Zwift

Seniority Level:  Mid-Senior, 
Location: Remote
About the role and about You:
Reporting to the Director, Information Security you will assist in driving key objectives as it relates to the Application Security program. Reporting key metrics to leadership about the state of our applications and the remediation efforts
The Application Security program strives to establish a "paved road" for our engineers so that they can more-easily deliver secure software with minimal friction, supporting their work across the entire Secure Development Lifecycle (SDLC). 
As an Application Security Engineer, you'll serve as a key member of the Application Security program, within the Information Security department. You'll influence Engineering to adopt security and privacy by design, secure SDLC, and provide internal consulting on tracking and following up on remediating security vulnerabilities. You'll work on complex platform security projects both independently and collaboratively in our agile environment. This role requires a background in security as it relates to platform infrastructure, application security, and other aspects of cloud infrastructure security.
What you’ll do:
<ul>
<li> Monitor the industry for newly identified threats to cybersecurity and assess the risk to Zwift products</li>
<li>Assist with product development efforts dealing with security and application vulnerability issues</li>
<li>Integrate security into the development pipelines. Improving process and the developer experience through automated security testing</li>
<li>Assist the development teams in creating cloud native applications following industry best practices</li>
<li>Continuously review and assess company projects/products, identify the risks, and help provide solutions</li>
</ul>
What you'll have: 
<ul>
<li> Familiar with industry best practices for secure coding and software security foundations</li>
<li> Experience in Programming languages such as Python, Go, and Java</li>
<li> Experience reviewing SAST, DAST, penetration test, and SCA results and providing remediation recommendations</li>
<li> Capable of architecting, engineering, and operationalizing application security technologies through plan, development, build, test, release, deploy, operate, and monitor phases of the SDLC</li>
<li> Previous development and security code review experience</li>
</ul>
Bonus points:
<ul>
<li>Familiarity with application security practices in a cloud first environment</li>
<li> Awareness of numerous vulnerability classes, with knowledge of modern mitigation techniques</li>
</ul>
How to stand out among the rest:
Your resume/CV is enough to show off your skills, accomplishments, and experience. However, if you choose to include a cover letter introducing us to your awesome personality, we will read that too.
We strongly believe that different backgrounds and ideas are a competitive advantage; we hire candidates of any race, color, ancestry, religion, sex, national origin, sexual orientation, gender identity, age, marital or family status, disability, Veteran status, and any other status. Zwift is proud to be an Equal Opportunity Employer. If you have a disability or special need that requires accommodation, please let us know by emailing careers@zwift.com. 
Zwift, Inc. is an Equal Opportunity Employer.
Transparency in Coverage: 
Health plan price transparency is designed to help consumers know the cost of covered items or healthcare-related services prior to the date upon which they receive care. Transparency in Coverage (TIC) regulations require health insurers and group health plans to create machine readable files (MRFs) that contain the negotiated rates for in-network providers and allowed amounts derived from historical claims for out-of-network providers and make those files publicly available.
Here is the link to the site on which Kaiser Permanente posts its in-network and out-of-network allowed amount machine-readable files (MRFs).
Here is the link to the site on which Anthem posts  its in-network and out-of-network allowed amount machine-readable files (MRFs). The link will allow you to search for your files using your Employer Identification Number (81-2798595)

Long Beach

Sr. Application Security Engineer

Relativity

Company Overview:  
Relativity is the first and only company to automate aerospace manufacturing by integrating intelligent robotics, software, and proprietary metal 3D printing technology. Disrupting 60 years of aerospace, Relativity offers a radically simplified supply chain, building a rocket with 100x fewer parts in less than 60 days. Our long-term goal is to upgrade humanity’s industrial base on Earth and on Mars.  
Team:  
We are looking for a Senior Information Security Engineer to join our growing team at our headquarters in Long Beach, CA.  In this role, you will be part of a team supporting our company’s efforts in designing and implementing a world class Information Security Program across our 3d printing and rocket manufacturing teams.  You will be responsible for designing, engineering, and supporting all aspects of Information Security for our company, working closely with engineering, legal, and IT teams to implement robust controls and create meaningful security instrumentation.
What you’ll do: 
To be successful in this role, you should have 7+ years of experience as an Information Security Professional, ideally in a mix of small-to-midsized, high-growth environments as well as large enterprise environments with a heavy focus on technology, engineering, and manufacturing. Prior experience in managing security in complex cloud environments, container security, Windows AD, network infrastructure, endpoint security, data analysis and instrumentation, and a deep passion for hands-on technical problem solving are critical. You thrive in ambiguous environments, are passionate about technology and finding ways to automate tasks, and have an untiring focus on excellent results.
What you need to know:  
<ul>
<li>Bachelor’s degree in a technical field to include one of the following (computer science, computer information systems, information security) and 5+ years of experience in system administration/engineering</li>
<li>Expert working knowledge of cloud security architecture and tools</li>
<li>Expert working knowledge of Windows AD system security</li>
<li>Expert working knowledge of network security including firewalls, 802.1x (NAC), and traffic analysis</li>
<li>Expert working knowledge of Identity and Access Management (IAM)</li>
<li>Expert working knowledge of SIEM</li>
<li>Deep knowledge of Security Orchestration, Automation, and Response (SOAR)</li>
<li>Strong experience with vulnerability and patch management</li>
<li>Strong experience with data classification and Data Leakage Prevention (DLP)</li>
<li>Demonstrated experience with DevSecOps</li>
<li>Experience performing vulnerability assessment and penetration testing</li>
<li>Strong knowledge of PKI</li>
</ul>
Nice to haves but not required:  
<ul>
<li>Master’s degree in a technical field to include one of the following (computer science, computer information systems, information security), and 5+ years of experience in Information Security</li>
<li>Expert knowledge or certification for Azure or AWS cloud security</li>
<li>Experience with regulatory compliance mandates such as ITAR, PCI, or HIPAA</li>
<li>Experience performing penetration tests</li>
</ul>
Relativity Space offers competitive salary and equity, a generous vacation policy, an annual L&amp;D stipend and more! 
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Senior Information Security Engineer

Seniority Level: Mid-Senior
Location:  Remote (select US States)
About the role and about You:
At Zwift IT, we are constantly improving our security practice and enforcing our security policy. Currently, we are looking for a Sr. Information Security Operations Analyst to join our Information Security team.  We are looking for a candidate who possesses deep expertise in the security threat monitoring, detection, and incident response space, especially in a hosted cloud/web operations environment. The Sr. Information Security Operations Analyst will be a part of Zwift’s information security team intended to protect and safeguard our information assets, keeping our computer systems and network devices hardened against attacks and data breaches. The chosen candidate will be capable of adapting to a fast-paced environment and be ready to address shifting priorities as needed. The selected candidate will demonstrate creativity and out-of-the-box thinking to continuously improve the organization’s threat intelligence, security monitoring, detection, and response capabilities.
Successful Engineers at Zwift are self-starters, able to work autonomously, natural problem solvers, collaborative, and comfortable navigating ambiguity. You should have strong problem-solving skills, excellent interpersonal skills, a deep technical understanding of information security operation infrastructure, and the desire to be an individual contributor to securing Zwift assets.

What you’ll do:
<ul>
<li>Provide subject matter expertise in security threat analysis, hunting, detection, and response across Zwift’s Production and Corporate IT environments</li>
<li>Perform analysis, correlation of actionable security events and alerts, and network traffic analysis using raw packet data, net flow, IDS/IPS, SIEM, and/or any custom sensor output as it pertains to security threat intelligence, analytics, and visibility</li>
<li>Participate in the Security Incident Response Team (SIRT) activities, helping SIRT to detect, respond, contain, eradicate and recover from security incidents in a timely manner, within the Cloud Operations and Corporate IT environments</li>
<li>Develop and maintain the incident response framework consisting of Incident Response Plans and Procedures in the form of run books, for the most relevant incident types</li>
<li>Ability to investigate and understand threat campaign(s) techniques, lateral movements, and indicators of compromise (IOCs).</li>
<li>Interface with external entities including law enforcement organizations, intelligence community organizations, and other government agencies as required.</li>
<li>Willingness to be on call and work odd hours when required</li>
</ul>
What you'll have: 
<ul>
<li>Bachelor’s degree in Computer Science, Information Systems, or related technical field</li>
<li>5+ years of previous experience working in security operations, hunt teams, threat intelligence, or incident response</li>
<li>Public Cloud experience required</li>
<li>3+ years of experience working with multiple security technologies including IDS/IPS, SIEM, Log Analysis (Windows, Linux, Web Servers, FIM, NextGen Firewalls, NextGen AV, WAFs, etc.), Network and User Behavior Analysis tools, and Network Packet Analyzers and Visibility tools</li>
<li>3+ years of experience leading cyber security incident resolution as an Incident Response Engineer or Analyst in an Enterprise environment</li>
<li>Knowledge of the Incident Response lifecycle, working independently to investigate and effectively respond to cyber security incidents, working with Digital Forensics tools in an Enterprise environment</li>
<li>Advanced Knowledge of the TCP / IP protocol suite, security architecture, securing  and hardening Operating Systems, Networks, Databases, and Applications Experience developing and maintaining operations playbooks, run books, and the IR plans</li>
<li>Prior experience employing forensic tools and techniques for attack reconstruction, including forensic analysis and volatile data collection and analysis, will be an added advantage</li>
<li>Thorough understanding of the  threat and attack landscape, latest security trends, attack vectors, vulnerabilities, and how they are leveraged by malicious actors</li>
<li>Excellent verbal and written communication skills and ability to document and explain technical details and incident reports clearly and concisely</li>
</ul>
Bonus points:
<ul>
<li>Comfortable in an AWS environment</li>
<li>CISSP, GSEC, GCFA, GCIH, CHFI,  SEC+. CEH, or other Cyber Security related certifications</li>
</ul>
How to stand out among the rest:
Your resume/CV is enough to show off your skills, accomplishments, and experience. However, if you choose to include a cover letter introducing us to your awesome personality, we will read that too.
Values:
Of course, we are nothing without our values. Our values ground us. They ensure we run and build a company where people love to work, feel like they are welcomed, included, and belong.  Only then can they thrive and do their best work.  The values we strive to live every day are:
<ul>
<li>Make It Fun</li>
<li>Elevate Teammates</li>
<li>Cultivate Our Community</li>
<li>Always Level Up</li>
<li>One Zwift for All</li>
</ul>
We strongly believe that different backgrounds and ideas are a competitive advantage; we hire candidates of any race, color, ancestry, religion, sex, national origin, sexual orientation, gender identity, age, marital or family status, disability, Veteran status, and any other status. Zwift is proud to be an Equal Opportunity Employer. If you have a disability or special need that requires accommodation, please let us know by emailing careers@zwift.com. 
Zwift, Inc. is an Equal Opportunity Employer.
Transparency in Coverage: 
Health plan price transparency is designed to help consumers know the cost of covered items or healthcare-related services prior to the date upon which they receive care. Transparency in Coverage (TIC) regulations require health insurers and group health plans to create machine readable files (MRFs) that contain the negotiated rates for in-network providers and allowed amounts derived from historical claims for out-of-network providers and make those files publicly available.
Here is the <a href="https://healthy.kaiserpermanente.org/front-door/machine-readable" rel="noopener noreferrer nofollow ugc" target="_blank">link</a> to the site on which Kaiser Permanente posts its in-network and out-of-network allowed amount machine-readable files (MRFs).
Here is the <a href="https://www.anthem.com/ca/machine-readable-file/search" rel="noopener noreferrer nofollow ugc" target="_blank">link</a> to the site on which Anthem posts  its in-network and out-of-network allowed amount machine-readable files (MRFs). The link will allow you to search for your files using your Employer Identification Number (81-2798595)

Sr. Information Security Operations Analyst

Seniority Level:  Director
Location: Long Beach, CA/ Remote US
About the role and about You:
At Zwift IT, we are constantly improving our security posture. Currently, we are looking for a Director, Information Security to be a key member of the IT Leadership Team. This role is critical to leading and transforming our security programs to keep up with the threat landscape and partnering across the Zwift in this critical area. The candidate is expected to have broad practical implementation knowledge of designing and running information security programs, building, and scaling large security capabilities, and working across organizational boundaries and with executive leadership to shape the security strategy to ensure our promises to customers in every interaction.
The Director of Information Security will drive and support the security policies, practices, procedures, and technologies required to ensure the protection of our networks, systems, applications, data, and products. S/he will ensure operational risk management efficiencies are achieved across the enterprise and will develop, document, and operate controls maximizing risk mitigation, which are compliant with target industry regulations including ISO27K/NIST CSF, PCI DSS, SOX, GDPR, and CCPA.
To be successful you not only are great at defining a vision, but you are equally great at executing that vision. This position will report directly to the Vice President of Information Technology.
What you’ll do: 
<ul>
<li>Establishes and maintains the Enterprise Security vision, strategy, and program to ensure information assets and technologies are adequately protected</li>
<li>Provides leadership to develop and execute an enterprise information security strategy and roadmap. Aligns with enterprise business strategy, gains executive approval and support, and oversees the successful execution</li>
<li>Works with Zwift development and infrastructure teams to identify and remediate application and infrastructure related vulnerabilities</li>
<li>Ensures Identity and Access reviews are performed periodically and follow through on findings and remediations</li>
<li>Develops and employs an ongoing information security communications, training, and awareness program tailored to the evolving needs of the business and specific requirements of various user groups.</li>
<li>Defines Objectives and Key Results (OKRs), strategic risk indicators, and metrics/scorecards to understand current health and drive insights into future focus areas for the team before issues occur/risks are realized.</li>
<li>Prepares, maintains, and communicates security procedures and documentation including incident response procedures</li>
<li>Collaborates cross-functionally, including with engineering, legal, product, and IT teams, to build and strengthen information security and privacy across our service and infrastructure</li>
<li>Responsible for security operations including threat prevention, detection, and incident response strategy to include a formalized incident response process, declaring security incidents, coordinating and assisting in the investigation of potential incidents, assisting in the recovery from attacks, coordinating with legal, compliance, and other stakeholders, law enforcement agencies (where applicable), and developing the post-response control strategy</li>
<li>Works closely with and provides technical expertise to compliance, business units, and supporting departments in the implementation, certification, and maintenance of compliance standards (E.g., NIST CSF/800-171/CMMC, ISO 27001/ISO27701, SOX, PCI/DSS, GDPR, CCPA, etc.)</li>
<li>Develops, trains, and mentors the Information Security team to grow their technical and professional capabilities</li>
</ul>
What you'll have: 
<ul>
<li>Bachelor’s degree in Computer Science, Information Systems, Engineering, or related technical field</li>
<li>8+ years of experience in a combination of information technology &amp; security, and IT risk management</li>
<li>8+ years of leadership experience in information security policy, standards, architecture, technology, and programs</li>
<li> Experience with multiple Information Security domains, such as Infrastructure Vulnerability, Data Loss Prevention, End User Security, Network Security, Internet Security, Application Security, Cloud Security(AWS), Identity &amp; Access Management, etc</li>
<li>Experience with security products from a variety of vendors (firewalls, intrusion detection systems, vulnerability scanners, multi-factor/strong authentication technologies, SIEM, CASB, logging, penetration testing software, etc.)</li>
<li>Knowledge and understanding of relevant legal and regulatory requirements, such as GDPR, SOX, PCI/DSS, ISO/IEC 27001, and NIST security principles</li>
<li>Proven and demonstrated successful experience delivering results in the following areas of IT Security:  Identity and Access Management (IM),  Application, Cloud and Data Security, Information Governance Risk &amp; Compliance (GRC), Security Operations</li>
<li>Must have a track record of developing and implementing a comprehensive strategy and plan for managing information security</li>
<li>Exceptional program and project management skills</li>
<li>Strong written/oral communication skills required along with the desire and ability to communicate with business leaders at all levels of the organization</li>
<li>Strong analytical and problem-solving skills</li>
</ul>

Bonus points:
<ul>
<li>One or more relevant certifications preferred (CISSP, CCSP, CISA, or CISM)</li>
<li>Cloud Engineering or Security Certification preferred - AWS Certified DevOps Engineer, AWS Certified Security, or similar certifications</li>
<li>Experience with Docker, Open Container Initiative, Kubernetes, or similar is a big plus.</li>
</ul>
How to stand out among the rest:
Your resume/CV is enough to show off your skills, accomplishments, and experience. However, if you choose to include a cover letter introducing us to your awesome personality, we will read that too.
Values:
Of course, we are nothing without our values. Our values ground us. They ensure we run and build a company where people love to work, feel like they are welcomed, included, and belong.  Only then can they thrive and do their best work.  The values we strive to live every day are:
<ul>
<li>Make It Fun</li>
<li>Elevate Teammates</li>
<li>Cultivate Our Community</li>
<li>Always Level Up</li>
<li>One Zwift for All</li>
</ul>
We strongly believe that different backgrounds and ideas are a competitive advantage; we hire candidates of any race, color, ancestry, religion, sex, national origin, sexual orientation, gender identity, age, marital or family status, disability, Veteran status, and any other status. Zwift is proud to be an Equal Opportunity Employer. If you have a disability or special need that requires accommodation, please let us know by emailing careers@zwift.com. 
Zwift, Inc. is an Equal Opportunity Employer.

Director, Information Security

Seniority Level: Mid-Senior
Location: Long Beach, CA or US Remote (in select states)
About the role and about You:
At Zwift, we are currently looking for a highly motivated, dependable, and experienced corporate IT technical security program manager who shares our passion and wants to be a part of a fast-moving and highly execution-oriented team. In this role, you will work with cross-functional teams of technical and non-technical key stakeholders as well as external consultants to interpret, communicate, and drive full lifecycle security projects. You will partner with Legal, HR, Product, Technology and other teams to evaluate and develop services and infrastructure and be responsible for operationalizing Zwift's security and compliance program
What you’ll do: 
<ul>
<li>Lead cross-functional teams through full program lifecycles by defining scope/success criteria, setting expectations, establishing timelines, implementing solutions, and measuring success and lessons learned.</li>
<li>Develop and maintain strong working relationships with technical and non-technical teams involved with information security</li>
<li>Scope, plan, implement and deliver security projects and programs, and collaborate with senior leaders to align with strategic vision and goals</li>
<li>Lead various compliance audits such as PCI, ISO2700x, NIST 800-171/53, CMMC, etc. from planning phase to completion phase.</li>
<li>Perform planning, scoping, execution, and liaising with auditors and manage compliance &amp; security audits.</li>
<li>Be the security SME for driving compliance initiatives and helping organizations cross barriers to meet compliance objectives.</li>
</ul>
What you'll have: 
<ul>
<li>Bachelor’s degree in Computer Science, Management Information Systems, or a related technical field</li>
<li>5+ years of work experience in information security, cybersecurity, security program/project management, or similar capacities.</li>
<li>Expert-level knowledge of at least one or more security frameworks (such as PCI, ISO 2700x, NIST 800-171/53, CMMC, etc.) and the ability to determine measures that will satisfy and design controls</li>
<li>Experience driving IT security projects end-to-end independently, including evaluating, defining, and improving end-to-end processes.</li>
<li>Experiences working and managing in multiple security roles such as security engineering, operations, and vendor management.</li>
<li>In-depth knowledge of security domains including but not limited to authentication, endpoint security, encryption, cloud security, and data protection</li>
<li>Strong project management and prioritization skills</li>
<li>Excellent communication skills across technical and non-technical stakeholders and demonstrated attention to detail.</li>
</ul>
Bonus points: 
<ul>
<li>Advanced security certifications like CCSP, CISSP, CISM, CISA</li>
</ul>
How to stand out among the rest:
Your resume/CV is enough to show off your skills, accomplishments, and experience. However, if you choose to include a cover letter introducing us to your awesome personality, we will read that too.
Values:
Of course, we are nothing without our values. Our values ground us. They ensure we run and build a company where people love to work, feel like they are welcomed, included, and belong.  Only then can they thrive and do their best work.  The values we strive to live every day are:
<ul>
<li>Make It Fun</li>
<li>Elevate Teammates</li>
<li>Cultivate Our Community</li>
<li>Always Level Up</li>
<li>One Zwift for All</li>
</ul>
We strongly believe that different backgrounds and ideas are a competitive advantage; we hire candidates of any race, color, ancestry, religion, sex, national origin, sexual orientation, gender identity, age, marital or family status, disability, Veteran status, and any other status. Zwift is proud to be an Equal Opportunity Employer. If you have a disability or special need that requires accommodation, please let us know by emailing careers@zwift.com. 
Zwift, Inc. is an Equal Opportunity Employer.

Information Security Program Manager

Apply to Cyber Security Jobs in Long Beach in companies remotely and near you. New Cyber Security Jobs in Long Beach added daily.

Job Position and Company	Location	Tags	Posted
Sr. Application Security Engineer at Zwift	Remote Full Time Consulting Application Security
Senior Information Security Engineer at Relativity	Full Time Devsecops Windows
Sr. Information Security Operations Analyst at Zwift	Analytics AWS CEH Cissp Cloud
Director, Information Security at Zwift	Application Security AWS CCPA CCSP CISA
Information Security Program Manager at Zwift	Audits CCSP CISA CISM Cissp

Cyber Security Jobs in Long Beach

0 Cyber Security Jobs in Long Beach. Page 1 of 1

5 closed cyber security jobs in long beach:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Cyber Security Jobs in Long Beach

0 Cyber Security Jobs in Long Beach. Page 1 of 1

5 closed cyber security jobs in long beach:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter