Zopa

Our Story Hello there. We’re Zopa. We began our journey in 2005 with the drive to deliver customer-first financial products. Fast forward to 2020, we shifted gears and became a digital bank, leveraging our customer knowledge, money expertise and technical agility to forge ahead. Our diverse team is united by a mission to create simple, fair and honest financial products that have the customers’ needs at their heart.  We’re regularly recognised at industry awards for our game-changing products and are proud to be one of the market leaders in consumer lending in the UK. But our work doesn’t stop there.   After securing £220 million in our 2021 funding round led by SoftBank, we’ve entered the next stage in our journey. So far, we’ve lent out over £6 billion and made money work better for over half a million people across the UK who were looking to borrow or save with us. In less than 2 years after becoming a bank, we hit £1 billion in customer deposits and we’re also a top 5 credit card issuer in the UK. And this is just the beginning. We’re set on achieving big things with ambitious growth targets to match. This means there's a range of opportunities for you to excel and develop through a career at Zopa, while building better banking products that truly matter to our customers.     If you embrace unconventional challenges, are unafraid to think differently and are driven to make an outsized impact, you’ll thrive here at Zopa. For a closer look at our culture, check out <a href="https://www.youtube.com/watch?v=e5ek2PQ-DhE" rel="noopener noreferrer nofollow ugc" target="_blank">our latest video here</a>. And if you want to join us, have a look at <a href="https://www.zopa.com/about/careers" rel="noopener noreferrer nofollow ugc" target="_blank">our current open roles</a>!What's the challenge? The ZRE Security team are part of Zopa Reliability Engineering (ZRE) and are responsible for ensuring our Platform &amp; Infrastructure is secure, and meets the controls required in a regulated environment. As a Cloud Security Engineer, you will be an owner for ZRE security work, whilst helping ZRE to maintain a strong security posture. This includes proactively aligning our platform/infrastructure with our InfoSec policies and standards, whilst defining work for remediation and improvement. You will be a champion for Security both within the ZRE team and in the wider business, helping to encourage a security mindset in everything we do. All the while automating consistently and helping to design and support the technology infrastructure to help Zopa grow.
<h3>Responsibilities:</h3>
<ul>
<li>Work with our Infosec team to triage and define security work coming into ZRE</li><li>Define remediation plans for security issues</li><li>Define our AWS Account security baseline, including management of common Security controls using Organisations</li><li>Contribute a security perspective to design discussions for new projects within ZRE, and the wider business</li><li>Automate to improve response to security issues and reduce toil</li><li>Use Threat Modelling to identify vulnerabilities and attack vectors across our infrastructure</li></ul>
<h3>About you:</h3>
<ul>
<li>In-depth knowledge of AWS (Organisations, IAM, VPC Networking, KMS, GuardDuty, CloudTrail, Config)</li><li>Experience using Infrastructure as Code (e.g., Terraform)</li><li>Strong knowledge of Containers and Orchestration (Kubernetes, Docker)</li><li>Experience with Linux administration, hardening and troubleshooting</li><li>Operational experience with HashiCorp Vault (ACL management, auth methods, secret engines)</li><li>A passion for Information Security, with experience applying this to Cloud Operations</li><li>A well-rounded understanding of foundational security concepts including best practices and how to apply them. Such as, Threat Modelling, OWASP Top 10 &amp; common vulnerabilities, PKI, TLS</li><li>Comfortable with scripting languages e.g. Bash, Python, PowerShell</li><li>Functional understanding of Networking &amp; common protocols</li></ul>
<h3>Nice to have:</h3>
<ul>
<li>Experience working in an FCA regulated organisation, ideally within the financial sector</li><li>Exposure to Active Directory</li><li>Hands-on experience with Networking e.g., CCNA or experience with physical networks</li></ul>#LI-MW1Flexible working? Yes please!Whether you want to come into our open-plan, riverside London Bridge office or work from the comfort of your own home (or both!), you’ll be able to decide on an approach with your manager, looking at what works best for you, your role and your team.Not only that – you'll also have the option of working from abroad for up to 90 days a year!* But no matter where you are, we’ll make sure you’ve got everything you need to thrive, both in your work and home life, from day one. *Subject to having the right to work in the country of choiceTo thrive here, you’ll need to: Champion our customers. Whatever your role, you’ll be close to our customers. We care passionately about doing the best for them.  Help us make fearless choices. Our environment is fast-paced, agile and open. You’ll solve interesting and challenging problems, and be trusted and empowered to bring your ideas to life. Walk the talk. Like us, you’ll be honest, stick to your promises and face the tough moments head-on. Win smarter. You’ll be always on the lookout for a better way of doing things, going beyond ‘good enough’ and welcoming different points of view. Be in it together. You’ll join an ambitious, diverse and all-round approachable team with a mix of ideas and talents who inspire each other to be better every day.  Zopa is proud to offer a workplace free from discrimination. Diversity of experience, perspectives, and backgrounds leads to great products and unique company culture. We simply can’t expect to empower our customers to better manage their money without challenging the current status quo. Creating the best place for money is no easy task, which is why we need talent from all walks of life.

London

Cloud Security Engineer

Fivesky

Are you combatting security threats in a global environment? Are you a visionary in the cyber security space, taking the lead on complex projects? Do you challenge, prototype, and present your findings to Stakeholders? If so then you might be Fivesky’s next Senior Application Security Architect.
 Who you are:
<ul>
<li>6+ years of application, data, or infrastructure and automation security with at least the last 5 years of architecting security solutions and leading a practice.</li>
<li>Worked with one, or more, of the major Cloud Platforms (AWS, Azure, GCP).</li>
<li>General oversight of security projects from initiation to closure.</li>
<li>Worked with Unix, AWS DB, and Appliances.</li>
<li>Ability to fully utilize Spring Boot (and/or) React developement stack.</li>
<li>Performed Pen Testing/Hardening.</li>
<li>Create processes, develop and design plans and manage security team execution.</li>
<li>Experience assessing if the current security protocols at an enterprise level are fit for purpose.</li>
<li>Work closely with stakeholders and present documentation and security solutions </li>
<li>Can speak to developers and poke holes in their rationale for their design, and develop frameworks and push automation</li>
<li>Bachelor’s in Information Technology, Computer Science, or a related discipline</li>
</ul>
What you’ve done:
<ul>
<li>Act as an SME when it involves AppSec, InfoSec, or Infrastructure security around Cloud, designing and architecting solutions for your organization</li>
<li>Collaborate with other teams involved in architecture design </li>
<li>Identify potential risks of projects, document and address those risks and work with other teams to resolve the issue</li>
</ul>
What you will do:
<ul>
<li>Work with design, testing, and integration of security controls within an Enterprise environment</li>
<li>Provide hands-on direction with application security assignments</li>
<li>Assessing current security processes and offering recommendations to all levels within the organization up to the C Suite</li>
<li>Performing thorough documentation of the development and implementation of processes</li>
<li>Utilize your broad knowledge within security disciplines such as: secure network design, entitlement design, database access, authentication methods, logging, input validation, security testing, encryption implementation, secure storage design, and data transfer</li>
</ul>
Do your interests include any of the following?
<ul>
<li>K8s and Cloud Foundry</li>
<li>Dependency / Package management using Spring Boot</li>
<li>Linux, Java, Python, React, Angular development skills</li>
<li>Strong Jenkins, Spinnaker, and/or Terraform</li>
<li>PKI</li>
<li>Network security technologies</li>
<li>Crypto</li>
<li>SDN</li>
<li>CloudFormation</li>
<li>Ansible</li>
<li>Data Analytics</li>
</ul>
At Fivesky, our employees are our greatest asset and the focal point around which we operate; therefore, we always want the best for our employees. In addition to offering competitive compensation plans and long-term career opportunities, we offer an attractive mix of benefit plans to our employees that include provisions for vacation, holiday pay, and sick days.
Fivesky is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, genetic information, or any other characteristic protected by law.
This is a full-time, direct employment opportunity in McLean, VA. Salary is open based on experience and qualifications.
FS-RID-0412

Mclean

Senior Application Security Architect

IntelyCare

Security Engineer Are you looking to make an impact at a fast-scaling health-tech company that has grown annual revenue by more than 850% since 2020?  At IntelyCare, purpose matters! Our AI technology empowers healthcare heroes to transform the way they work.  Through our smart and easy-to-use mobile app and platform, our pool of over 30,000 nursing professionals get the pay, freedom, and flexibility they deserve while our partnered facilities‌ get ‌access‌ ‌to‌ ‌nursing‌ ‌resources‌ ‌when‌ ‌they‌ ‌need‌ ‌them.‌ ‌All‌ ‌of‌ ‌which‌ ‌leads‌ ‌to‌ ‌the‌ ‌ultimate‌ ‌goal‌ ‌-‌ ‌better‌ ‌care‌ ‌for‌ ‌patients.‌ ‌ Some of our recent accolades include: ·       Reached “Unicorn Status” with a $<a href="http://1.1b/" rel="noopener noreferrer nofollow ugc" target="_blank">1.1B</a> valuation after securing $115 million in Series C funding·       2022 Boston Business Journal Fast 50·       2021 Comparably Best Companies for Career Growth·       2021 Comparably Best Places to Work in Boston·       2021 Comparably Best Leadership Team·       2020 Inc 5000·       2020 Deloitte Technology Fast 500 ‌‌We are driven by wonder, we care about each other, we take big swings, and most importantly, we believe that together we thrive!  Sound interesting? Read on…  SUMMARYSeeking a highly skilled Network/Security Engineer who thrives on supporting diverse environments while delivering superb customer service. This position will include designing, planning, and provisioning new environments, supporting existing environments, capacity planning and handling escalations. This individual will apply proven communication, analytical and problem-solving skills to help identify, communicate, and resolve issues to maximize the benefit of internal systems investments. They will also be involved in a variety of other projects including assisting with routing, switching, firewall, anti-virus, web/spam filtering, MSSP as well as threat remediation and security compliance. What You’ll Do:·       Analyze connectivity requests to ensure compliance with NIST, SOC2, Mass 201 CMR 17, PCI, CIS Benchmark standards and compliance framework guidelines·       Vulnerability assessment and remediation·       Security patching·       Encryption Key Management·       Privileged account management·       Account attestation Who You Are:·       Bachelor's degree. An additional 4 years of networking/security experience can be accepted in lieu of a degree·       Extensive knowledge on various firewall platforms e.g. Meraki, Fortinet·       Comprehensive knowledge of IP networking and network security including encryption, IP-Sec, PKI, SSL Certificates, Site to Site VPN tunnels·       Expanded Security Skillset – LogRhythm, Spam and web Filtering, Crowd strike, Qualys·       Problem Solving - must be able to provide technical solutions to a wide range of complex difficult problems·       Self-Motivator possessing a high sense of urgency and high level of integrity·       Proficient understanding and experience using configuration management and/or diagnostic tools, monitoring applications and performance tools is a plus·       CISSP, CCNA/CCNP-Security or other industry related certifications is a plus·       Familiar with industry standard security best practices (PCI, SOX, HIPAA) is a plus·       Experience with Disaster recovery and Business Continuity planning and implementation is a plus  Some of Our Many Perks·       Monthly health and wellness stipend·       Task Human App with 24/7 wellness coaches·       Complimentary beverages, snacks and lunches catered twice a week·       Summer Fridays·       Competitive PTO·       12 paid company holidays·       Commuter benefits·       Benefits Hub discount platform·       Opportunities‌‌ for‌‌ training and mentorship‌‌ We are an equal opportunity employer and value diversity at our company. We do not discriminate based of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. IntelyCare requires all on-site employees to be fully vaccinated.

Quincy

Security Engineer

PointClickCare

For more than 20 years, PointClickCare has been the backbone of senior care. We’ve amassed the richest senior care dataset making our market density untouchable and our connections to the healthcare ecosystem exponentially more powerful than those of any other platform. With Collective Medical &amp; Audacious Inquiry, we’ve become the most expansive, full-continuum care collaboration network, offering care teams immediate, point-of-care access to deep, real-time insights at every stage of a patient’s journey.For more information on PointClickCare, please connect with us on <a href="http://www.glassdoor.ca/Overview/Working-at-PointClickCare-EI_IE452666.11,25.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Glassdoor</a> and <a href="https://www.linkedin.com/company/50625?trk=tyah&amp;trkInfo=tarId%3A1406914835274%2Ctas%3Apointclickcare%2Cidx%3A2-1-4" rel="noopener noreferrer nofollow ugc" target="_blank">LinkedIn</a>.We are looking for a talented, experienced Lead Cloud Security Engineer who will play a fundamental role and be part of a team that designs, protects, and manages security services for PointClickCare’s cloud infrastructure, supporting both corporate cloud solutions and PointClickCare product offerings delivered via the cloud as Software as a Service (SaaS) platform. The successful candidate should think of infrastructure as code and actively identify, design, and develop and implement security configurations and compliance as code solutions.    The Lead Cloud Security Engineer will have a proven track record developing and implementing security tools, technologies, and process integrations for cloud-based architectures., and significant prior experience working closely with product and DevOps Engineers and/or SRE’s on security requirements. Experience with DevOps environments and Azure &amp; AWS security controls is a strong plus. 
<h3>Responsibilities</h3>
<ul>
<li>Implement, develop, engineer and tune cloud security solutions including cloud native and third-party security solutions, such as data loss prevention (DLP), digital rights management (DRM), identity management, endpoint protection, SIEM and other security solutions.</li><li>Participate in projects and work with the Project team to support ongoing activities and project deliverables.</li><li>Stay abreast of emerging technologies, cloud security best practices, frameworks, and threats to proactively assess and evaluate secure solutions, to address threats, and potential vulnerabilities.</li><li>Participate in developing security standards and best practices appropriate for PointClickCare and recommend security enhancements to Security team leadership.</li><li>Participate in proof of concepts and other technical evaluations of technologies, designs and solutions and provide recommendations.</li><li>Development and maintenance of KPIs, KRIs, and SLAs</li><li>Act as an expert in cyber security incident resolution and analysis as needed.</li></ul>
<h3>Qualifications </h3>
<ul>
<li>Extensive experience as Cloud Engineer or Cloud Admin engineering, tuning, cloud security controls  </li><li>Extensive experience with Cloud, virtualization, container, docker, Kubernetes (AWS, GCP or Azure)</li><li>Experience working with Python, PowerShell, Ruby, Bash, RegEx, JSON, Query DSL, Kusto Query Language (KQL) or other automation, plus Terraform, Ansible</li><li>Good understanding of Azure or AWS infrastructure components: server, storage, network, data, and applications (IAAS/PAAS/SAAS)</li><li>Experience with of Automation frameworks, DevSecOps best practices, etc.</li><li>Strong Unix/Linux experience with familiarity with Windows/Linux administration and hardening guidelines</li><li>Bachelor's Degree in Computer/Software Engineering, or the equivalent combination of training, education, and experience.</li><li>Strong understanding of Threat Modeling including Threat Detection &amp; Prevention</li><li>Must demonstrate the ability to interact professionally with a diverse group of stakeholders including subject matter experts and strong analytical and problem-solving skills are required for this role.</li><li>Ability to quickly learn and develop expertise in highly complex existing applications and architectures. Attitude to thrive in a high-production, customer-oriented environment.</li><li>Ability to contribute to multiple projects / demands simultaneously. Strong team player. Strong documentation skills and keen attention to detail. </li><li>Excellent communication skills </li></ul>
<h3>Preferred Qualifications </h3>
<ul>
<li>Certification: Azure Security Engineer Associate or AWS Certified Security - Specialty </li><li>Strong knowledge of MITRE ATT&amp;CK framework</li><li>One or more of the following Security certifications: GIAC, CISSP, CISM, CISA, CEH.</li><li>Knowledge of relevant security and privacy legislation as NIST, PHIPA, PIPEDA, HIPAA</li><li>Significant experience with multiple technical tools including: DLP (Data Loss Prevention), Anti-Virus,  EDR (Endpoint Detection Response),  MDM (Mobile Device Management), IDS, cloud security access broker, Virtual Network security, DDOS protections, DNS, etc.</li><li>Detailed proficiency with Linux (or similar) operating systems;</li><li>In depth understanding of TCP/UDP/ICMP/IP protocols;</li><li>Experience with PKI, SSL, SSH, HTTPS, etc;</li><li>Understanding of software development domain and principles, including design patterns, code structure, programming languages, continuous integration (Git), continuous deployment (Jenkins), and deployment orchestration</li><li>Detailed understanding of Virtual Network Technologies Routers, switches, Load Balancers, firewalls, proxy, etc. </li><li>Understanding of AWS services including: GuardDuty, Inspector, Detective, Security Hub, Macie, Shield, CloudTrail, ACM, SSM</li></ul>It is the policy of PointClickCare to ensure equal employment opportunity without discrimination or harassment on the basis of race, religion, national origin, status, age, sex, sexual orientation, gender identity or expression, marital or domestic/civil partnership status, disability, veteran status, genetic information, or any other basis protected by law. PointClickCare welcomes and encourages applications from people with disabilities. Accommodations are available upon request for candidates taking part in all aspects of the selection process. Please contact recruitment@pointclickcare.com should you require any accommodations.When you apply for a position, your information is processed and stored with Lever, in accordance with <a href="https://www.lever.co/privacy-policy" rel="noopener noreferrer nofollow ugc" target="_blank">Lever’s Privacy Policy</a>. We use this information to evaluate your candidacy for the posted position. We also store this information, and may use it in relation to future positions to which you apply, or which we believe may be relevant to you given your background. When we have no ongoing legitimate business need to process your information, we will either delete or anonymize it.  If you have any questions about how PointClickCare uses or processes your information, or if you would like to ask to access, correct, or delete your information, please contact PointClickCare’s human resources team: <a href="mailto:recruitment@pointclickcare.com" rel="noopener noreferrer nofollow ugc" target="_blank">recruitment@pointclickcare.com</a> PointClickCare is committed to Information Security. By applying to this position, if hired, you commit to following our information security policies and procedures and making every effort to secure confidential and/or sensitive information.

United States

Lead Cloud Security Engineer

Zwift

Seniority Level: Mid-Senior
Location: Remote (select US States)
About the role and about You:
At Zwift IT, we are constantly improving our security practice and enforcing our security policy. Currently, we are looking for a senior IT security engineer who will have strong domain expertise in enterprise security architecture, endpoint security protection, networking security, and risk assessment and analysis. This is a unique opportunity to work with an innovative team in a business-critical discipline.
Successful corporate Information Security Engineers at Zwift are self-starters, able to work autonomously, natural problem solvers, collaborative, and comfortable navigating ambiguity. You should have strong problem-solving skills, excellent interpersonal skills, a deep technical understanding of corporate information security infrastructure, and endpoints threats, strong scripting and automation skills, and the desire to be an individual contributor to securing Zwift enterprises, services, and endp
What you’ll do:
<ul>
<li>Develops and implements security technologies, standards, processes, policies, and guidelines for the enterprise</li>
<li>Understands the trade-offs required to manage the different levels of risk tolerance and risk exposure across the organization and balance this with risk investments</li>
<li>Coordinates with other groups to assess, implement, and monitor IT-related security risks/hazards</li>
<li>Responsible for the day-to-day operations of technical security including, but not limited to, IPS/IDS, Vulnerability Scanning &amp; Management, Patch Management, Encryption, Content Filtering, email hygiene, DLP, Identity &amp; Access Management/SSO, and secure file sharing.</li>
<li>Ensures Identity and Access reviews are performed periodically and follows through on findings and remediation's</li>
<li>Follow standards in accordance with company policies and regulations (ISO 27001, PCI, SOX, etc.)</li>
<li>Prepare and present Security test findings to stakeholders.</li>
</ul>
What you'll have: 
<ul>
<li>Bachelor’s degree in Computer Science, Information Systems, or related technical field</li>
<li>5+ years of working experience in Information Security Domains</li>
<li>Experience in planning and executing IT Security initiatives end to end</li>
<li>Solid understanding of information security standards &amp; practices</li>
<li>Experience with security products from a variety of vendors (firewalls, intrusion detection systems, vulnerability scanners, multi-factor/strong authentication technologies, RADIUS/TACACS+ servers, logging, penetration testing software, etc.)</li>
<li>Experience with a variety of security technologies and concepts (DMZ architectures, cryptography, forensics techniques, PKI, digital certificates/signatures, hashing/ciphers, IPsec, wireless technologies, URL filtering, etc.)</li>
<li>Experience with endpoint security solutions including anti-virus, DLP, encryption, and malware remediation techniques.</li>
<li>Experience analyzing and applying information security, risk management, and privacy practices</li>
<li>Solid understanding of IT processes including security, incident management, configuration management, change management, release management, problem management, business continuity, and disaster recovery</li>
<li>Expert knowledge and experience in a broad range of security controls and risk management frameworks (NIST, ISO 2700x, PCI)</li>
<li>Excellent communication, verbal, and writing skills.</li>
</ul>
Bonus points:
<ul>
<li>Comfortable in an AWS environment</li>
<li>Technical Leadership capability with project and time management skills</li>
<li>CISSP, CCSP, or other Cyber Security related certifications</li>
<li>Ability to train security/audit concepts</li>
</ul>
How to stand out among the rest:
Your resume/CV is enough to show off your skills, accomplishments, and experience. However, if you choose to include a cover letter introducing us to your awesome personality, we will read that too.
Values:
Of course, we are nothing without our values. Our values ground us. They ensure we run and build a company where people love to work, feel like they are welcomed, included, and belong.  Only then can they thrive and do their best work.  The values we strive to live every day are:
<ul>
<li>Make It Fun</li>
<li>Elevate Teammates</li>
<li>Cultivate Our Community</li>
<li>Always Level Up</li>
<li>One Zwift for All</li>
</ul>
We strongly believe that different backgrounds and ideas are a competitive advantage; we hire candidates of any race, color, ancestry, religion, sex, national origin, sexual orientation, gender identity, age, marital or family status, disability, Veteran status, and any other status. Zwift is proud to be an Equal Opportunity Employer. If you have a disability or special need that requires accommodation, please let us know by emailing careers@zwift.com. 
Zwift, Inc. is an Equal Opportunity Employer.
Transparency in Coverage: 
Health plan price transparency is designed to help consumers know the cost of covered items or healthcare-related services prior to the date upon which they receive care. Transparency in Coverage (TIC) regulations require health insurers and group health plans to create machine readable files (MRFs) that contain the negotiated rates for in-network providers and allowed amounts derived from historical claims for out-of-network providers and make those files publicly available.
Here is the <a href="https://healthy.kaiserpermanente.org/front-door/machine-readable" rel="noopener noreferrer nofollow ugc" target="_blank">link</a> to the site on which Kaiser Permanente posts its in-network and out-of-network allowed amount machine-readable files (MRFs).
Here is the <a href="https://www.anthem.com/ca/machine-readable-file/search" rel="noopener noreferrer nofollow ugc" target="_blank">link</a> to the site on which Anthem posts  its in-network and out-of-network allowed amount machine-readable files (MRFs). The link will allow you to search for your files using your Employer Identification Number (81-2798595)

Sr. Information Security Engineer

Apply to PKI Cyber Security Jobs in companies remotely and near you. New PKI Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Cloud Security Engineer at Zopa	Full Time Manager Active Directory Agile AWS
Senior Application Security Architect at Fivesky	Full Time Application Security Analytics Ansible Automation
Security Engineer at IntelyCare	Full Time C Cissp Compliance Encryption
Lead Cloud Security Engineer at PointClickCare	Ansible Automation AWS Azure BASH
Sr. Information Security Engineer at Zwift	Automation AWS CCSP Cissp Cryptography

PKI Cyber Security Jobs

0 PKI Cyber Security Jobs. Page 1 of 1

5 closed pki cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

PKI Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

PKI Cyber Security Jobs

0 PKI Cyber Security Jobs. Page 1 of 1

5 closed pki cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

PKI Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter