Pax8

*Note: Please disregard any compensation estimates that may be provided by linkedin or any other source. These statistics are auto-generated and not accurate* 
No matter who you are, Pax8 is a place you can call home. We know there’s no such thing as a “perfect" candidate, so we don’t look for the right "fit" – instead, we look for the add. We encourage you to apply for a role at Pax8 even if you don’t meet 100% of the bullet points. We believe in cultivating an environment with a diversity of perspectives, in hopes that we can all thrive in an inclusive environment. 
We are only as great as our people. And we have great people all over the world. No matter where you live and work, you’re a part of the Pax8 team. This means embracing hybrid- and remote-work whenever possible.  

Position Summary:
The Technical Support Engineer I interacts with our partners through multiple communication channels, providing technical support and escalation assistance on the vendors that we have on our line card. They create product knowledge documentation. The Engineer focuses on the products and technologies that are relevant to the specific team they are assigned to which includes Productivity, Infrastructure, Continuity, and Security.
Essential Responsibilities (includes, but is not limited to):
<ul>
<li>Provide technical partner support
<ul>
<li>Manage daily cases assigned
<ul>
<li>Log into phone and case management systems according to schedule</li>
<li>Resolve routine technical cases in a timely and efficient manner, using technical knowledge of our various Stax solutions</li>
<li>Escalate cases to upper tier engineers and/or vendors when appropriate</li>
<li>Own and oversee escalated support cases until resolution is determined</li>
</ul>
</li>
<li>Assist with development of processes around support in relation to providing customer support and problem resolution</li>
<li>Collaborate with vendors or vendor contacts around cases currently in an escalated state</li>
</ul>
</li>
<li>Maintain product and knowledge specialization
<ul>
<li>Develop and maintain knowledge around products specific to their team</li>
<li>Work with vendors and vendor contacts to drive continuous communications around updates and information that may affect the team</li>
</ul>
</li>
</ul>
Ideal Skills, Experience, and Competencies:
<ul>
<li>At least two (2) years of related experience in the technical support field</li>
<li>MSP specific experience preferred</li>
<li>Strong communication skills around customer service – can defuse situations where partners and/or customers may be frustrated</li>
<li>Excellent analytical and problem-solving skills combined with the ability to provide quick resolution to problems</li>
<li>A self-motivated, strategic creative worker with a drive for executional excellence</li>
<li>Proficient at managing email and team communication through MS Outlook and MS Teams</li>
<li>Ability to build partnerships and work collaboratively with others to meet shared objectives</li>
<li>Ability to make sense of complex, high quantity, and sometimes contradictory information to effectively solve problems</li>
<li>Ability to actively learn through experimentation when tackling new problems, using both successes and failures as learnings</li>
<li>Ability to actively seek new ways to grow and be challenged using both formal and informal development challenges</li>
<li>Ability to anticipate and adopt innovations in business building digital and technology applications</li>
<li>Demonstrated support specific knowledge in the following Pax8 Stax:
<ul>
<li>Security: Admin level experience with the Microsoft Office 365 platform.  Understanding of mail flow, related DNS records, diagnosing mail flow issues, setting up connectors to third party platforms.  Admin level experience on SaaS based email security platforms like Proofpoint, Ironscales, Titan HQ.  Admin level experience with endpoint solutions like SentinelOne and Bitdefender.  Installation, removal, and remediation experience with endpoint solutions.  Basic knowledge around cybersecurity best practices or the desire to learn and dig deeper.</li>
</ul>
</li>
</ul>
Required Education &amp; Certifications:
<ul>
<li>B.A./B.S. in related field or equivalent work experience</li>
<li>Industry specific certifications preferred such as Microsoft 365 Expert Admin, MCSA, Comptia A+, Network+, Security+</li>
</ul>




<h3>Compensation:</h3>
<ul>
<ul>
<li>Qualified candidates can expect a salary beginning at $50,000 or more depending on experience</li>
</ul>
</ul>



#LI-AG1
*Note: Compensation is benchmarked on local Denver Metro area market rates. Qualified candidates in other locations can expect a salary package that may be adjusted based off applicable cost of wages in their respective location.

At Pax8 we believe that your Total Rewards should include a benefits package that shows how much we value our greatest assets. All FTE Pax8 people enjoy the following benefits:
<ul>
<li>Non-Commissioned Bonus Plans or Variable Commission</li>
<li>401(k) plan with employer match</li>
<li>Medical, Dental &amp; Vision Insurance</li>
<li>Employee Assistance Program</li>
<li>Employer Paid Short &amp; Long Term Disability, Life and AD&amp;D Insurance</li>
<li>Flexible, Open Vacation</li>
<li>Paid Sick Time Off</li>
<li>Extended Leave for Life events</li>
<li>RTD Eco Pass (For local Colorado Employees)</li>
<li>Career Development Programs</li>
<li>Stock Option Eligibility</li>
<li>Employee-led Resource Groups</li>
</ul>

Pax8 is the leading value-added cloud-based SaaS distributor, simplifying the cloud journey for our partners by integrating technology, business intelligence and proactive service to deliver an unparalleled experience. Serving thousands of partners through the indirect sales channel, our mission is to be the world’s favorite place to buy cloud products. We are a fast-growing, dynamic and  high-energy startup organization, allowing you to make a meaningful impact on the business. Culture is important to us, and at Pax8, it’s business, and it IS personal. We are passionate, creative and humorously offbeat. We work hard, keep it fun, and expect the best. 
 
Pax8 not only wins numerous awards in our field but we have time and again been voted among the best places to work in Denver. We are committed to our goal of being the #1 employer of choice!
 
We Elev8 each other. We Advoc8 for our partners. We Innov8 continuously. We Celebr8 life. 
 
 
 
Pax8 is an EEOC Employer.

Greenwood Village

Technical Support Engineer I- Endpoint Security

Avertium

Avertium is the security partner that companies turn to for end-to-end Cybersecurity solutions that attack the chaos of the cybersecurity landscape with context. By fusing together human expertise and a business-first mindset with the right combination of technology and threat intelligence, Avertium delivers a more comprehensive, more programmatic approach to cybersecurity - one that drives action on the ground and influence in the boardroom. That's why over 1,200 mid-market and enterprise-level organizations across 15 industries turn to Avertium when they want to be more efficient, more effective, and more resilient when waging today's cyber war. Show no weakness.®The DFIR Consultant will contribute to Avertium’s DFIR practice, implement and execute best practices for incident handling, investigation and reporting, continuously develop the skills and expertise required to achieve customer objectives, and work with customers and other partners to respond to incidents, identify root causes, recommend solutions, and recover compromised environments.
<h3>Responsibilities:</h3>
<ul>
<li>Lead incident response engagements. Understand client requirements, coordinate the incident response team and liaising with client’s business stakeholders and technical teams.</li><li>Liaise with client third parties including legal, insurance and service providers, and provide guidance and subject matter expert advice to customer</li><li>Advise clients on business, technical, regulatory and reputation risk.</li><li>Advise clients on strategies to contain incidents and limit business impact of cyber incidents</li><li>Advise other incident response team members on strategies and techniques to accomplish client objective</li><li>Collect technical evidence from clients’ environments to prepare for forensic investigations</li><li>Conduct forensic investigations to determine the scope and impact of cyber incidents</li><li>Determine root cause of incidents using available evidence and analytical tools</li><li>Determine scope of data access and exfiltration</li><li>Provide recommendations and guidance to successfully evict threat actors from customer environments</li><li>Gather intelligence on threat actors to inform recommended containment, remediation and recovery actions</li><li>Develop threat intelligence reports and briefings in support of Avertium’s CTI and MSS groups</li><li>Manage the recovery of clients’ IT infrastructure during and after cyber attacks</li><li>Brief clients’ management, IT teams and third parties during and after cyber attacks</li><li>Prepare and deliver post-incident reports to client teams</li><li>Conduct threat hunts within EDR and SIEM tools for managed detection and response customers</li><li>Support team members in deeply technical investigations, provides guidance, and practical advice</li><li>Provides thought leadership on the design, and implementation of new detection strategies</li><li>Stays relevant with cyber security threats, counter measures and associated technologies</li><li>Participate in an on-call rotation to provide 24X7X365 client incident coverage</li><li>Identify opportunities to position additive professional and managed services to clients</li></ul>
<h3>Qualifications for Success:</h3>
<ul>
<li>Minimum of Bachelor's Degree in computer science, telecommunications management, electrical engineering, or a related field or have 5+ years of experience with broad background in Cyber Security specifically relating to digital forensics and response.</li><li>Minimum of 3 years of direct experience in digital forensics and incident response</li><li>Dynamic team member able to manage multiple projects simultaneously</li><li>Highly capable communicator able to relate technical concepts to business stakeholders</li><li>Advanced cyber certifications including GCIH, CISSP, CISA, CEH, ECIH and/or technology-specific certifications such as MCSE, CCNA are preferred</li><li>Skills:</li><li>Conversant in many areas of cyber security and learns new concepts quickly</li><li>Proven subject matter ability in relevant areas, such as incident response, intrusion analysis, incident handling, malware analysis (including network attack vectors and YARA RegEx), web security or security engineering</li><li>Strong working knowledge of common security tools, such as a SIEM, AV, scanners, proxies, WAF (policies rules, process and workflow), netflow, IDS or forensics tools</li><li>Strong interpersonal and leadership skills when building credibility as a peer as well as in presenting analytical data effectively to varied (including executive) audiences</li><li>Strong understanding of the cyber kill chain, attacker tactics, techniques, and procedures, and the MITRE ATT&amp;CK Framework</li><li>Strong understanding of cloud technologies and related security best practices. Experience handling security incidents in the cloud.</li><li>Firm understanding of endpoint and network-based security solutions, including EDR, firewalls, proxies and email security gateways</li><li>A solid grasp of networking and core Internet protocols (e.g. TCP/IP, DNS, SMTP, HTTP, SMB, and distributed networks)</li><li>Proficient in network forensics including PCAP analysis, network security, and IDS/IPS analysis</li><li>Able to recognize common attack vectors such as recon scans, botnet, malware, command and control activity (C2), worms, trojans, and viruses</li><li>Experience with common operating systems, such as Linux, both from a forensic and threat hunting point of view.</li><li>Strong understanding of relevant laws and regulations (e.g. HIPAA, CCPA, GDPR, PCI, etc) as related to cyber incident handling and remediation</li><li>#LI-CS1</li></ul>In addition to a career in the challenging world of cyber security, Avertium offers competitive salaries, full benefits, unlimited paid time off, participation in 401(k), and opportunities for professional growth and development. We offer the opportunity to work with cutting-edge security technologies in a stimulating work environment.Avertium provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

United States

Digital Forensics &amp; Incident Response Consultant | Remote, USA

PEAK6

Apex Fintech Solutions (AFS) powers innovation and the future of digital wealth management by processing millions of transactions daily, to simplify, automate, and facilitate access to financial markets for all. Our robust suite of fintech solutions enables us to support clients such as Stash, Betterment, SoFi, and WeBull, and more than 20 million of our clients' customers. 
Collectively, AFS creates an environment in which companies with the biggest ideas in fintech are empowered to change the world. We are based in Dallas, TX and also have offices in Austin, New York, Chicago, Los Angeles, Portland, and Belfast. 
If you are seeking a fast-paced and entrepreneurial environment where you'll have the opportunity to make an immediate impact, and you have the guts to change everything, this is the place for you. 
AFS has received a number of prestigious industry awards, including:
<ul>
<li>2021, 2020, 2019, and 2018 Best Wealth Management Company - presented by Fintech Breakthrough Awards</li>
<li>2021 Most Innovative Companies - presented by Fast Company</li>
<li>2021 Best API &amp; Best Trading Technology - presented by Global Fintech Awards</li>
</ul>


JOB: Security Operation Center (SOC) Analyst
The Role
Seeking a Security Operation Center (SOC) Analyst to join our Cybersecurity team.
The SOC Analyst will be responsible for day-to-day security threat monitoring, analysis, and response. You will manage security incidents and review security alerts, determine if the security events are false positives, true positive, or false negatives and work with incident responders on known or suspected security threats. The Analyst will work on threat intelligence gathering and integration, forensics, and incident response that adhere to best practices and recognized control frameworks. 
Primary Responsibilities
<ul>
<li>Responsible for working in Security Operation Center (SOC) team environment.</li>
<li>Investigate incidents using SIEM and UEBA technologies, packet captures, reports, data visualization, and pattern analysis.</li>
<li>Analyze, escalate, and assist in remediation of critical information security incidents.</li>
<li>Improve and challenge existing processes and procedures in a very agile and fast-moving information security environment.</li>
<li>Able to participate in an on-call rotation.</li>
<li>Perform real-time alert monitoring and risk mitigation.</li>
<li>Provide analysis and trending of security log data from many heterogeneous security devices across different layers.</li>
<li>Provide Incident Response (IR) support when analysis confirms the actionable incident.</li>
<li>Provide threat and vulnerability analysis as well as security advisory services.</li>
<li>Analyze and respond to previously undisclosed software and hardware vulnerabilities.</li>
<li>Investigate, document, and report on information security issues and emerging trends.</li>
<li>Integrate and share information with other analysts and teams.</li>
<li>Participate in security projects and assist network operations and engineering teams.</li>
</ul>

Qualifications
<ul>
<li>Bachelor's degree in a related field (Security, Forensics, or Computer Science is preferred)</li>
<li>5-7 years of overall IT professional experience or 3-4+ years of work experience Tier 1 and Tier 2 level security operations experience.</li>
<li>Desirable | Proven experience as a security and/or complianceanalyst, incident handler/responder, security engineer, or penetration tester.</li>
<li>Knowledge of security methodologies, processes (i.e., Cyber Kill Chain/Diamond Models, and the MITRE ATT&amp;CK framework).</li>
<li>Knowledge of technical security solutions (firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, AV, DLP, proxies, network behavioral analytics, endpoint, and cloud security).</li>
<li>In-depth knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS and HTTP Protocols, network analysis, and network/security applications.</li>
<li>Good knowledge of common malware threats and attack methodologies.</li>
<li>Desirable Professional Certifications: GCIA, GCIH, GCFE, GCFA, Security+, CCNA CyberOps, OSCP, GPEN, GWAPT, CEH, </li>
</ul>
Core Competencies
<ul>
<li>Accountable for the successful completion of multiple, individual projects simultaneously.</li>
<li>Communicate effectively by contributing significantly to the development and delivery of a variety of written and visual documents for diverse audiences.</li>
<li>Manage change and demonstrate adaptability by adjusting priorities or processes and approaching as needs dictate.</li>
<li>Work independently as a team representative of Information Security as well as showing excellent teamwork skills.</li>
<li>Ability to develop thorough documentation and operational playbooks, in addition, to suggest alert enhancements to improve detection capability.</li>
<li>Fundamental knowledge of network and system technologies and practices</li>
</ul>
Teams Culture &amp; Values
<ul>
<li>The Cybersecurity Team is comprised of independent thinkers and doers who can positively impact our clients and shape Apex Fintech Solutions business and security posture.</li>
<li>The Cybersecurity Team to build and maintain a collaborative environment and engaging work—guided by Open and Honest Communication; Teamwork and Collaboration; Involving Everyone; Leaders Who Serve; and Personal Accountability</li>
</ul>


Apex currently requires all employees as a condition of employment to either be fully vaccinated for COVID-19 or submit to regular testing. The CDC defines "fully vaccinated" as two weeks after the second dose for Pfizer and Moderna, and two weeks after the single dose of Johnson &amp; Johnson. Apex will also require proof of vaccination and/or testing. Apex will also consider requests for exemption from these requirements as a reasonable accommodation for medical reasons or sincerely held religious beliefs. *Please note this requirement is ONLY for US Offices.

Dallas Castle

Security Operations Analyst

Stitch Fix

Lead Vulnerability Management Engineer
REMOTE - USA
<h3>ABOUT ENGINEERING</h3>
Our team is made up of people from varied backgrounds, including engineers who built and scaled organizations like Google, Netflix, eBay, GitHub, and LivingSocial. We build modern software with modern techniques like TDD, continuous delivery, DevOps, and service-oriented architecture. Cross-functional partnerships are deeply meaningful to us and are how we’ve built up immense trust with the people running the business.  We focus on high-value products that solve clearly identified problems but are designed in a sustainable way so that value continues to deliver in the long term. In fact, some of our proudest moments come from solving business problems without writing a line of code.
<h3>ABOUT THE ROLE</h3>
You will deliver secure products and solutions—not just features—by developing an understanding of how Stitch Fix works. We trust you to focus your time and efforts where they are needed most. Your commitment to applying security to business and technology challenges in clean &amp; innovative ways will make you a trusted advisor to your partners and their teams. You will own projects and influence our direction.

You won’t do this alone. Your team will collaborate with business partners to define product requirements, plans, and deliverables. You will work with team members to take advantage of learning and growth opportunities in tech and product through real day-to-day work. You will impact the business in tangible, visible ways and always have a seat at the table.

We are looking for a Principal Vulnerability Management Engineer for our Information Security team. Our team members are given a great deal of autonomy in the pursuit of keeping Stitch Fix secure.  You will demonstrate strong communication skills and you will be primarily responsible for the continued evolution of our detection capabilities, the integration of security tools used internally by the Stitch Fix Information Security team, and the advancement of our vulnerability management program.

We’re looking specifically for folks who place an emphasis on usable security. Stitch Fix is a fast-growing company, and our security program needs to be able to keep pace with that growth while not disrupting innovation. You will help us improve our vulnerability detection capabilities and risk mitigation of network level issues. You will prototype, implement, test, deploy and maintain stable engineering solutions. You will present possible technical solutions to various stakeholders, clearly explaining your decisions and how they address real user needs, incorporating feedback in subsequent iterations.

We cannot succeed without creative security engineers. Your cross-functional team will propose and build solutions for warehouse process improvement, workforce management, logistics decision-making, and workflow optimization.
<h3>REQUISITE SKILLS AND EXPERIENCE</h3>
<ul>
<li>Building and growing a next-generation vulnerability management program</li>
<li>Identifying the right combination of people, process and technology to improve our detection and remediation capabilities</li>
<li>Conducting scheduled, targeted (in response to advisories and remediation verification) and ad-hoc vulnerability scans and investigate and validate risk levels associated with vulnerabilities identified </li>
<li>Providing remediation guidance and recommendations and coordinate with the Technology organization, IT and other teams as needed to provide oversight to the remediation and/or mitigation of enterprise vulnerabilities</li>
<li>Thorough understanding of network defense technologies, TCP/IP networking, Active Directory, DHCP, DNS, network security monitoring tools, secure engineering principles and technical security testing methodologies</li>
<li>Extensive Windows, Mac, and Linux experience including deep knowledge of file system layout and common configuration deficiencies</li>
<li>Thorough understanding of desktop, server, application, database, and network security hardening principles and practices for threat prevention</li>
<li>Experience working as part of a patch management process and a familiarity with patching tools (i.e. SCCM, JAMF, VMWare Airwatch, etc.)</li>
<li>Provide recurring and ad-hoc vulnerability reports upon request</li>
<li>Reviewing and providing feedback on network level changes that bring security vulnerabilities</li>
<li>Partner with warehouse and IT teams to manage vulnerabilities in our robotics and automation platforms</li>
<li>Familiarity with DevOps (Docker, AWS, microservices) and launching and maintaining new services.</li>
<li>The ability to learn new technologies quickly.</li>
<li>Capable of working with shifting requirements and collaborating with internal and external stakeholders.</li>
<li>Understand git merges, rebases, and conflict resolution.</li>
<li>Communicate clearly, efficiently, and thoughtfully. We’re a highly-distributed team, so written communication is crucial</li>
</ul>
<h3>ABOUT THE TECHNOLOGY</h3>
Technologies we rely on to pursue solutions to business problems include:
<ul>
<li>HashiCorp Terraform</li>
<li>Python</li>
<li>Ruby</li>
<li>Go-lang</li>
<li>Brinqa / Kenna Security </li>
<li>Jira </li>
<li>Prisma Cloud Compute</li>
<li>AquaSec CSPM</li>
<li>AWS / Lambda</li>
</ul>
Even if you already have experience with these tools, you'll have the chance to get even better with them. And if you don't already use at least a few of these tools, we will help you learn and become effective with them.
<h3>YOU’RE EXCITED ABOUT THIS OPPORTUNITY BECAUSE...</h3>
<ul>
<li>We work collaboratively as a distributed team—we are a primarily remote team and we use GitHub, Slack, and video conferencing extensively to collaborate.</li>
<li>You will have the opportunity to participate in creating prototypes and exploring alternative designs—we value pull requests, one-pagers, and screencasts to develop rapid prototypes that demonstrate new features.</li>
<li>We view Security as a product which requires a purposeful strategy through an overarching vision of how security can support the organization’s survival because computers are somewhat terrible but necessary for success.</li>
<li>You are a Problem Solver. Ultimately, anyone can say “no” to something —but just saying “no” isn’t solving a problem. Figuring out a compromise, like preserving or even improving UX while still ensuring an organization’s security, is a hard problem — the type of problem which should be the most intellectually fulfilling.</li>
</ul>
We use these tools and techniques help us get the job done and we’re excited to share our expertise with new members of the team. You will have the opportunity to help us continue to adopt effective practices and technologies and explore their full potential.
<h3>WE ARE EXCITED ABOUT YOU BECAUSE...</h3>
<ul>
<li>YOU ARE ENTHUSIASTIC ABOUT TECHNOLOGY. You will collaborate to build solutions using the appropriate tools and contribute to design and architecture across multiple systems. You want to build on your experience and help us to adopt new technologies. You'll learn from us, and we'll learn from you. You care deeply about the experience you are delivering.</li>
<li>YOU HAVE A PRODUCT-FOCUSED MINDSET. Our team works together to deliver projects that use technology to solve real business problems. Your team members and business partners will seek out your opinion on how the product you’re building should work. You aren’t afraid to dig deep and ask the tough questions of our customers, company, and executive team.</li>
<li>YOU ARE INTERESTED IN DEVELOPING YOUR LEADERSHIP QUALITIES. You should believe in what you’re doing and inspire others around you to be their best selves? Do you feel ownership for the projects you are working on?</li>
<li>YOU HAVE DEEP RESPECT FOR YOUR CRAFT. We are dedicated to building software sustainably, using modern techniques. You're always looking for more and better ways to write software, and enthusiastic about sharing them with your team.</li>
<li>YOU ARE RESPECTFUL, EMPATHETIC, AND HUMBLE. We want you to take your work seriously and be open to personal and professional growth. Successful engineers show everyone respect and consideration.</li>
</ul>
<h3>YOU'LL LOVE WORKING AT STITCH FIX BECAUSE WE...</h3>
<ul>
<li>Are a successful, vibrant, fast-growing company</li>
<li>Are a technologically and data-driven business.</li>
<li>Are at the forefront of tech and fashion, redefining shopping for the next generation.</li>
<li>Are passionate about our clients and live/breathe the client experience.</li>
<li>Get to be creative every day.</li>
<li>Have a smart, experienced, and diverse leadership team that wants to do it right &amp; is open to new ideas.</li>
<li>Believe in autonomy &amp; taking initiative.</li>
<li>Have sunny offices in downtown San Francisco, CA, or your home :)</li>
<li>Full support for remote work—and you get to visit our SF office every few months to connect with your peers and partners.</li>
<li>Offer transparent, equitable, and competitive compensation based on your level to help eliminate bias in salaries, as well as equity and comprehensive health benefits.</li>
<li>Are serious about our commitment to life-work balance, and have generous parental leave policies.</li>
</ul>
<h3>ABOUT STITCH FIX</h3>
At Stitch Fix, we’re about personal styling for everybody and we believe in both a service and a workplace where you can be your best, most authentic self. We’re the first fashion retailer to combine technology and data science with the human instinct of a Stylist to deliver a deeply personalized shopping experience. This novel juxtaposition attracts a highly diverse group of talented people who are both thinkers and doers. All of this results in a simple, powerful offering to our customers and a successful, growing business serving millions of men, women, and kids. We believe we are only scratching the surface on our opportunity, and we’re looking for incredible people like you to help us carry on that trend.<a href="https://www.cigna.com/legal/compliance/machine-readable-files" rel="noopener noreferrer nofollow ugc" target="_blank">This link</a> leads to the machine readable files that are made available in response to the federal Transparency in Coverage Rule and includes negotiated service rates and out-of-network allowed amounts between health plans and healthcare providers. The machine-readable files are formatted to allow researchers, regulators, and application developers to more easily access and analyze data.

Lead Vulnerability Management Engineer

Cloudflare, Inc.

About Us

At Cloudflare, we have our eyes set on an ambitious goal: to help build a better Internet. Today the company runs one of the world’s largest networks that powers approximately 25 million Internet properties, for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. 
We realize people do not fit into neat boxes. We are looking for curious and empathetic individuals who are committed to developing themselves and learning new skills, and we are ready to help you do that. We cannot complete our mission without building a diverse and inclusive team. We hire the best people based on an evaluation of their potential and support them throughout their time at Cloudflare. Come join us! 
<h4>About the Department</h4>
Emerging Technologies &amp; Incubation (ETI) is where new and bold products are built and released within Cloudflare.  Rather than being constrained by the structures which make Cloudflare a massively successful business, we are able to leverage them to deliver entirely new tools and products to our customers.  Cloudflare’s edge and network make it possible to solve problems at massive scale and efficiency, which would be impossible for almost any other organization.

About the Role
Cloudflare is a system spanning the globe, on a mission to make the internet better, safer, and more powerful everyday.  To help fulfill this mission, we are seeking a talented Threat Researcher to join us in growing our Threat Intelligence Organization, where you will be instrumental in building a proactive and threat intelligence-driven approach to protecting Cloudflare and its customers from sophisticated and ever-evolving global threat actors.  This position requires an innovative, OPSEC-savvy, self-starting, and detail-oriented problem solver with a passion for identifying, tracking, and defeating sophisticated cyber threats.
As a Threat Researcher, your analytical thinking and quick action will be the key to our success.  You will serve an integral role in the discovery and analysis of cyber threat adversaries, their Tactics, Techniques, and Procedures (TTPs), along with applying knowledge of transnational issues and geopolitical developments to understand adversary actions and anticipate their next moves.  In this position, you will develop and maintain sources of unique threat intelligence to enable analysis, as well as examine and mitigate threats in realtime, leveraging emerging technologies to build detections that protect millions of people from attack.  You will work in close collaboration with team members to develop new and innovative ways to present and interact with our unique insights, ranging from completion of finished intelligence products to development of advanced tactical and strategic countermeasures.  
Strong candidates will have excellent OSINT research skills, firsthand experience in Threat Intelligence (in particular, familiarity with advanced persistent threats), a strong technical foundation, practical knowledge of intelligence report writing, and ability to work well in a group of distributed remote team members.

Examples of desirable skills, knowledge and experience
<ul>
<li>Advanced communication (written and verbal) and presentation skills, both internally to CXO level and externally to customers</li>
<li>Strong knowledge in technical reporting and editing</li>
<li>Experience in one of the following: Packet, and/or Metadata analysis</li>
<li>Experience in network and/or host-based intrusion analysis</li>
<li>Understanding of the latest security trends as they relate to cyber threat adversary detection, response, and mitigation</li>
<li>Experience using a comprehensive data analysis platform and rule configuration, with ability to recognize patterns and transform data into useful information</li>
<li>Understanding of the cyber threat landscape, cyber intelligence, the intelligence lifecycle, and working knowledge of threat actors and their techniques</li>
<li>Experience tracking and analyzing cyber campaigns utilizing technical Indicators of Compromise (IOCs)</li>
<li>Ability to synthesize technical information and document it, in both a technical and non-technical manner, through written, graphical and verbal representation</li>
<li>One of the following:
<ul>
<li>BS in Computer Science, Information Technology, Information Security, Computer Security, Information Systems or related discipline, OR</li>
<li>Military training and experience in cyber intelligence, general intelligence studies, security studies, or related discipline</li>
</ul>
</li>
<li>At least 2 years experience in one or more of the following:
<ul>
<li>Intrusion analysis</li>
<li>Cyber threat hunting</li>
<li>Cyber threat intelligence</li>
<li>Incident response</li>
<li>Penetration testing</li>
<li>Network defense</li>
<li>Endpoint forensics</li>
<li>Malware analysis</li>
</ul>
</li>
<li>Desire to learn and improve</li>
<li>Willing and eager to share knowledge, and mentor</li>
</ul>

Bonus Points
<ul>
<li>Extensive knowledge of an advanced persistent threat (APT) group(s)</li>
<li>Experience in netflow analysis</li>
<li>Experience analyzing, tracking and defending against cyber threat campaigns</li>
<li>Familiarity with regular expressions and their practical application in tracking malicious activity</li>
<li>Working knowledge of SQL and devising SQL queries</li>
<li>Experience with detection development using YARA</li>
<li>Prior intelligence community background</li>
</ul>What Makes Cloudflare Special?
We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.
<a href="https://blog.cloudflare.com/protecting-free-expression-online/" rel="noopener noreferrer nofollow ugc" target="_blank">Project Galileo</a>: We equip politically and artistically important organizations and journalists with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.
<a href="https://www.cloudflare.com/athenian/" rel="noopener noreferrer nofollow ugc" target="_blank">Athenian Project</a>: We created Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration.
<a href="https://blog.cloudflare.com/tag/path-forward/" rel="noopener noreferrer nofollow ugc" target="_blank">Path Forward Partnership</a>: Since 2016, we have partnered with Path Forward, a nonprofit organization, to create 16-week positions for mid-career professionals who want to get back to the workplace after taking time off to care for a child, parent, or loved one.
<a href="https://1.1.1.1/" rel="noopener noreferrer nofollow ugc" target="_blank">1.1.1.1</a>: We released<a href="https://1.1.1.1/" rel="noopener noreferrer nofollow ugc" target="_blank"> 1.1.1.1</a> to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our<a href="https://developers.cloudflare.com/1.1.1.1/privacy/public-dns-resolver" rel="noopener noreferrer nofollow ugc" target="_blank"> privacy commitment</a> and ensure that no user data is sold to advertisers or used to target consumers.
Sound like something you’d like to be a part of? We’d love to hear from you!
This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.
Cloudflare is proud to be an equal opportunity employer.  We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness.  All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law. We are an AA/Veterans/Disabled Employer.
Cloudflare provides reasonable accommodations to qualified individuals with disabilities.  Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.  If you require a reasonable accommodation to apply for a job, please contact us via e-mail at hr@cloudflare.com or via mail at 101 Townsend St. San Francisco, CA 94107.

Germany

Threat Researcher

Apply to DNS Cyber Security Jobs in companies remotely and near you. New DNS Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Technical Support Engineer I- Endpoint Security at Pax8	Remote Full Time Comptia Cloud DNS
Digital Forensics & Incident Response Consultant \| Remote, USA at Avertium	Remote Full Time Forensic Consultant Incident Response
Security Operations Analyst at PEAK6	Full Time Soc Analyst Analyst Incident Response GCFA
Lead Vulnerability Management Engineer at Stitch Fix	Remote Full Time Windows Active Directory Automation
Threat Researcher at Cloudflare, Inc.	Remote Full Time Incident Response APT Cloudflare

DNS Cyber Security Jobs

0 DNS Cyber Security Jobs. Page 1 of 1

5 closed dns cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

DNS Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

DNS Cyber Security Jobs

0 DNS Cyber Security Jobs. Page 1 of 1

5 closed dns cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

DNS Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter