Arcadia

Due to Covid–19 we are working 100% remotely, this includes the hiring process. When it is safe to do so, we will return to a hybrid of onsite and remote work for some positions.Why This Role Is Important To Arcadia Arcadia is looking for an Offensive Security Engineer to report directly to our VP of Security, Privacy &amp; Compliance.  In this multi-faceted role, you will be an integral part of our Security team, responsible for designing, conducting and reporting on penetration tests against components of our SaaS web application. You will also work with software developers to ensure secure coding and assist with the remediation of any vulnerabilities identified. The Offensive Security Engineer will work as a member for the Information Security team focused on ensuring the security of Arcadia’s Population Health Analytics portfolio through application security testing, code review, and risk/impact analysis of proposed changes and features. This role will partner with both engineering and product to ensure that security requirements are consistently considered and addressed throughout the development and operational lifecycle including ownership of the SDLC Security plan, code review and remediation, pre-production and ongoing application security testing, vulnerability tracking and remediation.The right Offensive Security Engineer can work independently and follow up with various lines of business as needed to ensure timely testing of the application and closure of any findings.  We are looking for someone who is passionate about finding and fixing application vulnerabilities and will be hyper-vigilant in ensuring that all facets of our SaaS web application is secure against attackers.What Success Looks LikeIn 3 months- Plan and execute penetration tests against web applications and infrastructure; produce reports for stakeholders.- Ensure the implementation of HITRUST controls related to Secure Application Development.- Participate in Information Security &amp; Privacy Steering Committee Meetings.- Conduct code reviews. In 6 months- Track remediation efforts for discovered vulnerabilities and ensure they are patched according to the timeframes specified.- Work with Product and Engineering teams to review new features from a security perspective, perform threat modeling, and conduct code reviews. In 12 months- Participate in building and maturing security capabilities and operations.- Ensure that new product releases are continuously being tested prior to being put into production.
<h3>What Will You Be Doing</h3>
<ul>
<li>Defining, maintaining, and implementing application security best practices to meet HITRUST requirements.</li><li>Owning Security SDLC plan and processes ensuring relevant tasks are completed and required artifacts are created and maintained.</li><li>Providing guidance to Engineering teams during design reviews including threat modeling.</li><li>Integrating security best practices and tooling into our CI/CD processes.</li><li>Evaluating the impact to the organization of current security advisories, publications, and trends.</li><li>Working with Security team and Product stakeholders to build a penetration testing schedule for all products and infrastructure.</li><li>Performing penetration tests and review web applications, source code, operating systems, and network security architectures; find vulnerabilities and define effective strategies for remediation and hardening.</li><li>Performing Red/Purple Team exercises to identify strengths and gaps in defensive tools and processes.</li><li>Explaining and demonstrating vulnerabilities to product stakeholders, provide remediation steps, and design solution prototypes and/or implement security enhancements.</li><li>Tracking and driving remediation efforts for discovered vulnerabilities in web applications and network ensuring they are patched according to the timeframes specified by policy.</li><li>Participating in building and maturing security capabilities and operations.</li><li>Ensuring that the Security Impact Analysis is completed for web/code changes as part of Change Management process.</li><li>Ensuring that all changes are properly tested in a separate test environment prior to being put into production.</li><li>Participating as a key member of Incident Response team as web application and network security SME focused on determining impact, root cause, and resolution associated.</li><li>Identifying, vetting, and coordinating third party vendors in meeting third-party application security testing requirements.</li></ul>
<h3>What You'll Bring</h3>
<ul>
<li>A passion for Application and Network Security with an attacker mindset.</li><li>3+ years of proven code review and penetration testing experience in both web applications and infrastructure; finding vulnerabilities and defining effective strategies for remediation and hardening.</li><li>Experience testing and securing infrastructure on cloud providers such as AWS/Azure.</li><li>Knowledge of the Secure SDLC.</li><li>A firm understanding of OWASP Top 10.</li><li>Experience with static and dynamic code analysis.</li><li>Strong scripting and development skills in languages such as Java, JavaScript, Ruby, Python.</li><li>Security certifications such as OSCP, OSCE, PNPT, EWPT, ECPTX.</li><li>Ability to write formal assessment reports and to explain vulnerabilities to different stakeholders.</li><li>Knowledge and understanding of attack surfaces and the ability to carry out APT style tactics, techniques, and procedures on enterprise systems and services.</li></ul>
<h3>Would Love For You To Have</h3>
<ul>
<li>Experience threat modeling SaaS products, cloud infrastructure, RESTful microservices, etc</li><li>Applied security research, cryptography, reverse engineering, and fuzzing experience.</li><li>Additional certifications such as OSWE, GPEN, GXPN, or CREST will be very desirable.</li><li>Experience in Vulnerability management within containerized environments</li><li>Strong IaaS security skills, with a focus on AWS</li><li>Understanding of Microsoft Windows Server/AD deployments</li><li>Experience conducting Red Team and Purple Team operations</li></ul>
<h3>What You'll Get</h3>
<ul>
<li>You will work with a team of experts in building and maintaining a highly validated security and privacy program for the leader in Population Health and Healthcare data analytics including experience with certifications such as HITRUST, ISO 27001, and SOC 2.</li><li>Be a part of a team and organization that has built security and privacy into the fabric and culture of the organization.</li><li>You will learn how to build and maintain a fully validated and industry leading security program.</li><li>Your responsibilities will grow with you as a critical member of our team.</li><li>Be a part of a mission driven company that is transforming the healthcare industry by changing the way patients receive care</li><li>A flexible, remote friendly company with personality and heart</li><li>Employee driven programs and initiatives for personal and professional development</li><li>Be a member of the Arcadian and Barkadian Community</li></ul>About Arcadia<a href="http://arcadia.io/" rel="noopener noreferrer nofollow ugc" target="_blank">Arcadia.io</a> helps innovative healthcare systems and health plans around the country transform healthcare to reduce cost while improving patient health.   We do this by aggregating massive amounts of clinical and claims data, applying algorithms to identify opportunities to provide better patient care, and making those opportunities actionable by physicians at the point of care in near-real time.  We are passionate about helping our customers drive meaningful outcomes. We are growing fast and have emerged as the market leader in the highly competitive population health management software and value-based care services markets, and we have been recognized by industry analysts KLAS, IDC, Forrester and Chilmark for our leadership. For a better sense of our brand and products, please explore our <a href="https://www.arcadia.io/about-arcadia/leadership/" rel="noopener noreferrer nofollow ugc" target="_blank">website</a>, our <a href="https://www.arcadia.io/resources/" rel="noopener noreferrer nofollow ugc" target="_blank">online resources</a>, and our interactive <a href="https://datagallery.arcadiasolutions.com/static/index.html" rel="noopener noreferrer nofollow ugc" target="_blank">Data Gallery</a>.This position is responsible for following all Security policies and procedures in order to protect all PHI under Arcadia's custodianship as well as Arcadia Intellectual Properties.  For any security-specific roles, the responsibilities would be further defined by the hiring manager.

Boston

Pittsburgh

Offensive Security Engineer

SciTec

<p>SciTec, Inc is a dynamic small business with the mission to deliver Advanced Sensor Data Exploitation technologies in support of National Security and Defense.  SciTec has an immediate opportunity for an experienced DevSecOps engineer to manage integration, scanning, and deployment of multiple applications into orchestrated frameworks.  The DevSecOps engineer will work with development teams to orchestrate multiple deployments to development, test and operational environments.</p> <p>Our ideal candidate is a well-rounded, experienced engineer who works well as a part of a team, prioritizes the quality of their product, and seizes opportunities to be creative, learn and grow as a developer.</p><p><strong>Requirements</strong></p><p>The following minimum qualifications are required for the position: </p><ul><li>At least three years professional experience building and executing DevOps or DevSecOps solutions using Continuous Integration / Continuous Deployment (CI/CD), such as GitLab-ci or Jenkins </li></ul><ul> <li>Strong experience maintaining deployment environments for development, test, and production </li> <li>Experience with software supply chain security </li> <li>At least one year professional experience using Linux operating systems </li> <li>A Bachelor’s degree in computer science, engineering, mathematics, or physical sciences </li> </ul><ul><li>The ability to obtain and maintain a DoD security clearance </li></ul><p>Candidates who have any of the following skills will be preferred: </p><ul><li>Strong experience with software vulnerability scanning with static and dynamic code analysis </li></ul><ul> <li>Strong experience with package artifact management using JFrog Artifactory, Nexus, or similar </li> <li>Experience designing and developing application container deployment solutions using docker, docker-compose, Kubernetes, etc.  </li> <li>Experience with software vulnerability remediation </li> <li>Development experience in Python, C++, or JavaScript </li> <li>Experience with version control using Git </li> </ul><ul> <li>Systems and service administration in a linux environment, including the installation and maintenance of applications supporting CI/CD like GitLab, Jenkins, etc. </li> <li>Security+ Certification </li> </ul><p><strong>Benefits</strong></p><p>As a       small business, SciTec, Inc. offers room for growth and a    flexible,       fast-paced work environment. We work daily to develop    one-of-a-kind solutions for challenging national problems. SciTec    encourages collaboration across our offices in Boulder, El Segundo,    Dayton,       Huntsville, Virginia, and our headquarters in Princeton,    and provides access to opportunities across the corporate spectrum.    Initiative is expected and encouraged, all employees have the    opportunity and flexibility to broaden their technical horizons, and our    daily work makes an impact on the world around us.   SciTec  offers a   highly competitive salary and benefits package, including a  variety  of  benefits including health insurance, parental leave, vision,  life,  and  disability insurance, 401(k)plan with employer contribution,   holidays  and paid time off plans (including vacation and sick time), an   annual  profit-sharing plan, and an annual performance bonus plan. SciTec  considers several factors when extending an offer of employment,  including but not limited to, the role and associated responsibilities, a  candidate’s work experience, education/training, and key skills. This  is not a  guarantee  of compensation. SciTec is committed to hiring and  retaining a  diverse  workforce and is proud to be an Equal  Opportunity/Affirmative  Action  employer.</p>

Princeton

DevSecOps Engineer

Network Guard

<h3>Senior Application Security Engineer</h3>
<p>If you’re passionate about security and privacy, and want to use your skills to help safeguard private, uncensored access to the internet for millions of customers, we’d love to speak with you. </p>
<p>We provide a highly dynamic working environment where you’ll get to work with some of the best privacy and security focused individuals across multiple disciplines, where room for learning and growth are plentiful. </p>
<p>As a senior individual contributor on our Offensive Security team, you’ll have a broad set of responsibilities including:</p>
<ul>
<li>Prepare and execute penetration testing projects of our assets, services and applications, either individually or as part of a team with members across various geographic locations such as Singapore, Hong Kong, Poland and London.</li>
<ul>
<li>We operate across a wide range of technologies, from client facing applications written in various languages for various platforms, to backend infrastructure and services, and router firmware. We provide an environment where you’ll be exposed to a wide range of technologies that form our <a href="https://www.expressvpn.com/jobs/tech-stack" rel="noopener noreferrer nofollow ugc" target="_blank">tech stack</a>.</li>
<li>You’ll need a strong white-box testing methodology and the ability to identify bugs in source code to go along with good organization and communication skills when delivering penetration tests of our applications and services.</li>
</ul>
<li>Work closely with the engineering teams to provide expert guidance and advice on remediation of identified vulnerabilities</li>
<li>Verify the existence of newly discovered vulnerabilities in our software stack, including triaging and verifying bugs from our bug bounty program and automated scanners, and develop novel attack vectors based on these </li>
<li>Manage and support penetration testing services performed by outside vendors, from project inception, scoping, completion of the assessment, and finally, working with engineering teams to have the identified issues remediated</li>
<li>Bring creative solutions to fruition for solving some of the complex security challenges faced by our organization, and provide security reviews on technical design documents for our solutions</li>
<li>Mentor, guide and support other team members using your strong technical knowledge</li>
<li>Identify inefficiencies in the team’s workflow, suggest solutions and drive them to completion</li>
</ul>
<p>This role focuses strongly on your ability to perform application penetration testing (specifically, desktop and server applications, with some focus on web applications). To be a good fit for this role and efficiently deliver projects, we are looking for individuals with the following skills and abilities.</p>
<p><strong>Suggested Skills</strong></p>
<ul>
<li>Identify vulnerabilities, misconfigurations and deviations from best practices within applications by means of manual source code review, static code analysis, and/or fuzzing using Burp Suite, AFL or similar tooling. We expect vulnerabilities to be identified and exploited up to the levels of OSCP, OSWE or OSED</li>
<li>Experience in identifying and exploiting remote code execution vulnerabilities, as well as IP and DNS leaks</li>
<li>Analyze application binaries, shared libraries, and browser extensions through the use of debuggers and reverse engineering tools to understand the components of the application and assess their security posture, as well as how they interact with the underlying operating system</li>
<li>Experience writing scripts in languages such as: Python, bash, or Golang to showcase your proof of concept</li>
<li>Provide mentorship and guidance to other team members and share knowledge and findings with them</li>
<li>Good knowledge of:</li>
<ul>
<li>TCP/IP, IDS/IPS, firewalls, WAF, and web content filtering</li>
<li>Cryptography: PGP, SSH, PKI</li>
</ul>
</ul>
<p>The skills listed above are not targeted to one specific platform. The ideal candidate should have strong knowledge and skills in one or more of the following areas:</p>
<ul>
<li>Windows, Linux or macOS thick client applications, and their OS interactions</li>
<li>Cloud security assessment or design review capabilities</li>
<li>Mobile application security assessment capabilities</li>
<li>Identify vulnerabilities in protocol implementations or system architecture</li>
</ul>
<p>Finally, candidates with strong experience in manual source code review and vulnerability research, or a strong track record in this area (e.g. CTFs, bug bounty program activity, published CVEs) are preferred.</p>
<h3>What we offer:</h3>
<ul>
<li>Challenging work in a fun and collaborative environment</li>
<ul>
<li>Everyone’s voice matters and everyone is encouraged to provide input on issues we’re trying to solve or improvements we’re aiming to make. Anyone can bring ideas to the table.</li>
<li>If there is an initiative that matters to you and improves the workplace or our processes, propose it, and we’ll help you drive it to completion</li>
</ul>
<li>Time allocated for regular team building activities, including games and CTFs</li>
<li>Attractive compensation and time-off benefits</li>
<li>Spacious open-concept and centrally located offices</li>
<li>Full-time employment with flexible working hours</li>
<li>Fully stocked pantry with fresh fruit and snacks</li>
<li>Team lunches and company events every quarter</li>
<li>Multicultural teams represented by 30+ nationalities</li>
<li>Reports to the Offensive Security Manager</li>
</ul>

新加坡國際學校 Singapore International School

Senior Application Security Engineer

ExpressVPN

<h3>Senior Application Security Engineer</h3>
<p>If you’re passionate about security and privacy, and want to use your skills to help safeguard private, uncensored access to the internet for millions of customers, we’d love to speak with you. </p>
<p>We provide a highly dynamic working environment where you’ll get to work with some of the best privacy and security focused individuals across multiple disciplines, where room for learning and growth are plentiful. </p>
<p>As a senior individual contributor on our Offensive Security team, you’ll have a broad set of responsibilities including:</p>
<ul>
<li>Prepare and execute penetration testing projects of our assets, services and applications, either individually or as part of a team with members across various geographic locations such as Singapore, Hong Kong, Poland and London.</li>
<ul>
<li>We operate across a wide range of technologies, from client facing applications written in various languages for various platforms, to backend infrastructure and services, and router firmware. We provide an environment where you’ll be exposed to a wide range of technologies that form our <a href="https://www.expressvpn.com/jobs/tech-stack" rel="noopener noreferrer nofollow ugc" target="_blank">tech stack</a>.</li>
<li>You’ll need a strong white-box testing methodology and the ability to identify bugs in source code to go along with good organization and communication skills when delivering penetration tests of our applications and services.</li>
</ul>
<li>Work closely with the engineering teams to provide expert guidance and advice on remediation of identified vulnerabilities</li>
<li>Verify the existence of newly discovered vulnerabilities in our software stack, including triaging and verifying bugs from our bug bounty program and automated scanners, and develop novel attack vectors based on these </li>
<li>Manage and support penetration testing services performed by outside vendors, from project inception, scoping, completion of the assessment, and finally, working with engineering teams to have the identified issues remediated</li>
<li>Bring creative solutions to fruition for solving some of the complex security challenges faced by our organization, and provide security reviews on technical design documents for our solutions</li>
<li>Mentor, guide and support other team members using your strong technical knowledge</li>
<li>Identify inefficiencies in the team’s workflow, suggest solutions and drive them to completion</li>
</ul>
<p>This role focuses strongly on your ability to perform application penetration testing (specifically, desktop and server applications, with some focus on web applications). To be a good fit for this role and efficiently deliver projects, we are looking for individuals with the following skills and abilities.</p>
<p><strong>Suggested Skills</strong></p>
<ul>
<li>Identify vulnerabilities, misconfigurations and deviations from best practices within applications by means of manual source code review, static code analysis, and/or fuzzing using Burp Suite, AFL or similar tooling. We expect vulnerabilities to be identified and exploited up to the levels of OSCP, OSWE or OSED</li>
<li>Experience in identifying and exploiting remote code execution vulnerabilities, as well as IP and DNS leaks</li>
<li>Analyze application binaries, shared libraries, and browser extensions through the use of debuggers and reverse engineering tools to understand the components of the application and assess their security posture, as well as how they interact with the underlying operating system</li>
<li>Experience writing scripts in languages such as: Python, bash, or Golang to showcase your proof of concept</li>
<li>Provide mentorship and guidance to other team members and share knowledge and findings with them</li>
<li>Good knowledge of:</li>
<ul>
<li>TCP/IP, IDS/IPS, firewalls, WAF, and web content filtering</li>
<li>Cryptography: PGP, SSH, PKI</li>
</ul>
</ul>
<p>The skills listed above are not targeted to one specific platform. The ideal candidate should have strong knowledge and skills in one or more of the following areas:</p>
<ul>
<li>Windows, Linux or macOS thick client applications, and their OS interactions</li>
<li>Cloud security assessment or design review capabilities</li>
<li>Mobile application security assessment capabilities</li>
<li>Identify vulnerabilities in protocol implementations or system architecture</li>
</ul>
<p>Finally, candidates with strong experience in manual source code review and vulnerability research, or a strong track record in this area (e.g. CTFs, bug bounty program activity, published CVEs) are preferred.</p>
<h3>What we offer:</h3>
<ul>
<li>Challenging work in a fun and collaborative environment</li>
<ul>
<li>Everyone’s voice matters and everyone is encouraged to provide input on issues we’re trying to solve or improvements we’re aiming to make. Anyone can bring ideas to the table.</li>
<li>If there is an initiative that matters to you and improves the workplace or our processes, propose it, and we’ll help you drive it to completion</li>
</ul>
<li>Time allocated for regular team building activities, including games and CTFs</li>
<li>Attractive compensation and time-off benefits</li>
<li>Spacious open-concept and centrally located offices</li>
<li>Full-time employment with flexible working hours</li>
<li>Fully stocked pantry with fresh fruit and snacks</li>
<li>Team lunches and company events every quarter</li>
<li>Multicultural teams represented by 30+ nationalities</li>
<li>Reports to the Offensive Security Manager</li>
</ul><h3><strong>Hiring process</strong></h3>
<p>When it comes to hiring processes, “rigorous” and “opaque” are often mistakenly conflated. For us, it’s always a mutual exchange, so we think it’s important that candidates have a clear understanding of the process and what we’re looking for. Learn more about the<a href="https://www.expressvpn.com/jobs/hiring-process" rel="noopener noreferrer nofollow ugc" target="_blank"> hiring process</a> by visiting our careers page.</p>
<h3><strong>Benefits</strong></h3>
<p>Health and happiness go hand in hand, and we make every effort to support our team members in all facets of their lives—both inside and outside the office. Learn more about our<a href="https://www.expressvpn.com/jobs#benefits" rel="noopener noreferrer nofollow ugc" target="_blank"> employee benefits</a> by visiting our careers page.</p>
<h3><strong>Before you apply</strong></h3>
<ul>
<li>At the moment, we do not sponsor visas in the <strong>UK </strong>and the <strong>EU</strong>. For <strong>Hong Kong</strong>, we require at least two years of working experience and a university degree in a related field. For<strong> Singapore</strong>, we can only sponsor visas for mid-career or above.</li>
<li>Please upload your resume as a <strong>PDF</strong> and do not include any salary or compensation information in it.</li>
</ul>
<p><em>ExpressVPN is one of the world’s leading providers of online privacy and security services for consumers. Started in 2009, we’ve grown to have millions of active paying customers, a team of more than 700 people worldwide, and a brand recognized by hundreds of millions of people in 18 languages and more than a hundred countries. We see huge growth in our industry, and are gaining market share through strong execution.</em></p>

Samsung SDS America

<p>Samsung SDS America is looking for a keen Security Analyst who will be a part of our Security Monitoring Part team. Our Security Analyst will monitor and respond to security breach incidents as they are detected. He/she will be responsible for protecting computer networks from cyber-attacks and document security breaches.</p> <p>Samsung SDS America (SDSA) is the U.S. subsidiary of Samsung SDS, a global software solutions and IT services company. Samsung SDSA helps organizations optimize their productivity and make smarter business decisions using our enterprise software solutions for secure mobility, HPC managed services, DOOH, and advanced analytics and contextual marketing. We enable our customers in government, financial services, retail, and other industries to drive business and improve their competitive positions in a hyper-connected economy.</p> <p><strong>Responsibilities:</strong></p> <ul> <li>Communication      with the team and cross-functional teams</li> <li>Learn      company processes and follow the guidelines</li> <li>Help      team members with ad hoc reporting</li> <li>Cyber-attack      detection and prevention through security events analysis</li> <li>Generate      and send alert emails to customers</li> <li>Complete      assigned tasks in a timely manner</li> </ul><p><strong>Requirements</strong></p><ul> <li>Basic      knowledge on ICT (OSI 7 layer, TCP/IP, HTTP Protocol, etc.)</li> </ul> <ul> <li>Basic      knowledge on information security (Web Hacking, DDoS, APT, etc.)</li> <li>Willing      to learn and grow in cyber security </li> <li>Able      to work weekends and holiday </li> <li>Available      Work Shift: 9am to 6pm (10am to 7 pm for Daylight saving time) </li> </ul> <p>Preferred<strong>: </strong></p> <ul> <li>Bachelor’s      Degree in Computer science or Information security major </li> </ul> <ul> <li>Experience      in WEB/WAS vulnerability testing and/or malicious code analysis </li> <li>Experience      in operation of SIEM (Splunk, ArcSight, etc.) </li> <li>Security      related certificates (CISSP, CISA, CEH, etc.) </li> </ul><p><strong>Benefits</strong></p><p><strong>Benefits: Medical, Dental, Vision, Prescription, 401k, Paid Time Off (PTO)</strong></p> <p>Samsung SDS America, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity or expression, national origin, disability, status as a protected veteran, marital status, genetic information, medical condition, or any other characteristic protected by law.</p>

Ridgefield Park

Security Analyst

Apply to Code Analysis Cyber Security Jobs in companies remotely and near you. New Code Analysis Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Offensive Security Engineer at Arcadia	Remote Full Time Red Team Manager Incident Response
DevSecOps Engineer at SciTec	Full Time Devsecops DOD Javascript C
Senior Application Security Engineer at Network Guard	Application Security BASH Burp Suite Cloud Code Analysis
Senior Application Security Engineer at ExpressVPN	Application Security BASH Burp Suite Cloud Code Analysis
Security Analyst at Samsung SDS America	Analytics APT Arcsight CEH CISA

Code Analysis Cyber Security Jobs

0 Code Analysis Cyber Security Jobs. Page 1 of 1

5 closed code analysis cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Code Analysis Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Code Analysis Cyber Security Jobs

0 Code Analysis Cyber Security Jobs. Page 1 of 1

5 closed code analysis cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Code Analysis Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter