Basis Technology

The Cyber Forensics group at Basis Technology is focused on providing easy to use and extensible tools to make corporate IT security, law enforcement, and other investigators more efficient. 
We have an opening for a Java engineer to work on our open source and proprietary digital forensics software.  You will learn about recovering deleted data and where evidence is stored. You'll build extensible Java platforms and plug-in modules.  Some of the work is backend and some of it is UI.  You'll get to work on it all.  Some of your work will be pushed back to the community as open source software. 
Responsibilities: 
<ul>
<li>Participate in the design and implementation of our open source and proprietary digital forensics tools, such as Autopsy and The Sleuth Kit.</li>
<li>Create new modules and expand the functionality of the underlying frameworks. </li>
<li>Expand capabilities of both the desktop and client-server versions.</li>
<li>Develop both graphical interfaces and backend software.</li>
<li>Produce Java code in an agile development environment.</li>
<li>Create user focused documentation.</li>
</ul>
Qualifications:
<ul>
<li>A Bachelor's degree  in Computer Science  or related discipline and at least three (3) years of related experience. </li>
<li>A minimum of  three (3) years prior programming experience with Java or C++. </li>
<li>Minimum one (1) year  database systems experience with SQL Server,  MSSQL, PostgreSQl, or SQLite.</li>
<li>Working knowledge of  Windows, Macintosh, and Linux operating systems</li>
<li>Working knowledge of data structures,  algorithms, and object oriented design</li>
<li>A proven ability to work independently and under tight timelines.</li>
</ul>

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
We are also committed to the full inclusion of all qualified individuals. As part of this commitment, we will ensure that persons with disabilities are provided with reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact <a href="mailto:hr@basistech.com" rel="noopener noreferrer nofollow ugc" target="_blank">hr@basistech.com</a>.

Somerville

Java Software Engineer - Digital Forensics

The Digital Forensics team at Basis Technology has an opening for Director of Training to support its Cyber Triage and Autopsy software tools. This is the first position in a new training team and is a unique opportunity to create and deliver new material.
We are looking for a motivated and organized person who wants to help people on the front lines of digital crimes get their jobs done. 
In this role, you will be responsible for:
<ul>
<li>Identifying courses that should be offered to our customers and users</li>
<li>Building courses that include hands-on labs</li>
<li>Teaching courses in-person and remotely</li>
<li>Updating courses based on new features</li>
<li>Building out a training team as demand increases</li>
<li>Working with the product team to help define new features, test new features, and give feedback from students. </li>
</ul>
The Cyber Triage (<a href="https://cybertriage.com" rel="noopener noreferrer nofollow ugc" target="_blank">https://cybertriage.com</a>) product is focused on incident response and needs a new curriculum that focuses on product features and DFIR basics. This position will work with the CTO and product teams to incrementally build out courses.
The Autopsy tool (https://autopsy.com) has an existing 8-hour training course that needs updating. The online version of this course has been used by tens of thousands of students.  This position will also be responsible for maintaining and updating that course.
Qualifications:
<ul>
<li>5+ years of performing incident response investigations</li>
<li>3+ years of providing digital forensics and incident response training</li>
<li>Knowledge of latest attack trends and TTPs</li>
<li>Experience managing projects (cases, courses, etc.)</li>
<li>Willingness to travel up to 25% of the time. </li>
</ul>

Basis Technology is dedicated to engineering a safer and more productive world by building proven AI solutions for analyzing text, connecting data silos, and uncovering digital evidence. From making government smarter, to national security, to fighting financial fraud, we make sense of messy and voluminous data by applying our AI, machine learning, and cyber forensics to power the most important systems on earth. It’s challenging work, but we love it. Because we’re wholehearted believers in the power of persistence to solve any problem, and we solve problems that matter.
If you’ve got ingenuity, ambition, and heart, and you want to come to a company where you can make a difference, then you’ll feel right at home among our diverse team of creators. From engineers to graphic designers, we empower every person in our company to make their mark. So don’t come here for a desk job. Show up ready to build.
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
We are also committed to the full inclusion of all qualified individuals. As part of this commitment, we will ensure that persons with disabilities are provided with reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact <a href="mailto:hr@basistech.com" rel="noopener noreferrer nofollow ugc" target="_blank">hr@basistech.com</a>.

Pwani

Director of Training - Incident Response and Digital Forensics

SmartBear

Quality isn’t just a goal. It’s the whole point.
Our customers are under a lot of pressure to deliver great software. But to compress lifecycles, add features, and compete in a world where ‘every company is now a software company’ is hard. And one mistake can mean their reputation, even future. That’s why it’s our mission to help. At any part of their software development lifecycle (SDLC), we provide the tools and discipline to focus on quality while streamlining their processes. So our customers can create and deploy software that works as designed – especially when it’s needed most. And we’re looking for people to join us.
Cyber Security Analysts at Smart Bear are responsible for monitoring and triaging cyber alerts.  Best of breed systems across the environment send event logs to the SIEM, providing a rich analytical platform for correlating events that contribute to these alerts.  Analysts are responsible for discovering and escalating any consequent malicious or anomalous activity, which may require incident response. Further, Cyber Security Analysts engage frequently with the Security and Technology engineering teams. They serve as key members in deploying and configuring security controls that protect the constantly evolving infrastructure.  Analysts also partner with external industry experts to understand new developments, pushing security operations to the leading edge of the Cyber Security field.   
You will drive the following responsibilities:
<ul>
<li>Monitor and investigate internal and external cyber threats, leveraging best of breed technologies, through constant engagement with other world class analysts</li>
<li>Report status, define tuning requirements, and monitor functionality of security controls</li>
<li>Quickly correlate multiple data sources and apply various analytical techniques, to determine the best hypothesis for event activity</li>
<li>Constantly learn, illustrate, and apply knowledge on the latest adversarial tactics, techniques and procedures</li>
<li>Contribute to real time improvement of internally developed analytics, understanding both technical context and strategic best practices</li>
<li>Support tuning and iteration of tools used for monitoring, analysis, and forensics</li>
<li>Standardize techniques and procedures, in order to promote automation</li>
<li>Maintain awareness of latest cyber security subject matter through a demonstrated hunger and passion for the industry</li>
</ul>
Position Requirements:
<ul>
<li>Bachelor’s degree or higher in Information Technology or related experience</li>
<li>Minimum 2-4 years of Information Security experience</li>
<li>Minimum 2 years of experience with antivirus, EDR, intrusion detection systems, firewalls, Active Directory, vulnerability assessment tools, as well as SIEM</li>
<li>Baseline understanding of directory based environments</li>
<li>Basic understanding of tactics, techniques and procedures following industry recognized frameworks such as MITRE ATT&amp;CK</li>
<li>Excellent analytical and problem-solving skills</li>
<li>Ability to leverage both open-source and commercial tooling to resolve investigations quickly</li>
</ul>
Preferred Qualifications:
<ul>
<li>Scripting/Programming (Python, PowerShell, Java, C#, etc.)</li>
<li>Familiarity with cloud technologies such as AWS, Azure, Google Cloud and associated services (SaaS, IaaS, etc.)</li>
<li>Experience with defensive security tools and operations</li>
<li>Certifications: GIAC – GCIH, GCFE, Security+</li>
</ul>
About SmartBear

At SmartBear, we focus on your one priority that never changes: quality. We know delivering quality software over and over is complicated. So our tools are built to streamline your process while seamlessly working with the products you use – and will use. Whether it’s TestComplete, Swagger, Cucumber, ReadyAPI, Zephyr, or one of our other tools, we span from test automation, API lifecycle, collaboration, performance testing, test management, and more. Whichever you need, they’re easy to try, easy to buy, and easy to integrate. We’re used by 15 million developers, testers, and operations engineers at 24,000+ organizations – including world-renowned innovators like Adobe, JetBlue, FedEx, and Microsoft. Wherever you’re going, we’ll help you get there. Learn more at <a href="https://nam05.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsmartbear.com%2F&amp;data=02%7C01%7CDonnie.Watson%40smartbear.com%7Cb89a899a49744ad00af408d860c56843%7Cadbb47bc578642218ab22bb782d51a17%7C1%7C0%7C637365748261275265&amp;sdata=TceqBQKsPaJ6zEBLzVxo1FIVBCo0xgVXVdGE9K69nnE%3D&amp;reserved=0" rel="noopener noreferrer nofollow ugc" target="_blank">smartbear.com</a>, or follow us on LinkedIn, Twitter, or Facebook.

SmartBear is an equal employment opportunity employer and encourages success based on our individual merits and abilities without regard to race, color, religion, gender, national origin, ancestry, mental or physical disability, marital status, military or veteran status, citizenship status, age, sexual orientation, gender identity or expression, genetic information, medical condition, sex, sex stereotyping, pregnancy (which includes pregnancy, childbirth, and medical conditions related to pregnancy, childbirth, or breastfeeding), or any other legally protected status.
 
#LI-JG1

Senior Security Ops Analyst

Quality isn’t just a goal. It’s the whole point.
Our customers are under a lot of pressure to deliver great software. But to compress lifecycles, add features, and compete in a world where ‘every company is now a software company’ is hard. And one mistake can mean their reputation, even future. That’s why it’s our mission to help. At any part of their software development lifecycle (SDLC), we provide the tools and discipline to focus on quality while streamlining their processes. So our customers can create and deploy software that works as designed – especially when it’s needed most. And we’re looking for people to join us.
SmartBear is seeking a GRC Security Analyst who will be responsible for supporting the security direction of the business and elevating the company's security posture. In tandem with security leadership, the GRC security analyst consistently assesses and validates the assurance of the security program. As a primary point of contact for internal and external auditors, the GRC security analyst monitors progress and enforces the resolution of outstanding issues that may lead to non-compliance or security threats to the business. 
Essential Job Duties:
•    Conduct enterprise-wide, ongoing risk analysis in tandem with compliance and security.•    Assist in maturing the risk management oversight for the organization, including helping to formulate an enterprise risk management committee.•    Key role in deploying and maintaining oversight of an identified GRC-related platform.•    Identify strengths and weaknesses in the security program related to privacy, security, business resiliency, and compliance frameworks.•    Document, formulate, and enforce areas of security improvement that balance risk with business operations and do not diminish efficiencies or innovation.•    Maintain strong oversight of third parties, vendors, and business partners to safeguard against undue risk presented by external entities. Escalate to security management and business unit leads when points of weakness are discovered.•    Analyze findings, and document, recommend and report program gaps to security leadership.•    Monitor current and proposed security changes impacting regulatory, privacy and security industry best practice guidance. Apply GRC expertise across key lines of business, including products, practices, and procedures.•    Ensure security and technology teams maintain up-to-date configuration documentation for systems and processes. Maintain rigorous oversight of security systems and security configuration administration to reduce risk to the enterprise systems and accounts.•    Act as a key participant in incident response to track occurrence and resolution, with strict documentation and reporting.  •    Work with security, audit, and risk management leadership to perform ongoing security program assessments and create annual strategic technology and budgetary directives.•    Act as a point of contact for disaster recovery and business continuity related to security frameworks, compliance, and privacy laws.
Skills and Experience:
•    5+ years experience in cybersecurity as a practitioner and 2 to 3+ years of exposure to various security frameworks.•    Strong business acumen and security technology skills for well-rounded proficiency and proven ability to align with security practices and compliance responsibilities. •    Experience and understanding of various regulatory requirements, laws, and frameworks, including but not limited to PCI, ISO 27001/2, NIST CSF, GDPR, and other privacy requirements.•    Exceptional written and verbal communication skills and proven ability to translate security and risk to all levels of the business.•    Capacity to understand the legacy, progressive technology, security controls, and respective risk. Working knowledge of cloud computing, DevOps, and application security is required.•    Up-to-date understanding of a wide range of incident response, system configuration, vulnerability management, and hardening guidelines. •    Familiarity with state, federal, and international privacy laws.
Preferred Qualifications:
•    Preferred experience with cloud environments such as Amazon Web Services (AWS), Google Cloud Platform (GCP), and Microsoft Azure. •    Prior experience with leading GRC systems from vendors such as RSA, MetricStream, and IBM.•    Demonstrated problem-solving capabilities and ability to manage complex local and international security requirements.•    Self-motivated, directed, and well-organized, with the vision to position controls in anticipation of threats. •    Successful track record of managing external entities' contracts and relationships and mitigating risks to business development opportunities.•    Holds or is working toward one or more certifications, including CISSP, CISA, CISM, CRISC, CGEIT, or GRCP.
About SmartBear

At SmartBear, we focus on your one priority that never changes: quality. We know delivering quality software over and over is complicated. So our tools are built to streamline your process while seamlessly working with the products you use – and will use. Whether it’s TestComplete, Swagger, Cucumber, ReadyAPI, Zephyr, or one of our other tools, we span from test automation, API lifecycle, collaboration, performance testing, test management, and more. Whichever you need, they’re easy to try, easy to buy, and easy to integrate. We’re used by 15 million developers, testers, and operations engineers at 24,000+ organizations – including world-renowned innovators like Adobe, JetBlue, FedEx, and Microsoft. Wherever you’re going, we’ll help you get there. Learn more at <a href="https://nam05.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsmartbear.com%2F&amp;data=02%7C01%7CDonnie.Watson%40smartbear.com%7Cb89a899a49744ad00af408d860c56843%7Cadbb47bc578642218ab22bb782d51a17%7C1%7C0%7C637365748261275265&amp;sdata=TceqBQKsPaJ6zEBLzVxo1FIVBCo0xgVXVdGE9K69nnE%3D&amp;reserved=0" rel="noopener noreferrer nofollow ugc" target="_blank">smartbear.com</a>, or follow us on LinkedIn, Twitter, or Facebook.

SmartBear is an equal employment opportunity employer and encourages success based on our individual merits and abilities without regard to race, color, religion, gender, national origin, ancestry, mental or physical disability, marital status, military or veteran status, citizenship status, age, sexual orientation, gender identity or expression, genetic information, medical condition, sex, sex stereotyping, pregnancy (which includes pregnancy, childbirth, and medical conditions related to pregnancy, childbirth, or breastfeeding), or any other legally protected status.
 
#LI-JG1

Senior GRC Security Analyst

Recorded Future, Inc.

With more than 800 employees, $200M ARR in 2021, 1,300+ clients, and rapid year-over-year growth, Recorded Future is the world’s largest intelligence company!Recorded Future is looking for a Security Analyst Intern for our CSIRT (Computer Security Incident Response Team). This team conducts proactive threat assessments, mitigation planning, incident detection and response, incident trending with analysis, and security architecture. 
This is a part-time opportunity, approximately 20 hours per week from June through December 2022.
We are looking for a candidate with experience or interest in one or more of the following fields: 
<ul>
<li>Network/Systems administration </li>
<li>IT security focused on computer forensics, incident response, malicious code/exploits, anti-virus, etc. </li>
<li>Web apps &amp; script development </li>
<li>Data analysis and synthesis</li>
</ul>
What you’ll do as the Security Analyst Intern
<ul>
<li>Sustain and improve network security tools to support security monitoring and incident response services (Network IDS, ELK log management, Honeynets inspection, etc)</li>
<li>Set up and tune monitoring involving multiple security monitoring products and data feeds . </li>
<li>Develop and document the processes and procedures for incident and alert handling .</li>
<li>Document cases, procedures, analysis, and investigations accurately and thoroughly (including best-practice documentation). </li>
<li>Constructively challenge and improve existing tools, processes and procedures.</li>
<li>Assist with continuous improvement of Recorded Future's security tools. </li>
</ul>
What you’ll bring as the Security Analyst Intern
The successful candidate will have experience, or interest, in some of the following with the intellectual curiosity to continue to learn about the rest: 
<ul>
<li>Exploits, malware, and malicious code trends . </li>
<li>Customer service and troubleshooting skills with the ability to communicate with empathy to a wide range of users.</li>
<li>Incident response processes, including case management.</li>
<li>Security event analysis, Incident response, blue and red team technologies and techniques. </li>
<li>Linux/Mac/Windows operating systems administration, analysis, and security</li>
<li>Scripting/coding (e.g. Python, Bash, Powershell, Golang).</li>
<li>Networking and core Internet protocols (e.g. TCP/IP, DNS, SMTP, HTTP, and distributed networks).</li>
<li>Infrastructure-as-a-Service platforms ( Amazon Web Services, etc.)</li>
</ul>
Why should you join Recorded Future?Recorded Future employees (or “Futurists”), represent over 35 nationalities and embody our core values of being passionate, practicing inclusion, and acting ethically. Our dedication to empowering clients with intelligence to disrupt adversaries has earned us a 4.7-star user rating from Gartner and 8 of the top 10 Fortune 100 companies as clients.
Want more info? <a href="https://www.recordedfuture.com/blog/" rel="noopener noreferrer nofollow ugc" target="_blank">Blog &amp; Podcast</a>: Learn everything you want to know (and maybe some things you’d rather not know) about the world of cyber threat intelligence<a href="https://www.instagram.com/recordedfuture/" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> &amp; <a href="https://twitter.com/RecordedFuture" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a>: What’s happening at Recorded Future<a href="https://therecord.media/" rel="noopener noreferrer nofollow ugc" target="_blank">The Record</a>: The Record is a cybersecurity news publication that explores the untold stories in this rapidly changing field<a href="https://www.recordedfuture.com/about/#history" rel="noopener noreferrer nofollow ugc" target="_blank">Timeline</a>: History of Recorded Future<a href="https://www.recordedfuture.com/news/recognition/" rel="noopener noreferrer nofollow ugc" target="_blank">Recognition</a>: Check out our awards and announcements

We are committed to maintaining an environment that attracts and retains talent from a diverse range of experiences, backgrounds and lifestyles.  By ensuring all feel included and respected for being unique and bringing their whole selves to work, Recorded Future is made a better place every day.If you need any accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to our recruiting team at <a href="mailto:careers@recordedfuture.com" rel="noopener noreferrer nofollow ugc" target="_blank">careers@recordedfuture.com</a> 
Recorded Future is an equal opportunity and affirmative action employer and we encourage candidates from all backgrounds to apply. Recorded Future does not discriminate based on race, religion, color, national origin, gender including pregnancy, sexual orientation, gender identity, age, marital status, veteran status, disability or any other characteristic protected by law.Recorded Future will not discharge, discipline or in any other manner discriminate against any employee or applicant for employment because such employee or applicant has inquired about, discussed, or disclosed the compensation of the employee or applicant or another employee or applicant.

Security Engineer Co-op Winter/Spring 2022

Apply to Cyber Security Jobs in Somerville in companies remotely and near you. New Cyber Security Jobs in Somerville added daily.

Job Position and Company	Location	Tags	Posted
Java Software Engineer - Digital Forensics at Basis Technology	Agile C Forensics JAVA Linux
Director of Training - Incident Response and Digital Forensics at Basis Technology	Forensics Incident Response Machine Learning TTPS
Senior Security Ops Analyst at SmartBear	Active Directory Analytics Automation AWS Azure
Senior GRC Security Analyst at SmartBear	Application Security Automation AWS Azure CISA
Security Engineer Co-op Winter/Spring 2022 at Recorded Future, Inc.	BASH Csirt DNS Exploits Forensics

Cyber Security Jobs in Somerville

0 Cyber Security Jobs in Somerville. Page 1 of 1

5 closed cyber security jobs in somerville:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Cyber Security Jobs in Somerville

0 Cyber Security Jobs in Somerville. Page 1 of 1

5 closed cyber security jobs in somerville:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter