Worldcoin

<h3>About the Company:</h3>
Worldcoin (<a href="http://www.worldcoin.org" rel="noopener noreferrer nofollow ugc" target="_blank">www.worldcoin.org</a>) is an open-source protocol, supported by a global community of developers, individuals, economists and technologists committed to expanding participation in, and access to, the global economy. Its community is united around core beliefs in the inherent worth and equality of every individual, the right to personal privacy, and open and public collaboration. These beliefs are reflected in what the community is building: a public utility to connect everyone to the global economy.
The Worldcoin Foundation (<a href="http://www.worldcoin.foundation" rel="noopener noreferrer nofollow ugc" target="_blank">www.worldcoin.foundation</a>) is the protocol’s steward and will support and grow the Worldcoin community until it becomes self-sufficient.  Tools for Humanity (<a href="http://www.toolsforhumanity.com" rel="noopener noreferrer nofollow ugc" target="_blank">www.toolsforhumanity.com</a>)  is a global hardware and software development company.  It helped launch Worldcoin and continues to provide support to the Foundation, in addition to operating the World App.<h4>This opportunity would be with Tools for Humanity.</h4>
<h3>About the Orb</h3>
Worldcoin's launch requires a "Proof-of-Personhood": a way to determine someone is human (not a bot) and hasn't already claimed their free share of Worldcoin. This is why we developed the Orb.
The Orb is an advanced biometric imaging device, custom-designed for Worldcoin's launch. Orbs are deployed to a global network of operators, who use the device to onboard new Worldcoin users. During this onboarding, the Orb generates an encoding of each user's iris and submits it to Worldcoin's backend. For more details on how the Orb is part of Worldcoin's privacy-preserving approach to Proof-of-Personhood, see the <a href="https://whitepaper.worldcoin.org/" rel="noopener noreferrer nofollow ugc" target="_blank">Worldcoin whitepaper</a>.
The Orb solves a fierce combination of engineering and UX challenges, centered around image quality, security, and ease-of-use. Each device has an advanced iris imaging system, designed to work consistently across real-world lighting conditions. An additional suite of sensors feeds into an onboard fraud detection system, enabling use in unsecured environments. These systems are combined in a sleek industrial design with a simple, minimalist user interface.
<h3>About the Team</h3>
For Worldcoin to launch successfully on a global scale, we need to both ensure fairness and build trust with our users. Therefore, it is essential to prevent fraud, protect privacy, and ensure availability.
Beyond regular company security the goal of security at Worldcoin is to deploy an edge device to unsecured environments. We consider a wide range of threats that span tampering with the device, spoofing the device as well as backend attacks. The cross-disciplinary nature of this team requires interfacing with various other teams across the company including Economics, AI, Backend and Orb Software. We are a small security team and you will have a huge impact!
<h3>About the Opportunity</h3>
You will:
<ul>
<li>Perform security-focused code reviews and own the vulnerability management process</li>
<li>Support and consult with Worldcoin teams in the area of application security, including threat modeling and security reviews</li>
<li>Grow and develop the secure application design process</li>
<li>Assist teams in reproducing, triaging, and addressing application security vulnerabilities discovered by internal tools and our bug bounty program.</li>
<li>Grow and develop the bug bounty program.</li>
<li>Assist in development of security processes and automated tooling that prevent classes of security issues.</li>
</ul>
<h3>About You</h3>
<ul>
<li>6+ years of technical experience with at least 3 years of experience leading efforts in ApplicationSecurity.</li>
<li>Experience in Programming languages such as Python, Go, and Rust</li>
<li>Experience with Application Security Testing Tools such as SAST, DAST, IAST or SCA. </li>
<li>Familiarity with OWASP Top 10 and other Secure Development Life Cycle practices.</li>
<li>Familiarity with AWS architecture/ecosystem.</li>
<li>Familiarity with API security</li>
<li>Code review experience</li>
<li>Container security experience</li>
<li>Experience automating services/tools</li>
<li>Experience leading threat modeling sessions with developers</li>
</ul>
Nice to have: 
<ul>
<li>Application security architect and design experience</li>
<li>Experience as a Security Champion </li>
<li>Experience with Kubernetes and AWS EKS</li>
<li>Familiarity with how containers work and how to secure containers.</li>
<li>One or more of the following AWS certifications: AWS Certified Solutions Architect, AWS Certified Security - Specialty, AWS Certified Developer</li>
<li>One or more of the following certifications: CISSP, GWAPT, GPEN, CEH, CSSLP, and Sec+.</li>
</ul>

By submitting your application, you consent to the processing and internal sharing of your CV within the company, in compliance with the GDPR.
Pay transparency statement (for CA and NY based roles): 
The reasonably estimated <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> for this role at TFH ranges from $236,000 - $323,000, plus a competitive long term incentive package. Actual compensation is based on factors such as the candidate's skills, qualifications, and experience. In addition,  TFH offers a wide range of best in class, comprehensive and inclusive employee benefits for this role including healthcare, dental, vision, 401(k) plan and match, life insurance, flexible time off, commuter benefits, professional development stipend and much more!

Senior Application Security Engineer

Two Six Technologies

At Two Six Technologies, we build, deploy, and implement innovative products that solve the world’s most complex challenges today. Through unrivaled collaboration and unwavering trust, we push the boundaries of what’s possible to empower our team and support our customers in building a safer global future.Two Six Technologies is looking to add a Senior Malware Reverse Engineer to our team. As a Reverse Engineer, you’ll use your technical experience to solve some of the most challenging intelligence issues.
Job Responsibilities &amp; Duties:
<ul>
<li>Perform technical analysis of malicious binaries through controlled execution and/or static analysis of assembly code, overcoming techniques designed to defeat analysis, in order to ascertain functionality, capability, call-backs, assist with attribution to adversary infrastructure, and identification of indicators of compromise. </li>
<li>Provide information and documentation that enables malware detection, signature creation, and mitigation.</li>
<li>Use expertise in malware reverse engineering and analysis to evaluate and analyze complex malicious code through the use of tools, including dissemblers, debuggers, hex editors, un-packers, virtual machines, and network sniffers. </li>
<li>Conduct reverse-engineering for known and suspected malware files. </li>
<li>Investigate instances of malicious code to determine attack vector and payload, and to determine the extent of damage and data exfiltration.</li>
</ul>
Minimum Qualifications:
<ul>
<li>8 years relevant experience with Bachelors in related field; or6 years experience with Masters in related field; or4 years experience with a Doctoral degree in a related field; or10 years of relevant experience and an Associates may be considered for individuals with in-depth experience</li>
<li>Degree in Computer Science, Computer Engineering, Information Systems, or related discipline of technical rigor</li>
<li>CISSP, GIAC, GREM, or CREA Certification</li>
<li>Ability/willingness to work full-time onsite in secure government workspaces</li>
</ul>
Clearance Requirements:
<ul>
<li>This position requires a TS/SCI with FS Poly</li>
</ul>
#LI-ZS1
#LI-Onsite

Looking for other great opportunities? Check out <a href="https://twosixtech.com/careers/current-opportunities/" rel="noopener noreferrer nofollow ugc" target="_blank">Two Six Technologies Opportunities</a> for all our Company’s current openings! 
Ready to make the first move towards growing your career? If so, check out the <a href="https://twosixtech.com/careers/candidate-resources/" rel="noopener noreferrer nofollow ugc" target="_blank">Two Six Technologies Candidate Journey</a>!  This will give you step-by-step directions on applying, what to expect during the application process, information about our rich benefits and perks along with our most frequently asked questions.  If you are undecided and would like to learn more about us and how we are contributing to essential missions, check out our  <a href="https://twosixtech.com/about/news/" rel="noopener noreferrer nofollow ugc" target="_blank">Two Six Technologies News </a> page!  We share information about the tech world around us and how we are making an impact!  Still have questions, no worries!  You can reach us at <a href="https://twosixtech.com/contact/" rel="noopener noreferrer nofollow ugc" target="_blank">Contact Two Six Technologies</a>. We are happy to connect and cover the information needed to assist you in reaching your next career milestone.
 Two Six Technologies is an Equal Opportunity Employer and does not discriminate in employment opportunities or practices based on race (including traits historically associated with race, such as hair texture, hair type and protective hair styles (e.g., braids, twists, locs and twists)), color, religion, national origin, sex (including pregnancy, childbirth or related medical conditions and lactation), sexual orientation, gender identity or expression, age (40 and over), marital status, disability, genetic information, and protected veteran status or any other characteristic protected by applicable federal, state, or local law. 
If you are an individual with a disability and would like to request reasonable workplace accommodation for any part of our employment process, please send an email to <a href="mailto:accomodations@twosixtech.com" rel="noopener noreferrer nofollow ugc" target="_blank">accomodations@twosixtech.com</a>. Information provided will be kept confidential and used only to the extent required to provide needed reasonable accommodations.
Additionally, please be advised that this business uses E-Verify in its hiring practices.
EOE, including disability/vets. 
By submitting the following application, I hereby certify that to the best of my knowledge, the information provided is true and accurate.

Senior Malware Reverse Engineer

Synack

At Synack, we create technology that unleashes the best cybersecurity talent to secure our digital world.
We protect leading global organizations by reducing companies’ security risk and increasing their resistance to cyber attack. How do we do this? By utilizing the world’s best and most trusted team of ethical hackers who test through our powerful and controlled platform to deliver real security without compromise.
Backed by top-tier venture capital firms including Kleiner Perkins Caufield &amp; Byers, Microsoft, and Google Ventures, Synack's mission is to leverage global security talent coupled with advanced technology to help enterprises discover security vulnerabilities before they become business problems. Discover the possibilities at Synack!
As the demand for cybersecurity grows, so does Synack’s Vulnerability Operations team! If you are pursuing a career in cybersecurity, specifically in offensive security, we encourage you to apply for our internship. This is a part-time, temporary position lasting 6 months.
Sounds interesting? Keep reading...
Here’s what you'll do
<ul>
<li>Assist the Vulnerability Operations team with the review and acceptance of Missions, Patch Verifications, and vulnerability reports,</li>
<li>Bypass customer patch attempts, create suspected vulnerability reports, and exploit real world vulnerabilities</li>
<li>Work remotely with seasoned Computer Security Analysts</li>
<li>Learn what it's like to review complex vulnerability reports</li>
</ul>
Here's what you'll need
<ul>
<li>Strong written and verbal communication skills</li>
<li>Basic understanding of various Computer Security topics, particularly offensive cyber subjects</li>
<li>Course work in offensive security (not necessarily at a University), hackathons, CTF participation, and any of the following lab/live testing:</li>
<ul>
<li>Portswigger Academy</li>
<li>HackTheBox.eu</li>
<li>TryHackMe</li>
<li>Or any other Offensive Security Lab platform</li>
</ul>
<li>Operational, hands-on knowledge of web application vulnerabilities and how to exploit them via Labs, CTFs, certifications, or prior work experience is not required but highly recommended</li>
<li>A clear understanding of the OSI model, TCP/IP, and CVSS Scoring</li>
<li>Coursework and/or lab work towards obtaining CEH, GPEN, EJPT, OSCP a plus</li>
<li>Basic understanding of OWASP top ten</li>
<li>Creative problem solving acumen</li>
<li>Enthusiasm to build an offensive cyber career, and a positive can-do attitude!</li>
<li>Due to Federal Government contract requirements, candidates must be a citizen of the United States</li>
</ul>
Yes, there will be a pop quiz!All candidates that advance to the technical portion of the interview process must be prepared to take a basic technical assessment to demonstrate practical application of required skills. The technical portion will be conducted after the verbal technical interview.  Here is how you can know if you are prepared:
<ul>
<li>Have the right tools for the job!</li>
<ul>
<li>Burp Suite (any), or similar proxy tool such as Zap fully working and configured with your browser.</li>
<li>Browser Inspect and/or debugger</li>
</ul>
<li>Be prepared to share your screen.</li>
<li>Be prepared to describe your methodology and thought process as you work through the challenges in real-time.</li>
<li>Be able to demonstrate proper enumeration and testing processes.  </li>
<li>Be able to demonstrate a working knowledge of the tools being used.</li>
</ul>
Ready to join us?
Synack is committed to embracing diversity. Our people are our strength.  Each addition to our team is an opportunity to grow and diversify our ideas, experiences, and viewpoints. We strive to be inclusive of Race, Ethnicity, Religion, Sex, LGBTQ+, Veterans, Disabilities, and Age.  Synack welcomes you!
As a candidate, Synack cares about your privacy. Please view our candidate privacy policy <a href="https://www.synack.com/candidate-privacy-notice/" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>.
$25/hr Salary is determined by a combination of factors including location, level, relevant experience, and skills. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. The compensation package for this position may also include equity, and benefits. For more details about our benefits, please see <a href="https://synack.mybenefits.life" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>. Then for the Employer code, enter: synack

Security Analyst (Part-Time, Temporary)

Rackspace

The Supplier Manager III is responsible for managing the vendor relationship, and negotiations, and works as a business partner with the company's departments. Serves as the sole interface between the customer, the Rackspace strategic sourcing team, and suppliers to ensure that sourcing needs are met.<h3>Key Responsibilities</h3><ul><ul><li>Optimizes internal customer relationships by building a solid rapport with everyone within the organization and manages global sourcing supplier relationships. </li><li>Enhances the procurement and supply chain processes throughout all entities (domestic and international) by entering into global strategic sourcing partnerships. </li><li>Identifies and takes advantage of strategic sourcing opportunities and manages difficult situations to ensure that the strategic sourcing team’s reputation for Fanatical Support is upheld. </li><li>Maintains direct contact with internal customers throughout the entire supply chain with efforts to minimize cost, shorten delivery times, and maximize quality. </li><li>The focus of work may be on the whole supply chain from acquisition to disposal. Leads, coordinates, and manages production supply and service agreements for the business. </li><li>Develops and processes RFQs, RFPs, PO requisitions, and partnership agreements. </li><li>Manages a Supplier Performance Scorecard program with critical suppliers and maintains an Approved Supplier List. </li><li>Establishes alliances with key production suppliers and performs supplier site visits and audits as required. </li><li>Guides and assists team members on procurement best practices, e-procurement technology, and supplier relationship management practices. </li><li>Interfaces with internal customers and integrates with procurement planning and budgeting process. </li><li>Develops and conducts market analysis and research that will help define commodity markets, and analyze trends, competition, capacity, and purchasing buying power.</li></ul></ul><h3>Knowledge</h3><ul><ul><li>General to advanced knowledge of purchasing principles and practices. </li><li>Prior knowledge of a technology-based service-oriented industry preferred. </li><li>Prior knowledge of Oracle preferred but not required. </li><li>Excellent interpersonal, written and verbal communication skills. </li><li>Experience in handling multiple tasks and the ability to prioritize a highly varied work level to maintain required productivity levels. Demonstrated leadership skills and qualities. </li><li>General to advanced understanding of supplier management techniques. </li><li>Strong project management skills. </li><li>Ability to communicate technical information and ideas so others will understand. </li><li>Ability to successfully work and promote inclusiveness in small groups.</li></ul></ul><h3>Education/Experience</h3><ul><ul><li>High school diploma or equivalent required. </li><li>Bachelor's degree in Business or related field required. At the manager’s discretion, equivalent additional experience may substitute for the degree requirement.</li><li>4 years of related experience.</li></ul></ul><h3>Physical Demands/Disclaimer</h3><ul><ul><li>General office environment. Moderate levels of stress may occur at times. </li><li>May require long periods sitting and viewing a computer monitor. </li><li>No special physical demands required. </li><li>The above information has been designed to indicate the general nature and level of work performed by employees in this classification. It is not designed to contain or to be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of the employee assigned to this job.</li></ul></ul>#LI-AW1, #LI-HybridAbout Rackspace TechnologyWe are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future. More on Rackspace TechnologyThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

United States

San Antonio

Supplier Manager III

Job Summary: Act as an advocate in development of overall information security program globally. Creates and performs global IT Risk and Compliance assessments. Assists in development and execution of information security, compliance, and risk best practices globally through audits, assessments, and policymaking.  Work Location: Remote<h3>Key Responsibilities: </h3><ul><ul><li>Assists in annual audits for industry specific reports, including ISO 27001, ISO 9001, ISO 14001, ISO 18001, IRAP-AUS, Cyber Essentials+, NHS-DSO, SOC1, SOC2, SOC3, PCI, HIPAA, HiTrust, CyberGRX.</li><li>Ensure documents, projects, process, and product initiatives comply with regulatory and legal requirements and enterprise policy. </li><li>Provide data and analytics in support of the risk officer and risk committees. </li><li>Develop and recommend compliance solutions impacting the enterprise. </li><li>Develop Risk Assessment process, charters, policies, methodologies, and reports. </li><li>Participate in cross-functional workgroups, communication strategies, and planning meetings to develop solutions that meet the objectives of both the business and the IT Risk, Compliance, and Information Security team. </li><li>Coordinate and respond to regulatory requirements and requests and ensure the execution of examinations. </li><li>Conduct IT Risk and Information Security due diligence activities relative to vendors and third parties. </li><li>Conduct risk assessments and documents findings where the deviation from an information security or IT Risk policy or standard is desired. </li><li>Ensure risk remediation plans meet key business objectives and partners with the business owners to follows through with corrective action steps. </li><li>Provide guidance on areas of security, privacy and regulatory compliance to Sales, Marketing, Product Development, Legal and Policy teams. </li><li>Conduct analysis of risk rating, risk appetite, and provides data driven summaries to business leaders. </li><li>Update internal control matrices where necessary to support annual changing environments.</li><li>Executes the conduit between internal control owners and external auditors, including kickoff meetings, interview requests, closing meetings, and evidence gathering. </li><li>Execute internal customer audits which include scheduling, presentation of the Rackspace compliance portfolio, and overseeing the successful visit in conjunction with Account Managers.</li></ul></ul><h3>Qualifications: </h3><ul><ul><li>At least five years of related experience</li><li>Bachelor’s degree in Computer Science, Computer Studies, Information Technology, Information Security or a related field. </li><li>Prefer CISSP. </li><li>Advanced knowledge gained through an IT Risk Management, Governance, Risk and Compliance, Information Security, Data Privacy, Vendor Management, and/or Business Continuity Management role in a global organization, professional services/consulting firm, or within a related industry. </li><li>Understanding of Network Security, Data Center operations, build pipeline, and cloud infrastructure security. </li><li>Deep understanding of Cloud Computing technologies and migration challenges. </li><li>Ability to implement security controls, SCTMs. Technology/software sales, consulting, or equivalent skills. </li><li>Ability to apply knowledge of vulnerability management, risk management assessment, and IA policy and procedures to develop, implement, and maintain a secure business environment.</li><li>Discover your inner Racker: <a href="https://rackspace.jobs/culture/" rel="noopener noreferrer nofollow ugc" target="_blank">Racker Life</a></li></ul></ul>The following information is required by pay transparency legislation in the following states: CA, CO, HI, NY, and WA. This information applies only to individuals working in these states.  •The anticipated starting pay range for Colorado is: $89.300 - $130,900. . •The anticipated starting pay range for the states of Hawaii and New York (not including NYC) is: $95,000 - $139,260. •The anticipated starting pay range for California, New York City and Washington is: $104,000 - $152,570. Unless already included in the posted pay range and based on eligibility, the role may include variable compensation in the form of bonus, commissions, or other discretionary payments. These discretionary payments are based on company and/or individual performance and may change at any time. Actual compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, licenses and certifications, and specific work location. Information on benefits offered is here.#LI-MF1 #LI-RemoteAbout Rackspace TechnologyWe are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.  More on Rackspace TechnologyThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

Security Risk and Compliance Management Specialist III

Acronis

Acronis is a world leader in cyber protection—empowering people by providing them with cutting-edge technology that enables them to monitor, control, and protect the data that their businesses and lives depend on. We are looking for a Cloud Software Support Specialist who is ready to join our mission in creating a #CyberFit future!
In this role you will be acting as liaison between the customers (Service Providers Partners) and internal Acronis resources. On a daily basis you will be dealing with various software related technical questions, via phone, email and chat, delivering best in class client experience.
Every member of our “A-Team” has an instrumental role and impact on the success of Acronis innovative and growing business, so we are looking for someone who enjoys working in dynamic, global teams and thrives in a fast-paced and rapidly changing work environment. Just like everyone at Acronis, the ideal candidate will embody all of our company values: responsive, alert, detail-oriented, makes decisions, and never gives up.
WHAT YOU'LL DO
<ul>
<li>Provide technical support, configuration and troubleshooting of software-related inquiries via email, phone and chat for customers and MSPs.</li>
<li>Perform technical analysis of customer problem and define plan for resolving it</li>
<li>Be responsible for building and maintaining strong relationships with partners</li>
<li>Interact daily with other engineers to provide technical action plans or take ownership of cases that require escalation</li>
<li>Work closely with the Expert team to answer Customers’ technical questions (act as liaison between the customer and internal Acronis resources)</li>
<li>Meet and exceed KPIs set for your role (customer satisfaction, productivity, interaction quality and others)</li>
<li>Ensure that all relevant communication, documents, and files related to the case are accurately recorded in the support system</li>
</ul>
WHAT YOU BRING (EXPERIENCE &amp; QUALIFICATIONS)
<ul>
<li>Fluent French and English (both oral and written, Upper Intermediate as a minimum)</li>
<li>1 or more years of work experience in a similar role (preferably in Hosting tech support or Managed Service Provider business)</li>
<li>Knowledge of Windows Server administration basics (know how to gather and analyze various Windows logs and dumps)</li>
<li>Ability to convey technical information effectively</li>
<li>Ability to analyze technical issues</li>
<li>Exceptional customer service approach and Excellent analytical skills</li>
</ul>
Would be considered plus if you have
<ul>
<li>Experience and knowledge of Linux/UNIX basics, CLI</li>
<li>Awareness of the modern Virtualization technologies (experience deploying and managing virtual machines on VMware ESXi / Microsoft Hyper-V clusters)</li>
<li>Experience with Business applications (MS Exchange, MS SQL, MySQL, Oracle DB, Citrix XenApp, NTP servers)</li>
</ul>
*Please submit your resume and application in English
WHO WE ARE

Acronis is revolutionizing cyber protection by unifying backup, disaster recovery, storage, next-generation anti-malware, and protection management into one solution. This all-in-one integration removes the complexity and risks associated with non-integrated solutions and offers easy, complete and reliable data protection for all workloads, applications, and systems across any environment—all at a low and predictable cost.
Founded in Singapore in 2003 and incorporated in Switzerland in 2008, Acronis now has more than 2,000 employees and offices in 34 locations worldwide. Its solutions are trusted by more than 5.5 million home users and 500,000 companies, and top-tier professional sports teams. Acronis products are available through over 50,000 partners and service providers in over 150 countries and 26 languages.
WE OFFER
Competitive Benefits
<ul>
<li>Employee recognition program – CyberDragon Award</li>
<li>Employee referral bonus program</li>
<li>Hybrid and flexible working mode</li>
<li>25 days paid annual leave</li>
<li>Supplementary health insurance for employees and family members, including dental treatment</li>
<li>Childbirth bonus</li>
<li>Monthly sports card for employees and family members</li>
<li>Monthly public transport card</li>
</ul>
Office Benefits
<ul>
<li>Convenient and modern office location in the Building of the year including office massage and game rooms</li>
<li>Free parking for cars, bikes and bicycles</li>
<li>Free lunch vouchers</li>
<li>Parties, team-buildings and birthday compliments</li>
</ul>
Professional Development
<ul>
<li>Global mentorship program</li>
<li>In-house training and professional development activities</li>
<li>Certification courses</li>
<li>Participation in conferences and seminars</li>
</ul>
Acronis is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, marital status, national origin, physical or mental disability, medical condition, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, gender identity or expression, or any other characteristic protected by applicable laws, regulations and ordinances.
#LI-LD1

Sofia

Cloud Software Support Specialist (French language)

Acronis is a world leader in cyber protection—empowering people with cutting-edge technology that enables them to monitor, control, and protect the data that their businesses and lives depend on. We are looking for someone who is ready to join our mission in creating a #CyberFit future!
You will function as the main support technical expert in specific Company’s products or services. Be the person responsible for resolving the customers’ technical incidents using your own expertise and extensive cooperation with the Company’s Engineering departments. Craft solutions, submit bug reports, coordinate complex tasks with other teams (Engineering, QA, DCO, Product Management), communicate with the customers to their complete satisfaction.
Every member of our “A-Team” has an instrumental role and impact on the success of Acronis’ innovative and growing business, so we are looking for someone who enjoys working in dynamic, global teams and thrives in a fast-paced and rapidly changing work environment. Just like everyone at Acronis, the ideal candidate will embody all of our company values: responsive, alert, detail-oriented, makes decisions, and never gives up
WHAT YOU'LL DO
<ul>
<li>Work on resolving various technical incidents for the Company’s customers involving various software, networking and hardware environments.</li>
<li>Responsible for building and maintaining strong relationships with customers able to thrive in the ever-changing work environment.</li>
<li>Stay abreast of the latest changes, trends and technological advancements in the industry (Cloud, Storage, Virtualization, Business Applications, etc). Maintain deep knowledge of Company operations to support client requests effectively.</li>
<li>Interact with various departments to analyze and resolve problems;</li>
<li>Provide technical advice to junior staff members and review technical results, evaluations and analyses. Provide for the development of junior staff within the work group through mentoring and technical guidance.</li>
<li>Develop documentation regarding installation, upgrades, support, and compatibility issues.</li>
</ul>
WHAT YOU BRING (EXPERIENCE &amp; QUALIFICATIONS)
<ul>
<li>Fluent English (both oral and written, Upper Intermediate as minimum)</li>
<li>Network professional (know how to use Wireshark, tcpdump, iperf; experience with deploying and configuring services like DHCP, DNS, L2TP/IPSEC/Open VPN, HTTP servers)</li>
<li>Windows Server professional (know how to gather and analyze various Windows logs and dumps; application level troubleshooting with Procmon and Process Explorer)</li>
<li>Linux/UNIX professional (application and configuration management; RHCSA as a baseline; CLI power user)</li>
<li>Virtualization professional (know how to deploy and manage Virtual Machines on VMware ESXi / Microsoft Hyper-V clusters)</li>
<li>Business applications professional (should be familiar with one or more of the following: MS Exchange, MS SQL, MySQL, Oracle DB, Citrix XenApp, NTP servers)</li>
<li>Good communication skills and customer focus, ability to prioritize and switch between a variety of time-sensitive issues</li>
<li>Passion for troubleshooting, ability to come up with efficient solutions for unordinary issues.</li>
</ul>
*Please submit your resume and application in English
WHO WE ARE

Acronis is revolutionizing cyber protection by unifying backup, disaster recovery, storage, next-generation anti-malware, and protection management into one solution.  This all-in-one integration removes the complexity and risks associated with non-integrated solutions and offers easy, complete and reliable data protection for all workloads, applications, and systems across any environment—all at a low and predictable cost.
Founded in Singapore in 2003 and incorporated in Switzerland in 2008, Acronis now has more than 2,000 employees and offices in 34 locations worldwide. Its solutions are trusted by more than 5.5 million home users and 500,000 companies, and top-tier professional sports teams. Acronis products are available through over 50,000 partners and service providers in over 150 countries and 26 languages.
Acronis is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, marital status, national origin, physical or mental disability, medical condition, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, gender identity or expression, or any other characteristic protected by applicable laws, regulations and ordinances.
#LI-WC1

Kuala Lumpur

Cyber Expert Support Engineer

NEAR

<h4>About Pagoda</h4>
Pagoda is shepherding a future where NEAR becomes the blockchain operating system. We believe that re-inventing how software is made and distributed is our greatest opportunity to open economic access to those who are not fully integrated into the global economy. Our products empower people to find opportunity, invent new experiences, and collaborate. Let's build an Open Web world. A world where people control their assets, data, and power of governance.About The Role
Pagoda’s growing security team is looking for an experienced Senior Application Security Engineer to focus on the advancement of modern application security practices and partner closely with our engineering and product teams to provide security recommendations and identify security issues throughout the software development lifecycle. This includes secure design reviews, threat modeling, secure code review, and penetration testing.
This team member will be responsible for the security and integrity of our applications, possessing a deep understanding of software vulnerabilities and the ability to develop effective security solutions. This role requires a strong technical background, excellent problem-solving skills, and the ability to collaborate with cross-functional teams to implement robust security measures.
What You'll Be Doing
<ul>
<li>Support the Pagoda Software Development Lifecycle as an application security subject matter expert through design review, threat modeling, code review, and penetration testing</li>
<li>Collaborate and advise engineering teams on application security best practices and vulnerability remediation</li>
<li>Perform deep-dive security reviews to ensure all Pagoda products and services following secure design principles across our product portfolio (web, mobile, and APIs)</li>
<li>Create and deliver hands-on software security training to engineering teams to increase security awareness</li>
<li>Participate in on-call rotation to support engineering teams during incidents</li>
<li>Role activities:
<ul>
<li>Manual source code review</li>
<li>Adhoc Pen Testing</li>
<li>WebApp/dApp PenTesting</li>
<li>Secure program design and implementation review</li>
<li>Threat modeling</li>
<li>Continuous secure assurance activities</li>
<li>Risk identification and categorization / management</li>
<li>Engineering education and engagement</li>
<li>Ownership of internal SAST/DAST toolset[s]</li>
</ul>
</li>
</ul>
What We're Looking For
<ul>
<li>8+ years of experience in application security </li>
<li>Has set up or helped guide the creation of an Application Security program from scratch.</li>
<li>Ability to perform design reviews, threat modeling, secure code reviews, or penetration testing with an attacker mindset</li>
<li>Familiarity with modern SAST/DAST tooling.  Snyk and Stackhawk are important.</li>
<li>Ability to review and dissect a Bug Bounty submission.  Craft a fix and work with appropriate teams to implement</li>
<li>Strong background in application security best practices and familiarity with common vulnerabilities (e.g. SSRF, race conditions, privilege escalations, etc.)</li>
<li>Familiarity with and ability to understand business objectives, business context, and security risk</li>
<li>Proven ability to communicate effectively with developers</li>
</ul>
We'd Love If You Have
<ul>
<li>A passion for security and Web3</li>
<li>Know Linux backwards and forwards</li>
<li>Experience in building lasting connections with development teams</li>
<li>Experience in a startup environment</li>
<li>Professional certifications e.g. CISSP  </li>
<li>Familiarity with using one or more programming/scripting languages (e.g., Python, Java, etc.)</li>
</ul>
Here’s What Our Interview Process Looks Like
Our interviews take place via Zoom and typically consists of the following stages:
<ul>
<li>Recruiter Call</li>
<li>Hiring Manager Call</li>
<li>1st Round
<ul>
<li>Bug Bounty Interview</li>
<li>Technical Assessment with Engineering </li>
</ul>
</li>
<li>Final Round
<ul>
<li>Meet with CTO</li>
<li>Pagoda Values Interview</li>
</ul>
</li>
</ul>
Compensation 
The base <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> range for this role is $176,000 - $200,000. This reflects the minimum and maximum range across all US locations. This does not include bonus, incentives, or benefits.
The actual base pay is dependent upon many factors, such as: leveling, relevant skills, and work location. If you are based outside of the US, there are other geographic considerations that may impact your final compensation. Your recruiter can share more about the compensation and benefits applicable to your preferred location during the hiring process. 
<h4>Benefits &amp; Perks</h4>
<ul>
<li>Encouraged 20 days of flexible PTO per year, plus your local holidays</li>
<li>Wellness weeks – 2 weeks of paid company-wide closures </li>
<li>100% Paid medical, dental and vision, AD&amp;D and life insurance for US employees, including 85% coverage for dependents, and HSA + FSA options; For non-US employees, 100% Paid private medical coverage available at the highest tiered plan</li>
<li>Access to licensed therapists and mental health resources through Spill, 100% confidential and paid by Pagoda; plus $75 monthly reimbursement for wellness</li>
<li>Generous parental leave options; All employees have access to $10,000 in fertility assistance through Carrot</li>
<li>For US employees, 401(k) retirement plan available (no match)</li>
<li>Annual company retreats and team offsites (2023 was in Spain; 2022 in Portugal)</li>
<li>$2,000 Continued Education Reimbursement</li>
<li>$2,000 Home Office Reimbursement  </li>
<li>Co-working Space Reimbursement</li>
</ul>
<h4>Our Values at Pagoda</h4>
Our values express our company culture. Learn more on our <a href="https://www.pagoda.co/careers" rel="noopener noreferrer nofollow ugc" target="_blank">careers page</a>.
Pagoda is an Equal Employment Opportunity (EEO) employer and welcomes all qualified applicants. Applicants will receive fair and impartial consideration without regard to race, sex, color, religion, national origin, age, disability, veteran status, genetic data, or other legally protected status.

Guidewire Software

Come and join our Guidewire PSIRT (Product Security <a href="https://infosec-jobs.com/insights/incident-response-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">Incident Response</a> Team) and be a part of a high-powered and high-performing team that regularly works across the entire organization, with everyone from product teams to executives. Urgent escalations from enterprise customers, investigating reported vulnerabilities, performing root cause analysis and working with security researchers.
<h3>Guidewire PSIRT (Product Security Incident Response Team) is responsible for:</h3>
<ul>
<li>Guidewire product vulnerability management process for all Guidewire applications.</li><li>Coordination of customer/external product security incidents and reported security issues affecting various Guidewire products and applications.</li><li>Working cross-functionally with all business units, sustaining engineers, product security team members, customer support, legal and external security researchers to ensure timely resolution of security incidents and events.</li><li>Development, maintenance and continuous improvement of the product security incident monitoring, detection and response tools and process, including all required supporting materials.</li><li>Pen testing Guidewire applications to ensure timely discovery of the vulnerabilities.</li><li>Security Review and Code Review of Guidewire applications</li></ul>
<h3>We are looking for a new team member who will be responsible to perform following activities (but not limited to):</h3>
<ul>
<li>Ensure proper execution of PSIRT Process - triage security related issues (external / internal), verify those on different versions, products.</li><li>Perform root cause analysis to ensure validity of reported issues.</li><li>Triage code defect based issues, quantitatively evaluate risk and provide guidance to engineering teams regarding the impact of security issues using industry standard metrics such as CVSS.</li><li>Work closely with project management, product management, engineering and sustaining teams to drive issues to closure.</li><li>Cultivate strong working relationships with external researchers, reporting organizations and customers to ensure effective collaboration. Work with customer facing and internal teams to continually improve processes used to identify and fix product security issues.</li><li>Enhance existing product security incident response program</li><li>Coordinate with internal product development teams in accomplishing regular security reviews and penetration testing assessments.</li><li>Execute the penetration tests internally to identify critical vulnerabilities.</li><li>Perform security-focused code reviews</li><li>Support the preparation of security releases.</li><li>Assist teams in reproducing, triaging, and addressing application security vulnerabilities.</li><li>Validate findings from security scanning tools and ideate data-driven enhancement strategies for dynamic (DAST), static (SAST), open-source application security testing (SCA) and container security scanning including troubleshooting, and continuous process improvement</li></ul>
<h3>Requirements:</h3>
<ul>
<li>Bachelor's/master’s in computer science or equivalent</li><li>Industry related certifications are preferred (E.g. CSSLP, CISSP, GIAC, OSCP, etc.)</li><li>Minimum 3-5 years of relevant Application Security Experience</li><li>At least 2-3 years of experience with Penetration testing</li><li>Solid understanding of OWASP Top 10, common classes of product security vulnerabilities and attack/defense methodologies.</li><li>Strong written and verbal communications skills</li><li>Proven ability to build relationships and influence individuals at all levels, as well as external security researchers, vendors and service providers</li><li>Experience with various application security tools - Static code analysis, dynamic code analysis, vulnerability scanning, pen testing</li><li>AWS/Cloud Experience a strong plus</li><li>Bug bounty program participation a plus</li><li>Knowledge of the security research community is a strong plus</li><li>Scripting skills (i.e. Python/Perl/Ruby, shell scripting) or development experience (Java/C++/Python) is a significant plus!</li></ul>About GuidewireGuidewire is the platform P&amp;C insurers trust to engage, innovate, and grow efficiently. We combine digital, core, analytics, and AI to deliver our platform as a <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> service. More than 540+ insurers in 40 countries, from new ventures to the largest and most complex in the world, run on Guidewire.As a partner to our customers, we continually evolve to enable their success. We are proud of our unparalleled implementation track record with 1600+ successful projects, supported by the largest R&amp;D team and partner ecosystem in the industry. Our Marketplace provides hundreds of applications that accelerate integration, localization, and innovation.For more information, please visit <a href="http://www.guidewire.com/" rel="noopener noreferrer nofollow ugc" target="_blank">www.guidewire.com</a> and follow us on Twitter: <a href="https://twitter.com/Guidewire_PandC" rel="noopener noreferrer nofollow ugc" target="_blank">@Guidewire_PandC</a>.Guidewire Software Inc. provides equal employment opportunities to all applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. All offers are contingent upon passing a criminal history and other background checks where it's applicable to the position.We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Security Engineer - Product Security Incident Response Team (PSIRT)

GuidePoint Security

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.Role and Responsibilities:
In this role, you will play a pivotal part in our cybersecurity services delivery team, focusing on the protection of customer information systems against cyber threats. Key responsibilities include:
<ul>
<li>Implementing, managing, and troubleshooting security measures, including firewalls, VPNs, and IDS/IPS systems.</li>
<li>Crafting and refining security-focused content for <a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a>, including threat detection algorithms and operational dashboards.</li>
<li>Conducting thorough assessments of client environments to devise robust security strategies adhering to industry best practices.</li>
<li>Engaging with Managed Detection and Response (MDR) providers to enhance threat detection, analysis, and response capabilities. This includes facilitating seamless communication and information exchange between internal teams and the MDR provider.</li>
<li>Developing scripts and automation tools in BASH, Perl, Python, or Java, with a proficiency in regular expressions.</li>
</ul>
Experience/Education/Certification Requirements:
<ul>
<li>Bachelor’s degree in Computer Science, Engineering, Information Security, or a related field, or equivalent professional experience.</li>
<li>2-4 years of relevant experience in security engineering, particularly with Next-Generation Firewalls, IDS/IPS, SIEM, and Malware Prevention.</li>
<li>Knowledge of cybersecurity frameworks like MITRE ATT&amp;CK is crucial.</li>
<li>Previous experience working with <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> security, virtual infrastructure, and endpoint security will be advantageous.</li>
</ul>
Desired Skills:
<ul>
<li>Exceptional analytical and detail-oriented skills.</li>
<li>Proven problem-solving abilities with a proactive approach.</li>
<li>Ability to work independently, prioritize effectively, and manage multiple tasks.</li>
<li>Strong communication skills for effective collaboration with team members and external MDR providers.</li>
</ul>We use Greenhouse Software as our applicant tracking system and Free Busy for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application.
Why GuidePoint?GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 900 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 3,500 customers.
Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.  
This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.Some added perks….
<ul>
<li>Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)</li>
<li>100% employer-paid medical premiums (employee only $0 deductible and HSA plans) along with 75% employer-paid family contributions</li>
<li>100% employer-paid dental premiums (employee only) along with 75% employer-paid family contributions</li>
<li>12 corporate holidays and a Flexible Time Off (FTO) program</li>
<li>Healthy mobile phone and home internet allowance</li>
<li>Eligibility for retirement plan after 2 months at open enrollment</li>
<li>Pet Benefit Option</li>
</ul>

Security Analyst - Southwest region (Remote in SoCal, NV, UT, or AZ)

Arctic Wolf Networks

Ready to further your career in the fast-paced, exciting world of cyber security?Arctic Wolf, with its unicorn valuation, is the leader in security operations in an exciting and fast-growing industry—cybersecurity. We have won countless awards for our excellence in security operations and remain dedicated to providing an industry-leading customer and employee experience.Our mission is simple: End Cyber Risk. We’re looking for a Concierge Security Analyst to be part of making this happen.  About the Role:The Concierge Security Engineer 2 (CSE2) is a key member of the Concierge Security Team that delivers world-class Arctic Wolf security services. The CSE2 supports the technical relationship with their assigned customers and leverages their skills and expertise to fulfill key responsibilities.As a Concierge Security Engineer 2, you will:<ul><li>Create and maintain an outstanding partnership with customers; </li><li>Support the direct delivery of Arctic Wolf network and endpoint security solutions to customers, including tasks such as investigating security events, and configuring, troubleshooting and verifying data sources; </li><li>Action or escalate customer requests for guidance, information or support in a timely manner, including coordinating efforts with other teams, as needed. </li><li>Proactively interact and communicate with internal and external stakeholders. </li></ul>The CSE2 role combines aspects of an IT Security Analyst, a Security Architect, and an <a href="https://infosec-jobs.com/insights/incident-response-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">Incident Response</a> Consultant.  A successful CSE2 possesses strong technical aptitude and an ability to communicate, educate, and share information effectively with non-technical people. Who You Are:You thrive in fast-paced environments and have a positive can-do attitude.  You are a critical thinker that continually learns and can navigate uncertainty.  You enjoy working with customers and in a team, are an excellent communicator, and are able to easily interact with a variety of people, personalities and technical skill levels.  Above all, your passion for cybersecurity and partnering with customers shows in everything you do!  Your experience could look like: <ul><li>1-5 years of experience in a hands-on security role with a good knowledge of security architecture </li><li>Degree or diploma in a relevant field, or certifications and experience equivalent  </li><li>Strong partnering and relationship building skills in a professional context </li><li>Strong communication skills, both written and verbal </li><li>Strong analytical and problem-solving skills</li></ul>Additional skills and experience: <ul><li>Security testing and forensics tools </li><li>Malware analysis </li><li>Scripting/Coding experience</li><li>Incident response </li><li>Authentication and identity management </li><li>Risk management, assessment and common compliance frameworks </li><li>Penetration testing and attack simulation </li></ul>About Arctic Wolf At Arctic Wolf we’re cultivating a collaborative and productive work environment that welcomes a diversity of backgrounds, cultures, and ideas to make our teams even stronger as we grow globally. We’ve been named one of the 50 Most Innovative Companies in the world for 2022 (Fast Company)—and the 2nd Most Innovative Security Company. This is in addition to consecutive awards from Top Workplace USA (2021, 2022), Best Places to Work - USA (2021, 2022) and Great Place to Work - Canada (2021, 2022). Our Values Arctic Wolf recognizes that success comes from delighting our customers, so we work together to ensure that happens every day. We believe in diversity and inclusion, and truly value the unique qualities and unique perspectives all employees bring to the organization. And we appreciate that—by protecting people’s and organizations’ sensitive data and seeking to end cyber risk— we get to work in an industry that is fundamental to the greater good. We celebrate unique perspectives by creating a platform for all voices to be heard through our Pack Unity program. We encourage all employees to join or create a new alliance. See more about our Pack Unity <a href="https://arcticwolf.com/company/careers/diversity-equity-inclusion-and-belonging/" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>.  We also believe and practice corporate responsibility, and have recently joined the Pledge 1% Movement, ensuring that we continue to give back to our community. We know that through our mission to End Cyber Risk we will continue to engage and give back to our communities. All wolves receive compelling compensation and benefits packages, including: <ul><li>Equity for all employees </li><li>Bonus or commission pay based on role </li><li>Flexible time off, paid volunteer days and paid parental leave </li><li>401k match</li><li>Medical, Dental, and Vision insurance </li><li>Health Savings and Flexible Spending Agreement </li><li>Voluntary Legal Insurance </li><li>Training and career development programs </li></ul>Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law. Arctic Wolf is committed to fostering a welcoming, accessible, respectful, and inclusive environment ensuring equal access and participation for people with disabilities. As such, we strive to make our entire employee experience as accessible as possible and provide accommodations as required for candidates and employees with disabilities and/or other specific needs where possible. Please let us know if you require any accommodations by emailing <a href="mailto:recruiting@arcticwolf.com" rel="noopener noreferrer nofollow ugc" target="_blank">recruiting@arcticwolf.com</a>. Security Requirements <ul><li>Conducts duties and responsibilities in accordance with AWN’s Information Security policies, standards, processes and controls to protect the confidentiality, integrity and availability of AWN business information (in accordance with our employee handbook and corporate policies).</li><li>Background checks are required for this position. </li></ul>Come join the Pack during this exciting time of rapid growth where every employee makes a difference and their contributions are recognized and rewarded.

Concierge Security Engineer 2

EMW, Inc.

Deadline Date: Friday 5 April 2024Requirement: Cyber Security Scorecard Development and AssessmentLocation: The Hague, NL Full Time On-Site: YesTime On-Site: 100%Total Scope of the request (hours): 1170Required Start Date: 13 May 2024End Contract Date: 31 December 2024Required Security Clearance: NATO SECRETDuties and Role:<ul> <li>Design and implement a comprehensive cybersecurity scorecard, tailored to assess NATO-Enterprise's cybersecurity posture.</li> <li>Develop specific, relevant metrics and measures that accurately reflect the cybersecurity performance.</li> <li>Continually update and refine the assessment methodology to ensure it remains effective and relevant to NATO's needs.</li> <li>Perform on-site cybersecurity maturity and performance assessments as required.</li> <li>Guide and support various non-NCIA managed Enterprise entities in conducting their self-assessments.</li> <li>Analyse collected cybersecurity data and generate insightful reports and visualizations.</li> <li>Effectively communicate with stakeholders at all levels. </li> </ul>This work will be executed and funded as a Level-of-Effort based contract with a set number of hours, and therefore delivery will be based on instructions provided by the project team.For information, the primary deliverables for this work are anticipated to be:<ul> <li>Developing Cybersecurity Scorecard, Measures and Metrics: Creating robust and relevant metrics for tracking cybersecurity performance.</li> <li>Refining Assessment Methodology: Continuously updating and refining the methodology for assessing cybersecurity maturity and performance.</li> <li>Publishing Annual Cybersecurity Scorecard: Releasing an updated scorecard every year to guide the subsequent assessment cycle.</li> <li>Maintaining Self-Assessment Tools: Ensuring that self-assessment tools, questionnaires, metrics and measurements are up to date and relevant.</li> <li>Conducting On-Site Assessment: Performing on-site cybersecurity maturity and performance assessments.</li> <li>Supporting Self Assessments: Assisting various non-NCIA managed Enterprise entities in conducting their assessments.</li> <li>Compiling Results and Report Generation: Creating consolidated reports and establishing visualization tools for assessment results.</li> </ul>The work will mostly be executed on-site, but there will also be a requirement to visit other sites for assessments as directed by the project team. In the initial weeks, a concrete work schema with delivery milestones will be agreed upon with the project manager, after which payment will be approved pro-rata upon completion of the delivery milestones (typically on a monthly basis). Travel expenses and Per Diem for requested travel duties will be covered through separate funding.RequirementsSkill, Knowledge &amp; Experience:<ul> <li>The candidate must have a currently active NATO SECRET security clearance</li> <li>Expertise in Cyber Security: The candidate must have extensive experience in cyber security with a focus on analytical assessment, scorecard development and performance metrics. The candidate must have a deep understanding of the cybersecurity processes such as Cyber Incident Management, Defensive Cyberspace Operations, Enterprise Risk Management and Cyber Threat Intelligence Analysis and Sharing.</li> <li>Experience in Metrics and Measures Development: The candidate must have experience in creating meaningful and actionable cybersecurity metrics and measures.</li> <li>Methodology Development Skills: The candidate must have proficiency in developing, refining and updating methodologies for assessing cybersecurity maturity and performance.</li> <li>Data Analysis and Visualization Proficiency: The candidate must have strong skills in data analysis and the ability to create insightful visualizations for complex data sets. Familiarity with modern data visualization tools is essential.</li> <li>Communication Skills: The candidate must have excellent written and verbal communication skills for engaging with various stakeholders and facilitating Enterprise-wide assessments.</li> <li>The contracted individual must be able to perform effectively and efficiently with minimal supervision</li> </ul>

SC2024-003475 Cyber Security Scorecard Dev and Assessment (NS) - FRI 5 Apr

Bungie, Inc.

Are you ready to dive headfirst into a world of enigmas, where you'll tackle exhilarating puzzles that constantly morph and evolve?  Do you aspire to be a champion of player experience, striving to make every game session rewarding and enjoyable?  If you're seeking a role where you can contribute to worlds that unite people, within a company that prioritizes work-life balance and champions an inclusive environment for all employees, then Bungie might be your next great adventure.  Here, we don’t just build games; we forge communities.
As a Product Security Analyst Lead, you will manage and lead a team of security analysts to leverage our anti-cheat detections.  Using your leadership skills, you force-multiply the analysts’ efforts to find the folks who compromise our worlds and spoil our players’ experiences.  You will also piece together the clues to make the picture come together and guide the creation of reports of evidence so that Bungie can confidently isolate cheaters and ensure fair and honest gameplay.  You will be the advocate for analysts with our engineering and data scientist sub-teams to improve our tools and techniques.
RESPONSIBILITIES
<ul>
<li>Manage and lead a small team of Product Security Analysts; organizing and prioritizing the teams’ day-to-day work, driving quarterly planning for large initiatives, providing craft mentorship, and career development coaching</li>
<li>Foster a collaborative team culture where everyone is supported and contributes to the collective pursuit of shared objectives</li>
<li>Facilitate investigation campaigns into adversaries and future vulnerabilities; communicate concerns and risks to leadership and game teams</li>
<li>Be the starting point for investigating and fixing technical problems, and when necessary, communicate dependencies with external stakeholders who can resolve systemic issues</li>
</ul>
REQUIRED SKILLS
<ul>
<li>Solid track record as a tech-savvy investigator, adept in uncovering information, tackling complex problems, and conducting thorough monitoring, and capable of coaching such skills</li>
<li>Ability to set team KPIs/targets, communicate status and risks, including staffing and team health</li>
<li>Proven ability to craft and present conclusive reports that drive action and targeted outcomes, and capable of coaching such skills as well</li>
<li>Capability to distill and articulate complex issues, utilizing both partial and comprehensive data sets to validate theories and proactively steer toward effective resolutions</li>
<li>Proficient with querying relational databases (e.g., SQL), big data service (e.g., Redshift or Big Query) and utilizing data visualization tools (e.g., Tableau) to interpret and present data insights</li>
<li>Familiarity with the AAA Games Cheating/Security landscape, and a passion for protecting player experiences</li>
</ul>
NICE-TO-HAVE SKILLS
<ul>
<li>AAA Games Security Experience as a Lead or Senior team member, preferably with a focus on risk-based analysis of anomalies, detection and response</li>
<li>Additional language proficiency (e.g., Chinese, Korean, Russian, Japanese, Spanish)</li>
</ul>Listed below is this role's base pay range. In other locations that Bungie has approved for remote work, this pay range may be adjusted up to +/- 10% and some roles may be classified as non-exempt (hourly). This range is determined by an array of factors, including training, transferable skills, work experience, business needs, and market demands. Additionally, it is subject to change and may be modified in the future. In the journey to make incredible worlds, Bungie employees don't simply do meaningful work - they receive meaningful support. Competitive salaries and discretionary bonus opportunities are just the start. We offer comprehensive healthcare coverage, generous 401(k) matching, flexible time off policies, paid parental leave, social clubs, and so much more. Check out our benefits page: <a href="https://careers.bungie.com/benefits" rel="noopener noreferrer nofollow ugc" target="_blank">Benefits - Bungie Careers</a> to see all the perks that come with joining Bungie.Bellevue Pay Range$144,000—$165,000 USD 

Bungie full-time (non-contract) employees in the U.S. also receive:
<ul>
<li>20 days of accrued time-off in the form of PTO and sabbatical days, depending on the level of the position</li>
<li>10 paid Floating Days annually, prorated in the first year of employment based on start date</li>
<li>10 paid Bungie-observed holidays annually</li>
<li>One hour of Paid Sick Time (PST) for every 30 hours worked </li>
</ul>
Contract and International FTE employees receive competitive benefits through their relevant contracting agency.
So you don't meet every requirement listed in this job description? Do you think your experience level is not where it needs to be? Studies show that women and people of color are less likely to apply to jobs unless they believe they meet every single qualification. Bungie is focused on building a diverse, inclusive, and equitable workplace. If you're interested in this position but your past experience doesn't line up perfectly with every qualification in the job description, we want you to apply anyway. The right role for you may be right around the corner!
 
Most Bungie full-time employees will adopt a digital first approach allowing remote work in Bungie approved locations (outside of positions identified as 100% onsite in Bellevue/Seattle, or individuals preferring a hybrid/flex environment). Prospective full-time employees located outside of CA, CO, DC, FL, GA, ID, IL, MA, MD, MI, MN, NC, NJ, NY, OR, TN, TX, UT, VA, WA, or WI will need to establish residency in one of the states we are compliant in within 45 days of a start date. Contractors will follow a digital first approach adhering to the location guidelines agreed upon by our third-party employer/vendor and Bungie. Bungie’s remote policy is subject to change at the company’s discretion.

Product Security Analyst Lead

Stripe

Who we are
<h3>About Stripe</h3>
Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.
<h3>About the team</h3>
The Security <a href="https://infosec-jobs.com/insights/incident-response-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">Incident Response</a> team works to analyze, investigate, and respond to threats before they impact Stripe’s business or users. From external attacks to insider threats, our goal is to respond with speed and precision, remediate, and support the incident postmortem process. The team is distributed, working primarily in Eastern and Pacific time zones, and will regularly coordinate with stakeholders in Europe and Asia.
<h3>What you’ll do</h3>
You will leverage your security engineering experience to improve incident response capabilities at Stripe. You will manage and coordinate the entire incident response process, developing and implementing incident response plans, conducting risk assessments, establishing procedures, leading workstreams, and ensuring timely and effective resolution. You will also act as incident commander, collaborating with various internal stakeholders, performing post-incident analysis and reporting, and making continuous improvements to Stripe’s security incident response function.
<h3>Responsibilities</h3>
<ul>
<li>Lead and coordinate security incident response activities and workstreams as the incident response manager (IRM) </li>
<li>Analyze and investigate a broad range of threats or activities occurring on client devices, maintaining a high level of confidentiality and documenting incident details accordingly.</li>
<li>Make decisions and recommendations based on the results of incident analysis and communicate the appropriate context to stakeholders, including insights to help identify, prevent, detect, and respond to anomalous or potentially malicious activity</li>
<li>Develop, document, and implement strategies, runbooks, capabilities, and techniques for incident response.</li>
<li>Work cross-functionally with security engineering and data science teams to build solutions for analyzing security events data at scale and protecting Stripe networks, systems, and data from threats</li>
<li>Strengthen KPIs and metrics for measuring response effectiveness and provide clear and consistent reporting to internal stakeholders.</li>
<li>Continuously improve security processes and response capabilities by building relationships with key stakeholders and collaborating with engineers and analysts.</li>
<li>Mentor and develop other teammates, championing quality standards within the team. </li>
</ul>
<h3>Who you are</h3>
We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.
<h3>Minimum requirements</h3>
<ul>
<li>5+ years experience in leading Security Incident Response </li>
<li>B.S. or M.S. Computer Science or related field, or equivalent experience</li>
<li>Expert knowledge of Python and SQL, and familiarity with other programming languages</li>
<li>Existing experience with log analysis (e.g. first or third party applications, system / data access, event logs), network security, digital forensics, and incident response investigations</li>
<li>Hands-on experience in analyzing and responding to security events, such as conducting log analysis, developing queries and analytics, troubleshooting security issues, and correlating complex data sets.</li>
<li>Proficiency with developing and using novel analytical methods to automate response processes</li>
<li>Excellent written and verbal communication skills, proactive in informing stakeholders, and ability to operate with little oversight.</li>
<li>Ability to identify trends, insights, and relationships between internal and external data and intelligence sources to make risk mitigation recommendations.</li>
</ul>
<h3>Preferred qualifications</h3>
<ul>
<li>Broad knowledge and experience across the information security domain, including familiarity with endpoint, email, network, identity management, <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> security, vulnerability management, incident response, and threat intelligence.</li>
<li>Experience with engineering, data processing and analysis tools (e.g. Databricks, Trino, etc.)</li>
<li>Familiarity with network observability, security software, or data engineering solutions (Chronicle, osquery, Splunk, etc.)</li>
</ul>

Incident Response Manager

Coalfire

About CoalfireCoalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Denver, Colorado with offices across the U.S. and U.K., and we support clients around the world.  But that’s not who we are – that’s just what we do. We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.   And we’re growing fast. We are looking for an Account Executive to join our Compliance Services sales team.Job Summary Accomplished solution-oriented Account Executive and professional with demonstrated success in selling services and technology to Enterprise accounts. In addition to focusing on growing and protecting a current set of Coalfire services, offerings, and capabilities within a defined set of accounts with the ultimate goal of growing the account in specific service/product line, this individual contributor will also be responsible for new logo hunting and new client acquisition through outbound efforts and responding to inbound leads when necessary.  This role and function comes with experience in developing and navigating complex account planning/strategies, through speaking to C level executives, as well as their teams, to help them solve some their Cyber Security and Compliance challenges.  This role will be able to position a defined offering with their customers leveraging best in class multi-practice resources and cross-functional teams to grow strategic accounts.
<h3>What You'll Do</h3>
<ul>
<li>Develop and drive business development initiatives that align with our current and future cybersecurity portfolio service offerings</li><li>Responsible for creating and executing a quarterly business development plan and process, including coordination of all necessary internal and external resources to identify and secure business opportunities</li><li>Prepare quarterly review on business prospects and market conditions to ensure revenue and resources are aligned with business goals</li><li>Build working relationships cross-functionally with project management team, delivery team, and marketing to ensure coordination of efforts and good communication with all parties</li><li>Establish a repeatable process for deal review, approval, and lead deal execution</li><li>Support building market awareness internally and externally for our Cybersecurity portfolio service offerings</li><li>Make an impact to Account Management, including Account planning, Client procurement, Meeting follow-up, Pipeline development, Opportunity pursuit, Contract negotiation, Risk management, Proposal and Statement of Work (SOW) development, and Revenue goals</li><li>Engage with clients in strategic discussions to provide best in class Cybersecurity / IT Strategy and industry guidance to maximize client’s long-term business objectives</li><li>Develop strong and lasting relationships with client executives, effectively engage new business and position the account for follow on security and risk advisory engagements</li><li>Develop and maintain contact with top decision makers at key clients; organize and lead pursuit teams; participate and lead aspects of the proposal development process; contribute to the development of proposal pricing strategies</li><li>Lead client-facing management Security Strategy and Planning sessions and formal proposal presentations</li><li>Maintain customer strategy and direction while collaborating with internal teams, leveraging sales tools such as Salesforce</li><li>Contribute to problem-solving sessions with the project team, consulting team, and client representatives on a regular basis</li><li>Develop business with new buyers and business units within existing accounts</li><li>Marketing Qualified Lead management from origination of lead through lead qualification to lead conversion to new opportunity</li><li>Achieve an annual renewal rate of at least 90% on all assigned renewals</li></ul>
<h3>What You'll Bring </h3>
<ul>
<li>7+ years of experience with direct sales or account management in a B2B sales environment</li><li>Demonstrate a consistent and demonstrable track record of achieving annual revenue targets</li><li>Proven history of quota attainment, forecast accuracy, and pipeline generation </li><li>Knowledge of market trends, industry participants, new technologies &amp; business models</li><li>Demonstrated superior ability to develop and lead relationship-building activities with C-Level executives, including CISO, CIO, CEO, CFO, COO, Business Executives, and General Auditor</li><li>Excellent presentation, verbal, and written communication skills</li><li>Proven history of quota attainment and new client acquisition</li><li>Exceptional closing skills</li><li>Strong strategic thinking, analytical, and leadership skills</li><li>Excellent written and oral communication skills</li><li>Critical thinking skills to determine the best solution out of multiple “correct” options</li><li>The ability to solve complex technical problems and remove obstacles diplomatically, with little supervision</li><li>Must be able to work with a hunter’s mentality within existing accounts</li><li>Ability to travel up to 50% on a monthly basis</li><li>Bachelor’s degree (four-year college or university) or equivalent combination of education and work experience</li></ul>
<h3>Bonus Points</h3>
<ul>
<li>Desire and ability to understand and relate complex product technology, services, strategy, and direction</li><li>CCSK</li><li>Solution Selling</li><li>Force Management</li></ul>Why You'll Want to Join UsAt Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.At Coalfire, equal opportunity and pay equity is integral to the way we do business. A reasonable estimate of the compensation range for this role is $78,000 to $135,000 based on national <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> averages. The actual salary offer to the successful candidate will be based on job-related education, geographic location, training, licensure and certifications and other factors. You may also be eligible to participate in annual incentive, commission, and/or recognition programs. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.#LI-HW1<a href="https://infosec-jobs.com/remote-jobs/" rel="noopener noreferrer nofollow ugc" target="_blank">#LI-Remote</a>

Account Executive – Compliance Services | Remote US

Accenture

At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. Our 13,000+ people are united in a shared purpose to pursue the limitless potential of technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations.
 
Join Accenture Federal Services to do the work you love in an inclusive, collaborative, and caring community, where you can be empowered to grow, learn and thrive through hands-on experience, certifications, industry training and more.
 
Join us to drive positive, lasting change that moves missions and the government forward!
 The Work:
The SOC team lead is the focal point for the SOC and client to ensure we are operating at 24x7x365 Tiers 1 and 2 support. The lead of this group will support, continuous monitoring, prevention, detection, containment, and eradication of any cyber threats facing our client environment.
Here is what you need:
<ul>
<li>Five (5) or more years of project management experience</li>
<li> Experience in security operations as identified in section 7.2</li>
<li> Experience in handling incident response (ISC)2 Certified Information Systems Security Professional (CISSP) or Project Management Professional (PMP)</li>
<li>Secret Clearance (active)</li>
<li> Top Secret, SCI Clearance (eligible)</li>
</ul>

Compensation for roles at Accenture Federal Services varies depending on a wide array of factors including but not limited to the specific office location, role, skill set and level of experience. As required by local law, Accenture Federal Services provides a reasonable range of compensation for roles that may be hired in California, Colorado, New York, or Washington State as set forth below and <a href="https://www.accenture.com/us-en/careers/your-future-rewards-benefits" rel="noopener noreferrer nofollow ugc" target="_blank">information on benefits offered is here.</a>  
Role Location: Range of Starting Pay for role:
California: $105,200 - $234,900
Colorado: $105,200 - $202,900
New York: $97,300 – $234,900
Washington State: $112,100 – $215,900
 
What We Believe 
We have an unwavering commitment to diversity with the aim that every one of our people has a full sense of belonging within our organization. As a business imperative, every person at Accenture Federal Services has the responsibility to create and sustain an inclusive environment.
 
Inclusion and diversity are fundamental to our culture and core values. Our rich diversity makes us more innovative and more creative, which helps us better serve our clients and our communities. <a href="https://www.accenture.com/us-en/about/inclusion-diversity/us-workforce" rel="noopener noreferrer nofollow ugc" target="_blank">Read more here</a>
 
Equal Employment Opportunity Statement
Accenture Federal Services is an Equal Opportunity Employer. We believe that no one should be discriminated against because of their differences, such as age, disability, ethnicity, gender, gender identity and expression, religion or sexual orientation. 
 
All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.
 
Accenture is committed to providing veteran employment opportunities to our service men and women. 
 
For details, view a copy of the <a href="https://afscommunities.force.com/careers/s/equal-opportunity-annual-policy" rel="noopener noreferrer nofollow ugc" target="_blank">Accenture Equal Opportunity and Affirmative Action Policy Statement</a>.
 
Requesting An Accommodation 
Accenture Federal Services is committed to providing equal employment opportunities for persons with disabilities or religious observances, including reasonable accommodation when needed. If you are hired by Accenture Federal Services and require accommodation to perform the essential functions of your role, you will be asked to participate in our reasonable accommodation process. Accommodations made to facilitate the recruiting process are not a guarantee of future or continued accommodations once hired.
 
If youare being considered for employment opportunities with Accenture Federal Services and need an accommodation for a disability or religious observance during the interview process or for the job you are interviewing for, please speak with your recruiter.
 
Other Employment Statements 
Applicants for employment in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States.
 
Candidates who are currently employed by a client of Accenture Federal Services or an affiliated Accenture business may not be eligible for consideration.
 
Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process.
 
The Company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. Additionally, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the Company's legal duty to furnish information.

SOC Team Lead

Sonatype

Sonatype is the software supply chain management company. We're on a mission to change how the world innovates by making software development easier. From running the world's largest repository of Java open-source components (Maven Central) to inventing componentized software development and then software supply chain management to creating the only solution that stops malicious open-source malware in its tracks, we're constantly leading the industry while helping thousands of customers manage open source every day.Already used by 15 million developers, we have lofty goals for our technology to be in the hands of every engineering team. And we need you to do that. <a href="https://www.sonatype.com/company/careers?topnav=true&amp;hsLang=en-us#open-jobs" rel="noopener noreferrer nofollow ugc" target="_blank">Join us</a>!Learn more at <a href="http://www.sonatype.com/" rel="noopener noreferrer nofollow ugc" target="_blank">www.sonatype.com</a>.Sonatype’s mission is to enable organizations to better manage their <a href="https://vimeo.com/192531229" rel="noopener noreferrer nofollow ugc" target="_blank">software supply chain</a>.  We offer a series of products and services including the Sonatype Nexus Repository and Sonatype Lifecycle.**This position is 100% remote and candidates must currently live in Colombia.The Security Researcher will investigate and analyze vulnerabilities in open-source software.Sonatype is looking for a passionate, driven and talented Security Researcher to provide high quality security data from researching software vulnerabilities.  This high-quality security data ensures that our customers are getting maximum value out of our products making them feel like they are part of the Sonatype family.  If you are a positive-thinker and problem-solver and believe that customer success and company success go hand-in-hand, this is a great job for you.  This position will provide a valuable learning opportunity with great potential to grow your newly started career in cyber-security.  Enjoy your job as you work in a fast-paced, flexible, and fun environment, with talented, diverse, and forward-thinking individuals.
<h3>Responsibilities:</h3>
<ul>
<li>Review, isolate, analyze, and reverse engineer vulnerabilities in open-source software.</li><li>Document attack capabilities.</li><li>Provide detection and remediation guidance.</li><li>Aid in ideas and prototypes for new tooling.</li><li>Collaborate with other team members toward shared product goals.</li><li>Improve Sonatype products by providing valuable security data.</li><li>Work with technology and business team members to define and refine requirements in an agile development environment</li></ul>
<h3>Required Qualifications:</h3>
<ul>
<li>Bachelor of Science Degree in Computer Science, Cybersecurity, Engineering, or related field; or at least 4 years of related work experience in lieu of a degree.</li><li>5 + years experience in software development or application security.</li><li>3 + years of experience with Java, C#, or JavaScript.</li><li>Excellent oral and written communication skills</li></ul>
<h3>Desired Qualifications:</h3>
<ul>
<li>Knowledge of application security such as the OWASP Top 10 or Sans 25.</li><li>Excellent organizational skills and detail oriented.</li><li>Ability to work independently and as part of a team</li></ul>We support our remote employee experience. While we have offices in Fulton MD, Tyson's Corner VA, London UK, and Sydney AUS, we are remote first and always have been. We use a number of communication tools to connect across the company, keep information flowing day to day, and meet face-to-face on a targeted basis at organization and team meetups.Thousands of organizations and millions of developers use our software. If you have a passion for improving how the world develops software, Sonatype is the right place for you.At Sonatype, we value diversity and inclusivity. We offer perks such as parental leave, diversity and inclusion working groups, and flexible working practices to allow our employees to show up as their whole selves. We are an equal-opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. If you have a disability or special need that requires accommodation, please do not hesitate to let us know.<a href="https://infosec-jobs.com/remote-jobs/" rel="noopener noreferrer nofollow ugc" target="_blank">#LI-Remote</a>

Security Researcher

Instacart

We're transforming the grocery industry
At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible earnings opportunities to Instacart Personal Shoppers.
Instacart has become a lifeline for millions of people, and we’re building the team to help push our shopping cart forward. If you’re ready to do the best work of your life, come join our table.
Instacart is a Flex First team 
There’s no one-size fits all approach to how we do our best work. Our employees have the flexibility to choose where they do their best work—whether it’s from home, an office, or your favorite coffee shop—while staying connected and building community through regular in-person events. <a href="https://instacart.careers/remote/" rel="noopener noreferrer nofollow ugc" target="_blank">Learn more about our flexible approach to where we work.</a>Overview


We're looking for experienced Security Engineers to join our fast moving security team. We work on a range of interesting and challenging problems, from supporting thousands of concurrent shoppers and processing millions of data points in real time, to developing and enhancing internal tools, addressing vulnerabilities and managing secrets.
Our goal is to run the world's most trusted and secure delivery platform. We work across all layers of our infrastructure to ensure we deploy trustworthy systems and protect our customers’, shoppers’, and partners’ data.

About the Team
You will be a key member of the Security Engineering team that is responsible for developing security-focused features and frameworks for Instacart in both production and infrastructure space. Ideally a hybrid builder/breaker, you will have an opportunity to lead high impactful projects across the platform and assist in defining the internal team processes. You will be directly influencing the security posture of many products and systems across the company. 


About the Job 
<ul>
<li>Design, implement and ship high-quality security features for the product and internal tools across Instacart with a strong sense of urgency and accountability such as:</li>
<ul>
<li>Secrets &amp; Vulnerability management</li>
<li>IAM and Zero Trust</li>
<li>Platform abuse prevention &amp; mitigation </li>
<li>Data analytics hardening </li>
</ul>
<li>Work closely with product managers, designers, data scientists, and peer engineering teams to define project requirements and execution plans.</li>
<li>Identify unaddressed areas of security weakness and help the teams come up with efficient and scalable solutions.</li>
<li>Provide software engineering resource for sister teams in the areas of infrastructure hardening, detection, and response</li>
<li>Participate in the team’s on-call by handling and running security incidents</li>
</ul>


About You
MINIMUM QUALIFICATIONS
<ul>
<li>2-5 years of experience in Security Engineering or related role</li>
<li>Strong knowledge of common back-end web technologies (such as Ruby on Rails, Python, Golang, SQL, etc.) in a large scale distributed system environment</li>
<li>Experience with leading security design reviews and threat modeling</li>
<li>An ability to make data-driven decisions &amp; prioritize initiatives that would help improve the key metrics</li>
<li>An ability to work effectively with cross-functional teams and drive alignment on security objectives and plans</li>
<li>An ability to balance a sense of urgency with shipping high-quality and pragmatic solutions.</li>
<li>Strong self-management and organizational skills</li>
<li>Experience developing tools and automation using common devops toolsets and programming languages</li>
</ul>


PREFERRED QUALIFICATIONS
<ul>
<li>Bachelor’s degree in Computer Science, Engineering, Math or related work experience</li>
<li>Breaker experience, such as web/application penetration testing, including OSCP/OSWE</li>
<li>Experience working on security or privacy products</li>
<li>Experience working with highly ephemeral environments</li>
<li>Prior experience assisting in handling and running incidents</li>
</ul>

<a href="https://infosec-jobs.com/remote-jobs/" rel="noopener noreferrer nofollow ugc" target="_blank">#LI-Remote</a>

Security Software Engineer (Intermediate/Senior)

Intergiro

We are looking for an Information Security Officer to join our Risk Control &amp; Compliance team. You will be the one advising and setting up governance structures within the information security area, overseeing both its strategic direction and working hands on in our day-to-day operations. This role means you will work within the business as subject matter expert with regards to the regulatory framework that applies for information security and related matters. The Information Security Officer will have a deep understanding of the business models and business objectives in order to align them with information security and compliance standards and strategies. The Information Security Officer’s goal is to lead the business towards industry-leading security practices. The function is placed within the 2nd line of defence where you report to our Chief Risk &amp; Compliance Officer and will have four colleagues within Risk and Compliance to discuss regulatory matters and align on planned activities etc. The Information Security Officer will initiate necessary activities and follow up on execution, as well contribute to Intergiro’s overall security standards, routines and policy.
Your key responsibilities- Create information security strategies in support of the company’s goals and business strategies.- Create, review and maintain security policy and procedures in order to meet obligations stemming from regulations and applicable standards. - Lead and perform audits, risk identification and risk assessments periodically as required by standards and regulations in addition to when there are changes in the business or the regulatory environment.- Provide expertise in regulations and standards related to information security such as the upcoming DORA , GDPR and PCI-DSS.- Provide support for assessments of risks and outsourcing management in relation to external vendors. - Evaluate and provide support in information security incidents.- Evaluate and implement new ways to automate and improve information security across the business.

Take the opportunity to join a fun, evolving and challenging start-up/scale-up and help us shape the future of the ‘embedded finance’ revolution! We want to be the best kind of company and the best kind of environment, for the best kind of people:
💡 We believe in idea meritocracy: the best one wins, no matter where it came from and we make sure to create a safe place for open communication so everyone can express their views.
💬 We give you a lot of ownership and autonomy which means you will have the space to grow and make an impact on our business. This also means you get the freedom to work remotely from anywhere in Sweden or from any of our European hiring locations.
👩‍⚖️ We continuously seek innovation. We are trying to build something different and better than what is already out there, so we must be the vanguard.
<h3>Requirements</h3>
- At least 4 years of experience in the Information Security field with practical experience of implementing and/or follow up on some kind of regulatory framework. 
- A solid understanding of regulations and standards applicable in the financial sector such as PSD2, EBA Guidelines, GDPR and PCI-DSS with regards to information security. Details may be learned but you must have a solid understanding of information security and risk management principles and how to implement them into practice. 
- Strong understanding of toolbox available for protection of IT-systems and management of IT-related risks. 
- Strong communicator, an ability to explain complex things to various audiences. 
- Self starter with a desire and comfortability working in a fast paced start-up environment with a problem-solving mindset and hands on approach.
- Located in any of our hiring locations Sweden, Spain, Poland or Portugal and possessing a work permit for that specific location.Welcome with your application!

Information Security Officer

Starling Bank

Starling is the UK’s first and leading digital bank on a mission to fix banking! Our vision is fast technology, fair service, and honest values. All at the tap of a phone, all the time.We are about giving customers a new way to spend, save and manage their money while taking better care of the planet which has seen us become a multi-award winning bank that now employs over 2800 across five offices in London, Cardiff, Dublin, Southampton, and Manchester. Our journey started in 2014, and since then we have surpassed 4 million accounts (and four account types!) with 350,000 business customers. We are a fully licensed UK bank but at the heart, we are a tech first company, enabling our platform to deliver brilliant products.Our technologists are at the very heart of Starling and enjoy working in a fast-paced environment that is all about building things, creating new stuff, and disruptive technology that keeps us on the cutting edge of fintech. We operate a flat structure to empower you to make decisions regardless of what your primary responsibilities may be, innovation and collaboration will be at the core of everything you do. Help is never far away in our open culture, you will find support in your team and from across the business, we are in this together!The way to thrive and shine within Starling is to be a self-driven individual and be able to take full ownership of everything around you: From building things, designing, discovering, to sharing knowledge with your colleagues and making sure all processes are efficient and productive to deliver the best possible results for our customers. Our purpose is underpinned by five Starling values: Listen, Keep It Simple, Do The Right Thing, Own It, and Aim For Greatness.About the roleHere at Starling we are growing, and we are keen to recruit an Information Security Lead as part of our continued investment in Information and Cyber Security capability. Reporting to the Information Security Director - Operations, the Security Lead will act as line manager to a team of Information Security Analysts,  supporting the continuous development and delivery of our Information Security &amp; Cyber Threat Intelligence..The role will suit an ambitious information security or cyber specialist, with strong team building and leadership skills who has a desire to invest their knowledge and experience into a growing function and make an impact. What you'll get to do<ul> <li>Lead a team of subject matter experts and analysts to ensure Information Security is managed and continuously improved in line with Bank policy and procedure.</li> <li>Supporting the development and progression of the Information Security Analyst team from both a technical and professional perspective.</li> <li>Support in the enhancement and continuous improvement of the Bank’s Information and Cyber Security systems, processes and procedures, and optimise reporting of identified threats and vulnerabilities.</li> <li>Act as an Information Security SME for Business Continuity and Crisis Management Planning; this includes supporting cyber business impact analysis and tabletop exercises.</li> <li>Supporting the development of the Cyber <a href="https://infosec-jobs.com/insights/incident-response-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">Incident Response</a> capability and ensuring coherence with the broader response capability.</li> <li>Assist as necessary to investigate and qualify security incidents.</li> <li>Support in the development and improvement of internal bank first line related processes.</li> <li>Support and drive the continuous improvement of Intelligence collection and retention practices.</li> <li>Working in parallel with Response, Triage, and wider security teams to increase defensive and detective controls.</li> <li>Take responsibility and do the right thing for customers, colleagues and partners.</li> </ul>RequirementsYou will:<ul> <li>have previous experience in a similar role leading, developing and motivating a team of subject matter experts and other managers in Information Security</li> <li>have previous experience working in a complex IT organisation encompassing service delivery, application development and IT infrastructure.</li> <li>Financial Services or Fintech experience would be valuable</li> <li>an understanding of best practice within Information Security and risk management including standards such as ISO/IEC 27001, NIST, Cyber Essentials and COBIT.</li> <li>an understanding of legislation and regulations that impact information Security. E.g. Data Protection Act and GDPR, Freedom of Information Act.</li> <li>be a Self Starter with the ability to lead, inspire and drive change through an organisation.</li> <li>have the ability to be pragmatic while balancing the needs of the Bank against security.</li> <li>have an ability to think and plan strategically and systematically while recognizing the need to deliver to the business requirements.</li> <li>Have experience evaluating, implementing and using Threat Intelligence (TI) products.</li> <li>Practical experience using threat analysis models such as MITRE ATT&amp;CK, the Diamond Model, and the Cyber Kill Chain to support use case development and threat reporting</li> <li>an understanding of current and emerging threats and countermeasures and the organisational challenges to addressing these threats.</li> <li>an understanding of Application Security threats and countermeasures.</li> <li>a good practical knowledge of security technologies and wider business solutions including Identity and access management, <a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a>, remote working and <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> technologies.</li> <li>a good understanding of financial services and awareness of broader requirements.</li> </ul><ul> <li>It would be great if you have one or more of the following qualifications, but it’s not essential;</li> <ul> <li>GCTI</li> <li>CRTIA</li> </ul> </ul>You may be put off applying for a role because you don't tick every box. Forget that! While we can’t accommodate every flexible working request, we're always open to discussion. So, if you're excited about working with us, but aren’t sure if you're 100% there yet, get in touch anyway.Interview ProcessOur interviews are conversational and we want to get the best from you, so come with questions and be curious. In general you can expect the below video interviews, following a chat with one of our Talent Team:<ul> <li>First Interview: 45 minutes</li> <li>Technical Interview: 90 minutes</li> <li>Final Interview: 45 minutes</li> </ul>BenefitsStarling technology works in a hybrid pattern both from home and one of our three offices. We’re open to applications from across the UK including fully remote, if you’re hybrid our preference is that you’re located within a commutable distance to either our London, Southampton or Cardiff office, so that we’re able to see each other and collaborate in person too.<ul> <li>25 days holiday (plus take your public holiday allowance whenever works best for you)</li> <li>An extra day’s holiday for your birthday</li> <li>Annual leave is increased with length of service, and you can choose to buy or sell up to five extra days off</li> <li>16 hours paid volunteering time a year</li> <li>Salary sacrifice, company enhanced pension scheme</li> <li>Life insurance at 4x your <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> &amp; group income protection</li> <li>Private Medical Insurance with VitalityHealth including mental health support and cancer care. Partner benefits include discounts with Waitrose, Mr&amp;Mrs Smith and Peloton</li> <li>Generous family-friendly policies</li> <li>Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks</li> <li>Access to initiatives like Cycle to Work, Salary Sacrificed Gym partnerships and Electric Vehicle (EV) leasing</li> </ul>About UsYou may be put off applying for a role because you don't tick every box. Forget that! While we can’t accommodate every flexible working request, we're always open to discussion. So, if you're excited about working with us, but aren’t sure if you're 100% there yet, get in touch anyway. We’re on a mission to radically reshape banking – and that starts with our brilliant team. Whatever came before, we’re proud to bring together people of all backgrounds and experiences who love working together to solve problems.Starling Bank is an equal opportunity employer, and we’re proud of our ongoing efforts to foster diversity &amp; inclusion in the workplace. Individuals seeking employment at Starling Bank are considered without regard to race, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, physical or mental disability, military or veteran status, or any other characteristic protected by applicable law. When you provide us with this information, you are doing so at your own consent, with full knowledge that we will process this personal data in accordance with our Privacy Notice. By submitting your application, you agree that Starling Bank will collect your personal data for recruiting and related purposes. Our Privacy Notice explains what personal information we will process, where we will process your personal information, its purposes for processing your personal information, and the rights you can exercise over our use of your personal information.

Information Security Lead (Cyber Threat Intelligence)

The leading job board for Cyber Security Jobs. Start your career in Information Security Industry. Jobs are updated daily.

Job Position and Company	Location	Tags	Posted
Senior Application Security Engineer at Worldcoin	Full Time Application Security
Senior Malware Reverse Engineer at Two Six Technologies	Full Time
Security Analyst (Part-Time, Temporary) at Synack	Remote Full Time Analyst Internship Part Time
Supplier Manager III at Rackspace	Full Time Manager
Security Risk and Compliance Management Specialist III at Rackspace	Remote Full Time Consulting
Cloud Software Support Specialist (French language) at Acronis	Remote Full Time Windows
Cyber Expert Support Engineer at Acronis	Remote Full Time Windows
Senior Application Security Engineer at NEAR	Remote Full Time Manager Application Security
Security Engineer - Product Security Incident Response Team (PSIRT) at Guidewire Software	Full Time Incident Response Application Security
Security Analyst - Southwest region (Remote in SoCal, NV, UT, or AZ) at GuidePoint Security	Remote Full Time Analyst
Concierge Security Engineer 2 at Arctic Wolf Networks	Full Time Consultant Analyst Incident Response
SC2024-003475 Cyber Security Scorecard Dev and Assessment (NS) - FRI 5 Apr at EMW, Inc.	Manager Full Time Contract
Product Security Analyst Lead at Bungie, Inc.	Remote Full Time Analyst Contract
Incident Response Manager at Stripe	Remote Full Time Manager Incident Response
Account Executive – Compliance Services \| Remote US at Coalfire	Remote Full Time CISO Consulting Contract
SOC Team Lead at Accenture	Full Time Incident Response
Security Researcher at Sonatype	Remote Full Time Javascript Application Security
Security Software Engineer (Intermediate/Senior) at Instacart	Remote Full Time
Information Security Officer at Intergiro	Remote Full Time Chief
Information Security Lead (Cyber Threat Intelligence) at Starling Bank	Remote Full Time Analyst Manager Incident Response

Cyber Security Jobs

390 Cyber Security Jobs. Page 18 of 20

Subscribe to the weekly
Cyber Security Jobs Newsletter