Zoox

The Product Security team is responsible for ensuring that Zoox delivers a cyber-secure product to the market. The team is composed of professionals with a variety of backgrounds, including software engineering, offensive security, and security automation. This specific role involves significant amounts of work as a security professional across multiple functions, including Software Engineering, InfoSec and IT, and DevOps.
<h3>Responsibilities </h3>
<ul>
<li>Analyze infrastructure that supports production, enterprise, and operational systems.</li><li>Own attack tree construction and analysis, and threat modeling activities that span IT/OT/PT.</li><li>Design, recommend, and implement secure service, credential management, and CI/CD architectures.</li><li>Be the subject matter expert on securing cloud and data center services, both in terms of underlying infrastructure configuration and in-service business logic design implementation. Design and build tooling to drive robust and secure IaC practices across the company.</li><li>Guide thinking and designs in the areas of account management, infrastructure provisioning, and intranet segmentation.</li><li>Work with stakeholders across Product Security, Enterprise Security, DevOps, and other infrastructure software groups to motivate a security evolution roadmap with a sharp focus on both near-term needs and long-term strategy.</li><li>Advocate, design, build, and roll out zero-trust infrastructure.</li></ul>
<h3>Qualifications</h3>
<ul>
<li>Solid CS background that enables you to think and work as a software engineer. BS or higher in Computer Science. Experience building production software is highly preferred.</li><li>Demonstrated, sustained cybersecurity expertise as an individual contributor as well as in a lead role, including knowledge of cloud system security, enterprise security, as well as product security (including modeling the interactions of enterprise and production systems as well as connectivity to SaaS).</li><li>Track record of working cross-functionally between engineering, IT, and operations organizations.</li><li>Constructive, high-EQ, result-oriented attitude.</li><li>Demonstrated understanding of cloud software and CI/CD systems, and skills in integrating security tooling into them.</li><li>Demonstrated ability to think as an attacker and carry out independent, hands-on vulnerability and mitigation analysis.</li><li>Understanding of past vulnerabilities in major software libraries (e.g. OpenSSL, libc…) and their mitigations. Historical perspective on sources of cyber security problems and strong intuition for secure system architectures.</li></ul>Vaccine MandateEmployees working in this position will be required to have received a single dose of the J&amp;J/Janssen COVID-19 vaccine OR have completed the two-dose Pfizer or Moderna vaccine series. In addition, employees will be required to receive a COVID-19 booster vaccine within two months of becoming eligible for the booster vaccine.Employees will be required to show proof of vaccination status upon receipt of a conditional offer of employment. That offer of employment will be conditioned upon, among other things, an Applicant’s ability to show proof of vaccination status. Please note the Company provides reasonable accommodations in accordance with applicable state, federal, and local laws.About ZooxZoox is developing the first ground-up, fully autonomous vehicle fleet and the supporting ecosystem required to bring this technology to market. Sitting at the intersection of robotics, machine learning, and design, Zoox aims to provide the next generation of mobility-as-a-service in urban environments. We’re looking for top talent that shares our passion and wants to be part of a fast-moving and highly execution-oriented team.Follow us on LinkedInA Final Note:You do not need to match every listed expectation to apply for this position. Here at Zoox, we know that diverse perspectives foster the innovation we need to be successful, and we are committed to building a team that encompasses a variety of backgrounds, experiences, and skills.

Foster City

Software Engineer, Converged Infrastructure Security Lead

Snowflake Inc.

<p>We’re at the forefront of the data revolution, committed to building the world’s greatest data and applications platform. Our ‘get it done’ culture allows everyone at Snowflake to have an equal opportunity to innovate on new ideas, create work with a lasting impact, and excel in a culture of collaboration.</p>
<p>Snowflake is seeking a Senior Security Compliance Analyst to join our Global Security Compliance &amp; Risk team and help drive compliance across Product Engineering and Corporate Engineering. </p>
<p>The Sr. Security Compliance Analyst will be a critical and high-impact individual contributor who would maintain and scale Snowflake’s User Access Review program and guide control owners to follow security and compliance best practices along with monitoring effectiveness of the controls. This role will report to the Security Compliance Manager within the Security and IT organizations. </p>
<h3>JOB RESPONSIBILITIES :</h3>
<ul>
<li>Manage and scale Snowflake’s User Access Review (UAR) program</li>
<li>On a quarterly basis, ensure that all participating systems in the UAR program are prepared for review (coordinating with UAR Automation platform team to ensure the necessary data is loaded), configure and launch the campaigns in scope for that quarter, plan and conduct training for reviewers, manage communications to the participants and ensure closure and documentation of the end state for each participating system</li>
<li>Identify and engage with participating system partners across the company to ensure readiness and engagement for regular UARs</li>
<li>Produce and maintain data reporting, analysis, dashboards, and scorecards in support of overall UAR program health, execution, and closure documentation</li>
<li>Document and maintain UAR framework standards, presentations, diagrams in support of understanding the UAR program. Work with other participants to maintain up-to-date UAR procedures. Ensure that training materials for participating reviewers are kept up to date</li>
<li>Gather feedback from all participants and reviewers to improve the UAR process and enhance Snowflake’s home-grown UAR automation platform. Work closely with the UAR Automation platform team to add more features / functionality to the automation platform and onboard new participating systems to the platform.</li>
<li>Manage training sessions for reviewers and participants during the execution of a review cycle</li>
<li>Collaborate closely with internal stakeholders to ensure compliance across various systems as well as interact with auditors to provide audit assurance. </li>
<li>Work closely with system partners to document system-based RBAC documentation and review access provisioning processes against the RBAC in order to identify areas of improvement or enhanced control monitoring with the objective of reducing security risk.</li>
</ul>
<h3>QUALIFICATIONS :</h3>
<ul>
<li>5+ years of related work experience in Information Security Governance, Risk and Compliance (GRC) or relevant Compliance roles in the tech industry. Big 4 consulting experience is a plus.</li>
<li>Prior experience leading or supporting user access review (UAR) programs.</li>
<li>Prior experience assessing or auditing cloud environments (AWS, Azure, and GCP), performing compliance assessments , conducting risk assessments and / or driving audits like SOX,ISO, SOC, PCI DSS</li>
<li>Ability to multitask and manage simultaneous projects</li>
<li>Ability to organize, conduct and drive meetings and outcomes independently.  Must be aware of and deliver quality stakeholder engagement experience in a fast-paced, innovative environment</li>
<li>Strong analytical, communication (verbal and written), and project management skills</li>
<li>Ability to learn, understand, and work with new emerging technologies, methodologies, and solutions in the Cloud/IT technology space.</li>
<li>Certification preferred in one or more of the following: CISA, CISSP, CISM, Cloud platforms such as AWS, Azure or GCP</li>
</ul>
<h3>LOCATION :</h3>
<ul>
<li>US, ability to support , attend meetings with Poland / Pune based team as required</li>
</ul>
<p>Snowflake is growing fast, and we’re scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake. </p>
<p>How do you want to make your impact?</p>

San Mateo

Sr Global Security Compliance &amp; Risk Analyst

<p>We’re at the forefront of the data revolution, committed to building the world’s greatest data and applications platform. Our ‘get it done’ culture allows everyone at Snowflake to have an equal opportunity to innovate on new ideas, create work with a lasting impact, and excel in a culture of collaboration.</p>
<p>Snowflake is looking for a hands on Principal  Software Engineer to be a technical lead for compliance efforts and expansion into highly regulated markets.This role is responsible for designing, reviewing and implementing key security controls and technologies, collaborating on engineering and business efforts across the company, and operating as the engineering subject matter expert for all compliance related initiatives and requirements.</p>
<h3>AS A PRINCIPAL SOFTWARE ENGINEER, YOU WILL:</h3>
<ul>
<li>Drive compliance efforts to enable Snowflake to enter increasingly regulated markets, identify gaps for continuous improvement action</li>
<li>Identify compliance gaps and design, lead development of privacy features and tools</li>
<li>Guide engineering teams during product development to ensure that their data management practices meets compliance requirements</li>
<li>Provide leadership with cross-team training to raise awareness and establish architecture best practices that maintain compliance across global regulated markets.</li>
<li>Contribute to solution design(s) and implementation(s) that leverage modern services, architecture and technology to enable Snowflake compliance and engineering teams to quickly adapt to an evolving regulatory landscape.</li>
<li>Contribute to product/business strategy and public policy and legal initiatives to address and mitigate privacy risks</li>
<li>Conduct technical and policy reviews to identify and escalate potential privacy concerns</li>
<li>Participate in the creation, review and implementation of technical security and compliance-related engineering requirements across multiple Engineering teams</li>
<li>Collaborate with the compliance operations team to document Snowflake security practices to guide engineers and provide transparency to customers, prospects and other stakeholders</li>
</ul>
<h3>AS A PRINCIPAL SOFTWARE ENGINEER, YOU HAVE:</h3>
<ul>
<li>You have a BS in Computer Science and/or equivalent experience.</li>
<li>You have a minimum of 15 years of relevant software engineering experience.</li>
<li>You understand how to articulate security controls and what it takes to achieve and maintain security compliance in a cloud native environment. </li>
<li>Deep knowledge of multiple compliance and regulatory regimes (e.g. FedRAMP, GDPR, HIPAA, ISO 27001, PCI DSS).</li>
<li>You want to be part of a team within a fast paced, high growth environment that values pragmatism and initiative.</li>
</ul>
<h3>BONUS POINTS:</h3>
<ul>
<li>MS in Computer Science </li>
<li>Relevant Industry Certification(s) (CISSP, CISA, GCIH)</li>
</ul>

<p>Snowflake is growing fast, and we’re scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake. </p>
<p>How do you want to make your impact?</p>

Principal Software Engineer - Compliance Lead

<p>We’re at the forefront of the data revolution, committed to building the world’s greatest data and applications platform. Our ‘get it done’ culture allows everyone at Snowflake to have an equal opportunity to innovate on new ideas, create work with a lasting impact, and excel in a culture of collaboration.</p>
<p>Snowflake is seeking a Senior Security Compliance Analyst to join our Global Security Compliance &amp; Risk team and help drive compliance across Product Engineering &amp; Corporate IT systems. </p>
<p>The Sr. Security Compliance Analyst will be a critical and high-impact  individual contributor to to help control owners to comply with required controls along with monitoring effectiveness of the controls. This role will report to the Security Compliance Manager within the Security and IT organizations. </p>
<h3>JOB RESPONSIBILITIES :</h3>
<ul>
<li>Support Snowflake business teams to achieve and maintain their security and compliance posture in accordance with regulatory requirements including but not limited to Sarbanes Oxley (SOX), SOC, ISO 27001, ISO, HIPAA, PCI-DSS, HITRUST, FedRAMP, etc.  Validate on-going compliance of policies and process / procedures in support of requirements and ensure that controls are operating effectively.</li>
<li>Responsible for quality and on-time execution of periodic audit activities such as change management review, SDLC review, audit of release process and CI/ CD, Segregation of duties etc.</li>
<li>Support and monitor remediation efforts of audit findings and validate the closure by reviewing relevant evidence.</li>
<li>Conduct risk assessments, identify compliance control requirements for cloud based systems</li>
<li>Review architecture, integrate compliance and security into solution designs, assess risks of security gaps, and develop remediation plan<em>. </em>Perform follow up activities related to <em>remediate gaps , drive remediation efforts.</em></li>
<li>Develop a close partnership with engineering control owners to educate them on compliance requirements and develop risk-appropriate control implementation solutions.</li>
<li>Review, develop, execute, and maintain security policies and procedures for compliance</li>
<li>Work on automating control monitoring across compliance domains like Change Management, Secure Development LifeCycle etc </li>
<li>Identify process improvements and efficiencies in the existing processes to build robust processes, automate compliance and drive implementation of effective controls.</li>
<li>Serve as primary point of contact to work closely with cross functional teams - Engineering/ product security/ IT/ corporate security teams to identify risk to the business/ product  and other areas necessary to identify risks to the business</li>
<li>Work cross-functionally to drive security control implementation for the organization.</li>
<li>Have the ability to identify risks associated with business processes, operations, information security programs and technology projects.</li>
<li>Review, develop, execute, and maintain security policies and procedures for compliance.</li>
</ul>
<h3>QUALIFICATIONS :</h3>
<ul>
<li>8+ years of related work experience in Information Security Governance, Risk and Compliance (GRC) or relevant Compliance roles in the tech industry. Big 4 consulting experience is a plus.</li>
<li>Must have minimum 2 - 3 years experience supporting and driving SOX (or ISO, SOC, PCI DSS )  readiness and audit (e.g. control design review, control operating effectiveness audit, assessment write -ups and control documentation review,audit evidence upload, supporting audit walkthroughs with auditors, etc.) </li>
<li>Prior experience auditing or performing compliance assessments/ risk assessments for cloud environments (AWS, Azure, GCP) and SaaS platforms</li>
<li>Knowledge of domains like Change Management, Release, deployment, SOD, SDLC , Logging, Encryption controls for systems using Agile Methodologies.</li>
<li>Familiarity with Change Management tools like Jenkins, GitHub, JIRA, ServiceNow, ArgoCD</li>
<li>Knowledge in Developer driven risk security and compliance process </li>
<li>Certification preferred in one or more of the following: CISA, CISSP, CISM, Cloud platforms</li>
<li>Ability to organize, conduct and drive meetings and outcomes with little to no manager involvement.  Must be aware of and deliver quality stakeholder engagement experience. </li>
<li>Ability to work efficiently and independently in a fast-paced, innovative environment</li>
<li>Strong analytical, communication (verbal and written), and project management skills</li>
<li>Ability to work closely with auditors, regulators, and internal stakeholders and articulate technical concepts</li>
<li>Ability to learn, understand, and work with new emerging technologies, methodologies, and solutions in the Cloud/IT technology space.</li>
<li>Ability to multitask and manage simultaneous projects</li>
</ul>
<p>Snowflake is growing fast, and we’re scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and Snowflake. </p>
<p>How do you want to make your impact?</p>

Sr. Global Security Compliance Analyst

Exabeam

Exabeam is a global cybersecurity leader that adds intelligence to every IT and security stack. The leader in Next-gen SIEM and XDR, Exabeam is reinventing the way security teams use analytics and automation to solve Threat Detection, Investigation, and Response (TDIR), from common security threats to the most critical that are difficult to identify. Exabeam offers a comprehensive cloud-delivered solution that leverages machine learning and automation using a prescriptive, outcomes-based approach to TDIR. We design and build products to help security teams detect external threats, compromised users and malicious adversaries, minimize false positives and best protect their organizations. For more information, visit www.exabeam.comOverview As a Director of Security Research at Exabeam, you will create and drive a strategy to grow our security research capabilities by reversing and developing new detection techniques and increasing awareness of Exabeam within the cybersecurity community. You will be a key member in defining and executing a long-term strategy to grow the research team and build innovative TDIR capabilities that protect Exabeam customers.  A successful Director of Security Research needs to be passionate about cyber security and building new unique capabilities to detect, investigate and respond to new threats. This person should be comfortable and eager to share their point of view and that of the team at industry events, through blogs and on social. A successful Director of Security Research thrives on leading cross-functional projects and can effectively work across different teams, including Product Management, Engineering, Sales, and Marketing.  We are seeking a Director of Security Research who has a deep understanding of security threats that span on-prem and cloud technologies. Someone that thrives under the pressure of understanding new and emerging threats to deliver near real time detection capabilities. Someone that has built and scaled teams in the past with varied backgrounds and across multiple geographic locations.  
<h3>Responsibilities:</span>
<ul>
<li>Manage, mentor, and grow Exabeam’s Security Research team </li><li>Own and execute a long-term strategy to ensure the ability to quickly identify, reverse, and build new detections for emerging threats </li><li>Work closely with our Data Science team to develop new algorithms for detection, context generation and threat hunting </li><li>Identify and implement new processes and frameworks to streamline the way the team works and gain efficiency </li><li>Consult and work alongside other departments as a cyber security subject matter expert </li><li>Build outstanding relationships with field teams, customers, and industry peers to identify new ways to collaborate and drive the industry forward </li><li>Develop an understanding of the market landscape to identify key areas of differentiation and areas of strategic importance  </li></ul>
<h3>Skills to Succeed:</h3>
<ul>
<li>Deep understanding of the threat landscape across on-prem and cloud environments  </li><li>Strong technical skills to assist in the planning and development of new tooling  </li><li>Communicating: Know your audience and vary your style based on it. You can effectively influence and communicate cross-functionally with all levels of management with exceptional verbal and written communication skills </li><li>Ability to distill research findings for a broad audience including technical and non-technical parties </li><li>Strong sense of ownership to drive a strategy from conception through execution </li><li>Effective Program Management skills, with demonstrated ability to lead complex strategic and operational initiatives </li><li>Excellent judgment and critical thinking skills, and drive for results </li></ul>
<h3>Qualifications:</h3>
<ul>
<li>BS degree or equivalent practical experience </li><li>6+ years of experience in security research, security operations or similar roles </li><li>3+ years of experience in cloud security focused on AWS, Azure and GCP </li><li>Deep understanding of the MITRE attack framework </li><li>Experience speaking to customers about current TDIR processes and ways to improve </li><li>Experience supporting and contributing to the open-source community </li><li>Experience managing and growing a globally distributed team  </li><li>Experience partnering effectively with cross-functional teams and leaders </li><li>Ability to work across multiple functions - including Communications, PR, Sales, Marketing, Finance, and Customer Success </li><li>Deep understanding of enterprise IT environments, networks, and how they integrate with other products </li></ul>Exabeam is privately funded by Blue Owl Capital, Lightspeed Venture Partners, Cisco Investments, Norwest Venture Partners, Acrew Capital, Icon Ventures, and renowned cybersecurity investor Shlomo Kramer. For more information visit https://www.exabeam.com or follow us on LinkedIn and Twitter . Looking for more? Check our reviews on Glassdoor .

Director, Security Research

Apply to Cyber Security Jobs in San Mateo in companies remotely and near you. New Cyber Security Jobs in San Mateo added daily.

Job Position and Company	Location	Tags	Posted
Software Engineer, Converged Infrastructure Security Lead at Zoox	Full Time
Sr Global Security Compliance & Risk Analyst at Snowflake Inc.	Full Time CISM Audit Analyst Manager
Principal Software Engineer - Compliance Lead at Snowflake Inc.	Full Time
Sr. Global Security Compliance Analyst at Snowflake Inc.	Full Time CISM Audit Analyst Manager
Director, Security Research at Exabeam	Full Time

Cyber Security Jobs in San Mateo

0 Cyber Security Jobs in San Mateo. Page 1 of 1

5 closed cyber security jobs in san mateo:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Cyber Security Jobs in San Mateo

0 Cyber Security Jobs in San Mateo. Page 1 of 1

5 closed cyber security jobs in san mateo:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter