Zopa

Our Story Hello there. We’re Zopa. We began our journey in 2005 with the drive to deliver customer-first financial products. Fast forward to 2020, we shifted gears and became a digital bank, leveraging our customer knowledge, money expertise and technical agility to forge ahead. Our diverse team is united by a mission to create simple, fair and honest financial products that have the customers’ needs at their heart.  We’re regularly recognised at industry awards for our game-changing products and are proud to be one of the market leaders in consumer lending in the UK. But our work doesn’t stop there.   After securing £220 million in our 2021 funding round led by SoftBank, we’ve entered the next stage in our journey. So far, we’ve lent out over £6 billion and made money work better for over half a million people across the UK who were looking to borrow or save with us. In less than 2 years after becoming a bank, we hit £1 billion in customer deposits and we’re also a top 5 credit card issuer in the UK. And this is just the beginning. We’re set on achieving big things with ambitious growth targets to match. This means there's a range of opportunities for you to excel and develop through a career at Zopa, while building better banking products that truly matter to our customers.     If you embrace unconventional challenges, are unafraid to think differently and are driven to make an outsized impact, you’ll thrive here at Zopa. For a closer look at our culture, check out <a href="https://www.youtube.com/watch?v=e5ek2PQ-DhE" rel="noopener noreferrer nofollow ugc" target="_blank">our latest video here</a>. And if you want to join us, have a look at <a href="https://www.zopa.com/about/careers" rel="noopener noreferrer nofollow ugc" target="_blank">our current open roles</a>!What's the challenge? The ZRE Security team are part of Zopa Reliability Engineering (ZRE) and are responsible for ensuring our Platform &amp; Infrastructure is secure, and meets the controls required in a regulated environment. As a Cloud Security Engineer, you will be an owner for ZRE security work, whilst helping ZRE to maintain a strong security posture. This includes proactively aligning our platform/infrastructure with our InfoSec policies and standards, whilst defining work for remediation and improvement. You will be a champion for Security both within the ZRE team and in the wider business, helping to encourage a security mindset in everything we do. All the while automating consistently and helping to design and support the technology infrastructure to help Zopa grow.
<h3>Responsibilities:</h3>
<ul>
<li>Work with our Infosec team to triage and define security work coming into ZRE</li><li>Define remediation plans for security issues</li><li>Define our AWS Account security baseline, including management of common Security controls using Organisations</li><li>Contribute a security perspective to design discussions for new projects within ZRE, and the wider business</li><li>Automate to improve response to security issues and reduce toil</li><li>Use Threat Modelling to identify vulnerabilities and attack vectors across our infrastructure</li></ul>
<h3>About you:</h3>
<ul>
<li>In-depth knowledge of AWS (Organisations, IAM, VPC Networking, KMS, GuardDuty, CloudTrail, Config)</li><li>Experience using Infrastructure as Code (e.g., Terraform)</li><li>Strong knowledge of Containers and Orchestration (Kubernetes, Docker)</li><li>Experience with Linux administration, hardening and troubleshooting</li><li>Operational experience with HashiCorp Vault (ACL management, auth methods, secret engines)</li><li>A passion for Information Security, with experience applying this to Cloud Operations</li><li>A well-rounded understanding of foundational security concepts including best practices and how to apply them. Such as, Threat Modelling, OWASP Top 10 &amp; common vulnerabilities, PKI, TLS</li><li>Comfortable with scripting languages e.g. Bash, Python, PowerShell</li><li>Functional understanding of Networking &amp; common protocols</li></ul>
<h3>Nice to have:</h3>
<ul>
<li>Experience working in an FCA regulated organisation, ideally within the financial sector</li><li>Exposure to Active Directory</li><li>Hands-on experience with Networking e.g., CCNA or experience with physical networks</li></ul>#LI-MW1Flexible working? Yes please!Whether you want to come into our open-plan, riverside London Bridge office or work from the comfort of your own home (or both!), you’ll be able to decide on an approach with your manager, looking at what works best for you, your role and your team.Not only that – you'll also have the option of working from abroad for up to 90 days a year!* But no matter where you are, we’ll make sure you’ve got everything you need to thrive, both in your work and home life, from day one. *Subject to having the right to work in the country of choiceTo thrive here, you’ll need to: Champion our customers. Whatever your role, you’ll be close to our customers. We care passionately about doing the best for them.  Help us make fearless choices. Our environment is fast-paced, agile and open. You’ll solve interesting and challenging problems, and be trusted and empowered to bring your ideas to life. Walk the talk. Like us, you’ll be honest, stick to your promises and face the tough moments head-on. Win smarter. You’ll be always on the lookout for a better way of doing things, going beyond ‘good enough’ and welcoming different points of view. Be in it together. You’ll join an ambitious, diverse and all-round approachable team with a mix of ideas and talents who inspire each other to be better every day.  Zopa is proud to offer a workplace free from discrimination. Diversity of experience, perspectives, and backgrounds leads to great products and unique company culture. We simply can’t expect to empower our customers to better manage their money without challenging the current status quo. Creating the best place for money is no easy task, which is why we need talent from all walks of life.

London

Cloud Security Engineer

PEAK6

Apex Fintech Solutions (AFS) powers innovation and the future of digital wealth management by processing millions of transactions daily, to simplify, automate, and facilitate access to financial markets for all. Our robust suite of fintech solutions enables us to support clients such as Stash, Betterment, SoFi, and WeBull, and more than 20 million of our clients' customers. 
Collectively, AFS creates an environment in which companies with the biggest ideas in fintech are empowered to change the world. We are based in Dallas, TX and also have offices in Austin, New York, Chicago, Los Angeles, Portland, and Belfast. 
If you are seeking a fast-paced and entrepreneurial environment where you'll have the opportunity to make an immediate impact, and you have the guts to change everything, this is the place for you. 
AFS has received a number of prestigious industry awards, including:
<ul>
<li>2021, 2020, 2019, and 2018 Best Wealth Management Company - presented by Fintech Breakthrough Awards</li>
<li>2021 Most Innovative Companies - presented by Fast Company</li>
<li>2021 Best API &amp; Best Trading Technology - presented by Global Fintech Awards</li>
</ul>


JOB: Security Operation Center (SOC) Analyst
The Role
Seeking a Security Operation Center (SOC) Analyst to join our Cybersecurity team.
The SOC Analyst will be responsible for day-to-day security threat monitoring, analysis, and response. You will manage security incidents and review security alerts, determine if the security events are false positives, true positive, or false negatives and work with incident responders on known or suspected security threats. The Analyst will work on threat intelligence gathering and integration, forensics, and incident response that adhere to best practices and recognized control frameworks. 
Primary Responsibilities
<ul>
<li>Responsible for working in Security Operation Center (SOC) team environment.</li>
<li>Investigate incidents using SIEM and UEBA technologies, packet captures, reports, data visualization, and pattern analysis.</li>
<li>Analyze, escalate, and assist in remediation of critical information security incidents.</li>
<li>Improve and challenge existing processes and procedures in a very agile and fast-moving information security environment.</li>
<li>Able to participate in an on-call rotation.</li>
<li>Perform real-time alert monitoring and risk mitigation.</li>
<li>Provide analysis and trending of security log data from many heterogeneous security devices across different layers.</li>
<li>Provide Incident Response (IR) support when analysis confirms the actionable incident.</li>
<li>Provide threat and vulnerability analysis as well as security advisory services.</li>
<li>Analyze and respond to previously undisclosed software and hardware vulnerabilities.</li>
<li>Investigate, document, and report on information security issues and emerging trends.</li>
<li>Integrate and share information with other analysts and teams.</li>
<li>Participate in security projects and assist network operations and engineering teams.</li>
</ul>

Qualifications
<ul>
<li>Bachelor's degree in a related field (Security, Forensics, or Computer Science is preferred)</li>
<li>5-7 years of overall IT professional experience or 3-4+ years of work experience Tier 1 and Tier 2 level security operations experience.</li>
<li>Desirable | Proven experience as a security and/or complianceanalyst, incident handler/responder, security engineer, or penetration tester.</li>
<li>Knowledge of security methodologies, processes (i.e., Cyber Kill Chain/Diamond Models, and the MITRE ATT&amp;CK framework).</li>
<li>Knowledge of technical security solutions (firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, AV, DLP, proxies, network behavioral analytics, endpoint, and cloud security).</li>
<li>In-depth knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS and HTTP Protocols, network analysis, and network/security applications.</li>
<li>Good knowledge of common malware threats and attack methodologies.</li>
<li>Desirable Professional Certifications: GCIA, GCIH, GCFE, GCFA, Security+, CCNA CyberOps, OSCP, GPEN, GWAPT, CEH, </li>
</ul>
Core Competencies
<ul>
<li>Accountable for the successful completion of multiple, individual projects simultaneously.</li>
<li>Communicate effectively by contributing significantly to the development and delivery of a variety of written and visual documents for diverse audiences.</li>
<li>Manage change and demonstrate adaptability by adjusting priorities or processes and approaching as needs dictate.</li>
<li>Work independently as a team representative of Information Security as well as showing excellent teamwork skills.</li>
<li>Ability to develop thorough documentation and operational playbooks, in addition, to suggest alert enhancements to improve detection capability.</li>
<li>Fundamental knowledge of network and system technologies and practices</li>
</ul>
Teams Culture &amp; Values
<ul>
<li>The Cybersecurity Team is comprised of independent thinkers and doers who can positively impact our clients and shape Apex Fintech Solutions business and security posture.</li>
<li>The Cybersecurity Team to build and maintain a collaborative environment and engaging work—guided by Open and Honest Communication; Teamwork and Collaboration; Involving Everyone; Leaders Who Serve; and Personal Accountability</li>
</ul>


Apex currently requires all employees as a condition of employment to either be fully vaccinated for COVID-19 or submit to regular testing. The CDC defines "fully vaccinated" as two weeks after the second dose for Pfizer and Moderna, and two weeks after the single dose of Johnson &amp; Johnson. Apex will also require proof of vaccination and/or testing. Apex will also consider requests for exemption from these requirements as a reasonable accommodation for medical reasons or sincerely held religious beliefs. *Please note this requirement is ONLY for US Offices.

Dallas Castle

Security Operations Analyst

CYE is building a data-driven cybersecurity optimization SaaS platform that allows organizations to continually improve their cyber resilience. Our platform helps organizations assess their overall security, quantify the risks in business terms and fix the weakest links in their networks.At CYE we understand that the best results are achieved by combining the power of AI with human expertise. This is why we’ve built a world-class team of cybersecurity experts that augment the power of our platform.CYE has raised $120M from 83North and EQT and has 100s of customers from various industries that rely on our platform. We’re in our hyper-growth stage and we’re looking for bright and ambitious people to join us.
<h3>At CYE you’ll do the following:</h3>
<ul>
<li>Create and collaborate with Engineering, Data Science and Product on proof-of-concept features, products, services and tools.</li><li>Improve our customers security by discovering and implementing techniques to bypass security tools and controls and by recommending mitigations.</li><li>Exploit newly discovered vulnerabilities and implement new attack vectors using our cyber-offense frameworks.</li><li>Work with engineers to bring automated capabilities to production.</li><li>Analyze real-world security data to improve enterprise security and reduce security risks.</li></ul>
<h3>You are qualified for this role if you:</h3>
<ul>
<li>Are keen on solving large and complex problems by building iterative, measurable and tangible research plans, communicating them to all stakeholders and working to make them happen.</li><li>Have expert knowledge of the latest cybersecurity trends, exploit techniques and TTPs.</li><li>Have 3+ years of experience in hands-on Security Research / Offensive Cyber Security / Penetration Testing or Red Teaming in Enterprise IT, Cloud Infrastructure (AWS, GCP, Azure) and in SaaS environments.</li><li>Have hands-on Python (or Go, Ruby, JavaScript) coding experience.</li><li>Have exceptional knowledge of networking and internet protocols (TCP/IP, HTTP, DNS, TLS, SMB, Kerberos).</li><li>Are an exceptional, proactive communicator and a highly motivated self-learner.</li></ul>
<h3>It’s an advantage to have:</h3>
<ul>
<li>BSc in Computer Science or equivalent industry or military experience.</li><li>Deep knowledge of C/C++ and Windows API.</li><li>Experience with Big Data platforms (SQL, Pandas, Elasticsearch, HDFS, Spark).</li><li>Great understanding of Cloud Attack Vectors and Mitigations.</li><li>Familiarity with Security compliance frameworks (NIST, OWASP, CSA, etc.).</li></ul>

Hertsliyah

Security Researcher

ThreatX

The Lead Level 2 SOC Analyst role will provide second-tier support to our clients, test and implement new features and rules, conduct deep-dive on rules to isolate possible issues and as well add automation where possible. Candidate will also be available to guide other Level 2 SOC Analysts to help them achieve the best resolution possible. Opportunity to automate as time allows.Requirements<ul> <li>2+ years of experience with Linux - comfortable with using only CLI to accomplish tasks, but not averse to using GUI if needed. Able to do common security tasks via commandline. High comfort level with explaining these items to laymen.</li> <li>2-4 years of experience working with firewall security applications (TCP/IP), preference is heavy understanding of HTTP/HTTPS (including their headers), comfortable with and able to explain settings, rules and other firewall facets to laymen.</li> <li>1-2 years (minimum) scripting - knowledge of scripting (Python, Bash, JavaScript, AWS, any form of cloud hosting and virtualization and containers).</li> <li>Excellent written and verbal communication skills and the ability to easily break down technical jargon into layman's terms.</li> <li>Independent worker with a high level of integrity.</li> <li>Investigative mindset, with strong desire to not only achieve results but our ability to gather the same data later - basic comfort with automating tasks for the team.</li> <li>DNS - Basic understanding of records and their syntax, specifically for NS, A, CNAME and some forms of TXT records.</li> <li>Certificate knowledge - Basic understanding of certificates, public/private key pairs and the methods used by SSL/TLS. Experience with OpenSSL a plus! </li> </ul>BenefitsThreatX offers competitive benefits based on our stage company. Benefits we offer include: health, dental and vision insurance; unlimited paid time-off; flexible and health spending accounts; dependent care account; disability coverage; and life insurance. Opportunity to start early on with an innovative start-up.Salary is negotiable depending on experience.Work From Home role - not necessary to reside in Louisville, CO areaAbout ThreatXThreatX’s API protection platform makes the world safer by protecting APIs from all threats, including DDoS attempts, BOT attacks, API abuse, exploitations of known vulnerabilities, and zero-day attacks. Its multi-layered detection capabilities accurately identify malicious actors and dynamically initiate appropriate action. ThreatX effectively and efficiently protects APIs for companies in every industry across the globe. For more information, visit: <a href="https://www.threatx.com/" rel="noopener noreferrer nofollow ugc" target="_blank">https://www.threatx.com/</a>.ThreatX is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.

Louisville

Level 2 SOC Analyst

Hex Trust

ABOUT HEX TRUST Hex Trust is Asia’s leading provider of digital asset custody solutions for Banks &amp; Financial Institutions, using leading-edge Blockchain technology. Led by innovators from the financial services industry, Hex Trust has built a proprietary platform that delivers a new way for financial institutions, asset managers, and corporations to safely and efficiently operate in the Blockchain ecosystem. Institutional adoption of digital assets and DeFi requires a fundamental shift in the way banks and financial institutions operate. Hex Trust is the link that connects the traditional financial world to the digital assets ecosystem. POSITION OBJECTIVEHex Trust Information Security Team is looking for a highly skilled and motivated Cryptographic Security Manager to run the Cryptographic enterprise services. The role will play a critical and integral part in the research &amp; development as well as the management and maintenance of Hex Trust’s cryptographic protocols in its enterprise offerings. As the Cryptographic Security Manager, you will be responsible for ongoing maintenance, rotation, and refreshing Hex Trust cryptographic key and roots of trust. The candidate must be proficient in Public/Private key encryption, digital signature, HSM, and MPC. You should be experienced in managing internal Certificate Authorities, including managing AirGapped networks CA’s, using a range of tools over multiple protocols like Link or MACSec, IPSEC, TLS, SSL, and PGP, for management of the data transmissions, network connections, code and image signing certificates, smart cards (PIV) and SSL Certificates. As part of the Information Security Team, your experience will be the primary consideration to validate conceptual and new projects that require cryptographic challenges through our HSMs and or MPC solutions. Your expertise will be invaluable to the continued success of Hex Trust and its enterprise offerings. DUTIES &amp; RESPONSIBILITIES <ul><li>Manage the Cryptographic Material Custodian function <ul> <li>Manage the life cycle of all cryptographic material such as keys, secured envelopes, key parts, safes, HSM, etc., via compliant generation, loading, renewal or decommissioning processes, for Worldline or external customers.</li> <li>Public/Private key encryption and digital signature (elliptic curve)</li> <li>Design, develop, integrate and evaluate cryptographic protocol tools, products and frameworks around PKCS, JCE and CSP/KSP</li> <li>Troubleshooting cryptographic anomalies and issues</li> </ul> </li></ul> <ul> <li>Drive the above Key Management (key/certificate request/key token generation) in a framework driven approach, to ensure compliance to regulators and internal audit. </li> <li>Coordinate &amp; plan Key Ceremonies with all needed actors such as HSM administrators, key custodians, customers</li> <li>Manage and maintain Trusted Root stores (CA Authority)</li> <li>Deliver the required evidences to different type of audits (internal and external) concerning key management</li> <li>Consult internal and external clients on changes and implementations regarding Key &amp; HSM management.</li> <li>Manage and maintain environment for preparing Key Ceremonies</li> <li>Provide subject matter expertise to research current and new cryptography concepts and tools and its application into the Digital asset DeFi space.</li> <li>Code reviews of cryptographic implementation of Hex Trust’s internal systems</li> </ul>Requirements<ul> <li>You will have experience in Regulated environments, Government or Military with administration/management activities with HSM(s) or MPC technology.</li> <li>Relevant certification in any security domain such as Communications and Network Security, Security Architecture, IAM, Security Testing or Security Operations. </li> <li>Certification with any major HSM technology would be seen as an advantage but not mandatory.</li> </ul>BenefitsWHY HEX TRUST? Make a difference and get yourself noticed in a rapidly growing company, providing multiple opportunities for career and personal development. We are a dynamic, multi-cultural team of smart, motivated people based in brand new offices in the heart of Hong Kong’s Central business district. We’ll give you tough challenges, while offering rewarding results to match, as well as regular team and social events and flexible working arrangements when needed.<ul> <li>Diverse and inclusive team: A diverse and international team who come from over 15 countries with diversity of both thought and background on a mission to disrupt the digital asset industry. We support each other and take pride in our achievements. We attract talent from well known global multinational companies and institutions. </li> <li>Ownership &amp; learning-curve: Opportunity to make an active contribution to the growth story of one of the leading disruptors in the FinTech industry.</li> <li>Communication: We treat our staff like owners by being open, transparent, and providing regular communication about our direction and progress. We provide regular insight into decision making, strategy, and corporate-wide objectives and key results progress so that each of our employees is aligned and empowered. And we constantly strive to improve how we can communicate more effectively.</li> <li>Office: We offer both the flexibility to work remotely or to work in style and comfort from our modern offices in Hong Kong, Singapore, Vietnam and Dubai.</li> </ul>Please send CV, salary expectation, and expression of interest to <a href="mailto:careers@hexcustody.com" rel="noopener noreferrer nofollow ugc" target="_blank">careers@hextrust.com</a>.Hex Trust is an equal opportunity employer devoted to diversity and inclusion in the workplace. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status or disability status.

HSM &amp; Cryptography Engineer/Cryptographic Security Manager

Apply to TLS Cyber Security Jobs in companies remotely and near you. New TLS Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Cloud Security Engineer at Zopa	Full Time Manager Active Directory Agile AWS
Security Operations Analyst at PEAK6	Full Time Soc Analyst Analyst Incident Response GCFA
Security Researcher at CYE	Full Time Javascript Windows AWS Azure
Level 2 SOC Analyst at ThreatX	Remote Full Time Soc Analyst Analyst Javascript
HSM & Cryptography Engineer/Cryptographic Security Manager at Hex Trust	Remote Full Time Audit Manager Audits

TLS Cyber Security Jobs

0 TLS Cyber Security Jobs. Page 1 of 1

5 closed tls cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

TLS Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

TLS Cyber Security Jobs

0 TLS Cyber Security Jobs. Page 1 of 1

5 closed tls cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

TLS Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter