Snowflake Inc.

We’re at the forefront of the data revolution, committed to building the world’s greatest data and applications platform. Our ‘get it done’ culture allows everyone at Snowflake to have an equal opportunity to innovate on new ideas, create work with a lasting impact, and excel in a culture of collaboration.
We are looking for motivated, passionate experts in security engineering, fraud and anti-abuse to focus on protecting Streamlit Community Cloud. Streamlit is an open-source Python library that makes it easy to create and share beautiful, custom web apps for machine learning and data science. As a member of the Security and Anti-Abuse team, you’ll be responsible for building tools and strategies to defend Streamlit Community Cloud and Snowflake from bad actors and abuse. 
In this role, you will work with cross-functional partners from many teams including the Streamlit team, threat detection, incident response, and product security to analyze abuse vectors and define roadmaps and strategies. You will be responsible for anticipating and protecting against abuse threats, building necessary tools, and defining abuse detection and response playbooks.
<h3>RESPONSIBILITIES :</h3>
<ul>
<li>Understand and identify gaps in our anti-abuse strategy and work with stakeholders to develop an anti-abuse roadmap for Streamlit Community Cloud.</li>
<li>Evaluate the capabilities of existing security tools to detect abuse (e.g., cryptomining on the platform) and make recommendations when to buy and when to build in-house.</li>
<li>Work with stakeholders to develop, integrate and deploy abuse detection, prevention, and response capabilities.</li>
<li>Consult with development teams to provide guidance on new features and anti-abuse recommendations.</li>
<li>Operate and continuously improve existing abuse capabilities.</li>
</ul>
<h3>MINIMUM QUALIFICATIONS :</h3>
<ul>
<li>Bachelor's degree in Computer Science or related technical field or equivalent practical experience.</li>
<li>Fluency in one or more programming or scripting languages: Java, Python, C++, Go, JavaScript.</li>
<li>Knowledge of security engineering, computer and network security, security protocols, and applied cryptography.</li>
<li>Expert understanding of software security architecture and design, threat modeling, code review, SDLC best practices, and mitigations for common application security issues</li>
<li>Experience deploying and customizing security tools like vulnerability scanners, static analyzers, web application firewalls, endpoint security monitors to detect abuse, security threats and other risks like cryptomining, fraud detection, obfuscation/evasion techniques, etc.</li>
</ul>
<h3>PREFERRED QUALIFICATIONS :</h3>
<ul>
<li>Experience designing, testing, and maintaining anti-abuse solutions and/or abuse detection and response playbooks</li>
<li>Prior experience working in a high growth, cloud native technology company</li>
<li>Understanding of modern cloud technology components and deployment patterns: virtual machines, containers, Kubernetes, serverless, infrastructure as code, etc.</li>
<li>Ability to write SQL queries and build dashboards, metrics, and reports to drive security outcomes</li>
<li>Experience using CI/CD pipelines to perform automated security testing</li>
</ul>
Snowflake is growing fast, and we’re scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake. 
How do you want to make your impact?

Bellevue

Security Engineer, Anti-Abuse, Streamlit Community Cloud

The Pokémon Company International

Get to know The Pokémon Company International
The Pokémon Company International, a subsidiary of The Pokémon Company in Japan, manages the property outside of Asia and is responsible for brand management, licensing, marketing, the Pokémon Trading Card Game, the animated TV series, home entertainment, and the official Pokémon website. Pokémon was launched in Japan in 1996 and today is one of the most popular children's entertainment properties in the world.
Learn more online at Pokemon.com and on Facebook (facebook.com/pokemon), YouTube (youtube.com/pokemon), Twitter (twitter.com/pokemon), and Instagram (instagram.com/pokemon).
Get to know the role
Job Title: Director, Information Security GRC
Job Summary: Oversees the development, deployment, and execution of the Information Security Governance Risk &amp; Compliance program and team. Ensures identification and mitigation of risks impacting TPCi are communicated, addressed, and mitigated. 
FLSA Classification (US Only): Exempt
People Manager: Yes
What you’ll do 
<ul>
<li>Manage the work, effectiveness, and professional development of the Information Security GRC staff and program.</li>
<li>Present security risks to leadership to drive decision making and agreement on risk reduction objectives pertaining to the GRC program.</li>
<li>Integrate security requirements into key business initiatives and represent Information Security in related operating committees ensuring comprehensive risk identification and management.</li>
<li>Ensure enterprise adherence to security and privacy policies, standards, and regulations.</li>
<li>Develop long-term goals and roadmaps for the GRC program and team members.</li>
<li>Embed security services and procedures into businesses processes.</li>
<li>Establish a sphere of influence with business leaders across TPCi and gain buy-in on Information Security GRC strategies and objectives to include Third-Party Risk Management, Identity &amp; Access Management, and Security/Privacy Compliance.</li>
<li>Interpret Information Security policies, standards, and regulations for business and technology leaders and translate into business practices.</li>
<li>Partner with TPCi Legal teams to define and drive on-going privacy and security compliance programs to ensure adherence with industry, national, and international regulatory requirements.</li>
<li>Ensure alignment with HR and business leadership on Identity &amp; Access Management efforts and objectives.</li>
<li>Develop KPIs for the respective programs within the Information Security GRC program.</li>
<li>Drive program-level process efficiencies to lessen operational burden on TPCi’s workforce.</li>
</ul>
What you’ll bring 
<ul>
<li>Ten+ (10+) years of relevant professional experience, plus seven (7) years of people management experience.</li>
<li>Experience in Information Security, Security Compliance, or Risk Management program leadership and personnel management.</li>
<li>Strong experience in presenting and communicating to executive leadership, specifically to the C-suite.</li>
<li>Strong background in risk management concepts, including risk identification, communication, and remediation.</li>
<li>Proven ability to build partnerships and collaboration between stakeholder teams.</li>
<li>Experience managing vendors and managed services providers.</li>
</ul>
How you’ll be successful
<ul>
<li>Passion for Pokémon: Develops an understanding of the Pokémon brand, the impact it has on our people, culture, business, fans, and communities, and applying that knowledge and passion to everything you do.</li>
<li>Challenging the Expected: Approaches challenges with curiosity and creativity, embracing the possibility of failure as an opportunity to learn something new, develop innovative ideas, solve complex problems and identify unique opportunities.  </li>
<li>Integrity and Respect: Demonstrates integrity and respect by leading with empathy, listening to others, seeking out different perspectives, and taking personal responsibility for decisions, actions, and results.</li>
<li>Dedicated to Quality: Takes ownership to maintain and promote high standards, looks for new ways to learn and improve, and embraces a growth mindset to seek and apply feedback from others in an effort to continuously improve. </li>
<li>Building Relationships: Develops and strengthens relationships, adopting a “team first” mentality and working collaboratively to solve problems and meet shared goals.  </li>
<li>Delighting Customers: Listens and understands the interests and needs of our customers and stakeholders, making them feel heard and important, and embracing these learnings to continue delivering a unique Pokémon experience.</li>
</ul>
What to expect 
<ul>
<li>An employee first culture</li>
<li>Company events that celebrate the spirit of Pokémon</li>
<li>Competitive cash-based compensation programs</li>
<li>Base salary range: $182,000.00 - $277,000.00. This range is applicable for the labor market where the role is intended to be hired. It is common for TPCi to start employees below the midpoint of the range. Final base salary is directly related to each candidates qualifications and experience uniquely.</li>
<li>100% employer-paid healthcare premiums for you</li>
<li>Generous paid family leave</li>
<li>Employer-paid life insurance</li>
<li>Employer-paid long and short-term income protection insurance</li>
<li>US Employees: 401k Employer Matching</li>
<li>UK/IRE Employees: Pension Employer Contributions</li>
<li>Fitness reimbursement</li>
<li>Commuter benefit</li>
<li>LinkedIn learning</li>
<li>Comprehensive relocation package</li>
<li>Hybrid work environment</li>
</ul>
The above statements are intended to describe the general nature and level of work being performed by people assigned to this role. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required. Employees may be required to perform duties outside of their normal responsibilities from time to time, as needed. For roles in the United Kingdom, candidates will need the right to work. In some cases, and for some roles, the Company may be able to arrange a visa. For roles in Ireland, this role requires candidates to have the right to live and work in the Republic of Ireland. However, we welcome applications from all nationalities and may consider supporting an employment permit application, in appropriate and suitable cases.
#LI-Hybrid #LI-PS

Director, Information Security GRC

First Information Technology Services

First Information Technology Services (FITS) has been providing Information Security, Cloud Computing Security, and IT consulting services since 2000. FITS consultants perform comprehensive assessments from beginning to end to produce meaningful, actionable reports that fit within an organization's comprehensive risk strategy.  Information Security Consultant - FedRAMP Assessment &amp; Advisory TeamAn Information Security Consultant provides subject matter expertise to our clients by bridging the gap between security requirements and their technical and operational implementations. Our consultants work diligently and collaboratively to identify risks associated with security gaps in the cloud and provide solutions on how those gaps may be addressed.FITS provides a dynamic work environment and supports a healthy work/life balance. We are invested in the growth and development of our employees. We are committed to ensuring that our staff is engaged and challenged by their work.
Essential Duties and Responsibilities
<ul>
<li>Engage in IT system security consultation within cloud-based environments in accordance with NIST 800-53, FedRAMP, and other authoritative IT security guidance.</li>
<li>Conduct assessments of existing IT architecture for compliance with security requirements from one or more security frameworks.</li>
<li>Interview engineers on technical subject matter.</li>
<li>Author IT security policies, whitepapers, and documentation to support information system authorization and accreditation packages.</li>
<li>Provide technical IT architectural security guidance for operational systems and systems under development.</li>
<li>Evaluate risks associated with systems or planned changes and recommend mitigation strategies.</li>
</ul>
Required Qualifications
<ul>
<li>Bachelor's degree preferred; or equivalent combination of experience in information technology, IT audit, and/or program management, certifications, and training</li>
<li>At least one of the following certifications:
<ul>
<li>Cisco Certified Network Associate Security (CCNA Security)</li>
<li>Cisco Certified Network Associate Cyber Security Operations (CCNA Cyber Ops)</li>
<li>Cybersecurity Analyst (CySA+)</li>
<li>GIAC Certified Incident Handler (GCIH)</li>
<li>GIAC Systems and Network Auditor (GSNA)</li>
<li>GIAC Certified Intrusion Analyst (GCIA)</li>
<li>Certified Information Systems Auditor (CISA)</li>
<li>Certified Information System Security Professional or Associate (CISSP or Associate)</li>
<li>Certified Secure Software Lifecycle Professional (CSSLP)</li>
<li>Certified Information Systems Security Officer (CISSO)</li>
<li>CyberSec First Responder (CFR)</li>
<li>CompTIA Advanced Security Practitioner Continuing Education (CASP+) Continuing Education (CE)</li>
<li>CompTIA Cloud+ (Cloud+)</li>
<li>Global Industrial Cyber Security Professional (GICSP)</li>
<li>Securing Cisco® Networks with Threat Detection Analysis (SCYBER)</li>
</ul>
</li>
<li>Experience auditing or supporting audits of IT systems against common security frameworks</li>
<li>Excellent written and verbal communication and interpersonal skills</li>
<li>Strong attention to detail, organization, resourcefulness, and critical thinking skills</li>
</ul>
Preferred Qualifications
<ul>
<li>Exposure to FedRAMP and/or NIST 800-53 is a plus.</li>
<li>Experience implementing information security principles and risk assessment techniques.</li>
<li>Experience completing or managing projects, tasks, and deliverables with minimal supervisory oversight.</li>
<li>Proficiency in one or more of the following areas: virtualization, data visualization and analysis, automation, systems engineering, and/or cloud administration.</li>
</ul>
Location: Remote from US
Salary Range: from $90,000 to $150,000 per annum
FITS maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience and market conditions. 
The successful candidate for this position will be subject to a pre-employment background check. First Information Technology Services, Inc. believes that a well-rounded compensation package helps teams members thrive in their work and home life. FITS proudly invests in benefits for its employees, covering 100% of health, dental, and vision coverage for employees and their dependents, paid time off, holidays, matching 401(K), short/long term disability, and parental leave. FITS also provides up to $5,000 annually for professional development, including reimbursement of job-related training classes, seminars, tuition, and certification expenses. 
FITS is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind. FITS is committed to the principle of equal employment opportunity for all employees and to provide employees with a work environment free of discrimination and harassment. All employment decisions at FITS are based on business needs, job requirements, and individual qualifications, regardless of race, color, ethnicity, age, religion or belief, sex, sexual orientation, gender identity and/or expression, national origin, family or parental status, disability, military or veteran status, or any other status protected by the laws or regulations in the locations where we operate.

Consultant, FedRAMP Advisory

First Information Technology Services (FITS) has been providing Information Security, Cloud Computing Security, and IT consulting services since 2000. FITS consultants perform comprehensive assessments from beginning to end to produce meaningful, actionable reports that fit within an organization's comprehensive risk strategy.  Program Overview:
First Information Technology Services, Inc. is a leading Assessment and Advisory consulting firm with headquarters in Arlington, Virginia and Bellevue, Washington. Our consultants are expected to perform audit and assessment activities for some clients and advise others in how to architect a secure, compliant infrastructure. 
We’re looking for a Lead Penetration Tester who has the technical competence to be able to complete a penetration test in accordace with <a href="https://www.fedramp.gov/assets/resources/documents/CSP_Penetration_Test_Guidance.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">FedRAMP Penetration Test Guidance and requirements</a>. This person must be proficient in collecting artifacts, evaluating systems/artifacts, and running penetration/security evaluation tools. 
Essential Duties and Responsibilities
<ul>
<li>Execute penetration testing assessments, including identifying and exploiting security vulnerabilities in hybrid infrastructure using the established methodology and tools.</li>
<li>Utilize industry standard security penetration and auditing tools to conduct real-world attack simulations.</li>
<li>Perform deep technical analysis of vulnerabilities within the FITS customer environmentd and develop actionable recommendations to reduce associated risks.</li>
<li>Provide leadership, mentoring, and training to pentest team members.</li>
<li>Research and stay current with new threats, attack vectors and techniques, risk, and cloud security trends.</li>
</ul>
Required Qualifications
<ul>
<li>2+ years of penetration testing experience as a lead penetration tester</li>
<li>At least one of the following technical certifications:
<ul>
<li>Cisco Certified Network Professional Security (CCNP Security)</li>
<li>CompTIA Advanced Security Practitioner (CASP+) Continuing Education (CE)</li>
<li>Certified Information Systems Security Professional (CISSP)</li>
<li>Certified Secure Software Lifecycle Professional (CSSLP)</li>
<li>CISSP-Information Systems Security Engineering Professional (CISSP-ISSEP)</li>
<li>SANS GIAC Penetration Tester (GPEN)</li>
<li>Open Web Application Security Project (OWASP) Penetration Tester</li>
</ul>
</li>
<li>Experience in application/infrastructure vulnerability assessments and remediation</li>
<li>Experience with penetration testing using tools, including Burp Suite Professional/Enterprise, Kali Linux, Metasploit, NMAP, Cobalt Strike, Nikto, SQLMAP, ZAP, Censys, Masscan, SpiderFoot, etc.</li>
<li>Experience with manually exploited weaknesses, consisting of Cross Site Scripting (XSS), XML External Entity (XXE), SQL Injection (SQLi), Cross Site Request Forgery (CSRF) and information disclosures</li>
<li>Familiarity with building, deploying, maintaining, and troubleshooting virtual machines using tools and virtualization platforms such as VMWare, oVirt, and ESXi</li>
<li>Familiarity with command line interface of multiple operating systems, such as Windows, macOS, Linux</li>
<li>Knowledge of fundamental penetration testing methodology and ability to test for OWASP Top 10 Vulnerabilities</li>
</ul>
Preferred Qualifications
<ul>
<li>Ability to pen test PaaS, IaaS, mobile applications, and web applications</li>
<li>Experience with scripting/programming, e.g., Python, PowerShell, HTML</li>
<li>Experience with ticketing systems </li>
<li>Active involvement in security community, e.g., participating in CTF competitions, bug bounties, or developing open-source tools</li>
</ul>
Location: REMOTE FROM UNITED STATES. Preference given to candidates local to Bellevue, WA.
This is a fully remote opportunity for US Citizens. 
First Information Technology Services, Inc. believes that a well-rounded compensation package helps teams members thrive in their work and home life. FITS proudly invests in benefits for its employees, covering 100% of health, dental, and vision coverage for employees and their dependents, paid time off, holidays, matching 401(K), short/long term disability, and parental leave. FITS also provides up to $5,000 annually for professional development, including reimbursement of job-related training classes, seminars, tuition, and certification expenses. 
FITS is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind. FITS is committed to the principle of equal employment opportunity for all employees and to provide employees with a work environment free of discrimination and harassment. All employment decisions at FITS are based on business needs, job requirements, and individual qualifications, regardless of race, color, ethnicity, age, religion or belief, sex, sexual orientation, gender identity and/or expression, national origin, family or parental status, disability, military or veteran status, or any other status protected by the laws or regulations in the locations where we operate.

Lead Penetration Tester

We’re at the forefront of the data revolution, committed to building the world’s greatest data and applications platform. Our ‘get it done’ culture allows everyone at Snowflake to have an equal opportunity to innovate on new ideas, create work with a lasting impact, and excel in a culture of collaboration.Snowflake Corporate Security team is laser focused on making security better for all Corporate/IT products and services. As a member of this team you will be involved in driving the security strategies across the corporate environment that balances Snowflake’s business growth while effectively managing security risks. The Corporate Security Architecture is looking for passionate Security Engineers and/or Security Architects to join this team and raise the security bar for Snowflake.
<h3>WHAT YOU WILL DO</h3>
<ul>
<li>Work alongside the engineering teams, providing expert leadership and advice on secure cloud architecture, design, and implementation.</li>
<li>Create and scale security products and services that developers love, and would line up to get</li>
<li>Level up your skills securing modern languages and technologies running in a true multi-cloud/SaaS environment like AWS, GCP, Azure, Salesforce and many more.</li>
<li>Lead with code, automation and data in everything you do</li>
<li>Create security impact across partner teams, with strong support from the business</li>
<li>Lead the security architecture, complete threat modeling, complete security testing and drive the DevSecOps model for partner teams.</li>
</ul>
<h3>WHAT YOU NEED</h3>
<ul>
<li>You have helped build an application security program before, and have a clear vision for how you would make it better</li>
<li>You have multi year (&gt;5 years)  experience with threat modeling, secure architecture and security testing in the Cloud (AWS, GCP and Azure) and SaaS space.</li>
<li>You have real world experience in some of basic security concepts like Identity, Data protection, Monitoring and IR in the cloud services space.</li>
<li>You have prior experience in working with off the shelf SaaS products and services.</li>
<li>You have a proven ability to manage yourself and produce results</li>
<li>You can learn and find bugs in any language, specifically Java, JavaScript, Go, and Python</li>
<li>You are a hands on developer in one or more of Java, JavaScript, Go, or Python languages</li>
<li>You have expert knowledge of security testing tools and techniques</li>
<li>You are a strong communicator who is comfortable working cross-functionally, with a track record of delivering results and demonstrating strong ownership.</li>
</ul>
<h3>WHY YOU SHOULD WORK WITH US</h3>
<ul>
<li>We are laser focused on doing security better, and we do not tolerate the status quo.</li>
<li>We have strong demand from our customers, and support from the business for security.</li>
<li>We are a great team that combines a diverse set of backgrounds and skills.</li>
<li>Did we mention we are one of the fastest-growing software companies, ever? The opportunity for impact is enormous</li>
</ul>Snowflake is growing fast, and we’re scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake. 
How do you want to make your impact?

Sr. Security Engineer

Apply to Cyber Security Jobs in Bellevue in companies remotely and near you. New Cyber Security Jobs in Bellevue added daily.

Job Position and Company	Location	Tags	Posted
Security Engineer, Anti-Abuse, Streamlit Community Cloud at Snowflake Inc.	Full Time Incident Response Javascript Application Security
Director, Information Security GRC at The Pokémon Company International	Full Time Manager
Consultant, FedRAMP Advisory at First Information Technology Services	Remote Full Time Comptia Consultant Audit
Lead Penetration Tester at First Information Technology Services	Remote Full Time Comptia Audit Consulting
Sr. Security Engineer at Snowflake Inc.	Full Time Devsecops Javascript Application Security

Cyber Security Jobs in Bellevue

0 Cyber Security Jobs in Bellevue. Page 1 of 1

5 closed cyber security jobs in bellevue:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Cyber Security Jobs in Bellevue

0 Cyber Security Jobs in Bellevue. Page 1 of 1

5 closed cyber security jobs in bellevue:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter