component Commands, TSOCs, deployed forces and their delegates, including other Contractors, and assist with the development and execution of the RMF program at USSOCOM, its Component Commands, TSOCs, and deployed forces.  Maintain, track, and validate DISN, cloud and DIA connection approval packages, including those from USSOCOM, its Component Commands, TSOCs, and other subordinate organizations.  Develop and maintain supporting documentation for new and existing networks, cloud environments, information systems and technologies as they are introduced into the SIE.  Develop and review the A&amp;A of SIE networks, cloud environments, systems, services, telecommunication circuits, mobile devices, portable electronic devices, hardware, and software using the DoD &amp; IC RMF to obtain an Authority to Operate (ATO), Interim Authority to Test (IATT), or Authority to Connect (ATC).  Perform risk and vulnerability assessments of IT and IS for authorization; prepare risk assessment reports for submission to the SCA and Authorizing Official/Designated Authorizing Official/Designated Accrediting Authority (AO/DAO/DAA) in accordance with DoD, DIA, USCYBERCOM, USSOCOM, Component Command, TSOC, and deployed forces’ policies, procedures, and regulations.  Assist USSOCOM, its Component Commands, TSOCs and deployed forces with the enforcement of A&amp;A, as well as DoD, DIA, USSOCOM, Component Command, TSOC, and deployed forces’ connection standards for networks and systems.  Track and maintain A&amp;A databases, web sites and tools to ensure that networks, systems and devices are properly documented and managed from a cybersecurity perspective.  Track and report to higher headquarters organizations (e.g. USCYBERCOM, DIA) compliance with applicable Cybersecurity regulations and directives.  Ensure timely notifications are made to responsible individuals and organizations in order to prevent lapses in accreditations (e.g., 30, 60, and 90 day notices).  Develop and maintain an Information Security Continuous Monitoring (ISCM) Plan. This plan shall address ongoing awareness of information security, vulnerabilities, security controls, and threats to support organizational risk management decisions.  Identify, assess, and advise on cybersecurity control compliance and associated risks.  Coordinate with USCYBERCOM, DoD, DIA, NSA, DISA, and subordinate organizations to support the resolution of issues with security, A&amp;A, connection approvals, and waiver requests.  Perform network, cloud, information systems, hardware, software and device security authorization and assessments, as well as the application and execution of policy, including project management support services.  Validate the patching of systems, perform validation scanning, develop Plans of Action &amp; Milestone (POA&amp;Ms), and report as directed by applicable policies, procedures, and regulations.  Provide subject matter expertise for COA development and the implementation of Cybersecurity mitigation strategies.  Develop and implement required processes, procedures, and capabilities to mitigate vulnerabilities and weaknesses for software and hardware deployment.  Identify, implement and validate continued effectiveness of key performance parameters and applied security measures  Perform analytics on cybersecurity posture and provide reports to the AO/DAO and applicable stakeholders as required per ISCM and AO/DAO direction. Knowledge, Skills and Abilities:  Experience with the US Combatant Commands (USCENTCOM/USSOCOM) is desired.  Technical background with system administration experience, architecture and engineering preferred  Technical background in networking, identity management, Microsoft and Linux operating systems, database, and mobility  Working knowledge of the RMF.  Knowledge of the Telos Xacta or Enterprise Mission Assurance Support Services (eMASS) system is desired.  Must have excellent communications skill (written and oral) and interpersonal skills.  Knowledge and experience with DoD IA processes and policies (e.g., DODI <a href="http://8510.01" rel="noopener noreferrer nofollow ugc" target="_blank">8510.01</a>, NIST, CNSS and other cybersecurity policies, Chairman of the Joint Chiefs of Staff Manual (CJCSM) <a href="http://65101.01" rel="noopener noreferrer nofollow ugc" target="_blank">65101.01</a>, Incident Response and other IA policies).  Active TS/SCI clearance required. IAT Level III or IAM Level III required10+ years of experienceHalvik offers a competitive full benefits package including:Company-supported medical, dental, vision, life, STD, and LTD insuranceBenefits include 11 federal holidays and PTO.401(k) with company matchingFlexible Spending Accounts for commuter, medical, and dependent care expensesTuition AssistanceCharitable Contribution matchingTo comply with the guidance provided by the <a href="https://www.saferfederalworkforce.gov/overview/" rel="noopener noreferrer nofollow ugc" target="_blank">Safer Federal Workforce Task Force (Task Force) </a>for Federal Contractors and Subcontractors, Halvik is requiring COVID-19 vaccinations for all their employees except where an employee is legally entitled to an accommodation. Halvik Corp is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.

Fort Bragg

Cybersecurity Systems Analyst - Expert

If you are looking for a rewarding career with a highly successful company that puts people first, Halvik Corp is the place for you! We are committed to delivering smarter IT-driven solutions bolstered by quality and innovation to help the US Federal Government succeed. Join our growing team and make a difference!Job Description:Performs assessment and authorization coordination. Advises and assists the customer with Risk Management Framework (RMF) and develops a Plan of Action and Milestones for resolving network deficiencies in accordance with DODI <a href="http://8510.01" rel="noopener noreferrer nofollow ugc" target="_blank">8510.01</a> and ICD 503. The duties of this task include assessing network compliance against controls listed in NIST 800-53 and creating A&amp;A packages. Performs assessment, compliance, and validation of IT systems to support the Cybersecurity program at USSOCOM, its Component Commands, TSOCs, and deployed forces. The Contractor shall execute a comprehensive assessment, compliance and validation of customer networks to ensure compliance with regulations and security and standards. The end goal is to ensure the integrity of customer systems by identifying and mitigating potential shortcomings and vulnerabilities. Advise USSOCOM, its Component Commands, TSOCs, and deployed forces on network and system risks, risk mitigation courses of action, and operational. Additionally, the Cybersecurity Systems Analyst should be able to perform security evaluations and vulnerability assessments using the DOD Assured Compliance Assessment Solution (ACAS), Nessus vulnerability scanning tool and Security Content Automation Protocol tool. Identify applicable STIGs and perform assessments using the Security Content Automation Protocol tool. The Cybersecurity Systems Analyst will liaison with network and system administrators to correct identified deficiencies. The Cybersecurity Systems Analyst will also scan (or review scans) for new systems and applications being introduced into the SOF environment, identify issues, and draft certification letters for the government. The contractor will liaison with the Site Integration Facility (SIF) to ensure systems and application meet the standards in the DISA Security Technical Implementation Guides (STIG). The Cybersecurity Systems analyst should be knowledgeable of cyber network defense tools such as end point security, SIEM, comply to connect, etc. Typical duties include:  Tracks A&amp;A status of SIE governed ISs. Ensures these artifacts and documentation are available in the USSOCOM-chosen automated tool.  Advises stakeholders on the adequacy of implementation of cybersecurity requirements.  Provide DoD &amp; IC RMF subject matter expertise to USSOCOM, its Component Commands, TSOCs, deployed forces and their delegates, including other Contractors, and assist with the development and execution of the RMF program at USSOCOM, its Component Commands, TSOCs, and deployed forces.  Maintain, track, and validate DISN, cloud and DIA connection approval packages, including those from USSOCOM, its Component Commands, TSOCs, and other subordinate organizations.  Develop and maintain supporting documentation for new and existing networks, cloud environments, information systems and technologies as they are introduced into the SIE.  Develop and review the A&amp;A of SIE networks, cloud environments, systems, services, telecommunication circuits, mobile devices, portable electronic devices, hardware, and software using the DoD &amp; IC RMF to obtain an Authority to Operate (ATO), Interim Authority to Test (IATT), or Authority to Connect (ATC).  Perform risk and vulnerability assessments of IT and IS for authorization; prepare risk assessment reports for submission to the SCA and Authorizing Official/Designated Authorizing Official/Designated Accrediting Authority (AO/DAO/DAA) in accordance with DoD, DIA, USCYBERCOM, USSOCOM, Component Command, TSOC, and deployed forces’ policies, procedures, and regulations.  Assist USSOCOM, its Component Commands, TSOCs and deployed forces with the enforcement of A&amp;A, as well as DoD, DIA, USSOCOM, Component Command, TSOC, and deployed forces’ connection standards for networks and systems.  Track and maintain A&amp;A databases, web sites and tools to ensure that networks, systems and devices are properly documented and managed from a cybersecurity perspective.  Track and report to higher headquarters organizations (e.g. USCYBERCOM, DIA) compliance with applicable Cybersecurity regulations and directives.  Ensure timely notifications are made to responsible individuals and organizations in order to prevent lapses in accreditations (e.g., 30, 60, and 90 day notices).  Develop and maintain an Information Security Continuous Monitoring (ISCM) Plan. This plan shall address ongoing awareness of information security, vulnerabilities, security controls, and threats to support organizational risk management decisions.  Identify, assess, and advise on cybersecurity control compliance and associated risks.  Coordinate with USCYBERCOM, DoD, DIA, NSA, DISA, and subordinate organizations to support the resolution of issues with security, A&amp;A, connection approvals, and waiver requests.  Perform network, cloud, information systems, hardware, software and device security authorization and assessments, as well as the application and execution of policy, including project management support services.  Validate the patching of systems, perform validation scanning, develop Plans of Action &amp; Milestone (POA&amp;Ms), and report as directed by applicable policies, procedures, and regulations.  Provide subject matter expertise for COA development and the implementation of Cybersecurity mitigation strategies.  Develop and implement required processes, procedures, and capabilities to mitigate vulnerabilities and weaknesses for software and hardware deployment.  Identify, implement and validate continued effectiveness of key performance parameters and applied security measures  Perform analytics on cybersecurity posture and provide reports to the AO/DAO and applicable stakeholders as required per ISCM and AO/DAO direction. Knowledge, Skills and Abilities:  Experience with the US Combatant Commands (USCENTCOM/USSOCOM) is desired.  Technical background with system administration experience, architecture and engineering preferred  Technical background in networking, identity management, Microsoft and Linux operating systems, database, and mobility  Working knowledge of the RMF.  Knowledge of the Telos Xacta or Enterprise Mission Assurance Support Services (eMASS) system is desired.  Must have excellent communications skill (written and oral) and interpersonal skills.  Knowledge and experience with DoD IA processes and policies (e.g., DODI <a href="http://8510.01" rel="noopener noreferrer nofollow ugc" target="_blank">8510.01</a>, NIST, CNSS and other cybersecurity policies, Chairman of the Joint Chiefs of Staff Manual (CJCSM) <a href="http://65101.01" rel="noopener noreferrer nofollow ugc" target="_blank">65101.01</a>, Incident Response and other IA policies).  Active TS/SCI clearance required. IAT Level III or IAM Level III required3-5 years of experienceHalvik offers a competitive full benefits package including:Company-supported medical, dental, vision, life, STD, and LTD insuranceBenefits include 11 federal holidays and PTO.401(k) with company matchingFlexible Spending Accounts for commuter, medical, and dependent care expensesTuition AssistanceCharitable Contribution matchingTo comply with the guidance provided by the <a href="https://www.saferfederalworkforce.gov/overview/" rel="noopener noreferrer nofollow ugc" target="_blank">Safer Federal Workforce Task Force (Task Force) </a>for Federal Contractors and Subcontractors, Halvik is requiring COVID-19 vaccinations for all their employees except where an employee is legally entitled to an accommodation. Halvik Corp is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.

Doha

Cybersecurity Systems Analyst - Associate

If you are looking for a rewarding career with a highly successful company that puts people first, Halvik Corp is the place for you! We are committed to delivering smarter IT-driven solutions bolstered by quality and innovation to help the US Federal Government succeed. Join our growing team and make a difference!Cybersecurity Systems Analyst Performs assessment and authorization coordination. Advises and assists the customer with Risk Management Framework (RMF) and develops a Plan of Action and Milestones for resolving network deficiencies in accordance with DODI <a href="http://8510.01" rel="noopener noreferrer nofollow ugc" target="_blank">8510.01</a> and ICD 503. The duties of this task include assessing network compliance against controls listed in NIST 800-53 and creating A&amp;A packages. Performs assessment, compliance, and validation of IT systems to support the Cybersecurity program at USSOCOM, its component Commands, TSOCs, and deployed forces. The Contractor shall execute a comprehensive assessment, compliance and validation of customer networks to ensure compliance with regulations and security and standards. The end goal is to ensure the integrity of customer systems by identifying and mitigating potential shortcomings and vulnerabilities. Advise USSOCOM, its Component Commands, TSOCs, and deployed forces on network and system risks, risk mitigation courses of action, and operational. Additionally, the Cybersecurity Systems Analyst should be able to perform security evaluations and vulnerability assessments using the DOD Assured Compliance Assessment Solution (ACAS), Nessus vulnerability scanning tool and Security Content Automation Protocol tool. Identify applicable STIGs and perform assessments using the Security Content Automation Protocol tool. The Cybersecurity Systems Analyst will liaison with network and system administrators to correct identified deficiencies. The Cybersecurity Systems Analyst will also scan (or review scans) for new systems and applications being introduced into the SOF environment, identify issues, and draft certification letters for the government. The contractor will liaison with the Site Integration Facility (SIF) to ensure systems and application meet the standards in the DISA Security Technical Implementation Guides (STIG). The Cybersecurity Systems analyst should be knowledgeable of cyber network defense tools such as end point security, SIEM, comply to connect, etc. Typical duties include:  Tracks A&amp;A status of SIE governed ISs. Ensures these artifacts and documentation are available in the USSOCOM-chosen automated tool.  Advises stakeholders on the adequacy of implementation of cybersecurity requirements.  Provide DoD &amp; IC RMF subject matter expertise to USSOCOM, its Component Commands, TSOCs, deployed forces and their delegates, including other Contractors, and assist with the development and execution of the RMF program at USSOCOM, its Component Commands, TSOCs, and deployed forces.  Maintain, track, and validate DISN, cloud and DIA connection approval packages, including those from USSOCOM, its Component Commands, TSOCs, and other subordinate organizations.  Develop and maintain supporting documentation for new and existing networks, cloud environments, information systems and technologies as they are introduced into the SIE.  Develop and review the A&amp;A of SIE networks, cloud environments, systems, services, telecommunication circuits, mobile devices, portable electronic devices, hardware, and software using the DoD &amp; IC RMF to obtain an Authority to Operate (ATO), Interim Authority to Test (IATT), or Authority to Connect (ATC).  Perform risk and vulnerability assessments of IT and IS for authorization; prepare risk assessment reports for submission to the SCA and Authorizing Official/Designated Authorizing Official/Designated Accrediting Authority (AO/DAO/DAA) in accordance with DoD, DIA, USCYBERCOM, USSOCOM, Component Command, TSOC, and deployed forces’ policies, procedures, and regulations.  Assist USSOCOM, its Component Commands, TSOCs and deployed forces with the enforcement of A&amp;A, as well as DoD, DIA, USSOCOM, Component Command, TSOC, and deployed forces’ connection standards for networks and systems.  Track and maintain A&amp;A databases, web sites and tools to ensure that networks, systems and devices are properly documented and managed from a cybersecurity perspective.  Track and report to higher headquarters organizations (e.g. USCYBERCOM, DIA) compliance with applicable Cybersecurity regulations and directives.  Ensure timely notifications are made to responsible individuals and organization in order to prevent lapses in accreditations (e.g., 30,60, and90 day notices).  Develop and maintain an Information Security Continuous Monitoring (ISCM) Plan. This plan shall address ongoing awareness of information security, vulnerabilities, security controls, and threats to support organizational risk management decisions.  Identify, assess, and advise on cybersecurity control compliance and associated risks. Coordinate with USCYBERCOM, DoD, DIA, NSA, DISA, and subordinate organizations to support the resolution of issues with security, A&amp;A, connection approvals, and waiver requests.  Perform network, cloud, information systems, hardware, software and device security authorization and assessments, as well as the application and execution of policy, including project management support services.  Validate the patching of systems, perform validation scanning, develop Plans of Action &amp; Milestone (POA&amp;Ms), and report as directed by applicable policies, procedures, and regulations.  Provide subject matter expertise for COA development and the implementation of Cybersecurity mitigation strategies.  Develop and implement required processes, procedures, and capabilities to mitigate vulnerabilities and weaknesses for software and hardware deployment.  Identify, implement and validate continued effectiveness of key performance parameters and applied security measures  Perform analytics on cybersecurity posture and provide reports to the AO/DAO and applicable stakeholders as required per ISCM and AO/DAO direction. Knowledge, Skills and Abilities: Experience with the US Combatant Commands (USCENTCOM/USSOCOM) is desired. Technical background with system administration experience, architecture and engineering preferred Technical background in networking, identity management, Microsoft and Linux operating systems, database, and mobility Working knowledge of the RMF. Knowledge of the Telos Xacta or Enterprise Mission Assurance Support Services (eMASS) system is desired. Must have excellent communications skill (written and oral) and interpersonal skills. Knowledge and experience with DoD IA processes and policies (e.g., DODI <a href="http://8510.01" rel="noopener noreferrer nofollow ugc" target="_blank">8510.01</a>, NIST, CNSS and other cybersecurity policies, Chairman of the Joint Chiefs of Staff Manual (CJCSM) <a href="http://65101.01" rel="noopener noreferrer nofollow ugc" target="_blank">65101.01</a>, Incident Response and other IA policies). Active TS/SCI clearance required. DoD 8570 IAM III certification (CISM, CISSP / CISSP Associate, GSLC, or CCISO) MA/MS degree5+ years of experienceHalvik offers a competitive full benefits package including:Company-supported medical, dental, vision, life, STD, and LTD insuranceBenefits include 11 federal holidays and PTO.401(k) with company matchingFlexible Spending Accounts for commuter, medical, and dependent care expensesTuition AssistanceCharitable Contribution matchingTo comply with the guidance provided by the <a href="https://www.saferfederalworkforce.gov/overview/" rel="noopener noreferrer nofollow ugc" target="_blank">Safer Federal Workforce Task Force (Task Force) </a>for Federal Contractors and Subcontractors, Halvik is requiring COVID-19 vaccinations for all their employees except where an employee is legally entitled to an accommodation. Halvik Corp is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.

Florida

Cybersecurity Systems Analyst - Intermediate

If you are looking for a rewarding career with a highly successful company that puts people first, Halvik Corp is the place for you! We are committed to delivering smarter IT-driven solutions bolstered by quality and innovation to help the US Federal Government succeed. Join our growing team and make a difference!Cybersecurity Systems Analyst Performs assessment and authorization coordination. Advises and assists the customer with Risk Management Framework (RMF) and develops a Plan of Action and Milestones for resolving network deficiencies in accordance with DODI <a href="http://8510.01" rel="noopener noreferrer nofollow ugc" target="_blank">8510.01</a> and ICD 503. The duties of this task include assessing network compliance against controls listed in NIST 800-53 and creating A&amp;A packages. Performs assessment, compliance, and validation of IT systems to support the Cybersecurity program at USSOCOM, its component Commands, TSOCs, and deployed forces. The Contractor shall execute a comprehensive assessment, compliance and validation of customer networks to ensure compliance with regulations and security and standards. The end goal is to ensure the integrity of customer systems by identifying and mitigating potential shortcomings and vulnerabilities. Advise USSOCOM, its Component Commands, TSOCs, and deployed forces on network and system risks, risk mitigation courses of action, and operational. Additionally, the Cybersecurity Systems Analyst should be able to perform security evaluations and vulnerability assessments using the DOD Assured Compliance Assessment Solution (ACAS), Nessus vulnerability scanning tool and Security Content Automation Protocol tool. Identify applicable STIGs and perform assessments using the Security Content Automation Protocol tool. The Cybersecurity Systems Analyst will liaison with network and system administrators to correct identified deficiencies. The Cybersecurity Systems Analyst will also scan (or review scans) for new systems and applications being introduced into the SOF environment, identify issues, and draft certification letters for the government. The contractor will liaison with the Site Integration Facility (SIF) to ensure systems and application meet the standards in the DISA Security Technical Implementation Guides (STIG). The Cybersecurity Systems analyst should be knowledgeable of cyber network defense tools such as end point security, SIEM, comply to connect, etc. Typical duties include:  Tracks A&amp;A status of SIE governed ISs. Ensures these artifacts and documentation are available in the USSOCOM-chosen automated tool.  Advises stakeholders on the adequacy of implementation of cybersecurity requirements.  Provide DoD &amp; IC RMF subject matter expertise to USSOCOM, its Component Commands, TSOCs, deployed forces and their delegates, including other Contractors, and assist with the development and execution of the RMF program at USSOCOM, its Component Commands, TSOCs, and deployed forces.  Maintain, track, and validate DISN, cloud and DIA connection approval packages, including those from USSOCOM, its Component Commands, TSOCs, and other subordinate organizations.  Develop and maintain supporting documentation for new and existing networks, cloud environments, information systems and technologies as they are introduced into the SIE.  Develop and review the A&amp;A of SIE networks, cloud environments, systems, services, telecommunication circuits, mobile devices, portable electronic devices, hardware, and software using the DoD &amp; IC RMF to obtain an Authority to Operate (ATO), Interim Authority to Test (IATT), or Authority to Connect (ATC).  Perform risk and vulnerability assessments of IT and IS for authorization; prepare risk assessment reports for submission to the SCA and Authorizing Official/Designated Authorizing Official/Designated Accrediting Authority (AO/DAO/DAA) in accordance with DoD, DIA, USCYBERCOM, USSOCOM, Component Command, TSOC, and deployed forces’ policies, procedures, and regulations.  Assist USSOCOM, its Component Commands, TSOCs and deployed forces with the enforcement of A&amp;A, as well as DoD, DIA, USSOCOM, Component Command, TSOC, and deployed forces’ connection standards for networks and systems.  Track and maintain A&amp;A databases, web sites and tools to ensure that networks, systems and devices are properly documented and managed from a cybersecurity perspective.  Track and report to higher headquarters organizations (e.g. USCYBERCOM, DIA) compliance with applicable Cybersecurity regulations and directives.  Ensure timely notifications are made to responsible individuals and organization in order to prevent lapses in accreditations (e.g., 30,60, and90 day notices).  Develop and maintain an Information Security Continuous Monitoring (ISCM) Plan. This plan shall address ongoing awareness of information security, vulnerabilities, security controls, and threats to support organizational risk management decisions.  Identify, assess, and advise on cybersecurity control compliance and associated risks. Coordinate with USCYBERCOM, DoD, DIA, NSA, DISA, and subordinate organizations to support the resolution of issues with security, A&amp;A, connection approvals, and waiver requests.  Perform network, cloud, information systems, hardware, software and device security authorization and assessments, as well as the application and execution of policy, including project management support services.  Validate the patching of systems, perform validation scanning, develop Plans of Action &amp; Milestone (POA&amp;Ms), and report as directed by applicable policies, procedures, and regulations.  Provide subject matter expertise for COA development and the implementation of Cybersecurity mitigation strategies.  Develop and implement required processes, procedures, and capabilities to mitigate vulnerabilities and weaknesses for software and hardware deployment.  Identify, implement and validate continued effectiveness of key performance parameters and applied security measures  Perform analytics on cybersecurity posture and provide reports to the AO/DAO and applicable stakeholders as required per ISCM and AO/DAO direction. Knowledge, Skills and Abilities: Experience with the US Combatant Commands (USCENTCOM/USSOCOM) is desired. Technical background with system administration experience, architecture and engineering preferred Technical background in networking, identity management, Microsoft and Linux operating systems, database, and mobility Working knowledge of the RMF. Knowledge of the Telos Xacta or Enterprise Mission Assurance Support Services (eMASS) system is desired. Must have excellent communications skill (written and oral) and interpersonal skills. Knowledge and experience with DoD IA processes and policies (e.g., DODI <a href="http://8510.01" rel="noopener noreferrer nofollow ugc" target="_blank">8510.01</a>, NIST, CNSS and other cybersecurity policies, Chairman of the Joint Chiefs of Staff Manual (CJCSM) <a href="http://65101.01" rel="noopener noreferrer nofollow ugc" target="_blank">65101.01</a>, Incident Response and other IA policies). Active TS/SCI clearance required. DoD 8570 IAM III certification (CISM, CISSP / CISSP Associate, GSLC, or CCISO) MA/MS degree8+ years of experienceHalvik offers a competitive full benefits package including:Company-supported medical, dental, vision, life, STD, and LTD insuranceBenefits include 11 federal holidays and PTO.401(k) with company matchingFlexible Spending Accounts for commuter, medical, and dependent care expensesTuition AssistanceCharitable Contribution matchingTo comply with the guidance provided by the <a href="https://www.saferfederalworkforce.gov/overview/" rel="noopener noreferrer nofollow ugc" target="_blank">Safer Federal Workforce Task Force (Task Force) </a>for Federal Contractors and Subcontractors, Halvik is requiring COVID-19 vaccinations for all their employees except where an employee is legally entitled to an accommodation. Halvik Corp is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.

Washington

Cybersecurity Systems Analyst - Senior

Rackspace

Rackspace Technology is a leading provider of expertise and managed services across all the major public and private cloud technologies. We’ve evolved Fanatical Support to encompass the entire customer journey — providing Fanatical Experience™ from first consultation to daily operations. Our passionate experts combine the power of proactive, always-on service and expertise with best-in-class tools and automation to deliver technology when and how our customers need it.<h3>Job Responsibilities</h3><ul><ul><li>Technical consultancy on the AWS/Alibaba environments specifically in relation to Identity and Access management practices and controls. </li><li>Working collaboratively with various engineering teams across the organisation to effectively define strategic IAM architecture</li><li>Build, support and provide ongoing maintenance for custom feeds into an internal compliance database. </li></ul></ul><h3>Technical Skills</h3><ul><ul><li>In-depth knowledge of AWS security services and features such as IAM, VPC, EC2, S3, CloudTrail, CloudWatch, KMS, GuardDuty, etc.</li><li>Experience in implementing and maintaining security policies, standards, and guidelines in AWS environment</li><li>Knowledge of security best practices, including network security, encryption, identity and access management, and incident response</li><li>Understanding of cloud infrastructure and network security design patterns</li><li>Experience with security compliance frameworks like PCI DSS, ISO 27001, NIST, SOC 2, etc.</li><li>Strong scripting skills in at least one of the scripting languages (e.g. Python, Perl, Ruby, etc.)</li><li>Experience with security tools such as intrusion detection/prevention systems, firewalls, and log analysis tools</li><li>Understanding of cloud-based deployment models, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS)</li><li>Excellent problem-solving skills, communication skills, and the ability to work well in a team environment.</li></ul></ul><h3>Details</h3><ul><ul><li>Start: asap</li><li>Duration: to 30 Nov 23 </li><li>Location: PL - remote</li><li>Language: English</li></ul></ul>#LI-Remote#LI-KD1About Rackspace TechnologyWe are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.  More on Rackspace TechnologyThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

Poland

IAM AWS Technical Lead (Contractor Role)

We are seeking a Professional Services Delivery Engineer to deliver Private Cloud Engineering consulting services into Rackspace’s Enterprise and SME clients. The ideal candidate will have strong, hands on technical skills, with the experience and consulting skills to understand, shape and deliver against our customers’ requirements.The Technical Delivery Lead (TDL) is accountable for what the EE+ pod delivers from a technical perspective, this includes aspects including both operational and strategic elements.   The technical delivery lead is also a point of technical escalation for 24x7 incident response from the perpetual team.<h3>Role Requirements</h3><ul><ul><li>Create and maintain customer loyalty by serving our customers above and beyond their expectations</li><li>Pro-actively seek opportunities to review solution architecture then put forward and implement proposals for improvement</li><li>Serve as a consultative resource for customers to assist them in achieving their business objectives by providing solution design/review and implementation/optimization for Cloud solutions</li><li>Support the Customer Success Manager and Scrum Master in customer projects</li><li>Respond to support requests and co-ordinate FE teams where appropriate</li><li>Ensure appropriate technical documentation is in place for customer solutions</li><li>Provide support in tuning applications and infrastructure</li><li>Design, develop, test, and implement new configurations, architectures, and standards</li><li>Provide guidance, to customers, 3rd party integration specialists, and/or internal teams, on solutions to increase application availability, redundancy, scalability, and performance</li><li>Assist customers and internal teams to automate processes and mature DevOps methodologies</li><li>Provide leadership and guidance when customer application-level downtime issues arise and provide RCA support as requested.</li><li>Show ownership of issues through resolution and maintain customer loyalty by serving customers via phone, tickets, and email</li><li>Driving strategic direction and technical roadmaps. </li></ul></ul><h3>Person Specification</h3><ul><ul><li>An FE Technical Lead should come from a Engineering or Solution Architecture background. </li><li>Tenacious problem solver, will own issues until full resolution</li><li>Demonstrable experience with Service Management fundamentals i.e. risk, change, incident and problem management </li><li>Excellent communication skills, both written and verbal with great attention to detail</li><li>High energy level and creative problem-solving abilities, coupled with a desire to take on responsibility</li><li>Strong rapport and relationship building skills with both internal departments and external customers</li><li>Ability to handle multiple tasks and prioritize work in order to maintain required productivity levels</li><li>A good level of business awareness and commercial acumen</li><li>3+ Years working within a Hybrid cloud service (preferably Azure). </li>Expert level Managed Private Cloud knowledge including:<li>Solution architecture experience (requirements gathering, detailed design through to implementation). </li><li>Cloud native approaches (serverless, cloud integration, modern application architecture, security, SRE)</li><li>Strong Networking background</li><li>PaaS, IaaS, best use cases, limitations etc</li><li>Key Managed Cloud IaaS components – Compute, Networking, AVS, DNS, Storage, Traffic Management, API Gateways, observability.</li><li>Experience with DevOps Methodologies and CI/CD tool-chains. </li>5+ years experience in a development or infrastructure operations team for critical IT infrastructure - including: <li>High-availability, high-performance web technologies</li><li>VMWARE Technologies</li><li>Microsoft Windows or Linux platforms</li><li>Databases and caching layers</li>Some experience in one or more of the following:<li>Scripting and/or coding experience </li><li>General concepts around API documentation, implementation, and supporting customers using these</li><li>Configuration management toolsets like Windows DSC, Chef, Puppet, Saltstack, Ansible, etc. (desirable)</li><li>Solid understanding of Version Control Systems, branching and merging model (desirable)</li><li>Software development working practices / methodologies – AGILE/SCRUM certification (desirable)</li></ul></ul>#LI-JH1About Rackspace TechnologyWe are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.  More on Rackspace TechnologyThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

United Kingdom

Technical Delivery Lead - Private Cloud

If you are looking for a rewarding career with a highly successful company that puts people first, Halvik Corp is the place for you! We are committed to delivering smarter IT-driven solutions bolstered by quality and innovation to help the US Federal Government succeed. Join our growing team and make a difference!Job Description:Performs assessment and authorization coordination. Advises and assists the customer with Risk Management Framework (RMF) and develops a Plan of Action and Milestones for resolving network deficiencies in accordance with DODI <a href="http://8510.01" rel="noopener noreferrer nofollow ugc" target="_blank">8510.01</a> and ICD 503. The duties of this task include assessing network compliance against controls listed in NIST 800-53 and creating A&amp;A packages. Performs assessment, compliance, and validation of IT systems to support the Cybersecurity program at USSOCOM, its Component Commands, TSOCs, and deployed forces. The Contractor shall execute a comprehensive assessment, compliance and validation of customer networks to ensure compliance with regulations and security and standards. The end goal is to ensure the integrity of customer systems by identifying and mitigating potential shortcomings and vulnerabilities. Advise USSOCOM, its Component Commands, TSOCs, and deployed forces on network and system risks, risk mitigation courses of action, and operational. Additionally, the Cybersecurity Systems Analyst should be able to perform security evaluations and vulnerability assessments using the DOD Assured Compliance Assessment Solution (ACAS), Nessus vulnerability scanning tool and Security Content Automation Protocol tool. Identify applicable STIGs and perform assessments using the Security Content Automation Protocol tool. The Cybersecurity Systems Analyst will liaison with network and system administrators to correct identified deficiencies. The Cybersecurity Systems Analyst will also scan (or review scans) for new systems and applications being introduced into the SOF environment, identify issues, and draft certification letters for the government. The contractor will liaison with the Site Integration Facility (SIF) to ensure systems and application meet the standards in the DISA Security Technical Implementation Guides (STIG). The Cybersecurity Systems analyst should be knowledgeable of cyber network defense tools such as end point security, SIEM, comply to connect, etc. Typical duties include:  Tracks A&amp;A status of SIE governed ISs. Ensures these artifacts and documentation are available in the USSOCOM-chosen automated tool.  Advises stakeholders on the adequacy of implementation of cybersecurity requirements.  Provide DoD &amp; IC RMF subject matter expertise to USSOCOM, its Component Commands, TSOCs, deployed forces and their delegates, including other Contractors, and assist with the development and execution of the RMF program at USSOCOM, its Component Commands, TSOCs, and deployed forces.  Maintain, track, and validate DISN, cloud and DIA connection approval packages, including those from USSOCOM, its Component Commands, TSOCs, and other subordinate organizations.  Develop and maintain supporting documentation for new and existing networks, cloud environments, information systems and technologies as they are introduced into the SIE.  Develop and review the A&amp;A of SIE networks, cloud environments, systems, services, telecommunication circuits, mobile devices, portable electronic devices, hardware, and software using the DoD &amp; IC RMF to obtain an Authority to Operate (ATO), Interim Authority to Test (IATT), or Authority to Connect (ATC).  Perform risk and vulnerability assessments of IT and IS for authorization; prepare risk assessment reports for submission to the SCA and Authorizing Official/Designated Authorizing Official/Designated Accrediting Authority (AO/DAO/DAA) in accordance with DoD, DIA, USCYBERCOM, USSOCOM, Component Command, TSOC, and deployed forces’ policies, procedures, and regulations.  Assist USSOCOM, its Component Commands, TSOCs and deployed forces with the enforcement of A&amp;A, as well as DoD, DIA, USSOCOM, Component Command, TSOC, and deployed forces’ connection standards for networks and systems.  Track and maintain A&amp;A databases, web sites and tools to ensure that networks, systems and devices are properly documented and managed from a cybersecurity perspective.  Track and report to higher headquarters organizations (e.g. USCYBERCOM, DIA) compliance with applicable Cybersecurity regulations and directives.  Ensure timely notifications are made to responsible individuals and organizations in order to prevent lapses in accreditations (e.g., 30, 60, and 90 day notices).  Develop and maintain an Information Security Continuous Monitoring (ISCM) Plan. This plan shall address ongoing awareness of information security, vulnerabilities, security controls, and threats to support organizational risk management decisions.  Identify, assess, and advise on cybersecurity control compliance and associated risks.  Coordinate with USCYBERCOM, DoD, DIA, NSA, DISA, and subordinate organizations to support the resolution of issues with security, A&amp;A, connection approvals, and waiver requests.  Perform network, cloud, information systems, hardware, software and device security authorization and assessments, as well as the application and execution of policy, including project management support services.  Validate the patching of systems, perform validation scanning, develop Plans of Action &amp; Milestone (POA&amp;Ms), and report as directed by applicable policies, procedures, and regulations.  Provide subject matter expertise for COA development and the implementation of Cybersecurity mitigation strategies.  Develop and implement required processes, procedures, and capabilities to mitigate vulnerabilities and weaknesses for software and hardware deployment.  Identify, implement and validate continued effectiveness of key performance parameters and applied security measures  Perform analytics on cybersecurity posture and provide reports to the AO/DAO and applicable stakeholders as required per ISCM and AO/DAO direction. Knowledge, Skills and Abilities:  Experience with the US Combatant Commands (USCENTCOM/USSOCOM) is desired.  Technical background with system administration experience, architecture and engineering preferred  Technical background in networking, identity management, Microsoft and Linux operating systems, database, and mobility  Working knowledge of the RMF.  Knowledge of the Telos Xacta or Enterprise Mission Assurance Support Services (eMASS) system is desired.  Must have excellent communications skill (written and oral) and interpersonal skills.  Knowledge and experience with DoD IA processes and policies (e.g., DODI <a href="http://8510.01" rel="noopener noreferrer nofollow ugc" target="_blank">8510.01</a>, NIST, CNSS and other cybersecurity policies, Chairman of the Joint Chiefs of Staff Manual (CJCSM) <a href="http://65101.01" rel="noopener noreferrer nofollow ugc" target="_blank">65101.01</a>, Incident Response and other IA policies).  Active TS/SCI clearance required. IAT Level III or IAM Level III requiredHalvik offers a competitive full benefits package including:Company-supported medical, dental, vision, life, STD, and LTD insuranceBenefits include 11 federal holidays and PTO.401(k) with company matchingFlexible Spending Accounts for commuter, medical, and dependent care expensesTuition AssistanceCharitable Contribution matchingTo comply with the guidance provided by the <a href="https://www.saferfederalworkforce.gov/overview/" rel="noopener noreferrer nofollow ugc" target="_blank">Safer Federal Workforce Task Force (Task Force) </a>for Federal Contractors and Subcontractors, Halvik is requiring COVID-19 vaccinations for all their employees except where an employee is legally entitled to an accommodation. Halvik Corp is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.

Cybersecurity Systems Analyst

City

Join Citi's forward-thinking security organization as a Cyber Security Engineer, where you will have the opportunity to shape the future of the Cyber Security in Citi. With a focus on cutting-edge technologies and industry best practices, you will design and implement robust security solutions that safeguard the organization against evolving cyber risks.As a Senior Cyber Security Engineer, you will:<ul><li>Design, configure, and implement Check Point firewall solutions to meet clients' security requirements</li><li>Collaborate with other cyber security professionals to evaluate and integrate new security technologies to design and implement comprehensive security controls that meet business and regulatory requirements.</li><li>Implement security best practices and policies to maintain the highest level of security</li><li>Stay up-to-date with the latest cyber security technologies and trends</li><li>Write technical reports, user guides, and author, maintain, and update technical documentation, ensuring compliance with industry standards</li><li>Conduct security assessments, penetration testing, and threat modeling to identify and remediate vulnerabilities in systems, applications, and networks</li></ul>Ideal background:<ul><li>The ideal candidate will have a deep understanding of Check Point firewall technology and will be responsible for designing, implementing, and maintaining firewalls and related security solutions</li><li>5+ years of experience in cyber security, with a strong background in security engineering, incident response, threat intelligence, and risk management</li><li>Excellent communication and interpersonal skills, with the ability to work effectively with cross-functional teams and stakeholders at all levels of the organization</li><li>Strong hands-on experience with firewall deployment, configuration, and troubleshooting</li><li>Understanding of security protocols, such as VPN, IPsec, and SSL/TLS and experience with network security, including firewalls, IDS/IPS, and VPNs</li><li>Familiarity with security best practices and industry standards, such as ISO 27001, NIST, and CIS or experience with security frameworks such as SANS, and industry certifications such as CISSP, CISM, or CISA</li><li>Familiarity with cloud security (AWS, Azure, or GCP) a plus</li></ul>Benefits:<ul><li>Competitive compensation package with a wide range of benefits:<ul><li>Cafeteria Program</li><li>Home Office Allowance - for colleagues working in hybrid and remote work models</li><li>Paid Parental Leave Program - maternity leave and paternity leave</li><li>Private Medical Care Program and onsite medical rooms at our offices</li><li>Pension Plan Contribution to voluntary pension fund</li><li>Group Life Insurance</li><li>Employee Assistance Program</li></ul></li><li>Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed</li><li>Flexible work arrangements to support colleagues’ in managing work - life balance</li><li>Continuous career progression opportunities across geographies and business lines</li><li>Inclusive and friendly corporate culture</li><li>Socially active employee communities with diverse networking opportunities</li></ul>Apply to join the world’s most global bank and discover the true extent of your capabilities!-------------------------------------------------Job Family Group: Technology-------------------------------------------------Job Family:Systems &amp; Engineering------------------------------------------------------Time Type:Full time------------------------------------------------------Citi is an equal opportunity and affirmative action employer.Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View the "<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law</a>" poster. View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law Supplement</a>.View the <a href="http://citi.com/citi/diversity/assets/pdf/eeo_aa_policy.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a>.View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Pay Transparency Posting</a>

Budapest

Senior Cyber Security Engineer (Hybrid)

Designs, develops, implements and troubleshoots various information system (IS) and cyber security software. Develops, tests and validates solutions to remediate exploitable conditions on devices such as web servers, mail servers, routers, firewalls and intrusion detection systems. Evaluates, codes and implements software fixes (patches) to address system vulnerabilities such as malicious code (e.g., viruses), system exploitation using SQL injection, cross-site scripting, buffer overflows, parameter tampering, hidden field manipulation, cookie poisoning and web services manipulation. Conducts security assessments of systems and applications using penetration tests, ethical hacking tools and risk assessment/mediation methodologies to evaluate vulnerabilities.**Python Development Experience** OSCE Certifications** 10+ Years Experience<h3>Knowledge</h3><ul><ul><li>Requires in-depth conceptual and practical knowledge in own job discipline and basic knowledge of related job disciplines</li><li>Solves complex problems</li><li>Works independently, receives minimal guidance</li><li>May lead projects or project steps within a broader project or may have accountability for on-going activities or objectives</li><li>Acts as a resource for colleagues with less experience</li><li>Level at which career may stabilize for many years or until retirement</li><li>Strong knowledge of most security concepts, and how they apply to various technologies.</li><li>Strong foundational, or expert-level knowledge, in 2 of the following: System administration, networking, cloud platforms, programming, incident response and threat analysis.</li><li>Serves as technical escalation point for system owner issues, and configuring new, complex systems for automated assessments.</li><li>Interprets and prioritizes vulnerability scan results into remediation actions, and is able to follow through with tracking actions through to completion.</li><li>Performs and recommends tools for performing vulnerability assessments on servers, workstations, web applications, containers, and other components.</li><li>Familiar with vulnerabilities, remediation, and industry-standard classification schemes (CVE and CVSS) and how to prioritize this information for any given system.</li><li>Performs assessments on web applications for common vulnerabilities (OWASP Top 10)</li><li>Regularly performs penetration tests, using basic and intermediate testing using common TTPs across many technologies at an enterprise-level scale.</li><li>Performs vulnerability assessments of systems, devices, and interfaces independently with high severity findings.</li><li>Summarizes and prioritizes findings into reports with standard templates to present to stakeholders. Improves reporting as needed.</li><li>Performs red team mission testing mechanisms, executing the missions from formulation to lessons learned.</li><li>Good understanding of writing automation using common programming or scripting languages such as Python, Bash, PowerShell, or JavaScript to support data collection, organization, and analysis and vulnerability assessments.</li><li>Experience with version control systems such as Git and interacting with REST APIs.</li><li>Familiar with vulnerabilities, remediation, and industry-standard prioritization and classification schemes (CVE, CVSS, vendor criticality and risk scores) and the limitations of each.</li><li>Understands vulnerability criticality and exploitation impact between various kinds of vulnerabilities across various related systems.</li><li>Foundational understanding of the major compliance regulations, such as PCI, HIPAA, HITRUST, or FedRAMP, with a good understanding of some of the controls surrounding vulnerability management</li></ul></ul><h3>Responsibilities</h3><ul><ul><li>Other Incidental tasks related to the job, as necessary.</li><li>Serves as technical escalation point for system owner issues, and configuring new, complex systems for automated assessments.</li><li>Interprets and prioritizes vulnerability scan results into remediation actions, and is able to follow through with tracking actions through to completion.</li><li>Performs and recommends tools for performing vulnerability assessments on servers, workstations, web applications, containers, and other components.</li><li>Familiar with vulnerabilities, remediation, and industry-standard classification schemes (CVE and CVSS) and how to prioritize this information for any given system.</li><li>Performs assessments on web applications for common vulnerabilities (OWASP Top 10)</li><li>Regularly performs penetration tests, using basic and intermediate testing using common TTPs across many technologies at an enterprise-level scale.</li><li>Performs vulnerability assessments of systems, devices, and interfaces independently with high severity findings.</li><li>Summarizes and prioritizes findings into reports with standard templates to present to stakeholders. Improves reporting as needed.</li><li>Performs red team mission testing mechanisms, executing the missions from formulation to lessons learned.</li><li>Good understanding of writing automation using common programming or scripting languages such as Python, Bash, PowerShell, or JavaScript to support data collection, organization, and analysis and vulnerability assessments.</li><li>Experience with version control systems such as Git and interacting with REST APIs.</li><li>Familiar with vulnerabilities, remediation, and industry-standard prioritization and classification schemes (CVE, CVSS, vendor criticality and risk scores) and the limitations of each.</li><li>Understands vulnerability criticality and exploitation impact between various kinds of vulnerabilities across various related systems.</li></ul></ul>The following information is required by the Colorado Equal Pay Transparency Act, New York City Pay Transparency Act, Washington Pay Transparceny Act and California Pay Transparency Act. This applies only to individuals working in the state of Colorado, Washington, California and New York City. The anticipated starting pay range of Colorado, California, Washington and New York City applicants for this role is $111,118-$1349,100 for CO and $122,500 – $163,100 for NYC, WA and CA. Unless already included in the posted pay range and based on eligibility, the role may include variable compensation in the form of bonus, commissions, or other discretionary payments. These discretionary payments are based on company and/or individual performance and may change at any time. Actual compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, licenses and certifications, and specific work location. Information on <a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Frackspace.jobs%2Fbenefits%2F&amp;data=05%7C01%7Cstorm.hostetter%40rackspace.com%7C9289594e631b4d9ba92c08dad95ad76f%7C570057f473ef41c8bcbb08db2fc15c2b%7C0%7C0%7C638061281448911773%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=acoFB7XqyigIIzFtP2%2BOXETRWVTlzHrru8APge6t6Sc%3D&amp;reserved=0" rel="noopener noreferrer nofollow ugc" target="_blank">benefits</a> offered is here.#LI-STORM#LI-DNIAbout Rackspace TechnologyWe are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.  More on Rackspace TechnologyThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

United States

Cyber Vulnerability Analyst & Penetration Tester III - US

Atlassian

Working at AtlassianAtlassian can hire people in any country where we have a legal entity. Assuming you have eligible working rights and a sufficient time zone overlap with your team, you can choose to work remotely or from an office (unless it’s necessary for your role to be performed in the office). Interviews and onboarding are conducted virtually, a part of being a distributed-first company.We are looking for an experienced Site Reliability Engineer to join our Storage Layer SRE (SLS) team. The successful candidate will have a strong background in MongoDb and experience using Golang and Python for automation. This individual will also be responsible for managing the cluster on the AWS cloud and have a strong understanding of Linux operating systems.Our Storage Layer SRE (SLS) team is focused on ensuring the highest levels of availability, reliability and performance for our MongoDB clusters using Ops Manager. We utilize the automation features of Ops Manager to automate routine tasks, such as provisioning, scaling, and backups, which enables us to quickly and easily manage the entire lifecycle of our MongoDB deployments. Additionally, we closely monitor the performance of our clusters and proactively troubleshoot and resolve any issues that may arise. Our team is dedicated to continuously improving our processes and best practices, in order to provide the best possible experience for our customers and end-users.<h3>Responsibilities:</h3><ul><ul><li>Ensure high availability and reliability of the MongoDb cluster</li><li>Hands-on experience with public cloud offerings (AWS components like EC2, CloudFormation, RDS, S3, DynamoDB, SQS, Kinesis - or equivalents, e.g. in GCP / Azure)</li><li>Develop and maintain automation tools in Golang/Python to manage the cluster and perform routine tasks</li><li>Monitor and troubleshoot issues related to the MongoDb cluster and take appropriate action to resolve them</li><li>Collaborate with the team to implement best practices for cluster management and performance optimization</li><li>Continuously improve the monitoring and alerting systems for the MongoDb cluster</li><li>Ensure compliance with security standards and best practices for the MongoDb cluster</li><li>Build and maintain infrastructure as code</li><li>Utilize the automation features of Ops Manager to automate routine tasks such as provisioning, scaling, and backups</li><li>Monitor the performance of the clusters and proactively troubleshoot and resolve any issues</li><li>Continuously improve processes and best practices to provide the best possible experience for customers and end-users.</li><li>Incident response, incident management, and experience in an on-call rotation.</li></ul></ul><h3>Requirements:</h3><ul><ul><li>Strong experience with MongoDb and cluster management</li><li>Proficient in Golang or Python and experience using it for automation</li><li>Experience with AWS cloud and system administrator knowledge</li><li>Strong understanding of Ubuntu and Linux operating systems</li><li>Experience with monitoring and alerting systems</li><li>Strong problem-solving and analytical skills</li><li>Experience with infrastructure as code</li><li>Excellent written and verbal communication skills</li><li>Experience working in an Agile environment is a plus.</li></ul></ul>Compensation:At Atlassian, we tie our base pay ranges to role and level. In the United States, that means your base pay ranges will fall into one of three geographic pay zones depending on your location. Our current base pay ranges for new hires in each zone are:Zone A: $130,100 - $199,500Zone B: $117,000 - $179,600Zone C: $107,900 - $165,600Within each range, base pay is ultimately determined based on your skills, expertise, and experience. This role may also be eligible for benefits, bonuses, commissions, and/or equity.Please see <a href="https://www.atlassian.com/company/careers/resources/interviewing/usa-pay-zones" rel="noopener noreferrer nofollow ugc" target="_blank">here</a> for more information on which locations are included in each of our geographic pay zones. However, please confirm the zone for your specific location with your recruiter.Our perks &amp; benefitsTo support you at work and play, our <a href="https://www.atlassian.com/company/careers/resources/perk-and-benefits/global" rel="noopener noreferrer nofollow ugc" target="_blank">perks and benefits </a>include ample time off, an annual education budget, paid volunteer days, and so much more.About AtlassianThe world’s best teams work better together with Atlassian. From medicine and space travel, to disaster response and pizza deliveries, Atlassian software products help teams all over the planet. At Atlassian, we're motivated by a common goal: <a href="https://www.atlassian.com/company" rel="noopener noreferrer nofollow ugc" target="_blank">to unleash the potential of every team</a>.We believe that the unique contributions of all Atlassians create our success. To ensure that our products and culture continue to incorporate everyone's perspectives and experience, we never discriminate based on race, religion, national origin, gender identity or expression, sexual orientation, age, or marital, veteran, or disability status. All your information will be kept confidential according to EEO guidelines.To learn more about our culture and hiring process, explore our <a href="https://www.atlassian.com/company/careers/resources" rel="noopener noreferrer nofollow ugc" target="_blank">Candidate Resource Hub</a>.

Austin

Site Reliability Engineer, Trello

Responsible for ensuring that Rackspace identifies and assesses threats to its network and data, monitors its network for malicious activity, investigates intrusions and other relevant events, and has a sophisticated and detailed understanding of the evolving threat landscape.** Experience with Opensource** Experience with Intel Platforms** Darkweb Experience<h3>Responsibilities</h3><ul><ul><li>Leads efforts to assess and disseminate information on threats related to the enterprise in regard to current vulnerability by managing and developing an emerging threat model. </li><li>Keeps up-to-date knowledge of new and emerging threats that can affect the organization's information assets through OSINT and commercial research and documents these findings in briefings which are presented to leadership. </li><li>Reviews other team members threat intelligence documentation and provides feedback and opportunities for enrichment. Uses this information to identify patterns and develop strategic recommendations to improve the threat intelligence program at Rackspace. </li><li>Documents threat intelligence research and observations in tickets and written artifacts, identifies mitigating/ compensating controls, and applies detection sets to the tooling. </li><li>Works closely with systems administrators on monitoring and performance issues for optimization purposes. </li><li>Drive security monitoring tuning in effort to eliminate false positives. </li><li>Collaborate with system owners for areas of responsibility in effort to baseline environments. </li><li>Conducts analysis using a variety of tools and data sets to identify indicators of malicious activity on the network. Leads threat analysis activities during response activities related to computer security incidents. </li><li>Provide accurate and priority driven analysis on cyber activity/threats. Perform payload analysis of packets. Detonate malware to assist with threat research.</li><li>Provides analysis of proposed countermeasures/detection activities and determines the best course of action. Implements or provides guidance to other team members on how to implement the actions identified. </li><li>Collaborates with incident response analysts to provide indications and warnings, and contributes to predictive analysis of malicious activity. </li><li>Participate in root cause analysis or lessons learned sessions.</li><li>Write technical articles for knowledge sharing. </li><li>Monitor threat actors and related threat objects for items of interest to Rackspace and keep information up to date. Work with the ISOC teams to emulate attacker activity. </li><li>Deploys new rules and rule sets as released by the vendors and works with the ISOC teams to implement applicable Indicators of Compromise (IOCs) into tooling. </li><li>Creates and disseminates guidance on the teams activities including developing Standard Operating Procedures (SOPs) and other runbooks.</li><li>Perform product evaluations and provide feedback on security products and services. </li><li>Represent Security Operations interests while building and maintaining successful relationships across multiple teams.</li></ul></ul><h3>Knowledge</h3><ul><ul><li>Significant practical experience with Linux and Windows operating systems. </li><li>Significant practical experience with networking protocols and systems administration. </li><li>Significant practical experience with log, network, and system forensic investigation techniques. </li><li>Significant practical experience with TCP/IP Networking and knowledge of the OSI model. </li><li>Significant practical experience with Intrusion Detection/Prevention Systems and custom rule writing. </li><li>Practical experience with packet analysis (Wireshark) and malware analysis. </li><li>Practical experience with common programming or scripting languages, including applying concepts to develop automation. </li><li>Significant practical experience identifying common indicators of compromise and of methods for detecting these incidents. </li><li>Significant practical experience monitoring threats via a SIEM console. </li><li>Significant practical experience performing analysis of log files from a variety of sources, to include individual host logs, network traffic logs, firewall logs, or intrusion prevention logs. </li><li>Experience with leveraging all source intelligence analysis. </li><li>Strong attention to detail. </li><li>Strong verbal and written communication skills. </li><li>Excellent problem solving, critical thinking, and analytical skills - ability to de-construct problems.</li></ul></ul><h3>Expereience</h3><ul><ul><li>Typically requires 7+ years experience performing threat research and implementation of rules and IOCs into tooling. </li><li>Experience applying ethical hacker techniques, phishing schemes, evaluating emerging logical security threats, and compromised server techniques preferred</li><li>Current GREM, GCIH, GCIA Certifications and related certifications preferred</li></ul></ul>The following information is required by the Colorado Equal Pay Transparency Act, New York City Pay Transparency Act, Washington Pay Transparceny Act and California Pay Transparency Act. This applies only to individuals working in the state of Colorado, Washington, California and New York City. The anticipated starting pay range of Colorado, California, Washington and New York City applicants for this role is $103,100-$137,000 for CO and $112,500 – $150,100 for NYC, WA and CA. Unless already included in the posted pay range and based on eligibility, the role may include variable compensation in the form of bonus, commissions, or other discretionary payments. These discretionary payments are based on company and/or individual performance and may change at any time. Actual compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, licenses and certifications, and specific work location. Information on <a href="https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Frackspace.jobs%2Fbenefits%2F&amp;data=05%7C01%7Cstorm.hostetter%40rackspace.com%7C9289594e631b4d9ba92c08dad95ad76f%7C570057f473ef41c8bcbb08db2fc15c2b%7C0%7C0%7C638061281448911773%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=acoFB7XqyigIIzFtP2%2BOXETRWVTlzHrru8APge6t6Sc%3D&amp;reserved=0" rel="noopener noreferrer nofollow ugc" target="_blank">benefits</a> offered is here.#LI-STORM#LI-DNIAbout Rackspace TechnologyWe are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.  More on Rackspace TechnologyThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

Threat Intelligence Analyst III - US

Deloitte

·         Do you have a passion for Cyber Security and the fascinating role of Privacy in our digital future?·         Are you interested in accessing the best learning and development opportunities in technology and business?·         How about working hands-on with a wide range of clients across different industries?·         Do you fancy collaborating directly with experts and developing innovative ideas to make an impact that matters? Deloitte's Summer Intern program, running from November 2023 to February 2024, is a great way to experience what life is like in the Cyber team by giving you real world exposure to clients and projects. The program is designed to help you make the best career choice by showing you what it's like working for Deloitte.What will you get to do? Cyber threats are constantly evolving and the security solution landscape is becoming more complex. That’s why our work is more meaningful (and exciting) than ever. Always one step ahead, we support clients with being secure, vigilant and resilient end-to-end advisory, implementation and managed services. We’re a team of strategists, disrupters, architects, hackers, and technologists that help clients address cyber threats to build smarter, faster and more connected futures. Pretty cool, right?Your future starts with us. As a worldwide leader in cyber strategy consulting and cyber intelligence, our team is comprised of 3 main pillars:Strategy &amp; Governance: We help clients develop their cyber security/data privacy strategies and governance and operating models to support security priorities in an era where cyber is everywhere. This involves interviewing client leadership to understand the design of strategies, contrasting with leading practices and providing feedback and recommendations for improvement.Implement &amp; Operate: We assist clients with creating and implementing bold cyber solutions that will allow their businesses and organisations to operate using the latest cyber capability’s. In addition, we also provide hands on support for a solution or service where required. Detect &amp; Respond: We monitor our client’s systems to detect vulnerabilities and attacks and rigorously test their cyber defences. This work involves: security monitoring and threat hunting, cyber analytics and data analysis, cyber incident response, security orchestration &amp; automationoffensive and defensive security exercises and actions, the list goes on…!<h3>Where can I do it?</h3><ul><ul><li>Auckland</li><li>Wellington </li><li>Christchurch</li></ul></ul><h3>Enough about us, let’s talk about you. </h3><ul><ul><li>Has a true passion for information security and technology – majored in IT, Computer Science, Engineering (Understanding or background in Business/Commerce/Law is a plus)</li><li>Great interpersonal skills and thrive in collaborative environments</li><li>Keen to get involved with driving technology-enabled change and delivering high quality outcomes for our clients</li><li>Have a sharp and analytical mind</li><li>Flexible, adaptable and resilient with the ability to embrace change and operate in ambiguous situations</li><li>Self-awareness and good emotional intelligence to navigate between clients with competing priorities</li></ul></ul>Sound like the sort of role for you? Apply now!Remember you will need your CV, covering letter and academic transcript. Please only apply once, multiple applications will not be considered. You must be legally entitled to live and work in New Zealand from the time of application to be considered.Please be aware, if a particular opportunity becomes oversubscribed, we will close it for applications before the stated deadline. We recommend you submit your full application as early as possibleFrom 11 April 2022 it is no longer a condition of our COVID Response policy that our people, clients, contractors and visitors be vaccinated to attend our premises, Deloitte events or client premises (except where a client has a vaccine pass mandate in place). However, given the changing nature of the pandemic, we do reserve the right, following a Health &amp; Safety Risk Assessment, to require that a role be performed by a person vaccinated against COVID-19 to minimise the health and safety risk to our people therefore ongoing collection of vaccination status will be important for managing future risks.Deloitte is an equal opportunity employer (EOE) and we are committed to providing a working environment that embraces and values diversity and inclusion. Knowing that people work best in different ways, we are happy to discuss alternative arrangements if the working pattern you are looking for is not specifically indicated.  If you have any support or access requirements, we encourage you to advise us at the time of application to assist you through the recruitment process. We understand there have been cases of phishing emails purporting to be recruiters for Deloitte.  Any communication from Deloitte New Zealand regarding an employment application will come from a “@deloitte.co.nz” or from our Applicant Tracking System “@hire.lever.co” email address or our video interview platform deloittenz.hirevue.com. If you have received a suspicious email and would like to verify validity of any communications that appear to be from Deloitte New Zealand, please contact us on NZinfo@deloitte.co.nz

Auckland

2023/2024 Intern | Risk Advisory | Cyber | Auckland

Wellington Region

2023/2024 Intern | Risk Advisory | Cyber | Wellington

- Do you have a passion for Cyber Security and the fascinating role of Privacy in our digital future?- Are you interested in accessing the best learning and development opportunities in technology and business?- How about working hands-on with a wide range of clients across different industries?- Do you fancy collaborating directly with experts and developing innovative ideas to make an impact that matters?What will you get to do? Cyber threats are constantly evolving and the security solution landscape is becoming more complex. That’s why our work is more meaningful (and exciting) than ever. Always one step ahead, we support clients with being secure, vigilant and resilient end-to-end advisory, implementation and managed services. We’re a team of strategists, disrupters, architects, hackers, and technologists that help clients address cyber threats to build smarter, faster and more connected futures. Pretty cool, right?Your future starts with us. As a worldwide leader in cyber strategy consulting and cyber intelligence, our team is comprised of 3 main pillars:Strategy &amp; Governance: We help clients develop their cyber security / data privacy strategies and governance models to support security priorities in an era where cyber is everywhere. This involves interviewing client leadership to understand the design of strategies, contrasting with leading practices and providing feedback and recommendations for improvement.Implement &amp; Operate: We assist clients with creating and implementing bold cyber solutions that will allow their businesses and organisations to operate using the latest cyber capability’s. In addition, we also provide hands on support for a solution or service where required. Detect &amp; Respond: We monitor our client’s systems to detect vulnerabilities and attacks and rigorously test their cyber defences. This work involves: security monitoring and threat hunting, cyber analytics and data analysis, cyber incident response, security orchestration &amp; automation,offensive and defensive security exercises and actions, the list goes on…!<h3>Where can I do it?</h3><ul><ul><li>Auckland</li><li>Wellington </li><li>Christchurch</li></ul></ul><h3>Enough about us, let’s talk about you. </h3><ul><ul><li>Has a true passion for information security and technology – majored in IT, Computer Science, Engineering (Understanding or background in Business/Commerce/Law is a plus)</li><li>Great interpersonal skills and thrive in collaborative environments</li><li>Keen to get involved with driving technology-enabled change and delivering high quality outcomes for our clients</li><li>Have a sharp and analytical mind</li><li>Great written skills for writing client reports that can translate complex issues to simple terms</li><li>Flexible, adaptable and resilient with the ability to embrace change and operate in ambiguous situations</li><li>Self-awareness and good emotional intelligence to navigate between clients with competing priorities</li></ul></ul>Sound like the sort of role for you? Apply now!Remember you will need your CV, covering letter and academic transcript. Please only apply once, multiple applications will not be considered. You must be legally entitled to live and work in New Zealand from the time of application to be considered.Please be aware, if a particular opportunity becomes oversubscribed, we will close it for applications before the stated deadline. We recommend you submit your full application as early as possibleFrom 11 April 2022 it is no longer a condition of our COVID Response policy that our people, clients, contractors and visitors be vaccinated to attend our premises, Deloitte events or client premises (except where a client has a vaccine pass mandate in place). However, given the changing nature of the pandemic, we do reserve the right, following a Health &amp; Safety Risk Assessment, to require that a role be performed by a person vaccinated against COVID-19 to minimise the health and safety risk to our people therefore ongoing collection of vaccination status will be important for managing future risks.Deloitte is an equal opportunity employer (EOE) and we are committed to providing a working environment that embraces and values diversity and inclusion. Knowing that people work best in different ways, we are happy to discuss alternative arrangements if the working pattern you are looking for is not specifically indicated.  If you have any support or access requirements, we encourage you to advise us at the time of application to assist you through the recruitment process. We understand there have been cases of phishing emails purporting to be recruiters for Deloitte.  Any communication from Deloitte New Zealand regarding an employment application will come from a “@deloitte.co.nz” or from our Applicant Tracking System “@hire.lever.co” email address or our video interview platform deloittenz.hirevue.com. If you have received a suspicious email and would like to verify validity of any communications that appear to be from Deloitte New Zealand, please contact us on NZinfo@deloitte.co.nz

2024 Graduate | Risk Advisory | Cyber | Wellington

2024 Graduate | Risk Advisory | Cyber | Auckland

· Fast track your career and learn alongside high-performing people·       Become a trusted advisor to New Zealand’s most iconic businesses·      Wellington based role Deloitte are industry leaders in Cyber and help a variety of organisations, from large government agencies and iconic Kiwi institutions to small innovative start-ups to improve the lives of all New Zealanders in a safe and secure way. Now, we’re on the lookout for someone like you, a talented Cyber Security Consultant, to join us in our cyber, privacy and resilience team! About the teamYou will be joining a close knit, international team who prides themselves on being a recognised global leader in cyber security consulting. Our aim is to ensure that all our people feel comfortable to bring their whole selves to work, and as a result, create a workplace that encourages the true spirit of being you. We take our coaching seriously and have a strong focus on helping our people achieve their potential and advance through their career.  You will bring a high level of energy, enjoy getting things done, have the ability to think laterally and innovate, and most importantly have a love for learning.<h3>What will your typical day look like?</h3><ul><ul><li>Collaborate and build lasting relationships with our clients and internal teams to deliver cyber services.</li><li>Manage various project priorities to support client requirements while working across our offerings, such as managed services, cyber incident response, security assessments and security architecture and implementations.</li><li>Apply the latest security techniques, tools and trends to bring together a new vision to help support business needs in the areas of cloud adoption, digital working, automation, networking through secure by design.</li><li>Help to share knowledge and learnings to continuously develop colleagues and a culture that aligns to Deloitte’s core values, making an impact that matters, all while delivering exceptional client service.</li><li>Mindfulness to continuously cultivate client relationships and demonstrating a drive and passion to simply get things done as the trusted advisor.</li></ul></ul><h3>Enough about us, let’s talk about you! You are someone with:</h3><ul><ul><li>1 - 5 years of proven experience delivering cyber security services, cyber security consulting or cyber security solutions. Appropriate certifications and qualifications in IT Security or  Computer Science will be highly beneficial.</li><li>An outcomes focused mindset who can comfortably translate business requirements into deliverable actions that meet or exceed client expectations. You are also able to translate complex technical risks into business terms.</li><li>The ability to demonstrate a good level of understanding across a range of areas that could include cloud security, cyber incident response practices, DevSecOps, identity &amp; access management, security testing and privacy.</li><li>Experience working in consulting/professional services environment.</li><li>Excellent command on English, spoken and written, as report writing, and presentations are a core part of the position.</li></ul></ul>Next Steps!Have we caught your attention?Apply today! From 11 April 2022 it is no longer a condition of our COVID Response policy that our people, clients, contractors and visitors be vaccinated to attend our premises, Deloitte events or client premises (except where a client has a vaccine pass mandate in place). However, given the changing nature of the pandemic, we do reserve the right, following a Health &amp; Safety Risk Assessment, to require that a role be performed by a person vaccinated against COVID-19 to minimise the health and safety risk to our people therefore ongoing collection of vaccination status will be important for managing future risks.Deloitte is an equal opportunity employer (EOE) and we are committed to providing a working environment that embraces and values diversity and inclusion. Knowing that people work best in different ways, we are happy to discuss alternative arrangements if the working pattern you are looking for is not specifically indicated.  If you have any support or access requirements, we encourage you to advise us at the time of application to assist you through the recruitment process. We understand there have been cases of phishing emails purporting to be recruiters for Deloitte.  Any communication from Deloitte New Zealand regarding an employment application will come from a “@deloitte.co.nz” or from our Applicant Tracking System “@hire.lever.co” email address or our video interview platform deloittenz.hirevue.com. If you have received a suspicious email and would like to verify validity of any communications that appear to be from Deloitte New Zealand, please contact us on NZinfo@deloitte.co.nz

Cyber Security Consultant/Senior Consultant

Apply to Incident Response Cyber Security Jobs in companies remotely and near you. New Incident Response Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Cybersecurity Systems Analyst - Expert at Halvik	Full Time Analyst Incident Response DOD
Cybersecurity Systems Analyst - Associate at Halvik	Full Time Analyst Incident Response DOD
Cybersecurity Systems Analyst - Intermediate at Halvik	Full Time CISM CISO Analyst Incident Response
Cybersecurity Systems Analyst - Senior at Halvik	Full Time CISM CISO Analyst Incident Response
IAM AWS Technical Lead (Contractor Role) at Rackspace	Remote Incident Response
Technical Delivery Lead - Private Cloud at Rackspace	Remote Full Time Manager Incident Response Consulting
Cybersecurity Systems Analyst at Halvik	Full Time Analyst Incident Response DOD
Senior Cyber Security Engineer (Hybrid) at City	Remote Full Time CISM Incident Response
Cyber Vulnerability Analyst & Penetration Tester III - US at Rackspace	Remote Full Time Analyst Incident Response Javascript
Site Reliability Engineer, Trello at Atlassian	Remote Full Time Administrator Manager Incident Response
Threat Intelligence Analyst III - US at Rackspace	Remote Full Time Forensic Ethical Hacker Analyst
2023/2024 Intern \| Risk Advisory \| Cyber \| Auckland at Deloitte	Remote Internship Incident Response Consulting
2023/2024 Intern \| Risk Advisory \| Cyber \| Wellington at Deloitte	Remote Internship Incident Response Consulting
2024 Graduate \| Risk Advisory \| Cyber \| Wellington at Deloitte	Remote Full Time Incident Response Consulting
2024 Graduate \| Risk Advisory \| Cyber \| Auckland at Deloitte	Remote Full Time Incident Response Consulting
Cyber Security Consultant/Senior Consultant at Deloitte	Full Time Consultant Incident Response Devsecops Consulting

Incident Response Cyber Security Jobs

16 Incident Response Cyber Security Jobs found. Page 1 of 1

Subscribe to the weekly
Cyber Security Jobs Newsletter

Incident Response Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Cyber Security Jobs by Location

Incident Response Cyber Security Jobs

16 Incident Response Cyber Security Jobs found. Page 1 of 1

Subscribe to the weekly Cyber Security Jobs Newsletter

Incident Response Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Cyber Security Jobs by Location

Subscribe to the weekly
Cyber Security Jobs Newsletter