Amazon.com

Job summaryThe Amazon Information Security team is looking for a Senior Security Engineer to help ensure our services, applications, and websites are designed and implemented to the highest security standards. You have breadth and depth of security knowledge and can identify and advise on risks across multiple areas of an organization. You will join a team working on Software Supply Chain Security (SSC-S) initiatives and drive transformative changes on how thousands of Amazon dev teams consumes, build, operate and ship secure software. You will work with limited guidance in the face of ambiguity. You will take a long-term view of Amazon's software development security processes and tools. *The preferred location for this position is in Seattle, Austin or Arlington locations, however other locations may be considered as well.Key job responsibilities<ul><li>Evaluating and recommending new and emerging security products and technologies</li><li>Identifying security issues and risks, and developing mitigation plans</li><li>Through security risk assessments, identify repeatable work streams and influence automation of such streams to reduce cycle times and drive efficiency.</li><li>Participate in the design discussions and development of user stories for automation</li><li>Positively influence Security Governance initiatives; partner with engineering teams to develop a Security dashboard that provides ongoing Leadership visibility of the security posture, threats and risks.</li><li>Establish credibility and maintain strong working relationships with technical groups involved with security including but not limited to Security Teams, AWS (Amazon Web Services), Legal, Compliance, and Developer Community</li><li>Build and influence supply chain software security as a core competency throughout InfoSec’s relationships with internal Amazon teams, partners, and vendors.</li></ul>About the teamAt Amazon, we're working to be the most customer-centric company on earth. To get there, we need exceptionally talented, bright, and driven people. Join us!Inclusive Team Culture Here at Amazon, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust.  Work/Life Balance Our team puts a high value on work-life balance. It isn’t about how many hours you spend at home or at work; it’s about the flow you establish that brings energy to both parts of your life. We believe striking the right balance between your personal and professional life is critical to life-long happiness and fulfillment. We offer flexibility in working hours and encourage you to find your own balance between your work and personal lives. Mentorship &amp; Career Growth Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge sharing and mentorship. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded professional and enable them to take on more complex tasks in the future.<h3>Basic Qualifications</h3><ul><li>BS in Computer Science or related field, or equivalent work experience</li><li>At least 5 years of experience in application security, threat modeling, secure coding, software development, secure software or system design</li><li>At least 3 years of experience in a development or security role working with development team(s) that delivered commercial software or software-based services</li><li>Advanced knowledge and understanding of any combination of the following: security engineering, system and network security, authentication and security protocols, cryptography, or application security</li><li>An understanding of network and web related protocols (such as, TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)</li><li>Experience with multiple programming languages (such as, Java, C++, Ruby, Python, Perl, etc.)</li></ul><h3>Preferred Qualifications</h3><ul><li>Experience managing and delivering security solutions at scale.</li><li>Experience with DevOps, Software Build and Deployment systems, Software Composition Analysis</li><li>Experience with service-oriented architecture and web services security</li><li>Experience with AWS or similar enterprise cloud computing platforms</li><li>Experience with the application of threat modeling or other risk identification techniques</li><li>Demonstrated experience collaborating with other security engineers and developers to deliver complex projects</li><li>Excellent written and verbal communication skills with the ability to convey technical information to a wide variety of audiences</li><li>Strong and creative problem-solving abilities</li><li>Meets/exceeds Amazon’s leadership principles requirements for this role</li><li>Meets/exceeds Amazon’s functional/technical depth and complexity for this role</li></ul>Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.

Seattle

Sr. Security Engineer

<p>Lob was built by technical co-founders with a vision to make the world programmable.</p>
<p>We offer two flagship APIs (print &amp; mail and address verification) that enable companies to send postal mail as effortlessly as sending emails. Lob is venture-backed by the most reputable investors in tech, and we are rapidly growing our team to shape the future of our company and meet the demands of a quickly growing customer base and dynamic product offerings.</p>
<p>As a proud Pledge 1% company, we’re committed to leveraging our product, partnerships, and people to drive positive social impact through <a href="http://www.lob.org" rel="noopener noreferrer nofollow ugc" target="_blank"><em>Lob.org</em></a>, and are on a mission to make direct mail more sustainable.</p>
<p>We offer remote working opportunities, unless otherwise described in the job description, in AZ, CA, CO, DC, GA, IL, MA, MD, MI, MN, NC, NV, NY, OR, PA, TX, UT, and WA. You can also work onsite at our San Francisco headquarters.</p>
<p>If you are looking for a progressive, fun-spirited, and mentally stimulating environment, come join us at Lob!</p><p>The Legal, Compliance and Security (LCS) team works across Lob to organize risk governance organizational structures, methodologies, and processes that are commensurate with industry best practice but tailored to Lob’s niche risk sensitivities. LCS capabilities allow Lob to manage security risk &amp; control programs that enable us to achieve company goals and better protect its customers and data in a responsible and proactive manner. We work with internal and external stakeholders to build and operate programs that last - including IT, Engineering, Product, Sales and Operations. </p>
<p>We are growing our LCS team to further mature our compliance and security programs and ensure that the technical implementation of our internal controls is strong and well-managed. You will be responsible for maintaining and improving our common risk &amp; controls framework and building sustainable control assurance programs that keep the company aligned with our regulatory &amp; compliance obligations, policy requirements, and customer expectations. Your focus will be to ensure we have adequate internal controls in place, drive control adoption and maintenance, support control owner education and awareness, and manage roadmaps to resolve control gaps in a timely fashion.</p>
<h3><strong>As the Senior GRC and Security Analyst, you’ll…</strong></h3>
<ul>
<li>Mature the company’s unified security risk and control framework and ensure its alignment against applicable laws, regulations, industry standards such as GDPR, CCPA, SOC, ISO, NIST Cyber Security Framework (CSF), PCI Data Security Standard, etc. as well as internal Information Security and IT policies &amp; standards</li>
<li>Support the LCS team and other stakeholders in integrating the unified security risk and control framework as part of their service capabilities to drive programmatic consistency</li>
<li>Support oversight and governance by building control assurance programs to proactively assess and report on the design, operating effectiveness, and sustainability of key controls</li>
<li>Lead efforts to address control implementation, remedy control gaps that address the root cause of control failures, drive control ownership and accountability, and build process and control documentation as needed</li>
<li>Be responsible for configuration and support of a wide range of security and networking technologies such as: IPS/IDS, SIEM, vulnerability scanners, identity and access management, access control, DLP, firewalls, endpoint security, email filtering, routers, switches, etc.</li>
<li>Working closely with various teams, to evaluate the current architecture and security related processes such as vulnerability management, patch management, endpoint security, cloud environment, etc. looking for ways to design and implement improvements</li>
<li>Assist in leading security incident response efforts to gather required evidence and remediate incidents</li>
<li>Manage Lob’s vulnerability management and patch management programs to include our bug bounty program, annual penetration tests, etc.</li>
<li>Be responsible for planning and managing security related projects</li>
</ul>

<h3><strong>What will you bring to this role…</strong></h3>
<ul>
<li>Minimum 8+ years of related work experience building or operating internal control programs to mitigate risks around security, confidentiality, integrity, availability, and privacy. </li>
<li>Prior technical security experience highly preferred</li>
<li>Strong experience with common industry audits and frameworks (SOC 2, ISO, HITRUST, etc) </li>
<li>Ability to work efficiently with minimal oversight/direction and collaborate effectively in cross functional projects</li>
<li>Have technical security-related knowledge of common risks, vulnerabilities, and threats and solid experience in escorting these issues through risk analysis / treatment / mitigation processes</li>
</ul>
<p>&lt;#LI-REMOTE #LI-RW1</p><p>We’re not just building a platform to make the world programmable. <a href="https://www.lob.com/blog/lobs-culture-values" rel="noopener noreferrer nofollow ugc" target="_blank"><em>We’re also designing a great place to work</em></a>, and ​​a ground floor opportunity as an early member of the Lob team; you’ll directly shape the direction of our company.</p>
<p><strong>Perks</strong></p>
<ul>
<li>Health benefits for you and your dependent(s)</li>
<li>Medical Flexible Spending Accounts (FSA)</li>
<li>Flexible vacation policy</li>
<li>Wellness program</li>
<li>Paid parental leave</li>
<li>401K</li>
<li>Paid volunteer time off to support the organizations you care most about</li>
<li>Commuter &amp; Parking benefits (includes monthly stipend) for those based out of our San Francisco office</li>
<li>Free lunch, snacks and dinner when working at our San Francisco office</li>
<li>Dog-friendly San Francisco office</li>
<li>Allowance for in-person team meetings (all flights and accommodations covered) for those not based out of our San Francisco office</li>
<li>Home-office setup and phone/internet stipend for those not based out of our San Francisco office</li>
</ul>
<p><strong>Our Commitment to Diversity</strong></p>
<p>Lob is an equal opportunity employer and <a href="https://www.lob.com/blog/power-diversity-starts-data" rel="noopener noreferrer nofollow ugc" target="_blank"><em>values diversity</em></a> of <a href="https://www.lob.com/blog/a-commitment-to-diversity" rel="noopener noreferrer nofollow ugc" target="_blank"><em>backgrounds and perspectives</em></a> to cultivate an environment of understanding to have greater impact on our business and customers. We encourage under-represented groups to apply and do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or criminal history in accordance with local, state, and/or federal laws, including the <a href="https://sfgov.org/olse/sites/default/files/Document/FCO%20Art.%2049%20Official%20Notice%20to%20print%202017.pdf" rel="noopener noreferrer nofollow ugc" target="_blank"><em>San Francisco’s Fair Chance Ordinance</em></a>.</p>

United States

Senior GRC and Security Analyst

Rubrik

<p>The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information. </p>
<p><strong>Where can you make an impact?</strong></p>
<p>Rubrik is seeking an Enterprise Security Engineer.  In this role, you will be responsible for ensuring that Rubrik's Corporate IT services are designed and implemented to the highest possible security standards.  You will partner with a variety of stakeholders across the business to achieve successful security outcomes in customer experience and productivity deliverables.</p>
<p><strong>What you'll be doing:</strong></p>
<ul>
<li>Partner with all teams across Rubrik to create secure corporate infrastructure design and deployment architectures utilizing threat models and risk analysis documentation</li>
<li>Define organization policies for secure cloud design models within enterprise, hybrid, and public cloud environments including VMware, AWS, Azure and GCP</li>
<li>Work with development teams, operations, governance, and other stakeholders to draft security standards and implement monitoring, alerting, and governance</li>
<li>Design and implement standards across Identity (Okta), Endpoint (Windows, MacOS, Linux), Secrets Management (Vault, Lastpass) and Business Applications (Salesforce)</li>
<li>Support incident responders in analyzing applicable threats, vulnerabilities, controls and residual risks</li>
<li>Analyze and harden existing applications, infrastructure, automation, and deployment processes including CircleCI and Github</li>
<li>Coordinate with security researcher community for submitted vulnerabilities with issues and remediation of threats in both hybrid and public cloud environments</li>
</ul>
<p><strong>Experience you'll need:</strong></p>
<ul>
<li>Bachelor’s degree required; BS or MS in Computer Science, Information Technology, or a related field</li>
<li>6+ years experience in enterprise security, with hands on experience in administration and design across Windows, Mac, Okta and public cloud infrastructure</li>
<li>2+ years experience in VMWare and/or Network security modeling</li>
<li>Broad knowledge of enterprise attack vectors and exploits in both end-user and IT Apps</li>
<li>Subject matter expertise in business applications, endpoint and Identity management</li>
<li>Deep understanding of endpoint systems, corporate networking including wi-fi and IT application systems (Salesforce, Mulesoft, Lastpass, etc)</li>
<li>Programming experience in Python, Go or Java</li>
<li>Security expertise in at least one major public cloud provider (AWS, GCP, Azure) </li>
<li>Experience with deploying and securing Enterprise applications and environments at scale</li>
<li>Knowledge of regulatory guidelines and standards such as SOC2, ISO 27001, FedRAMP, etc.</li>
<li>Understanding of corporate security maturity model frameworks and how to apply them</li>
<li>Strong written and verbal communication skills</li>
</ul><p><strong>About Rubrik:</strong></p>
<p>Rubrik, the Zero Trust Data Security Company™, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including Zero Trust Data Protection, Ransomware Investigation, Incident Containment, Sensitive Data Discovery, and Orchestrated Application Recovery. This means your data is ready so you can recover the data you need, and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.</p>
<p>We are <a href="https://www.rubrik.com/lp/analyst-reports/gartner-mq" rel="noopener noreferrer nofollow ugc" target="_blank">a leader in data security</a>, have been recognized as as a Forbes Cloud 100 Company, named as a LinkedIn Top 10 Startup and are proud to have earned Great Place to Work® Certification™. There has never been a more exciting time to join Rubrik, and our future is even brighter. The work you do will help propel our next chapter of growth as you do the best work of your career.</p>
<p><a href="https://www.linkedin.com/company/rubrik-inc/mycompany/verification/" rel="noopener noreferrer nofollow ugc" target="_blank"><strong>Linkedin</strong></a><strong> | <a href="https://twitter.com/rubrikinc" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a> | <a href="https://www.instagram.com/lifeatrubrik/" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> | <a href="https://www.rubrik.com" rel="noopener noreferrer nofollow ugc" target="_blank">Rubrik.com </a>| </strong></p>
<p><strong>Diversity, Equity &amp; Inclusion @ Rubrik: </strong></p>
<p>At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.</p>
<p>Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation. This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.</p>
<p>Our DEI strategy focuses on three core areas of our business and culture:</p>
<ul>
<li>Our Company: Build a diverse company that provides equitable access to growth and success for all employees globally. </li>
<li>Our Culture: Create an inclusive environment where authenticity thrives and people of all backgrounds feel like they belong.</li>
<li>Our Communities: Expand our commitment to diversity, equity, &amp; inclusion within and beyond our company walls to invest in future generations of underrepresented talent and bring innovation to our clients.</li>
</ul>
<h5><em>Equal Opportunity Employer/Veterans/Disabled: Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.</em></h5>
<h5><em>Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. </em></h5>
<h5><em>Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</em></h5>
<em><a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW</a></em>
<em><a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW - POSTER SUPPLEMENT</a></em>
<em><a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_English_unformattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">PAY TRANSPARENCY NONDISCRIMINATION PROVISION</a></em>
<em><a href="https://www.dol.gov/sites/dolgov/files/olms/regs/compliance/eo_posters/employeerightsposter2page_19final.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS</a></em>

Palo Alto

Sr Enterprise Security Engineer II

Kin + Carta

<p>At Kin + Carta, we’ve got opportunities to offer you — for growth, for leadership, for big, world-changing impact and for, dare we say it, fun. We are a global workforce that is committed to building a world that works better for everyone. And that starts with our Kin. That’s why we’re proud of: </p>
<ul>
<li><a href="https://www.kinandcarta.com/en-us/careers/life-at-kin-and-carta/?utm_source=website&amp;utm_medium=retargeting&amp;utm_campaign=EmployerBrand&amp;utm_content=job_description" rel="noopener noreferrer nofollow ugc" target="_blank">The life we create within our virtual walls, every day</a></li>
<li><a href="https://www.kinandcarta.com/en-us/insights/2022/05/why-work-for-a-b-corp/?utm_source=website&amp;utm_medium=retargeting&amp;utm_campaign=EmployerBrand&amp;utm_content=job_description" rel="noopener noreferrer nofollow ugc" target="_blank">Being B Corp certified</a></li>
<li><a href="https://www.kinandcarta.com/en-us/insights/2022/04/2022-womens-choice-award/?utm_source=website&amp;utm_medium=retargeting&amp;utm_campaign=EmployerBrand&amp;utm_content=job_description" rel="noopener noreferrer nofollow ugc" target="_blank">Our honor as a “Best Company to Work For” by Women's Choice Award</a></li>
</ul>
<h3>The role</h3>
<p>The ideal Americas Information Security Officer for Kin + Carta is innovative, passionate about global information security with both policy and technical experience. This person looks to continually learn, and enjoys sharing expertise. Strong verbal and written communication are a must. Experience working with HITRUST, or Nessus is a plus.</p>

<h3>Role responsibilities</h3>
<ul>
<li>Pursue infosec excellence for the region with the continuous development and management of K+C InfoSec standards to ensure compliance for HITRUST, PCI-DSS, ISO 27001 and other required controls.</li>
<li>Perform internal audits on information security in line with international standards, which includes but not restricted to HITRUST</li>
<li>Security assess new and current suppliers - plan, organize and review Digital implementations, tools, APIs and platforms. </li>
<li>Support the completion of stakeholder infoSec schedules for RFPs, MSAs, delivery and project teams, by resolving project queries and approval of security requirements </li>
<li>Contribute to the InfoSec Risk Register and collaborate on treatment of risks tailored to the needs of the region. Manage and track mitigations, remediations and compensating controls.</li>
<li>Completing Information Security assessments from external parties in a timely manner</li>
<li>Contribute to the performance and improvement of the ISMS</li>
<li>Establish and review monitoring and logging process and standards </li>
<li>Designing, delivering and monitoring InfoSec training and awareness</li>
<li>Reviewer and approver of ISMS documentation </li>
<li>Collaborate with K+C and CDS, providing information security consultancy, strategy and implementation planning along with the prioritization of the highest impact projects </li>
<li>Joint responsibility with the Digital Defense team for all BAU tickets and tasks and recording time and tag allocation.</li>
</ul>

<h3>Minimum qualifications</h3>
<p><strong>We want all new hires to succeed in their roles at Kin + Carta. That's why we've outlined the job requirements below. To be considered for this role, it's important that you meet all Minimum Qualifications. If you do not meet all of the Preferred Qualifications, we still encourage you to apply.</strong></p>
<ul>
<li>Experience in a security role with the emphasis on risk, policy and governance</li>
<li>ISMS Documentation Development</li>
<li>A working understanding of security frameworks or methodologies, HITRUST and/or ISO27001, NIST, CIS</li>
<li>Exposure to Enterprise Security tools AV, Vulnerability, IAM, SSO.</li>
<li>Continuous improvement with activities that stretch you beyond your job role, an opportunist who finds the positive side of a challenge.</li>
<li>Critical thinking skills with a mindset that considers solutions prior to presenting challenges</li>
</ul>

<h3>Preferred qualifications</h3>
<ul>
<li>BS in Computer Science, or a related field</li>
<li>Certified CSF Practitioner or training towards</li>
<li>CompTIA Security+ Certification </li>
<li>Microsoft Certified Cybersecurity</li>
<li>CISSP, CISM or equivalent training</li>
<li>Experience working with international security standards  </li>
</ul>

<h3>About Kin + Carta</h3>
<p>Kin + Carta is a global digital transformation consultancy committed to working alongside our clients to build a world that works better #ForEveryone. Our 2,000 curious minds make creative connections between people, data and technology to create connected outcomes across the full lifecycle of the product and platform ecosystems.</p>
<p>We’re makers, builders and creators by nature, and we come to work every day to build experiences for some of the world’s most influential companies. We help businesses accelerate their digital roadmap, rapidly innovate, modernize their systems, enable their teams and optimize for continued growth. </p>
<p>We are a technology business with trust and human connection at its heart. <a href="https://www.kinandcarta.com/en-us/social-responsibility/" rel="noopener noreferrer nofollow ugc" target="_blank">As a Certified B Corp</a>, our triple bottom line focus on people, the planet and profit is at the core of everything we do.</p>
<p>We welcome our Kin to show up as their authentic selves every day. Because this is so important to us, Kin + Carta is proud to be an equal opportunity employer. To read further about our commitment to Inclusion, Diversity, Equity and Awareness, check out the <a href="https://www.kinandcarta.com/en-us/idea/" rel="noopener noreferrer nofollow ugc" target="_blank">IDEA page</a> on our website. </p>
<p>If you need accommodations at any point in the application or interview process, please let us know. </p>

Americas Information Security Officer

Netskope

<strong>About Netskope</strong>
<p>Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security. </p>

<p>Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, St. Louis, Bangalore, London, Melbourne, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork. From catered lunches and office celebrations to employee recognition events (pre and hopefully post-Covid) and social professional groups such as the Awesome Women of Netskope (AWON), we strive to keep work fun, supportive and interactive. Visit us at <a href="https://www.netskope.com/company/careers" rel="noopener noreferrer nofollow ugc" target="_blank">Netskope Careers.</a> Please follow us on <a href="https://www.linkedin.com/company/netskope" rel="noopener noreferrer nofollow ugc" target="_blank">LinkedIn</a> and Twitter<a href="https://twitter.com/netskope" rel="noopener noreferrer nofollow ugc" target="_blank">@Netskope</a>.</p>

<h3><strong>Security Analyst</strong></h3>
<p><strong>Cyber Security</strong> is a big deal. It’s in the news, growing rapidly, a critical tool for every company, and our specialty.  </p>
<h3><strong>Opportunity</strong></h3>
<p>We are seeking a passionate <strong>Security Analyst</strong>, to join our global IT InfoSec team. You will be on the front lines of monitoring and responding to threats and attacks against our corporate and cloud environments. Working on a team of seasoned InfoSec professionals, you will be expected to contribute to various security domains and initiatives our team leads, such as: Security Operations, Incident Response, Governance, Risk Management and Compliance. </p>
<h3><strong>Responsibilities</strong></h3>
<ul>
<li>Monitor, analyze, and triage security events to ensure we maintain a strong security posture</li>
<li>Provide Incident Response support when actionable security incidents are identified</li>
<li>Evaluate and leverage security-focused products (such as application security scanners, endpoint security, vulnerability management, data loss prevention, etc.)</li>
<li>Support and monitor access control management solutions and processes</li>
<li>Perform 3rd party security assessments for new and renewing vendors</li>
<li>Work with the business on customer security assessments and questionnaires</li>
<li>Conduct security architecture reviews to assess technical and business risk; recommend ways to improve and update the security posture</li>
<li>Work closely with the IT teams to review configurations, hardening and controls in diverse environments</li>
<li>Maintain strong knowledge of recent security vulnerabilities, attack vectors, attack methods, and remediation techniques</li>
<li>Develop security standards and best practices for the whole organization</li>
</ul>
<h3><strong>Qualifications</strong></h3>
<ul>
<li>2+ years of experience in InfoSec field OR 4+ years of experience in an IT Operations role with InfoSec exposure</li>
<li>Ability to interpret alert logs and network traffic to identify an attack pattern and recognize typical attack scenarios</li>
<li>Ability to analyze reported vulnerability information for applicability and actionable remediation</li>
<li>Familiar with software development, bug tracking, and change management solutions</li>
<li>Experience with Linux, Microsoft, and virtual management solutions</li>
<li>Strong contributor with prior global team experience</li>
<li>Previous experience administering security infrastructure is a major plus</li>
<li>Knowledge of data security architecture, data classification and writing policies</li>
<li>Ability to work independently and manage time effectively</li>
<li>Solid verbal, written and interpersonal skills to enable effective cross-department communications</li>
<li>Knowledge of cloud security architectures, strategies and standards is a plus</li>
<li>Fluency in at least one scripting language is a plus</li>
<li>Familiarity with coding languages, Python, Java, etc. is a major plus</li>
</ul>
<h3>Education:</h3>
<ul>
<li>BSCS, IT or equivalent required, MSCS or equivalent strongly preferred</li>
</ul>
<p>#LI-AS1</p><p>Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer to <a href="https://www.netskope.com/privacy-policy" rel="noopener noreferrer nofollow ugc" target="_blank">Netskope's Privacy Policy</a> for more details.</p>

Security Analyst

Apply to Golangvernance Cyber Security Jobs in companies remotely and near you. New Golangvernance Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Sr. Security Engineer at Amazon.com	Full Time Application Security Automation AWS C
Senior GRC and Security Analyst at Lob	Remote Full Time Analyst Incident Response Audits
Sr Enterprise Security Engineer II at Rubrik	Full Time Analyst Windows Automation AWS
Americas Information Security Officer at Kin + Carta	Remote Full Time CISM Comptia Audits
Security Analyst at Netskope	Full Time Analyst Incident Response Application Security Cloud

Golangvernance Cyber Security Jobs

0 Golangvernance Cyber Security Jobs. Page 1 of 1

5 closed golangvernance cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Golangvernance Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Golangvernance Cyber Security Jobs

0 Golangvernance Cyber Security Jobs. Page 1 of 1

5 closed golangvernance cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Golangvernance Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter