PEAK6

Apex Fintech Solutions (AFS) powers innovation and the future of digital wealth management by processing millions of transactions daily, to simplify, automate, and facilitate access to financial markets for all. Our robust suite of fintech solutions enables us to support clients such as Stash, Betterment, SoFi, and WeBull, and more than 20 million of our clients' customers. 
Collectively, AFS creates an environment in which companies with the biggest ideas in fintech are empowered to change the world. We are based in Dallas, TX and also have offices in Austin, New York, Chicago, Los Angeles, Portland, and Belfast. 
If you are seeking a fast-paced and entrepreneurial environment where you'll have the opportunity to make an immediate impact, and you have the guts to change everything, this is the place for you. 
AFS has received a number of prestigious industry awards, including:
<ul>
<li>2021, 2020, 2019, and 2018 Best Wealth Management Company - presented by Fintech Breakthrough Awards</li>
<li>2021 Most Innovative Companies - presented by Fast Company</li>
<li>2021 Best API &amp; Best Trading Technology - presented by Global Fintech Awards</li>
</ul>


JOB: Security Operation Center (SOC) Analyst
The Role
Seeking a Security Operation Center (SOC) Analyst to join our Cybersecurity team.
The SOC Analyst will be responsible for day-to-day security threat monitoring, analysis, and response. You will manage security incidents and review security alerts, determine if the security events are false positives, true positive, or false negatives and work with incident responders on known or suspected security threats. The Analyst will work on threat intelligence gathering and integration, forensics, and incident response that adhere to best practices and recognized control frameworks. 
Primary Responsibilities
<ul>
<li>Responsible for working in Security Operation Center (SOC) team environment.</li>
<li>Investigate incidents using SIEM and UEBA technologies, packet captures, reports, data visualization, and pattern analysis.</li>
<li>Analyze, escalate, and assist in remediation of critical information security incidents.</li>
<li>Improve and challenge existing processes and procedures in a very agile and fast-moving information security environment.</li>
<li>Able to participate in an on-call rotation.</li>
<li>Perform real-time alert monitoring and risk mitigation.</li>
<li>Provide analysis and trending of security log data from many heterogeneous security devices across different layers.</li>
<li>Provide Incident Response (IR) support when analysis confirms the actionable incident.</li>
<li>Provide threat and vulnerability analysis as well as security advisory services.</li>
<li>Analyze and respond to previously undisclosed software and hardware vulnerabilities.</li>
<li>Investigate, document, and report on information security issues and emerging trends.</li>
<li>Integrate and share information with other analysts and teams.</li>
<li>Participate in security projects and assist network operations and engineering teams.</li>
</ul>

Qualifications
<ul>
<li>Bachelor's degree in a related field (Security, Forensics, or Computer Science is preferred)</li>
<li>5-7 years of overall IT professional experience or 3-4+ years of work experience Tier 1 and Tier 2 level security operations experience.</li>
<li>Desirable | Proven experience as a security and/or complianceanalyst, incident handler/responder, security engineer, or penetration tester.</li>
<li>Knowledge of security methodologies, processes (i.e., Cyber Kill Chain/Diamond Models, and the MITRE ATT&amp;CK framework).</li>
<li>Knowledge of technical security solutions (firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, AV, DLP, proxies, network behavioral analytics, endpoint, and cloud security).</li>
<li>In-depth knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS and HTTP Protocols, network analysis, and network/security applications.</li>
<li>Good knowledge of common malware threats and attack methodologies.</li>
<li>Desirable Professional Certifications: GCIA, GCIH, GCFE, GCFA, Security+, CCNA CyberOps, OSCP, GPEN, GWAPT, CEH, </li>
</ul>
Core Competencies
<ul>
<li>Accountable for the successful completion of multiple, individual projects simultaneously.</li>
<li>Communicate effectively by contributing significantly to the development and delivery of a variety of written and visual documents for diverse audiences.</li>
<li>Manage change and demonstrate adaptability by adjusting priorities or processes and approaching as needs dictate.</li>
<li>Work independently as a team representative of Information Security as well as showing excellent teamwork skills.</li>
<li>Ability to develop thorough documentation and operational playbooks, in addition, to suggest alert enhancements to improve detection capability.</li>
<li>Fundamental knowledge of network and system technologies and practices</li>
</ul>
Teams Culture &amp; Values
<ul>
<li>The Cybersecurity Team is comprised of independent thinkers and doers who can positively impact our clients and shape Apex Fintech Solutions business and security posture.</li>
<li>The Cybersecurity Team to build and maintain a collaborative environment and engaging work—guided by Open and Honest Communication; Teamwork and Collaboration; Involving Everyone; Leaders Who Serve; and Personal Accountability</li>
</ul>


Apex currently requires all employees as a condition of employment to either be fully vaccinated for COVID-19 or submit to regular testing. The CDC defines "fully vaccinated" as two weeks after the second dose for Pfizer and Moderna, and two weeks after the single dose of Johnson &amp; Johnson. Apex will also require proof of vaccination and/or testing. Apex will also consider requests for exemption from these requirements as a reasonable accommodation for medical reasons or sincerely held religious beliefs. *Please note this requirement is ONLY for US Offices.

Dallas Castle

Security Operations Analyst

Arctic Wolf Networks

Ready to make an impact? Arctic Wolf is looking for an Application Security Architect to join our pack.
Arctic Wolf, with its unicorn valuation, is the leader in security operations in an exciting and fast-growing industry—cybersecurity.
How fast are we growing? Well, Arctic Wolf was highly ranked in the Deloitte Fast Technology 500 for NorthAmerica in both 2019 (#25) and 2020 (#104)! We have doubled headcount, customers, and revenue for five years running. We are also cultivating a collaborative and productive work environment that welcomes a diversity of backgrounds, cultures, and ideas to make our teams even stronger as we grow our teams globally.
In fact, we were named a 2021 Top Workplace USA (Energage) as the top technology firm to work in our size category, were recognized as one of the 2020 Best Places to Work (bizjournals.com), and most recently were certified as a 2021 Great Place to Work (Great Places to Work Institute, Canada). Arctic Wolf believes in corporate responsibility, and our worldwide offices proudly participate in volunteer programs throughout their communities. We’ve also earned distinction from TravelWise for our efforts in promoting sustainable transportation.
Position Overview and Objective
The Lead Application Security Architect role is responsible for the implementation of measures to ensure the security of Arctic Wolf software systems, applications, code, and related components. This role will work within our Information Security Engineering team to deploy and operationalize technical security capabilities with open collaboration with the Research and Development Team.
Primary Responsibilities and Duties
<ul>
<li>Develop secure coding &amp; secure design principles</li>
<li>Train developers, architects, code reviewers, and others on secure coding practices. Mentor team members.</li>
<li>Serve as the subject matter expert for Application Security, providing guidance to Engineering and Product teams</li>
<li>Develop standards and training for security testing tools focused on the application layer (e.g., SAST, DAST, IAST, SCA), threat modeling, penetration testing, red team, bug bounty and</li>
<li>Work with development teams throughout the entire SDLC to ensure code is secure by design, secure by default, secure in deployment and communication</li>
<li>Help software development teams to understand, and remediate security findings</li>
<li>Research any reported or suspected application vulnerabilities</li>
<li>Implement and configure off-the-shelf application security technologies in the Arctic Wolf internal environment.</li>
<li>Create technical approaches to implementing application security control technologies.</li>
<li>Contribute to a world-class security program that supports Arctic Wolf’s tremendous growth.</li>
<li>Mentors and coaches team members to further develop competencies</li>
<li>Assist in developing security related libraries used in our environment</li>
<li>Security metrics delivery and improvements.</li>
<li>The ability to effectively partner and communicate with Engineering and Product teams</li>
</ul>
Key Skills
Communication, Threat modeling, Code Review, Penetration Testing, Application Testing, Research
Key Competencies
Is able to write clearly and succinctly in a variety of communication settings and styles; can get messages across that have the desired effect.
Comes up with a lot of new and unique ideas; easily makes connections among previously unrelated notions; tends to be seen as original and value-added in brainstorming settings.
Can be counted on to exceed goals successfully; is constantly and consistently one of the top performers; very bottom-line oriented; steadfastly pushes self and others for results.
Minimum Qualifications
<ul>
<li>A Bachelor’s Degree in Computer Science, Information Systems, Engineering, cybersecurity or related technical field; or equivalent experience.</li>
<li>10+ years of experience in security or infrastructure engineering Including assessing and escalating to vendors for troubleshooting purposes.</li>
<li>Thorough Understanding of modern software development practices</li>
<li>Thorough understanding of OWASP Top 10 vulnerabilities and corresponding best practices for mitigation</li>
<li>Significant experience in deploying application security technologies such as SAST, DAST, IAST, SCA, etc.</li>
</ul>
Preferred Qualifications
<ul>
<li>Familiarity with cloud infrastructures, with Amazon Web Services (AWS) and/or Azure considered a strong plus.</li>
<li>Expert level analytical and quantitative skills with proven experience in developing strategic solutions</li>
<li>Significant prior experience securing large-scale web applications, including performing security code reviews, vulnerability assessments, and manual testing for logic flaws</li>
<li>Significant Experience in one or more highly regulated environments (FedRAMP, SOX, ISO 27001, etc) or frameworks</li>
<li>Presentation of a security topic and an industry conference</li>
<li>One a more Industry Certifications – (CISSP, CCSP, CSLP, OSCP, OSWE, GPEN, GWAPT, CEH, etc)</li>
</ul>
Travel Requirements
Typically 10% or less of business travel
Security Requirements:
<ul>
<li>Conducts duties and responsibilities in accordance with AWN’s Information Security policies, standards, processes and controls to protect the confidentiality, integrity and availability of AWN business information.</li>
<li>Background checks are required for this position</li>
</ul>
About us:
At Arctic Wolf, we recognize that success comes from delighting our customers. We believe in being lean – in constantly building, measuring, and learning in all aspects of our business. We truly value people. All wolves are welcome to join the Arctic Wolf pack, with compelling compensation packages, benefits, and equity for employees.
Arctic Wolf is focused on building a workforce that is diverse and inclusive. If you’re excited about this role, but do not meet all of the qualifications listed above, we encourage you to apply. We review all applications.  
Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law.
Arctic Wolf is committed to fostering a welcoming, accessible, respectful and inclusive environment ensuring equal access and participation for people with disabilities. As such, we strive to make our recruitment, assessment and selection processes as accessible as possible and provide accommodations as required for applicants with disabilities. Please let us know if you require any accommodations by emailing <a href="mailto:hr@arcticwolf.com" rel="noopener noreferrer nofollow ugc" target="_blank">recruiting@arcticwolf.com</a>.

Provo

Principal Application Security Architect

Span.IO, Inc.

Our Mission  
SPAN develops products that accelerate the rapid adoption of renewable energy in the home. The flagship SPAN Smart Panel is the first true evolution for the traditional home electric panel, harnessing enhanced technology for metering, monitoring, and control. An expanded product suite of intelligent, integrated solutions radically lowers the cost and complexity of energy upgrades–including solar, batteries and EVs–empowering homeowners to be active, resilient and informed players in the energy market. 
The Role
The Information Security Intern will proactively work with internal stakeholders to identify security risks and implement practices that meet standards for information security. 
Responsibilities
The primary responsibility of the Information Security Intern include:
<ul>
<li>Application Security - Perform manual and automated security testing. </li>
<li>Cloud Security - Help with securing the production environment hosted in AWS.</li>
<li>IoT Security - Help secure firmware and hardware for an IoT product</li>
<li>Security Controls Development - Assist with the development of security controls and associated control procedures.</li>
<li>Security/Compliance Project Management - Assist with security and compliance project management activities on as needed basis.</li>
</ul>
<h3>About You</h3>
Required Qualifications:
<ol>
<li>Bachelor or Masters students pursuing a degree in business, information systems management, information security or computer science </li>
<li>Basic understanding of networking, operating systems, access control, databases, and application types</li>
<li>Basic understanding of Network Security (e.g. firewalls, IDS/IPS etc.) and Application Security (e.g. OWASP Top 10)</li>
<li>Basic understanding of compliance standards e.g. ISO 27001, SOX, PCI DSS, HIPAA, FISMA/FedRAMP, SOC1 (SSAE16), SOC2 and EU Privacy regulations</li>
<li>Security certifications like CISSP, CISA, CISM, CIPP, GIAC, OSCP are preferred but not required.</li>
<li>Excellent written and oral communication skills</li>
</ol>
<h3>Life at SPAN</h3>
SPAN embraces diversity and equal opportunity in a serious way. We are committed to building a team that represents a variety of backgrounds, perspectives, and skills. 
Headquartered in San Francisco’s vibrant SoMa neighborhood, we are an eclectic group of creative thinkers who value open communication, teamwork, and a ‘make it happen’ approach to addressing complex challenges. 
Our CEO, Arch Rao⁠—former head of the Tesla Powerwall team⁠—fosters an energetic and collaborative environment, with a strong emphasis on maintaining work-life-balance across the organization.
We’re hiring talented individuals who are driven by success and are passionate about shaping the future of renewable energy. If that sounds like you, we’d love for you to consider joining the rapidly growing team at SPAN.
The Perks:
⚡ Competitive compensation + equity grants at a well-funded, venture-backed company
⚡ Comprehensive benefits (including medical; dental, vision, life and disability insurance)
⚡ Comfortable, sunny office space located near BART and Caltrain public transit
⚡ Strong focus on team building and company culture (events, meet-ups, clubs)
⚡ Flexible hours and unlimited PTO
Our Mission &amp; Values:
At SPAN, we believe that powering your home with clean energy should be a simple and delightful experience that is at its essence human-centered and technology-forward.
Our core values include:
<ul>
<li>Making home energy more accessible, intuitive, and convenient.</li>
<li>Enabling homes and vehicles to be powered by the sun.</li>
<li>Building resilient homes with reliable power.</li>
<li>All-electric everything.</li>
<li>A more flexible &amp; distributed grid.</li>
</ul>
Interested in joining our team? Submit an application today and we’ll be in touch with next steps!

San Francisco

Information Security Internship

Spring Health

Our mission: eliminate every barrier to behavioral health. Spring Health is a comprehensive mental health solution for employers and health plans. Unlike any other solution, we use clinically validated technology called Precision Mental Healthcare to pinpoint and deliver exactly what will work for each person  — whether that’s meditation, coaching, therapy, medication, and beyond. Today, Spring Health serves more than 200 companies, from start-ups to multinational Fortune 500 corporations, and is a preferred mental health provider to companies like General Mills, Guardian, Bain, and Instacart. We have raised over $300 million from prominent investors including Kinnevik, Tiger Global, Northzone, RRE Ventures, Rethink Impact, Work-Bench, William K Warren Foundation, SemperVirens, Able Partners, True Capital Ventures, and a strategic investor, Guardian Life Insurance. Thanks to their partnership, our current valuation has reached $2 billion.We are looking for an Associate Director Security Operations &amp; Engineering (SecOps) to lead and manage a growing team, taking the SecOps team to the next level. SecOps is committed to proactively detect, respond to, simulate, and identify breach attempts and threat actors. You will manage solutions that quickly identify breach attempts, contain and eradicate threats, streamline the security incident response processes with the business, continuously test our controls, and help the business make informed decisions based on threat intelligence. The position requires a hands-on technical leader who is well versed in penetration testing, cloud security engineering, architecture reviews, and management of metrics that demonstrate continuous improvements, successful execution on strategies for improvements, fast-paced agile teams, and recruitment of excellent engineers, analysts, and administrators.
<h3>What You’ll Be Doing: </h3>
<ul>
<li>Manage and grow highly talented teams, ensuring they deliver high quality, timely work.</li><li>Tracking, managing, improving the ability to identify, detect, and respond to threats quickly.    </li><li>Establish a set of established measurable metrics that reflect the baseline of all SecOps functions and drive improvements.</li><li>Detailed project and process management to ensure audit trails of activities are reviewed and follow policy and audit requirements. </li><li>Build continuous software code testing (SAST, DAST, SCA, IAST, RASP, etc.) that feeds into the software development life cycle process. </li><li>Gather and report operational metrics, accomplishments, and priorities for leadership.</li><li>Scale the organization to accommodate for hyper growth.</li><li>Contribute to shaping the future of the security organization.  </li><li>Develops Service Level Agreements to set expectations and measure performance. </li><li>Other duties as assigned. Management reserves the right to assign or reassign duties and responsibilities at any time.</li></ul>
<h3>What we expect from you:</h3>
<ul>
<li>Proven track record of building scalable security teams to improve security  operations, security engineering, application testing, and managing projects.</li><li>Ability to recruit, retain, and develop high performing individuals aligned with Spring Health’s core values and goals.</li><li>Complete performance reviews and development plans for all direct reports on time.</li><li>Ability to provide constructive feedback and coaching to direct reports, including to individuals who are underperforming.</li><li>Meets or exceeds performance goals and budget targets.</li><li>Effectively manage departmental resources and processes, and seeks opportunities to create efficiencies in policies and procedures.</li><li>Effectively manages relationships with vendors and/or contractors.</li><li>Bachelor’s degree in Computer Science, Engineering, MIS, IT or related discipline or equivalent experience.</li><li>Minimum of 10 years of professional or technical experience in IT with a strong background in all aspects of customer service.</li><li>Minimum of 5 years’ current management experience that demonstrates proficiency in leadership techniques and management of resources. </li><li>Minimum 5 years of current security architecture and/or security engineering experience and/or cloud security tools administration.</li><li>Strong communication and interpersonal skills with the ability to effectively listen and communicate information in a clear and concise manner.</li><li>Strong background in industry frameworks (e.g. NIST Risk Management, IBM Secure Engineering, PSIRT), working in healthcare and/or technical sector, and in a fast-pace growth minded work environment</li><li>Strong background cloud platforms AWS, Azure, and Google.</li><li>Must have within 18 months of hire CISSP, or Security+, or CySA+ unless alternative professional education is approved.</li><li>Bonus points for technical pentesting certification (e.g. OSCP, CEH, CPT, GPEN).</li></ul>#LI-OK1Benefits of working at Spring Health: Focus on total health including:Generous medical, dental, vision coverage available day 1 + access to One MedicalAccess to Spring Health’s platform which includes (10) free therapy sessionsUnlimited time off in addition to (12) paid holidays16-18 weeks paid parental leave $500 per year Wellness Reimbursement Creating a culture you can thrive in:Flexible remote and hybrid work style arrangementsCalm Fridays to encourage meeting &amp; distraction free days Donation matching to support your favorite causesDedicated employee resource groups   Supporting you financially through:Competitive mix of salary and stock optionsEmployer sponsored 401(k) match In addition to finding people who are truly excellent at what they do, we take our values at Spring Health seriously:Members Come First We are genuine member advocates.Move Fast to Change Lives We build with urgency and intention.Take Ownership We extend trust and hold ourselves accountable.Embrace Diverse Teams &amp; Perspectives We find strength in the diversity of cultural backgrounds, ideas, and experiences.Science Will Win We will achieve impact by innovation and evidence based frameworks.Candor with Care We are open, honest and empathetic. More information on Spring Health and what it is like to work here can be found <a href="https://springhealth.com/wp-content/uploads/2022/07/SH22-Spring-Health-Values-1-Pager.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>! Spring Health is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex, marital status, ancestry, disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. We also consider qualified applicants regardless of criminal histories, consistent with applicable legal requirements. Spring Health is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans. If you have a disability or special need that requires accommodation, please let us know.

New York

Associate Director of Security Operations &amp; Engineering

Palta

Palta is a multi-product tech platform developing a number of mobile apps focused on health&amp;wellbeing space. Our portfolio includes such successful companies as Flo (global leader in female health with more than 42 mln MAU), Prisma (app of the year 2016, 150+ mln downloads), Simple (12m+ downloads). Currently, Palta portfolio consists of 9 mobile apps, all focused on global digital health &amp; wellbeing market. Rapid portfolio growth is fueled by the recently raised $100 million in series B round led by VNV Global.
Palta apps are used by over 100 million health aware people globally!We're looking for the Head of Information Security to build and maintain information security of Palta and portfolio companies, ensure awareness of the employees of threats and risks, timely reaction to incidents, etc.
Responsibilities
<ul>
<li>Be in charge of information security at Palta and Palta Brain, our growth platform</li>
<li>Deeply understand Palta and our portfolio companies business, proactively identify and address information security risks and problems</li>
<li>Pursue the implementation of secure software development practices</li>
<li>Run Palta’s Bug Bounty program and collaborate with industry experts, partners, vendors, etc.</li>
<li>Build information security awareness system, maintain corresponding procesures and policies</li>
</ul>
Qualifications
<ul>
<li>Proven experience as Director of Information Security, CISO or similar position</li>
<li>Experience in penetration testing, security assessment of mobile apps, websites, backend services, etc.; OSCP, ECPPT, EMAPT, EJPT is a plus</li>
<li>Architecture review, work closely with the development teams in order to implement 'security by design’ approach, secure software development, etc.</li>
<li>Experience in implementing corporate security in a complex distributed environment with many offices, business units, etc.</li>
<li>Strong technical background, analytical mindset, and problem-solving orientation;  deep understanding of data platforms, payment and monetisation services is a plus</li>
</ul>
What drives success for this role
<ul>
<li>Excellent communication and negotiation skills, ability to build processes and influence cross-functionally</li>
<li>Being resourceful, optimistic, tenacious, confident, and full of energy</li>
<li>Being self-starter, forward-thinking, innovative, and agile. Comfortable taking on a high level of responsibility, and driving continuous improvement</li>
<li>Being ambitious, results-driven with a bias to action, with passion to make an impact and exceed your goals</li>
<li>Being adaptable and flexible, comfortable being thrown into a largely ambiguous environment</li>
</ul>

Head of Information Security

Apply to OSCP Cyber Security Jobs in companies remotely and near you. New OSCP Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Security Operations Analyst at PEAK6	Full Time Soc Analyst Analyst Incident Response GCFA
Principal Application Security Architect at Arctic Wolf Networks	Remote Full Time Red Team CCSP Application Security
Information Security Internship at Span.IO, Inc.	Internship CISM Application Security AWS CIPP
Associate Director of Security Operations & Engineering at Spring Health	Remote Full Time Audit Incident Response Agile
Head of Information Security at Palta	Full Time CISO Agile OSCP Penetration Testing

OSCP Cyber Security Jobs

0 OSCP Cyber Security Jobs. Page 1 of 1

5 closed oscp cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

OSCP Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

OSCP Cyber Security Jobs

0 OSCP Cyber Security Jobs. Page 1 of 1

5 closed oscp cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

OSCP Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter