Carta

<h3>The Company You’ll Join</h3>
At Carta we create owners and make private markets liquid. 
We live in a world where some people live on the equity stack and enjoy exponential wealth growth and preferential tax treatment; others live on the debt stack and may work their entire lives for a company and retire only with the cash they’ve managed to save from their paychecks. Our contribution to solving the wealth inequality problem is moving people from the debt stack (payroll) to the equity stack. By making it as easy to issue equity to employees as it is to put them on payroll, we can create more owners. 
At Carta, we are helpful, transparent, fair, and kind. We are relentless executors, unconventional thinkers, and masters of our craft. 
Learn more about our Series G fundraising round <a href="https://henrysward.medium.com/carta-series-g-3a3702f69b11" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>. <h3>The Team You’ll Work With</h3>
This role is on the Security Operations team within the Security Engineering Organization. You will gather logs &amp; telemetry from many sources, identify risks, create automations to boost efficiency, as well as investigate and remediate threats. To complete this mission, we need people who are passionate about detection, response, automation, and monitoring - willing to go the extra mile to find the needle in the haystack.  We believe in creating teams not rockstars, progress not immediate perfection, and fostering a creative environment for research. We measure success not by how many bugs you find or tasks you complete, but by how much risk you reduce in the organization and how you work to improve the security of those around you. 
We get to work in an environment that uses infrastructure-as-code, Kubernetes, role-based access, and with engineers who care about the integrity and security of our data.
<h3>The Problems You’ll Solve</h3>
Some of the problems you’ll help us solve are: 
<ol>
<li>How do we enable automated security practices (vulnerability management, detection &amp; response, etc.) without interrupting business processes?</li>
<li>How do we maintain situational awareness across multiple cloud infrastructures, corporate environments, and data sensitivity levels, all in a growing environment?</li>
<li>How do we incorporate threat intelligence into proactive defense in an automated and reliable fashion?</li>
<li>How do we preserve a high level of customer privacy while also establishing an effective response posture?</li>
</ol>
<h3>The Impact You’ll Have</h3>
When things go bump in the night (or during the day!), you’ll be there to help guide the business to a safer path. You’ll help craft the next generation of Carta’s security operations programs, working with our team to help secure the future of our business. Your work will span across technologies, stacks, and languages, and you’ll help ensure a safe and secure workplace for all Cartans. 
<h3>About You</h3>
<ul>
<li>Demonstrate strong knowledge and experience with cloud-based services and infrastructure (Google Cloud, GSuite, AWS, Okta) and automation tools around these services (Terraform, GAM).</li>
<li>Strong understanding of attack models (such as MITRE’s ATT&amp;CK framework), and experience applying them in defense of enterprise environments.</li>
<li>Hands-on experience with effective incident response and containment practices</li>
<li>5-8 years of hands-on experience.</li>
<li>Demonstrate knowledge of security operations topics (detection &amp; response, identity and access, auditing and alerting, automation and orchestration, and threat hunting) and experience developing logic to automate those practices.</li>
<li>Experience working with engineering teams to ensure that all critical logs/signals are available for analysis.</li>
<li>Experience working with normalizing and correlating data across a wide variety of sources.</li>
<li>Able to build automation that accelerates response and reduces time to remediate for security incidents.</li>
<li>Identify gaps in security visibility and work with engineering teams to gather the necessary data.</li>
<li>Excellent writing skills, able to target your communications to the audience, whether technical or not.</li>
<li>Experience with the following:</li>
<ul>
<li>Administering and maintaining SIEM solution (SnowFlake, DataDog, Splunk, etc)</li>
<li>Developing security automation in python, or working with a SOAR platform.</li>
<li>Establishing, maintaining logging pipelines and parsing logs.</li>
<li>Creating monitoring alerts and detections.</li>
<li>Implementing endpoint state attestation tooling.</li>
</ul>
</ul>
**Role can be based in NYC, SF, Seattle, Santa Clara, or RemoteCovid Vaccine Policy
In an effort to safeguard the health of our employees, Carta has implemented a policy requiring all new hires to receive the COVID vaccine (including boosters as the individuals become eligible for them). Proof of vaccination will be required as a condition of employment. Carta will continue to comply with applicable laws regarding the reasonable accommodation of individuals with disabilities and/or strongly held religious beliefs. This policy is part of Carta’s ongoing efforts to ensure the safety and well-being of our staff and community, and to support public health efforts.
<h5>We are an equal opportunity employer and are committed to providing a positive interview experience for every candidate. If accommodations due to a disability or medical condition are needed, connect with us via email at <a href="mailto:recruiting@carta.com" rel="noopener noreferrer nofollow ugc" target="_blank">recruiting@carta.com</a>. As a company, we value fairness, helpfulness, transparency, leadership and build our teams around these values. Check out our <a href="https://carta.com/careers/" rel="noopener noreferrer nofollow ugc" target="_blank">careers page</a> to get to know us better as you think about your next step at Carta.</h5>

Seattle

San Francisco

Santa Clara

New York

United States

Senior Security Operations Engineer

Zopa

Our Story Hello there. We’re Zopa. We began our journey in 2005 with the drive to deliver customer-first financial products. Fast forward to 2020, we shifted gears and became a digital bank, leveraging our customer knowledge, money expertise and technical agility to forge ahead. Our diverse team is united by a mission to create simple, fair and honest financial products that have the customers’ needs at their heart.  We’re regularly recognised at industry awards for our game-changing products and are proud to be one of the market leaders in consumer lending in the UK. But our work doesn’t stop there.   After securing £220 million in our 2021 funding round led by SoftBank, we’ve entered the next stage in our journey. So far, we’ve lent out over £6 billion and made money work better for over half a million people across the UK who were looking to borrow or save with us. In less than 2 years after becoming a bank, we hit £1 billion in customer deposits and we’re also a top 5 credit card issuer in the UK. And this is just the beginning. We’re set on achieving big things with ambitious growth targets to match. This means there's a range of opportunities for you to excel and develop through a career at Zopa, while building better banking products that truly matter to our customers.     If you embrace unconventional challenges, are unafraid to think differently and are driven to make an outsized impact, you’ll thrive here at Zopa. For a closer look at our culture, check out <a href="https://www.youtube.com/watch?v=e5ek2PQ-DhE" rel="noopener noreferrer nofollow ugc" target="_blank">our latest video here</a>. And if you want to join us, have a look at <a href="https://www.zopa.com/about/careers" rel="noopener noreferrer nofollow ugc" target="_blank">our current open roles</a>!What's the challenge? The ZRE Security team are part of Zopa Reliability Engineering (ZRE) and are responsible for ensuring our Platform &amp; Infrastructure is secure, and meets the controls required in a regulated environment. As a Cloud Security Engineer, you will be an owner for ZRE security work, whilst helping ZRE to maintain a strong security posture. This includes proactively aligning our platform/infrastructure with our InfoSec policies and standards, whilst defining work for remediation and improvement. You will be a champion for Security both within the ZRE team and in the wider business, helping to encourage a security mindset in everything we do. All the while automating consistently and helping to design and support the technology infrastructure to help Zopa grow.
<h3>Responsibilities:</h3>
<ul>
<li>Work with our Infosec team to triage and define security work coming into ZRE</li><li>Define remediation plans for security issues</li><li>Define our AWS Account security baseline, including management of common Security controls using Organisations</li><li>Contribute a security perspective to design discussions for new projects within ZRE, and the wider business</li><li>Automate to improve response to security issues and reduce toil</li><li>Use Threat Modelling to identify vulnerabilities and attack vectors across our infrastructure</li></ul>
<h3>About you:</h3>
<ul>
<li>In-depth knowledge of AWS (Organisations, IAM, VPC Networking, KMS, GuardDuty, CloudTrail, Config)</li><li>Experience using Infrastructure as Code (e.g., Terraform)</li><li>Strong knowledge of Containers and Orchestration (Kubernetes, Docker)</li><li>Experience with Linux administration, hardening and troubleshooting</li><li>Operational experience with HashiCorp Vault (ACL management, auth methods, secret engines)</li><li>A passion for Information Security, with experience applying this to Cloud Operations</li><li>A well-rounded understanding of foundational security concepts including best practices and how to apply them. Such as, Threat Modelling, OWASP Top 10 &amp; common vulnerabilities, PKI, TLS</li><li>Comfortable with scripting languages e.g. Bash, Python, PowerShell</li><li>Functional understanding of Networking &amp; common protocols</li></ul>
<h3>Nice to have:</h3>
<ul>
<li>Experience working in an FCA regulated organisation, ideally within the financial sector</li><li>Exposure to Active Directory</li><li>Hands-on experience with Networking e.g., CCNA or experience with physical networks</li></ul>#LI-MW1Flexible working? Yes please!Whether you want to come into our open-plan, riverside London Bridge office or work from the comfort of your own home (or both!), you’ll be able to decide on an approach with your manager, looking at what works best for you, your role and your team.Not only that – you'll also have the option of working from abroad for up to 90 days a year!* But no matter where you are, we’ll make sure you’ve got everything you need to thrive, both in your work and home life, from day one. *Subject to having the right to work in the country of choiceTo thrive here, you’ll need to: Champion our customers. Whatever your role, you’ll be close to our customers. We care passionately about doing the best for them.  Help us make fearless choices. Our environment is fast-paced, agile and open. You’ll solve interesting and challenging problems, and be trusted and empowered to bring your ideas to life. Walk the talk. Like us, you’ll be honest, stick to your promises and face the tough moments head-on. Win smarter. You’ll be always on the lookout for a better way of doing things, going beyond ‘good enough’ and welcoming different points of view. Be in it together. You’ll join an ambitious, diverse and all-round approachable team with a mix of ideas and talents who inspire each other to be better every day.  Zopa is proud to offer a workplace free from discrimination. Diversity of experience, perspectives, and backgrounds leads to great products and unique company culture. We simply can’t expect to empower our customers to better manage their money without challenging the current status quo. Creating the best place for money is no easy task, which is why we need talent from all walks of life.

London

Cloud Security Engineer

OakNorth

Small and medium-size enterprises (SME) are one of the biggest drivers of growth and innovation in economies all over the world. Despite these companies being a powerful force in the economy, many SMEs find it difficult to raise capital during critical stages of their company growth. Traditional commercial lending is optimised to make loans that are either too small to be effective or too large and expensive to be practical. At OakNorth, our mission is to help lenders fill this gap which we refer to as the “Missing Middle.” We are building a SaaS platform called the Credit Intelligence Suite which transforms commercial lending by helping banks build deeper relationships with their clients, open new, more profitable opportunities, whilst delivering credit decisions up to ten times faster than traditional models, with lower risk and greater efficiency. Cloud Security Engineer will lead and execute new security technologies and best practices in the cloud to augment the security posture
<h3>Job Responsibility</h3>
<ul>
<li>Develop governance frameworks, guiding principles, patterns, security controls of cloud and application running in cloud.</li><li>Assist with projects involving cloud technologies and provide guidance on security engineering and architecture.</li><li>Build security automation in the cloud using terraform, cloud native services and 3rd party tools to protect the data and applications.</li><li>Perform security review of workloads running in cloud and provide security recommendations on service design and configurations. </li><li>Implement security into the CI/CD systems and DevOps process, align to Security Shift Left strategy.</li><li>Collaborate with SOC team to build security visibility of the cloud and workloads. </li><li>Lead and execute new security technologies and best practices in the cloud to augment the security posture.</li></ul>
<h3>Desired Skills</h3>
<ul>
<li>3+ years of experience in information security, predominantly focused on cloud security.</li><li>Hands-on experience in Infrastructure-as-Code tool such as Terraform, AWS CloudFormation. </li><li>2+ years of experience in managing security for AWS and GCP.</li><li> Ability to identify, design, implement and automate cloud security controls. </li><li>Exposure to CICD tools and DevSecOps principles.</li><li>Ability to instil a culture of trust, open communication, Agile delivery, ownership, and accountability</li><li>Excellent communication and interpersonal skills.</li></ul>About OakNorthSmall and medium-size enterprises (SME) are one of the biggest drivers of growth and innovation in economies all over the world. Despite these companies being a powerful force in the economy, many SMEs find it difficult to raise capital during critical stages of their company growth. Traditional commercial lending is optimised to make loans that are either too small to be effective or too large and expensive to be practical. At OakNorth, our mission is to help lenders fill this gap which we refer to as the “Missing Middle.” We are building a SaaS platform called the Credit Intelligence Suite which transforms commercial lending by helping banks build deeper relationships with their clients, open new, more profitable opportunities, whilst delivering credit decisions up to ten times faster than traditional models, with lower risk and greater efficiency. Our InvestorsOakNorth Holdings (the group which includes OakNorth Bank plc and the various OakNorth software entities around the world) has raised over $1bn from leading investors, including: Clermont Group, Coltrane, EDBI of Singapore, GIC, NIBC, SMBC, Toscafund, and SoftBank’s Vision Fund.   We have ambitious goals for this platform, and to help us realise them we’re looking for experienced software engineers who are just as focused on the product side of engineering as they are on the technical. You’ll be joining our global engineering team, which is less than 100 engineers, to make a big impact on the direction of our technology platform and most importantly, on the day-to-day workflows of our customers. Our CustomersIn addition to OakNorth’s own bank in the UK, the software is also being deployed by banks around the world, including: Capital One, Fifth Third, PNC, SMBC, Customers Bank, Old National Bank, Modern Bank, and Lafayette Square in the US, and ABN Amro, NIBC and OIMIO in Europe.   Thank you very much for your interest in OakNorthWe are happy to consider you for roles within our group of companies. If we can identify a match between your skill set and our immediate recruiting needs, please expect to hear from us very soon. If we are unable to identify a fit in the near term, please note that we intend to retain the data you send to us so we may contact you in the future.For more information regarding our Privacy Policy and practices, please visit: <a href="https://www.oaknorth.com/privacy-policy" rel="noopener noreferrer nofollow ugc" target="_blank">https://www.oaknorth.com/privacy-policy</a>

Gurugram

Foursquare

About Foursquare 
Foursquare is the leading independent location technology and data cloud platform dedicated to building meaningful bridges between digital spaces and physical places. Our proprietary technology unlocks the most accurate, trustworthy location data in the world, empowering businesses to answer key questions, uncover hidden insights, improve customer experiences, and achieve better business outcomes. A pioneer of the geo-location space, Foursquare’s location tech stack is being utilized by the world’s largest enterprises and most recognizable brands.
About the Position
Foursquare is seeking an experienced Security Engineer to lead efforts and implement solutions to keep our users' and customers' data private and our systems secure.
The Security team works with infrastructure and feature engineering teams to identify and mitigate risks to the business. We propose, design, plan and implement strategic and tactical security improvements — from remote access systems for employees, to authorization rules on our production fleet, to forward-thinking policy initiatives. Our infrastructure and feature engineering teams will be active and supportive partners, but the Security Team organizes and leads these efforts across the entire organization. We are trusted to stay one step ahead of malicious actors in a rapidly-changing threat landscape.
As part of the Security Team, your work will be instrumental in ensuring both the safeguarding of our users' data and Foursquare’s future business success. 
In this role, you’ll 
<ul>
<li>Propose, design, plan, and implement strategic and tactical security improvements across the organization, including surfacing non-obvious risks and attack surfaces</li>
<li>Organize and lead cross-team efforts with infrastructure and engineering teams</li>
<li>Mitigate security risks and attack surfaces using a combination of policies and technological measures.</li>
<li>Establish and promote security recommendations and best practices, as well as provide security expertise across our entire tech stack</li>
<li>Build security automation and guardrails using Test-Driven Development, Infrastructure as Code, and serverless frameworks</li>
<li>Respond to Security Events, including isolating, mitigating, and investigating active threats</li>
<li>Conduct post-mortems to elevate the security posture of the company.</li>
<li>Advocate for the security culture of the organization, including collaborating with stakeholders across the company</li>
</ul>
What you’ll need 
<ul>
<li>3+ years of experience in security engineering</li>
<li>1+ years of experience in securing cloud environments (preference to AWS) with a deep understanding of Identity and Access Management</li>
<li>Thorough understanding of common access control patterns (especially RBAC), AuthN/AuthZ models, SSO standards (SAML 2.0, OAuth)</li>
<li>Experience developing and implementing employee remote access policies and systems</li>
<li>Working knowledge of network security with a focus on cloud networking</li>
<li>Strong written and verbal communication skills</li>
<li>Solid background using Linux and *nix operating systems</li>
<li>Proficiency in at least 1 programming or scripting language (preference to Python or Java), with a strong emphasis on Test-Driven Development - </li>
</ul>
A plus if you have
<ul>
<li>Security research, penetration testing, or other red team experience</li>
<li>Other cloud security experience (GCP, Azure, Oracle Cloud etc.)</li>
<li>Experience with container orchestration systems such as Kubernetes</li>
<li>Security incident response experience including real-time mitigation of ongoing attacks</li>
<li>Experience in designing, architecting, and deploying large technical projects, with a focus on security</li>
<li>Experience with Infrastructure as Code frameworks such as Terraform or AWS CDK.</li>
<li>Experience with serverless frameworks such as AWS Lambda.</li>
<li>Proficiency in conducting security investigations, including log forensics and preservation of evidence.</li>
<li>Experience with understanding, predicting, and managing human factor risks</li>
</ul>
Benefits and Perks
<ul>
<li>Fully Flexible Workplace - work from home, one of our offices or a combination of the two!</li>
<li>Unlimited PTO - rest and recharge when you need it!</li>
<li>Industry Leading Healthcare - comprehensive and competitive health, vision, dental, life insurance</li>
<li>Savings and Investments - 401(k) with company match</li>
<li>Home Office Setup - you get all necessary hardware and internet reimbursement </li>
<li>Family Planning and Fertility Programs - programs via Carrot and Maven</li>
<li>Employee Resource Groups - to help you stay connected</li>
</ul>
Things to know…
Foursquare is proud to foster an inclusive environment that is free from discrimination. We strongly believe in order to build the best products, we need a diversity of perspectives and backgrounds. This leads to a more delightful experience for our users and team members. We value listening to every voice and we encourage everyone to come be a part of building a company and products we love.
Foursquare is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected Veteran status, or any other characteristic protected by law.

Security Engineer

OpenAI

About the Team
Security is at the foundation of OpenAI’s mission to ensure that artificial general intelligence benefits all of humanity.  
The Security team protects OpenAI’s technology, people, and products. We are technical in what we build but are operational in how we do our work, and are committed to supporting all products and research at OpenAI. Our Security team tenets include: prioritizing for impact, enabling researchers, preparing for future transformative technologies, and engaging a robust security culture.   
About the Role
As a Security Engineering Manager, you will lead OpenAI engineers and researchers in building transformational and secure AI technologies. The ideal candidate will have deep experience in at least one security engineering discipline and prior experience in security leadership. In this role, you will:
<ul>
<li>Drive high leverage initiatives in infrastructure and application security</li>
<li>Innovate to develop novel security architecture</li>
<li>Collaborate on cutting-edge AI research, and use AI to improve OpenAI’s Security posture</li>
</ul>
You’ll make an impact at OpenAI by:
<ul>
<li>Managing a team of world-class security engineers, providing hands-on technical leadership to mentor and grow their careers.</li>
<li>Driving security architecture improvements across OpenAI’s research and production <a href="https://openai.com/blog/scaling-kubernetes-to-7500-nodes/" rel="noopener noreferrer nofollow ugc" target="_blank">environments</a>.</li>
<li>Empowering OpenAI's AI researchers and developers to do their best work securely.</li>
<li>Building enduring and high-trust partnerships with your colleagues across the organization.</li>
<li>Thinking like an attacker and building like a defender.</li>
</ul>
You may be a fit for this role if you have:
<ul>
<li>A track record of delivering transformational security improvements via leadership of productive engineering teams.</li>
<li>Experience in security leadership, including prior management experience.</li>
<li>Excellent communication skills, and are concise and persuasive.</li>
<li>Experience with public cloud providers (e.g. Amazon AWS, Microsoft Azure) and a desire to become an expert at protecting Azure infrastructure.</li>
<li>Experience securing Kubernetes infrastructure (container security, orchestration security, authentication/authorization, etc).</li>
<li>Proficiency with deployment tooling (Terraform, Buildkite, etc.) and security automation.</li>
<li>Proficiency in programming (Python, Golang, or similar)</li>
<li>Knowledge of modern adversary tactics, techniques, and procedures.</li>
<li>Ability to empathize and collaborate with colleagues, independently manage and run projects, and prioritize efforts for risk reduction.</li>
</ul>
About OpenAI
OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity. 
At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.

Benefits and Perks

<ul>
<li>Medical, dental, and vision insurance for you and your family</li>
<li>Mental health and wellness support</li>
<li>401(k) plan with 4% matching </li>
<li>Unlimited time off and 18+ company holidays per year </li>
<li>Paid parental leave (20 weeks) and family-planning <a href="https://www.get-carrot.com/about" rel="noopener noreferrer nofollow ugc" target="_blank">support</a></li>
<li>Annual learning &amp; development stipend ($1,500 per year)</li>
</ul>
We are an equal opportunity employer and do not discriminate on the basis of race, religion, national origin, gender, sexual orientation, age, veteran status, disability or other legally protected statuses. Pursuant to the San Francisco Fair Chance Ordinance, we will consider qualified applicants with arrest and conviction records. We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via accommodation@openai.com.

Security Engineering Manager, Product and Platform

Apply to Terraform Cyber Security Jobs in companies remotely and near you. New Terraform Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Senior Security Operations Engineer at Carta	Remote Full Time Incident Response Auditing Automation
Cloud Security Engineer at Zopa	Full Time Manager Active Directory Agile AWS
Cloud Security Engineer at OakNorth	Full Time Devsecops Agile Automation AWS
Security Engineer at Foursquare	Remote Full Time Red Team Incident Response Automation
Security Engineering Manager, Product and Platform at OpenAI	Full Time Manager Application Security Artificial Intelligence Automation

Terraform Cyber Security Jobs

0 Terraform Cyber Security Jobs. Page 1 of 1

5 closed terraform cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Terraform Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Terraform Cyber Security Jobs

0 Terraform Cyber Security Jobs. Page 1 of 1

5 closed terraform cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Terraform Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter