Rubrik

The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information. 
Where can you make an impact?
Rubrik is seeking an Enterprise Security Engineer.  In this role, you will be responsible for ensuring that Rubrik's Corporate IT services are designed and implemented to the highest possible security standards.  You will partner with a variety of stakeholders across the business to achieve successful security outcomes in customer experience and productivity deliverables.
What you'll be doing:
<ul>
<li>Partner with all teams across Rubrik to create secure corporate infrastructure design and deployment architectures utilizing threat models and risk analysis documentation</li>
<li>Define organization policies for secure cloud design models within enterprise, hybrid, and public cloud environments including VMware, AWS, Azure and GCP</li>
<li>Work with development teams, operations, governance, and other stakeholders to draft security standards and implement monitoring, alerting, and governance</li>
<li>Design and implement standards across Identity (Okta), Endpoint (Windows, MacOS, Linux), Secrets Management (Vault, Lastpass) and Business Applications (Salesforce)</li>
<li>Support incident responders in analyzing applicable threats, vulnerabilities, controls and residual risks</li>
<li>Analyze and harden existing applications, infrastructure, automation, and deployment processes including CircleCI and Github</li>
<li>Coordinate with security researcher community for submitted vulnerabilities with issues and remediation of threats in both hybrid and public cloud environments</li>
</ul>
Experience you'll need:
<ul>
<li>Bachelor’s degree required; BS or MS in Computer Science, Information Technology, or a related field</li>
<li>6+ years experience in enterprise security, with hands on experience in administration and design across Windows, Mac, Okta and public cloud infrastructure</li>
<li>2+ years experience in VMWare and/or Network security modeling</li>
<li>Broad knowledge of enterprise attack vectors and exploits in both end-user and IT Apps</li>
<li>Subject matter expertise in business applications, endpoint and Identity management</li>
<li>Deep understanding of endpoint systems, corporate networking including wi-fi and IT application systems (Salesforce, Mulesoft, Lastpass, etc)</li>
<li>Programming experience in Python, Go or Java</li>
<li>Security expertise in at least one major public cloud provider (AWS, GCP, Azure) </li>
<li>Experience with deploying and securing Enterprise applications and environments at scale</li>
<li>Knowledge of regulatory guidelines and standards such as SOC2, ISO 27001, FedRAMP, etc.</li>
<li>Understanding of corporate security maturity model frameworks and how to apply them</li>
<li>Strong written and verbal communication skills</li>
</ul>About Rubrik:
Rubrik, the Zero Trust Data Security Company™, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including Zero Trust Data Protection, Ransomware Investigation, Incident Containment, Sensitive Data Discovery, and Orchestrated Application Recovery. This means your data is ready so you can recover the data you need, and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.
We are <a href="https://www.rubrik.com/lp/analyst-reports/gartner-mq" rel="noopener noreferrer nofollow ugc" target="_blank">a leader in data security</a>, have been recognized as as a Forbes Cloud 100 Company, named as a LinkedIn Top 10 Startup and are proud to have earned Great Place to Work® Certification™. There has never been a more exciting time to join Rubrik, and our future is even brighter. The work you do will help propel our next chapter of growth as you do the best work of your career.
<a href="https://www.linkedin.com/company/rubrik-inc/mycompany/verification/" rel="noopener noreferrer nofollow ugc" target="_blank">Linkedin</a> | <a href="https://twitter.com/rubrikinc" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a> | <a href="https://www.instagram.com/lifeatrubrik/" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> | <a href="https://www.rubrik.com" rel="noopener noreferrer nofollow ugc" target="_blank">Rubrik.com </a>| 
Diversity, Equity &amp; Inclusion @ Rubrik: 
At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.
Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation. This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.
Our DEI strategy focuses on three core areas of our business and culture:
<ul>
<li>Our Company: Build a diverse company that provides equitable access to growth and success for all employees globally. </li>
<li>Our Culture: Create an inclusive environment where authenticity thrives and people of all backgrounds feel like they belong.</li>
<li>Our Communities: Expand our commitment to diversity, equity, &amp; inclusion within and beyond our company walls to invest in future generations of underrepresented talent and bring innovation to our clients.</li>
</ul>
<h5>Equal Opportunity Employer/Veterans/Disabled: Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.</h5>
<h5>Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. </h5>
<h5>Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</h5>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW - POSTER SUPPLEMENT</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_English_unformattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">PAY TRANSPARENCY NONDISCRIMINATION PROVISION</a>
<a href="https://www.dol.gov/sites/dolgov/files/olms/regs/compliance/eo_posters/employeerightsposter2page_19final.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS</a>

Palo Alto

Sr Enterprise Security Engineer II

Amazon.com

Job summaryThe Devices and Services (D&amp;S) Trust &amp; Security team works to ensure that our devices and services are designed and implemented to the high standards required to maintain and enhance customer trust. Security and Privacy are paramount to maintaining trust and we need to continue to build trusted products, maintain and operate trusted environments, and advocate trust to customers and stakeholders. The team develops security automation for devices &amp; services, performs penetration testing, and handles and tracks incident responses to resolution. The Trust team is responsible for enabling business growth and innovation while honoring data policies and controls that help protect customer trust. We are responsible for defining and executing on the security and privacy requirements across the entire organization.Are you interested in being part of a top-notch security team covering all Amazon consumer devices (including hardware and low-level functionality) as well as key Amazon services supporting our consumer devices (such as Computer Vision, AppStore, Device Registration, Kindle, etc.)? Amazon Lab126 is looking for skilled and exceptional security researchers to find security issues in our products to better protect our customers. Your work directly impacts the way our customers, teams, and business across the globe get things done. If you care deeply about keeping customers safe, then we have a job for you! You can learn more about security at Lab 126 here: https://www.youtube.com/watch?v=k0UTTxzeGogKey job responsibilitiesIn this role, you will be part of a dedicated team of passionate security engineers performing vulnerability research to detect high impact issues in Amazon consumer products. You will work on identifying vulnerabilities in diverse product stacks spanning multiple architectures, SoCs to identify vulnerabilities in low level embedded software, operating systems, applications, peripherals or web client, web sites, and cloud services as well as introduce defenses to raise the effort for attackers. You will identify detective and preventative technology and automation to reduce the impact of security threats in advance and be directly involved in our response to critical security issues. You will work with security stakeholders within the company, security research community and partner organizations across the ecosystem to address security issues collaboration with product teams and to do the right thing for our organization. You will lead gap analysis efforts to identify learnings to improve product security. You're well-known for your excellent prioritization skills as well as your ability to communicate at all levels of an organization. If you're passionate about finding security bugs, analyzing security exploits, and enjoy seeing your work's impact across Amazon consumer products and services, then this position is for you. A day in the life• Perform vulnerability detection using variety of automated static, dynamic analysis as well as custom tooling (e.g. static analyzers, fuzzers, scanners, analyzers, etc.) to identify device or web services, vulnerabilities and develop proof of concept exploits.• Conduct campaigns to identify vulnerabilities in various platforms, technology stacks across devices (Android based, real time operating systems, protocols - Wi-Fi, BT, RF) and services (web services, cloud infrastructure and mobile applications)• Advocate for raising security bar for product teams by recommending security fixes, technical solutions and designs to enable product teams to mitigate classes of security vulnerabilities.• Perform analysis of publicly reported vulnerabilities and attacks to synthesize areas of proactive focus spanning product stacks.• Develop detailed technical documentation describing identified vulnerabilities, associated impact as well as recommendations for communication with internal engineering stakeholders as well as leadership• Perform analysis of reported issues and work with product, partner and vendor teams to remediate vulnerabilities. <h3>Basic Qualifications</h3>• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cyber Security or a related field• 7+ years relevant work experience• 2+ year of development experience in C, C++, assembly (x86, x86-64, ARM) and/or Java• Experience with at least one scripting language (e.g. python, ruby, bash, JavaScript, Go)<h3>Preferred Qualifications</h3>Master’s degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent. Candidates with experience in at least one of the areas is preferred. • Experience in performing vulnerability research and reporting vulnerabilities in widely used software or sharing contributions via public research, blogging, and presentations with the security community. • Experience in embedded/IoT device security or web services security specifically, with experience of performing software security audits, vulnerability discovery and analysis. • Experience with common software security vulnerabilities and methods of exploitation, such as memory corruption, privilege escalation, web application exploitation, file format vulnerabilities, protocol-based weaknesses, etc.• Experience with static and dynamic tools for vulnerability detection and exploit mitigation techniques• Experience with extracting firmware, reverse engineering a variety of hardware and software, including firmware, operating systems, and applications, binary analysis and proof of concept exploit development. • Knowledge of common wireless connectivity protocols with focus on protocol or implementation security vulnerabilities (e.g. Bluetooth, Wi-Fi, 802.15.4, Zigbee) or hardware security mechanisms, including secure boot, trusted execution environments or operating system internals and associated security issues with emphasis on Linux, Android and common RTOS environments• Experience with analysis tools such as IDA, Ghidra, Radare, Burp Suite, and network traffic dissectors such as Wireshark.o Experience with service-oriented architecture, web services security, AWS/cloud infrastructure securityo Foundation in, and in-depth technical knowledge of, security engineering, computer and network security, authentication, security protocols and applied cryptography.o Knowledge of network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)keyword:digitalsecurityAmazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.Pursuant to the Los Angeles Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

California

Senior Security Vulnerability Researcher

Zwift

Location:  Long Beach, CA (remote selected US locations)
Seniority Level:  Mid-Senior, 
About the role and about You:
The Zwift Information Security Team is looking for a Cloud Security Engineer to help build and growsecurity operations for our cloud based services platform.
You will champion security due diligence efforts, plan security integrations, and collaborate with cloud and engineering teams to ensure resilientsecurity-focused architecture. You will partner with key project stakeholders to review technology proposals, identify key security impacts, implement actionable plans to achieve remediation of security threats, and dive deep into tactical security aspects of a cloud-based containerized service built from the ground up.
Cloud Security Engineers oversee and influence cross-functional teams with a keen focus on security due diligence and integration.Successful Cloud Security Engineers at Zwift are self-starters, able to work autonomously in ambiguous environments, and collaborative natural problem solvers with experience automating and integrating disparate technologies.
You should have strong problem-solving skills, excellent communication skills, a deep technical understanding of modern cloud and containerized security threats, the ability to influence people from customers to managers through technical solutions, and the desire to be an integralcontributor to securing Zwift’s systems and services technology platforms.
The Zwift Information Security Team is responsible for the security and availability of all services offered by Zwift, as well as providing security support for teams leveraging those services. This team works with service teams to design and build secure solutions, participate and coordinate cross-organization security initiatives, review and audit proposed technologies and services, and solve security challenges at scale.
This is an exciting and visible role – you will directly influence the security postures for Zwift products andservices.
What you’ll do:
● Collaborate with Engineering teams across Zwift to build and validate secure and scalablecontainerized architectures in the cloud.● Implement information security controls and patterns that support risk assessments and thedevelopment of secure architectures.● Collaborate with engineering teams to drive product roadmaps, by providing securityrequirements that map security controls to service features.● Identify and mitigate risks throughout our corporate and production environments.● Provide continuous technical support and escalation management for security related issuesthroughout Zwift.
● Identify opportunities for process improvement, including the development and implementation ofinternal security tools, tactics, and procedures.● Provide security related guidance and documentation.
What you'll have: 
● Bachelor's Degree in Computer Science, Information Security, or a related field (or 4 yearsequivalent experience)● 2+ years of hands-on experience operating and securing container based infrastructures.● 2+ years of experience in Cloud Security Engineering, DevOps or IT Operations roles, strongfamiliarity with the principles of DevOps and Agile development.● 2+ years of hands-on experience securing cloud applications and infrastructure (AWS stronglypreferred).● Understanding of security vulnerabilities, attacker exploit techniques and methods for remediationof such.● Excellent understanding/working knowledge of the public cloud infrastructure and services inAWS (IAM, VPC, KMS, CloudWatch, Systems Manager, S3, RDS, Route53, Lambda, AWSConfig, etc.) is a strong plus.● Excellent understanding of Docker and container orchestration with Kubernetes and experiencerunning production Kubernetes clusters in Amazon EKS, Google GKE, or similar managedplatform.● Experience implementing and leveraging centralized logging and monitoring solutions such asElasticsearch, Kibana, Fluentd, Influxdb, Prometheus, Grafana, PagerDuty, etc.● Experience communicating technical concepts to a non-technical audience.● Demonstrated experience in areas such as system security, network, and/or application securityexperience.● Understanding of best practices in one or more Cloud Security Engineering specialties: securedevelopment, cryptography, network security, security operations, systems security, policy, andincident response.● Experience with scripting and automation (Python, Go, JS, C, C++, Java, Ruby, or PowerShell)● Socially confident with good organization, communication, and presentation skills.● Self-starter with good analytical skills and a proactive approach to problem-solving.● Prior working experience in or with a Software Development or Security Consulting Team is a plus.

How to stand out among the rest:
Your resume/CV is enough to show off your skills, accomplishments, and experience. However, if you choose to include a cover letter introducing us to your awesome personality, we will read that too.
Values:
Of course, we are nothing without our values. Our values ground us. They ensure we run and build a company where people love to work, feel like they are welcomed, included, and belong.  Only then can they thrive and do their best work.  The values we strive to live every day are:
<ul>
<li>Make It Fun</li>
<li>Elevate Teammates</li>
<li>Cultivate Our Community</li>
<li>Always Level Up</li>
<li>One Zwift for All</li>
</ul>
We strongly believe that different backgrounds and ideas are a competitive advantage; we hire candidates of any race, color, ancestry, religion, sex, national origin, sexual orientation, gender identity, age, marital or family status, disability, Veteran status, and any other status. Zwift is proud to be an Equal Opportunity Employer. If you have a disability or special need that requires accommodation, please let us know by emailing careers@zwift.com. 
Zwift, Inc. is an Equal Opportunity Employer.
Transparency in Coverage: 
Health plan price transparency is designed to help consumers know the cost of covered items or healthcare-related services prior to the date upon which they receive care. Transparency in Coverage (TIC) regulations require health insurers and group health plans to create machine readable files (MRFs) that contain the negotiated rates for in-network providers and allowed amounts derived from historical claims for out-of-network providers and make those files publicly available.
Here is the <a href="https://healthy.kaiserpermanente.org/front-door/machine-readable" rel="noopener noreferrer nofollow ugc" target="_blank">link</a> to the site on which Kaiser Permanente posts its in-network and out-of-network allowed amount machine-readable files (MRFs).
Here is the <a href="https://www.anthem.com/ca/machine-readable-file/search" rel="noopener noreferrer nofollow ugc" target="_blank">link</a> to the site on which Anthem posts  its in-network and out-of-network allowed amount machine-readable files (MRFs). The link will allow you to search for your files using your Employer Identification Number (81-2798595)

Cloud Security Engineer

Two Six Technologies

Job ID: 325
Two Six Technologies is seeking a Vulnerability Research Engineer. You will work with a range of clients supporting both national security missions and commercial clients. You will become a trusted advisor while learning and performing valuable technical and industry skills. This role is technical at its core – along with in-depth reverse engineering and exploit development you will transition those findings into capabilities.
Since we are a small team, you will not be lost in the shuffle. You will be a key player in a small fast paced team, owning your own projects and developing client relationships. Working with our lead Reverse Engineer, you will have access to top experts in the field with experience across a range of domains. You will have numerous opportunities to define your work.
Job Responsibilities &amp; DutiesGiven the technical nature of this role, experience in computer science, computer engineering, or a similar field is required. Significant proven experience in reverse engineering (RE) or vulnerability research (VR) can show your fit even if your background is outside of one of these fields.
You should be comfortable taking on complex technical problems for which there is often no known answer. You should be comfortable with ambiguity and forging your own path; our small team setting will provide you opportunity for outsized impact. While you will receive extensive training, mentorship, and coaching, you must be comfortable executing against goals independently since there’s no playbook for breaking unique complex systems.
Qualifications &amp; Skills- Required:
<ul>
<li>Bachelor’s (or higher) degree in computer science, engineering, or a related field (solid knowledge in RE or VR may substitute for a specific degree)</li>
<li>Minimum 3 years of experience firmware development using low-level programming languages (C and at least one assembly language), scripting languages (e.g., Python), and the *nix command line</li>
<li>Strong familiarity with cybersecurity principles and a strong interest in learning more</li>
<li>Minimum 3 years of experience with common disassemblers/decompilers and reverse engineering tools (IDA, Ghidra, Binary Ninja)</li>
<li>Experience with software reverse engineering concepts: static analysis, dynamic analysis, fuzzing techniques</li>
<li>Active US Security clearance of Secret level and ability to obtain and maintain TS.</li>
</ul>
Nice to have, but not expected:
<ul>
<li>Familiarity with Binary Ninja API or Ghidra scripting</li>
<li>Familiarity building or securing embedded devices and other digital systems</li>
<li>Familiarity with embedded binary reverse engineering (ARM, RTOS, etc.)</li>
<li>Familiarity with basic cryptography design and implementation concepts</li>
<li>Experience in a client-facing technical role</li>
</ul>
Clearance Requirements:
<ul>
<li>Active Secret clearance </li>
</ul>

Two Six Technologies is an Equal Opportunity Employer.  All qualified applicants will receive consideration for employment at Two Six Technologies without regard to race, color, religion,  national origin, sex, age, physical and mental disability, sexual orientation, gender identity or expression, genetic information, veteran, marital, pregnancy or citizenship status; or any other status prohibited by applicable national, federal, state or local law.
Two Six Technologies Covid-19 Vaccination Policy requires employees to be fully vaccinated. Exceptions to this policy are only granted to those with a company-approved medical or religious accommodation.  Prospective or new employees will be required to adhere to this policy and submit proof of vaccination or have an approved exemption prior to the start of their employment.   
If you are interested in applying for employment with Two Six Technologies and require an accommodation, please contact Human Resources at Two Six Technologies by sending an email to <a href="mailto:hr@twosixtech.com" rel="noopener noreferrer nofollow ugc" target="_blank">hr@twosixtech.com</a>.  Information provided will be kept confidential and used only to the extent required to provide needed reasonable accommodations.

Arlington

Vulnerability Research Engineer

Huntress

Reports to: Director of ThreatOps Research &amp; Development
Location: Remote, US
Compensation Range: $120,000 to $180,000 base plus bonus and equity
What We Do:
Founded in 2015 by former NSA cyber operators, Huntress was built on a simple premise: to force hackers to earn every inch of their access.
Today’s cyber-attacks aren’t limited to large organizations with the security tools that can ward off threats. Hackers don't discriminate and will find a way to penetrate any vulnerability in any size business.  Huntress enables IT providers and resellers to stop hidden threats that sneak past preventive security tools.
Through a combination of expert human threat hunters, a comprehensive platform, and a desire to make the world a safer place, we’re working to deliver cybersecurity to the 99%—those small to midsize businesses that make up the backbone of our economy. 
Join the hunt and help us stop hackers in their tracks!
About the Role:
The Huntress ThreatOps team has the unique honor to wake up every morning knowing we’re going to make hackers regret targeting our partners and customers. As a ThreatOps macOS Researcher, we’re looking for someone who wants to pour all of their creativity into building and implementing simple solutions which are disproportionately effective at countering these constantly evolving threats. Competitive candidates have experience developing, experimenting, reverse engineering, and collaborating with diverse cybersecurity teams who are offense-minded and passionate about using under-leveraged OS functionality to prevent and detect new hacker tradecraft. Familiarity with product management, incident response, host-based threat hunting, malware analysis, configuration management and antivirus technologies are additional ways to differentiate yourself.
As you can imagine, success doesn’t happen in a vacuum. An effective researcher fosters highly collaborative environments between the Product, Marketing and Threat Operation Center teams to accelerate our mission and secure the 99% of businesses who fall below the enterprise poverty line. This collaboration is needed to produce and prioritize a unified technical vision which ultimately delivers our most impactful features and capabilities.
We defend over 1.3M endpoints across 33,000+ mid-sized and small business customers and that number continues to grow each month. Considering this market’s tighter budget, it’s not financially possible to dedicate human analysts to each client. The R&amp;D team addresses this challenge head-on by building and scaling highly automated efficiencies—often lightly augmented by our Threat Analysts—that make intruders earn every inch of their access while maintaining affordability and healthy gross margins.
Responsibilities: 
<ul>
<li>Identify relevant macOS specific artifacts as well as prototype ways to parse and present these artifacts</li>
<li>Lead research and development initiatives to further threat detection and endpoint security posture </li>
<li>Identity and prototype telemetry data that can be leveraged within Huntress to expand current prevention, hardening, and detection capabilities</li>
<li>Collaborate with our ThreatOps Analysts to identify threat patterns and develop automated solutions for analysis, classification, and categorization of data</li>
<li>Oversee the operational requirements of endpoint data collection, processing, and analysis</li>
<li>Perform analysis and reverse engineering of macOS malware to determine its characteristics and capabilities </li>
<li>Coordinate with Product and Engineering teams to integrate and operationalize solutions developed by the research team </li>
<li>Promote Huntress’ reputation through media interaction, public speaking, and blogs</li>
</ul>
What You Bring To The Team:  
<ul>
<li>Development experience across multiple platforms (e.g., Windows and/or macOS), C/C++, GoLang and Python preferred</li>
<li>Knowledge of macOS languages, such as Objective-C and Applescript a plus</li>
<li>In-depth knowledge of macOS subsystems and how they interact both at the user and kernel level preferred</li>
<li>In-depth knowledge of macOS forensic artifacts, their relevance, how they manifest, and how to parse them</li>
<li>Proficiency with IDA Pro, Binary Ninja, Ghidra, or equivalent disassembler a plus</li>
<li>Understanding of cyber security, threat actors, and end-to-end threat life cycle including one or more of the following: digital forensics, malware research, incident response, vulnerabilities and exploits</li>
</ul>
What We Offer: (please do not edit ‘what we offer’)
<ul>
<li>100% remote work environment - since our founding in 2015</li>
<li>Generous paid time off policy including vacation, sick time, and paid holidays</li>
<li>12 weeks paid parental leave</li>
<li>Highly competitive and comprehensive medical, dental, and vision benefits plans </li>
<li>401(k) with 5% contribution regardless of employee contribution</li>
<li>Life and Disability insurance plans</li>
<li>Stock options for all full-time employees </li>
<li>One-time $500 stipend to build/upgrade home office</li>
<li>Annual allowance for education and professional development assistance </li>
<li>$75 USD/month digital reimbursement</li>
</ul>
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to show up to work every day as their full self. 
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status or any other legally protected status. 
We do discriminate against hackers who try to exploit small businesses.
Accommodations:
If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to <a href="mailto:accommodations@huntresslabs.com" rel="noopener noreferrer nofollow ugc" target="_blank">accommodations@huntresslabs.com</a>. Please note non-accommodation requests to this inbox will not receive a response. 
<h3>#BI-Remote </h3>

United States

ThreatOps macOS Researcher

Apply to Exploit Cyber Security Jobs in companies remotely and near you. New Exploit Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Sr Enterprise Security Engineer II at Rubrik	Full Time Analyst Windows Automation AWS
Senior Security Vulnerability Researcher at Amazon.com	Remote Full Time Javascript Android Audits
Cloud Security Engineer at Zwift	Remote Full Time Audit Manager Incident Response
Vulnerability Research Engineer at Two Six Technologies	Full Time C Clearance Cryptography Exploit
ThreatOps macOS Researcher at Huntress	Remote Full Time Forensic Incident Response Windows

Exploit Cyber Security Jobs

0 Exploit Cyber Security Jobs. Page 1 of 1

5 closed exploit cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Exploit Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Exploit Cyber Security Jobs

0 Exploit Cyber Security Jobs. Page 1 of 1

5 closed exploit cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Exploit Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter