Kin + Carta

<p>At Kin + Carta, we’ve got opportunities to offer you — for growth, for leadership, for big, world-changing impact and for, dare we say it, fun. We are a global workforce that is committed to building a world that works better for everyone. And that starts with our Kin. That’s why we’re proud of: </p>
<ul>
<li><a href="https://www.kinandcarta.com/en-us/careers/life-at-kin-and-carta/?utm_source=website&amp;utm_medium=retargeting&amp;utm_campaign=EmployerBrand&amp;utm_content=job_description" rel="noopener noreferrer nofollow ugc" target="_blank">The life we create within our virtual walls, every day</a></li>
<li><a href="https://www.kinandcarta.com/en-us/insights/2022/05/why-work-for-a-b-corp/?utm_source=website&amp;utm_medium=retargeting&amp;utm_campaign=EmployerBrand&amp;utm_content=job_description" rel="noopener noreferrer nofollow ugc" target="_blank">Being B Corp certified</a></li>
<li><a href="https://www.kinandcarta.com/en-us/insights/2022/04/2022-womens-choice-award/?utm_source=website&amp;utm_medium=retargeting&amp;utm_campaign=EmployerBrand&amp;utm_content=job_description" rel="noopener noreferrer nofollow ugc" target="_blank">Our honor as a “Best Company to Work For” by Women's Choice Award</a></li>
</ul>
<h3>The role</h3>
<p>The ideal Americas Information Security Officer for Kin + Carta is innovative, passionate about global information security with both policy and technical experience. This person looks to continually learn, and enjoys sharing expertise. Strong verbal and written communication are a must. Experience working with HITRUST, or Nessus is a plus.</p>

<h3>Role responsibilities</h3>
<ul>
<li>Pursue infosec excellence for the region with the continuous development and management of K+C InfoSec standards to ensure compliance for HITRUST, PCI-DSS, ISO 27001 and other required controls.</li>
<li>Perform internal audits on information security in line with international standards, which includes but not restricted to HITRUST</li>
<li>Security assess new and current suppliers - plan, organize and review Digital implementations, tools, APIs and platforms. </li>
<li>Support the completion of stakeholder infoSec schedules for RFPs, MSAs, delivery and project teams, by resolving project queries and approval of security requirements </li>
<li>Contribute to the InfoSec Risk Register and collaborate on treatment of risks tailored to the needs of the region. Manage and track mitigations, remediations and compensating controls.</li>
<li>Completing Information Security assessments from external parties in a timely manner</li>
<li>Contribute to the performance and improvement of the ISMS</li>
<li>Establish and review monitoring and logging process and standards </li>
<li>Designing, delivering and monitoring InfoSec training and awareness</li>
<li>Reviewer and approver of ISMS documentation </li>
<li>Collaborate with K+C and CDS, providing information security consultancy, strategy and implementation planning along with the prioritization of the highest impact projects </li>
<li>Joint responsibility with the Digital Defense team for all BAU tickets and tasks and recording time and tag allocation.</li>
</ul>

<h3>Minimum qualifications</h3>
<p><strong>We want all new hires to succeed in their roles at Kin + Carta. That's why we've outlined the job requirements below. To be considered for this role, it's important that you meet all Minimum Qualifications. If you do not meet all of the Preferred Qualifications, we still encourage you to apply.</strong></p>
<ul>
<li>Experience in a security role with the emphasis on risk, policy and governance</li>
<li>ISMS Documentation Development</li>
<li>A working understanding of security frameworks or methodologies, HITRUST and/or ISO27001, NIST, CIS</li>
<li>Exposure to Enterprise Security tools AV, Vulnerability, IAM, SSO.</li>
<li>Continuous improvement with activities that stretch you beyond your job role, an opportunist who finds the positive side of a challenge.</li>
<li>Critical thinking skills with a mindset that considers solutions prior to presenting challenges</li>
</ul>

<h3>Preferred qualifications</h3>
<ul>
<li>BS in Computer Science, or a related field</li>
<li>Certified CSF Practitioner or training towards</li>
<li>CompTIA Security+ Certification </li>
<li>Microsoft Certified Cybersecurity</li>
<li>CISSP, CISM or equivalent training</li>
<li>Experience working with international security standards  </li>
</ul>

<h3>About Kin + Carta</h3>
<p>Kin + Carta is a global digital transformation consultancy committed to working alongside our clients to build a world that works better #ForEveryone. Our 2,000 curious minds make creative connections between people, data and technology to create connected outcomes across the full lifecycle of the product and platform ecosystems.</p>
<p>We’re makers, builders and creators by nature, and we come to work every day to build experiences for some of the world’s most influential companies. We help businesses accelerate their digital roadmap, rapidly innovate, modernize their systems, enable their teams and optimize for continued growth. </p>
<p>We are a technology business with trust and human connection at its heart. <a href="https://www.kinandcarta.com/en-us/social-responsibility/" rel="noopener noreferrer nofollow ugc" target="_blank">As a Certified B Corp</a>, our triple bottom line focus on people, the planet and profit is at the core of everything we do.</p>
<p>We welcome our Kin to show up as their authentic selves every day. Because this is so important to us, Kin + Carta is proud to be an equal opportunity employer. To read further about our commitment to Inclusion, Diversity, Equity and Awareness, check out the <a href="https://www.kinandcarta.com/en-us/idea/" rel="noopener noreferrer nofollow ugc" target="_blank">IDEA page</a> on our website. </p>
<p>If you need accommodations at any point in the application or interview process, please let us know. </p>

United States

Americas Information Security Officer

SciTec

<p>SciTec, Inc. is a dynamic small business which delivers advanced sensor processing technologies and scientific instrumentation capabilities in support of national security and defense applications. We support customers throughout the Department of Defense and U.S. Government in building innovative new tools to deliver unique, world-class data exploitation capabilities.</p> <p>SciTec has an immediate opportunity for a talented Information Systems Security Manager (ISSM) in our Boulder, CO office. The ISSM will be responsible the accreditation and administration of a secure computing environment, both leading the implementation of technical security controls and spearheading coordination with accrediting and assessing agencies. The ISSM will need to work well in a team environment with a commitment to ensure security awareness and techniques are communicated effectively across the workforce. SciTec is searching for a candidate who will thrive in an environment where they are both expected to take the initiative to solve problems and empowered to see problems through to their conclusion.</p><p><strong>Requirements</strong></p><p>Duties:</p> <ul> <li>Ensure the day-to-day implementation, oversight, continuous monitoring, and maintenance of the security configuration, practices, and procedures for each information system </li> <li>Provide liaison support between the ISSM, system administrators, and system users</li> <li>Ensure that selected security controls are implemented and operating as intended during all phases of the information system lifecycle </li> <li>Ensure that system security documentation is developed, maintained, reviewed, and updated on a continuous basis </li> <li>Conduct required information system vulnerability scans according to risk assessment parameters. </li> <li>Develop Plan of Action and Milestones (POAMs) in response to reported security vulnerabilities </li> <li>Coordinate system owner concurrence for correction or mitigation actions </li> <li>Monitor security controls for information systems to maintain security Authorized to Operate (ATO) </li> <li>Upload all security control evidence to the Governance, Risk, and Compliance (GRC) application (eMASS) to support security control implementation during the monitoring phase </li> <li>Ensure that changes to an information system, its environment, and/or operational needs that may affect the authorization status are reported to the system owner and information system Security Manager (ISSM) </li> <li>Ensure the removal and retirement of information systems being decommissioned in coordination with the system owner and ISSM </li> <li>At least one year serving as an Information Systems Security Officer (ISSO) at a cleared facility. </li> <li>Familiarity with the use and operation of security tools including SCAP, OpenRMF, Tenable Nessus or similar applications. </li> </ul> <ul> <li>The      ISSO will apply broad technical, operational, and policy expertise in the      management of all aspects of operational Information System Security and      Computer Network Defense.</li> <li>Is      technical lead for the Risk Management Framework (RMF) package creation      and compliance </li> <li>Contribute      to Cybersecurity Maturity Model Certification (CMMC) efforts on the unclassified      network.</li> <li>Performs      other related duties and assignments as required.</li> </ul> <p>Requirements:</p> <ul> <li>Must      be a U.S. Citizen.  </li> <li>Must      have at least a high school diploma.</li> <li>Hold      an active Secret, or higher, US government security clearance.</li> </ul> <ul> <li>Have      at least two years of systems administration experience.</li> <li>Must      have experience with Windows/Linux based troubleshooting; understand where      to locate specific log files for forensics.</li> <li>Understanding      and practical application with one or more of DoD policies and directives,      NIST standards, RMF controls, JSIG, and/or CMMC</li> <li>Experience      with certifying compliance of various operating systems.</li> <li>Ability      to evaluate effectiveness, suitability, survivability and interoperability      of systems, relating to Cybersecurity and provide key feedback to improve      the overall Cybersecurity posture </li> <li>Ability      to research and develop solutions to emerging cyber threats.</li> <li>Proficient with      Microsoft Word, Microsoft Excel, OneDrive </li> <li>Self-starter      with ability to work independently</li> <li>Ability      to understand, explain, interpret, and apply rules, regulations,      directives, and procedures</li> <li>Have      a deep understanding of computer operating systems, hardware, and software      </li> </ul> <p>Preferred experience, skills, and abilities</p> <ul> <li>Have      an active Top Secret security clearance or recently active clearance      within 24 months</li> <li>Possess      a current DoD 8570 certification (Security+, CISSP, etc.)</li> <li>Four-year      degree in Information Technology, Cybersecurity, Computer Science or      related field</li> <li>Python,      PHP, Perl, PowerShell, or Bash scripting experience.</li> <li>Experience      working with the ELK stack.</li> <li>Experience      administering the system functions including security policies and account      management of Microsoft Windows and Server as well as Linux/Unix-based      systems.</li> <li>Have      experience with VMware or other virtualization software.</li> <li>Experience      with Azure, AWS, or similar cloud environments</li> <li>Have      experience working in or directly supporting the DoD or other U.S.      government entities</li> <li>Incident      handling experience </li> </ul><p><strong>Benefits</strong></p><p>As a small business, SciTec, Inc. offers room for growth and a flexible, fast-paced work environment. We work daily to develop one-of-a-kind solutions for challenging national problems. SciTec encourages collaboration across our offices in Boulder, El Segundo, Dayton, Huntsville, Virginia, and our headquarters in Princeton, and provides access to opportunities across the corporate spectrum. Initiative is expected and encouraged, all employees have the opportunity and flexibility to broaden their technical horizons, and our daily work makes an impact on the world around us. SciTec offers a highly competitive salary and benefits package, including a variety of benefits including health insurance, parental leave, vision, life, and disability insurance, 401(k)plan with employer contribution, holidays and paid time off plans (including vacation and sick time), an annual profit-sharing plan, and an annual performance bonus plan. The salary range for this position is $87,000 to $20,000; however, SciTec considers several factors when extending an offer of employment, including but not limited to, the role and associated responsibilities, a candidate’s work experience, education/training, and key skills. This is not a guarantee of compensation. SciTec is committed to hiring and retaining a diverse workforce and is proud to be an Equal Opportunity/Affirmative Action employer.</p>

Boulder

Information System Security Officer (ISSO)

Palantir Technologies

A World-Changing CompanyAt Palantir, we’re passionate about building software that solves problems. We partner with the most important institutions in the world to transform how they use data and technology. Our software has been used to stop terrorist attacks, discover new medicines, gain an edge in global financial markets, and more. If these types of projects excite you, we'd love for you to join us.The RoleImplementation Security Engineers work directly with Palantir’s U.S. Government customers to ensure that Palantir’s software solutions meet and are accredited to Government information security requirements. Our customers rely on Palantir’s platforms for their most critical operations and our ability to successfully implement and demonstrate the security of our software is essential to customer trust and mission success. We're seeking dedicated and motivated individuals with Systems Administration, Software Development, or Systems Engineering backgrounds to join our team to support solution accreditation for government agencies. You will collaborate with other Palantir engineers to ensure security policies and settings are in place, build standardized security documentation, and generate evidence of compliance once settings have been applied. You will assemble artifacts and evidence into an organized repository and serve as the primary point of contact for one or more U.S. Government customers on security and compliance requirements and questions. You will also work with Palantir software developers and architects to recommend specific technical features in new or existing software in order to ensure compliance.There is no typical day for our Implementation Security Engineers. We operate software in diverse environments around the world, including AWS, Azure, on-premises, and at all classification levels. Correspondingly, each customer has different security requirements. We will rely on you to ensure the ongoing security and trust of these clients via hands-on access and coordination with other teams. In this role, you will learn every day. Palantir's technology is cutting-edge and constantly evolving. You will build knowledge and skills in the latest cloud, edge, and information security technologies with on-the-job education and mentorship. Curiosity and a critical eye are key to success.
<h3>Core Responsibilities</h3>
<ul>
<li>Apply and monitor security policies and configuration settings.</li><li>Write security documentation that explain the security policies and compliance requirements that are in place for our software.</li><li>Create and organize artifacts and evidence into a compliance repository.</li><li>Serve as a customer point of contact on security and compliance requirements and questions.</li><li>Understand changing technical and policy requirements and how that impacts existing policies and configuration settings.</li></ul>
<h3>What We Value</h3>
<ul>
<li>Close attention to detail, strong organizational skills, and clear technical documentation writing skills.</li><li>Ability to analyze software implementation and compare with existing security requirements.</li><li>Understanding of configuration management and automation systems such as a Puppet, Terraform, CloudFormation, Chef, or Ansible.</li><li>Comfort using a Version Control System such as Git.</li><li>Familiarity with and ability to independently use vulnerability scanning utilities such as Nessus and OpenSCAP.</li><li>Specific experience working in cloud environments such as Amazon Web Services (AWS).</li><li>Specific experience accrediting IT systems against U.S. Government standards such as NIST SP 800-53, CNSSI 1253, and the DISA STIGs, using frameworks like RMF or DIACAP.</li><li>Specific experience using the eMASS or Xacta accreditation management software systems.</li><li>Willingness and interest to travel as needed to client sites. Ability to travel 25-50% preferred, but requirements vary by team and location.</li></ul>
<h3>Requirements</h3>
<ul>
<li>Background in systems administration, software development, systems engineering, or deep familiarity with Linux operating systems.</li><li>Active DOD 8570 IAT II or above certification (e.g. CISSP or Security+), or ability to obtain within one month of start date.</li><li>(As required by U.S. Government contract) U.S. citizenship.</li><li>(As required by U.S. Government contract) Varied clearance levels (e.g., SECRET, TS, TS/SCI with CIP, TS/SCI with FSP).</li></ul>Palantir is committed to promoting a culture of diversity, equity, and inclusion and is proud to be an Equal Employment Opportunity and Affirmative Action employer. We believe that all Palantirians share the responsibility of upholding our commitment to these values and encourage candidates from a wide range of backgrounds, perspectives, and lived experiences to join us in solving the world’s hardest problems. Palantir does not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Palantir is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities. Please see the United States Department of Labor’s <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO poster</a> and <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO poster supplement</a> for additional information.Palantir is committed to making the job application process accessible to everyone. If you are living with a disability (visible or not visible) and need to request a reasonable accommodation for any part of the application or hiring process, please <a href="mailto:accommodations@palantir.com" rel="noopener noreferrer nofollow ugc" target="_blank">reach out </a>and let us know how we can help.

New York

Implementation Security Engineer

Shift5

<p><strong>Description: </strong></p>
<p>Shift5 is seeking an experienced<strong> Information Systems Security Manager</strong> to bolster the security of our business and operational infrastructure. In this role, you will develop, plan and implement information security standards, procedures and guidelines for systems and applications that align with compliance requirements, program and business objectives. You’ll develop a system security plan that enables and supports a program and business objectives, while at the same time, adhering to mission-critical national security requirements regarding the protection of data, systems and capabilities. </p>
<p>As Shift5’s ISSM, you’ll be expected to communicate and interact with all system stakeholders to include Senior Management and our customers. You’ll ensure all stakeholders follow information security policies, standards, and methodologies to obtain and/or maintain security authorizations for information systems. You’ll ensure compliance is met, while enabling approaches and systems that allow us to advance our mission. In addition, you’ll collaborate with the Facility Security Officer and Head of IT, while maintaining the appropriate operational Information Assurance posture for all systems, programs, or enclaves.</p>
<p>Shift5 is a rapidly growing cybersecurity scale-up. We specialize in cybersecurity technology for operational systems, data collection, and insights for a wide variety of operational systems. To put it simply, we defend planes, trains and tanks from cyberattack. We are a collaborative, passionate and driven cadre of cyber security experts. Our engineers are multidisciplinary and our team is dynamic. We’re a growing company focused on helping our customer’s fleets run smarter and safer by capitalizing on mountains of data resting right about the wheels. Come join us.</p>
<p><strong>In this role you will be expected to:</strong></p>
<ul>
<li>Ensure adherence to all aspects of a rigorous Risk Management Framework (RMF) compliance program as stipulated by NISPOM/DAAPM, JSIG, ICD 503, STIGs, associated NIST publications, and CNSS Instruction 1253.</li>
<li>Provide support to customer organizations and maintain the appropriate operational IA posture for systems, programs, or enclaves.</li>
<li>Assist in the development and execution of an enterprise level continuous monitoring program to minimize security risks and ensure compliance with that program on a routine basis.</li>
<li>Development and update the system security plan, as well as manage and control changes to the system and assess the security impact of those changes.</li>
<li>Help plan, coordinate, and implement IT security programs and policies.</li>
<li>Provide configuration management guidance for security-relevant information system software, hardware, and firmware.</li>
<li>Interpret the Joint Special Access Program Implementation Guide (JSIG) in determining technical IA requirements and conducting cyber risk assessment activities</li>
<li>Develop system documentation for information system authorization, security management, and continuous monitoring of both networked and standalone information systems.</li>
<li>Ensure that selected security controls are implemented and operating as intended during all phases of the IS lifecycle.</li>
<li>Provide “eyes on glass” security monitoring in accordance with DoD requirements by monitoring security infrastructure and security alarm devices for Indicators of Compromise (IOC) utilizing SIEM and cybersecurity toolsets.</li>
<li>Perform hardware/software configuration management, data integrity containments and investigations on IA related security events.</li>
<li>Participate in implementation of current and future security domains including those which may introduce new service areas (e.g. Cloud Computing, DevSecOps).</li>
</ul>
<p><strong>We're looking for someone who is/has:</strong></p>
<ul>
<li>ISSM or relevant cybersecurity experience.</li>
<li>Run and maintain the entire information assurance program.</li>
<li>Working knowledge of system functions, security policies, technical security safeguards, and operational security measures.</li>
<li>Maintaining classified networks in accordance with various government requirements and standards. </li>
<li>Experience auditing and certifying compliance of various systems (Windows, Linux, Network Devices and peripherals).</li>
<li>Experience with development and delivery of IA-related briefings and training material.</li>
<li>Experience with compliance and vulnerability scanning tools (Nessus, SCAP, ACAS, SCC).</li>
<li>Experience with the review and creation of mitigation reports from compliance and vulnerability scanning tools (Nessus, SCAP, ACAS, SCC).</li>
<li>Experience translating operational requirements into technical requirements and architectures needed to meet program objectives.</li>
<li>Experience conducting all aspects of a self-inspection and support to routine DCSA audits. </li>
<li>Active Top Secret security clearance or ability to obtain one. </li>
</ul>
<p><strong>Compensation &amp; Benefits:</strong></p>
<ul>
<li>Competitive salary and stock options in a fast-growing startup</li>
<li>Employer-paid medical, dental and vision coverage</li>
<li>Health Savings Account with annual employer contributions</li>
<li>401k with employer contributions</li>
<li>Life Insurance</li>
<li>Uncapped paid time off policy</li>
<li>Flexible work &amp; remote work policy</li>
<li>Tax-deferred public transit benefits with Metro SmartBenefits (DC/MD/VA)</li>
</ul>
<p>We are committed to building an inclusive culture of belonging that embraces the diversity of our people and represents the communities in which we work and the customers we serve. We know the happiest and highest performing teams include people with diverse perspectives and ways of solving problems. We strive to attract and retain talent from all backgrounds and create workplaces where everyone feels empowered to bring their full, authentic selves to work. </p>
<p>Shift5 is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sexual orientation, gender identify, national origin, disability, age, marital status, ancestry, projected veteran status, or any other protected group or class.</p>

Rosslyn

Information Systems Security Manager

Veeva Systems

Veeva [NYSE: VEEV] is the leader in cloud-based software for the global life sciences industry. Committed to innovation, product excellence, and customer success, our customers range from the world’s largest pharmaceutical companies to emerging biotechs. Veeva’s software helps our customers bring medicines and therapies to patients faster.We are the first public company to become a <a href="https://www.veeva.com/pbc/" rel="noopener noreferrer nofollow ugc" target="_blank">Public Benefit Corporation</a>. As a PBC, we are committed to making the industries we serve more productive, and we are committed to creating high-quality employment opportunities.Veeva is a <a href="https://www.veeva.com/work-anywhere/" rel="noopener noreferrer nofollow ugc" target="_blank">Work Anywhere</a> company which means that you can choose to work in the environment that works best for you - on any given day. Whether you choose to work remotely from home or work in an office - it’s up to you.The RoleVeeva’s Security Engineering Team is seeking Red Teamers to help keep Veeva secure and safe from attackers. Our team in Columbus is growing, and we want you to join us! This role has a broad scope, ranging from attacking Veeva’s AWS services, infrastructure and processes, and products. Discovering weaknesses in Veeva’s architecture. Working with product and platform teams performing penetration tests on new products. Working with third-party testers and researchers to sharpen our detective and preventative capabilities. This role presents an ultimate test of one’s security knowledge and ability, along with the support of a team of highly skilled individuals.
<h3>What You'll Do </h3>
<ul>
<li>A Red Team Security Engineer at Veeva is expected to be strong in offensive security domains, testing, techniques, and practices.  Engineers in this role work closely with application product teams throughout Veeva. Security engineers will provide technical leadership and advice to developers, engineers, and third-party consultants.</li><li>As a Red Team Engineer, you must show exemplary judgment in making informed technical trade-offs of testing, short-term fixes, long-term security gains, and product team development. You must also demonstrate resilience and navigate difficult situations with composure and tact. Above all else, a strong sense of customer obsession is necessary to focus on the ultimate goal of keeping Veeva and its customers secure.</li><li>Participate in Red Team engagements throughout Veeva with few limits and restrictions</li><li>Conduct full-cycle engagements with development teams independently, or as part of a team</li><li>Perform manual examination of Veeva systems, websites, and networks to discover weaknesses</li><li>Thoroughly document exploits, attack chains, and proof of concept scenarios for technical reviews</li><li>Communicate findings and discoveries to prioritize and execute remediation plans</li><li>Coordinate findings and remediation from third-party penetration testers</li><li>Maintain AWS VPC and related testing systems for our internal and third-party testing programs</li><li>Conduct red team, and purple team exercises and coordinate tabletop exercises</li><li>Penetration tests of new products, concepts, and pilot products</li><li>Review Veeva product release notes and select new features to test throughout the year</li></ul>
<h3>Requirements </h3>
<ul>
<li>BS in Computer Science or related field, or equivalent work experience</li><li>2+ years in an Information Security role, preferably in red teaming, offensive security, penetration testing, reverse engineering, incident response, or vulnerability management</li><li>Advanced knowledge and understanding in various disciplines such as security engineering, system and network security, authentication and security protocols, cryptography, and application security</li><li>Experience with interpreted or compiled languages: Python, Ruby, Perl, PHP, C/C++, Java, C#</li><li>Experience with cloud service providers and their offerings, preferably AWS and its various technologies and APIs</li><li>Mobile testing on Windows, iOS, and Android</li><li>Experience with various testing tools, such as Netspaker, Kali Linux, Metasploit, Nmap, Nessus, Burp Suite, etc.</li><li>Familiar with offensive TTPs (Tactics, Techniques, and Procedures) including post-exploitation and lateral movement</li><li>Experience with Redhat, AWS Linux, AWS Linux 2, Windows Server 2012, 2016 and 2019</li><li>Understanding of one or more standards: OSWAP Top 10, SANS Top 20, NIST 800-53, CIS, CSC, or other security standards</li></ul>
<h3>Nice to Have </h3>
<ul>
<li>Industry penetration certifications such as OSCP, GPEN, GXPN, GWAPT, etc.</li><li>Industry security certifications such as CISSP, CEH, or others</li><li>Experience in conducting social engineering-focused assessments</li><li>Experience in CTF competitions, CVE research, and/or Bug Bounty recognition</li><li>Knowledge of the MITRE ATT&amp;CK Framework</li><li>Experience in Web and Mobile (Android/iOS) based application/service assessment</li><li>Experience in Wireless and Network assessment in enterprise infrastructure</li><li>Experience in reverse engineering and associated tooling such as IDA</li><li>Experience in Advanced Persistent Threat exploits</li><li>Experience with Web Application Firewalls (WAF), IDS/IPS, or other security platforms</li><li>Knowledge of fuzzing, memory corruption, and exploit development</li><li>Knowledge about hardware hacking</li></ul>#LI-RemoteUS#BI-RemoteVeeva’s headquarters is located in the San Francisco Bay Area with offices in more than 15 countries around the world.   Veeva is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity or expression, religion, national origin or ancestry, age, disability, marital status, pregnancy, protected veteran status, protected genetic information, political affiliation, or any other characteristics protected by local laws, regulations, or ordinances. If you need assistance or accommodation due to a disability or special need when applying for a role or in our recruitment process, please contact us at talent_accommodations@veeva.com.

Security Engineer - Red Team Penetration Testing

Apply to Nessus Cyber Security Jobs in companies remotely and near you. New Nessus Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Americas Information Security Officer at Kin + Carta	Remote Full Time CISM Comptia Audits
Information System Security Officer (ISSO) at SciTec	Full Time Manager DOD Windows AWS
Implementation Security Engineer at Palantir Technologies	Full Time Contract DOD Ansible Automation
Information Systems Security Manager at Shift5	Auditing Audits Clearance Cloud Compliance
Security Engineer - Red Team Penetration Testing at Veeva Systems	Android Application Security AWS Burp Suite C

Nessus Cyber Security Jobs

0 Nessus Cyber Security Jobs. Page 1 of 1

5 closed nessus cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Nessus Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Nessus Cyber Security Jobs

0 Nessus Cyber Security Jobs. Page 1 of 1

5 closed nessus cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Nessus Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter