Zoox

The Product Security team is responsible for ensuring that Zoox delivers a cyber-secure product to the market. The team is composed of professionals with a variety of backgrounds, including software engineering, offensive security, and security automation. This specific role involves significant amounts of work as a security professional across multiple functions, including Software Engineering, InfoSec and IT, and DevOps.
<h3>Responsibilities </h3>
<ul>
<li>Analyze infrastructure that supports production, enterprise, and operational systems.</li><li>Own attack tree construction and analysis, and threat modeling activities that span IT/OT/PT.</li><li>Design, recommend, and implement secure service, credential management, and CI/CD architectures.</li><li>Be the subject matter expert on securing cloud and data center services, both in terms of underlying infrastructure configuration and in-service business logic design implementation. Design and build tooling to drive robust and secure IaC practices across the company.</li><li>Guide thinking and designs in the areas of account management, infrastructure provisioning, and intranet segmentation.</li><li>Work with stakeholders across Product Security, Enterprise Security, DevOps, and other infrastructure software groups to motivate a security evolution roadmap with a sharp focus on both near-term needs and long-term strategy.</li><li>Advocate, design, build, and roll out zero-trust infrastructure.</li></ul>
<h3>Qualifications</h3>
<ul>
<li>Solid CS background that enables you to think and work as a software engineer. BS or higher in Computer Science. Experience building production software is highly preferred.</li><li>Demonstrated, sustained cybersecurity expertise as an individual contributor as well as in a lead role, including knowledge of cloud system security, enterprise security, as well as product security (including modeling the interactions of enterprise and production systems as well as connectivity to SaaS).</li><li>Track record of working cross-functionally between engineering, IT, and operations organizations.</li><li>Constructive, high-EQ, result-oriented attitude.</li><li>Demonstrated understanding of cloud software and CI/CD systems, and skills in integrating security tooling into them.</li><li>Demonstrated ability to think as an attacker and carry out independent, hands-on vulnerability and mitigation analysis.</li><li>Understanding of past vulnerabilities in major software libraries (e.g. OpenSSL, libc…) and their mitigations. Historical perspective on sources of cyber security problems and strong intuition for secure system architectures.</li></ul>Vaccine MandateEmployees working in this position will be required to have received a single dose of the J&amp;J/Janssen COVID-19 vaccine OR have completed the two-dose Pfizer or Moderna vaccine series. In addition, employees will be required to receive a COVID-19 booster vaccine within two months of becoming eligible for the booster vaccine.Employees will be required to show proof of vaccination status upon receipt of a conditional offer of employment. That offer of employment will be conditioned upon, among other things, an Applicant’s ability to show proof of vaccination status. Please note the Company provides reasonable accommodations in accordance with applicable state, federal, and local laws.About ZooxZoox is developing the first ground-up, fully autonomous vehicle fleet and the supporting ecosystem required to bring this technology to market. Sitting at the intersection of robotics, machine learning, and design, Zoox aims to provide the next generation of mobility-as-a-service in urban environments. We’re looking for top talent that shares our passion and wants to be part of a fast-moving and highly execution-oriented team.Follow us on LinkedInA Final Note:You do not need to match every listed expectation to apply for this position. Here at Zoox, we know that diverse perspectives foster the innovation we need to be successful, and we are committed to building a team that encompasses a variety of backgrounds, experiences, and skills.

Foster City

Software Engineer, Converged Infrastructure Security Lead

Exabeam

Exabeam is a global cybersecurity leader that adds intelligence to every IT and security stack. The leader in Next-gen SIEM and XDR, Exabeam is reinventing the way security teams use analytics and automation to solve Threat Detection, Investigation, and Response (TDIR), from common security threats to the most critical that are difficult to identify. Exabeam offers a comprehensive cloud-delivered solution that leverages machine learning and automation using a prescriptive, outcomes-based approach to TDIR. We design and build products to help security teams detect external threats, compromised users and malicious adversaries, minimize false positives and best protect their organizations. For more information, visit www.exabeam.comOverview As a Director of Security Research at Exabeam, you will create and drive a strategy to grow our security research capabilities by reversing and developing new detection techniques and increasing awareness of Exabeam within the cybersecurity community. You will be a key member in defining and executing a long-term strategy to grow the research team and build innovative TDIR capabilities that protect Exabeam customers.  A successful Director of Security Research needs to be passionate about cyber security and building new unique capabilities to detect, investigate and respond to new threats. This person should be comfortable and eager to share their point of view and that of the team at industry events, through blogs and on social. A successful Director of Security Research thrives on leading cross-functional projects and can effectively work across different teams, including Product Management, Engineering, Sales, and Marketing.  We are seeking a Director of Security Research who has a deep understanding of security threats that span on-prem and cloud technologies. Someone that thrives under the pressure of understanding new and emerging threats to deliver near real time detection capabilities. Someone that has built and scaled teams in the past with varied backgrounds and across multiple geographic locations.  
<h3>Responsibilities:</span>
<ul>
<li>Manage, mentor, and grow Exabeam’s Security Research team </li><li>Own and execute a long-term strategy to ensure the ability to quickly identify, reverse, and build new detections for emerging threats </li><li>Work closely with our Data Science team to develop new algorithms for detection, context generation and threat hunting </li><li>Identify and implement new processes and frameworks to streamline the way the team works and gain efficiency </li><li>Consult and work alongside other departments as a cyber security subject matter expert </li><li>Build outstanding relationships with field teams, customers, and industry peers to identify new ways to collaborate and drive the industry forward </li><li>Develop an understanding of the market landscape to identify key areas of differentiation and areas of strategic importance  </li></ul>
<h3>Skills to Succeed:</h3>
<ul>
<li>Deep understanding of the threat landscape across on-prem and cloud environments  </li><li>Strong technical skills to assist in the planning and development of new tooling  </li><li>Communicating: Know your audience and vary your style based on it. You can effectively influence and communicate cross-functionally with all levels of management with exceptional verbal and written communication skills </li><li>Ability to distill research findings for a broad audience including technical and non-technical parties </li><li>Strong sense of ownership to drive a strategy from conception through execution </li><li>Effective Program Management skills, with demonstrated ability to lead complex strategic and operational initiatives </li><li>Excellent judgment and critical thinking skills, and drive for results </li></ul>
<h3>Qualifications:</h3>
<ul>
<li>BS degree or equivalent practical experience </li><li>6+ years of experience in security research, security operations or similar roles </li><li>3+ years of experience in cloud security focused on AWS, Azure and GCP </li><li>Deep understanding of the MITRE attack framework </li><li>Experience speaking to customers about current TDIR processes and ways to improve </li><li>Experience supporting and contributing to the open-source community </li><li>Experience managing and growing a globally distributed team  </li><li>Experience partnering effectively with cross-functional teams and leaders </li><li>Ability to work across multiple functions - including Communications, PR, Sales, Marketing, Finance, and Customer Success </li><li>Deep understanding of enterprise IT environments, networks, and how they integrate with other products </li></ul>Exabeam is privately funded by Blue Owl Capital, Lightspeed Venture Partners, Cisco Investments, Norwest Venture Partners, Acrew Capital, Icon Ventures, and renowned cybersecurity investor Shlomo Kramer. For more information visit https://www.exabeam.com or follow us on LinkedIn and Twitter . Looking for more? Check our reviews on Glassdoor .

Director, Security Research

The product security organization at Zoox focuses on designing, building, and measuring cybersecurity in Zoox products.Our scope is broad; we:- Architect and develop security features and subsystems- Build training content and research mechanisms to improve code security and encourage secure software development practices- Quantify and mitigate the risk that stems from numerous software dependencies- Investigate areas at risk for exploits: from AI and sensor stack to physical vehicle design to communications equipmentThe product security team is looking for Master's or Ph.D. candidates with relevant experience. Examples include, but are not limited to, research in static and dynamic code analysis, adversarial models for AI/ML systems or sensors, advanced interface fuzzing, and pen testing.
<h3>Requirements</h3>
<ul>
<li>Currently working towards M.S., Ph.D., or advanced degree in a relevant engineering program. </li><li>Good academic standing</li><li>Can commit to at least a 12-week internship</li><li>At least one previous industry internship, co-op, or project completed in a relevant area</li><li>Ability to relocate to the Bay Area, California for the duration of the internship</li><li>Interns at Zoox may not use any proprietary information they are working on as part of their thesis, any published work with their university, or to be distributed to anyone outside of Zoox.</li></ul>
<h3>Qualifications</h3>
<ul>
<li>Proficiency in C++ and/or Python</li><li>Academic work in computer security (may include networking, applied crypto, formal methods, and programming languages)</li><li>Research and/or demonstrated interest and results in cybersecurity evidenced by publications with the candidate as primary author or presentations at high-profile events (BlackHat, Defcon).</li><li>Ability to work independently as a software engineer</li></ul>Vaccine MandateEmployees working in this position will be required to have received a single dose of the J&amp;J/Janssen COVID-19 vaccine OR have completed the two-dose Pfizer or Moderna vaccine series. In addition, employees will be required to receive a COVID-19 booster vaccine by the earlier of (1) April 15 or (2) within two months of becoming eligible for the booster vaccine.Employees will be required to show proof of vaccination status upon receipt of a conditional offer of employment. That offer of employment will be conditioned upon, among other things, an Applicant’s ability to show proof of vaccination status. Please note the Company provides reasonable accommodations in accordance with applicable state, federal, and local laws.About ZooxZoox is developing the first ground-up, fully autonomous vehicle fleet and the supporting ecosystem required to bring this technology to market. Sitting at the intersection of robotics, machine learning, and design, Zoox aims to provide the next generation of mobility-as-a-service in urban environments. We’re looking for top talent that shares our passion and wants to be part of a fast-moving and highly execution-oriented team.<a href="https://www.linkedin.com/company/zoox-inc" rel="noopener noreferrer nofollow ugc" target="_blank">Follow us on LinkedIn</a>A Final Note:You do not need to match every listed expectation to apply for this position. Here at Zoox, we know that diverse perspectives foster the innovation we need to be successful, and we are committed to building a team that encompasses a variety of backgrounds, experiences, and skills.

Product Security Internship/Co-op

Team OverviewThe Product Security Automation and Scalability team responsibilities include automated analysis of production software and infrastructure, the establishment of scalable and sustainable software development processes, and vulnerability management across a diverse and extensive codebase that targets both embedded and cloud environments.Team MembersWe are looking for individuals with a strong software engineering background, and demonstrated passion and expertise in computer security. Ideal candidates will have experience with static and dynamic software analysis tools and frameworks, proven hands-on skills in software, cloud, and build system engineering, and strong intuition about software vulnerabilities.
<h3>Responsibilities</h3>
<ul>
<li>Design, recommend, and implement secure service and CI/CD architectures.</li><li>Represent and champion product security with Infrastructure and InfoSec / IT.</li><li>Design and build systems and frameworks to emit and aggregate infrastructure signals.</li><li>Design and build tooling to drive robust and secure IaC practices across the company.</li><li>Design, review, and build product end-to-end workflows: user and system authentication, identity &amp; credential management.</li><li>Advocate, design, build, and roll-out zero-trust infrastructure.</li></ul>
<h3>Qualifications</h3>
<ul>
<li>Bachelor’s degree in CS or related field (we would consider candidates without a college degree if they demonstrate the relevant skills via extensive experience and interviews). The best candidates will have relevant advanced degrees and/or solid industry or independent research experience working with production codebases.</li><li>Demonstrated programming skills in at least one compiled and one interpreted language.</li><li>Demonstrated understanding of cloud software and CI/CD systems, and skills in integrating security tooling into them.</li><li>Demonstrated ability to think as an attacker and carry out independent, hands-on vulnerability and mitigation analysis.</li><li>Understanding of vulnerabilities in major software libraries (e.g. openssl, libc…) and their mitigations. Historical perspective on major sources of problems and good intuition and ability to prioritize for return-on-investment among in-house codebase, 3rd party dependencies, CI/CD pipeline security controls, etc.</li></ul>
<h3>Bonus Qualifications</h3>
<ul>
<li>Deep and broad hands-on experience with cloud systems.</li><li>Sophisticated understanding of [how to] secure software systems.</li><li>Highly proficient in at least one interpreted and one compiled language.</li><li>Proven experience securing production environments.</li><li>Cross-functional EQ.</li></ul>Vaccine MandateEmployees working in this position will be required to have received a single dose of the J&amp;J/Janssen COVID-19 vaccine OR have completed the two-dose Pfizer or Moderna vaccine series. In addition, employees will be required to receive a COVID-19 booster vaccine by the earlier of (1) April 15 or (2) within two months of becoming eligible for the booster vaccine.Employees will be required to show proof of vaccination status upon receipt of a conditional offer of employment. That offer of employment will be conditioned upon, among other things, an Applicant’s ability to show proof of vaccination status. Please note the Company provides reasonable accommodations in accordance with applicable state, federal, and local laws.About ZooxZoox is developing the first ground-up, fully autonomous vehicle fleet and the supporting ecosystem required to bring this technology to market. Sitting at the intersection of robotics, machine learning, and design, Zoox aims to provide the next generation of mobility-as-a-service in urban environments. We’re looking for top talent that shares our passion and wants to be part of a fast-moving and highly execution-oriented team.<a href="https://www.linkedin.com/company/zoox-inc" rel="noopener noreferrer nofollow ugc" target="_blank">Follow us on LinkedIn</a>A Final Note:You do not need to match every listed expectation to apply for this position. Here at Zoox, we know that diverse perspectives foster the innovation we need to be successful, and we are committed to building a team that encompasses a variety of backgrounds, experiences, and skills.

(DefCon) Software Engineer, Security Automation and Scalability Lead

Zoox is looking for a cloud security engineer to join our Enterprise Security team. In this role your responsibility will be to audit and report on cloud security issues and find the best options to permanently address them. Candidates for this role should be experienced in leading inter-team efforts to resolve security issues and to find permanent, scalable solutions using infrastructure-as-code methodologies wherever possible.In order to be effective in this role, candidates should have solid experience and understanding of infrastructure-as-code. Experience with software development and/or proficiency with scripting is required. 
<h3>Responsibilities</h3>
<ul>
<li>Perform audits of Zoox’s cloud environments and report on validated vulnerabilities and policy compliance deviations discovered.</li><li>Work with cloud service owners to identify and fix implementation practices that create security risks.</li><li>Create design standards for Zoox’s AWS service implementations.</li><li>Document best practices for deploying services into AWS using Infrastructure-as-code methodologies.</li><li>Automate existing reporting and ticketing so that Zoox can drive faster cycle time on risk remediation in our cloud environments.</li></ul>
<h3>Qualifications</h3>
<ul>
<li>Extensive experience and deep understanding of IAM within the cloud, including federated identity and the use of roles.</li><li>2-3 years Cloud security engineering and risk reduction experience</li><li>5+ years of experience in the operations and design of cloud environments (i.e AWS, GCP, Azure)</li><li>3 or more years security and compliance experience for cloud environments using frameworks such as NIST, CIS, and ISO</li><li>8 or more years working in information security roles</li><li>10-15 year working in information technology roles</li><li>AWS Security Certification or similar</li></ul>Vaccine MandateEmployees working in this position will be required to have received a single dose of the J&amp;J/Janssen COVID-19 vaccine OR have completed the two-dose Pfizer or Moderna vaccine series. In addition, employees will be required to receive a COVID-19 booster vaccine by the earlier of (1) April 15 or (2) within two months of becoming eligible for the booster vaccine.Employees will be required to show proof of vaccination status upon receipt of a conditional offer of employment. That offer of employment will be conditioned upon, among other things, an Applicant’s ability to show proof of vaccination status. Please note the Company provides reasonable accommodations in accordance with applicable state, federal, and local laws.About ZooxZoox is developing the first ground-up, fully autonomous vehicle fleet and the supporting ecosystem required to bring this technology to market. Sitting at the intersection of robotics, machine learning, and design, Zoox aims to provide the next generation of mobility-as-a-service in urban environments. We’re looking for top talent that shares our passion and wants to be part of a fast-moving and highly execution-oriented team.<a href="https://www.linkedin.com/company/zoox-inc" rel="noopener noreferrer nofollow ugc" target="_blank">Follow us on LinkedIn</a>A Final Note:You do not need to match every listed expectation to apply for this position. Here at Zoox, we know that diverse perspectives foster the innovation we need to be successful, and we are committed to building a team that encompasses a variety of backgrounds, experiences, and skills.

(DefCon) Cloud Security Engineer

Apply to Cyber Security Jobs in Foster City in companies remotely and near you. New Cyber Security Jobs in Foster City added daily.

Job Position and Company	Location	Tags	Posted
Software Engineer, Converged Infrastructure Security Lead at Zoox	Full Time
Director, Security Research at Exabeam	Full Time
Product Security Internship/Co-op at Zoox	Internship
(DefCon) Software Engineer, Security Automation and Scalability Lead at Zoox	Full Time
(DefCon) Cloud Security Engineer at Zoox	Full Time Audit

Cyber Security Jobs in Foster City

0 Cyber Security Jobs in Foster City. Page 1 of 1

5 closed cyber security jobs in foster city:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Cyber Security Jobs in Foster City

0 Cyber Security Jobs in Foster City. Page 1 of 1

5 closed cyber security jobs in foster city:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter