Rubrik

The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information. 
Where can you make an impact?
Rubrik is seeking an Enterprise Security Engineer.  In this role, you will be responsible for ensuring that Rubrik's Corporate IT services are designed and implemented to the highest possible security standards.  You will partner with a variety of stakeholders across the business to achieve successful security outcomes in customer experience and productivity deliverables.
What you'll be doing:
<ul>
<li>Partner with all teams across Rubrik to create secure corporate infrastructure design and deployment architectures utilizing threat models and risk analysis documentation</li>
<li>Define organization policies for secure cloud design models within enterprise, hybrid, and public cloud environments including VMware, AWS, Azure and GCP</li>
<li>Work with development teams, operations, governance, and other stakeholders to draft security standards and implement monitoring, alerting, and governance</li>
<li>Design and implement standards across Identity (Okta), Endpoint (Windows, MacOS, Linux), Secrets Management (Vault, Lastpass) and Business Applications (Salesforce)</li>
<li>Support incident responders in analyzing applicable threats, vulnerabilities, controls and residual risks</li>
<li>Analyze and harden existing applications, infrastructure, automation, and deployment processes including CircleCI and Github</li>
<li>Coordinate with security researcher community for submitted vulnerabilities with issues and remediation of threats in both hybrid and public cloud environments</li>
</ul>
Experience you'll need:
<ul>
<li>Bachelor’s degree required; BS or MS in Computer Science, Information Technology, or a related field</li>
<li>6+ years experience in enterprise security, with hands on experience in administration and design across Windows, Mac, Okta and public cloud infrastructure</li>
<li>2+ years experience in VMWare and/or Network security modeling</li>
<li>Broad knowledge of enterprise attack vectors and exploits in both end-user and IT Apps</li>
<li>Subject matter expertise in business applications, endpoint and Identity management</li>
<li>Deep understanding of endpoint systems, corporate networking including wi-fi and IT application systems (Salesforce, Mulesoft, Lastpass, etc)</li>
<li>Programming experience in Python, Go or Java</li>
<li>Security expertise in at least one major public cloud provider (AWS, GCP, Azure) </li>
<li>Experience with deploying and securing Enterprise applications and environments at scale</li>
<li>Knowledge of regulatory guidelines and standards such as SOC2, ISO 27001, FedRAMP, etc.</li>
<li>Understanding of corporate security maturity model frameworks and how to apply them</li>
<li>Strong written and verbal communication skills</li>
</ul>About Rubrik:
Rubrik, the Zero Trust Data Security Company™, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including Zero Trust Data Protection, Ransomware Investigation, Incident Containment, Sensitive Data Discovery, and Orchestrated Application Recovery. This means your data is ready so you can recover the data you need, and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.
We are <a href="https://www.rubrik.com/lp/analyst-reports/gartner-mq" rel="noopener noreferrer nofollow ugc" target="_blank">a leader in data security</a>, have been recognized as as a Forbes Cloud 100 Company, named as a LinkedIn Top 10 Startup and are proud to have earned Great Place to Work® Certification™. There has never been a more exciting time to join Rubrik, and our future is even brighter. The work you do will help propel our next chapter of growth as you do the best work of your career.
<a href="https://www.linkedin.com/company/rubrik-inc/mycompany/verification/" rel="noopener noreferrer nofollow ugc" target="_blank">Linkedin</a> | <a href="https://twitter.com/rubrikinc" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a> | <a href="https://www.instagram.com/lifeatrubrik/" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> | <a href="https://www.rubrik.com" rel="noopener noreferrer nofollow ugc" target="_blank">Rubrik.com </a>| 
Diversity, Equity &amp; Inclusion @ Rubrik: 
At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.
Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation. This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.
Our DEI strategy focuses on three core areas of our business and culture:
<ul>
<li>Our Company: Build a diverse company that provides equitable access to growth and success for all employees globally. </li>
<li>Our Culture: Create an inclusive environment where authenticity thrives and people of all backgrounds feel like they belong.</li>
<li>Our Communities: Expand our commitment to diversity, equity, &amp; inclusion within and beyond our company walls to invest in future generations of underrepresented talent and bring innovation to our clients.</li>
</ul>
<h5>Equal Opportunity Employer/Veterans/Disabled: Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.</h5>
<h5>Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. </h5>
<h5>Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</h5>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW - POSTER SUPPLEMENT</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_English_unformattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">PAY TRANSPARENCY NONDISCRIMINATION PROVISION</a>
<a href="https://www.dol.gov/sites/dolgov/files/olms/regs/compliance/eo_posters/employeerightsposter2page_19final.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS</a>

Palo Alto

Sr Enterprise Security Engineer II

SciTec

SciTec, Inc. is a dynamic small business which delivers advanced sensor processing technologies and scientific instrumentation capabilities in support of national security and defense applications. We support customers throughout the Department of Defense and U.S. Government in building innovative new tools to deliver unique, world-class data exploitation capabilities. SciTec has an immediate opportunity for a talented Information Systems Security Manager (ISSM) in our Boulder, CO office. The ISSM will be responsible the accreditation and administration of a secure computing environment, both leading the implementation of technical security controls and spearheading coordination with accrediting and assessing agencies. The ISSM will need to work well in a team environment with a commitment to ensure security awareness and techniques are communicated effectively across the workforce. SciTec is searching for a candidate who will thrive in an environment where they are both expected to take the initiative to solve problems and empowered to see problems through to their conclusion.RequirementsDUTIES: <ul> <li>Leading the development, maintenance, and evaluation Information System (IS) security documentation, including System Security Plans (SSPs), Continuity of Operations Plans (COOPs), and Standard Operating Procedures (SOPs).</li> <li>Conducting cybersecurity controls assessments in accordance with applicable regulatory guidance, including NIST 800-53, NIST 800-37, NIST 800-60, and DoD 8500.01. Managing Plans of Actions and Milestones (POA&amp;M) originating from these assessments.</li> <li>Upload all security control evidence to the Governance, Risk, and Compliance (GRC) application (eMASS) to support security control implementation during the monitoring phase.</li> <li>Develop and execute a Continuous Monitoring program for information systems in accordance with NIST 800-53</li> <li>Ensure that selected security controls are implemented and operating as intended during all phases of the Information System (IS) lifecycle and RMF process</li> <li>Ensure that system security documentation is developed, maintained, reviewed, and updated on a continuous basis. </li> <li>Conduct required IS vulnerability scans according to risk assessment parameters. </li> <li>Continuously evaluating system security posture, identifying opportunities for improvement, and supporting the implementation of these improvements.</li> <li>Supporting the local SciTec Facility Security Officer (FSO) in ensuring the physical protection of information technology systems, including supporting the deployment of physical security measures such as intrusion detection systems.</li> <li>Contribute to Cybersecurity Maturity Model Certification (CMMC) and NIST SP 800-171 which may include authoring policy and procedure, capturing artifacts, and working related projects.</li> <li>Contributing to other corporate security and information assurance activities throughout the company with System Administrators, Security, and other stakeholders.</li> <li>Successful candidates will have strong written and communication skills to maintain a relationship with government counterparts and other mission partners.</li> <li>Ensure the removal and retirement of ISs being decommissioned in coordination with the system owner</li> <li>At least two years serving as an ISs Security Officer or Manager at a cleared facility. </li> <li>Familiarity with the use and operation of DISA SCAP and STIGViewer tools</li> </ul> <ul> <li>Is technical lead for the Risk Management Framework (RMF) package creation and compliance. </li> </ul> REQUIREMENTS: <ul> <li>Must be a U.S. Citizen. </li> <li>Candidates must have an active Secret government security clearance.</li> <li>2 years of experience specifically supporting the administration of government or contractor information technology systems under the oversight of the DoD or the Intelligence Community.</li> </ul> <ul> <li>4 year degree in Information Technology, Cybersecurity, Computer Science or other related field</li> <li>Must have experience with Windows/Linux based troubleshooting; understand where to locate specific log files for forensics.</li> </ul> <ul> <li>Ability to evaluate effectiveness, suitability, survivability, and interoperability of systems, relating to cybersecurity and provide key feedback to improve the overall cybersecurity posture. </li> <li>Ability to research and develop solutions to emerging cyber threats.</li> <li>Proficient with Microsoft Word, Microsoft Excel, OneDrive. </li> <li>Self-starter with ability to work independently.</li> <li>Ability to understand, explain, interpret, and apply rules, regulations, directives, and procedures.</li> </ul> PREFERRED EXPERIENCE, SKILLS, AND ABILITIES: <ul> <li>An active TOP SECRET clearance.</li> <li>A CISSP (or CISSP Associate) certification, or an alternate qualifying certification satisfying DoD 8570.01M requirements for an Information Assurance Technician Level III or an Information Assurance Manager Level II.</li> <li>Prior successful experience as an ISSM.</li> <li>Prior experience with NIST 800-171, NIST 800-53 (both DIACAP 8500.2 and Risk Management Framework), and Continuous Monitoring and Risk Scoring (CMRS).</li> <li>A college degree in computer science, info tech, info security, or a related field.</li> <li>Experience working with the ELK stack.</li> <li>Experience with Azure, AWS, or similar cloud environments.</li> <li>Have experience with VMware or other virtualization software.</li> <li>Python, PHP, Perl, PowerShell, or Bash scripting experience.</li> <li>Experience administering the system functions including security policies and account management of Microsoft Windows and Server as well as Linux/Unix-based systems.</li> <li>Incident response and reporting experience.</li> </ul>BenefitsAs a small business, SciTec, Inc. offers room for growth and a flexible, fast-paced work environment. We work daily to develop one-of-a-kind solutions for challenging national problems. SciTec encourages collaboration across our offices in Boulder, El Segundo, Dayton, Huntsville, Virginia, and our headquarters in Princeton, and provides access to opportunities across the corporate spectrum. Initiative is expected and encouraged, all employees have the opportunity and flexibility to broaden their technical horizons, and our daily work makes an impact on the world around us. SciTec offers a highly competitive salary and benefits package, including a variety of benefits including health insurance, parental leave, vision, life, and disability insurance, 401(k)plan with employer contribution, holidays and paid time off plans (including vacation and sick time), an annual profit-sharing plan, and an annual performance bonus plan. The salary range for this position is $83,000 to $130,000; however, SciTec considers several factors when extending an offer of employment, including but not limited to, the role and associated responsibilities, a candidate’s work experience, education/training, and key skills. This is not a guarantee of compensation. SciTec is committed to hiring and retaining a diverse workforce and is proud to be an Equal Opportunity/Affirmative Action employer.

Boulder

Information Systems Security Manager (ISSM)

Avertium

Avertium is the security partner that companies turn to for end-to-end Cybersecurity solutions that attack the chaos of the cybersecurity landscape with context. By fusing together human expertise and a business-first mindset with the right combination of technology and threat intelligence, Avertium delivers a more comprehensive, more programmatic approach to cybersecurity - one that drives action on the ground and influence in the boardroom. That's why over 1,200 mid-market and enterprise-level organizations across 15 industries turn to Avertium when they want to be more efficient, more effective, and more resilient when waging today's cyber war. Show no weakness.®The CyberSecurity Analyst is a trusted technical advisor working with an active Center of Excellence. The CS Analyst works closely with the client to provide proactive support assistance to reduce or prevent security issues from occurring on the client network.  The CS Analyst will administer and maintain security measures focused on application, web and infrastructure security for the client. The CS Analyst is responsible for working with key client contacts at multiple levels of the organization to identify and align business and IT Security objectives.  The CS Analyst will provide security analytics and assistance with security support requests. 
<h3>Responsibilities:</h3>
<ul>
<li>Monitor, respond to, and analyze SIEM alerts from monitoring tools. </li><li>Provide technical guidance / recommendations to clients to enhance their overall security posture within the managed products.  Handles daily incidents; monitors, tracks, analyzes and records. </li><li>Work with vendors, outside consultants, and other third parties to improve information security within the organization. </li><li>Responds to security related tickets escalated from clients, and works collaboratively with the client to assist in resolving security events. </li><li>Work with other IT professionals to resolve fast moving vulnerabilities such as spam, virus, spyware and malware. </li><li>Monitor security vulnerability information from vendors and third parties. </li><li>Create Weekly and Monthly Status Reports, including daily technical task reports and contract deliverables. </li></ul>
<h3>Qualifications for Success:</h3>
<ul>
<li>Strong written, verbal and non-verbal communication skills, especially conveying complex information in an understandable manner. </li><li>CISSP, CISA or GIAC certification is a plus. </li><li>A minimum of 2-4 years of experience working with Microsoft Active Directory. </li><li>Experience in managing an organization's PCI, HIPAA, or SSAE16 certification is preferred. </li><li>Analyze and resolve complex technical and business problems. </li><li>Must have proficient knowledge with three or more of the following technologies:  Application / stateful / UTM firewalls; SIEM; DLP; Web content filtering; Web application firewalls (WAF); Vulnerability scanning and penetration testing; IPS/IDS; Security Operations Center operations; Wireless Networking; UNIX, AIX &amp; Solaris, Linux, Windows Server Operating Systems; Endpoint and Malware </li><li>Knowledge with NIST, FISMA, DIACAP. </li><li>Knowledge of Windows 2003-12 server platforms. </li><li>Knowledge of VMware and VM server platforms. </li><li>Knowledge of UNIX server platforms. </li><li>Working knowledge of analyzing IIS, SQL, firewall, IPS/IDS, Windows. </li><li>Web and mail logged events. </li><li>Ability to analyze IANA assigned ports (well known, registered, dynamic and private ports). </li><li>Ability to troubleshoot common network devices, network, vulnerabilities and network attack patterns. </li><li>Ability to troubleshoot Windows Event IDs. </li><li>Interact with all levels of management. </li><li>Make decisions based on many variables. </li><li>Manage multiple tasks/projects simultaneously. </li><li>Minimum of Bachelor's Degree in computer science, telecommunications management, electrical engineering, or a related field or have 4 years of experience. </li><li>Advanced network and systems certifications such as CCNP, CCNA and CISSP, are preferred. </li><li>Other industry certifications such as ITIL, Microsoft, Juniper and Checkpoint are a plus. </li></ul>In addition to a career in the challenging world of cyber security, Avertium offers competitive salaries, full benefits, unlimited paid time off, participation in 401(k), and opportunities for professional growth and development. We offer the opportunity to work with cutting-edge security technologies in a stimulating work environment.Avertium provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Knoxville

CyberSecurity Analyst, Cyber Fusion Team, MSS | Knoxville, TN

Stitch Fix

Lead Vulnerability Management Engineer
REMOTE - USA
<h3>ABOUT ENGINEERING</h3>
Our team is made up of people from varied backgrounds, including engineers who built and scaled organizations like Google, Netflix, eBay, GitHub, and LivingSocial. We build modern software with modern techniques like TDD, continuous delivery, DevOps, and service-oriented architecture. Cross-functional partnerships are deeply meaningful to us and are how we’ve built up immense trust with the people running the business.  We focus on high-value products that solve clearly identified problems but are designed in a sustainable way so that value continues to deliver in the long term. In fact, some of our proudest moments come from solving business problems without writing a line of code.
<h3>ABOUT THE ROLE</h3>
You will deliver secure products and solutions—not just features—by developing an understanding of how Stitch Fix works. We trust you to focus your time and efforts where they are needed most. Your commitment to applying security to business and technology challenges in clean &amp; innovative ways will make you a trusted advisor to your partners and their teams. You will own projects and influence our direction.

You won’t do this alone. Your team will collaborate with business partners to define product requirements, plans, and deliverables. You will work with team members to take advantage of learning and growth opportunities in tech and product through real day-to-day work. You will impact the business in tangible, visible ways and always have a seat at the table.

We are looking for a Principal Vulnerability Management Engineer for our Information Security team. Our team members are given a great deal of autonomy in the pursuit of keeping Stitch Fix secure.  You will demonstrate strong communication skills and you will be primarily responsible for the continued evolution of our detection capabilities, the integration of security tools used internally by the Stitch Fix Information Security team, and the advancement of our vulnerability management program.

We’re looking specifically for folks who place an emphasis on usable security. Stitch Fix is a fast-growing company, and our security program needs to be able to keep pace with that growth while not disrupting innovation. You will help us improve our vulnerability detection capabilities and risk mitigation of network level issues. You will prototype, implement, test, deploy and maintain stable engineering solutions. You will present possible technical solutions to various stakeholders, clearly explaining your decisions and how they address real user needs, incorporating feedback in subsequent iterations.

We cannot succeed without creative security engineers. Your cross-functional team will propose and build solutions for warehouse process improvement, workforce management, logistics decision-making, and workflow optimization.
<h3>REQUISITE SKILLS AND EXPERIENCE</h3>
<ul>
<li>Building and growing a next-generation vulnerability management program</li>
<li>Identifying the right combination of people, process and technology to improve our detection and remediation capabilities</li>
<li>Conducting scheduled, targeted (in response to advisories and remediation verification) and ad-hoc vulnerability scans and investigate and validate risk levels associated with vulnerabilities identified </li>
<li>Providing remediation guidance and recommendations and coordinate with the Technology organization, IT and other teams as needed to provide oversight to the remediation and/or mitigation of enterprise vulnerabilities</li>
<li>Thorough understanding of network defense technologies, TCP/IP networking, Active Directory, DHCP, DNS, network security monitoring tools, secure engineering principles and technical security testing methodologies</li>
<li>Extensive Windows, Mac, and Linux experience including deep knowledge of file system layout and common configuration deficiencies</li>
<li>Thorough understanding of desktop, server, application, database, and network security hardening principles and practices for threat prevention</li>
<li>Experience working as part of a patch management process and a familiarity with patching tools (i.e. SCCM, JAMF, VMWare Airwatch, etc.)</li>
<li>Provide recurring and ad-hoc vulnerability reports upon request</li>
<li>Reviewing and providing feedback on network level changes that bring security vulnerabilities</li>
<li>Partner with warehouse and IT teams to manage vulnerabilities in our robotics and automation platforms</li>
<li>Familiarity with DevOps (Docker, AWS, microservices) and launching and maintaining new services.</li>
<li>The ability to learn new technologies quickly.</li>
<li>Capable of working with shifting requirements and collaborating with internal and external stakeholders.</li>
<li>Understand git merges, rebases, and conflict resolution.</li>
<li>Communicate clearly, efficiently, and thoughtfully. We’re a highly-distributed team, so written communication is crucial</li>
</ul>
<h3>ABOUT THE TECHNOLOGY</h3>
Technologies we rely on to pursue solutions to business problems include:
<ul>
<li>HashiCorp Terraform</li>
<li>Python</li>
<li>Ruby</li>
<li>Go-lang</li>
<li>Brinqa / Kenna Security </li>
<li>Jira </li>
<li>Prisma Cloud Compute</li>
<li>AquaSec CSPM</li>
<li>AWS / Lambda</li>
</ul>
Even if you already have experience with these tools, you'll have the chance to get even better with them. And if you don't already use at least a few of these tools, we will help you learn and become effective with them.
<h3>YOU’RE EXCITED ABOUT THIS OPPORTUNITY BECAUSE...</h3>
<ul>
<li>We work collaboratively as a distributed team—we are a primarily remote team and we use GitHub, Slack, and video conferencing extensively to collaborate.</li>
<li>You will have the opportunity to participate in creating prototypes and exploring alternative designs—we value pull requests, one-pagers, and screencasts to develop rapid prototypes that demonstrate new features.</li>
<li>We view Security as a product which requires a purposeful strategy through an overarching vision of how security can support the organization’s survival because computers are somewhat terrible but necessary for success.</li>
<li>You are a Problem Solver. Ultimately, anyone can say “no” to something —but just saying “no” isn’t solving a problem. Figuring out a compromise, like preserving or even improving UX while still ensuring an organization’s security, is a hard problem — the type of problem which should be the most intellectually fulfilling.</li>
</ul>
We use these tools and techniques help us get the job done and we’re excited to share our expertise with new members of the team. You will have the opportunity to help us continue to adopt effective practices and technologies and explore their full potential.
<h3>WE ARE EXCITED ABOUT YOU BECAUSE...</h3>
<ul>
<li>YOU ARE ENTHUSIASTIC ABOUT TECHNOLOGY. You will collaborate to build solutions using the appropriate tools and contribute to design and architecture across multiple systems. You want to build on your experience and help us to adopt new technologies. You'll learn from us, and we'll learn from you. You care deeply about the experience you are delivering.</li>
<li>YOU HAVE A PRODUCT-FOCUSED MINDSET. Our team works together to deliver projects that use technology to solve real business problems. Your team members and business partners will seek out your opinion on how the product you’re building should work. You aren’t afraid to dig deep and ask the tough questions of our customers, company, and executive team.</li>
<li>YOU ARE INTERESTED IN DEVELOPING YOUR LEADERSHIP QUALITIES. You should believe in what you’re doing and inspire others around you to be their best selves? Do you feel ownership for the projects you are working on?</li>
<li>YOU HAVE DEEP RESPECT FOR YOUR CRAFT. We are dedicated to building software sustainably, using modern techniques. You're always looking for more and better ways to write software, and enthusiastic about sharing them with your team.</li>
<li>YOU ARE RESPECTFUL, EMPATHETIC, AND HUMBLE. We want you to take your work seriously and be open to personal and professional growth. Successful engineers show everyone respect and consideration.</li>
</ul>
<h3>YOU'LL LOVE WORKING AT STITCH FIX BECAUSE WE...</h3>
<ul>
<li>Are a successful, vibrant, fast-growing company</li>
<li>Are a technologically and data-driven business.</li>
<li>Are at the forefront of tech and fashion, redefining shopping for the next generation.</li>
<li>Are passionate about our clients and live/breathe the client experience.</li>
<li>Get to be creative every day.</li>
<li>Have a smart, experienced, and diverse leadership team that wants to do it right &amp; is open to new ideas.</li>
<li>Believe in autonomy &amp; taking initiative.</li>
<li>Have sunny offices in downtown San Francisco, CA, or your home :)</li>
<li>Full support for remote work—and you get to visit our SF office every few months to connect with your peers and partners.</li>
<li>Offer transparent, equitable, and competitive compensation based on your level to help eliminate bias in salaries, as well as equity and comprehensive health benefits.</li>
<li>Are serious about our commitment to life-work balance, and have generous parental leave policies.</li>
</ul>
<h3>ABOUT STITCH FIX</h3>
At Stitch Fix, we’re about personal styling for everybody and we believe in both a service and a workplace where you can be your best, most authentic self. We’re the first fashion retailer to combine technology and data science with the human instinct of a Stylist to deliver a deeply personalized shopping experience. This novel juxtaposition attracts a highly diverse group of talented people who are both thinkers and doers. All of this results in a simple, powerful offering to our customers and a successful, growing business serving millions of men, women, and kids. We believe we are only scratching the surface on our opportunity, and we’re looking for incredible people like you to help us carry on that trend.<a href="https://www.cigna.com/legal/compliance/machine-readable-files" rel="noopener noreferrer nofollow ugc" target="_blank">This link</a> leads to the machine readable files that are made available in response to the federal Transparency in Coverage Rule and includes negotiated service rates and out-of-network allowed amounts between health plans and healthcare providers. The machine-readable files are formatted to allow researchers, regulators, and application developers to more easily access and analyze data.

Lead Vulnerability Management Engineer

SciTec, Inc. is a dynamic small business which delivers advanced sensor processing technologies and scientific instrumentation capabilities in support of national security and defense applications. We support customers throughout the Department of Defense and U.S. Government in building innovative new tools to deliver unique, world-class data exploitation capabilities. SciTec has an immediate opportunity for a talented Information Systems Security Manager (ISSM) in our Boulder, CO office. The ISSM will be responsible the accreditation and administration of a secure computing environment, both leading the implementation of technical security controls and spearheading coordination with accrediting and assessing agencies. The ISSM will need to work well in a team environment with a commitment to ensure security awareness and techniques are communicated effectively across the workforce. SciTec is searching for a candidate who will thrive in an environment where they are both expected to take the initiative to solve problems and empowered to see problems through to their conclusion.RequirementsDuties: <ul> <li>Ensure the day-to-day implementation, oversight, continuous monitoring, and maintenance of the security configuration, practices, and procedures for each information system </li> <li>Provide liaison support between the ISSM, system administrators, and system users</li> <li>Ensure that selected security controls are implemented and operating as intended during all phases of the information system lifecycle </li> <li>Ensure that system security documentation is developed, maintained, reviewed, and updated on a continuous basis </li> <li>Conduct required information system vulnerability scans according to risk assessment parameters. </li> <li>Develop Plan of Action and Milestones (POAMs) in response to reported security vulnerabilities </li> <li>Coordinate system owner concurrence for correction or mitigation actions </li> <li>Monitor security controls for information systems to maintain security Authorized to Operate (ATO) </li> <li>Upload all security control evidence to the Governance, Risk, and Compliance (GRC) application (eMASS) to support security control implementation during the monitoring phase </li> <li>Ensure that changes to an information system, its environment, and/or operational needs that may affect the authorization status are reported to the system owner and information system Security Manager (ISSM) </li> <li>Ensure the removal and retirement of information systems being decommissioned in coordination with the system owner and ISSM </li> <li>At least one year serving as an Information Systems Security Officer (ISSO) at a cleared facility. </li> <li>Familiarity with the use and operation of security tools including SCAP, OpenRMF, Tenable Nessus or similar applications. </li> </ul> <ul> <li>The ISSO will apply broad technical, operational, and policy expertise in the management of all aspects of operational Information System Security and Computer Network Defense.</li> <li>Is technical lead for the Risk Management Framework (RMF) package creation and compliance </li> <li>Contribute to Cybersecurity Maturity Model Certification (CMMC) efforts on the unclassified network.</li> <li>Performs other related duties and assignments as required.</li> </ul> Requirements: <ul> <li>Must be a U.S. Citizen. </li> <li>Must have at least a high school diploma.</li> <li>Hold an active Secret, or higher, US government security clearance.</li> </ul> <ul> <li>Have at least two years of systems administration experience.</li> <li>Must have experience with Windows/Linux based troubleshooting; understand where to locate specific log files for forensics.</li> <li>Understanding and practical application with one or more of DoD policies and directives, NIST standards, RMF controls, JSIG, and/or CMMC</li> <li>Experience with certifying compliance of various operating systems.</li> <li>Ability to evaluate effectiveness, suitability, survivability and interoperability of systems, relating to Cybersecurity and provide key feedback to improve the overall Cybersecurity posture </li> <li>Ability to research and develop solutions to emerging cyber threats.</li> <li>Proficient with Microsoft Word, Microsoft Excel, OneDrive </li> <li>Self-starter with ability to work independently</li> <li>Ability to understand, explain, interpret, and apply rules, regulations, directives, and procedures</li> <li>Have a deep understanding of computer operating systems, hardware, and software </li> </ul> Preferred experience, skills, and abilities <ul> <li>Have an active Top Secret security clearance or recently active clearance within 24 months</li> <li>Possess a current DoD 8570 certification (Security+, CISSP, etc.)</li> <li>Four-year degree in Information Technology, Cybersecurity, Computer Science or related field</li> <li>Python, PHP, Perl, PowerShell, or Bash scripting experience.</li> <li>Experience working with the ELK stack.</li> <li>Experience administering the system functions including security policies and account management of Microsoft Windows and Server as well as Linux/Unix-based systems.</li> <li>Have experience with VMware or other virtualization software.</li> <li>Experience with Azure, AWS, or similar cloud environments</li> <li>Have experience working in or directly supporting the DoD or other U.S. government entities</li> <li>Incident handling experience </li> </ul>BenefitsAs a small business, SciTec, Inc. offers room for growth and a flexible, fast-paced work environment. We work daily to develop one-of-a-kind solutions for challenging national problems. SciTec encourages collaboration across our offices in Boulder, El Segundo, Dayton, Huntsville, Virginia, and our headquarters in Princeton, and provides access to opportunities across the corporate spectrum. Initiative is expected and encouraged, all employees have the opportunity and flexibility to broaden their technical horizons, and our daily work makes an impact on the world around us. SciTec offers a highly competitive salary and benefits package, including a variety of benefits including health insurance, parental leave, vision, life, and disability insurance, 401(k)plan with employer contribution, holidays and paid time off plans (including vacation and sick time), an annual profit-sharing plan, and an annual performance bonus plan. The salary range for this position is $87,000 to $20,000; however, SciTec considers several factors when extending an offer of employment, including but not limited to, the role and associated responsibilities, a candidate’s work experience, education/training, and key skills. This is not a guarantee of compensation. SciTec is committed to hiring and retaining a diverse workforce and is proud to be an Equal Opportunity/Affirmative Action employer.

Information System Security Officer (ISSO)

Apply to Vmware Cyber Security Jobs in companies remotely and near you. New Vmware Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Sr Enterprise Security Engineer II at Rubrik	Full Time Analyst Windows Automation AWS
Information Systems Security Manager (ISSM) at SciTec	Full Time Manager DOD Windows AWS
CyberSecurity Analyst, Cyber Fusion Team, MSS \| Knoxville, TN at Avertium	Full Time Analyst Contract Windows Active Directory
Lead Vulnerability Management Engineer at Stitch Fix	Remote Full Time Windows Active Directory Automation
Information System Security Officer (ISSO) at SciTec	Full Time Manager DOD Windows AWS

Vmware Cyber Security Jobs

0 Vmware Cyber Security Jobs. Page 1 of 1

5 closed vmware cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Vmware Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Vmware Cyber Security Jobs

0 Vmware Cyber Security Jobs. Page 1 of 1

5 closed vmware cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Vmware Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter