Trace3

Who is Trace3?
Trace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. Equipped with elite engineering and dynamic innovation, we empower IT executives and their organizations to achieve competitive advantage through a process of Integrate, Automate, Innovate.
Our culture at Trace3 embodies the spirit of a startup with the advantage of a scalable business. Employees can grow their career and have fun while doing it!
Trace3 is headquartered in Irvine, California. We employ more than 1000 people all over the United States. Our major field office locations include Atlanta, Denver, Detroit, Indianapolis, Grand Rapids, Lexington, Los Angeles, Louisville, San Diego, San Francisco, and Scottsdale.  
Ready to discover the possibilities that live in technology?

Come Join Us!
Street-Smart - Thriving in Dynamic Times
We are flexible and resilient in a fast-changing environment. We continuously innovate and drive constructive change while keeping a focus on the “big picture.” We exercise sound business judgment in making high-quality decisions in a timely and cost-effective manner. We are highly creative and can dig deep within ourselves to find positive solutions to different problems.
Juice - The “Stuff” it takes to be a Needle Mover 
We get things done and drive results. We lead without a title, empowering others through a can-do attitude. We look forward to the goal, mentally mapping out every checkpoint on the pathway to success, and visualizing what the final destination looks and feels like.
Teamwork - Humble, Hungry and Smart
We are humble individuals who understand how our job impacts the company's mission. We treat others with respect, admit mistakes, give credit where it’s due and demonstrate transparency. We “bring the weather” by exhibiting positive leadership and solution-focused thinking. We hug people in their trials, struggles, and failures – not just their success. We appreciate the individuality of the people around us.

About the Role:
Trace3 is looking for an experienced Application Security Professional to join our fast-growing DevSecOps consulting practice to help our customers in evaluating and implementing application security solutions.  This is a hybrid role where you will be spending some of your time in a presales capacity as the hands on solutions expert to support our sales teams to prospect, influence, architect, and scope application security solutions to our customers.  You will help develop application security sales and technical training collaterals for customers and our internal sales teams.  You will conduct research and market analysis of leading application security solution platforms as well as lab testing them to validate coverage and evaluate efficacy.  You will also assist our sales teams to understand client’s business goals and technical requirements to rationalize the appropriate application security solutions for their use cases. 

You will also spend time being responsible for delivering application security services and advise our customers on secure software development.  This includes planning and leading the implementation and adoption of application security platform solutions, reviewing customer software architecture and source code, provide training for developers and management, and drive solutions adoption across multiple development teams. 
What You’ll Do:
<ul>
<li>Lead presales engagements as the Application Security subject matter expert to Trace3 customers and sales teams nationally</li>
<li>Work closely with our sales teams throughout the sales process to ensure all the client’s technical needs are understood and met with the best possible solution options</li>
<li>Drive technical relationships with all stakeholders and support sales opportunities</li>
<li>Present at client facing and industry events as the SME in application security</li>
<li>Conduct research analysis and lab testing of application security solutions to evaluate efficacy, use cases coverage, and fit-for-purpose</li>
<li>Build and maintain application security vendor partner relationships</li>
<li>Contribute to the development of both customer facing and internal facing presales collaterals</li>
<li>Contribute to the development of service offering collaterals and service delivery documentations that we can take to market with selected application security solutions</li>
<li>Champion Agile and DevOps leading-practices, processes, design patterns, and tools in support of DevSecOps transformation</li>
<li>Assist in services opportunity generation, technical scoping, and Statements of Work (SOW) writing</li>
<li>Assist in the delivery of application security services</li>
<li>Promote DevSecOps culture to our customers</li>
<li>Drive adoption of application security tools and DevSecOps practices as part of customer’s transformation</li>
</ul>
Qualifications &amp; Interests:
<ul>
<li>At least 5 years of Development Experience in any programming language</li>
<li>Minimum of 8 years of combined hands-on experience as a software engineer, DevOps engineer, and/or Application Security engineer</li>
<li>Previous experience working as a Sales Engineer or Solutions Architect working with application security software products or services</li>
<li>Ability to assess customer requirements, identify business problems, and demonstrate proposed solutions</li>
<li>Programming and scripting proficiency – minimum of two: C#, Java, Typescript, Javascript, Bash, Python, Go</li>
<li>Experience with various application security tools including SAST, SCA, IAST, DAST, API Security, WAF, and RASP</li>
<li>Experience integrating and operating commercial application security solutions (SAST/SCA/DAST/IAST) such as Veracode, Checkmarx, Synopsys, WhiteSource, Snyk, Invicti – Accunetix or Netsparker, Contrast Security</li>
<li>Prior experience working at an application security vendor – bonus points</li>
<li>Experience building secure software based on frameworks such as OWASP SAMM, ASVS, MASVS, CWE, SANS, BSIMM.</li>
<li>Experience in implementing and integrating security tools into CI/CD</li>
<li>Experience with Agile methodologies such as Scrum and Kanban</li>
<li>Knowledge of developer tools and environments, project management and bug tracking systems</li>
<li>Understanding of cloud native development patterns and microservices architecture</li>
</ul>
BONUS QUALIFICATIONS:

<ul>
<li>Experience with Mobile Application Security solutions and practices</li>
<li>Experience with cloud security posture management and cloud workload protection platform solutions such as (Aqua Security, Palo Alto Prisma Cloud, Sysdig, Lacework, Orca Security, Wiz)</li>
<li>Experience with Infrastructure as Code Security solutions such as Bridgecrew, Snyk, and Fugue</li>
<li>Understanding of service-oriented architecture (REST APIs, micro-services, etc) and security best practices</li>
<li>DevOps and Architecture experience and certifications with one of the major public cloud providers (AWS, Azure, Google Cloud)</li>
<li>Experience with securing containers, kubernetes, and AWS Lambda functions</li>
<li>Experience conducting secure coding training and implementing security champions program</li>
<li>Experience conducting threat modeling and application penetration testing</li>
<li>Prior consulting experience is a plus</li>
<li>Must have excellent interpersonal skills, a high degree of professionalism and the ability to design technology solutions for commercial and large enterprise companies</li>
<li>Excellent presentation, communication, and writing skills required</li>
</ul>
The Perks:
<ul>
<li>Comprehensive medical, dental and vision plans for you and your dependents</li>
<li>401(k) Retirement Plan with Employer Match, 529 College Savings Plan, Health Savings Account, Life Insurance, and Long-Term Disability</li>
<li>Competitive Compensation</li>
<li>Training and development programs</li>
<li>Stocked kitchen with snacks and beverages</li>
<li>Collaborative and cool office culture</li>
<li>Work-life balance and generous paid time off</li>
</ul>
***To all recruitment agencies: Trace3 does not accept unsolicited agency resumes/CVs. Please do not forward resumes/CVs to our careers email addresses, Trace3 employees or any other company location. Trace3 is not responsible for any fees related to unsolicited resumes/CVs.

New York

Application Security Solutions Architect | Solutioning/Research/Implementation (Remote)

Arctic Wolf Networks

Ready to make an impact? Arctic Wolf is looking for an Application Security Architect to join our pack.
Arctic Wolf, with its unicorn valuation, is the leader in security operations in an exciting and fast-growing industry—cybersecurity.
How fast are we growing? Well, Arctic Wolf was highly ranked in the Deloitte Fast Technology 500 for NorthAmerica in both 2019 (#25) and 2020 (#104)! We have doubled headcount, customers, and revenue for five years running. We are also cultivating a collaborative and productive work environment that welcomes a diversity of backgrounds, cultures, and ideas to make our teams even stronger as we grow our teams globally.
In fact, we were named a 2021 Top Workplace USA (Energage) as the top technology firm to work in our size category, were recognized as one of the 2020 Best Places to Work (bizjournals.com), and most recently were certified as a 2021 Great Place to Work (Great Places to Work Institute, Canada). Arctic Wolf believes in corporate responsibility, and our worldwide offices proudly participate in volunteer programs throughout their communities. We’ve also earned distinction from TravelWise for our efforts in promoting sustainable transportation.
Position Overview and Objective
The Lead Application Security Architect role is responsible for the implementation of measures to ensure the security of Arctic Wolf software systems, applications, code, and related components. This role will work within our Information Security Engineering team to deploy and operationalize technical security capabilities with open collaboration with the Research and Development Team.
Primary Responsibilities and Duties
<ul>
<li>Develop secure coding &amp; secure design principles</li>
<li>Train developers, architects, code reviewers, and others on secure coding practices. Mentor team members.</li>
<li>Serve as the subject matter expert for Application Security, providing guidance to Engineering and Product teams</li>
<li>Develop standards and training for security testing tools focused on the application layer (e.g., SAST, DAST, IAST, SCA), threat modeling, penetration testing, red team, bug bounty and</li>
<li>Work with development teams throughout the entire SDLC to ensure code is secure by design, secure by default, secure in deployment and communication</li>
<li>Help software development teams to understand, and remediate security findings</li>
<li>Research any reported or suspected application vulnerabilities</li>
<li>Implement and configure off-the-shelf application security technologies in the Arctic Wolf internal environment.</li>
<li>Create technical approaches to implementing application security control technologies.</li>
<li>Contribute to a world-class security program that supports Arctic Wolf’s tremendous growth.</li>
<li>Mentors and coaches team members to further develop competencies</li>
<li>Assist in developing security related libraries used in our environment</li>
<li>Security metrics delivery and improvements.</li>
<li>The ability to effectively partner and communicate with Engineering and Product teams</li>
</ul>
Key Skills
Communication, Threat modeling, Code Review, Penetration Testing, Application Testing, Research
Key Competencies
Is able to write clearly and succinctly in a variety of communication settings and styles; can get messages across that have the desired effect.
Comes up with a lot of new and unique ideas; easily makes connections among previously unrelated notions; tends to be seen as original and value-added in brainstorming settings.
Can be counted on to exceed goals successfully; is constantly and consistently one of the top performers; very bottom-line oriented; steadfastly pushes self and others for results.
Minimum Qualifications
<ul>
<li>A Bachelor’s Degree in Computer Science, Information Systems, Engineering, cybersecurity or related technical field; or equivalent experience.</li>
<li>10+ years of experience in security or infrastructure engineering Including assessing and escalating to vendors for troubleshooting purposes.</li>
<li>Thorough Understanding of modern software development practices</li>
<li>Thorough understanding of OWASP Top 10 vulnerabilities and corresponding best practices for mitigation</li>
<li>Significant experience in deploying application security technologies such as SAST, DAST, IAST, SCA, etc.</li>
</ul>
Preferred Qualifications
<ul>
<li>Familiarity with cloud infrastructures, with Amazon Web Services (AWS) and/or Azure considered a strong plus.</li>
<li>Expert level analytical and quantitative skills with proven experience in developing strategic solutions</li>
<li>Significant prior experience securing large-scale web applications, including performing security code reviews, vulnerability assessments, and manual testing for logic flaws</li>
<li>Significant Experience in one or more highly regulated environments (FedRAMP, SOX, ISO 27001, etc) or frameworks</li>
<li>Presentation of a security topic and an industry conference</li>
<li>One a more Industry Certifications – (CISSP, CCSP, CSLP, OSCP, OSWE, GPEN, GWAPT, CEH, etc)</li>
</ul>
Travel Requirements
Typically 10% or less of business travel
Security Requirements:
<ul>
<li>Conducts duties and responsibilities in accordance with AWN’s Information Security policies, standards, processes and controls to protect the confidentiality, integrity and availability of AWN business information.</li>
<li>Background checks are required for this position</li>
</ul>
About us:
At Arctic Wolf, we recognize that success comes from delighting our customers. We believe in being lean – in constantly building, measuring, and learning in all aspects of our business. We truly value people. All wolves are welcome to join the Arctic Wolf pack, with compelling compensation packages, benefits, and equity for employees.
Arctic Wolf is focused on building a workforce that is diverse and inclusive. If you’re excited about this role, but do not meet all of the qualifications listed above, we encourage you to apply. We review all applications.  
Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law.
Arctic Wolf is committed to fostering a welcoming, accessible, respectful and inclusive environment ensuring equal access and participation for people with disabilities. As such, we strive to make our recruitment, assessment and selection processes as accessible as possible and provide accommodations as required for applicants with disabilities. Please let us know if you require any accommodations by emailing <a href="mailto:hr@arcticwolf.com" rel="noopener noreferrer nofollow ugc" target="_blank">recruiting@arcticwolf.com</a>.

Provo

Principal Application Security Architect

Ready to make an impact? Arctic Wolf is looking for a Lead Application Security Engineer to join our pack.
Arctic Wolf, with its unicorn valuation, is the leader in security operations in an exciting and fast-growing industry—cybersecurity.
How fast are we growing? Well, Arctic Wolf was highly ranked in the Deloitte Fast Technology 500 for NorthAmerica in both 2019 (#25) and 2020 (#104)! We have doubled headcount, customers, and revenue for five years running. We are also cultivating a collaborative and productive work environment that welcomes a diversity of backgrounds, cultures, and ideas to make our teams even stronger as we grow our teams globally.
In fact, we were named a 2021 Top Workplace USA (Energage) as the top technology firm to work in our size category, were recognized as one of the 2020 Best Places to Work (bizjournals.com), and most recently were certified as a 2021 Great Place to Work (Great Places to Work Institute, Canada). Arctic Wolf believes in corporate responsibility, and our worldwide offices proudly participate in volunteer programs throughout their communities. We’ve also earned distinction from TravelWise for our efforts in promoting sustainable transportation.
Position Overview and Objective
The Lead Application Security Engineer role is responsible for the implementation of measures to ensure the security of Arctic Wolf software systems, applications, code, and related components. This role will work within our Information Security Engineering team to deploy and operationalize technical security capabilities with open collaboration with the Research and Development Team.
Primary Responsibilities and Duties
<ul>
<li>Develop secure coding &amp; secure design principles</li>
<li>Train developers, architects, code reviewers, and others on secure coding practices</li>
<li>Serve as the subject matter expert for Application Security, providing guidance to Engineering and Product teams</li>
<li>Develop standards and training for security testing tools focused on the application layer (e.g., SAST, DAST, IAST, SCA), threat modeling, penetration testing, red team, bug bounty and</li>
<li>Work with development teams throughout the entire SDLC to ensure code is secure by design, secure by default, secure in deployment and communication</li>
<li>Help software development teams to understand, and remediate security findings</li>
<li>Research any reported or suspected application vulnerabilities</li>
<li>Implement and configure off-the-shelf application security technologies in the Arctic Wolf internal environment.</li>
<li>Create technical approaches to implementing application security control technologies.</li>
<li>Contribute to a world-class security program that supports Arctic Wolf’s tremendous growth.</li>
<li>Mentors and coaches team members to further develop competencies</li>
<li>Assist in developing security related libraries used in our environment</li>
<li>Security metrics delivery and improvements.</li>
<li>The ability to effectively partner and communicate with Engineering and Product teams</li>
</ul>
Key Skills
Communication, Threat modeling, Code Review, Penetration Testing, Application Testing, Research
Key Competencies
<ul>
<li>Is able to write clearly and succinctly in a variety of communication settings and styles; can get messages across that have the desired effect.</li>
<li>Uses rigorous logic and methods to solve difficult problems with effective solutions; probes all fruitful sources for answers; can see hidden problems; is excellent at honest analysis; looks beyond the obvious and doesn't stop at the first answers.</li>
<li>Comes up with a lot of new and unique ideas; easily makes connections among previously unrelated notions; tends to be seen as original and value-added in brainstorming settings.</li>
</ul>
Minimum Qualifications
<ul>
<li>A Bachelor’s Degree in Computer Science, Information Systems, Engineering, cybersecurity or related technical field; or equivalent experience.</li>
<li>7+ years of experience in security or infrastructure engineering Including assessing and escalating to vendors for troubleshooting purposes.</li>
<li>Thorough Understanding of modern software development practices</li>
<li>Thorough understanding of OWASP Top 10 vulnerabilities and corresponding best practices for mitigation</li>
<li>Experience in deploying application security technologies such as SAST, DAST, IAST, SCA, etc.</li>
</ul>
Preferred Qualifications
<ul>
<li>Familiarity with cloud infrastructures, with Amazon Web Services (AWS) and/or Azure considered a strong plus.</li>
<li>Analytical and quantitative skills with proven experience in developing strategic solutions</li>
<li>Significant prior experience securing large-scale web applications, including performing security code reviews, vulnerability assessments, and manual testing for logic flaws</li>
<li>Experience working in a regulated environments (SOX, ISO 27001, etc)</li>
</ul>
Security Requirements:
<ul>
<li>Conducts duties and responsibilities in accordance with AWN’s Information Security policies, standards, processes and controls to protect the confidentiality, integrity and availability of AWN business information.</li>
<li>Background checks are required for this position</li>
</ul>
About us:
At Arctic Wolf, we recognize that success comes from delighting our customers. We believe in being lean – in constantly building, measuring, and learning in all aspects of our business. We truly value people. All wolves are welcome to join the Arctic Wolf pack, with compelling compensation packages, benefits, and equity for employees.
Arctic Wolf is focused on building a workforce that is diverse and inclusive. If you’re excited about this role, but do not meet all of the qualifications listed above, we encourage you to apply. We review all applications.  
Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law.
Arctic Wolf is committed to fostering a welcoming, accessible, respectful and inclusive environment ensuring equal access and participation for people with disabilities. As such, we strive to make our recruitment, assessment and selection processes as accessible as possible and provide accommodations as required for applicants with disabilities. Please let us know if you require any accommodations by emailing <a href="mailto:hr@arcticwolf.com" rel="noopener noreferrer nofollow ugc" target="_blank">recruiting@arcticwolf.com</a>.

Lead Application Security Engineer

Circle

Circle is a global financial technology firm that enables businesses of all sizes to harness the power of digital currency and public blockchains for payments, commerce and financial applications worldwide. Circle platforms and products provide a suite of internet-native financial services for payments, treasury infrastructure and capital formation. Circle is also a principal developer of USD Coin (USDC), which has become the fastest growing dollar digital currency in the world. USDC has grown to over 53+ billion in circulation and supported over $1.9+ trillion in transactions in the past year. Circle’s payments and treasury infrastructure services available through the Circle Account and APIs helps bridge the legacy financial system and digital currency and blockchain based finance.  Circle’s SeedInvest service brings internet-native fundraising and capital formation to startups and growth companies.  Combined, Circle’s suite of services helps companies to participate in a more open, global and inclusive financial system.
What you’ll be part of:
With the mission “To raise global economic prosperity through the frictionless exchange of financial value,” Circle was founded on the belief that the internet, blockchains and digital currency will rewire the global economic system, creating a fundamentally more open, inclusive, efficient and integrated world economy.  We envision a global economy where people and businesses everywhere can more freely connect and transact with each other with new technologies for digital money and internet-native finance. We believe such a system can raise prosperity for people and companies everywhere. Our mission is powered by the values we espouse and which we expect all Circlers to respect. We are Multistakeholder, serving the needs of our customers, our shareholders, our employees and families, our local communities and our world. Furthermore, we are also Mindful, Driven by Excellence, and High Integrity.What you’ll be responsible for:
In 2020, Circle unveiled Circle APIs: a set of solutions and smarter technology to help businesses accept payments in a more global, scalable and efficient alternative to traditional banking rails (spoiler: we’re using USD Coin under the hood).
Over the next 12 months, we’re going to rapidly grow our API customer base and enable even more businesses to easily integrate and benefit from the breakthrough of programmable money on the internet. 
The Circle Security Team works to protect Circle; our customers, clients, and partners; and the financial markets upon which we rely.  The security team leads the company’s programs for information security and cybersecurity, business continuity, and vendor risk management.
As a member of this team, you’ll lead projects and be responsible for key deliverables of the security program while collaborating across Circle teams.  You will continue to learn and stay current in a fun and rapidly changing environment.
What you'll work on:
<ul>
<li>Work with the product management and software engineering teams during all phases of the SDLC to ensure that applications are designed and implemented securely.</li>
<li>Test web applications and underlying systems for vulnerabilities using both tools and manual techniques; manage the remediation of findings through resolution.</li>
<li>Recommend code changes to eliminate vulnerabilities.</li>
<li>Automate security tests within the CI/CD pipeline.</li>
<li>Help develop secure coding standards and training materials based on findings seen in Circle’s environment to empower engineers to write more secure code.</li>
<li>Research vulnerabilities specific to blockchain technologies and incorporate this knowledge in Circle’s security practices.</li>
<li>Serve as an escalation point to investigate security alerts and identify incidents.</li>
<li>Investigate vulnerability reports related to Circle products and systems.</li>
<li>Manage vendors to conduct penetration tests and other security-related projects.</li>
<li>Influence the continuous improvement of the application security program.</li>
<li>Support other security team projects such as threat modeling, vulnerability scanning, and audits.</li>
</ul>
You will aspire to our four core values:
<ul>
<li>Multistakeholder - you have dedication and commitment to our customers, shareholders, employees and families and local communities.</li>
<li>Mindful - you seek to be respectful, an active listener and to pay attention to detail.  </li>
<li>Driven by Excellence - you are driven by our mission and our passion for customer success which means you relentlessly pursue excellence, that you do not tolerate mediocrity and you work intensely to achieve your goals. </li>
<li>High Integrity - you seek open and honest communication, and you hold yourself to very high moral and ethical standards. You reject manipulation, dishonesty and intolerance.</li>
</ul>
What you’ll bring to Circle:
<ul>
<li>7+ years of total experience.</li>
<li>3+ years of experience as a security engineer that has been leading projects and developing resolutions in cybersecurity.</li>
<li>Enthusiasm for securing and breaking software. </li>
<li>Experience with common attack techniques and conducting penetration tests.</li>
<li>Experience designing software security features including, but not limited to, access control features, logging and monitoring features, input validation and session management.</li>
<li>Experience automating security tests in CI/CD pipelines.</li>
<li>Experience working with SAST and DAST testing processes and tools.</li>
<li>Working knowledge of public and private key cryptography.</li>
<li>Familiarity with techniques for making software robust against common attacks.</li>
<li>Self-motivated and creative problem-solver able to work independently with minimal guidance.</li>
<li>Strong ability to work collaboratively across teams.</li>
<li>Ability to manage multiple competing priorities and use good judgment to establish order of priorities on the fly.</li>
<li>Experience working in financial services or financial technology desired.</li>
<li>Bachelor's degree in computer science, computer engineering, cybersecurity or related field  Equivalent experience also accepted.</li>
<li>Certifications such as CISSP, CEH, or similar will receive favorable consideration but are not required.</li>
<li>Experience working on applications deployed within AWS highly desirable.</li>
<li>Experience with at least several of the following is highly desirable:  Java, Angular JS, REST APIs, JSON, and Python.</li>
<li>Fluency in Mandarin is preferred.</li>
</ul>We are an equal opportunity employer and value diversity at Circle. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
#LI-Remote

Singapore

Lead Security Engineer, APAC

Spring Health

Our mission: eliminate every barrier to behavioral health. Spring Health is a comprehensive mental health solution for employers and health plans. Unlike any other solution, we use clinically validated technology called Precision Mental Healthcare to pinpoint and deliver exactly what will work for each person  — whether that’s meditation, coaching, therapy, medication, and beyond. Today, Spring Health serves more than 200 companies, from start-ups to multinational Fortune 500 corporations, and is a preferred mental health provider to companies like General Mills, Guardian, Bain, and Instacart. We have raised over $300 million from prominent investors including Kinnevik, Tiger Global, Northzone, RRE Ventures, Rethink Impact, Work-Bench, William K Warren Foundation, SemperVirens, Able Partners, True Capital Ventures, and a strategic investor, Guardian Life Insurance. Thanks to their partnership, our current valuation has reached $2 billion.We are looking for an Associate Director Security Operations &amp; Engineering (SecOps) to lead and manage a growing team, taking the SecOps team to the next level. SecOps is committed to proactively detect, respond to, simulate, and identify breach attempts and threat actors. You will manage solutions that quickly identify breach attempts, contain and eradicate threats, streamline the security incident response processes with the business, continuously test our controls, and help the business make informed decisions based on threat intelligence. The position requires a hands-on technical leader who is well versed in penetration testing, cloud security engineering, architecture reviews, and management of metrics that demonstrate continuous improvements, successful execution on strategies for improvements, fast-paced agile teams, and recruitment of excellent engineers, analysts, and administrators.
<h3>What You’ll Be Doing: </h3>
<ul>
<li>Manage and grow highly talented teams, ensuring they deliver high quality, timely work.</li><li>Tracking, managing, improving the ability to identify, detect, and respond to threats quickly.    </li><li>Establish a set of established measurable metrics that reflect the baseline of all SecOps functions and drive improvements.</li><li>Detailed project and process management to ensure audit trails of activities are reviewed and follow policy and audit requirements. </li><li>Build continuous software code testing (SAST, DAST, SCA, IAST, RASP, etc.) that feeds into the software development life cycle process. </li><li>Gather and report operational metrics, accomplishments, and priorities for leadership.</li><li>Scale the organization to accommodate for hyper growth.</li><li>Contribute to shaping the future of the security organization.  </li><li>Develops Service Level Agreements to set expectations and measure performance. </li><li>Other duties as assigned. Management reserves the right to assign or reassign duties and responsibilities at any time.</li></ul>
<h3>What we expect from you:</h3>
<ul>
<li>Proven track record of building scalable security teams to improve security  operations, security engineering, application testing, and managing projects.</li><li>Ability to recruit, retain, and develop high performing individuals aligned with Spring Health’s core values and goals.</li><li>Complete performance reviews and development plans for all direct reports on time.</li><li>Ability to provide constructive feedback and coaching to direct reports, including to individuals who are underperforming.</li><li>Meets or exceeds performance goals and budget targets.</li><li>Effectively manage departmental resources and processes, and seeks opportunities to create efficiencies in policies and procedures.</li><li>Effectively manages relationships with vendors and/or contractors.</li><li>Bachelor’s degree in Computer Science, Engineering, MIS, IT or related discipline or equivalent experience.</li><li>Minimum of 10 years of professional or technical experience in IT with a strong background in all aspects of customer service.</li><li>Minimum of 5 years’ current management experience that demonstrates proficiency in leadership techniques and management of resources. </li><li>Minimum 5 years of current security architecture and/or security engineering experience and/or cloud security tools administration.</li><li>Strong communication and interpersonal skills with the ability to effectively listen and communicate information in a clear and concise manner.</li><li>Strong background in industry frameworks (e.g. NIST Risk Management, IBM Secure Engineering, PSIRT), working in healthcare and/or technical sector, and in a fast-pace growth minded work environment</li><li>Strong background cloud platforms AWS, Azure, and Google.</li><li>Must have within 18 months of hire CISSP, or Security+, or CySA+ unless alternative professional education is approved.</li><li>Bonus points for technical pentesting certification (e.g. OSCP, CEH, CPT, GPEN).</li></ul>#LI-OK1Benefits of working at Spring Health: Focus on total health including:Generous medical, dental, vision coverage available day 1 + access to One MedicalAccess to Spring Health’s platform which includes (10) free therapy sessionsUnlimited time off in addition to (12) paid holidays16-18 weeks paid parental leave $500 per year Wellness Reimbursement Creating a culture you can thrive in:Flexible remote and hybrid work style arrangementsCalm Fridays to encourage meeting &amp; distraction free days Donation matching to support your favorite causesDedicated employee resource groups   Supporting you financially through:Competitive mix of salary and stock optionsEmployer sponsored 401(k) match In addition to finding people who are truly excellent at what they do, we take our values at Spring Health seriously:Members Come First We are genuine member advocates.Move Fast to Change Lives We build with urgency and intention.Take Ownership We extend trust and hold ourselves accountable.Embrace Diverse Teams &amp; Perspectives We find strength in the diversity of cultural backgrounds, ideas, and experiences.Science Will Win We will achieve impact by innovation and evidence based frameworks.Candor with Care We are open, honest and empathetic. More information on Spring Health and what it is like to work here can be found <a href="https://springhealth.com/wp-content/uploads/2022/07/SH22-Spring-Health-Values-1-Pager.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>! Spring Health is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex, marital status, ancestry, disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. We also consider qualified applicants regardless of criminal histories, consistent with applicable legal requirements. Spring Health is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans. If you have a disability or special need that requires accommodation, please let us know.

Associate Director of Security Operations &amp; Engineering

Apply to SAST Cyber Security Jobs in companies remotely and near you. New SAST Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Application Security Solutions Architect \| Solutioning/Research/Implementation (Remote) at Trace3	Remote Full Time Devsecops Consulting Javascript
Principal Application Security Architect at Arctic Wolf Networks	Remote Full Time Red Team CCSP Application Security
Lead Application Security Engineer at Arctic Wolf Networks	Remote Full Time Red Team Application Security AWS
Lead Security Engineer, APAC at Circle	Remote Full Time Application Security Audits AWS
Associate Director of Security Operations & Engineering at Spring Health	Remote Full Time Audit Incident Response Agile

SAST Cyber Security Jobs

0 SAST Cyber Security Jobs. Page 1 of 1

5 closed sast cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

SAST Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

SAST Cyber Security Jobs

0 SAST Cyber Security Jobs. Page 1 of 1

5 closed sast cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

SAST Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter