Medium

Medium’s mission is to deepen understanding of the world and spread ideas that matter. Medium is building the best place for reading and writing on the internet—a place where today’s smartest writers, thinkers, experts, and storytellers can share big, interesting ideas; a place where ideas are judged on the value they provide to readers, not the fleeting attention they can attract for advertisers. Our team is growing, and we are looking for an experienced Security Engineer to play a pivotal role in implementing security measures that safeguard both Medium’s website and mobile applications. 
<h3>What will you do?</h3>
<ul>
<li>Engineer, implement, and monitor security measures for the protection of computer systems, networks, and information</li><li>Identify and define system security requirements</li><li>Design computer security architecture and develop detailed cyber security designs</li><li>Prepare and document standard operating procedures and protocols</li><li>Configure and troubleshoot security infrastructure devices</li><li>Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks</li><li>Ensure that the company knows as much as possible, as quickly as possible about security incidents</li><li>Write comprehensive reports including assessment-based findings, outcomes, and propositions for further system security enhancement</li></ul>
<h3>Who are you?</h3>
<ul>
<li>Proven work experience as a System Security Engineer or Information Security Engineer</li><li>Experience in building and maintaining security systems</li><li>Detailed technical knowledge of database and operating system security</li><li>Hands-on experience in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc</li><li>Experience with network security and networking technologies and with system, security, and network monitoring tools</li><li>Thorough understanding of the latest security principles, techniques, and protocols</li><li>Familiarity with web-related technologies (Web applications, Web Services, Service Oriented Architectures) and network/web-related protocols</li><li>Problem-solving skills and ability to work under pressure</li><li>BS degree in Computer Science or related field</li></ul>At Medium, we foster an inclusive, supportive, fun, and challenging team environment. We value having a team that is made up of a diverse set of backgrounds and respect the healthy expression of diverse opinions. We embrace experimentation and the examination of all kinds of ideas through reasoning and testing. Come join us as we continue to change the world of digital media. Medium is an equal-opportunity employer.

New York County

The Healer Within

Security Engineer

SurveyMonkey

What we're looking for
You will sit within the Trust &amp; Security organization and reporting to the CISO, the Fraud and Abuse Manager will be looked upon to identify new abuse trends, scope the platform abuse landscape, and shape the narrative and work streams to improve trust and safety across Momentive platforms. You will be looked upon as a subject matter expert for anti-abuse efforts and controls enhancements. But that's not all…You will develop learning and awareness programs to cultivate a culture of cybersecurity, ensuring that our customers and employees are aware of various attacks (e.g., spam, phishing) and how to handle them.
You will
<ul>
<li>Guide the business on methods of detection, measurement, and remediation for platform fraud and abuse, including the continued development and refinement of AI/ML solutions in partnership with Engineering</li>
<li>Manage, coordinate, and train cross-functional stakeholders in the development of abuse detection systems and their continued use</li>
<li>Collaborate with product managers during product feature design to perform and incorporate risk analysis of new abuse vectors</li>
<li>Monitor Brand Protection solutions to ensure domain spoofing is kept to a minimum</li>
<li>Work with the Legal team to evolve our acceptable use policy in response to new abuse methods</li>
<li>Support anti-CSAM efforts (e.g., prevention, implementation, and incident follow-up)</li>
<li>Partner with various organizations to drive security culture and awareness within Momentive</li>
<li>Ensure the security awareness program meets all industry regulations, standards, and compliance requirements</li>
</ul>
You have
<ul>
<li>2+ years experience working as a Fraud &amp; Abuse Manager or equivalent position with a heavy emphasis on trust and safety (e.g., phishing, spam, threat modeling)</li>
<li>5+ years experience in Fraud &amp; Abuse or equivalent space (e.g., Trust &amp; Safety, Information Security)</li>
<li>Experience with the product development lifecycle</li>
<li>Strong problem-solving skills with a creative approach</li>
</ul>
Who we are and what we do
Momentive (NASDAQ: MNTV), maker of SurveyMonkey, is a leader in agile experience management, delivering powerful, purpose-built solutions that bring together the best parts of humanity and technology to redefine AI. Momentive products, including GetFeedback, SurveyMonkey, and its brand and market insights solutions, empower decision-makers at 345,000 organizations worldwide to shape exceptional experiences. More than 20 million active users rely on Momentive to fuel market insights, brand insights, employee experience, customer experience, and product experience. Our vision is to improve human experiences by amplifying individual voices. Learn more at Momentive.ai.
What we offer our employees
Momentive is a place where the curious come to grow and shape what's next. By embedding inclusion into our processes, policies, benefits, and culture for our 1,600+ employees across North America, Europe, and APAC, we're building a workplace where people of every background can excel.
We've won multiple Culture and Employee awards, including Comparably's Best Workplace for Women and Diversity, and received recognition for our forward-looking benefits policies, including best workplace for parents, vendor benefits standards, our annual holiday refresh, retirement benefits, and Take 4 sabbaticals.
Our commitment to an inclusive workplace
Momentive is an equal opportunity employer and is committed to providing a workplace free from harassment and discrimination. We celebrate the unique differences of our employees because that is what drives curiosity, innovation, and the success of our business. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, gender identity or expression, age, marital status, veteran status, disability status, pregnancy, parental status, genetic information, political affiliation, or any other status protected by the laws or regulations in the locations where we operate. Accommodations are available for applicants with disabilities.
#LI-remote

Portland

United States

Information Security, Fraud &amp; Abuse Manager

PEAK6

Apex Fintech Solutions (AFS) powers innovation and the future of digital wealth management by processing millions of transactions daily, to simplify, automate, and facilitate access to financial markets for all. Our robust suite of fintech solutions enables us to support clients such as Stash, Betterment, SoFi, and WeBull, and more than 20 million of our clients' customers. 
Collectively, AFS creates an environment in which companies with the biggest ideas in fintech are empowered to change the world. We are based in Dallas, TX and also have offices in Austin, New York, Chicago, Los Angeles, Portland, and Belfast. 
If you are seeking a fast-paced and entrepreneurial environment where you'll have the opportunity to make an immediate impact, and you have the guts to change everything, this is the place for you. 
AFS has received a number of prestigious industry awards, including:
<ul>
<li>2021, 2020, 2019, and 2018 Best Wealth Management Company - presented by Fintech Breakthrough Awards</li>
<li>2021 Most Innovative Companies - presented by Fast Company</li>
<li>2021 Best API &amp; Best Trading Technology - presented by Global Fintech Awards</li>
</ul>This is a fantastic opportunity to join the front lines of the cybersecurity industry working in Financial Services, securing Apex Clearing’s systems, data and people.
We’re looking for someone who:
<ul>
<li>Is passionate. You have a genuine passion for people, technology and developing relationships</li>
<li>Is motivated. You’re driven to be the best. You challenge yourself by setting goals, crushing them, and helping your teammates do the same</li>
<li>Is collaborative. You’re excited to work with others throughout the organization to help foster a superior work place and culture</li>
<li>Wants to make an impact. You’re looking to do amazing work. You’re all about helping employees be happier at work and perform at a superior level</li>
<li>Operates with integrity. You always conduct yourself with honesty and operate ethically. You say what you mean, and mean what you say</li>
</ul>
What you’ll do all day:
<ul>
<li>Monitor, Protect, and Improve. Utilize the robust security controls &amp; tools to ensure that Apex systems, data, and people remain secure.You will be expected to own the vulnerability management program and contribute to the administration and ongoing improvement to numerous other cybersecurity technologies.</li>
<li>Respond to Incidents. Rapid and effective response is a key goal of the Apex security program.</li>
<li>Improve the Security Culture. Security Awareness in the organization is of paramount importance. Play a pivotal role in assuring that Apex personnel are well-versed with and equipped to handle today’s cybersecurity threats by partnering with all the internal teams, building relationships and fostering cybersecurity education and awareness.</li>
<li>Help the Program Grow. Take advantage of a unique opportunity to contribute to a growing team of professionals and a rapidly-maturing security program.</li>
<li>Tell our Story. Apex’s customers, employees, consultants, and regulators all take an active interest in our security program. Be the subject matter expert in everything Apex does to secure its essential information.</li>
</ul>
A few reasons why you might love us:
<ul>
<li>We’re a leader in the space. Apex is recognized for disrupting the financial services industry, enabling fintech standouts like Stash, Robinhood and Betterment. We’ve got an amazing track record of success and we foster ongoing innovation. So you get all the benefits of a proven, growing company, while enjoying a very entrepreneurial culture</li>
<li>The team is really motivating. You’ll work with dedicated Information Security professionals with a passion for their work and a diligent eye on the rapidly-developing Cybersecurity industry.</li>
<li>Your work will be immediately impactful. At Apex, data is life. Our customers rely on Apex providing the utmost confidentiality for their information, and that data needs to be accurate and available 100% of the time as well.</li>
</ul>
And a few reasons why you may not like working for us:
<ul>
<li>You don’t like people. Information Security in today’s world means interacting with people; ensuring that the balance between convenience &amp; security is not disruptive, training personnel on security issues, and being an agent of positive change in the security program all involve having healthy relationships with people. Hiding behind the keyboard won’t improve your job satisfaction at Apex.</li>
<li>You can’t keep secrets. As an Information Security Analyst, the organization entrusts you to handle confidential and sensitive information professionally and with integrity. Trustworthiness in this role is paramount – breaching this trust would make your job at Apex very difficult.</li>
<li>You prefer to be part of the problem, rather than part of the solution. Cybersecurity is one of the most dynamic industries in the world today, and that is reflected on an Information Security team as well. If you don’t react well in stressful situations or aren’t willing to rapidly find solutions to problems as they arise, you’ll soon be swamped and won’t be enjoying your work at Apex.</li>
</ul>
The skills you’ll need to succeed:   
<ul>
<li>3+ years professional experience in the information security or information risk management field</li>
<li>Experience with information risk assessments and audits of information security controls</li>
<li>Good working knowledge of infrastructure security concepts including firewalls, DMZs, intrusion detection/prevention systems, network security, application security concepts, CASB, password management, RBAC, SIEM, vulnerability management, and access provisioning</li>
<li>Must have a thorough understanding of risk management concepts</li>
<li>Must have excellent communication skills</li>
<li>Must be well organized, solution-oriented and have strong process management skills</li>
<li>Experience with the phases of the software development lifecycle</li>
<li>Experience with common vulnerability scanning and penetration testing tools</li>
<li>B.S. or B.A. or equivalent work experience required</li>
<li>CISA, CISM, CISSP or CIPP certificate a plus</li>
</ul>
#LI-BS1Apex currently requires all employees as a condition of employment to either be fully vaccinated for COVID-19 or submit to regular testing. The CDC defines "fully vaccinated" as two weeks after the second dose for Pfizer and Moderna, and two weeks after the single dose of Johnson &amp; Johnson. Apex will also require proof of vaccination and/or testing. Apex will also consider requests for exemption from these requirements as a reasonable accommodation for medical reasons or sincerely held religious beliefs. *Please note this requirement is ONLY for US Offices.

Dallas

Chicago

Security Analyst

Gemini

Empower the Individual Through Crypto
Gemini is a crypto exchange and custodian that allows customers to buy, sell, store, and earn more than 30 cryptocurrencies like bitcoin, bitcoin cash, ether, litecoin, and Zcash. Gemini is a New York trust company that is subject to the capital reserve requirements, cybersecurity requirements, and banking compliance standards set forth by the New York State Department of Financial Services and the New York Banking Law. Gemini was founded in 2014 by twin brothers Cameron and Tyler Winklevoss to empower the individual through crypto.
Crypto is about giving you greater choice, independence, and opportunity. We are here to help you on your journey. We build crypto products that are simple, elegant, and secure. Whether you are an individual or an institution, we want to help you buy, sell, and store your bitcoin and cryptocurrency. Crypto is not just a technology, it's a movement.
At Gemini, our mission is to empower the individual and that includes giving our employees flexibility of choice — our Office Optional Policy allows employees to choose to work from one of our physical locations or from home. Select roles that are location-specific will still be eligible for flexible schedules.
The Department: Information Security 
In the emerging industry of digital assets, there is nothing more important than trust. The Gemini security team forms the backbone of trust. In fact, Gemini’s very first hires were security specialists and we continue to tackle unique challenges in the crypto space.  Our team ensures that our customers, clients, and employees are safe, secure, and supported.
The Role: Principal Cloud Security Engineer
The Cloud Security team secures Gemini’s infrastructure through service hardening and by developing and supporting a suite of foundational tools. We provide secure-by-default infrastructure, consumable security services, and expert consultation to engineering teams for secure cloud and non-cloud architectures.
The Cloud Security team has a broad focus that extends beyond pure cloud to include all areas of infrastructure security. We are seeking a Principal Security Engineer with broad engineering experience across cloud and neighboring areas of infrastructure and platform engineering, such as: PKI, core cryptography, identity management, network security, SRE, etc. This person will define technical direction, unblock and mentor teammates, and tackle Gemini’s most significant infrastructure security challenges.
Responsibilities:
<ul>
<li>Design, deploy, and maintain services/platforms for security and engineering teams</li>
<li>Build and improve security controls and capabilities at all layers of infrastructure</li>
<li>Partner with engineering teams on security architecture and implementation decisions</li>
<li>Collaborate with appsec, threat detection, incident response, GRC and similar security functions to identify, understand, and reduce security risk</li>
<li>Set technical strategy across all areas of infrastructure security</li>
</ul>
Minimum Qualifications:
<ul>
<li>Significant experience with distributed systems or cloud computing. We often use AWS.</li>
<li>Significant experience with configuration management and infrastructure as code. We often use Terraform.</li>
<li>Significant software development experience. We often use Python.</li>
<li>Experience building and owning high-availability critical systems or cloud-based services</li>
<li>Experience defining, managing, and executing a portfolio of complex engineering projects.</li>
<li>Expertise in computer security principles and practices</li>
</ul>
Preferred Qualifications:
<ul>
<li>Experience in SRE, systems engineering, or network engineering.</li>
<li>Experience securing AWS and Linux environments, both native and third-party</li>
<li>Experience with container and orchestration technologies and relevant security considerations. We often use Kubernetes and EKS.</li>
<li>Experience designing and implementing cryptographic infrastructure such as PKI, secrets management, authentication, or secure data storage/transmission</li>
<li>Experience designing and implementing systems for identity and access management</li>
</ul>
It Pays to Work Here
We take a holistic approach to compensation at Gemini, which includes:
<ul>
<li>Competitive Compensation and Profit-Sharing Equity</li>
<li>Flexible vacation policy</li>
<li>Retirement Plan Matching</li>
<li>Generous Parental leave</li>
<li>Comprehensive health plans</li>
<li>Training and professional development</li>
</ul>
At Gemini, we strive to build diverse teams that reflect the people we want to empower through our products, and we are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status. Equal Opportunity is the Law, and Gemini is proud to be an equal opportunity workplace and affirmative action employer. If you have a specific need that requires accommodation, please let a member of the People Team know.
#LI-AH1#LI-REMOTE

New York

Los Angeles

San Francisco

Principal Cloud Security Engineer

Empower the Individual Through Crypto
Gemini is a crypto exchange and custodian that allows customers to buy, sell, store, and earn more than 30 cryptocurrencies like bitcoin, bitcoin cash, ether, litecoin, and Zcash. Gemini is a New York trust company that is subject to the capital reserve requirements, cybersecurity requirements, and banking compliance standards set forth by the New York State Department of Financial Services and the New York Banking Law. Gemini was founded in 2014 by twin brothers Cameron and Tyler Winklevoss to empower the individual through crypto.
Crypto is about giving you greater choice, independence, and opportunity. We are here to help you on your journey. We build crypto products that are simple, elegant, and secure. Whether you are an individual or an institution, we want to help you buy, sell, and store your bitcoin and cryptocurrency. Crypto is not just a technology, it's a movement.
At Gemini, our mission is to empower the individual and that includes giving our employees flexibility of choice — our Office Optional Policy allows employees to choose to work from one of our physical locations or from home.
Select roles that are location-specific will still be eligible for flexible schedules.
The Department: Information Security 
In the emerging industry of digital assets, there is nothing more important than trust (which is why Gemini’s very first hires were Security experts). The Gemini Security team forms the backbone of all that we do and is as diverse as the number of challenges we tackle in the crypto space. From security architecture and engineering to maintenance of cold storage systems and data centers to cybersecurity and litigation support, our team ensures that our customers, clients, and employees are safe, secure, and supported.
The Role: Application Security Engineer (Sr+ levels)
The Application Security team establishes a "paved road" for our engineers so that they can more-easily deliver secure software with minimal friction, supporting their work across the entire Secure Development Lifecycle (SDL). The Application Security team considers how we’re balancing friction with security value, fighting back “security theater” by using our expertise with an empathetic, customer-service approach.
Our blockchain security team within Application Security is focused on ensuring the safety and security of Gemini and our customer’s on-chain operations and assets. New tokens, networks, decentralized finance products, and web3 interactive platforms are being released everyday. The Blockchain Security team stays on the cutting edge so that Gemini can continue to deliver innovative crypto-based products while keeping our customers safe.
Responsibilities:
<ul>
<li>Support engineers across the SDL, including design reviews, threat modeling, and code audits of blockchain-related infrastructure</li>
<li>Evaluate security risk of new cryptocurrencies tokens and networks</li>
<li>Consult with Gemini’s various businesses on the best blockchain security practices</li>
<li>Deliver automation for high-signal, low-noise security tooling to increase coverage</li>
<li>Collaborate with product and engineering on architecting resilient, security-first services</li>
<li>Partner with third-party security firms to provide external validation of software development</li>
<li>Provide subject matter expertise to business partners on vendor selection as necessary</li>
</ul>
Minimum Qualifications:
<ul>
<li>5+ years of experience working in application security roles or performing similar job functions</li>
<li>Enjoys working directly with software engineers, including in new languages, tool chains, and tech stacks</li>
<li>Prior experience with securing/hacking smart contracts or decentralized platforms (crypto or traditional)</li>
<li>Prior leadership of security design reviews, threat modeling, and defining security requirements</li>
<li>Awareness of numerous vulnerability classes, with knowledge of modern mitigation techniques</li>
<li>Detail-oriented communication skills via email, pull requests, and/or in-person presentations</li>
<li>Able to balance a software implementation's relative risk in context to defined business goals</li>
<li>Creating and extending software for development tooling to improve security automation</li>
</ul>
Preferred Qualifications: 
<ul>
<li>Experience building (or breaking) smart contracts (Solidity, Vyper, Rust, etc)</li>
<li>Experience working with decentralized networks (either crypto or traditional)</li>
<li>Experience with the finance sector (DeFi or traditional FinTech)</li>
<li>Experience working with low-level cryptographic implementations/primitives</li>
</ul>
It Pays to Work Here
We take a holistic approach to compensation at Gemini, which includes:
<ul>
<li>Competitive base salaries across all departments</li>
<li>Ownership in the company via profit sharing units</li>
<li>Amazing benefits, 401k match contribution, and flexible hours</li>
<li>Snacks, Perks, Wellness Outings &amp; Events</li>
</ul>
At Gemini, we strive to build diverse teams that reflect the people we want to empower through our products, and we are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status. Equal Opportunity is the Law, and Gemini is proud to be an equal opportunity workplace and affirmative action employer. If you have a specific need that requires accommodation, please let a member of the People Team know.
#LI-AH1#LI-REMOTE

Application Security Engineer (Sr+ levels)

Apply to Cyber Security Jobs in Portland in companies remotely and near you. New Cyber Security Jobs in Portland added daily.

Job Position and Company	Location	Tags	Posted
Security Engineer at Medium	Remote Full Time
Information Security, Fraud & Abuse Manager at SurveyMonkey	Remote Full Time CISO Manager
Security Analyst at PEAK6	Application Security Audits CIPP CISA CISM
Principal Cloud Security Engineer at Gemini	AWS Banking Crypto Cryptography Incident Response
Application Security Engineer (Sr+ levels) at Gemini	Application Security Audits Automation Banking Blockchain

Cyber Security Jobs in Portland

0 Cyber Security Jobs in Portland. Page 1 of 1

5 closed cyber security jobs in portland:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Cyber Security Jobs in Portland

0 Cyber Security Jobs in Portland. Page 1 of 1

5 closed cyber security jobs in portland:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter