Keyfactor, Inc.

Title: Security Compliance Analyst
Location: Barcelona, Spain
Job Function: Compliance
Employment Type: Full-Time
Industry: Enterprise Software
About the position 
We at Keyfactor are looking to hire a Security Compliance Analyst to join our fast-growing Cloud Operations and Compliance department. Security and Compliance works with all areas of the business, standing on the front lines to protect and enable fast, secure growth. The Security Compliance Analyst position will directly assist the Cloud Operations and Compliance Teams with the internal and external security and compliance responsibilities.
The position is based in Barcelona office with flexibility to work in hybrid setting when necessary. Applicants must hold Valid Right to Work in Spain to apply for this position.
RESONSIBILITIES
<ul>
<li>Participate in the collection of evidence for various audits and assessments (e.g., SOC, ISO27001, etc.)</li>
<li>Working with Keyfactor’s team members, suppliers, and business partners to ensure adherence to established Information Security policies</li>
<li>Communicating with the organization, including training, regarding information security policy implementations and technical measures</li>
<li>Consulting with all levels of the organization on information security control implementations and alignment with industry standards and best practices</li>
<li>Participate in internal risk assessments and audits</li>
<li>Responding in a timely manner to customers’ vendor risk assessments, information security questionnaires and evaluations</li>
</ul>
SKILLS AND QUALIFICATIONS
<ul>
<li>Fundamental technical troubleshooting and problem-solving skills</li>
<li>Formal industry and regulatory audit execution such as SOC 2, GDPR, CCPA, ISO 27001, PCI DSS, FedRAMP, and/or Sarbanes-Oxley</li>
<li>Information Security Policy composition, maintenance, and implementation experience</li>
<li>Executing risk management and treatment plans</li>
<li>Multi-tasking and prioritization involving complex technical and policy-related subjects</li>
<li>Currently maintains or is in the process of obtaining industry security certifications (e.g., CISSP, CEH, CISM, CISA, CIPT, etc.)</li>
<li>Basic systems administration capabilities (e.g., Windows Server, Active Directory user accounts, password management, security groups, etc.)</li>
</ul>
COMPENSATION
Salary will be commensurate with experience.
CULTURE, CAREER OPPORTUNITIES AND BENEFITS
We build teams that continually strive to get better than the day before. You will be challenged daily and given opportunities to grow personally and professionally. We balance autonomy and structure to create an entrepreneurial environment to spur creativity and new ideas. A few initiatives that make our culture special include:
<ul>
<li>Comprehensive benefit coverage</li>
<li>Dedicated employee focused ambassadors via Key Contributor &amp; Culture Committee</li>
<li>DIVERSE Commitment</li>
<li>Global Volunteer Day</li>
<li>Flexible time off</li>
<li>Monthly Cross Functional meetings</li>
<li>Monthly Leadership Development meetings</li>
<li>Monthly All Hands meetings – followed by group gatherings</li>
<li>Second Friday’s (the office is closed on the second Friday of every month)</li>
<li>The Keyfactor Alliance Program</li>
<li>Weekly Feedback Snapshot</li>
</ul>
OUR CORE VALUES
Our core values are extremely important to how we run our business and what we look for in every team member:
<ul>
<li>Trust is paramount – We deliver security software and solutions where trust is of the highest importance for our customers. We are honest and a trusted partner in every aspect of business.</li>
<li>Customers are core - We strategize, operate, and execute through a customer-centric view. We prioritize the security interests of our customers, and we act as if their data were our own.</li>
<li>Innovation never stops, it only accelerates - The speed of change is accelerating. We are committed, through investment and focus, to stay ahead of the innovation curve.</li>
<li>Deliver with agility - We thrive in high paced and continually changing environments. We navigate through newly added variables, adjust accordingly, while driving towards our strategic goals.</li>
<li>Teams make “it” happen - Vision and goals are not individually achievable - They require teamwork. We pride ourselves in operating as a cohesive team, creating promoters and partners, and winning as one.</li>
<li>Keyfactor is a proud equal opportunity employer. navigate through newly added variables, adjust accordingly, while driving towards our strategic goals.</li>
<li>Teams make “it” happen - Vision and goals are not individually achievable - They require teamwork. We pride ourselves in operating as a cohesive team, creating promoters and partners, and winning as one.</li>
</ul>

Keyfactor is a proud equal opportunity employer.

Barcelona

Security Compliance Analyst

Rubrik

The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information. 
Where can you make an impact?
Rubrik is seeking an Enterprise Security Engineer.  In this role, you will be responsible for ensuring that Rubrik's Corporate IT services are designed and implemented to the highest possible security standards.  You will partner with a variety of stakeholders across the business to achieve successful security outcomes in customer experience and productivity deliverables.
What you'll be doing:
<ul>
<li>Partner with all teams across Rubrik to create secure corporate infrastructure design and deployment architectures utilizing threat models and risk analysis documentation</li>
<li>Define organization policies for secure cloud design models within enterprise, hybrid, and public cloud environments including VMware, AWS, Azure and GCP</li>
<li>Work with development teams, operations, governance, and other stakeholders to draft security standards and implement monitoring, alerting, and governance</li>
<li>Design and implement standards across Identity (Okta), Endpoint (Windows, MacOS, Linux), Secrets Management (Vault, Lastpass) and Business Applications (Salesforce)</li>
<li>Support incident responders in analyzing applicable threats, vulnerabilities, controls and residual risks</li>
<li>Analyze and harden existing applications, infrastructure, automation, and deployment processes including CircleCI and Github</li>
<li>Coordinate with security researcher community for submitted vulnerabilities with issues and remediation of threats in both hybrid and public cloud environments</li>
</ul>
Experience you'll need:
<ul>
<li>Bachelor’s degree required; BS or MS in Computer Science, Information Technology, or a related field</li>
<li>6+ years experience in enterprise security, with hands on experience in administration and design across Windows, Mac, Okta and public cloud infrastructure</li>
<li>2+ years experience in VMWare and/or Network security modeling</li>
<li>Broad knowledge of enterprise attack vectors and exploits in both end-user and IT Apps</li>
<li>Subject matter expertise in business applications, endpoint and Identity management</li>
<li>Deep understanding of endpoint systems, corporate networking including wi-fi and IT application systems (Salesforce, Mulesoft, Lastpass, etc)</li>
<li>Programming experience in Python, Go or Java</li>
<li>Security expertise in at least one major public cloud provider (AWS, GCP, Azure) </li>
<li>Experience with deploying and securing Enterprise applications and environments at scale</li>
<li>Knowledge of regulatory guidelines and standards such as SOC2, ISO 27001, FedRAMP, etc.</li>
<li>Understanding of corporate security maturity model frameworks and how to apply them</li>
<li>Strong written and verbal communication skills</li>
</ul>About Rubrik:
Rubrik, the Zero Trust Data Security Company™, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including Zero Trust Data Protection, Ransomware Investigation, Incident Containment, Sensitive Data Discovery, and Orchestrated Application Recovery. This means your data is ready so you can recover the data you need, and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.
We are <a href="https://www.rubrik.com/lp/analyst-reports/gartner-mq" rel="noopener noreferrer nofollow ugc" target="_blank">a leader in data security</a>, have been recognized as as a Forbes Cloud 100 Company, named as a LinkedIn Top 10 Startup and are proud to have earned Great Place to Work® Certification™. There has never been a more exciting time to join Rubrik, and our future is even brighter. The work you do will help propel our next chapter of growth as you do the best work of your career.
<a href="https://www.linkedin.com/company/rubrik-inc/mycompany/verification/" rel="noopener noreferrer nofollow ugc" target="_blank">Linkedin</a> | <a href="https://twitter.com/rubrikinc" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a> | <a href="https://www.instagram.com/lifeatrubrik/" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> | <a href="https://www.rubrik.com" rel="noopener noreferrer nofollow ugc" target="_blank">Rubrik.com </a>| 
Diversity, Equity &amp; Inclusion @ Rubrik: 
At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.
Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation. This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.
Our DEI strategy focuses on three core areas of our business and culture:
<ul>
<li>Our Company: Build a diverse company that provides equitable access to growth and success for all employees globally. </li>
<li>Our Culture: Create an inclusive environment where authenticity thrives and people of all backgrounds feel like they belong.</li>
<li>Our Communities: Expand our commitment to diversity, equity, &amp; inclusion within and beyond our company walls to invest in future generations of underrepresented talent and bring innovation to our clients.</li>
</ul>
<h5>Equal Opportunity Employer/Veterans/Disabled: Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.</h5>
<h5>Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. </h5>
<h5>Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</h5>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW - POSTER SUPPLEMENT</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_English_unformattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">PAY TRANSPARENCY NONDISCRIMINATION PROVISION</a>
<a href="https://www.dol.gov/sites/dolgov/files/olms/regs/compliance/eo_posters/employeerightsposter2page_19final.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS</a>

Palo Alto

Sr Enterprise Security Engineer II

Company Description
Rubrik is one of the fastest growing companies in Silicon Valley, revolutionizing data protection and management in the emerging multi-cloud world. We are the leader in cloud data management, delivering a single platform to manage and protect data in the cloud, at the edge, and on-premises. Enterprises choose Rubrik to simplify backup and recovery, accelerate cloud adoption, enable automation at scale, and secure against cyberthreats. Rubrik has raised over $553 million in venture funding, most recently at a valuation of $3.3 billion. We’ve been recognized as a Forbes Cloud 100 Company five years in a row and as a LinkedIn Top 10 startup. 
Information Security - Who We Are
The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our systems, provides awareness education to teams on security best practices for data protection, and ensures data sharing relationships with third parties in order to securely protect Rubrik information.
What You’ll Do
We are looking for an Information Security Program Manager (Risk Management) to be a part of our security risk management team, which focuses on building and supporting a security risk oversight function. Help us elevate and accelerate the maturity of our risk management and compliance capabilities by leading prioritized activities related to our security risk management strategy. The successful candidate will need to build and maintain strong cross-functional relationships across the company. To achieve this you must have excellent leadership, communication, and decision making skills.
Responsibilities:
<ul>
<li>Gather security risk data, perform risk ranking qualitative and quantitative analysis.</li>
<li>Analyze security risks using real-world security data and systems automation.</li>
<li>Frequently document and communicate security risks, collaborating with a range of stakeholders from individual contributors to senior leadership levels.</li>
<li>Contribute to security program development by identifying new or emerging opportunities to apply security principles and technologies.</li>
<li>Analyze the security of new or existing applications, software, or specialized utility programs and provide risk recommendation.</li>
<li>Support strategic and technical initiatives, perform Operational Risk Assessments, manage Risk Acceptance activities, develop risk posture and remediation recommendations.</li>
<li>Monitor and evaluate security measures to protect against reasonably anticipated threats or hazards to the privacy, security or integrity of protected information.</li>
<li>Be an integral member of the risk and compliance team to build and maintain strong cross-functional relationships across the company to aid in achieving consensus, expectation setting, training and awareness, and promote consistency and improvement in our processes.</li>
<li>Contribute to the production and improvement of the content, quality, and timing of security governance, risk and compliance analysis and reporting.</li>
<li>Own and drive activities related to the remediation of technical security and compliance risks with cross-functional teams, including, but not limited to, leading meetings, working to assign, track work items, and producing reports.</li>
</ul>
Preferred Qualifications:
<ul>
<li>8+ years of related work experience in Information Security Governance, Risk and Compliance (GRC) or relevant Compliance roles in the tech industry.</li>
<li>Have driven several security and/or operational risk processes within a company with a modern risk oversight function.</li>
<li>Experience supervising the design and operation of risk &amp; control assessments to target different levels of information (e.g., RCSA vs. a service level assessment).</li>
<li>Experience with risk registers and helping prioritize security related work.</li>
<li>Can implement a solution (design), operational plan, and roadmap to achieve goals.</li>
<li>Experience implementing agile use cases in a GRC technology solution.</li>
<li>Executive presence: can represent a vision and build consensus across a variety of partners.</li>
<li>Knows how to estimate work effort and incubate skill sets to achieve team goals.</li>
<li>Has advanced knowledge of common security risks, vulnerabilities, and threats and can escort these issues through triage / risk treatment conversations.</li>
<li>Validated understanding of relevant information security frameworks, including related regulatory compliance requirements, such as ISO 27001/2 (including ISO 27017 &amp; 18), FedRAMP, SOC 2 Trust Services Criteria, CIS Top 20, PCI DSS, NIST CSF / 800-53, HIPAA.</li>
<li>Strong knowledge of audit and risk management methodologies, such as SOX, COBIT, NIST RMF / 800-37 / 800-30.</li>
<li>Strong understanding of risk quantification principles and experiencing implementing FAIR-like approach for quantifying and reporting risks.</li>
<li>Hands-on experience with data analytics and business intelligence dashboarding tools (e.g., Power BI) and with agile project management tools (e.g., Jira).</li>
<li>Detail-oriented and able to understand the bigger picture by using your technical expertise and problem solving abilities to prioritize and manage blocking issues.</li>
<li>Ability to ramp up quickly and learn new technologies with minimal lag time.</li>
<li>Able to discuss issues at technical and business levels with audiences of various backgrounds.</li>
<li>Experience in a high growth business environment is a plus.</li>
<li>Bachelor’s degree in Security, Computer Science, Management Information Systems or related field preferred.</li>
<li>SaaS and data management industry experience is a plus.</li>
<li>Professional certifications in Information Security or Risk Management (e.g., CISA, CISM, CRISC, CGEIT, CSX-P, CISSP, CCSK) is a plus.</li>
</ul>About Rubrik:
Rubrik, the Zero Trust Data Security Company™, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including Zero Trust Data Protection, Ransomware Investigation, Incident Containment, Sensitive Data Discovery, and Orchestrated Application Recovery. This means your data is ready so you can recover the data you need, and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.
We are <a href="https://www.rubrik.com/lp/analyst-reports/gartner-mq" rel="noopener noreferrer nofollow ugc" target="_blank">a leader in data security</a>, have been recognized as as a Forbes Cloud 100 Company, named as a LinkedIn Top 10 Startup and are proud to have earned Great Place to Work® Certification™. There has never been a more exciting time to join Rubrik, and our future is even brighter. The work you do will help propel our next chapter of growth as you do the best work of your career.
<a href="https://www.linkedin.com/company/rubrik-inc/mycompany/verification/" rel="noopener noreferrer nofollow ugc" target="_blank">Linkedin</a> | <a href="https://twitter.com/rubrikinc" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a> | <a href="https://www.instagram.com/lifeatrubrik/" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> | <a href="https://www.rubrik.com" rel="noopener noreferrer nofollow ugc" target="_blank">Rubrik.com </a>| 
Diversity, Equity &amp; Inclusion @ Rubrik: 
At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.
Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation. This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.
Our DEI strategy focuses on three core areas of our business and culture:
<ul>
<li>Our Company: Build a diverse company that provides equitable access to growth and success for all employees globally. </li>
<li>Our Culture: Create an inclusive environment where authenticity thrives and people of all backgrounds feel like they belong.</li>
<li>Our Communities: Expand our commitment to diversity, equity, &amp; inclusion within and beyond our company walls to invest in future generations of underrepresented talent and bring innovation to our clients.</li>
</ul>
<h5>Equal Opportunity Employer/Veterans/Disabled: Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.</h5>
<h5>Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. </h5>
<h5>Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</h5>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW - POSTER SUPPLEMENT</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_English_unformattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">PAY TRANSPARENCY NONDISCRIMINATION PROVISION</a>
<a href="https://www.dol.gov/sites/dolgov/files/olms/regs/compliance/eo_posters/employeerightsposter2page_19final.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS</a>

Bangalore

Sr Information Security Analyst  - Risk Management

ID.me

<h3>Company Overview</h3>
ID.me simplifies how people securely prove and share their identity online. The company empowers people to control their data through a portable and trusted login, which means they don’t need to create a new password when visiting sites that have the ID.me button.
The COVID-19 pandemic accelerated digital migration for many critical services. Those services require a trusted identity to safeguard against fraud and help ensure people are who they claim to be. With ID.me, login and identity credentials move with people, which can reduce the time and frustration of having to verify at multiple sites and set up multiple passwords.
ID.me is a credential service provider compliant with federal standards for digital identity verification. 
In addition to helping people control their credentials and data, the company’s “No Identity Left Behind” initiative strives to expand access and inclusion for all people. The company offers multiple pathways to verification – online self-serve, live video chat agents, and in person. ID.me is passionate about building a robust identity network that does not compromise access for traditionally underserved groups.<h3>Role Overview</h3>
ID.me is looking for a Senior Security Engineer to add to our rapidly growing security team. If you love innovation, here's your chance to make a career of it by advancing the digital identity ecosystem. We are seeking a talented Senior Security Engineer who enjoys the challenges of planning, implementing, and upgrading security measures and controls, to include: Cloud Security and Automation, Security Information and Event Management (SIEM) tools, Intrusion Detection and Prevention Systems (IDS/IPS), enterprise security, and other associated tools. 
The Senior Security Engineer will also have the opportunity to innovate by building tools to help create a highly integrated security environment, and see around corners. The team owns the end-to-end security of all systems and data for ID.me, and our Security Engineers are passionate about security and working in a fast-paced, ambiguous environment.
<h3>Responsibilities</h3>
<ul>
<li>Defend systems against unauthorized access, modification, and/or destruction</li>
<li>Contribute to security architecture and operations</li>
<li>Design, deploy and optimize security tools such as a SIEM, IDS/IPS, EDR, firewalls, etc</li>
<li>Troubleshoot systems to determine the root cause of issues impacting security infrastructure</li>
<li>Act as an escalation point for security analyst and a resource during incident response</li>
<li>Lead security integration and automation to improve detection, monitoring, and response</li>
<li>Collaborate with cross-functional groups such as DevOps, Software Engineering, etc</li>
<li>Build security orchestration and automation tools to improve preventative and detective controls</li>
</ul>
<h3>Ideal Qualifications</h3>
The qualifications below are ideal, but not all are required.  We encourage candidates to apply if they satisfy some, but not all of the qualifications.
<ul>
<li>7+ years of experience in information security</li>
<li>5+ years experience engineering, implementing, and optimizing security measures for the protection of systems, networks, and information</li>
<li>3+ years of experience supporting a Security Operations Center (SOC) or similar</li>
<li>Hands on experience with SIEM and centralized logging technologies (e.g. Splunk, Elastic, etc)</li>
<li>Experience with Security Orchestration, Automation, and Response (SOAR)</li>
<li>Strong capabilities leveraging scripting languages to automate work or build features (Bash, Python, and/or Ruby)</li>
<li>Experience securing cloud environments such as AWS, GCP, and/or Azure</li>
<li>Experience with configuration automation platforms (e.g. Chef, Ansible, Puppet, Salt, etc)</li>
<li>Bonus: Experience with Information Security Compliance, (SOC, FedRAMP, ISO, etc)</li>
<li>Bonus: Industry security certifications, such as GCIH/ECIH, Security+, or related</li>
</ul>
Ideal candidate will thrive in the following culture:
<ul>
<li>Must have an obsession for building quality products </li>
<li>Ability to thrive when there are changing priorities and shifting of gears</li>
<li>Strong oral and written communication skills</li>
<li>Must be a team player with a strong, self-managing work ethic</li>
<li>Must be a self-starter with a passion for security, learning and continuous improvement</li>
</ul>
Note that candidates must be located in the continental U.S.
ID.me Covid Vaccination Requirement
ID.me has a mandatory vaccination requirement where not prohibited by applicable federal or state law.
All current and future employees are required to receive their COVID-19 vaccinations, unless a reasonable accommodation is approved. Employees not in compliance with this policy will be placed on leave and will be terminated if no valid reason for not getting the COVID-19 vaccine is provided.  
Purpose: In accordance with ID.me's duty to provide and maintain a workplace that is free of known hazards, we are adopting this policy to safeguard the health of our employees and their families; our customers and visitors; and the community at large from COVID-19 that may be reduced by vaccinations. This policy will comply with all applicable laws and is based on guidance from the Centers for Disease Control and Prevention and local health authorities, as applicable.
Reasonable Accommodation: Current and future employees in need of an exemption from this policy due to a medical reason, or because of a sincerely held religious belief must submit a completed Request for Accommodation form to the human resources department to begin the interactive accommodation process as soon as possible after vaccination deadlines have been announced (September 13th) and an offer of employment has been made. Accommodations will be granted where they do not cause ID.me undue hardship or pose a direct threat to the health and safety of others.
Vision: To be the world's leading digital identity network empowering people to control their own information and to prove their credentials across all channels: online, call center, and in-person.
Mission: To make the world a more trusted place by delivering the highest level of security with the least amount of friction at the lowest possible cost.
People: We have an audacious mission. We aim to fix the identity layer of the internet. Billions of people will live better lives with more trust and convenience thanks to <a href="https://id.me/" rel="noopener noreferrer nofollow ugc" target="_blank">ID.me</a>. We are like Special Forces. We take on the most difficult challenges with amazing teammates. 
<a href="https://id.me/" rel="noopener noreferrer nofollow ugc" target="_blank">ID.me</a> Core Values: *Don't be a jerk. *Always compete. *Ask questions like a 5-year old. *Inspire people with your passion. *Make something better every day. *Treat each customer like your favorite family member. *Own your mistakes so you can learn from them. *Details are everything. *Communicate like a scientist. *Be truthful (even when it's hard). *Reflect <a href="https://id.me/" rel="noopener noreferrer nofollow ugc" target="_blank">ID.me</a>'s values in your actions. *Act like an owner.
ID.me Career Site &amp; Culture Deck: <a href="https://www.id.me/careers" rel="noopener noreferrer nofollow ugc" target="_blank">https://www.id.me/careers</a>
ID.me maintains a work environment free from discrimination, where employees are treated with dignity and respect. All ID.me employees share in the responsibility for fulfilling our commitment to equal employment opportunity. ID.me does not discriminate against any employee or applicant on the basis of age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. ID.me adheres to these principles in all aspects of employment, including recruitment, hiring, training, compensation, promotion, benefits, social and recreational programs, and discipline. In addition, ID.me's policy is to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws, regulations and ordinances where a particular employee works. Upon request we will provide you with more information about such accommodations.
 
Please review our Privacy Policy, including our CCPA policy, at <a href="http://id.me/privacy" rel="noopener noreferrer nofollow ugc" target="_blank">id.me/privacy</a>. If you provide ID.me with any personally identifiable information you confirm that you have read and agree to be bound by the terms and conditions set out in our Privacy Policy.
 
ID.me participates in E-Verify.
 

#LI-JS1
#LI-REMOTE

United States

Senior Security Engineer (Remote)

Arctic Wolf Networks

Ready to make an impact? Arctic Wolf is looking for an Application Security Architect to join our pack.
Arctic Wolf, with its unicorn valuation, is the leader in security operations in an exciting and fast-growing industry—cybersecurity.
How fast are we growing? Well, Arctic Wolf was highly ranked in the Deloitte Fast Technology 500 for NorthAmerica in both 2019 (#25) and 2020 (#104)! We have doubled headcount, customers, and revenue for five years running. We are also cultivating a collaborative and productive work environment that welcomes a diversity of backgrounds, cultures, and ideas to make our teams even stronger as we grow our teams globally.
In fact, we were named a 2021 Top Workplace USA (Energage) as the top technology firm to work in our size category, were recognized as one of the 2020 Best Places to Work (bizjournals.com), and most recently were certified as a 2021 Great Place to Work (Great Places to Work Institute, Canada). Arctic Wolf believes in corporate responsibility, and our worldwide offices proudly participate in volunteer programs throughout their communities. We’ve also earned distinction from TravelWise for our efforts in promoting sustainable transportation.
Position Overview and Objective
The Lead Application Security Architect role is responsible for the implementation of measures to ensure the security of Arctic Wolf software systems, applications, code, and related components. This role will work within our Information Security Engineering team to deploy and operationalize technical security capabilities with open collaboration with the Research and Development Team.
Primary Responsibilities and Duties
<ul>
<li>Develop secure coding &amp; secure design principles</li>
<li>Train developers, architects, code reviewers, and others on secure coding practices. Mentor team members.</li>
<li>Serve as the subject matter expert for Application Security, providing guidance to Engineering and Product teams</li>
<li>Develop standards and training for security testing tools focused on the application layer (e.g., SAST, DAST, IAST, SCA), threat modeling, penetration testing, red team, bug bounty and</li>
<li>Work with development teams throughout the entire SDLC to ensure code is secure by design, secure by default, secure in deployment and communication</li>
<li>Help software development teams to understand, and remediate security findings</li>
<li>Research any reported or suspected application vulnerabilities</li>
<li>Implement and configure off-the-shelf application security technologies in the Arctic Wolf internal environment.</li>
<li>Create technical approaches to implementing application security control technologies.</li>
<li>Contribute to a world-class security program that supports Arctic Wolf’s tremendous growth.</li>
<li>Mentors and coaches team members to further develop competencies</li>
<li>Assist in developing security related libraries used in our environment</li>
<li>Security metrics delivery and improvements.</li>
<li>The ability to effectively partner and communicate with Engineering and Product teams</li>
</ul>
Key Skills
Communication, Threat modeling, Code Review, Penetration Testing, Application Testing, Research
Key Competencies
Is able to write clearly and succinctly in a variety of communication settings and styles; can get messages across that have the desired effect.
Comes up with a lot of new and unique ideas; easily makes connections among previously unrelated notions; tends to be seen as original and value-added in brainstorming settings.
Can be counted on to exceed goals successfully; is constantly and consistently one of the top performers; very bottom-line oriented; steadfastly pushes self and others for results.
Minimum Qualifications
<ul>
<li>A Bachelor’s Degree in Computer Science, Information Systems, Engineering, cybersecurity or related technical field; or equivalent experience.</li>
<li>10+ years of experience in security or infrastructure engineering Including assessing and escalating to vendors for troubleshooting purposes.</li>
<li>Thorough Understanding of modern software development practices</li>
<li>Thorough understanding of OWASP Top 10 vulnerabilities and corresponding best practices for mitigation</li>
<li>Significant experience in deploying application security technologies such as SAST, DAST, IAST, SCA, etc.</li>
</ul>
Preferred Qualifications
<ul>
<li>Familiarity with cloud infrastructures, with Amazon Web Services (AWS) and/or Azure considered a strong plus.</li>
<li>Expert level analytical and quantitative skills with proven experience in developing strategic solutions</li>
<li>Significant prior experience securing large-scale web applications, including performing security code reviews, vulnerability assessments, and manual testing for logic flaws</li>
<li>Significant Experience in one or more highly regulated environments (FedRAMP, SOX, ISO 27001, etc) or frameworks</li>
<li>Presentation of a security topic and an industry conference</li>
<li>One a more Industry Certifications – (CISSP, CCSP, CSLP, OSCP, OSWE, GPEN, GWAPT, CEH, etc)</li>
</ul>
Travel Requirements
Typically 10% or less of business travel
Security Requirements:
<ul>
<li>Conducts duties and responsibilities in accordance with AWN’s Information Security policies, standards, processes and controls to protect the confidentiality, integrity and availability of AWN business information.</li>
<li>Background checks are required for this position</li>
</ul>
About us:
At Arctic Wolf, we recognize that success comes from delighting our customers. We believe in being lean – in constantly building, measuring, and learning in all aspects of our business. We truly value people. All wolves are welcome to join the Arctic Wolf pack, with compelling compensation packages, benefits, and equity for employees.
Arctic Wolf is focused on building a workforce that is diverse and inclusive. If you’re excited about this role, but do not meet all of the qualifications listed above, we encourage you to apply. We review all applications.  
Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law.
Arctic Wolf is committed to fostering a welcoming, accessible, respectful and inclusive environment ensuring equal access and participation for people with disabilities. As such, we strive to make our recruitment, assessment and selection processes as accessible as possible and provide accommodations as required for applicants with disabilities. Please let us know if you require any accommodations by emailing <a href="mailto:hr@arcticwolf.com" rel="noopener noreferrer nofollow ugc" target="_blank">recruiting@arcticwolf.com</a>.

Provo

Principal Application Security Architect

Apply to Fedramp Cyber Security Jobs in companies remotely and near you. New Fedramp Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Security Compliance Analyst at Keyfactor, Inc.	Full Time CISM Audit Analyst Consulting
Sr Enterprise Security Engineer II at Rubrik	Full Time Analyst Windows Automation AWS
Sr Information Security Analyst - Risk Management at Rubrik	Full Time CISM Audit Analyst Manager
Senior Security Engineer (Remote) at ID.me	Remote Full Time Analyst Incident Response Ansible
Principal Application Security Architect at Arctic Wolf Networks	Remote Full Time Red Team CCSP Application Security

Fedramp Cyber Security Jobs

0 Fedramp Cyber Security Jobs. Page 1 of 1

5 closed fedramp cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Fedramp Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Fedramp Cyber Security Jobs

0 Fedramp Cyber Security Jobs. Page 1 of 1

5 closed fedramp cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Fedramp Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter