Amazon.com

Job summaryThe Amazon Information Security team is looking for a Senior Security Engineer to help ensure our services, applications, and websites are designed and implemented to the highest security standards. You have breadth and depth of security knowledge and can identify and advise on risks across multiple areas of an organization. You will join a team working on Software Supply Chain Security (SSC-S) initiatives and drive transformative changes on how thousands of Amazon dev teams consumes, build, operate and ship secure software. You will work with limited guidance in the face of ambiguity. You will take a long-term view of Amazon's software development security processes and tools. *The preferred location for this position is in Seattle, Austin or Arlington locations, however other locations may be considered as well.Key job responsibilities<ul><li>Evaluating and recommending new and emerging security products and technologies</li><li>Identifying security issues and risks, and developing mitigation plans</li><li>Through security risk assessments, identify repeatable work streams and influence automation of such streams to reduce cycle times and drive efficiency.</li><li>Participate in the design discussions and development of user stories for automation</li><li>Positively influence Security Governance initiatives; partner with engineering teams to develop a Security dashboard that provides ongoing Leadership visibility of the security posture, threats and risks.</li><li>Establish credibility and maintain strong working relationships with technical groups involved with security including but not limited to Security Teams, AWS (Amazon Web Services), Legal, Compliance, and Developer Community</li><li>Build and influence supply chain software security as a core competency throughout InfoSec’s relationships with internal Amazon teams, partners, and vendors.</li></ul>About the teamAt Amazon, we're working to be the most customer-centric company on earth. To get there, we need exceptionally talented, bright, and driven people. Join us!Inclusive Team Culture Here at Amazon, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust. Work/Life Balance Our team puts a high value on work-life balance. It isn’t about how many hours you spend at home or at work; it’s about the flow you establish that brings energy to both parts of your life. We believe striking the right balance between your personal and professional life is critical to life-long happiness and fulfillment. We offer flexibility in working hours and encourage you to find your own balance between your work and personal lives. Mentorship &amp; Career Growth Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge sharing and mentorship. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded professional and enable them to take on more complex tasks in the future.<h3>Basic Qualifications</h3><ul><li>BS in Computer Science or related field, or equivalent work experience</li><li>At least 5 years of experience in application security, threat modeling, secure coding, software development, secure software or system design</li><li>At least 3 years of experience in a development or security role working with development team(s) that delivered commercial software or software-based services</li><li>Advanced knowledge and understanding of any combination of the following: security engineering, system and network security, authentication and security protocols, cryptography, or application security</li><li>An understanding of network and web related protocols (such as, TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)</li><li>Experience with multiple programming languages (such as, Java, C++, Ruby, Python, Perl, etc.)</li></ul><h3>Preferred Qualifications</h3><ul><li>Experience managing and delivering security solutions at scale.</li><li>Experience with DevOps, Software Build and Deployment systems, Software Composition Analysis</li><li>Experience with service-oriented architecture and web services security</li><li>Experience with AWS or similar enterprise cloud computing platforms</li><li>Experience with the application of threat modeling or other risk identification techniques</li><li>Demonstrated experience collaborating with other security engineers and developers to deliver complex projects</li><li>Excellent written and verbal communication skills with the ability to convey technical information to a wide variety of audiences</li><li>Strong and creative problem-solving abilities</li><li>Meets/exceeds Amazon’s leadership principles requirements for this role</li><li>Meets/exceeds Amazon’s functional/technical depth and complexity for this role</li></ul>Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.

Seattle

Sr. Security Engineer

Job summaryThe Amazon Information Security team is looking for a Senior Security Engineer to help ensure our services, applications, and websites are designed and implemented to the highest security standards. You have breadth and depth of security knowledge and can identify and advise on risks across multiple areas of an organization. You will join a team focused on Software Supply Chain Security (SSC-S) improvement initiatives and help drive transformative changes on how thousands of Amazon developer teams consume, build, operate and ship secure software. You will take a long-term view of Amazon's software development security processes and tools and work with limited guidance in the face of ambiguity.*The preferred location for this position is in Seattle, Austin or Arlington locations, however other locations may be considered as well.Key job responsibilities<ul><li>Evaluating and recommending new and emerging security products and technologies</li><li>Identifying security issues and risks, and developing mitigation plans</li><li>Through security risk assessments, identify repeatable work streams and influence automation of such streams to reduce cycle times and drive efficiency.</li><li>Participate in the design discussions and development of user stories for automation</li><li>Positively influence Supply Chain Security initiatives</li><li>Partner with engineering teams to develop Security tooling</li><li>Develop mechanisms that provides ongoing Leadership visibility of the security posture, threats and risks.</li><li>Establish credibility and maintain strong working relationships with technical groups involved with software supply chain security including but not limited to Security Teams, AWS (Amazon Web Services), Legal, Compliance, and Developer Community</li></ul>About the teamAt Amazon, we're working to be the most customer-centric company on earth. To get there, we need exceptionally talented, bright, and driven people. Join us!Inclusive Team Culture Here at Amazon, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust. Work/Life Balance Our team puts a high value on work-life balance. It isn’t about how many hours you spend at home or at work; it’s about the flow you establish that brings energy to both parts of your life. We believe striking the right balance between your personal and professional life is critical to life-long happiness and fulfillment. We offer flexibility in working hours and encourage you to find your own balance between your work and personal lives. Mentorship &amp; Career Growth Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge sharing and mentoring. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded professional and enable them to take on more complex tasks in the future.<h3>Basic Qualifications</h3><ul><li>BS in Computer Science or related field, or equivalent work experience</li><li>At least 5 years of experience in application security, threat modeling, secure coding, software development, secure software or system design</li><li>At least 3 years of experience in a development or security role working with development team(s) that delivered commercial software or software-based services</li><li>Advanced knowledge and understanding of any combination of the following: security engineering, system and network security, authentication and security protocols, cryptography, or application security</li><li>An understanding of network and web related protocols (such as, TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)</li><li>Experience with multiple programming languages (such as, Java, C++, Ruby, Python, Perl, etc.)</li></ul><h3>Preferred Qualifications</h3><ul><li>Experience with DevOps, Software Build and Deployment systems, Software Composition Analysis</li><li>Experience with service-oriented architecture and web services security</li><li>Knowledge of, and experience with Software Supply Chain Security, NIST SSDF, SBOMs, Code Signing, and Verification</li><li>Experience with AWS or similar enterprise cloud computing platforms</li><li>Experience with the application of threat modeling or other risk identification techniques</li><li>Demonstrated experience collaborating with other security engineers and developers to deliver complex projects</li><li>Excellent written and verbal communication skills with the ability to convey technical information to a wide variety of audiences</li><li>Strong and creative problem-solving abilities</li><li>Meets/exceeds Amazon’s leadership principles requirements for this role</li><li>Meets/exceeds Amazon’s functional/technical depth and complexity for this role</li></ul>Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.

Security Engineer

Rubrik

Rubrik is seeking creative problem solvers with a passion for cyber security. In this role you will partner with all parts of the business to build security solutions that help secure the brand and protect the organization, company and customer environments. You will be responsible for executing security engineering programs and managing security technologies across the board. The ideal candidate for this role is someone who can build innovative ways to deliver frictionless security capabilities to enhance the security posture of the organization.
What you'll be doing:
<ul>
<li>Architect, deploy and manage security solutions and supporting infrastructure in cloud and datacenter environments in support of internal customer security needs</li>
<li>Manage a scalable and highly available solution for security logging and drive efforts of logging onboarding for increased security visibility</li>
<li>Automation where it makes sense</li>
<li>Assist with security incidents, investigations, root-cause analysis and drive down detection and containment times in partnership with the Security Operations team</li>
</ul>
Experience you'll need: 
<ul>
<li>Bachelor degree in Computer Science or related field or equivalent experience</li>
<li>3+ years experience in security engineering, building and managing security solutions across the stack (on-prem and cloud) </li>
<li>Strong understanding of logging and data management best practices and strong experience in any logging and/or SIEM platform such as Azure Sentinel, Devo, Splunk, logz.io, ELK and supporting technologies (syslog, Kafka, Spark, Pub/Sub, EventHubs, etc.)</li>
<li>Proficiency in any scripting language (Python, PowerShell, Perl, Ruby, shell, etc.)</li>
<li>Working experience in GCP or Azure</li>
</ul>
Preferred Qualifications:
<ul>
<li>Security certifications are a plus (CISSP, CISM, SANS certs, vendor certs, etc.)</li>
<li>Basic knowledge of container technologies (Docker, Kubernetes, etc), microservices and CI/CD pipelines</li>
</ul>
#LI-TG1About Rubrik:
Rubrik, the Zero Trust Data Security Company™, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including Zero Trust Data Protection, Ransomware Investigation, Incident Containment, Sensitive Data Discovery, and Orchestrated Application Recovery. This means your data is ready so you can recover the data you need, and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.
We are <a href="https://www.rubrik.com/lp/analyst-reports/gartner-mq" rel="noopener noreferrer nofollow ugc" target="_blank">a leader in data security</a>, have been recognized as as a Forbes Cloud 100 Company, named as a LinkedIn Top 10 Startup and are proud to have earned Great Place to Work® Certification™. There has never been a more exciting time to join Rubrik, and our future is even brighter. The work you do will help propel our next chapter of growth as you do the best work of your career.
<a href="https://www.linkedin.com/company/rubrik-inc/mycompany/verification/" rel="noopener noreferrer nofollow ugc" target="_blank">Linkedin</a> | <a href="https://twitter.com/rubrikinc" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a> | <a href="https://www.instagram.com/lifeatrubrik/" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> | <a href="https://www.rubrik.com" rel="noopener noreferrer nofollow ugc" target="_blank">Rubrik.com </a>| 
Diversity, Equity &amp; Inclusion @ Rubrik: 
At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.
Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation. This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.
Our DEI strategy focuses on three core areas of our business and culture:
<ul>
<li>Our Company: Build a diverse company that provides equitable access to growth and success for all employees globally. </li>
<li>Our Culture: Create an inclusive environment where authenticity thrives and people of all backgrounds feel like they belong.</li>
<li>Our Communities: Expand our commitment to diversity, equity, &amp; inclusion within and beyond our company walls to invest in future generations of underrepresented talent and bring innovation to our clients.</li>
</ul>
<h5>Equal Opportunity Employer/Veterans/Disabled: Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.</h5>
<h5>Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. </h5>
<h5>Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</h5>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW - POSTER SUPPLEMENT</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_English_unformattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">PAY TRANSPARENCY NONDISCRIMINATION PROVISION</a>
<a href="https://www.dol.gov/sites/dolgov/files/olms/regs/compliance/eo_posters/employeerightsposter2page_19final.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS</a>

Palo Alto

Senior Information Security Engineer

EMW, Inc.

Deadline Date: Tuesday 16 August 2022 Requirement: Penetration Testing Services Location: Mons, BE Full time on-site: Yes NATO Grade: A3/115 Total Scope of the request (hours): 570 Required Start Date: 19 September 2022 End Contract Date: 31 December 2022 Required Security Clearance: NATO SECRET Duties and Role: The duties of the individual mainly focus on: <ul> <li>Provide Web and application level penetration testing;</li> <li>Provide security design reviews to ensure compliance with NATO policies and directives;</li> <li>Provide security consultancy and advice to projects, plans, and other entities;</li> <li>Brief at technical levels on security reports and testing outcome.</li> </ul>RequirementsSkill, Knowledge &amp; Experience: <ul><li>The candidate must have a currently active NATO SECRET security clearance.</li></ul>The required skillset for the contracted individual is extensive knowledge and experience (more than 5 years) in the following areas:<ul> <li>Web application and thick-client penetration testing;</li> <li>Assessing security vulnerabilities within OS, software, protocols &amp; networks;</li> <li>Researching and evaluating security products &amp; technologies;</li> <li>Knowledge in system and network administration of UNIX and Windows systems;</li> <li>Use of penetration testing tools, techniques, and recognized testing methodologies;</li> <li>Scripting skills in at least one of the following: Perl, Python, Ruby, shell (bash, ksh, csh);</li> <li>Technical knowledge in system and network security, authentication and security protocols, cryptography, application security, as well as, malware infection techniques and protection technologies;</li> <li>Ability to evaluate risks and formulate mitigation plans;</li> <li>Proven ability to write clear and structured technical reports including executive summary, technical findings and remediation plan.</li> </ul>

Mons

SC2022-002328 Penetration Testing Services (NS) - TUE 16 Aug

SciTec

SciTec, Inc. is a dynamic small business which delivers advanced sensor processing technologies and scientific instrumentation capabilities in support of national security and defense applications. We support customers throughout the Department of Defense and U.S. Government in building innovative new tools to deliver unique, world-class data exploitation capabilities. SciTec has an immediate opportunity for a talented Information Systems Security Manager (ISSM) in our Boulder, CO office. The ISSM will be responsible the accreditation and administration of a secure computing environment, both leading the implementation of technical security controls and spearheading coordination with accrediting and assessing agencies. The ISSM will need to work well in a team environment with a commitment to ensure security awareness and techniques are communicated effectively across the workforce. SciTec is searching for a candidate who will thrive in an environment where they are both expected to take the initiative to solve problems and empowered to see problems through to their conclusion.RequirementsDUTIES: <ul> <li>Leading the development, maintenance, and evaluation Information System (IS) security documentation, including System Security Plans (SSPs), Continuity of Operations Plans (COOPs), and Standard Operating Procedures (SOPs).</li> <li>Conducting cybersecurity controls assessments in accordance with applicable regulatory guidance, including NIST 800-53, NIST 800-37, NIST 800-60, and DoD 8500.01. Managing Plans of Actions and Milestones (POA&amp;M) originating from these assessments.</li> <li>Upload all security control evidence to the Governance, Risk, and Compliance (GRC) application (eMASS) to support security control implementation during the monitoring phase.</li> <li>Develop and execute a Continuous Monitoring program for information systems in accordance with NIST 800-53</li> <li>Ensure that selected security controls are implemented and operating as intended during all phases of the Information System (IS) lifecycle and RMF process</li> <li>Ensure that system security documentation is developed, maintained, reviewed, and updated on a continuous basis. </li> <li>Conduct required IS vulnerability scans according to risk assessment parameters. </li> <li>Continuously evaluating system security posture, identifying opportunities for improvement, and supporting the implementation of these improvements.</li> <li>Supporting the local SciTec Facility Security Officer (FSO) in ensuring the physical protection of information technology systems, including supporting the deployment of physical security measures such as intrusion detection systems.</li> <li>Contribute to Cybersecurity Maturity Model Certification (CMMC) and NIST SP 800-171 which may include authoring policy and procedure, capturing artifacts, and working related projects.</li> <li>Contributing to other corporate security and information assurance activities throughout the company with System Administrators, Security, and other stakeholders.</li> <li>Successful candidates will have strong written and communication skills to maintain a relationship with government counterparts and other mission partners.</li> <li>Ensure the removal and retirement of ISs being decommissioned in coordination with the system owner</li> <li>At least two years serving as an ISs Security Officer or Manager at a cleared facility. </li> <li>Familiarity with the use and operation of DISA SCAP and STIGViewer tools</li> </ul> <ul> <li>Is technical lead for the Risk Management Framework (RMF) package creation and compliance. </li> </ul> REQUIREMENTS: <ul> <li>Must be a U.S. Citizen. </li> <li>Candidates must have an active Secret government security clearance.</li> <li>2 years of experience specifically supporting the administration of government or contractor information technology systems under the oversight of the DoD or the Intelligence Community.</li> </ul> <ul> <li>4 year degree in Information Technology, Cybersecurity, Computer Science or other related field</li> <li>Must have experience with Windows/Linux based troubleshooting; understand where to locate specific log files for forensics.</li> </ul> <ul> <li>Ability to evaluate effectiveness, suitability, survivability, and interoperability of systems, relating to cybersecurity and provide key feedback to improve the overall cybersecurity posture. </li> <li>Ability to research and develop solutions to emerging cyber threats.</li> <li>Proficient with Microsoft Word, Microsoft Excel, OneDrive. </li> <li>Self-starter with ability to work independently.</li> <li>Ability to understand, explain, interpret, and apply rules, regulations, directives, and procedures.</li> </ul> PREFERRED EXPERIENCE, SKILLS, AND ABILITIES: <ul> <li>An active TOP SECRET clearance.</li> <li>A CISSP (or CISSP Associate) certification, or an alternate qualifying certification satisfying DoD 8570.01M requirements for an Information Assurance Technician Level III or an Information Assurance Manager Level II.</li> <li>Prior successful experience as an ISSM.</li> <li>Prior experience with NIST 800-171, NIST 800-53 (both DIACAP 8500.2 and Risk Management Framework), and Continuous Monitoring and Risk Scoring (CMRS).</li> <li>A college degree in computer science, info tech, info security, or a related field.</li> <li>Experience working with the ELK stack.</li> <li>Experience with Azure, AWS, or similar cloud environments.</li> <li>Have experience with VMware or other virtualization software.</li> <li>Python, PHP, Perl, PowerShell, or Bash scripting experience.</li> <li>Experience administering the system functions including security policies and account management of Microsoft Windows and Server as well as Linux/Unix-based systems.</li> <li>Incident response and reporting experience.</li> </ul>BenefitsAs a small business, SciTec, Inc. offers room for growth and a flexible, fast-paced work environment. We work daily to develop one-of-a-kind solutions for challenging national problems. SciTec encourages collaboration across our offices in Boulder, El Segundo, Dayton, Huntsville, Virginia, and our headquarters in Princeton, and provides access to opportunities across the corporate spectrum. Initiative is expected and encouraged, all employees have the opportunity and flexibility to broaden their technical horizons, and our daily work makes an impact on the world around us. SciTec offers a highly competitive salary and benefits package, including a variety of benefits including health insurance, parental leave, vision, life, and disability insurance, 401(k)plan with employer contribution, holidays and paid time off plans (including vacation and sick time), an annual profit-sharing plan, and an annual performance bonus plan. The salary range for this position is $83,000 to $130,000; however, SciTec considers several factors when extending an offer of employment, including but not limited to, the role and associated responsibilities, a candidate’s work experience, education/training, and key skills. This is not a guarantee of compensation. SciTec is committed to hiring and retaining a diverse workforce and is proud to be an Equal Opportunity/Affirmative Action employer.

Boulder

Information Systems Security Manager (ISSM)

Apply to PERL Cyber Security Jobs in companies remotely and near you. New PERL Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Sr. Security Engineer at Amazon.com	Full Time Application Security Automation AWS C
Security Engineer at Amazon.com	Full Time Application Security Automation AWS C
Senior Information Security Engineer at Rubrik	Full Time CISM Analyst Automation Azure
SC2022-002328 Penetration Testing Services (NS) - TUE 16 Aug at EMW, Inc.	Full Time Contract Application Security Windows BASH
Information Systems Security Manager (ISSM) at SciTec	Full Time Manager DOD Windows AWS

PERL Cyber Security Jobs

0 PERL Cyber Security Jobs. Page 1 of 1

5 closed perl cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

PERL Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

PERL Cyber Security Jobs

0 PERL Cyber Security Jobs. Page 1 of 1

5 closed perl cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

PERL Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter