GuidePoint Security

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.<h3>Job Overview</h3>
As an Advisory Consultant, you will be a technical resource that leverages your knowledge, skills, and experience to help deliver results to clients in various sectors.
Underneath GuidePoint Security’s Digital Forensics &amp; <a href="https://infosec-jobs.com/insights/incident-response-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">Incident Response</a> Practice (DFIR) and GuidePoint Research &amp; Intelligence Team (GRIT) umbrella, the Advisory Practice performs the following:
<ul>
<li>Tabletop Exercises</li>
<li>Playbook and Runbook Development</li>
<li>Purple Team Exercises (as Blue Team in collaboration with GuidePoint Red Team)</li>
<li>Work alongside GuidePoint Incident Responders with reactive incidents and proactive threat discovery</li>
</ul>
<h3>Role Requirements</h3>
Your primary responsibilities include development of challenging scenarios for GuidePoint clientele through Tabletop and Purple Team exercises, as well as helping clients navigate the creation of operational documentation for responding to incidents (Playbooks &amp; Runbooks). This role will require an experienced individual that can view attacks from a holistic level, inclusive of both offensive and defensive mindsets, to create meaningful impacts for clients, while managing a consulting engagement. 
GuidePoint Security’s DFIR service offerings are perpetually evolving in response to emerging threats and diverse client needs. Your creativity and expertise will assist the DFIR Practice with adapting to this rapidly changing environment. Primary duties will include:
<ul>
<li>Planning, facilitation, documentation, development, and coordination of follow-up activities for the cyber exercise program including Tabletop exercises, Playbook &amp; Runbook development, and Purple Team engagements.</li>
<li>Review of client documentation including incident response plans, Playbooks, Runbooks, information security policies, network maps, architecture diagrams, etc.</li>
<li>Coordinate exercise planning teams comprised of internal resources and GuidePoint clients with various technical, non-technical, and executive staff to plan and execute cybersecurity exercises.</li>
<li>Work with internal teams to identify cyber risks, design threat scenarios, identify key stakeholders and participants, as well as execute the exercise against the planned scenarios and objectives.</li>
<li>Assess observations and findings during exercises, communicate findings to stakeholders, and escalate high risk findings to appropriate personnel for risk remediation efforts.</li>
<li>Assist in the development of programmatic documents, briefings, and reports tailored to a specific audience.</li>
<li>Develop information security policies, standards, plans, procedures, and other documentation to support customer adopted frameworks and industry standards.</li>
<li>Review and develop Security Incident Response Plans and Runbooks.</li>
</ul>
<h3>Education and Experience</h3>
Essential Qualifications
<ul>
<li>Four (4+) years of experience in an Information Security Role</li>
<li>Experience with creating and facilitating Tabletop exercises for both technical and executive teams</li>
<li>Strong understanding and working knowledge of security frameworks including, NIST CSF, ISO 27K, and others.</li>
<li>Experience in reviewing and developing Security Incident Response Plans and Runbooks.</li>
<li>Strong written documentation experience</li>
<li>Experience with common documentation tools including Microsoft Office, Confluence, and Diagraming Tools (Visio, LucidChart, etc.)</li>
<li>The ability to learn new technologies and concepts quickly</li>
<li>Ability to manage projects, milestones, and deliverables for business-related objectives </li>
</ul>
Preferred Qualifications
<ul>
<li>Prior experience in a Consulting Services role</li>
<li>Experience with Digital Forensics &amp; Incident Response (DFIR) methodology and process</li>
<li>Experience with Immersive Labs</li>
<li>Experience with a variety of industry-related solutions including EDR, <a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a>, NDR, FW, NGAV, Velociraptor, OSQuery, and others</li>
<li>Experience with common programming languages including PowerShell, Python, BASH, Go, or others</li>
</ul>We use Greenhouse Software as our applicant tracking system and Free Busy for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application.
Why GuidePoint?GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 900 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 3,500 customers.
Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.  
This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.Some added perks….
<ul>
<li>Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)</li>
<li>100% employer-paid medical premiums (employee only $0 deductible and HSA plans) along with 75% employer-paid family contributions</li>
<li>100% employer-paid dental premiums (employee only) along with 75% employer-paid family contributions</li>
<li>12 corporate holidays and a Flexible Time Off (FTO) program</li>
<li>Healthy mobile phone and home internet allowance</li>
<li>Eligibility for retirement plan after 2 months at open enrollment</li>
<li>Pet Benefit Option</li>
</ul>

Advisory IR Services Consultant- Remote (Anywhere in the U.S.)

Optiv

How you’ll make an impact:Able to solo deliver or act as "point" for complex projects.Acts as technical escalation point to assist other consultants.Leverage cutting-edge techniques, tools, and procedures (TTPs), to covertly compromise clients.Leverage <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a>-based assets to execute targeted assessments.Creatively use identified vulnerabilities across a client’s entire security posture (logical, physical, social) to demonstrate meaningful risks to clients based on industry and business focus.Create comprehensive assessment reports that clearly identify root cause and remediation strategies.Interface with client personnel to gather information, clarify scope and investigate security controls.Execute projects using established methodology, tools, and documentation.Collaborate with other team members and practices to complete client projects and practice contributions.Provide support in the ongoing development of security assessment offerings through tool creation and process improvement.Perform other duties as assigned.Participate in industry conferences to include delivering presentations.
<h3>What we’re looking for </h3>
<ul>
<li>3 - 8 years of experience in performing Vulnerability Assessments, Penetration Tests, Wireless Security Assessments, Cloud Assessments and/or Social Engineering to enterprise-level organizations.</li><li>Previous job experience in an information security consulting services role.</li><li>Certifications such as OSCP, OSEP, OSCE, CREST CRT, GIAC (GXPN, GWAPT, GPEN, GMOB) others are highly desired.</li><li>Bachelor’s Degree from a four-year college or university in Information Assurance, Computer Science, Management Information Systems, or related area of study; or related experience and/or training; or equivalent combination of education and experience strongly preferred.</li><li>Demonstrated ability to deliver projects using well-defined methodology across various security assessment disciplines.</li><li>Ability to combine multiple separate findings to execute complex attacks.</li><li>Ability to manually validate vulnerabilities identified during assessments.</li><li>Ability to identify, describe and report vulnerabilities and standard remediation activities, to include clear demonstration of risk to clients through post-exploitation activities required.</li><li>Familiarity with many different network architectures, network services, system types, network devices, development platforms and software suites required (e.g., Linux, Windows, Cisco, Oracle, Active Directory, JBoss, .NET, etc.) required.</li><li>Familiarity with command and control (C2) frameworks, such as Cobalt Strike, Mythic, Covenant, etc. </li><li>Familiarity with evasive techniques for social engineering, C2, and post-exploitation.</li><li>Passion for creating tools and automation to make common tasks more efficient preferred.</li><li>Knowledge of programming and scripting for development of security tools preferred.</li><li>Motivation to contribute to the infosec community (speaking, publishing, tooling/research) preferred.</li><li>Demonstrated ability to create comprehensive assessment reports required.</li><li>Must be able to work well with customers and self-manage through difficult situations, focus on client satisfaction.</li><li>Ability to convey complex technical security concepts to technical and non-technical audiences including executives required.</li><li>Ability to lead and mentor others; willingness to collaborate and share knowledge with team members required.</li><li>Proven ability to review and revise reports written by peers required.</li><li>Demonstrated effective time management skills, ability to balance multiple projects simultaneously and the ability to take on large and complex projects with little or no supervision required.</li></ul>If you are seeking a culture that supports growth, fosters success, and moves the industry forward, find your place at Optiv! As a market-leading provider of cyber security solutions, Optiv has the most comprehensive ecosystem of security products and partners to deliver unparalleled services. Our rich and successful history with our clients is based on trust, serving more than 12,000 clients of varying sizes and industries, including commercial, government, and education. We have the proven expertise to plan, build, and run successful security programs across Risk Management, Cyber Digital Transformation, Threat Management, Security Operations - Managed Services, and Identity and Data Management.With Optiv you can expect• A company committed to championing Diversity, Equality, and Inclusion through our Affinity groups including, Black Employee Network, Disabled Employee Network, Latino Employee Network, Optiv Pride (LGBTQIA+), Veterans Support Network, and Women's Network.• Work/life balance. • Professional training resources• Creative problem-solving and the ability to tackle unique, complex projects• Volunteer Opportunities. “Optiv Chips In” encourages employees to volunteer and engage with their teams and communities.• The ability and technology necessary to productively work remote/from home (where applicable)Optiv is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, status as an individual with a disability, veteran status, or any other basis protected by federal, state, or local law. Optiv respects your privacy.  By providing your information through this page or applying for a job at Optiv, you acknowledge that Optiv will collect, use, and process your information, which may include personal information and sensitive personal information, in connection with Optiv’s selection and recruitment activities.  For additional details on how Optiv uses and protects your personal information in the application process, click here to view our <a href="https://www.optiv.com/job-applicant-privacy-notice" rel="noopener noreferrer nofollow ugc" target="_blank">Applicant Privacy Notice</a>. If you sign up to receive notifications of job postings, you may unsubscribe at any time.

Attack &amp; Penetration - Sr. Consultant - I | Remote, Bangalore, India

Coupang

* English text will follow the Korean version

회사 소개
쿠팡은 고객 감동 실현을 위해 존재합니다. 고객들이 "쿠팡 없이 그동안 어떻게 살았을까?" 라고 말할 때, 비로소 우리의 미션을 실현하고 있음을 알 수 있습니다. 고객들의 쇼핑과 식사, 생활 전반을 편하게 만들겠다는 유일한 집념으로 쿠팡은 수억 달러 규모의 이커머스 산업 전반의 혁신을 이끌고 있습니다. 쿠팡은 가장 빠르게 성장하는 이커머스 기업 중 하나로, 국내 커머스 업계에서의 독보적인 입지와, 고객 신뢰를 구축했습니다. 
쿠팡은 스타트업 문화를 기반으로 한 글로벌 대형 상장사라고 자부합니다. 이것이 창립 당시의 기민함을 유지하며, 신규 서비스를 끊임없이 출시하며 비즈니스를 확장해 나가는 우리의 성장 동력입니다. 쿠팡의 모든 임직원에게는 기업가 정신을 갖추고 새로운 혁신과 이니셔티브를 추진할 수 있는 기회가 주어집니다. 주저 없이 일에 뛰어들어 성과를 이루고자 하는 과감성이, 바로 쿠팡이 일하는 방식의 본질입니다. 쿠팡에서는 여러분 자신, 동료, 팀 그리고 회사 전체가 매일 성장하는 모습을 목격할 것입니다. 
쿠팡의 모든 직원은 커머스의 미래를 만들겠다는 쿠팡의 미션에 진심입니다. 우리는 고객의 문제를 해결해 나가고, 전통적인 관념과 통념에 맞서며 실현 가능한 한계를 뛰어넘고 있습니다. 고가용성 (always-on) 과 최첨단의 앞선 기술 (high-tech), 초연결사회 (hyper-connected world) 에서의 놀라운 업무 경험을 원하신다면, 지금 바로 쿠팡에 합류하세요. 

직무 소개
쿠팡의 Identity &amp; Access Management (IAM) 팀은 회사의 IAM 인프라를 관리하는 역할을 맡고 있습니다. 우리 팀은 적절한 사용자를 위해 적절한 맥락에서 회사의 자산에 대한 올바른 액세스를 정의하고 관리하는 플랫폼을 제공합니다. IAM팀은 IAM 관련 경험과 창의적인 문제 해결 능력을 갖추고 신기술영역에서 일하고자 하는 열정이 있으며 다양한 역할을 수행할 준비가 된 인재를 찾고 있습니다. 활기가 넘치고, 빠르게 움직이며 혁신적이고 협동적인 스타트업 환경에서 함께 일할 분을 모십니다.

업무 내용:
<ul>
<li>ServiceNow로 접수되는 IAM 플랫폼 관련 문의 지원</li>
<li>Windows/Linux 서버, Microsoft AD, Azure AD, AWS, Radiant Logic, PAM 제품 등 IAM 플랫폼 시스템 유지보수</li>
<li>IAM 시스템 모니터링 툴로 시스템 성능 및 사용자 계정 문제 모니터링</li>
<li>중요한 사건 발생 시 상시 지원</li>
<li>사용자 경험 개선을 위한 주요 변경 및 시스템 개선 관련 프로젝트 참여</li>
<li>표준 운영 절차 문서 작성 및 관리</li>
<li>표준 운영 방법 및 새로운 기능 구현을 위한 IAM 팀 및 기타 보안팀과의 협력 및 주요 애플리케이션과 자산의 인증, 인가 best practice 구현을 위한 의견 제시</li>
</ul>

자격 요건:
<ul>
<li>시급성, 무결성, 문제해결 책임을 중요시 생각하고 Agile, Continuous Delivery 방법론 등 목적을 달성하기 위한 협력과 통합을 이해할 수 있는 DevOps 사고방식을 보유하신 분</li>
<li>Microsoft AD, Azure AD, Radiant Logic, LDAP, Single Sign On, Privileged Access Management solution 등 관련 지식과 경험을 보유하신 분</li>
<li>인증/인가, identity 관리 표준/프로토콜 관련 기술 지식을 보유하신 분</li>
<li>웹 서비스(REST/SOAP) 관련 지식을 보유하신 분</li>
<li>클라우드 기술 관련 경험(Google Cloud Platform, Azure, AWS)을 보유하신 분</li>
</ul>

우대 사항:
<ul>
<li>5년 이상의 IT operation 및 support 경험을 보유하신 분</li>
<li>Microsoft AD, Azure/Azure AD, AWS, LDAP, Privileged Access Management 보안제품 관련 지식을 보유하신 분</li>
<li>Powershell 및 Java, Javascript, Python으로 코딩 및 스크립팅 경험을 보유하신 분</li>
</ul>

---
What You Will Do
<ul>
<li>Support the day-to-day support request via ServiceNow of the IAM Platform related.</li>
<li>Maintain and troubleshooting IAM Platform systems, such as Windows/Linux servers, Microsoft AD, Azure AD, AWS, Radiant Logic, PAM solution.</li>
<li>Monitoring system performance and user account issues via IAM system monitoring tools.</li>
<li>Support for 24/7 when there is a critical issue.</li>
<li>Participate new projects for critical changes and system improvement for better user experience.</li>
<li>Develop and maintain documentation of Standard operational processes.</li>
<li>Collaborate with others in the IAM and Security teams to establish standard operations, new capabilities, as well as provide input on best practices for enabling access and authorization for critical apps and assets.</li>
</ul>

Basic Qualifications
<ul>
<li>Sense of urgency, integrity, responsibility for problem solving and have a DevOps mindset, understanding the collaboration and integration required to achieve objectives including Agile and Continuous Delivery methodologies.</li>
<li>Solid knowledge and experience for one or more on Microsoft AD, Azure AD, Radiant Logic, LDAP, Single Sign On, Privileged Access Management solution.</li>
<li>Good technical knowledge of authentication/authorization, or identity management standards/protocols.</li>
<li>Knowledge of web services (REST/SOAP).</li>
<li>Experience with Cloud technologies (Google Cloud Platform, Azure or AWS)</li>
</ul>

Preferred Qualifications
<ul>
<li>IT operation and support experience +5 years.</li>
<li>Good knowledge and experience of Microsoft AD and Azure/Azure AD, AWS, LDAP, Privileged Access Management solution.</li>
<li>Prior coding and/or scripting experience using Powershell, Java, Javascript or Python is a plus.</li>
</ul>


전형 절차 및 안내 사항
<ul>
<li>전형절차
<ul>
<li>서류전형 - 전화면접 - 대면면접 – 최종 합격</li>
<li>전형 절차는 직무별로 다르게 운영될 수 있으며, 일정 및 상황에 따라 변동될 수 있습니다. </li>
<li>전형 일정 및 결과는 지원서에 등록하신 이메일로 개별안내드립니다. </li>
</ul>
</li>
<li>참고사항
<ul>
<li>본 공고는 모집 완료 시 조기 마감될 수 있습니다. </li>
<li>지원서 내용 중 허위사실이 있는 경우에는 합격이 취소될 수 있습니다.</li>
<li>보훈대상자 및 장애인 여부는 채용 과정에서 어떠한 불이익도 미치지 않습니다. </li>
</ul>
</li>
<li>개인정보 처리방침   
<ul>
<li>쿠팡 그룹은 입사지원자 개인정보 처리방침(아래 링크)에 따라 귀하의 개인정보를 수집하여 처리합니다.   <a href="https://www.coupang.jobs/kr/privacy-policy/" rel="noopener noreferrer nofollow ugc" target="_blank">https://www.coupang.jobs/kr/privacy-policy/  </a>  </li>
</ul>
</li>
<li>서류 반환 정책   
<ul>
<li>본 고지는 『채용절차의 공정화에 관한 법률』 제11조 제6항에 따른 것입니다. </li>
<li>당사 채용에 응시한 구직자 중 최종합격이 되지 못한 구직자는 『채용절차의 공정화에 관한 법률』에 따라 제출한 채용서류의 반환을 청구할 수 있음을 알려 드립니다. 다만, 홈페이지 또는 전자우편으로 제출된 경우나 구직자가 당사의 요구 없이 자발적으로 제출한 경우에는 그러하지 아니하며, 천재지변이나 그 밖에 당사에게 책임 없는 사유로 채용서류가 멸실된 경우에는 반환한 것으로 봅니다.  </li>
<li>위 2항 본문에 따라 채용서류 반환 청구를 하는 구직자는 채용서류 반환청구서[채용절차의 공정화에 관한 법률 시행규칙 별지 제3호 서식]를 작성하여 당사 이메일(  recruitingops@coupang.com  )로 제출하면, 제출이 확인된 날로부터 14일 이내에 지정한 주소지로 등기우편을 통하여 발송해 드립니다. 이 경우 등기우편요금은 수신자 부담으로 하게 되오니 유념하시기 바랍니다.  </li>
<li>당사는 위 2항 본문에 따른 구직자의 반환 청구에 대비하여 채용 여부가 확정된 날로부터 180일간 구직자가 제출한 채용서류 원본을 보관하게 되며, 그때까지 채용서류의 반환을 청구하지 아니할 경우에는 『개인정보 보호법』에 따라 지체 없이 채용서류 일체를 파기할 예정입니다. </li>
</ul>
</li>
</ul>

쿠팡은 모두에게 공평한 기회를 제공합니다
쿠팡은 어느 누구에게나 열려 있는 회사입니다. 다양한 국가 출신 임직원이 함께 일하는 글로벌팀이 없었더라면 전례없는 성공을 이루기 어려웠을 겁니다.

Senior Security Engineer (Identity &amp; Access Management - Platform &amp; Operations)

Barbaricum

Barbaricum is a rapidly growing government contractor providing leading-edge support to federal customers, with a particular focus on Defense and National Security mission sets. We leverage more than 15 years of support to stakeholders across the federal government, with established and growing capabilities across Intelligence, Analytics, Engineering, Mission Support, and Communications disciplines. Founded in 2008, our mission is to transform the way our customers approach constantly changing and complex problem sets by bringing to bear the latest in technology and the highest caliber of talent.   Headquartered in Washington, DC's historic Dupont Circle neighborhood, Barbaricum also has a corporate presence in Tampa, FL and Dayton, OH, with team members across the United States and around the world. As a leader in our space, we partner with firms in the private sector, academic institutions, and industry associations with a goal of continually building our expertise and capabilities for the benefit of our employees and the customers we support. Through all of this, we have built a vibrant corporate culture diverse in expertise and perspectives with a focus on collaboration and innovation. Our teams are at the frontier of the Nation's most complex and rewarding challenges. Join us.   Barbaricum seeks a <a href="https://infosec-jobs.com/insights/devsecops-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">DevSecOps</a> &amp; Cloud Engineer to support the DoD Chief Digital and Artificial Intelligence Office’s (CDAO) Assessment &amp; Assurance Division which supports the establishment of the strategy, best practices, architectures, and tools to ensure that the DoD has reliable, ethical, and trusted AI-enabled systems.
<h3>Responsibilities </h3>
<ul>
<li>Demonstrate initiative and be a self-starter, able to work in a highly collaborative, virtual, and versatile environment handling an array of duties and responsibilities with particular focus on coordination, event organization, team facilitation, time management, and multi-tasking abilities.</li><li>Execute day-to-day requirements, such as management of schedules, calendars, databases, documents, distribution of information, data input, reporting, and document control.</li><li>Maintain organizations charts, recall rosters, and email distribution lists; Schedule appointments and make arrangements for meetings, to include agenda and calendar reminders.</li><li>Create and manage Division travel using Defense Travel System (DTS) (ex. Create travel itineraries, submit travel vouchers) for employees.</li><li>Attend meetings; record actions and prepare minutes for distribution</li><li>Create various weekly, biweekly, and monthly reports for the division</li><li>Support the planning and execution of periodic events and information sessions for government workforce, including identifying the topics, handling all event logistics, preparing presentation materials, and marketing the event. </li><li>Create and maintain Division administrative processes and Standard Operating Procedures (SOPs) such as Onboarding Checklists, Time card approval, Division norms, etc.</li><li>Suggest more efficient ways to run the Division and troubleshoot malfunctions.</li><li>Conserve Division Leadership’s time by reading, researching, collecting and analyzing information as needed, in advance.</li><li>Understand Division priorities to effectively manage Division leadership’s time in meetings and prioritizing events that must happen vs optional engagements.</li><li>Assist in preparing and managing presentations and reports.</li></ul>
<h3>Qualifications</h3>
<ul>
<li>Active DoD Secret Clearance</li><li>Strong communication skills, with the ability to proactively engage members both inside and outside of your team</li><li>Experience working as a senior administrator working for senior corporate leaders (ex. Division level or higher) </li><li>Experience creating and maintaining administrative processes (ex. Onboarding process, monitoring training deadlines, required Division reporting, etc..), standards, and gathering information to enable effective administration of an organization</li><li>Experience working with large, multi-organizational and multi-stakeholder teams</li></ul>Additional InformationFor more information about Barbaricum, please visit our website at <a href="http://www.barbaricum.com/" rel="noopener noreferrer nofollow ugc" target="_blank">www.barbaricum.com</a>.  We will contact candidates directly to schedule interviews.  No phone calls please.

DevSecOps &amp; Cloud Engineer

SpaceX

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.SR. SECURITY ENGINEER (THREAT DETECTION) SpaceX is targeted by sophisticated adversaries determined to attain or disrupt the cutting-edge technology it develops. The security operations team is seeking technically excellent engineers with a strong understanding of these adversaries. The environment in which you will operate is used to launch rockets and control spacecraft. You will be tasked with detecting threat actors in this environment before they can disrupt or deny SpaceX’s mission. Your output will be detections and detection mechanisms that provide comprehensive coverage of both known and unknown threats. Your work will involve writing structured queries against large datasets of endpoint and network telemetry, as well as building custom threat detection tooling and frameworks. We encourage the continual practice of adversary emulation to identify novel detections as well as validate the effectiveness of our threat detection posture. If you are interested in detecting and disrupting sophisticated threat actors in order to secure SpaceX’s mission to Mars, let’s talk! RESPONSIBILITIES: <ul><li>Build security detections and detection frameworks.</li><li>Perform adversary emulation activities to identify detection gaps in the environment.</li><li>Research emerging adversary techniques and tooling, using the knowledge gained to build novel detections.</li><li>Engage with relevant owners of high-risk systems and services to identify and prioritize detection gaps.</li><li>Investigate anomalous or suspicious behavior in the environment as it is identified in the detection engineering process. </li></ul>BASIC QUALIFICATIONS: <ul><li>Bachelor's degree in computer science, engineering, or information security discipline and 5+ years of professional experience related to security researching, performing, or detecting attacker tactics, techniques, and procedures (TTPs); OR 7+ years of professional experience related to security researching, performing, or detecting TTPs in lieu of a degree</li><li>Experience with one or more of the following programming languages: Python, PowerShell, Go, C/C++, Rust</li></ul>PREFERRED SKILLS AND EXPERIENCE: <ul><li>Experience with operating system internals for Windows, Linux, and/or macOS</li><li>Vulnerability research and exploit development</li><li>Experience with offensive security frameworks and tooling</li><li>Malware analysis and memory forensics</li><li>Experience with modern Security Information and Event Management (<a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a>) systems</li><li>Knowledge of <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> infrastructure and security implications of hybrid environments</li></ul>ADDITIONAL REQUIREMENTS:<ul><li>Must be able to work extended hours and weekends as needed</li></ul>COMPENSATION AND BENEFITS: Pay Range:Security Engineer /Senior: $160,000.00 - $220,000.00/per yearYour actual level and base <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience.Base salary is just one part of your total rewards package at SpaceX. You may also be eligible for long-term incentives, in the form of company stock, stock options, or long-term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan. You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short &amp; long-term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation &amp; will be eligible for 10 or more paid holidays per year. Exempt employees are eligible for 5 days of sick leave per year.ITAR REQUIREMENTS:<ul><li>To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR <a href="https://www.pmddtc.state.gov/?id=ddtc_kb_article_page&amp;sys_id=24d528fddbfc930044f9ff621f961987" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>.  </li></ul>SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.Applicants wishing to view a copy of SpaceX’s Affirmative Action Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should notify the Human Resources Department at (310) 363-6000.

Sr. Security Engineer (Threat Detection)

WHAT IS BOX? 
Box is the market leader for Cloud Content Management. Our mission is to power how the world works together. Box is partnering with enterprise organizations to accelerate their digital transformation by creating a single platform for secure content management, collaboration and workflow. We have an amazing opportunity to further establish ourselves as leaders in the space, and we need strong advocates to help us achieve that goal. 
By joining Box, you will have the unique opportunity to help capture a majority of this developing market and define what content management looks like for the digital enterprise. Today, Box powers over 100,000 businesses, including 69% of the Fortune 500 who trust Box to manage their content in the <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a>. 
WHY BOX NEEDS YOU 
Box is looking for a leader who will own the secure application development and tooling on the Application Security Engineering team. This person will own design reviews, threat modeling, penetration testing, secure product feature enablement and security tools.
This leader must have strong technical, analytical and people leadership capabilities.
WHAT YOU'LL DO 
<ul>
<li>Drive technical excellence and implementation of secure engineering practices such as design and code reviews, threat modeling, penetration testing and security centric behavior-driven development.</li>
<li>Partner with software engineering and product management leaders to define and implement secure development practices and controls, which seamlessly integrate within their development processes and tools</li>
<li>Enhance API security posture, mergers and acquisitions evaluations, and open source security</li>
<li>Lead and develop a highly skilled team of security engineers to deliver measurable outcomes</li>
<li>Own SAST, SCA, DAST and other automated software security testing tools roadmap</li>
<li>Develop metrics and analysis that identifies the key performance drivers, strategies, and opportunities for enhancements</li>
<li>Elevate secure software development and discovery standards</li>
<li>Lead training on secure coding practices for software and security engineers</li>
<li>Define and own OKRs that support secure application development and tooling strategy</li>
</ul>
WHO YOU ARE 
<ul>
<li>You understand secure engineering best practices, can articulate problem statements and propose solutions to both technically savvy and non-technical audiences</li>
<li>You are a technical people leader who continuously uplifts the team’s skillset and takes on complex projects independently</li>
<li>You have experience pen testing complex web and mobile applications</li>
<li>You understand the various threat modeling and pen testing frameworks</li>
<li>You understand the various automated security testing types and tools</li>
<li>You have a growth mindset, push yourself towards excellence and focus on continuous functional improvements</li>
<li>You are a curious person who looks at problem statements and can clearly propose actionable solutions</li>
<li>You have a passion for cyber security demonstrated through participation/leadership in conferences, webinars, Capture the Flag (CTF), TryHackMe, Bug Bounty, Submission of CVEs and/or personal projects</li>
<li>You have a strong understanding of past, current, and emerging security exploits</li>
</ul>
Requirements
<ul>
<li>6+ years of experience with application security, software development, defining security architecture, and implementing software security solutions</li>
<li>5+ years of experience with triaging vulnerabilities, defining security controls and software penetration testing</li>
<li>At least 1 security certification (ex. CISSP, OSCP, GWEB, CEH, GRTP, GWEB)</li>
<li>Expertise in OWASP App/Mobile/API Top 10, Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), and Threat Modeling tools</li>
<li>Experience working with complex and diverse applications tech stacks</li>
<li>Understand how to detect and prioritize vulnerabilities in Front End, API's, Microservices, Mobile and Containers</li>
<li>Experience with multiple languages such as Java, React, Node JS, PHP, Scala, C and/or Python</li>
<li>Familiar with common build/automation tooling: ex. Jenkins, GIT</li>
</ul>
Head-over-heels about this role — but not sure you meet all the requirements? Apply anyway! Studies have shown that women and people of color are less likely to apply to jobs unless they meet every single qualification. At Box, we take a big-picture approach to hiring that fosters authenticity, diversity, and inclusion. If you're passionate about this opportunity, chances are, you shine pretty bright.
EQUAL OPPORTUNITY 
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability, and any other protected ground of discrimination under applicable human rights legislation. Box strives to respect the dignity and ‎‎independence of people with disabilities and is committed to giving them the same ‎‎opportunity to succeed as all other employees. Inclusiveness is core to our culture at Box, and we strive to ensure you get the most from your interview experience. Box makes reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please complete <a href="https://forms.gle/5W2F6Pe3PsZNsKYp9" rel="noopener noreferrer nofollow ugc" target="_blank">this form</a> Reasonable accommodations may include scheduling adjustments, document dictation and beyond.
Notice to applicants in Los Angeles: Box, Inc and its related branches will consider for employment, qualified applicants with criminal histories in a manner consistent with the Los Angeles Fair Chair Ordinance.  The Fair Chance Ordinance is provided <a href="https://bca.lacity.org/fair-chance" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>. 
Notice to applicants in San Francisco:  Box, Inc and its related branches will consider for employment, qualified applicants with criminal histories in a manner consistent with the San Francisco Fair Chair Ordinance.  The Fair Chance Ordinance is provided <a href="https://sfgov.org/olse/sites/default/files/FCO%20poster2020.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>. 
For details on how we protect your information when you apply, please see our <a href="https://cloud.app.box.com/v/BoxPersonnelPrivacyNotice" rel="noopener noreferrer nofollow ugc" target="_blank">Personnel Privacy Notice.</a> If you are a California-resident, please read our California Applicant &amp; Candidate Privacy Notice <a href="https://cloud.box.com/s/uf7c4w970ds5gpt1dufdk5bw49oym849" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>.





Box is committed to fair and equitable compensation practices. Actual base <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> (or OTE if commissionable role) is dependent upon factors such as: knowledge, skill level, experience, and work location. This role is also eligible for equity and benefits. For more information on benefits, check out our <a href="https://join.collectivehealth.com/box" rel="noopener noreferrer nofollow ugc" target="_blank">healthcare benefits</a> and additional <a href="https://cloud.box.com/s/3u38zhdv4gac9h0j7lmumm7arbe14yqa" rel="noopener noreferrer nofollow ugc" target="_blank">Box Benefits + Perks</a>.
 
In accordance with OFCCP compliance, here is the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Pay Transparency Provision</a>. 




United States Pay Range$215,000—$269,000 USD

Senior Team Manager, Application &amp; Product Security

Wisk Aero

At Wisk, we're transforming the future of urban mobility through safe, all-electric, autonomous flight. We are a passionate team working together toward a sustainable future, solving high-impact problems that have never been solved before. By delivering everyday flight for everyone, we're making it possible to spend less time getting there and more time being there. If you want to be part of shaping the future of mobility, then read on!We are looking for a Sr. IT Security Analyst to join our team. The goal of a Sr. IT Security Analyst at Wisk is to ensure Wisk’s systems are secure from cybersecurity threats. You will be part of the Information Technology team that provides IT services across the company.
<h3>Why we need you:</h3>
<ul>
<li>The successful candidate is an advocate for cyber security. They are at their best hunting and reviewing the landscape for potential security gaps, and then driving towards recommendations and solutions to minimize risk. They recognize that work can’t be done in a vault and will work closely with the engineers to find safe, secure solutions that enable them to do their best work. They also enjoy  reviewing alerts, triaging incidents and configuring security software. They also can think strategically and will help contribute to the Security roadmap. In this role, the candidate must be able to work well in a collaborative environment to find solutions. They are self-motivated in looking at the security needs of the company and are able to work in the details but also present to executive staff on our security posture. </li></ul>
<h3>What you will do:</h3>
<ul>
<li>As part of the IT organization, you act as a Sr. IT Security analyst and will be responsible for the overall security of Wisk’s Information Technology environment. </li><li>You will take part in the IT strategy, projects, and product security plans.</li><li>You will be responsible for reviewing security alerts, logs, incidents and triaging accordingly.</li><li>You will manage and deploy security software, including Cloud Security Solutions, Enterprise network security, <a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a>, EDR, and end-user training.</li><li>As an IT Security Analyst, you will help define policies around and enforce Security, Backups, and company IP</li><li>You will audit the systems for compliance against our policies and best practices and help drive compliance across the organization.</li><li>You will develop a monthly security metrics/scoreboard that will be presented to leadership and the team.</li><li>You will participate in the Product Security review meetings and help drive synergies between Product and IT solutions to support continued collaboration.</li><li>You will be responsible for remediating security issues in a timely manner.</li></ul>
<h3>What you have done:</h3>
<ul>
<li>BS in a Computer or Cyber Security related field or an MIS Degree, with 8+ years of experience or 5+ years with a Masters/PhD. Security accreditations such as CISSP or others will also be considered with equivalent years of experience.</li><li>You have previously worked in an IT environment, preferably as part of a Security Team, SOC, or with a focus on Security Controls.</li><li>You have hands-on experience deploying security appliances and software such as CASB, SIEM, SSO, MFA, CSPM, and Firewalls.</li><li>You have a strong and applied knowledge of triaging security alerts and prioritizing accordingly.</li><li>You have experience working with all major OSes (Mac, Windows, Linux)</li><li>You have experience with industry-standard compliance models (i.e., NIST, ISO 27000)</li></ul>
<h3>Desired:</h3>
<ul>
<li>You are familiar with Palo Alto Networks, Okta, Google Suite, AWS, GCP, Linux, Windows, Apple, Crowdstrike ,Cloud CSPM</li><li>Aerospace Industry experience is a plus</li></ul>
<h3>Who you are:</h3>
<ul>
<li>You are a highly motivated, self-starting individual with a broad set of skills and never afraid of facing complex technical challenges</li><li>You are a solution-oriented individual with a strong analytical mindset</li><li>You have strong communication skills and can easily tailor your communications to suit the audience</li><li>You can adapt quickly or propose changes needed to achieve early results in a timely fashion</li><li>You embrace challenges, take commitments, and deliver results within reasonable expectations</li><li>You are a positive team player</li></ul>We are located in Mountain View just a couple of hundred feet from Shoreline Lake and its surrounding walking/jogging trails. We offer a comprehensive benefits package including medical, dental, vision and life insurance, alternative work schedule (9/80), flexible time off, 11 company holidays, a 401(k) plan with 50% company matching vested immediately, commuter assistance, and education assistance. And on top of all that, we also offer a variety of perks such as free catered lunches, flight lessons, wellness allowances, snacks, drinks, fruit, employee referral bonus, charitable giving match, patent bonus program, happy hours and much more.Wisk Aero provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Wisk Aero abides by applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.Wisk Aero is an E-Verify employer.

Senior IT Security Analyst

Logicalis

As an Information Security, Risk and Governance Lead, you will have a solid understanding of security, auditing and privacy principles and a sound understanding of the regulatory environment affecting Logicalis and its customers. In this position, you will coordinate and own the ISM process for Logicalis' Managed Operations. You will possess a strong ability to influence and establish close relationships with key business stakeholders across the organisation. You will be the subject matter expert in Privacy and Information Security and be responsible for the governance framework that reports on the effectiveness of processes and controls compliance. You will<ul> <li>Have a broad range of security experience, with distinct experience in at least one of these areas; cyber strategy, security target operating models, privacy, security standards (such as ISO 27001, NIST CSF and ISM).</li> <li>Proven experience working across business units, understanding current threats and information security risks, vulnerability management and developing sustainable governance processes. </li> </ul>Requirements<ul> <li> Previous experience as an Information Security Officer in a managed service environment </li> <li>Experience working across business units, understanding current threats and information security risks, vulnerability management and developing sustainable governance processes. </li> <li>ISO 27001 Lead Implementer certification (Must have)</li> <li>ISO 27001 Lead Auditor certification (Preferred) </li> </ul>AccountabilitiesDAILY <ul> <li>Monitor new threats as they evolve and adjust risk management plans and security controls as necessary. </li> <li>Review Logicalis internal security compliance reporting and address any gaps in policy, systems, or procedures. </li> <li>(As required) Supervise the conduct of incident response workshops and assist with incident response to security incidents. </li> </ul>WEEKLY <ul> <li>Provide delivery teams security guidance to ensure projects and applications are designed and implemented in line with security policy and best practices.</li> <li>Lead the design, implementation, operation, and maintenance of the information security management system throughout the organisation. </li> </ul>MONTHLY <ul> <li>Maintain compliance compliance-ready state for Logicalis’ certifications (e.g., ISO 27001, 9000, 2000, Azure Expert MSP) </li> <li>Review changing requirements and implement delta changes to maintain compliance. </li> <li>Conduct vulnerability assessments to validate compliance with security policy. </li> <li>Review and evaluate security controls and practices for introduction into the organisation to reduce risk. </li> </ul>QUARTERLY <ul> <li>Review, maintain, and disseminate security policies in line with the Logicalis’ risk appetite, security strategy, relevant laws and security standards, and best practice. </li> <li>Initiates, facilitates, and promotes security awareness activities across the organisation. </li> </ul>ANNUALLY <ul> <li>Manages Logicalis’ business continuity capability and conducts workshops and tests to validate its effectiveness. </li> <li>Implement and maintain a systematic and structured process for the identification and management of security risks. </li> <li>ISO 27001 annual audit </li> </ul>BenefitsAs a valued member of ‘Logicalis Australia’ you will enjoy several benefits, such as;<ul> <li>Supportive team environment: Confidential pulse checks tell us we are known for being "Unselfish with knowledge", "Flexible and Diverse" and "Give a shout-out and there will always be help"</li> <li>Pick your own adventure: Our people have moved from Help-desk to Cloud-Engineering. Admin to Project/Program Management. Project Management to Product Development. If something interests you, we’ll fund you to learn it, so you can become it!</li> <li>Breadth of experience and purpose: People here can have an idea, make a plan, and see it through. Our people enjoy genuinely impacting change and controlling their professional success.</li> <li>Flexible, modern, working arrangements: Flexible model that allows for productive remote working and in person collaboration. #LI-Hybrid</li> </ul>*Do I need to meet all the requirements to apply?*No. Studies by several different sources have shown that, on average, men will apply for a job if they meet 60% of the requirements. In contrast, women, non-binary, and neurodivergent people aim for closer to 90%! Please don’t let us miss out on everything you have to offer just because there is some upskilling to do. We can teach the specifics of the job. What we can’t teach is Character – ie Confidence, Capability, CuriosityAbout usWe are Logicalis, Architects of Change™. We assist organizations in succeeding in a digital-first world by harnessing our collective technology expertise. Our lifecycle services, including <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a>, connectivity, collaboration, and security, optimize operations, reduce risk, and empower employees. As a global tech service provider, we also deliver managed services to provide real-time visibility and insights across clients' digital ecosystems. With 7000+ employees in 27 countries, we help 10,000+ clients globally create sustainable outcomes through technology.For people living with disabilities, chronic illnesses, or neurodiversity; adjustments and support will be made available to create a more comfortably aligned application process. If you need any specific accommodations (tools, time, etc.), and feel comfortable disclosing this, please let us know and we’ll be glad to facilitate.

Information Security, Risk and Governance Lead

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.
SECURITY ENGINEER II
SpaceX is hiring a security engineer to join the security engineering team to help protect and drive the SpaceX mission. Our engineers are responsible for building innovative security solutions to protect against threats to our rockets, spacecraft, and our global satellite internet constellation, Starlink.  As a highly visible and dynamic organization, we must value and guard against damage to our internal information, our physical hardware, and our reputation and brand. Finally, it is paramount that we defend against loss of control or confidence in our systems, to guarantee the highest probability of success.
As a Security Engineer, you will focus on the "behind the scenes" technologies that ensure our networks and systems are up to industry and SpaceX standards. You will be responsible for providing high-criticality and high-risk services, with the confidentiality, integrity, and availability of those services in mind. This role will partner with various application development and customer groups across SpaceX to ensure that the technologies and systems we build in-house or purchase and deploy in-house are designed and maintained in a secure way that minimizes risk.
RESPONSIBILITIES:
Design, build, and maintain technology solutions and systems that provide security for SpaceX systems, networks, and data. This can include:
<ul>
<li>Authentication and identity services, including multi-factor solutions, network access control identity servers, and related authentication and authorization technologies.</li>
<li>Identity lifecycle management services and automation. Build and maintain scripts and automation that support the information security mission across SpaceX, to be utilized by information security teammates and other partner organizations.</li>
<li>Network security systems and the backend infrastructure that powers such services.</li>
<li>Application level security controls (e.g. web application firewalls).</li>
<li>Cloud deployments security policy enforcement, centralized configuration management, monitoring, etc.</li>
<li>Serve as the subject matter expert (SME) for those solutions, maintaining documentation on them and advising others on their underlying technologies and operation.</li>
<li>Work with security and IT teams to identify threats and problem areas, using that feedback to further strengthen tools and technologies. Materialize this as improvements which result in stronger and safer software and application deployments across SpaceX, measuring in decreased risk and prevalence of issues.</li>
<li>Create solutions that are scalable, repeatable, maintainable, and secure.</li>
<li>Work collaboratively with other teams, including individuals in information security, physical security, information technology, human resources, legal, software, and others.</li>
</ul>
BASIC QUALIFICATIONS:
<ul>
<li>2+ years of professional development experience with any modern programming language (including but not limited to Python, C++, Rust, Go) in lieu of a degree; OR a bachelor’s degree in security engineering, cyber security, computer science, engineering, math, or other STEM discipline</li>
<li>Experience developing security architectures and primitives (i.e. TLS, Zero-Trust)</li>
</ul>
PREFERRED SKILLS AND EXPERIENCE:
<ul>
<li>4+ years of development experience with any modern programming language (including but not limited to Python, C++, Rust, Go)</li>
<li>Master's degree and/or Doctor of Philosophy in security engineering, cyber security, computer science, engineering, math, or STEM discipline</li>
<li>Experience building automation between tools and systems</li>
<li>Experience performing analytics against aggregated log data, and building configurations to parse and handle log data from systems and tools</li>
<li>Familiarity with enterprise security controls and security best practices for Windows, Linux, and Mac systems</li>
<li>Familiarity with <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> security services, concepts, and best practices</li>
<li>Strong familiarity with software development lifecycle (SDLC) processes and source control technologies</li>
<li>Track record of getting things done quickly and with quality</li>
<li>Demonstrated ability to operate in a dynamic, evolving environment</li>
<li>Ethical character and uncompromised integrity</li>
</ul>
ADDITIONAL REQUIREMENTS:
<ul>
<li>Willingness to work extended hours and weekends as needed</li>
</ul>
COMPENSATION AND BENEFITS: 
Pay Range:
Security Engineer /Level II: $140,000.00 - $170,000.00/per year
Your actual level and base <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience.
Base salary is just one part of your total rewards package at SpaceX. You may also be eligible for long-term incentives, in the form of company stock, stock options, or long-term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan. You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short &amp; long-term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation &amp; will be eligible for 10 or more paid holidays per year. Exempt employees are eligible for 5 days of sick leave per year.
ITAR REQUIREMENTS:
<ul>
<li>To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR <a href="https://www.pmddtc.state.gov/?id=ddtc_kb_article_page&amp;sys_id=24d528fddbfc930044f9ff621f961987" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>.  </li>
</ul>
SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.
Applicants wishing to view a copy of SpaceX’s Affirmative Action Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should notify the Human Resources Department at (310) 363-6000.

Security Engineer II

Snowflake Inc.

Build the future of data. Join the Snowflake team.
Data is the linchpin that every security team relies on to protect their company. Antiquated services, tools, and solutions force these teams to make the unfortunate tradeoff of significantly higher costs to maintain strong security protections due to retention of data or significantly lower costs with a reduced security profile as they delete  data. With Snowflake CISO’s and security teams no longer need to make this tradeoff.  Snowflake’s Data Cloud enables them to unify their logs and enterprise data while cost-effectively storing near-unlimited amounts of crucial, frequently accessed data for years. With your data in Snowflake you can leverage the best in class ecosystem of security solutions for threat detection, response and compliance teams that all work from a single source of truth. 

With Snowflakes platform and the incredible ecosystem of Cybersecurity applications built to run on Snowflake we see a chance to transform the industry. We are looking for an experienced Product Leader to drive the growth of Snowflakes Cybersecurity workload. The person responsible for the Cybersecurity workload will work across the company and industry and build a significant market and business. 
In this role, you will be responsible for driving the vision for the <a href="https://www.snowflake.com/en/data-&lt;a href=" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a>/workloads/cybersecurity/"&gt;next generation cybersecurity stack on Snowflake, and helping CISO’s and security teams better protect their companies by making use of Snowflake and its partner ecosystem.  This will involve:


<ul>
<li>Working with the world’s best security teams to understand their needs, and help solve their problems</li>
<li>Build relationships with the top security software companies, both established and startups, and find ways for Snowflake’s platform and cloud to accelerate their products and growth</li>
<li>Expanding and driving Snowflake’s  vision for the entire cybersecurity technology industry with Snowflake as a core component</li>
<li>Defining the overall product strategy for Snowflake for security teams, including platform features and cybersecurity-specific capabilities that Snowflake will need to build, as well as the right roles for partners to fill.  You’ll also work closely with our engineering teams to deliver on those features and capabilities.</li>
<li>Evangelize that vision, getting partners and customers bought in, and ultimately drive cybersecurity use cases as one of the core workloads at Snowflake</li>
</ul>

<h3>THE IDEAL CANDIDATE:</h3>
<ul>
<li>Strategic understanding of the cybersecurity landscape</li>
<li>Technical understanding of the different technologies and their strengths and weaknesses</li>
<li>Strong empathy for CISO, their security teams, and their business goals and constraints</li>
<li>Demonstrated ability to define, articulate, and drive a vision for adapting a market to a new technology</li>
<li>Experience building, shipping, and scaling successful products, ideally targeted at security teams</li>
</ul>

This is a unique and highly impactful role.  The best candidates will have spent time as product managers in cybersecurity companies, or as leaders within cybersecurity organizations building next-generation cybersecurity stacks, or even as founders or CEOs of cybersecurity companies.

Principal Product Manager - Head of Cybersecurity Workload

NRB Group

Who are we?
Trasys International is a dynamic global organization that takes pride in being the trusted partner of EU Institutions. With strong commitment to excellence and a 30-years track record of delivering high-quality solutions, we are dedicated to supporting the growth and success of our clients. Our Mission is to help our clients keep up with the challenges of digital transformation by providing the right talent at the right time for the right job. To this end, we are constantly looking for talented professionals who are interested in working on challenging international projects and able to deliver high-quality results within multicultural environments. Our services include (but are not limited to) modernization of solutions, digital workspaces, <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> technologies and IT security. Our Headquarters are in Brussels and we have active accounts and offices across Europe (i.e. Luxembourg, Amsterdam, Athens, Stockholm, Geneva).

Is this YOU?
For one of our main clients based in Luxembourg - an European Institution, we are looking for a Senior Network Security Engineer/Administrator with expertise in F5 and Fortigate to join our team in the area of financial supervision, fraud prevention and crime investigation. You will be be part of the IT, Security and Corporate Services Unit and will work in the CMS Support Sector. The CMS Support Sector is responsible for the setup, maintenance and daily operational support of client's backend infrastructure and Systems. You will play a crucial role in supporting the successful investigation, prosecution and bringing to judgment crimes against the financial interests of the EU. 

The position is hybrid with 50% of the time based onsite in Luxembourg, 50% based offsite anywhere within the European Union.
More specifically, you will be responsible for...<ul><li>Provision of expert advice and assistance, technology watch, architectural considerations, risk analysis, gap analysis, applicable standards, solution patterns and best practices respectively in one of the following areas: the Network, Network and Security or Unified communications areas;</li><li>Elaboration of design documentation, with consultation with stakeholders</li><li>Elaboration of vision documents focused upon IT components</li><li>Deliver the design, installation and configuration of these technologies</li><li>Operate client's IT services according to agreed service levels, ITSM best practices, internal policies and procedures</li><li>Provide 2nd and 3rd level of technical support, register and troubleshoot incidents and escalating to external parties</li><li>Creation and testing of standard operational procedures – backups, restore, monitoring etc. </li></ul>
<h3>Requirements</h3>
Are you the perfect match? 
<ul><li>Minimum 5 years of experience in network and network security; </li><li>University degree (BSc/MSc);</li><li>Proven hands-on experience with FortiGate firewall;</li><li> Proven hands-on experience with F5 BigIP load balancers;</li><li>Experience in designing security for enterprise and datacentre networks: Firewalls, load balancers, web application firewalls, IDS, IPS;</li><li>In-depth knowledge and proven hands-on expertise in network security administration (configuration, deployment);</li><li>Maintaining and monitoring networks security devices, with knowledge of standard monitoring and management tools;</li><li>Proven experience with the setup of a WAF, IDS, IPS is an asset;</li><li>Previous experience with network security automation is an asset.</li></ul>

Network Security Engineer [F5 and Fortigate] - Luxembourg

Amazon.com

Amazon is seeking qualified Application Security (AppSec) Engineers to join our innovative, high energy Amazon Payments India Security team and work within the Consumer Stores Security organization. Amazon Payments processes millions of transactions every day across numerous countries and payment methods. Paramount to our success is ensuring that our customer data is secure.As an application security engineer within India Payments Security, you will partner with engineering teams in a consulting facility throughout the Software Development Life Cycle (SDLC), to ensure that applications are designed and built securely. You will identify potential vulnerabilities in the applications and enable developers to understand and remediate such identified vulnerabilities.Key job responsibilities- Develop a broad and deep technical understanding of products, services and architectures pertaining to the India Payments organization.- Leverage this understanding to conduct architecture reviews, threat modelling and manual code reviews on web applications, mobile applications and other relevant services.- Interpret security tools and penetration testing results to stakeholders, providing advice on vulnerability remediation and risk mitigation.- Create relevant documentation and metrics to your stakeholders and business leaders and deliver these in a clear, concise manner.- Research and maintain proficiency in attacker Tools, Techniques, Procedures and other security topics.- Propose and develop training materials to help raise the security bar across the India Payments Security organization.- Develop innovative and scalable tools, solutions, and processes to enhance the India Payments Security’s operations.We are open to hiring candidates to work out of one of the following locations:Bengaluru, KA, IND<h3>Basic Qualifications</h3>- BS in Computer Science, Information Security, or equivalent professional experience.- 5+ years of demonstrated experience in areas such as application security, offensive security and/or systems security.- Understanding of threat modeling, security vulnerabilities, attacker exploit techniques, and methods for their remediation.- Understanding of best practices in security engineering, including secure development, cryptography, systems security and/or policy.- Excellent written and verbal communication skills with the ability to adapt messaging to executive, technical, and non-technical audiences.- Ability to drive multiple technically complex security reviews together while remaining effective at providing security guidance to stakeholders.- Ability to work with a high degree of autonomy.- Scripting skills (E.g: Python, Perl, Bash, Ruby, PowerShell, etc.)<h3>Preferred Qualifications</h3>- 5+ years of experience in Secure SDLC.- Experienced with reviewing and mitigating critical web application risks as defined by OWASP Top 10/SANS 25.- Experienced with AWS services and security concepts.- Programming experience in Python and/or Java.- Relevant industry certifications from SANS, ISC2, etc.

Application Security Engineer, India Payments Security

Kueski

About KueskiFounded in 2012 with the mission to improve the financial lives of people in Mexico, Kueski has grown to be one of the largest buy now, pay later (BNPL) and online consumer lending companies in Latin America. Kueski provides financial services to consumers and connects the Mexican economy through its innovative product ecosystem. This ecosystem consists of Kueski Pay, the company's BNPL product available online and in-store, and Kueski Personal Loans, a direct to consumer loan product.The company is frequently recognized for its strong, diverse and inclusive company culture. In 2022, Kueski has been named one of the most ethical companies in Mexico by AMITAI, and one of the best companies for both young professionals and female talent in Mexico by EFY. The company has also been named to CB Insights’ Fintech 250 list. PurposeThe Security Incident Associate is part of the Information Security team and is responsible for ensuring that all security incidents are handled appropriately and in a timely fashion, in accordance with the existing process and guidelines. The Security Incident Associate is also responsible for ensuring the correct performance and relationship with the SOC/<a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a> provider, to ensure they are operating optimally, but also improving their searches as well as building the adequate threat intelligence and threat hunting.
<h3>Key Responsabilities</h3>
<ul>
<li>Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation</li><li>Perform cyber defense incident triage, to include determining scope, urgency, and potential impact, identifying the specific vulnerability, and making recommendations that enable expeditious remediation</li><li>Perform real-time cyber defense incident handling (e.g., forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation) tasks to support deployable <a href="https://infosec-jobs.com/insights/incident-response-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">Incident Response</a> Teams (IRTs)</li><li>Collect intrusion artifacts (e.g., source code, malware, Trojans) and use discovered data to enable mitigation of potential cyber defense incidents within the enterprise</li><li>Ensure that cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level</li><li>Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack</li><li>Use cyber defense tools for continual monitoring and analysis of system activity to identify malicious activity</li><li>Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings)</li><li>Assist in the construction of signatures which can be implemented on cyber defense network tools in response to new or observed threats within the network environment or enclave</li><li>Provides cybersecurity recommendations based on significant threats and vulnerabilities</li><li>Work with stakeholders to resolve computer security incidents and vulnerability compliance</li><li>Identify threat tactics, and methodologies</li><li>Provide timely notice of imminent or hostile intentions or activities which may impact organization objectives, resources, or capabilities.</li></ul>
<h3>Position Requierements</h3>
<ul>
<li>+2 years of relevant experience in incident handling, preferably as part of a SOC (Security Operations Center)</li><li>Experience handling sensitive information</li><li>Experience with SIEM and correlation of events</li><li>Advanced English level </li><li>Preferably knowledge of YARA rules and YAML</li><li>Knowledge of incident response and handling methodologies</li><li>Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions</li><li>Knowledge of cyber defense and vulnerability assessment tools and their capabilities</li><li>Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins)</li><li>Knowledge of network traffic analysis methods</li><li>Knowledge of Insider Threat investigations, reporting, investigative tools, and laws/regulations</li><li>Knowledge of adversarial tactics, techniques, and procedures</li></ul>
<h3>You’ll love working at Kueski because</h3>
<ul>
<li>We have a mission-driven culture focused on customer value, teamwork, humility,  and integrity. </li><li>Everyone is expected to have role clarity, career growth, and a personal development plan. Feedback and recognition  is embedded in our company processes, systems, and practices. </li><li>We ensure competitive <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a>, medical insurance, and wellbeing through ample and flexible time off as well as mental healthcare benefits. Everyone is an owner and eligible for competitive stock options with a company poised for success. </li><li>We´re committed to building an inclusive and diverse team and we know this leads to incredible work.</li></ul>Kueski: Where talent excellence improves Mexican lives#LifeAtKueski #KueskiTalent

Security Incident Associate

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.
SR. SECURITY SOFTWARE ENGINEER 
At SpaceX we’re leveraging our experience in building rockets and spacecraft to deploy Starlink, the world’s most advanced broadband internet system. Starlink is the world’s largest satellite constellation and is providing fast, reliable internet to 1M+ users worldwide. We design, build, test, and operate all parts of the system – thousands of satellites, consumer receivers that allow users to connect within minutes of unboxing, and the software that brings it all together. We’ve only begun to scratch the surface of Starlink’s potential global impact and are looking for best-in-class engineers to help maximize Starlink’s utility for communities and businesses around the globe.
As a Security Software Engineer you will influence the security of software across our product lines. We are looking for people with a track record of shipping reliable software and who have a broad understanding of the security design of today’s Internet, including the cryptographic primitives involved. You see the big picture, prioritize accordingly, and are comfortable with working at different levels of abstraction. Ideally, you have notable skills in one or more of the following:
<ul>
<li>Software engineering</li>
<li>Applied cryptography</li>
<li>Network security</li>
<li>Operating system security</li>
<li>Secure/Authenticated boot</li>
<li>Incident response and adversary detection</li>
<li>Vulnerability research</li>
</ul>
Being flexible, communicating clearly, and establishing and maintaining productive working relationships with other engineering teams are paramount to success. If you are passionate about building quality products, love the challenges of outsmarting adversaries, and want to make an impact on an inter-planetary scale, then you will fit right in.
RESPONSIBILITIES:
<ul>
<li>Design and build security infrastructure for Starlink, including cryptographic services and other security-critical services</li>
<li>Develop security features for Starlink systems, including our router, dish, gateways, and satellites</li>
<li>Design security into factory processes and provide network services in support of this</li>
<li>Maintain existing production systems and improve security posture via both direct implementation and recommendations to other teams</li>
<li>Build prototypes and help identify, design, and test security improvements</li>
<li>Further our mission of providing secure and reliable Internet to underserved communities</li>
</ul>
BASIC QUALIFICATIONS:
<ul>
<li>Bachelor's degree in computer science or another STEM discipline and 5+ years of professional experience in security software development; OR 7+ years of professional experience in security software development in lieu of a degree</li>
<li>Experience with one or more software development languages (i.e. Python, C++, Golang)</li>
<li>Experience designing and implementing security solutions for operating systems, distributed systems, or other enterprise/large-scale infrastructure</li>
</ul>
PREFERRED SKILLS AND EXPERIENCE:
<ul>
<li>Experience contributing security improvements to complex systems</li>
<li>Experience working with special purpose security hardware such as Trusted Platform Modules (TPMs) and Hardware Security Modules (HSMs)</li>
<li>Fundamental understanding of network protocols; including the TCP/IP stack as well as UDP based protocols</li>
<li>Experienced in navigating large, complex, interactive systems</li>
<li>Flexibility, communicating clearly, and establishing and maintaining productive working relationships with other engineering teams</li>
<li>Excellent communication skills, both written and verbal</li>
<li>Ability to work both independently and in a team</li>
<li>Demonstrated ability to deal with ambiguity and to learn new technologies quickly</li>
<li>Advanced degree in a technical or engineering discipline</li>
</ul>
ADDITIONAL REQUIREMENTS:
<ul>
<li>Must be willing to work extended hours and weekends as needed</li>
</ul>
COMPENSATION AND BENEFITS: 
Pay Range:
Security Software Engineer /Senior: $160,000.00 - $230,000.00/per year
Your actual level and base <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience.
Base salary is just one part of your total rewards package at SpaceX. You may also be eligible for long-term incentives, in the form of company stock, stock options, or long-term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan. You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short &amp; long-term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation &amp; will be eligible for 10 or more paid holidays per year. Exempt employees are eligible for 5 days of sick leave per year.
ITAR REQUIREMENTS:
<ul>
<li>To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR <a href="https://www.pmddtc.state.gov/?id=ddtc_kb_article_page&amp;sys_id=24d528fddbfc930044f9ff621f961987" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>.  </li>
</ul>
SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.
Applicants wishing to view a copy of SpaceX’s Affirmative Action Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should notify the Human Resources Department at (310) 363-6000.

Sr. Security Software Engineer

<a href="https://www.wpp.com/about" rel="noopener noreferrer nofollow ugc" target="_blank">WPP</a> is the creative transformation company. We use the power of creativity to build better futures for our people, planet, clients, and communities.
Working at WPP means being part of a global network of more than 109,000 accomplished people in 110 countries. WPP has headquarters in New York, London and Singapore and a corporate presence in major markets worldwide.
We create transformative ideas and outcomes for our clients through an integrated offer of communications, experience, commerce, and technology.
WPP and our award-winning agencies work with most of the world's biggest companies and organisations – from Ford, Unilever and P&amp;G to Google, HSBC, and the UN. Our clients include 61 of the FTSE 100, 317 of the Fortune Global 500, all 30 of the Dow Jones 30 and 62 of the NASDAQ 100. WPP are the leader in the Bloomberg Gender Equality Index and 8th in the FTSE 100 rankings for Women on Boards.Why we're hiring:
The role of the Vulnerability Remediation Team Lead is to manage and support the Vulnerability Remediation team resolve outstanding vulnerabilities as directed by the Senior Security Testing Engineer and the broader Cyber Security management team.
What you'll be doing:
<ul>
<li>
<ul>
<li>Lead the Remediation of vulnerabilities using a variety of tools across a diverse infrastructure.</li>
<li>Manage the prioritisation of those vulnerabilities through a risk-based approach.</li>
<li>Lead the Triage and prioritization of vulnerabilities, implement mitigating measures, and support in the life cycle of vulnerability management, providing standardised advice on ways to improve control mechanisms and mitigate risk.</li>
<li>Collaborate with stakeholders to manage vulnerabilities and undertake remediation activities.</li>
<li>Communicate common mitigation strategies such as patching and basic configuration change (system hardening).</li>
<li>Understand how local protective security measures can be applied to reduce vulnerability exposure.</li>
</ul>
</li>
</ul>
What you'll need:
Qualification Requirements (Desirable)
Hands on experience of :
<ul>
<li>Patching using enterprise tooling and manually</li>
<li>Vulnerability management, tools, techniques and methodologies;</li>
<li>Change Management</li>
<li>Legal and regulatory considerations</li>
</ul>
Skills / Experience Requirements
<ul>
<li>Experience of working in a global organisation.</li>
<li>Providing high quality deliverables.</li>
<li>Collaborative working with suppliers, partners and end-users.</li>
</ul>
Person:
<ul>
<li>Experience in moving a dynamic environment to a business-as-usual one.</li>
<li>Able to influence and negotiate at broad levels.</li>
<li>Ability to build and maintain positive business relationships.</li>
<li>A confident, credible and influential communicator with internal and external stakeholders.</li>
<li>Able to maintain sight of the mission.</li>
<li>Ability to identify and escalate critical issues with ease.</li>
<li>The ability to lead, inspire and influence others.</li>
<li>Flawless integrity.</li>
</ul>
Who you are:
You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are accepting: of new ideas, new partnerships, new ways of working.
You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.
You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.

What we'll give you:
Passionate, inspired people – We promote a culture of people that do extraordinary work.
Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.
Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?WPP is an equal opportunity employer and considers applicants for all positions without regard to race, color, religion or belief, sex, age, national origin, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability. We believe in creating a dynamic work environment that values diversity and inclusion and strives to recruit a diverse slate of candidates to help us achieve that goal.
Please read our <a href="https://www.wpp.com/careers/wpp-privacy-policy-for-recruitment" rel="noopener noreferrer nofollow ugc" target="_blank">Privacy Notice</a> for more information on how we process the information you provide.

Cyber Security, Vulnerability Remediation Team Lead

Come build the future with us! In Payments Security, we protect foundational systems and products that allow Amazon to accept payments for all goods, content and services that people buy at Amazon and around the world. We are looking for a high caliber, innovative Security Engineer to lead Security for Amazon Payments’ most critical businesses protecting mission-critical services and customer experiences. You will focus on securing the ecosystem in Amazon Payments that processes millions of transactions every day across dozens of countries and payment methods. Over 100 million customers and merchants send tens of billions of dollars through our systems annually. We are re-inventing the vision of our platform to provide our internal and external clients the best payment gateway service.Payments Security owns full-stack Product Security for Payments across Amazon and its business units, deeply supporting the Global Payments businesses. We are part of Amazon's broader Stores Security organization responsible for protecting Amazon’s global information assets. We partner across global Payments business units to innovate in full-stack security (data, application, network, containers, infrastructure), ensuring our Payments applications and infrastructure are secure-by-design from concept to launch and into continuous operations. We are a strategic security partner to our Payments businesses ensuring we uphold the highest security bar for our production and pre-production systems, balancing short-term mitigations with long-term secure-by-design architectural solutions, making Security simpler and differentiated.We provide security “In the Cloud” and enable scalable mechanisms for software developers and systems to meet Amazon’s security and privacy requirements. We are both a customer and a partner to AWS in raising security awareness, providing scalable tools, and protecting shared infrastructure.This position will provide you with a challenging and rewarding opportunity to solve difficult security problems at planetary scale. As a security engineer you will help ensure that customer data is secure across Amazon Payments products and services. You will help define short-term and long-term security strategy. You will balance your efforts between strategic and operational deliverables. You will have the opportunity to work with talented security and other engineering teams within Amazon. You care deeply about keeping Amazon customers data secure and therefore are passionate about finding, and mitigating vulnerabilities/risks by providing actionable guidance to product teams and drive long term security improvements. You're well-known for your excellent prioritization skills as well as your ability to communicate at all levels of an organization (technical and non-technical). The successful candidate must be autonomous, comfortable operating in highly ambiguous situations, and must deliver results in a fast-paced environment.A Security Engineer in Amazon will be strong in multiple security domains and sought out for advice on technical issues. Efficient time management skills are required along with the ability to deliver results in the face of uncertainty. Engineers in this role must show exemplary judgment in making technical trade-offs between short versus long term security and business goals. They must also demonstrate resilience and navigate difficult situations with composure and tact. The successful candidate must be one that can handle several difficult challenges and problems, can make risk-based assessments founded on data and facts.Key job responsibilities- Perform security reviews including secure design and architecture, threat modeling, secure code reviews, security testing, and security certifications- Identify security gaps in applications, services, or products both internally developed and third party solutions- Determine findings criticality taking into account the relevant business, technical, and threat environment, and provide actionable long-term and short-term risk mitigation recommendations taking into account the business context.- Communicate findings to relevant stakeholders through a combination of verbal or written reports. Identify owners, and drive mitigation of findings within established SLAs- Produce reports that describe the work performed for technical and non-technical audiences, and record findings and supporting evidence following established policies and procedures. Create relevant documentation, security guidance, and metrics to report to your stakeholders and business leaders, and deliver these in a clear, concise manner- Design, develop, deploy, and maintain security automation, secure-by-default solutions, and other solutions that will enable security engineering scaling while raising the security bar.- Develop a broad and deep technical understanding of the services and architectures pertaining to Amazon Payments. Contribute to the short and long-term security strategy to ensure that products are designed and built securely by design while improving the secure software development life-cycle (SSDLC).- Lead new, reocurring, or ah-hoc security initiatives with end-to-end ownership. Participate in security escalations support including on-call rotation.- Support for mentoring, team building, recruiting and onboarding activities.- Must be a kind human who enjoys working in a fun teamWe are open to hiring candidates to work out of one of the following locations:Austin, TX, USA<h3>Basic Qualifications</h3>- BS in Computer Science, Information Security, or equivalent professional experience- 4+ years of experience in application security, product security, or systems security- 3+ years of experience in penetration testing, offensive security, or red teaming • Deep technical understanding of OWASP Top 10, and SANS 25 vulnerability identification and remediation and 3+ years of experience securing <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> services such as AWS, Azure, and Google Cloud- 1+ years writing production-level code in at least one scripting or compiled language such as Java, Python, JavaScript, Go, Ruby, C# or C/C++- Proven experience in threat modeling, code reviews, security testing, vulnerability detection, attacker exploit techniques, and methods for their remediation.<h3>Preferred Qualifications</h3>- Master’s degree in Computer Science, Information Security, Computer Engineering, Electrical Engineering or equivalent- Relevant industry certifications from SANS, GIAC, CISSP, OSCP, etc.- 3+ years of software development experience with at least one programing language such as Java, Python, JavaScript, Go, Ruby, C# or C/C++- Experience driving multiple technically complex security initiatives while remaining effective at providing security guidance to stakeholders- ABOUT AmSec:- Diverse Experiences: Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.- Why Amazon Security: At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.- Work/Life Balance: We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.- Inclusive Team Culture: In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.- Training and Career growth: We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.- EEO - Amazon is committed to a diverse and inclusive workplace to deliver the best results for our customers. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status; we celebrate the diverse ways we work. For individuals with disabilities who would like to request an accommodation, please let us know and we will connect you to our accommodation team. You may also reach them directly by visiting please https://www.amazon.jobs/en/disability/us.- Training and Career growth: We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.

Security Engineer, Stores Payments Security

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.
PRINCIPAL SECURITY ENGINEER
SpaceX is hiring a principal security engineer to help protect and drive the SpaceX mission. Our engineers are responsible for building innovative security solutions to protect against threats to our rockets, spacecraft, and our global satellite internet constellation, Starlink.  As a highly visible and dynamic organization, we must value and guard against damage to our internal information, our physical hardware, and our reputation and brand. It is paramount that we defend against loss of control or confidence in our systems, to guarantee the highest probability of success.
As a Principal Security Engineer, you will focus on the "behind the scenes" technologies that ensure our networks and systems are up to industry and SpaceX standards. You will be responsible for providing high-criticality and high-risk services, with the confidentiality, integrity, and availability of those services in mind. This role will partner with various application development and customer groups across SpaceX to ensure that the technologies and systems we build in-house or purchase and deploy in-house are designed and maintained in a secure way that minimizes risk.
RESPONSIBILITIES: 
<ul>
<li>Design, build, and maintain technology solutions and systems that provide security for SpaceX systems, networks, and data. This can include:
<ul>
<li>Authentication and identity services, including multi-factor solutions, network access control identity servers, and related authentication and authorization technologies.</li>
<li>Identity lifecycle management services and automation. Build and maintain scripts and automation that support the information security mission across SpaceX, to be utilized by information security teammates and other partner organizations.</li>
<li>Network security systems and the backend infrastructure that powers such services.</li>
<li>Application level security controls (e.g. web application firewalls).</li>
<li>Cloud deployments security policy enforcement, centralized configuration management, monitoring, etc.</li>
<li>Serve as the subject matter expert (SME) for those solutions, maintaining documentation on them and advising others on their underlying technologies and operation.</li>
<li>Work with security and IT teams to identify threats and problem areas, using that feedback to further strengthen tools and technologies. Materialize this as improvements which result in stronger and safer software and application deployments across SpaceX, measuring in decreased risk and prevalence of issues.</li>
<li>Create solutions that are scalable, repeatable, maintainable, and secure.</li>
<li>Work collaboratively with other teams, including individuals in information security, physical security, information technology, human resources, legal, software, and others.</li>
</ul>
</li>
</ul>
BASIC QUALIFICATIONS:
<ul>
<li>8+ years of professional experience in security engineering with a bachelor's degree in security engineering, cyber security, computer science, engineering, math, or other STEM discipline; OR 10+ years of professional experience in security engineering in lieu of a degree</li>
<li>Development experience in any modern programming language (including but not limited to Python, C++, Rust, Go)</li>
<li>Experience developing security architectures and primitives (i.e. TLS, Zero-Trust)</li>
</ul>
PREFERRED SKILLS AND EXPERIENCE:
<ul>
<li>Experience building automation between tools and systems</li>
<li>Experience performing analytics against aggregated log data, and building configurations to parse and handle log data from systems and tools</li>
<li>Familiarity with enterprise security controls and security best practices for Windows, Linux, and Mac systems</li>
<li>Familiarity with <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> security services, concepts, and best practices</li>
<li>Strong familiarity with software development lifecycle (SDLC) processes and source control technologies</li>
<li>Track record of getting things done quickly and with quality</li>
<li>Demonstrated ability to operate in a dynamic, evolving environment</li>
<li>Ethical character and uncompromised integrity</li>
</ul>
ADDITIONAL REQUIREMENTS:
<ul>
<li>Willingness to work extended hours and weekends as needed</li>
</ul>
COMPENSATION AND BENEFITS:
Pay range:          
Principal Security Engineer/Principal: $200,000.00 - $270,000.00/per year            
Your actual level and base <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience.
Base salary is just one part of your total rewards package at SpaceX. You may also be eligible for long-term incentives, in the form of company stock, stock options, or long-term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan. You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short and long-term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation and will be eligible for 10 or more paid holidays per year. Exempt employees are eligible for 5 days of sick leave per year.
ITAR REQUIREMENTS:
<ul>
<li>To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR <a href="https://www.pmddtc.state.gov/?id=ddtc_kb_article_page&amp;sys_id=24d528fddbfc930044f9ff621f961987" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>.  </li>
</ul>
SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.
Applicants wishing to view a copy of SpaceX’s Affirmative Action Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should notify the Human Resources Department at (310) 363-6000.

Principal Security Engineer

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.SR. SECURITY ENGINEER (IDENTITY AND ACCESS MANAGEMENT)SpaceX is looking for a Sr. Security Engineer to join the Security department to help protect and drive the SpaceX mission. Information drives our business and we must protect the confidentiality, integrity, and availability of systems and processes across the enterprise. As a highly visible and dynamic organization, we must also value and guard against damage to our reputation and brand. Finally, it is paramount that we defend against loss of control or confidence in our systems, to guarantee the highest probability of success. This role will focus on the "behind the scenes" technologies that ensure our networks and systems are up to industry and SpaceX standards of information security. It will also focus on providing high-criticality and high-risk services, with the confidentiality, integrity, and availability of those services in mind. This role will partner with various application development and customer groups across SpaceX to ensure that we are identifying and remediating any emerging vulnerabilities.As an Identity and Access Management Engineer, you'll be a key member of the Information Security team. You’ll work on applications and systems which touch all aspects of the SpaceX infrastructure, ensuring users and systems are properly authenticated and authorized to utilize our systems. You’ll use your creativity to develop solutions to interesting problems; integrating new technologies with legacy systems can be challenging, and engineering solutions to retrofit or replace these systems are a common occurrence as we continue to mature. Automation workloads are commonplace, and ensuring the security of these workloads is of paramount importance. This role requires a strong background in security as it relates to platform infrastructure, application security, and other aspects of network/<a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> infrastructure security.RESPONSIBILITIES: <ul><li>Develop passwordless authentication solutions within the greater SpaceX organization</li><li>Work with industry-standard tools and technologies such as Hashicorp Vault, Puppet, WebAuthn and others to improve the security posture of SpaceX</li><li>Engineer solutions to challenging legacy, business critical software’s problems, including credential management for automated workflows</li><li>Standardize authentication and authorization software, policies and procedures across the enterprise</li><li>Architect complex IAM systems which span multiple organizations, challenging requirements and ensuring appropriate access to mission-critical systems</li><li>Scope and perform security reviews of on-premise infrastructure, private and public cloud environments</li><li>Work with engineering teams within SpaceX as a liaison to the Information security team, ensuring adherence to best practices and providing early security-conscious changes</li><li>Produce research and collaborate with our peers in the broader cyber-security industry</li></ul>BASIC QUALIFICATIONS: <ul><li>5+ years of security, networking and/or systems engineering experience and a Bachelor’s degree in security engineering, cybersecurity, computer science, computer engineering or information systems; OR 7+ years of security, networking and/or systems engineering experience in lieu of a degree</li><li>Experience designing, building, implementing, integrating and/or maintaining IAM and configuration management technologies</li></ul> PREFERRED SKILLS AND EXPERIENCE: <ul><li>Experience with WebAuthn, PIV and similar standards</li><li>Experience with SAML, OIDC, and OAuth</li><li>Experience with Linux, Windows, and Mac system internals</li><li>Experience with secure code development practices</li><li>Experience with the Python programming language, C#, or Rust</li><li>Familiarity with developing web-based APIs, HTTP-RPC, and REST</li><li>Familiarity with enterprise security controls and security best practices for Windows, Linux, and Mac systems</li><li>Effective problem-solving skills, and ability to quickly determine root-causes of issues</li><li>Familiarity with macOS and Windows code-signing and deployment of enterprise applications</li></ul>ADDITIONAL REQUIREMENTS:<ul><li>Willingness to work extended hours and weekends as needed</li></ul>COMPENSATION AND BENEFITS: Pay Range:Security Engineer /Senior: $160,000.00 - $220,000.00/per yearYour actual level and base <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience.Base salary is just one part of your total rewards package at SpaceX. You may also be eligible for long-term incentives, in the form of company stock, stock options, or long-term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan. You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short &amp; long-term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation &amp; will be eligible for 10 or more paid holidays per year. Exempt employees are eligible for 5 days of sick leave per year.ITAR REQUIREMENTS:<ul><li>To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR <a href="https://www.pmddtc.state.gov/?id=ddtc_kb_article_page&amp;sys_id=24d528fddbfc930044f9ff621f961987" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>.  </li></ul>SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.Applicants wishing to view a copy of SpaceX’s Affirmative Action Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should notify the Human Resources Department at (310) 363-6000.

Sr. Security Engineer (Identity and Access Management)

Arctic Wolf Networks

Ready to further your career in the fast-paced, exciting world of cyber security?Arctic Wolf, with its unicorn valuation, is the leader in security operations in an exciting and fast-growing industry—cybersecurity. We have won countless awards for our excellence in security operations and remain dedicated to providing an industry-leading customer and employee experience.Our mission is simple: End Cyber Risk. We’re looking for a Senior Manager - Managed Detection &amp; Response (Cloud) to be part of making this happen.  OverviewA Senior Manager - Managed Detection &amp; Response (Cloud) plans and directs all aspects of development activities within their teams. This means that they ensure all engineering projects, initiatives, and processes are in conformance with the organization's established policies and objectives. They report into a Director of R&amp;D. They work closely with R&amp;D Leadership, Product Management and the Security Services(S2) to ensure their teams are building what our customers and users need in a timely fashion. Senior Managers have a large scope of leadership and can have multiple managers and/or leads reporting to them. Senior managers can also have specialized subject matter expertise within the technical areas their teams work in.Scope of RoleGenerates and manages day to day work for team(s). Works with Product Team to define and deliver on the 6 month roadmap. Is also a key contributor to longer term planning and strategy with their Director.Responsibilities<ul><li>Manage team(s) that will deliver high quality, innovative software solutions, in collaboration with stakeholders such as architects, developers, product managers, CSEs and prod support people.</li><li>Support the team by providing direction, clarity and removing obstacles.</li><li>Instil <a href="https://arcticwolf.atlassian.net/wiki/spaces/AWD/pages/731349651" rel="noopener noreferrer nofollow ugc" target="_blank">Foundations of R&amp;D</a> in their teams by living them on a daily basis. </li><li>Execute the Product roadmap<ul><li>Ensure teams are highly motivated, performing well, and delivering work on time.</li><li>Remove any blockers preventing teams from getting their work done. </li><li>Make sure each team is clear on the objectives and goals they are striving to achieve. </li><li>Work with team members to deliver the key features</li><li>Work with Architects to define and execute on the company's technical roadmap. </li></ul></li><li>Implement the <a href="https://arcticwolf.atlassian.net/wiki/spaces/AWD/pages/3997982" rel="noopener noreferrer nofollow ugc" target="_blank">R&amp;D Department and Team Responsibilities</a>. <ul><li>Oversee the full software development life cycle.</li><li>Ensure their teams is following ISMS regulations<ul><li>Secure Coding Practices</li><li>Acceptable Use  </li></ul></li><li>Develop careers of team members<ul><li>Regular One on Ones</li><li>Career and personal development coaching</li></ul></li><li>Execute administrative responsibilities <ul><li>Manage employee compensation and vacation time</li><li>Manage and approve conference and training budgets</li><li>Involved in helping set and manage the Directorate level budget</li><li>Has strong financial management skills</li></ul></li><li>Recruitment<ul><li>Lead recruitment efforts for their team(s) for both full-time and co-op employees. </li><li>Be a key contributor to planning, hiring and recruitment strategy for their team</li><li>Mentor each team member; help them grow their technical and leadership skills.  </li><li>Establish career development plans and achievable goals for your reports and support their ongoing growth. </li><li>Drive continuous development process improvements.</li><li>Build collaborative relationships with other teams and stakeholders within the organization.</li></ul></li></ul></li></ul>Location and Travel<ul><li>Our teams are diverse, including our geographical locations. However, our team has chosen to operate in the Eastern Time Zone (GMT -5).</li><li>We operate in a hybrid model where some employees work from their home offices, others in-office, and some a combination of both. All employees within a 30 mile (48 km) radius, of an Arctic Wolf office must be present in office 3 days a week. Please ask for specific location requirements during your interview.</li><li>Quarterly planning sessions may be conducted in-person, requiring travel to Waterloo, Ontario, Canada. Ad-hoc infrequent travel (estimate 10%) may be required.</li></ul>Security Requirements<ul><li>Conducts duties and responsibilities in accordance with AWN’s Information Security policies, standards, processes and controls to protect the confidentiality, integrity and availability of AWN business information.</li><li>Must pass a criminal background check and an employment verification as a condition of employment.</li><li>Be able to obtain either U.S. or Canadian Government Security Clearance.</li></ul>About Arctic Wolf At Arctic Wolf we’re cultivating a collaborative and productive work environment that welcomes a diversity of backgrounds, cultures, and ideas to make our teams even stronger as we grow globally. We’ve been named one of the 50 Most Innovative Companies in the world for 2022 (Fast Company)—and the 2nd Most Innovative Security Company. This is in addition to consecutive awards from Top Workplace USA (2021, 2022), Best Places to Work - USA (2021, 2022) and Great Place to Work - Canada (2021, 2022). Our Values Arctic Wolf recognizes that success comes from delighting our customers, so we work together to ensure that happens every day. We believe in diversity and inclusion, and truly value the unique qualities and unique perspectives all employees bring to the organization. And we appreciate that—by protecting people and organizations’ sensitive data and seeking to end cyber risk— we get to work in an industry that is fundamental to the greater good. We celebrate unique perspectives by creating a platform for all voices to be heard through our Pack Unity program. We encourage all employees to join or create a new alliance. See more about our Pack Unity <a href="https://arcticwolf.com/company/careers/diversity-equity-inclusion-and-belonging/" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>.  We also believe and practice corporate responsibility, and have recently joined the Pledge 1% Movement, ensuring that we continue to give back to our community. We know that through our mission to End Cyber Risk we will continue to engage and give back to our communities. All wolves receive compelling compensation and benefits packages, including: <ul><li>Equity for all employees </li><li>Bonus or commission pay based on role </li><li>Flexible time off, paid volunteer days and paid parental leave </li><li>401k/RRSP match</li><li>Medical, Dental, and Vision insurance </li><li>Health Savings and Flexible Spending Agreement </li><li>Voluntary Legal Insurance </li><li>Training and career development programs </li></ul> Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law. Arctic Wolf is committed to fostering a welcoming, accessible, respectful, and inclusive environment ensuring equal access and participation for people with disabilities. As such, we strive to make our entire employee experience as accessible as possible and provide accommodations as required for candidates and employees with disabilities and/or other specific needs where possible. Please let us know if you require any accommodations by emailing <a href="mailto:recruiting@arcticwolf.com" rel="noopener noreferrer nofollow ugc" target="_blank">recruiting@arcticwolf.com</a>. Come join the Pack during this exciting time of rapid growth where every employee makes a difference and their contributions are recognized and rewarded.

Senior Manager - Managed Detection &amp; Response (Cloud)

Perceptyx

***We welcome people based in the USA to apply. This role is 100% work from home.***Hello,👋 nice to e-meet you! We're looking for a talented senior-level Security Analyst who will work closely with the Information Security team, developing clear and accurate responses that can be understood by technical and non-technical readers alike. In this role, you will be responsible for managing and updating responses in the RFP content library related to technology and information security as well as general responses related to functional technology, contracting, SLAs, etc. You'll also play a part in implementing enterprise security solutions, formulating, and implementing compliance &amp; security standards, performing vulnerability scans, and arranging for resolutions.Some Things You Will Do:<ul> <li>Attend and contribute to proposal kick-off calls and strategy sessions, as needed, depending on the size and depth of information security requirements.</li> <li>Manage multiple requests to meet client deadlines as well as internal deadlines.</li> <li>Implement enterprise security solutions such as WAF, IDS/IPS, Anti-DDOS, and <a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a>. </li> <li>Contribute to the formulation and implementation of compliance &amp; security standards. </li> <li>Perform vulnerability scans, outline findings and test findings, and create service tickets for their resolution as well as internal deadlines. </li> <li>Support InfoSec team as it relates to functional technology, security, and privacy (i.e., acts as SME on technical/security question sets in RFPs).</li> <li>Support the business by managing initial prospect and contracting questionnaires pertaining to security practices, policies, and controls.</li> <li>Review documents and contracts for compliance with final approval and responses to all questionnaires and contracts.</li> <li>Develop, update, and maintain security/privacy content. </li> </ul>Requirements<ul><li>Bachelor's Degree with a focus in Information Security </li></ul><ul> <li>Ideally, 5-7 years of experience in this line of work</li> <li>Possess at least 5 years of experience in interpreting and responding to technical and information security questions/questionnaires that are part of the RFP process and/or the pre-sales onboarding process for customers of your company.</li> <li>Industry in B2B SaaS is a plus!</li> <li>Have familiarity with security certifications as well as industry-standard security questionnaires (Standardized Information Gathering, Consensus Assessment Initiative Questionnaire).</li> </ul>Compensation: Perceptyx is focused on equitable pay for all our staff and aims for transparency with our pay practices. This position has an annual base <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> range of $120,000 to $145,000. The above range represents the expected base salary range for this position. The actual salary may vary based upon several factors, including, but not limited to, relevant skills/experience, time in the role, business line, and geographic/office location.BenefitsWe Care About The Whole Person 🫶✨<ul> <li>Healthy medical, dental, and vision insurance for you and your family</li> <li>Life insurance up to 1x your annual salary (with a cap) paid by Perceptyx</li> <li>Generous Maternity, Paternity, and Adopter leave benefits with flexibility on when you use this benefit</li> <li>401(k) plan along with a 3% company match and immediate vesting upon hire</li> </ul>Flexible Time Away 🏝<ul> <li>As hard as we work, we also know how essential it is to take time away to rest and recharge. We offer flexible paid vacation with an expectation that every team member takes off at least 10 business days per calendar year.</li> <li>16-17 paid holidays, depending on the calendar year.</li> </ul>Setting You Up For Success 🧑🏻‍💻👩🏾‍💻<ul> <li>Mac or PC laptop options</li> <li>Invest in your career with access to 65k+ courses through our Learning Management System, Perceptyx Academy.</li> <li>Full subscription to <a href="https://www.calm.com/" rel="noopener noreferrer nofollow ugc" target="_blank">The Calm App</a>: #1 app for Sleep, Meditation, and Relaxation, with over 100 million downloads</li> </ul>Perceptyx In The News 📰<ul> <li><a href="https://blog.perceptyx.com/perceptyx-adds-more-than-100-new-enterprise-customers-including-gannett-and-banner-health" rel="noopener noreferrer nofollow ugc" target="_blank">Perceptyx Adds More Than 100 New Enterprise Customers</a></li> <li><a href="https://www.prlog.org/12916675-hr-tech-awards-recognizes-valuable-contributors-to-hiring-retention-and-more.html" rel="noopener noreferrer nofollow ugc" target="_blank">Lighthouse Research &amp; Advisory has awarded Perceptyx the 2022 HR Tech Award for Employee Experience - Best Comprehensive Solution</a></li> <li><a href="https://blog.perceptyx.com/news-perceptyx-and-the-bersin-company-extend-strategic-survey-partnership" rel="noopener noreferrer nofollow ugc" target="_blank">Perceptyx and The Bersin Company Extend Strategic Survey Partnership</a></li> </ul><h3>Perceptyx Equal Employment Opportunity Policy:</h3>Perceptyx celebrates diversity and an inclusive environment. We focus on providing an environment of mutual respect where equal employment opportunities are available to all employees and applicants for employment. We prohibit discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.Perceptyx’s policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. All aspects of employment are decided on the basis of qualifications, knowledge, merit, and business needs.

Senior Security Analyst

The leading job board for Cyber Security Jobs. Start your career in Information Security Industry. Jobs are updated daily.

Job Position and Company	Location	Tags	Posted
Advisory IR Services Consultant- Remote (Anywhere in the U.S.) at GuidePoint Security	Remote Full Time Blue Team Consultant Incident Response
Attack & Penetration - Sr. Consultant - I \| Remote, Bangalore, India at Optiv	Remote Full Time Consultant Consulting Windows
Senior Security Engineer (Identity & Access Management - Platform & Operations) at Coupang	Full Time Javascript Windows
DevSecOps & Cloud Engineer at Barbaricum	Administrator Chief DOD Devsecops
Sr. Security Engineer (Threat Detection) at SpaceX	Full Time Windows
Senior Team Manager, Application & Product Security at Box	Full Time Manager Application Security
Senior IT Security Analyst at Wisk Aero	Full Time Audit Analyst Windows
Information Security, Risk and Governance Lead at Logicalis	Remote Full Time Audit Incident Response
Security Engineer II at SpaceX	Full Time Windows
Principal Product Manager - Head of Cybersecurity Workload at Snowflake Inc.	Full Time CISO Manager
Network Security Engineer [F5 and Fortigate] - Luxembourg at NRB Group	Remote Full Time Administrator
Application Security Engineer, India Payments Security at Amazon.com	Full Time Consulting Application Security
Security Incident Associate at Kueski	Full Time Forensic Incident Response
Sr. Security Software Engineer at SpaceX	Remote Full Time Incident Response
Cyber Security, Vulnerability Remediation Team Lead at WPP	Remote Full Time
Security Engineer, Stores Payments Security at Amazon.com	Full Time Javascript Application Security
Principal Security Engineer at SpaceX	Full Time Windows
Sr. Security Engineer (Identity and Access Management) at SpaceX	Full Time Application Security Windows
Senior Manager - Managed Detection & Response (Cloud) at Arctic Wolf Networks	Remote Full Time Manager
Senior Security Analyst at Perceptyx	Remote Full Time Analyst

Cyber Security Jobs

651 Cyber Security Jobs. Page 5 of 33

Subscribe to the weekly
Cyber Security Jobs Newsletter