Ninja Van

Ninja Van is a late-stage logtech startup that is disrupting a massive industry with innovation and cutting edge technology. Launched 2014 in Singapore, we have grown rapidly to become one of Southeast Asia's largest and fastest-growing express logistics companies. Since our inception, we’ve delivered to 100 million different customers across the region with added predictability, flexibility and convenience. Join us in our mission to connect shippers and shoppers across Southeast Asia to a world of new possibilities. More about us: - We process 250 million API requests and 3TB of data every day.- We deliver more than 1.5 million parcels every day.- 100% network coverage with 1000+ hubs and stations in 6 SEA markets (Singapore, Malaysia, Indonesia, Thailand, Vietnam and Philippines), reaching 500 million consumers.- 600,000 active shippers in all e-commerce segments, from the largest marketplaces to the individual social commerce sellers.- Raised more than US$500 million over five rounds.We are looking for world-class talent to join our crack team of engineers, product managers and designers. We want people who are passionate about creating software that makes a difference to the world. We like people who are brimming with ideas and who take initiative rather than wait to be told what to do. We prize team-first mentality, personal responsibility and tenacity to solve hard problems and meet deadlines. As part of a small and lean team, you will have a very direct impact on the success of the company. You need to have knowledge in securing inhouse developed products by performing Web Application, Mobile and API security testing with knowledge of OWASP Top 10 vulnerabilities.As a team member, you will work with engineering teams to build secure products. Being part of our team, you will manage a portfolio of Web Application’s, Mobile Application Security and API’s Security. There would also be knowledge sharing sessions by attending various security conferences, trainings and internal hackathons.
<h3>Role and Responsibilities </h3>
<ul>
<li> Work individually or as a part of team conducting manual code reviews, static vulnerability scanning, vulnerability validations and false positive analysis                                                                         </li><li> Enhance existing application security tools and introduce new tools where applicable                                                                                 </li><li> Perform Application Security assessment and sometimes manual code reviews of web applications, web services, mobile, front-end &amp; back-end services                     </li><li>Work closely with software engineers from the various development teams to build a secure architecture and coding standard across the organization                             </li><li>Communicate technical and business risk of the vulnerabilities discovered including remediation recommendations      </li><li>Work with internal teams to support them in remediation efforts</li><li>Keep abreast with latest technology risks and utilize them in work                                                                            </li><li>Contribute to the information security strategy and rollout of the strategy</li></ul>
<h3>Requirements</h3>
<ul>
<li>Degree in Computer Science and Engineering </li><li>Experience in Application Security and Code Reviews with sufficient security background (5+ years in Security and 2+ years in software development)</li><li>Experience with penetration testing tools and tool suites such as Burp Suite Pro, OWASP Zap, Postman, Kali Linux, SQLMap, Nessus, etc.</li><li>Experience in web application security, mobile security, API security with knowledge of application vulnerabilities and business logic flaws and threats</li><li>Programming language skills such as Java, ReactJs,NodeJs Javascript (nice to have).</li><li>Experience in security risk assessment and threat modeling of applications</li><li>Familiarity with Google, Kubernetes, Docker, and Terraform</li><li>Excellent language skills and ability communicate complex vulnerabilities to internal teams</li><li>Well versed with OWASP Code Review Guide</li><li>Ability to triage results from automated code scanning tools for false positives and false negatives</li><li>Certifications such as GPEN, GXPN, GMOB, GWAPT, OSWE, OSCP, OSCE, OSWP,CNCF, AWS (Preferred) </li></ul>Submit a job applicationBy applying to the job, you acknowledge that you have read, understood and agreed to our Privacy Policy Notice (the “Notice”) and consent to the collection, use and/or disclosure of your personal data by Ninja Logistics Pte Ltd (the “Company”) for the purposes set out in the Notice. In the event that your job application or personal data was received from any third party pursuant to the purposes set out in the Notice, you warrant that such third party has been duly authorised by you to disclose your personal data to us for the purposes set out in the the Notice.

Singapore

Application Security Analyst

Postman

<p><strong>tldr</strong>; <em>We are looking for a lead security analyst who has experience driving major assurance initiatives such as SOC2, ISO 27001, NIST, PCI-DSS, GDPR, and/or CCPA.</em></p>
<h3>Who Are We?</h3>
<p>Postman is the world’s leading collaboration platform for API development. Our app simplifies each step of the API building process and streamlines collaboration. More than 17 million developers and 500,000 organizations worldwide currently use Postman. We recently raised our <a href="https://techcrunch.com/2021/08/18/api-platform-postman-valued-at-5-6-billion-in-225-million-fundraise/" rel="noopener noreferrer nofollow ugc" target="_blank">Series-D</a> at a $5.6 billion valuation.</p>
<p><a href="https://blog.postman.com/timeline-postman-journey-to-api-platform/" rel="noopener noreferrer nofollow ugc" target="_blank">Here's a timeline of Postman’s journey in becoming an API Platform. </a></p>
<h3>The Team.</h3>
<p>The team is responsible for handling all aspects of information security, governance, risk, and compliance. We are looking for a lead to join us who will be responsible for developing, maintaining, and maturing our GRC programs and aligning our frameworks to the company's strategic vision and goals. </p>
<p>The team is focused on working with and managing various regulations and compliance programs such as: SOC2, ISO 27001, NIST, PCI-DSS, GDPR, and CCPA. We operate as an internal consulting resource for Postman, advocating for security and risk management processes.</p>
<h3>How We Operate.</h3>
<p>Since we are a globally distributed team, we measure outcomes, not hours. We operate from a deep sense of our <a href="https://www.postman.com/company/about-postman/" rel="noopener noreferrer nofollow ugc" target="_blank">values</a>, and strive to build the best products for the entire developer community.</p>
<h3>What You'll Do.</h3>
<ul>
<li>Contribute to the development, management, and ongoing improvement of the company InfoSec program, compliance initiatives, risk management, privacy, and overall security assurance.</li>
<li>Conduct periodic reviews and audits of internal policies, controls and processes, with published reports outlining successes and opportunities for improvement.</li>
<li>Partner with business and engineering leaders to identify risks and propose mitigation strategies.</li>
<li>Coordinate and manage compliance audit activities with external auditors and internal control owners to ensure timely and successful completion of audit requirements.</li>
<li>Collaborate with security teams to ensure our IT environment meets our security requirements.</li>
<li>Evaluate and contribute to the implementation of technology to streamline and automate manual controls.</li>
<li>Monitor the vendor due diligence process including coordinating with Security, Legal, and stakeholders to assess vendor security controls.</li>
</ul>
<h3>About You.</h3>
<ul>
<li>7+ years of hands-on experience in cyber risk, governance, and compliance.</li>
<li>Ability to identify gaps, create mitigation plans, and work with control owners to implement changes.</li>
<li>Experience managing or maturing GRC programs, preferably within a high-growth Cloud/SaaS environment.</li>
<li>Passionate and creative in the use of technology to streamline and automate manual processes .</li>
<li>Experience with—and enthusiasm for—working with global, distributed teams.</li>
<li>Open and outgoing personality with the ability to build relationships across departments and cultures.</li>
</ul>
<h3>Benefits</h3>
<p>We offer competitive salaries and benefits, and a flexible schedule working with a fun, collaborative team. Enjoy full medical coverage, unlimited PTO, and a monthly lunch stipend. (Yes, seriously. We want you to eat well wherever you’re at.) Plus, our wellness program will help you stay healthy from your location with fitness-related reimbursements. Our frequent and fascinating virtual team-building events will keep you connected, while our donation-matching program can support the causes you care about. We’re building a long-term company with an inclusive culture where everyone can be the best version of themselves, and we want you to be part of it. Join us, why dontcha?</p>
<p>#LI-REMOTE</p>

United States

Lead Security Analyst, Risk &amp; Compliance

EvaBssi

<p>Your role is to participate in network &amp; security projects for our customers.</p> <p>As part of this role, you will be involved in subsequent projects or tasks for other customers within our consulting practice:</p><ul> <li>Network and security audits</li> <li>Provide network design, solution deployment, and technical documentation for network and security-related equipment such as LAN, WAN, Firewall, Load Balancer, etc.</li> <li>Request / Change management: Conduct security assessment for infrastructure request &amp; changes</li> <li>Translates business requirements into technical designs that ensure availability, stability, scalability, security and ensure the solutions comply with the CLIENT's standard</li> <li>Support and Documentation of customers infrastructure</li> </ul><h3>Responsibilities</h3><ul> <li> <strong>Manage Network &amp; Security projects </strong>(Design, build, planification, integration, support) </li> <li> <strong>Communicate and present</strong> IT projects to higher management (meeting, presentation, documentation, reporting) </li> <li> <strong>Manage IT partners</strong> activities on behalf of our customers such as Service Providers, vendors and manufacturers if needed </li> <li><strong>Participate in daily network &amp; security operations</strong></li> <li> <strong>Document</strong> network and security infrastructure evolutions (technical diagram, design document, action plan, test plan etc.)</li> </ul><p><strong>Requirements</strong></p><ul> <li>       3-5 years’ experience in a fast-paced environment performing audit, design, installation, maintenance, troubleshooting</li> <li>       Able to organize time, multitask, and define priorities (autonomy)</li> <li> <strong>Rigorous and attention to details</strong> </li> <li>       Proficiency in managing Cisco, Checkpoint, Palo Alto and Fortinet firewalls</li> <li>       Excellent verbal and written communication skills</li> <li>       Cisco CCNA/CCNP certification or equivalent network level</li> <li>       Strong desire to improve your skills &amp; knowledge</li> <li>       Ability to scope &amp; plan projects</li> <li>       Experience in managing and deploying Security/Firewall technologies</li> <li>       Knowledge of business practices and a proven track of exceeding customer expectations</li> <li>       Operations experience and ITIL processes background desired</li> <li>       Great interpersonal skills</li> <li>       Self-driven, Execute with minimal direction</li> <li><strong>Bilingual is a plus</strong></li> </ul><h3>Technologies extract</h3><ul> <li>Network Routing/Switching (Cisco, Meraki, Juniper, Dell)</li> <li>LAN / MAN / WAN (MPLS, BGP, OSPF, STP, VRRP, routing OSPF/BGP)</li> <li>Next Gen Firewalls: Palo Alto, Fortinet, Panorama/Forti manager/Forti analyzer</li> <li>Security technologies: Bastion / MFA </li> <li>Cloud infrastructure: Azure, AWS</li> <li>Automation: REST, API, AXL, Python scripting, Postman, Ansible</li> <li>Monitoring: Centreon, Solarwinds</li> </ul><p><strong>Benefits</strong></p><ul> <li>Health Insurance</li> <li>Performance bonus</li> <li>3 weeks of vacations</li> </ul>

Montreal

Network and Security Engineer

<h3>Who Are We?</h3>
<p>Postman is the world’s leading collaboration platform for API development. Our app simplifies each step of the API building process and streamlines collaboration. More than 17 million developers and 500,000 organizations worldwide currently use Postman. We recently raised our <a href="https://techcrunch.com/2021/08/18/api-platform-postman-valued-at-5-6-billion-in-225-million-fundraise/" rel="noopener noreferrer nofollow ugc" target="_blank">Series-D</a> at a $5.6 billion valuation.</p>
<p><a href="https://blog.postman.com/timeline-postman-journey-to-api-platform/" rel="noopener noreferrer nofollow ugc" target="_blank">Here's a timeline of Postman’s journey in becoming an API Platform. </a></p>
<h3>The Team.</h3>
<p>Postman is looking for a Detection &amp; Response Engineer to maintain and strengthen our organization's approach to cloud security and endpoint detection. If identifying threats and adversaries using logs and security telemetry brings a smile to your face, if threat hunting exercises and building alerts to stay ahead of attackers gets your makes you smile, if you are up for the challenge to manage security incidents and drive enterprise-wide efforts for containment and response, you might want to consider joining us!</p>
<h3>How We Operate.</h3>
<p>Since we are a globally distributed team, we measure outcomes, not hours. We operate from a deep sense of our <a href="https://www.postman.com/company/about-postman/" rel="noopener noreferrer nofollow ugc" target="_blank">values</a>, and strive to build the best products for the entire developer community.</p>
<h3>What You'll Do.</h3>
<ul>
<li>You will work with our IT, infrastructure, and feature teams to identify new detection opportunities and build out the signal collection to support it.</li>
<li>You will determine the best solutions for monitoring, processing, and alerting on security-based signals.</li>
<li>You will form repeatable processes for prioritizing and responding to alerts and developing playbooks.</li>
<li>You will mature our capabilities to proactively identify security threats and develop detections.</li>
<li>You will participate in response to incidents to drive containment and remediation to keep Postman secure.</li>
</ul>
<h3>About You.</h3>
<ul>
<li>You like crafting repeatable processes, but when you have to do something more than a few times, you automate it!</li>
<li>You like rapidly prioritizing work based on business needs and assessing risks.</li>
<li>You like working in a flexible environment where you can wear many hats.</li>
<li>You have at least 2+ years of demonstrated ability with one or more of the following; security detection engineering, incident response, security analytics, threat hunting</li>
<li>You have a proven understanding of code and can whip up Python to automate your needs.</li>
<li>You have an understanding of the current threat landscape and building detection and response capabilities in SaaS-oriented corp IT environments.</li>
<li>You have experience working with incident response in cloud environments such as AWS, GCP or Azure.</li>
</ul>
<h3>Benefits</h3>
<p>We offer competitive salaries and benefits, and a flexible schedule working with a fun, collaborative team. Enjoy full medical coverage, unlimited PTO, and a monthly lunch stipend. (Yes, seriously. We want you to eat well wherever you’re at.) Plus, our wellness program will help you stay healthy from your location with fitness-related reimbursements. Our frequent and fascinating virtual team-building events will keep you connected, while our donation-matching program can support the causes you care about. We’re building a long-term company with an inclusive culture where everyone can be the best version of themselves, and we want you to be part of it. Join us, why dontcha?</p>
<p>#LI-REMOTE</p>

Security Engineer, Detection &amp; Response Engineer

Optiv

At Optiv, we’re on a mission to help our clients make their businesses more secure. We’re one of the fastest-growing companies in a truly essential industry. Join us.Senior Research Analysts within the Innovation team are responsible for working with the VP of Research &amp; Development to execute the defined innovation strategy for Optiv’s market-facing offerings. This involves maintaining and furthering subject matter expertise on the DevSecOps/DevOps market segment within cyber security. Analysts facilitate the innovation process by objective analysis of technologies, proof-of-concept development, research publication, and community engagement.  
<h3>How you'll make an impact:</h3>
<ul>
<li>Perform research and development for technologies Optiv has prioritized.   </li><li>Provide quarterly recurring publications on trends within the DevSecOps space.   </li><li>Rapidly prototype solutions with Optiv’s technology partners in a lab environment.   </li><li>Contribute to the development of technology-enabled services to support Optiv offerings.   </li><li>Work with key partners to develop technology-enabled offerings with unique value in a market segment.   </li><li>Provide market expertise to internal stakeholders, clients, and prospective clients.  </li></ul>
<h3>What you will do in this role:</h3>
<ul>
<li>Security Market Research   </li><li>Track existing and emerging security products and technologies in the DevSecOps space  </li><li>Conduct objective technology reviews   </li><li>Provide subject matter expertise on security products and technologies   </li><li>Build relationships with product managers at key partner organizations   </li><li>Write reports explaining and positioning technologies   </li><li>Contribute to Optiv’s knowledge base   </li><li>Solutions Development    </li><li>Work in a collaborative manner across Optiv departments assisting in the development of problem, project, and program-level solutions   </li><li>Create, document, and conduct use cases  </li><li>Build and demonstrate systems integration proof of concepts in lab environments  </li><li>Perform peer reviews and assist in solutions development   </li><li>Propose defensible recommendations for product improvements   </li><li>Assist in maintaining the lab   </li><li>Define project scopes and estimate levels of effort   </li><li>Track project activities and provide status updates  </li><li>Manage the project timeline, stakeholder expectations, and deliverables  </li><li>Ensure projects are completed on schedule and within budget  </li>#LI-SM1</ul>
<h3>Qualifications for success:</h3>
<ul>
<li>Bachelor's Degree required; degree with a concentration in computer science, information systems, information security or related areas preferred </li><li>5+ years of practical experience within one or more of the following areas: </li><li>Building infrastructure using Terraform and other declarative languages  </li><li>Deploying applications in AWS, Azure, or GCP  </li><li>REST APIs, Postman, and API tooling  </li><li>Deployment orchestration, automation, and configuration management  </li><li>CI/CD tools such as Gitlab, GitHub, or Jenkins  </li><li>Scripting languages such as Python and PowerShell  </li><li>Building dashboards with analytic platforms such as Jupyter, ELK stack, or Splunk  </li><li>Excellent research, analytical, writing, and verbal communication skills.  </li><li>Ability to identify how changing technological trends will impact security architecture choices.   </li><li>Ability to accurately gather, analyze and interpret data, identify, and define problems, and make recommendations for resolution.  </li><li>Experience as a security team lead or a product manager is a plus.  </li><li>Previous exposure as an industry thought-leader, analyst, consultant, or author is a plus.  </li></ul>With Optiv you can expect:• A company committed to championing Diversity, Equality, and Inclusion through our Affinity groups including, Black Employee Network, Disabled Employee Network, Latino Employee Network, Optiv Pride (LGBTQIA+), Veterans Support Network, and Women's Network.• Work/life balance. We offer “Recharge” a flexible, time-off program that encourages eligible employees to take the time they need to recharge • Professional training resources, including tuition reimbursement• Creative problem-solving and the ability to tackle unique, complex projects• Volunteer Opportunities. “Optiv Chips In” encourages employees to volunteer and engage with their teams and communities. • The ability and technology necessary to productively work remote/from home (where applicable)If you are seeking a culture that supports growth, fosters success, and moves the industry forward, find your place at Optiv! As a market-leading provider of cyber security solutions, Optiv has the most comprehensive ecosystem of security products and partners to deliver unparalleled services. Our rich and successful history with our clients is based on trust, serving more than 12,000 clients of varying sizes and industries, including commercial, government, and education. We have the proven expertise to plan, build, and run successful security programs across Risk Management, Cyber Digital Transformation, Threat Management, Security Operations - Managed Services, and Identity and Data Management.Optiv is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, status as an individual with a disability, veteran status, or any other basis protected by federal, state, or local law.

Austin

Senior Research Analyst - DevSecOps/DevOps - Remote | USA

Apply to Postman Cyber Security Jobs in companies remotely and near you. New Postman Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Application Security Analyst at Ninja Van	Application Security AWS Burp Suite Docker GPEN
Lead Security Analyst, Risk & Compliance at Postman	Audits CCPA GDPR Golangvernance Iso 27001
Network and Security Engineer at EvaBssi	Audits Automation AWS Azure Firewall
Security Engineer, Detection & Response Engineer at Postman	Analytics AWS Azure GCP Incident Response
Senior Research Analyst - DevSecOps/DevOps - Remote \| USA at Optiv	Automation AWS Azure Devops Devsecops

Postman Cyber Security Jobs

0 Postman Cyber Security Jobs. Page 1 of 1

5 closed postman cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Postman Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Postman Cyber Security Jobs

0 Postman Cyber Security Jobs. Page 1 of 1

5 closed postman cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Postman Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter