Coalfire

About CoalfireCoalfire is on a mission to make the world a safer place by solving our clients’ toughest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Denver, Colorado with offices across the U.S. and U.K., and we support clients around the world.  But that’s not who we are – that’s just what we do. We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.   And we’re growing fast. We’re looking for a Senior Consultant - AWS to support our Pen Testing team.Position SummaryThe Consultant works closely with other Delivery team members on engagements, assessing the security and compliance of various types of client applications and supporting infrastructure against regulatory and industry requirements and standards, as well as security best practice frameworks.  The Consultant is a technically proficient individual contributor with broad and deep technical skills, meeting the objectives of their engagements, collaborating with clients, mentoring teammates, and providing subject matter expertise across one or more technical domains. The Consultant is a trusted advisor to clients, and through objective testing and results reporting, supports the client in making well-informed, risk-based decisions to improve overall security posture.    Consultants continue to deepen their skills and broaden their impact both internal to Coalfire, as well as the Security Community as a whole. As a member of the Threat and Vulnerability Management AWS Team, you will be responsible for architecture review, roles and access review, driving the methodology and execution of offensive penetration testing activities.
<h3>What You'll Do </h3>
<ul>
<li>As a member of the Application Security (AppSec) AWS Team, you will be responsible for architecture review, roles and access review, driving the methodology and execution of offensive penetration testing activities. These duties include:</li><li>Provide guidance to teammates and clients by advising on security and configuration best-practices, defense-in-depth, and secure SDLC. </li><li>Communicate with client stakeholders to include leadership, systems and network administrators, security engineers, development, and support teams.</li><li>Enhance and maintain cloud service provider technical testing methodologies and standards.</li><li>Lead and support penetration testing projects through their entirety, i.e. scoping through out-brief</li><li>Participate in internal and external security trainings and conferences</li></ul>
<h3>What You'll Bring</h3>
<ul>
<li>Proven track record of success managing client engagements.</li><li>Professional-level AWS certifications (SAP/DEP), or AWS Specialty certifications with supporting professional experience.</li><li>Minimum of 2 years of real-world experience with AWS application architectures including:</li><li>Deep, progressive experience with AWS security concepts, including IAM, STS, and AWS specific security controls and security architecture design patterns.</li><li>Experience with serverless design concepts and supporting services including S3, SQS, SNS, CloudFront, DynamoDB, Lambda and, API Gateway.</li><li>Knowledge of advanced/niche AWS services, including Cognito, IoT Core, or SageMaker are a major plus.</li><li>Familiarity with DevOps engineering concepts, infrastructure automation, pipelines, version control, and deployment strategies are also a plus.</li><li>Proficiency with a variety of programming languages JavaScript, Java, Python, Go etc. </li><li>An ability to validate that an environment meets security objectives through offensive security techniques, including:</li><li>Experience with web application and API penetration testing methods and tools</li><li>Experience with XSS, CSRF, IDOR, AuthN/AuthZ, and Confused Deputy attacks</li><li>Practical knowledge of cryptographic concepts</li><li>Organized and capable of providing formal documentation</li><li>Flourishes in cooperative work environments</li><li>Excellent communication and client-facing skills</li><li>Self-motivated and takes initiative to enhance or improve processes, procedures, and solutions.</li><li>Mentor teammates less familiar with AWS services and architectures</li></ul>
<h3>Bonus Points</h3>
<ul>
<li>AWS Certified Solutions Architect – Professional, AWS Certified Security, AWS Certified Advanced Networking, AWS Certified SysOps Administrator</li><li>AWAE, OSCP, OSCE, OSEE certifications</li><li>Network, Database, System administration experience and certifications</li></ul>Why You'll Want to Join UsAt Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively –whether you’re at home or an office. Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like flexible time off, certification and training reimbursement, and comprehensive insurance options.  At Coalfire, equal opportunity and pay equity is integral to the way we do business. A reasonable estimate of the compensation range for this role is $125,000 to $160,000 based on national salary averages. The actual salary offer to the successful candidate will be based on job-related education, geographic location, training, licensure and certifications and other factors. You may also be eligible to participate in annual incentive, commission, and/or recognition programs #LI-TP1 #LI-Remote

Denver

Security Senior Consultant Penetration Testing, AWS Specialist | Remote US

Netskope

<strong>About Netskope</strong>
<p>Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security. </p>

<p>Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, Bangalore, London, Melbourne, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork. From catered lunches and office celebrations to employee recognition events (pre and hopefully post-Covid) and social professional groups such as the Awesome Women of Netskope (AWON), we strive to keep work fun, supportive and interactive. Visit us at <a href="https://www.netskope.com/company/careers" rel="noopener noreferrer nofollow ugc" target="_blank">Netskope Careers.</a> Please follow us on <a href="https://www.linkedin.com/company/netskope" rel="noopener noreferrer nofollow ugc" target="_blank">LinkedIn</a> and Twitter<a href="https://twitter.com/netskope" rel="noopener noreferrer nofollow ugc" target="_blank">@Netskope</a>.</p>
<p><strong>About the role</strong></p>
<p>Want to help organizations adapt to SAAS applications without the fear of security threats?Do you like solving complex associations across SAAS apps and derive threats out of them?</p>
<p>Within Netskope Engineering, the IaaS team is responsible for building cloud-scale SAAS Security Posture Management (SSPM) that gives enterprises visibility of the compliance for their SAAS apps like O365, Zoom, Github, workday.</p>
<p>We are currently looking for talented engineers across all levels to join our distributed team. In this particular role, you will develop and innovate the components of SSPM that interact with public cloud and SaaS platforms.</p>
<p><strong>What you’ll be doing</strong></p>
<ul>
<li>Collaborate with product management and research teams to understand the public cloud security requirements of our customers.</li>
<li>Work with Technical architects and principal engineers to steer technical challenges into buildable modules.</li>
<li>You’ll be a key contributor on greenfield projects related to visibility, compliance and remediation for public cloud security.</li>
<li>Design, review and implement scalable applications for integration with cloud platforms and services.</li>
<li>Design and implement scalable services processing 1000s of events and API calls per second.</li>
<li>Continually improve the testing and observability for our SSPM platform.</li>
</ul>

<p><strong>What we will offer</strong></p>
<p>As a member of the IaaS team, you will have the opportunity to:</p>
<ul>
<li>Develop innovative solutions to protect the exponentially increasing amount of enterprise data and workloads being deployed in the public cloud</li>
<li>Innovate and build new product offerings in greenfield projects.</li>
<li>Own and deliver projects independently.</li>
<li>Work on the latest cloud technologies, and cloud services like Splunk, ServiceNow etc.</li>
<li>Become a public cloud SME both at the integration and architectural level.</li>
</ul>
<p><strong>Preferred Qualifications</strong></p>
<p>BS (MS Preferred) - Computer Science or Information Security.</p>
<p><strong>Required Technical Skills</strong></p>
<ul>
<li>8-10 years of experience in software development.</li>
<li>Proficient in at least one programming language (Go, Python, Java etc.).</li>
<li>Experience of using distributed frameworks like Celery, queuing systems.</li>
<li>Experience in database design and implementation (MySQL, Mongo, Clickhouse, NoSQL). </li>
<li>Understanding of containers and orchestration (e.g. Kubernetes, Docker).</li>
<li>Experience in creating and maintaining CI for agile development (Drone, Github, Makefiles, etc.).</li>
</ul>
<p><strong>Desired Technical Skills</strong></p>
<ul>
<li>Proven experience in leading projects and holding an SME role for public cloud technology.</li>
<li>Demonstrated experience in grooming and mentoring engineers.</li>
<li>Experience in using public cloud or SaaS API in production-quality code.</li>
<li>Experience with cloud provisioning using terraform, cloud formation template, etc.</li>
<li>Experience with backend interprocess communication (Kafka, SQS, gRPC etc)</li>
<li>Contribution to open-source projects and communities.</li>
</ul>
<p> <strong>Additional Skills</strong></p>
<ul>
<li>Excellent written and verbal communication.</li>
<li>Ability to work in a geo-distributed cross-functional group.</li>
</ul>
<p>#LI-MN1</p><p>Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer to <a href="https://www.netskope.com/privacy-policy" rel="noopener noreferrer nofollow ugc" target="_blank">Netskope's Privacy Policy</a> for more details.</p>

Canada

Staff Engineer, API Security Connectors

Amazon.com

Job summaryAmazon Search is one of the world’s largest product search engines, with millions of global customers executing billions of daily queries. As Amazon Search provides a core customer experience, we prioritize resiliency, security, and operational readiness to ensure a stable, secure, and highly available service. The Amazon Search organization has multiple global teams responsible for development and production operations, capacity planning, quality engineering, and service resiliency. We seek a seasoned Privacy &amp; Information Security Technical Project Manager to lead our Search-wide security and privacy initiatives and programs. As a member of the center of engineering and operational excellence for Amazon Search, you will drive security tooling and best practices across service teams, ensure that we meet Amazon-wide security and privacy standards, and manage security and privacy org-wide campaigns.Amazon Search extensively leverages Amazon Web Services (AWS) cloud infrastructure, including Dynamo DB, S3, EC2, SQS, ECS, and services written in Python, Scala, Java and C++. If you are passionate about privacy and information security for large-scale distributed systems in the cloud, we would love to hear from you.Key job responsibilities<ul><li>Manage Search Security and Privacy programs; act as a single point of contact for Search within the Amazon Consumer organization.</li><li>Partner with the global Amazon InfoSec community to drive Search interests and requirements; act as a single point of contact for Amazon InfoSec mandates and initiatives.</li><li>Drive initiatives to comply with Amazon data encryption standards for all Search Services.</li><li>Partner with service teams to identify and certify their applications against Amazon Security and Privacy standards.</li><li>Partner with service teams to drive implementation of Amazon security and privacy initiatives and programs.</li><li>Dive into details of issues, provide design input for the systems, and drive the execution of decisions that impact products, systems, and the team.</li><li>Seek diverse perspectives from our teams of technical experts to drive bottom-up innovation to improve operational excellence and service resilience.</li></ul><h3>Basic Qualifications</h3><ul><li>5+ years of technical program management experience</li><li>7+ years of experience working directly with engineering teams</li><li>Experience managing projects across cross functional teams, building sustainable processes and coordinating release schedules</li></ul><ul><li>Exceptional verbal and written communication skills and proven ability to lead and drive org-wide meetings effectively.</li><li>Excellent understanding of distributed and decentralized data processing systems.</li><li>Excellent understanding of computer networking, network security, internet protocols, TLS/SSL, basic encryption standards, and firewalls.</li><li>Expertise in data privacy, security compliance, and distributed systems’ security.</li><li>6+ years of relevant hands-on technical project/program management experience in a large-scale production Linux/UNIX environment. Experience driving projects/programs across teams, organizations, and continents.</li><li>6+ years as a software engineer or system engineer for an internet company.</li><li>6+ years of experience with Linux, Apache, DNS, monitoring, load-balancing, and caching.</li><li>2+ years experience with AWS infrastructure and tooling.</li></ul><h3>Preferred Qualifications</h3><ul><li>Masters in Computer Science or equivalent experience.</li><li>Expertise in several areas: Python, Java, C++, Unix/Linux use, and internals</li><li>Expertise in operations of highly available and scalable internet systems with large customer bases.</li><li>Strong analytical, problem-solving, and organizational skills with a solid track record of excellent delivery skills.</li><li>Detail-oriented – capable of technical deep-dives, understanding of networking, operating systems, and storage in depth.</li><li>Experience managing projects in a matrix style across multiple sites and timezones.</li></ul>Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.

Palo Alto

Search Privacy &amp; Information Security TPM, Search Operational Readiness Team

Apply to SQS Cyber Security Jobs in companies remotely and near you. New SQS Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Security Senior Consultant Penetration Testing, AWS Specialist \| Remote US at Coalfire	Api Gateway Application Security Automation AWS Cloudfront
Staff Engineer, API Security Connectors at Netskope	Agile Docker Golang IAAS JAVA
Search Privacy & Information Security TPM, Search Operational Readiness Team at Amazon.com	AWS C DNS EC2 Encryption

SQS Cyber Security Jobs

0 SQS Cyber Security Jobs. Page 1 of 1

3 closed sqs cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

SQS Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

SQS Cyber Security Jobs

0 SQS Cyber Security Jobs. Page 1 of 1

3 closed sqs cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

SQS Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter