SciTec

<p>SciTec, Inc. is a dynamic small business which delivers advanced sensor processing technologies and scientific instrumentation capabilities in support of national security and defense applications. We support customers throughout the Department of Defense and U.S. Government in building innovative new tools to deliver unique, world-class data exploitation capabilities.</p> <p>SciTec has an immediate opportunity for a talented Information Systems Security Manager (ISSM) in our Boulder, CO office. The ISSM will be responsible the accreditation and administration of a secure computing environment, both leading the implementation of technical security controls and spearheading coordination with accrediting and assessing agencies. The ISSM will need to work well in a team environment with a commitment to ensure security awareness and techniques are communicated effectively across the workforce. SciTec is searching for a candidate who will thrive in an environment where they are both expected to take the initiative to solve problems and empowered to see problems through to their conclusion.</p><p><strong>Requirements</strong></p><p>DUTIES:</p> <ul> <li>Leading the development, maintenance, and evaluation Information System (IS) security documentation, including System Security Plans (SSPs), Continuity of Operations Plans (COOPs), and Standard Operating Procedures (SOPs).</li> <li>Conducting cybersecurity controls assessments in accordance with applicable regulatory guidance, including NIST 800-53, NIST 800-37, NIST 800-60, and DoD 8500.01. Managing Plans of Actions and Milestones (POA&amp;M) originating from these assessments.</li> <li>Upload all security control evidence to the Governance, Risk, and Compliance (GRC) application (eMASS) to support security control implementation during the monitoring phase.</li> <li>Develop and execute a Continuous Monitoring program for information systems in accordance with NIST 800-53</li> <li>Ensure that selected security controls are implemented and operating as intended during all phases of the Information System (IS) lifecycle and RMF process</li> <li>Ensure that system security documentation is developed, maintained, reviewed, and updated on a continuous basis. </li> <li>Conduct required IS vulnerability scans according to risk assessment parameters. </li> <li>Continuously evaluating system security posture, identifying opportunities for improvement, and supporting the implementation of these improvements.</li> <li>Supporting the local SciTec Facility Security Officer (FSO) in ensuring the physical protection of information technology systems, including supporting the deployment of physical security measures such as intrusion detection systems.</li> <li>Contribute to Cybersecurity Maturity Model Certification (CMMC) and NIST SP 800-171 which may include authoring policy and procedure, capturing artifacts, and working related projects.</li> <li>Contributing to other corporate security and information assurance activities throughout the company with System Administrators, Security, and other stakeholders.</li> <li>Successful candidates will have strong written and communication skills to maintain a relationship with government counterparts and other mission partners.</li> <li>Ensure the removal and retirement of ISs being decommissioned in coordination with the system owner</li> <li>At least two years serving as an ISs Security Officer or Manager at a cleared facility. </li> <li>Familiarity with the use and operation of DISA SCAP and STIGViewer tools</li> </ul> <ul> <li>Is      technical lead for the Risk Management Framework (RMF) package creation      and compliance. </li> </ul> <p>REQUIREMENTS:</p> <ul> <li>Must      be a U.S. Citizen.  </li> <li>Candidates      must have an active Secret government security clearance.</li> <li>2      years of experience specifically supporting the administration of      government or contractor information technology systems under the      oversight of the DoD or the Intelligence Community.</li> </ul> <ul> <li>4 year degree in Information Technology, Cybersecurity, Computer Science or other related field</li> <li>Must      have experience with Windows/Linux based troubleshooting; understand where      to locate specific log files for forensics.</li> </ul> <ul> <li>Ability      to evaluate effectiveness, suitability, survivability, and      interoperability of systems, relating to cybersecurity and provide key      feedback to improve the overall cybersecurity posture. </li> <li>Ability      to research and develop solutions to emerging cyber threats.</li> <li>Proficient with      Microsoft Word, Microsoft Excel, OneDrive. </li> <li>Self-starter      with ability to work independently.</li> <li>Ability      to understand, explain, interpret, and apply rules, regulations,      directives, and procedures.</li> </ul> <p>PREFERRED EXPERIENCE, SKILLS, AND ABILITIES:</p> <ul> <li>An      active TOP SECRET clearance.</li> <li>A      CISSP (or CISSP Associate) certification, or an alternate qualifying      certification satisfying DoD 8570.01M requirements for an Information      Assurance Technician Level III or an Information Assurance Manager Level      II.</li> <li>Prior      successful experience as an ISSM.</li> <li>Prior      experience with NIST 800-171, NIST 800-53 (both DIACAP 8500.2 and Risk      Management Framework), and Continuous Monitoring and Risk Scoring (CMRS).</li> <li>A      college degree in computer science, info tech, info security, or a related      field.</li> <li>Experience      working with the ELK stack.</li> <li>Experience      with Azure, AWS, or similar cloud environments.</li> <li>Have      experience with VMware or other virtualization software.</li> <li>Python,      PHP, Perl, PowerShell, or Bash scripting experience.</li> <li>Experience      administering the system functions including security policies and account      management of Microsoft Windows and Server as well as Linux/Unix-based      systems.</li> <li>Incident      response and reporting experience.</li> </ul><p><strong>Benefits</strong></p><p>As a       small business, SciTec, Inc. offers room for growth and a     flexible,       fast-paced work environment. We work daily to develop     one-of-a-kind solutions for challenging national problems. SciTec     encourages collaboration across our offices in Boulder, El Segundo,     Dayton,       Huntsville, Virginia, and our headquarters in Princeton,     and provides access to opportunities across the corporate spectrum.     Initiative is expected and encouraged, all employees have the     opportunity and flexibility to broaden their technical horizons, and our     daily work makes an impact on the world around us.   SciTec  offers a    highly competitive salary and benefits package, including a  variety   of  benefits including health insurance, parental leave, vision,  life,   and  disability insurance, 401(k)plan with employer contribution,    holidays  and paid time off plans (including vacation and sick time), an    annual  profit-sharing plan, and an annual performance bonus plan.  The   salary  range for this position is $83,000 to $130,000; however,  SciTec  considers several factors when extending an offer of employment,   including but not limited to, the role and associated  responsibilities, a  candidate’s work experience, education/training,  and key skills. This  is not a  guarantee  of compensation. SciTec is  committed to hiring and  retaining a  diverse  workforce and is proud to  be an Equal  Opportunity/Affirmative  Action  employer.</p>

Boulder

Information Systems Security Manager (ISSM)

<p>SciTec, Inc. is a dynamic small business which delivers advanced sensor processing technologies and scientific instrumentation capabilities in support of national security and defense applications. We support customers throughout the Department of Defense and U.S. Government in building innovative new tools to deliver unique, world-class data exploitation capabilities.</p> <p>SciTec has an immediate opportunity for a talented Information Systems Security Manager (ISSM) in our Boulder, CO office. The ISSM will be responsible the accreditation and administration of a secure computing environment, both leading the implementation of technical security controls and spearheading coordination with accrediting and assessing agencies. The ISSM will need to work well in a team environment with a commitment to ensure security awareness and techniques are communicated effectively across the workforce. SciTec is searching for a candidate who will thrive in an environment where they are both expected to take the initiative to solve problems and empowered to see problems through to their conclusion.</p><p><strong>Requirements</strong></p><p>Duties:</p> <ul> <li>Ensure the day-to-day implementation, oversight, continuous monitoring, and maintenance of the security configuration, practices, and procedures for each information system </li> <li>Provide liaison support between the ISSM, system administrators, and system users</li> <li>Ensure that selected security controls are implemented and operating as intended during all phases of the information system lifecycle </li> <li>Ensure that system security documentation is developed, maintained, reviewed, and updated on a continuous basis </li> <li>Conduct required information system vulnerability scans according to risk assessment parameters. </li> <li>Develop Plan of Action and Milestones (POAMs) in response to reported security vulnerabilities </li> <li>Coordinate system owner concurrence for correction or mitigation actions </li> <li>Monitor security controls for information systems to maintain security Authorized to Operate (ATO) </li> <li>Upload all security control evidence to the Governance, Risk, and Compliance (GRC) application (eMASS) to support security control implementation during the monitoring phase </li> <li>Ensure that changes to an information system, its environment, and/or operational needs that may affect the authorization status are reported to the system owner and information system Security Manager (ISSM) </li> <li>Ensure the removal and retirement of information systems being decommissioned in coordination with the system owner and ISSM </li> <li>At least one year serving as an Information Systems Security Officer (ISSO) at a cleared facility. </li> <li>Familiarity with the use and operation of security tools including SCAP, OpenRMF, Tenable Nessus or similar applications. </li> </ul> <ul> <li>The      ISSO will apply broad technical, operational, and policy expertise in the      management of all aspects of operational Information System Security and      Computer Network Defense.</li> <li>Is      technical lead for the Risk Management Framework (RMF) package creation      and compliance </li> <li>Contribute      to Cybersecurity Maturity Model Certification (CMMC) efforts on the unclassified      network.</li> <li>Performs      other related duties and assignments as required.</li> </ul> <p>Requirements:</p> <ul> <li>Must      be a U.S. Citizen.  </li> <li>Must      have at least a high school diploma.</li> <li>Hold      an active Secret, or higher, US government security clearance.</li> </ul> <ul> <li>Have      at least two years of systems administration experience.</li> <li>Must      have experience with Windows/Linux based troubleshooting; understand where      to locate specific log files for forensics.</li> <li>Understanding      and practical application with one or more of DoD policies and directives,      NIST standards, RMF controls, JSIG, and/or CMMC</li> <li>Experience      with certifying compliance of various operating systems.</li> <li>Ability      to evaluate effectiveness, suitability, survivability and interoperability      of systems, relating to Cybersecurity and provide key feedback to improve      the overall Cybersecurity posture </li> <li>Ability      to research and develop solutions to emerging cyber threats.</li> <li>Proficient with      Microsoft Word, Microsoft Excel, OneDrive </li> <li>Self-starter      with ability to work independently</li> <li>Ability      to understand, explain, interpret, and apply rules, regulations,      directives, and procedures</li> <li>Have      a deep understanding of computer operating systems, hardware, and software      </li> </ul> <p>Preferred experience, skills, and abilities</p> <ul> <li>Have      an active Top Secret security clearance or recently active clearance      within 24 months</li> <li>Possess      a current DoD 8570 certification (Security+, CISSP, etc.)</li> <li>Four-year      degree in Information Technology, Cybersecurity, Computer Science or      related field</li> <li>Python,      PHP, Perl, PowerShell, or Bash scripting experience.</li> <li>Experience      working with the ELK stack.</li> <li>Experience      administering the system functions including security policies and account      management of Microsoft Windows and Server as well as Linux/Unix-based      systems.</li> <li>Have      experience with VMware or other virtualization software.</li> <li>Experience      with Azure, AWS, or similar cloud environments</li> <li>Have      experience working in or directly supporting the DoD or other U.S.      government entities</li> <li>Incident      handling experience </li> </ul><p><strong>Benefits</strong></p><p>As a small business, SciTec, Inc. offers room for growth and a flexible, fast-paced work environment. We work daily to develop one-of-a-kind solutions for challenging national problems. SciTec encourages collaboration across our offices in Boulder, El Segundo, Dayton, Huntsville, Virginia, and our headquarters in Princeton, and provides access to opportunities across the corporate spectrum. Initiative is expected and encouraged, all employees have the opportunity and flexibility to broaden their technical horizons, and our daily work makes an impact on the world around us. SciTec offers a highly competitive salary and benefits package, including a variety of benefits including health insurance, parental leave, vision, life, and disability insurance, 401(k)plan with employer contribution, holidays and paid time off plans (including vacation and sick time), an annual profit-sharing plan, and an annual performance bonus plan. The salary range for this position is $87,000 to $20,000; however, SciTec considers several factors when extending an offer of employment, including but not limited to, the role and associated responsibilities, a candidate’s work experience, education/training, and key skills. This is not a guarantee of compensation. SciTec is committed to hiring and retaining a diverse workforce and is proud to be an Equal Opportunity/Affirmative Action employer.</p>

Information System Security Officer (ISSO)

Hertility Health

<p>Hertility is a women’s health company built by women, for women. We’re shaping the future of reproductive healthcare by pioneering unique diagnostic testing that provides data-driven and advanced insights into reproductive health, fertility decline and the onset of menopause. We provide expert advice, education and access to care - all from the comfort of your home.</p> <p>31% of women will suffer from a reproductive health issue at some point and through our research, we aim to reduce the time to diagnosis through advanced at-home testing and specialist gynaecological care. We tailor pathways to the individual's reproductive goals, whether it be to explore their ovarian health and fertility options or overall hormonal health, such as confirming a PCOS diagnosis. Currently, we can diagnose 9 of the most common gynae pathologies which may lead to reduced fertility and signpost gynae cancers.</p> <p>Ultimately, our aim is to change attitudes around reproductive health, both for individuals and in the workplace, and to encourage women to be proactive by tracking their reproductive health. We’re calling this the Reproductive Revolution!</p><h3>The role</h3><p>It's a busy and exciting time for the brand and you will be a key part of developing the team, which will consist of ‘two squads’; a product team and a platform team, both of which will support Hertility's scalability.</p><p>As a Dev Sec Ops Engineer, you will work closely with software developers to scale the infrastructure and to make sure there is the right level of monitoring in place to achieve our observability goals as well as setting our SLAs. This will include:</p><ul> <li>Implementing changes to our infrastructure to make sure we have a high level of security.</li> <li>Reviewing security aspect of any changes made by developers to the infrastructure.</li> <li>Planning, presenting and undertaking changes to automation and building processes.</li> <li>Working with engineers to continue developing tooling and processes that enable faster dev and test cycles and greater developer and tester self sufficiency.</li> <li>responsible for making apps more scalable and reliable.</li> <li>Understanding the current infrastructure and suggest changes to it.</li> <li>Implementing best practices along with a disaster recovery plan, ensuring safety and resilience.</li> <li>Defining and documenting best practices and strategies regarding deployment and infrastructure maintenance.</li> <li>Migrating infrastructure with zero downtime to a highly available, scalable infrastructure.</li> <li>Setting up a monitoring stack.</li> </ul><p><strong>Requirements</strong></p><p>We are looking for an experienced yet ambitious Dev Sec Ops Engineers  to join our remote first engineering team, to work on the ongoing growth of our platform. </p><p>The ideal candidate will be able to come in and put their stamp on what we’re doing and how we do it. You'll be working in a collaborative, team-driven environment with autonomy.</p><p>You’ll be a good communicator; someone who can collaborate with multiple stakeholders across the business and provide feedback upwards.</p><h3>Tech stack</h3><ul> <li>Javascript/Typescript, Python, PHP (legacy)</li> <li>Containerisation with Docker</li> <li>Monitoring with Cloudwatch and Datadog </li> <li>Infrastructure as code with Terraform </li> <li>AWS ECS, Fargate, Cloudfront, RDS …</li> <li>Github / Github Actions</li> </ul><p><strong>Benefits</strong></p><p>We are a young, dynamic team revolutionising women’s health. As Dev Sec Ops Engineer, you will get a salary of between £60,000 - £80,000 + equity options as well as:</p> <ul> <li>33 days paid holiday allowance (including public holidays).</li> <li>Company laptop.</li> <li>Option to work from home, or in a shared office, or a combination of both.</li> <li>Flexible working hours - we trust that our team can manage their time and will get the job done.</li> <li>5% pension scheme matched by 4% employee contribution.</li> <li>Mental health support from an in-house counsellor.</li> <li>Free access to Hertility Health products and services, including free of charge hormone and fertility tests and discount codes for employee friends and family.</li> <li>Opportunities for further learning and development.</li> <li>Enhanced Family Leave policy (maternity leave / paternity leave/ adoption leave).</li> <li>Progressive health leave (menstruation and menopause policies.</li> </ul><h3>Equality &amp; Diversity:</h3> <p>Hertility Health is an equal opportunity employer that is committed to diversity and inclusion both within the workplace and throughout our application process. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.</p><p>We understand that applying for a new job takes a lot of work and we really value your time. We are really looking forward to reading your application.</p>

London

DevSecOps Engineer

Thumbtack

<p>A home is the biggest investment most people make, and yet, it doesn’t come with a manual. That's why we’re building the only app homeowners need to effortlessly manage their homes —  knowing what to do, when to do it, and who to hire. With Thumbtack, millions of people care for what matters most, and pros earn billions of dollars through our platform. And as one of the fastest-growing companies in a $500B industry — we must be doing something right. </p>
<p>We are driven by a common goal and the deep satisfaction that comes from knowing our work supports local economies, helps small businesses grow, and brings homeowners peace of mind. We’re seeking people who continually put our purpose first: advocating for pros and customers, embracing change, and choosing teamwork every day.</p>
<p>At Thumbtack, we're creating a new era of home care. If making an impact and the chance to do good inspires you, join us. Imagine what we’ll build together. </p>
<p><strong>Thumbtack by the Numbers</strong></p>
<ul>
<li>Available nationwide in all 3,143 U.S. counties</li>
<li>70 million projects started on Thumbtack</li>
<li>More than 4 million customers in the last 12 months</li>
<li>Pros earn billions on our platform</li>
<li>More than 8 million 5-star reviews for our stellar pros </li>
<li>1000+ employees and $3.2 billion valuation (June, 2021) </li>
</ul><h3><strong>About the Information Security Team</strong></h3>
<p>Our Information Security team is an internal cybersecurity consultation and audit team for whose mission is to safeguard the confidentiality, integrity, and availability of information systems, identity, and data assets by providing proactive security expertise, creating and maintaining a resilient and secure infrastructure, and fostering a culture of security awareness and compliance throughout Thumbtack. We oversee the development and execution of all cybersecurity programs.</p>
<h3><strong>About the Role</strong></h3>
<p>As an Information Security Manager, you are a guardian of data and cybersecurity. You can make quick and effective decisions for every information security situation that may arise within the organization. You can provide valuable recommendations to the team and mitigate security risks, thereby contributing to providing our employees, pros, and customers the utmost information security that they deserve.  </p>
<h3><strong>Responsibilities</strong></h3>
<ul>
<li>Lead a team of information security specialists, analysts, engineers</li>
<li>Monitor regional network, system, and tooling usage to ensure compliance with global security policies</li>
<li>Partner with IT Systems &amp; Network, IT Endpoint, and Platform Engineering to monitor, assess vulnerabilities, and develop and implement plans to improve our security posture</li>
<li>Perform penetration tests to find any flaws and create mitigation plans</li>
<li>Simulate security breaches and create disaster recovery plans</li>
<li>Seek to build in security during the development stages of SaaS/software, systems, networks, and cloud platforms and educate colleagues about security software and best practices for information security</li>
<li>Document any security breaches, assess their damage, and liaise with the concerned government agency if necessary</li>
</ul>
<h3><strong>Must-Have Qualifications </strong></h3>
<p><em>If you don't think you meet all of the criteria below but still are interested in the job, please apply. Nobody checks every box, and we're looking for someone excited to join the team.</em></p>
<ul>
<li>Bachelor’s Degree in Information Technology, Computer Science, Computer Engineering, or related fields</li>
<li>At least eight years of relevant work experience in application and information security, especially in the cloud computing environment </li>
<li>At least five years of experience in team management</li>
<li>Information security certification in CompTIA Security+ is highly preferred.</li>
<li>Working knowledge of different security technologies and concepts such as but not limited to VA/PT, SIM/SIEM, DLP gateway, and endpoints, IPS/IDS, WAF, CASB, Cloud security, IAM, Cyber Incident Response, Digital Forensics</li>
<li>Working knowledge of different IT domains – Network, Infrastructure, Systems Administration, Software Development, Database Administration, Change Management, Incident Management</li>
<li>Strong knowledge and experience in building control frameworks and can design and evaluate the effectiveness of controls in compliance with the United States IS requirements</li>
</ul>
<h3><strong>Nice-to-Have Qualifications</strong></h3>
<ul>
<li>Information Security Certifications such as CISM, CISA, CISSP, etc.</li>
<li>Programming knowledge (Golang, Python, PHP, UNIX shell scripting, etc)</li>
<li>Understanding of IT and information security principles and best practices (e.g., ITIL, ISO 27001)</li>
<li>PCI-DSS compliance experience and certification</li>
<li>Experience in the Growth Marketing domain</li>
</ul>
<p>Thumbtack is a virtual-first company, meaning you can live and work from any one of our approved locations across the United States, Ontario or the Philippines. When it is safe to gather, we will begin to host in-person events on a regular basis. Remote employees will be expected to travel occasionally for these events to a Thumbtack library or offsite team-building location. In cities with 5+ employees, we are establishing local communities, where employees can gather for local events. Additionally, employees in the San Francisco, Salt Lake City, Toronto and Manila areas will have opt-in access to communal workspace at one of our Thumbtack libraries. We always prioritize the health and safety of our employees. Currently, participation in these events and Thumbtack library use are optional. Both require employees to be fully vaccinated.</p>
<p>#LI-Remote</p> 
<strong>Benefits &amp; Perks</strong>
<ul>
<li>Virtual-first working model coupled with quarterly in-person events and Camp Thumbtack</li>
<li>20+ company-wide holidays including two week-long shutdowns</li>
<li>Libraries (collaborative workspaces) in San Francisco, Salt Lake City, Toronto, and Manila</li>
<li>Stipends for remote work support, home office set-up and internet</li>
<li>Subscriptions and Employee Assistance Program for mental health and well-being</li>
<li>Cell Phone Reimbursement, Thumbtack services (North America only)</li>
</ul>
<p>Thumbtack embraces diversity. We are proud to be an equal opportunity workplace and do not discriminate on the basis of sex, race, color, age, pregnancy, sexual orientation, gender identity or expression, religion, national origin, ancestry, citizenship, marital status, military or veteran status, genetic information, disability status, or any other characteristic protected by federal, provincial, state, or local law. We also will consider for employment qualified applicants with arrest and conviction records, consistent with applicable law. If you are a California resident, please review information regarding your rights under California privacy laws contained in Thumbtack’s Privacy policy available at <a href="https://www.thumbtack.com/privacy/" rel="noopener noreferrer nofollow ugc" target="_blank">https://www.thumbtack.com/privacy/</a>. </p>
<p>Thumbtack is committed to working with and providing reasonable accommodation to individuals with disabilities. If you would like to request a reasonable accommodation for a medical condition or disability during any part of the application process, please contact <a href="mailto:recruitingops@thumbtack.com" rel="noopener noreferrer nofollow ugc" target="_blank">recruitingops@thumbtack.com</a>. </p>
<h5>*Currently, Thumbtackers can live anywhere in Ontario or British Columbia, Canada or the Philippines or in any of the following US states: AZ, CA, CO, CT, FL, GA, HI, ID, IL, IN, KS, KY, MD, MA, MI, MN, MO, NE, NV, NH, NJ, NM, NY, NC, OH, OK, OR, PA, SC, TN, TX, UT, VA, WA, WI, Washington DC. Our long term vision is to hire across all of the United States and Canada, but this expansion will take a few years.</h5>

Ontario

Manager, Information Security

Coupa Software, Inc.

Coupa Software (NASDAQ: COUP), a leader in business spend management (BSM), has been certified as a “Great Place to Work” by the <a href="https://www.globenewswire.com/Tracker?data=0O5zL3oTPQJTsNbr8sHOiEL8oKWWKibqE3US99BoXESGeSxPvSUfT7M3eOwgQh5Ut0FCNzBZpkdJvqndtLLOAO4TbOI_yRN-u7JR7mQnCWyMuO-nj8AedpsXRqod8MlR" rel="noopener noreferrer nofollow ugc" target="_blank">Great Place to Work</a> organization. We deliver “Value as a Service” by helping our customers maximize their spend under management, achieve significant cost savings and drive profitability. Coupa provides a unified, cloud-based spend management platform that connects hundreds of organizations representing the Americas, EMEA, and APAC with millions of suppliers globally. The Coupa platform provides greater visibility into and control over how companies spend money. Customers – small, medium and large – have used the Coupa platform to bring billions of dollars in cumulative spend under management. Learn more at <a href="http://cts.businesswire.com/ct/CT?id=smartlink&amp;url=http%3A%2F%2Fwww.coupa.com&amp;esheet=51114752&amp;newsitemid=20150601006470&amp;lan=en-US&amp;anchor=www.coupa.com&amp;index=2&amp;md5=a987f008a6f03bd98fccc16218fcd14a" rel="noopener noreferrer nofollow ugc" target="_blank">www.coupa.com</a>. Read more on the <a href="http://cts.businesswire.com/ct/CT?id=smartlink&amp;url=http%3A%2F%2Fwww.coupa.com%2Fblog%2F&amp;esheet=51114752&amp;newsitemid=20150601006470&amp;lan=en-US&amp;anchor=Coupa+Blog&amp;index=3&amp;md5=eb22c8026e1b468cb5d98c71dc16baf3" rel="noopener noreferrer nofollow ugc" target="_blank">Coupa Blog</a> or follow <a href="http://cts.businesswire.com/ct/CT?id=smartlink&amp;url=https%3A%2F%2Ftwitter.com%2Fcoupa&amp;esheet=51114752&amp;newsitemid=20150601006470&amp;lan=en-US&amp;anchor=%40Coupa+on+Twitter&amp;index=4&amp;md5=a8a25a82b02e70c890f812b09eb87a15" rel="noopener noreferrer nofollow ugc" target="_blank">@Coupa on Twitter</a>.Do you want to work for Coupa Software, the world's leading provider of cloud-based spend management solutions? We’re a company that had a successful IPO in October 2016 (NASDAQ: COUP) to fuel our innovation and growth. At Coupa, we’re building a great company that is laser focused on three core values:1. Ensure Customer Success – Obsessive and unwavering commitment to making customers successful.2. Focus On Results – Relentless focus on delivering results through innovation and a bias for action.3. Strive For Excellence – Commitment to a collaborative environment infused with professionalism, integrity, passion, and accountability.We are looking for a Senior Security Operations Engineer to participate in protecting Coupa platforms and customers. This role will involve executing programs and tools to protect the Coupa Cloud for our growing customer base. This role will also act to provide detection and response in compliance with global laws and regulations. This is a hands-on role. We need people who are self-motivated, have a strong desire to learn, a can-do attitude, tenacity to solve problems, team players, and results focused. We have an unwavering zeal to make our Customers Successful.
<h3>Responsibilities:</h3>
<ul>
<li>Operate security tools and platforms associated with vulnerability management, detection, correlation, intrusion detection/prevention, etc. to detect and prevent harm to the Coupa platform and its users.</li><li>Act as an escalation point for security related events such as: incidents, vulnerabilities, and compliance related controls within Coupa’s cloud based production services and platform</li><li>Collaborate with technology teams to deliver shared security services</li><li>Monitor and analyze security data to maintain and exceed key performance indicators</li><li>Troubleshoot and document security incidents</li><li>Drive security programs to actively reduce operational risk across Coupa ecosystem</li><li>Conduct security risk assessments on behalf of internal and external customers providing consistent technical measurements of risk</li><li>Produce and present security reports for Coupa functional teams and leadership</li><li>Automate of security assessments and other security related SecOps tasks</li><li>Resolve security issues from assessments and other sources and deliver upon assigned security projects</li><li>Contribute to Coupa’s security strategy</li><li>Participate in Security Incident On-call rotation</li></ul>
<h3>Requirements:</h3>
<ul>
<li>5+ years of experience in an equivalent security related role</li><li>Strong experience in web application security eg (XSS, CSRF, SQL injection)</li><li>Familiarity with Cloud Computing and Software as a Service</li><li>Hands-on operational experience with security tools such as container security tools, threat intelligence, host/network intrusion detection tools, vulnerability scanners, file integrity monitoring, firewalls, antivirus, penetration testing tools, application security tools, and other relevant security platforms.</li><li>2+ years of experience with automation using Java, Perl, PHP, Python, Ruby or equivalent</li><li>2+ years hands on technical experience with major cloud platforms (Google, Azure, Amazon)</li><li>2+ years’ experience with Linux/Windows OS security including command line interface.</li><li>2+ years’ incident response experience</li><li>Strong communication skills; both written and oral</li><li>Ability to work in a team environment</li><li>Offensive security experience desired</li><li>Previous infrastructure as code, infrastructure operations, database administration or application development experience a plus</li></ul>At Coupa, we have a strong and innovative team dedicated to improving the spend management processes of today’s dynamic businesses. It’s our people who make it happen, and we strive to attract and retain the best in every discipline.We take care of our employees every way we can, with competitive compensation packages, as well as restricted stock units, an Employee Stock Purchase Program (ESPP), comprehensive health benefits for employees and their families, a 401(k) match, a flexible work environment, no limit vacations for exempt employees, non-exempt employees are on an accrual basis for PTO, catered lunches…And much more!As part of our dedication to the diversity of our workforce, Coupa is committed to Equal Employment Opportunity without regard for race, ethnicity, gender, protected veteran status, disability, sexual orientation, gender identity or religion.Please be advised, inquiries or resumes from recruiters will not be accepted.

San Mateo

Senior Security Engineer

Apply to PHP Cyber Security Jobs in companies remotely and near you. New PHP Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Information Systems Security Manager (ISSM) at SciTec	Full Time Manager DOD Windows AWS
Information System Security Officer (ISSO) at SciTec	Full Time Manager DOD Windows AWS
DevSecOps Engineer at Hertility Health	Remote Full Time Devsecops Javascript Automation
Manager, Information Security at Thumbtack	Remote Full Time CISM Comptia Audit
Senior Security Engineer at Coupa Software, Inc.	Full Time Incident Response Application Security Windows Automation

PHP Cyber Security Jobs

0 PHP Cyber Security Jobs. Page 1 of 1

5 closed php cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

PHP Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

PHP Cyber Security Jobs

0 PHP Cyber Security Jobs. Page 1 of 1

5 closed php cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

PHP Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter