Keyfactor, Inc.

Title: Security Compliance Analyst
Location: Barcelona, Spain
Job Function: Compliance
Employment Type: Full-Time
Industry: Enterprise Software
About the position 
We at Keyfactor are looking to hire a Security Compliance Analyst to join our fast-growing Cloud Operations and Compliance department. Security and Compliance works with all areas of the business, standing on the front lines to protect and enable fast, secure growth. The Security Compliance Analyst position will directly assist the Cloud Operations and Compliance Teams with the internal and external security and compliance responsibilities.
The position is based in Barcelona office with flexibility to work in hybrid setting when necessary. Applicants must hold Valid Right to Work in Spain to apply for this position.
RESONSIBILITIES
<ul>
<li>Participate in the collection of evidence for various audits and assessments (e.g., SOC, ISO27001, etc.)</li>
<li>Working with Keyfactor’s team members, suppliers, and business partners to ensure adherence to established Information Security policies</li>
<li>Communicating with the organization, including training, regarding information security policy implementations and technical measures</li>
<li>Consulting with all levels of the organization on information security control implementations and alignment with industry standards and best practices</li>
<li>Participate in internal risk assessments and audits</li>
<li>Responding in a timely manner to customers’ vendor risk assessments, information security questionnaires and evaluations</li>
</ul>
SKILLS AND QUALIFICATIONS
<ul>
<li>Fundamental technical troubleshooting and problem-solving skills</li>
<li>Formal industry and regulatory audit execution such as SOC 2, GDPR, CCPA, ISO 27001, PCI DSS, FedRAMP, and/or Sarbanes-Oxley</li>
<li>Information Security Policy composition, maintenance, and implementation experience</li>
<li>Executing risk management and treatment plans</li>
<li>Multi-tasking and prioritization involving complex technical and policy-related subjects</li>
<li>Currently maintains or is in the process of obtaining industry security certifications (e.g., CISSP, CEH, CISM, CISA, CIPT, etc.)</li>
<li>Basic systems administration capabilities (e.g., Windows Server, Active Directory user accounts, password management, security groups, etc.)</li>
</ul>
COMPENSATION
Salary will be commensurate with experience.
CULTURE, CAREER OPPORTUNITIES AND BENEFITS
We build teams that continually strive to get better than the day before. You will be challenged daily and given opportunities to grow personally and professionally. We balance autonomy and structure to create an entrepreneurial environment to spur creativity and new ideas. A few initiatives that make our culture special include:
<ul>
<li>Comprehensive benefit coverage</li>
<li>Dedicated employee focused ambassadors via Key Contributor &amp; Culture Committee</li>
<li>DIVERSE Commitment</li>
<li>Global Volunteer Day</li>
<li>Flexible time off</li>
<li>Monthly Cross Functional meetings</li>
<li>Monthly Leadership Development meetings</li>
<li>Monthly All Hands meetings – followed by group gatherings</li>
<li>Second Friday’s (the office is closed on the second Friday of every month)</li>
<li>The Keyfactor Alliance Program</li>
<li>Weekly Feedback Snapshot</li>
</ul>
OUR CORE VALUES
Our core values are extremely important to how we run our business and what we look for in every team member:
<ul>
<li>Trust is paramount – We deliver security software and solutions where trust is of the highest importance for our customers. We are honest and a trusted partner in every aspect of business.</li>
<li>Customers are core - We strategize, operate, and execute through a customer-centric view. We prioritize the security interests of our customers, and we act as if their data were our own.</li>
<li>Innovation never stops, it only accelerates - The speed of change is accelerating. We are committed, through investment and focus, to stay ahead of the innovation curve.</li>
<li>Deliver with agility - We thrive in high paced and continually changing environments. We navigate through newly added variables, adjust accordingly, while driving towards our strategic goals.</li>
<li>Teams make “it” happen - Vision and goals are not individually achievable - They require teamwork. We pride ourselves in operating as a cohesive team, creating promoters and partners, and winning as one.</li>
<li>Keyfactor is a proud equal opportunity employer. navigate through newly added variables, adjust accordingly, while driving towards our strategic goals.</li>
<li>Teams make “it” happen - Vision and goals are not individually achievable - They require teamwork. We pride ourselves in operating as a cohesive team, creating promoters and partners, and winning as one.</li>
</ul>

Keyfactor is a proud equal opportunity employer.

Barcelona

Security Compliance Analyst

Bishop Fox

Bishop Fox is the leading authority in offensive security, providing solutions ranging from continuous penetration testing, red teaming, and attack surface management to product, cloud, and application security assessments. We’ve worked with more than a quarter of the Fortune 100, half of the Fortune 10, eight of the top 10 global technology companies, and all of the top global media companies. Our Cosmos platform was named Best Emerging Technology in the 2021 SC Media Awards and our offerings are consistently ranked as “world class” in customer experience surveys. For more than 16 years, we've been contributing and giving back to the security community. We’ve published more than 16 open source tools and 50 security advisories in the last five years alone. Learn more at bishopfox.com or follow us on Twitter.
We’re looking for talented, experienced professional hackers to help us secure some of the world’s most complex software and sophisticated technologies. You’ll be working alongside our US and other internationally-based teams supporting clients across multiple industries. 
Who You Are and What You’ll Do
You fancy yourself a Pentester. You know your way around source code. You’ve plundered apps and pillaged networks (legally, of course). You have a passion for hacking and information security. If you’re not already doing it professionally, you’re pen testing in your free time. You may also have written a few blog posts about your favorite hacks or have presented at a handful of conferences – with an eye to doing more.
With Bishop Fox, your responsibilities would include testing web applications, hacking networks, and reversing software. Some days, you’ll be red teaming wireless networks and physically breaking into buildings. Other days, you’ll be analyzing source code and building threat models. Every day at Bishop Fox, you’ll be learning.
As a consultant, you’ll work on a variety of projects which include short-term engagements and extended program work with well-established clients, you'll solve challenging technical problems and build creative solutions. As a trusted advisor, you’ll provide your expert opinion to help our clients navigate difficult business decisions.                                                       
Your Education and Experience
You just have to be good at and, most importantly, love what you do. Don’t worry about a piece of paper; we won’t. Here’s a list of qualities we’re looking for:
<ul>
<li>Penetration testing and code review skills</li>
<li>Vulnerability assessment experience</li>
<li>Understanding security fundamentals and common vulnerabilities (e.g. OWASP Top Ten)</li>
<li>2+ years of application security experience</li>
<li>Additional experience in Cloud security; background in system and network security, authentication and security protocols, and applied cryptography are helpful</li>
<li>Scripting/programming skills (e.g., Python, Ruby, Java, JavaScript, etc.)</li>
<li>Network and web-related protocol knowledge (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)</li>
<li>Advanced relevant academic training is a definite bonus</li>
</ul>
Bishop Fox has always offered its employees the ability to work remotely, and for this role you could work remotely in the United States or Mexico. Equity is offered to all employees and vesting starts on the first day.  You also have the opportunity to earn additional equity.  Our comprehensive benefits program is tailored to meet your needs at an affordable price. We embrace diversity and an inclusive culture.  We value our employees and who they are, which fosters a powerful and collective talent base to successfully serve our clients and the security community with unparalleled expertise.  
Bishop Fox is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.  All new hires must pass a background check as a condition of employment.

United States

Penetration Tester

Amazon.com

Job summaryThe Amazon Information Security team is looking for a Senior Security Engineer to help ensure our services, applications, and websites are designed and implemented to the highest security standards. You have breadth and depth of security knowledge and can identify and advise on risks across multiple areas of an organization. You will join a team working on Software Supply Chain Security (SSC-S) initiatives and drive transformative changes on how thousands of Amazon dev teams consumes, build, operate and ship secure software. You will work with limited guidance in the face of ambiguity. You will take a long-term view of Amazon's software development security processes and tools. *The preferred location for this position is in Seattle, Austin or Arlington locations, however other locations may be considered as well.Key job responsibilities<ul><li>Evaluating and recommending new and emerging security products and technologies</li><li>Identifying security issues and risks, and developing mitigation plans</li><li>Through security risk assessments, identify repeatable work streams and influence automation of such streams to reduce cycle times and drive efficiency.</li><li>Participate in the design discussions and development of user stories for automation</li><li>Positively influence Security Governance initiatives; partner with engineering teams to develop a Security dashboard that provides ongoing Leadership visibility of the security posture, threats and risks.</li><li>Establish credibility and maintain strong working relationships with technical groups involved with security including but not limited to Security Teams, AWS (Amazon Web Services), Legal, Compliance, and Developer Community</li><li>Build and influence supply chain software security as a core competency throughout InfoSec’s relationships with internal Amazon teams, partners, and vendors.</li></ul>About the teamAt Amazon, we're working to be the most customer-centric company on earth. To get there, we need exceptionally talented, bright, and driven people. Join us!Inclusive Team Culture Here at Amazon, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust. Work/Life Balance Our team puts a high value on work-life balance. It isn’t about how many hours you spend at home or at work; it’s about the flow you establish that brings energy to both parts of your life. We believe striking the right balance between your personal and professional life is critical to life-long happiness and fulfillment. We offer flexibility in working hours and encourage you to find your own balance between your work and personal lives. Mentorship &amp; Career Growth Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge sharing and mentorship. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded professional and enable them to take on more complex tasks in the future.<h3>Basic Qualifications</h3><ul><li>BS in Computer Science or related field, or equivalent work experience</li><li>At least 5 years of experience in application security, threat modeling, secure coding, software development, secure software or system design</li><li>At least 3 years of experience in a development or security role working with development team(s) that delivered commercial software or software-based services</li><li>Advanced knowledge and understanding of any combination of the following: security engineering, system and network security, authentication and security protocols, cryptography, or application security</li><li>An understanding of network and web related protocols (such as, TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)</li><li>Experience with multiple programming languages (such as, Java, C++, Ruby, Python, Perl, etc.)</li></ul><h3>Preferred Qualifications</h3><ul><li>Experience managing and delivering security solutions at scale.</li><li>Experience with DevOps, Software Build and Deployment systems, Software Composition Analysis</li><li>Experience with service-oriented architecture and web services security</li><li>Experience with AWS or similar enterprise cloud computing platforms</li><li>Experience with the application of threat modeling or other risk identification techniques</li><li>Demonstrated experience collaborating with other security engineers and developers to deliver complex projects</li><li>Excellent written and verbal communication skills with the ability to convey technical information to a wide variety of audiences</li><li>Strong and creative problem-solving abilities</li><li>Meets/exceeds Amazon’s leadership principles requirements for this role</li><li>Meets/exceeds Amazon’s functional/technical depth and complexity for this role</li></ul>Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.

Seattle

Sr. Security Engineer

Gong.io

Gong unlocks reality to help people and companies reach their full potential. The patented Gong Revenue Intelligence Platform™ empowers customer-facing teams to take advantage of their most valuable assets – customer interactions, which the Gong platform automatically captures and analyzes. Gong then delivers insights at scale, empowering revenue and go-to-market teams to determine the best actions for winning outcomes. Thousands of innovative companies like Morningstar Inc., Paychex, LinkedIn, Shopify, Slack, SproutSocial, Twilio, and Zillow trust Gong to power their customer reality.  Gong is an award winning company and was recognized on the Inc 5000 (#99), Forbes Cloud 100 (#28), LinkedIn Top Start Ups (#2), and Great Places to Work lists in 2021.Location: This position can be performed remotely. We have physical offices in San Francisco, Atlanta, and Chicago if you would like to go into an office location.As a leader of Security Operations and Security Engineering, you’ll play a key role in ensuring trust and security are core to day to day operations. This will be a hands-on position as we mature our security team and you will be responsible for improving and automating our security operations and security engineering practices.
<h3>Responsibilities:</h3>
<ul>
<li>Manage SIEM</li><li>Incident Response </li><li>AWS Security </li><li>Security Orchestration and Automation </li><li>EDR</li><li>MDM </li><li>Cloud security operations</li><li>Insider threat </li></ul>
<h3>Qualifications:</h3>
<ul>
<li>7+ years of security operations experience</li><li>Familiarity with security operations in a cloud environment</li><li>In-depth knowledge of SIEM (Security Information Event Management)</li><li>AWS Experience including Guard Duty</li><li>Familiarity with attack frameworks and mitigation </li><li>Extensive incident response experience </li></ul>
<h3>Perks &amp; Benefits:</h3>
<ul>
<li>We offer Gongsters a variety of medical, dental, and vision plans, designed to fit you and your family’s needs.</li><li>For most plans, Gong pays 100% of the premiums for employees and 50% of premiums for dependents. </li><li>401K program to help you invest in your future.</li><li>Education &amp; learning stipend for personal growth and development.</li><li>Flexible vacation time to promote a healthy work-life blend.</li><li>Paid parental leave to support you and your family.</li><li>Company-wide recharge days each quarter.</li><li>Work from home stipend to help you succeed in a remote environment</li></ul>Gong is an equal opportunity employer. We believe that diversity is integral to our success, and do not discriminate based on race, color, religion, age, or any other basis protected by law.#LI-Remote #LI-MK1

Head of Security Operations

Job summaryThe Amazon Information Security team is looking for a Senior Security Engineer to help ensure our services, applications, and websites are designed and implemented to the highest security standards. You have breadth and depth of security knowledge and can identify and advise on risks across multiple areas of an organization. You will join a team focused on Software Supply Chain Security (SSC-S) improvement initiatives and help drive transformative changes on how thousands of Amazon developer teams consume, build, operate and ship secure software. You will take a long-term view of Amazon's software development security processes and tools and work with limited guidance in the face of ambiguity.*The preferred location for this position is in Seattle, Austin or Arlington locations, however other locations may be considered as well.Key job responsibilities<ul><li>Evaluating and recommending new and emerging security products and technologies</li><li>Identifying security issues and risks, and developing mitigation plans</li><li>Through security risk assessments, identify repeatable work streams and influence automation of such streams to reduce cycle times and drive efficiency.</li><li>Participate in the design discussions and development of user stories for automation</li><li>Positively influence Supply Chain Security initiatives</li><li>Partner with engineering teams to develop Security tooling</li><li>Develop mechanisms that provides ongoing Leadership visibility of the security posture, threats and risks.</li><li>Establish credibility and maintain strong working relationships with technical groups involved with software supply chain security including but not limited to Security Teams, AWS (Amazon Web Services), Legal, Compliance, and Developer Community</li></ul>About the teamAt Amazon, we're working to be the most customer-centric company on earth. To get there, we need exceptionally talented, bright, and driven people. Join us!Inclusive Team Culture Here at Amazon, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust. Work/Life Balance Our team puts a high value on work-life balance. It isn’t about how many hours you spend at home or at work; it’s about the flow you establish that brings energy to both parts of your life. We believe striking the right balance between your personal and professional life is critical to life-long happiness and fulfillment. We offer flexibility in working hours and encourage you to find your own balance between your work and personal lives. Mentorship &amp; Career Growth Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge sharing and mentoring. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded professional and enable them to take on more complex tasks in the future.<h3>Basic Qualifications</h3><ul><li>BS in Computer Science or related field, or equivalent work experience</li><li>At least 5 years of experience in application security, threat modeling, secure coding, software development, secure software or system design</li><li>At least 3 years of experience in a development or security role working with development team(s) that delivered commercial software or software-based services</li><li>Advanced knowledge and understanding of any combination of the following: security engineering, system and network security, authentication and security protocols, cryptography, or application security</li><li>An understanding of network and web related protocols (such as, TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)</li><li>Experience with multiple programming languages (such as, Java, C++, Ruby, Python, Perl, etc.)</li></ul><h3>Preferred Qualifications</h3><ul><li>Experience with DevOps, Software Build and Deployment systems, Software Composition Analysis</li><li>Experience with service-oriented architecture and web services security</li><li>Knowledge of, and experience with Software Supply Chain Security, NIST SSDF, SBOMs, Code Signing, and Verification</li><li>Experience with AWS or similar enterprise cloud computing platforms</li><li>Experience with the application of threat modeling or other risk identification techniques</li><li>Demonstrated experience collaborating with other security engineers and developers to deliver complex projects</li><li>Excellent written and verbal communication skills with the ability to convey technical information to a wide variety of audiences</li><li>Strong and creative problem-solving abilities</li><li>Meets/exceeds Amazon’s leadership principles requirements for this role</li><li>Meets/exceeds Amazon’s functional/technical depth and complexity for this role</li></ul>Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.

Security Engineer

Apply to Cloud Cyber Security Jobs in companies remotely and near you. New Cloud Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Security Compliance Analyst at Keyfactor, Inc.	Full Time CISM Audit Analyst Consulting
Penetration Tester at Bishop Fox	Remote Full Time Pentester Consultant Javascript
Sr. Security Engineer at Amazon.com	Full Time Application Security Automation AWS C
Head of Security Operations at Gong.io	Remote Full Time Incident Response Automation AWS
Security Engineer at Amazon.com	Full Time Application Security Automation AWS C

Cloud Cyber Security Jobs

0 Cloud Cyber Security Jobs. Page 1 of 1

5 closed cloud cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cloud Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Cloud Cyber Security Jobs

0 Cloud Cyber Security Jobs. Page 1 of 1

5 closed cloud cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cloud Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter