CRI Group

Tasks: 
<ul>
<li>Define security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, network security appliances, and host-based security systems</li>
<li>Develop and validate baseline security configurations for operating systems, applications, and networking and telecommunications equipment</li>
<li>Perform internal and external technical control and vulnerability assessments to identify control weaknesses and assess the effectiveness of existing controls, and recommend remedial action</li>
<li>Perform source code reviews</li>
<li>Perform network and application penetration testing ( Black box, Grey box and White box)</li>
<li>Defining detailed security architecture</li>
<li>Performing technical security audits</li>
<li>Perform log analysis and security monitoring</li>
<li>Perform IT infrastructure/ Application Security configuration reviews</li>
<li>Design and implement technical security mechanisms and technologies</li>
<li>Design and develop technical security standards and procedures</li>
</ul>
Tasks in more details:
<ol>
<li>Security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, system security appliances, and host‐based security systems</li>
<li>Plan, coordinate, and perform programming for all security systems and other IT integrated components to meet eu‐LISA and system operational needs</li>
<li>Review of design physical security systems installed as to meet eu‐LISA needs according to best industry practice and Agency guidelines</li>
<li>Perform internal and external technical control and vulnerability assessments to identify control weaknesses and assess the effectiveness of existing controls, and recommend remedial action.</li>
<li>Determine material quantities in the amounts needed to complete projects as per the first Agency planning for the current Building Project</li>
<li>Develop and create systems documentation, including full review and correction of systems drawings, systems installation drawings, and other systems documentation</li>
<li>Ensure that physical security systems are being installed, programmed, tested, and commissioned according to Agency needs and best practice standards</li>
<li>Ensure that physical security systems are being properly maintained, reprogrammed, retested, and repaired according to Agency needs and best practice standards</li>
<li>Performing technical and security audits as to ensure optimal security systems’ performance</li>
<li>Security monitoring and log analysis</li>
<li>Review of design of the GTC / Facility system connections to the Hypervision system as to allow effective monitoring of the well‐being of the Data center and all related equipment in order meet the business continuity needs and the best standards</li>
<li>Design and implement technical security mechanisms and technologies</li>
<li>Design and develop technical security standards and procedures.</li>
<li>Attend dedicated and administrator trainings as to master the security systems. Such would require the CCTV System training / Access System Training / Hypervision System training / Fire detection and extinguishing system and all related trainings (Facility system included) as to perform the works required</li>
<li>Develop and perform effective security systems training sessions for relevant staff, notably the Physical Security Coordinators and the Guarding Force.</li>
<li>Performing any other activity related to the security and management of the IT corporate infrastructure or other systems under eu‐LISA’s responsibility.</li>
</ol>
Education requirements:
<ul>
<li>Minimum 4 years of relevant education (master or equivalent) after the secondary</li>
</ul>
Minimum experience requirements:
<ul>
<li>Minimum 6 years of relevant professional experience in IT Security</li>
</ul>
Additional needed qualification, knowledge and skills: 
Expected to possess advanced knowledge of/in:
<ul>
<li>Security best practice guidelines (ISO 27001, NIST, SANS Top 20 OWASP, etc.)</li>
<li>Good practice in the secure configuration of servers, network devices and applications</li>
<li>Networking protocols and application communications</li>
<li>Network analysis tools</li>
<li>Securing Unix and Windows operating systems</li>
<li>Securing middleware and applications.</li>
<li>Network penetration testing</li>
<li>Web application penetration testing</li>
<li>Vulnerability assessments</li>
<li>Forensic image collection and analysis</li>
<li>Managing/deploying the following security technologies: Firewalls; IDS/IPS - Intrusion detection/Prevention Systems, SIEM – Security information and event management; IAM – Identity and access management; APT – Advanced Persistent threat detection; DLP – Data loss prevention; VA – Vulnerability Analysis and mitigation; PKI – Public key infrastructure; Virtual environments; Endpoint security; Mobile security; Communications and data encryption ; Remote access methods; Backup and disaster recovery methodologies; Patch management technologies and processes; Wireless protocols and services</li>
<li>Open Web Application Security Protocol (OWASP) and secure software development standards</li>
<li>Performing security code reviews.</li>
<li>Security monitoring, threat detection and incident response;</li>
<li>Proactively and iteratively searching through networks and applications to detect and isolate advanced threats that evade existing security solutions (Cyber threat hunting);</li>
<li>Security operations engineering (e.g. implementation of defensive measures, threat intelligence production);</li>
<li>Linux administration, TCP/IP, Network Security.</li>
<li>Security configuration reviews of IT Infrastructure and security devices, OS, Databases etc.Expected to possess one or more of the following qualifications:
<ul>
<li>Certified Information Systems Security Professional with Information Systems Security Architecture Professional concentration (CISSP-ISSAP)</li>
<li>Certified Information Security Manager (CISM)</li>
<li>Certified Information Systems Auditor (CISA)</li>
<li>OSCP, OSCE, GPEN, CEH, CCNA, CCNP</li>
</ul>
</li>
</ul>
Security clearance requirements: 
<ul>
<li>EU Secret</li>
</ul>
WHO WE ARE?
CRI company part of VASS Group, leads the digital transformation and cyber security in the European Union.
CRI operates serving the European Union Institutions, telecom operators, financial institutions and governmental bodies through a comprehensive offering of services and technologies.
Please visit our website and let's get in touch: <a href="https://cri-group.eu/" rel="noopener noreferrer nofollow ugc" target="_blank">www.cri-group.eu</a>

Strasbourg

IT Security Specialist

Amazon.com

Job summaryThe AWS Industry Products Organization is chartered to build new, general availability software for Supply Chain, Automotive, Energy, Sustainability and Manufacturing industries. We apply Amazon’s innovation mechanisms alongside with external customers, outcome-drive engineering mechanisms, and AWS digital technologies to produce outcomes that address real world industry problems. We dive deep with industry leaders to solve problems and unblock large industry players, enabling them to capitalize on new digital business models. We are looking to build a team of security engineering professionals that can guide software engineers, solution architects, and product managers within Amazon and its external partners to achieve our mission. A day in the lifeIn this role, you will: conduct proactive vulnerability assessments perform penetration testing, both white box and black box  provide mitigations and validate solutions for findings originating from assessments  facilitate security reviews, act as a lesion between engineering and security organizations to define threat models and mitigate them  evaluate and recommend new security tooling and technologies, automate defense and offensive security for the organization  develop, interpret, and implement security policies and procedures to ensure general security awareness  … and much more! Note: While the majority of our team is based in the Seattle, WA areas, by applying to this position your application will be considered for all locations we hire for in the United States, including but not limited to: Seattle, Austin, New York, Arlington and Bay Area.<h3>Basic Qualifications</h3> Bachelor’s degree in Computer Science, Electrical Engineering and Computer Science, or 3+ years relevant work experience in any of application security, security engineering, working closely with development teams to deliver commercial software, services or hardware devices 3+ year of experience with the application of threat modeling or other risk identification techniques Experience with security engineering, system and network security, authentication and security protocols, cryptography, and application security Experience with the application of threat modeling or other risk identification techniques Software development experience in Java, C, and C++. Experience with scripting languages such as Python, Perl, or Ruby<h3>Preferred Qualifications</h3> Master’s degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent Experience with hardware security, system and network security, authentication and security protocols, cryptography, and application security 3+ year of development experience in C, C++, and/or assembly (x86, x86-64, ARM) Knowledge of common wireless connectivity protocols (e.g., Bluetooth, WiFi, 802.15.4) Knowledge of hardware security mechanisms, including secure boot, trusted execution environments Knowledge of operating system internals, with emphasis on Linux and common RTOS environments Familiarity with system security vulnerabilities and remediation techniques, including penetration testing and the development of exploitsAmazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.

Austin

Security Engineer, AWS Industry products

Yugabyte

At Yugabyte, we are on a mission to build the default database for cloud native applications in a multi cloud world. We are well underway on this journey with YugabyteDB, the open source, high-performance, distributed SQL database that runs on any cloud and enables developers to get instantly productive using well-known APIs. And the best is yet to come! We are looking for talented and driven people to join us on our ambitious mission and help us build a lasting and impactful company.We are looking for a security engineer assurance who is passionate about cybersecurity and enjoys working  in a fast-paced startup environment, and who has a strong desire to learn new technologies.The Security Engineer manages the vulnerability management program and tooling, performs security assessments and leads major security initiatives: Web Application Security, Least-privilege principle, Secrets Management, Key Management, PKI and Certificate Management, Anti-fraud protection. Responsibilities also include incident response and root cause analysis
<h3>Responsibilities:</h3>
<ul>
<li>Manage security tools(Snyk, Fossa, Trivy)</li><li>Manage vulnerability programs. Triage vulnerabilities, assign priorities and owners, follow up on the mitigation </li><li>Monitor license violations.  </li><li>Perform Security Assessments and Threat Modeling</li><li>Security Incident Response. Be part of security-on-call team in PagerDuty, act as incident commander, perform Root Cause Analysis </li><li>Drive security initiatives(Web Application Security, Least-privilege principle, Secrets Management, Key Management, PKI and Certificate Management, Anti-fraud protection)</li><li>Given our fast pace and startup nature, things change over time and your job responsibilities will too.</li></ul>
<h3>Requirements:</h3>
<ul>
<li>BS/MS degree</li><li>Web application security experience</li><li>Familiarity with a modern SaaS infrastructure and application development</li><li>Manual and/or automated Penetration Testing (white box, black box &amp; gray box)</li><li>Experience in scripting languages(BASH, Python, JS, etc) </li><li>Good understanding of security risk(OWASP Top 10)</li><li>Nice-to-have: CEH, CSSLP, GIAC, OSCP, OSCE, or other related industry recognized certifications </li><li>Familiarity with major security protocols </li><li>Collaboration, transparency and integrity</li></ul>Interview Process: Health and safety remain a top priority for all of our roles. As such, all Yugabyte interviews are held virtually, so we can all continue doing our part with social distancing and containment efforts. Although we are based in Silicon Valley, we hire exceptional folks wherever they are! Our process usually lasts 2-3 weeks, and consists of a phone screen, Zoom interviews including senior leaders.Our Benefits: Remote workCompetitive SalaryFull Health BenefitsMonthly Wellness ReimbursementInternet and Phone ReimbursementHome Office Setup ReimbursementEqual Employment Opportunity Statement:As an equal opportunity employer, Yugabyte is committed to a diverse workforce. Employment decisions regarding recruitment and selection will be made without discrimination based on race, color, religion, national origin, gender, age, sexual orientation, physical or mental disability, genetic information or characteristic, gender identity and expression, veteran status, or other non-job related characteristics or other prohibited grounds specified in applicable federal, state and local laws.#LI-Remote

United States

Security Engineer, Assurance

Xtremax

We are looking for experienced security professionals who can help our clients achieve a secured environment for their applications and web information. You must have strong experience in performing penetration testing and vulnerability management services for applications, network systems, operating systems and databases. Candidates should have experience with black box, grey box, and white box testing. Selected candidates will work on a whole-of-government platform that hosts close to 500 web applications.Responsibilities <ul><li>Conduct security assessments such as penetration and vulnerability tests </li></ul><ul> <li>Keep updated on knowledge of the IT security industry: including awareness of new or revised security solutions, security standards, trends / best practices, offensive techniques and tools </li> <li>Perform Blackbox/Graybox testing of Web/Mobile/Thick client applications </li> <li>Perform Network Vulnerability Assessments and Penetration Testing </li> <li>Risk Evaluation of observed vulnerabilities based on common risk scoring techniques such as CVSS </li> <li>Knowledge-share with team on techniques and results </li> </ul><ul> <li>Create detailed report of findings and recommendations after testing is complete and present to stakeholders </li> <li>Coordinate with developers/stakeholders on the findings for appropriate fixes </li> <li>Stay up-to-date in current tools, techniques, and vulnerabilities to incorporate into testing practices</li> </ul>Requirements<ul> <li>Minimum 3 years experience in specifically Security Testing function</li> <li>Degree in Computer Science / IT Security or other related disciplines</li> <li>Should be OSCP or CREST CRT Certified</li> <li>Minimum 3 years experience in Security Testing</li> <li>Should have an overall exposure and understanding of Application and Network Security testing</li> </ul><ul> <li>Strong knowledge of the OWASP Top 10, OWASP Mobile Top 10, SANS top 25. Detailed knowledge of common web application attack vectors such as SQL injection, CSRF, XSS, Session Management issues, Insecure Direct Object reference, Click jacking, buffer overflows, etc.</li> <li>Experience in manual application penetration testing of web- based applications, thick- client applications, mobile applications, web services, API s etc.</li> <li>Experience in Source Code Review of applications</li> <li>Experience in manual mobile application penetration testing on platforms like Android, IOS, etc both client and server side applications.</li> <li>Should have knowledge on Risk Rating Standards like DREAD, CVSS etc.</li> </ul><ul> <li>Experience in automated web application vulnerability scanners (e.g. Web inspect, Burp suite Pro, etc)</li> <li>Should have performed Black Box / Grey Box Application penetration testing.</li> <li>Good understanding of application protocols such as HTTP, SAML, OAUTH, OpenID Connect, etc.</li> <li>Good understanding of network technologies and protocols such as NIPS, IDS, TLS/SSL, DLP, firewalls, WAF, DNS and other common technologies and protocols.</li> <li>Experience in performing Network Penetration Testing for both internal and external networks.</li> </ul><ul> <li>Knowledge in end-to-end flow on executing application and network penetration testing</li> <li>Should be able to work as individual contributor or as team player wherever required </li> </ul>By submitting your resume/CV, you consent and agree to allow the information provided to be used and processed by or on behalf of Xtremax Pte Ltd for purposes related to your registration of interest in current or future employment with us and for the processing of your application for employment.You also represent to us that you have obtained the consent of your referees when you disclose to us their personal data for the purpose of conducting reference checks.The personal data held by us relating to your application will be kept strictly confidential and in accordance with the PDPA. You may also refer to our Privacy Policy for more details here: <a href="https://www.xtremax.com/privacy-policy" rel="noopener noreferrer nofollow ugc" target="_blank">https://www.xtremax.com/privacy-policy</a>We regret to inform you that should you not consent to providing the necessary data required for us to process your application, your application will be considered void.

Singapore

IT Security Consultant

ID.me

<h3>Company Overview</h3>
ID.me is simplifying how individuals securely prove and share their identity online. With their secure digital identity network, ID.me is doing for identity what Visa did for financial transactions. ID.me empowers people to fully control their own data through a portable and trusted login so they don’t need to create a new password at each site they visit.
The COVID-19 pandemic has accelerated a massive digital migration for many critical services. These services require a trusted identity to ensure an individual is who they claim to be while keeping out fraud. Identity verification that serves only one organization is costly and time-intensive. Separate passwords for each application add to consumer frustration. With ID.me, login and identity credentials move with an individual so they only need to verify once.
ID.me is a federally-certified identity provider at the highest standards NIST has set for consumer identity verification and login. ID.me is one of only four companies in the United States of America certified by the federal government to bind a legal identity to a digital login. 
In addition to providing individuals with complete control over their credentials and data, the company has a “No Identity Left Behind” initiative to expand access and inclusion for all individuals through a video chat verification process. ID.me is passionate about building a robust identity network that does not compromise access for hard-to-identify groups.
<h3>Role Overview</h3>
ID.me is looking for a Principal Application and Product Security Architect to add to our growing security team. As ID.me continues to expand at a rapid pace, we need strong security professionals to help build highly scalable and secure products. Our Principal Application Security Architect will have the opportunity to provide thought leadership in the areas of secure software development, deployment pipelines, testing practices, and product vulnerability management. 
<h3>Responsibilities</h3>
<ul>
<li>Assist in the development and maintenance of secure software development lifecycle methodologies and pipelines to ensure security is part of every phase of development and deployment</li>
<li>Support the creation and deployment of a rigorous threat modeling methodology to be used as a foundation for risk management, development priorities, and testing schedules</li>
<li>Brainstorm opportunities to improve time to market by improving the efficiency and effectiveness of the product and application security process</li>
<li>Influence and participate in activities to support theIntegration of security controls throughout the SDLC</li>
<li>Perform design reviews of new applications and products</li>
<li>Provide developer education and awareness about secure coding principles</li>
<li>Participate in the security testing efforts against our applications, including code reviews, black/white box testing of applications, and maintaining a continuous testing methodology</li>
</ul>
<h3>Desired Qualifications</h3>
The qualifications below are ideal, but not all are required.  We encourage candidates to apply if they satisfy some, but not all of the qualifications.
<ul>
<li>10+ years of experience in information security or equivalent experience</li>
<li>7+ years of experience in hands-on application and product security disciplines or equivalent experience</li>
<li>Experience with threat modeling, systems analysis, and/or security design reviews</li>
<li>Excellent written and verbal communication skills</li>
<li>Understanding of application and product architectures, scripting based programming languages, web application stacks, and general approaches to implementation of an SDLC</li>
<li>Demonstrate excellent judgement in prioritizing security efforts to mitigate the appropriate risks</li>
<li>Ability to identify, analyze, and explain the present or future needs for proposed security initiatives to senior management</li>
<li>Ability to influence with empathy and compassion</li>
</ul>
Ideal candidate will thrive in our culture if they have a passion for:
<ul>
<li>Building quality products with a mindset on safety and security</li>
<li>Operating in a fast-moving and high-growth environment</li>
<li>Working as a team player with an entrepreneurial work ethic</li>
<li>Security, learning and continuous improvement</li>
</ul>
Note that candidates must be located in the continental U.S.

ID.me Covid Vaccination Requirement
ID.me has a mandatory vaccination requirement where not prohibited by applicable federal or state law.
All current and future employees are required to receive their COVID-19 vaccinations, unless a reasonable accommodation is approved. Employees not in compliance with this policy will be placed on leave and will be terminated if no valid reason for not getting the COVID-19 vaccine is provided.  
Purpose: In accordance with ID.me's duty to provide and maintain a workplace that is free of known hazards, we are adopting this policy to safeguard the health of our employees and their families; our customers and visitors; and the community at large from COVID-19 that may be reduced by vaccinations. This policy will comply with all applicable laws and is based on guidance from the Centers for Disease Control and Prevention and local health authorities, as applicable.
Reasonable Accommodation: Current and future employees in need of an exemption from this policy due to a medical reason, or because of a sincerely held religious belief must submit a completed Request for Accommodation form to the human resources department to begin the interactive accommodation process as soon as possible after vaccination deadlines have been announced (September 13th) and an offer of employment has been made. Accommodations will be granted where they do not cause ID.me undue hardship or pose a direct threat to the health and safety of others.

Vision: To be the world's leading digital identity network empowering people to control their own information and to prove their credentials across all channels: online, call center, and in-person.
Mission: To make the world a more trusted place by delivering the highest level of security with the least amount of friction at the lowest possible cost. 
People: We have an audacious mission. We aim to fix the identity layer of the internet. Billions of people will live better lives with more trust and convenience thanks to<a href="https://id.me/" rel="noopener noreferrer nofollow ugc" target="_blank"> ID.me</a>. We are like Special Forces. We take on the most difficult challenges with amazing teammates.  
<a href="https://id.me/" rel="noopener noreferrer nofollow ugc" target="_blank">ID.me</a> Core Values: *Don't be a jerk. *Always compete. *Ask questions like a 5-year old. *Inspire people with your passion. *Make something better every day. *Treat each customer like your favorite family member. *Own your mistakes so you can learn from them. *Details are everything. *Communicate like a scientist. *Be truthful (even when it's hard). *Reflect <a href="https://id.me/" rel="noopener noreferrer nofollow ugc" target="_blank">ID.me</a>'s values in your actions. *Act like an owner.
ID.me Career Site &amp; Culture Deck: <a href="https://www.id.me/careers" rel="noopener noreferrer nofollow ugc" target="_blank">https://www.id.me/careers</a>
ID.me maintains a work environment free from discrimination, where employees are treated with dignity and respect. All ID.me employees share in the responsibility for fulfilling our commitment to equal employment opportunity. ID.me does not discriminate against any employee or applicant on the basis of age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. ID.me adheres to these principles in all aspects of employment, including recruitment, hiring, training, compensation, promotion, benefits, social and recreational programs, and discipline. In addition, ID.me's policy is to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws, regulations and ordinances where a particular employee works. Upon request we will provide you with more information about such accommodations. 
Please review our Privacy Policy, including our CCPA policy, at <a href="http://id.me/privacy" rel="noopener noreferrer nofollow ugc" target="_blank">id.me/privacy</a>. If you provide ID.me with any personally identifiable information you confirm that you have read and agree to be bound by the terms and conditions set out in our Privacy Policy.
ID.me participates in E-Verify.

Mclean

Principal Application &amp; Product Security Architect (Remote)

Apply to White Box Cyber Security Jobs in companies remotely and near you. New White Box Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
IT Security Specialist at CRI Group	Application Security APT Audits Black Box CEH
Security Engineer, AWS Industry products at Amazon.com	Application Security AWS Black Box C Cryptography
Security Engineer, Assurance at Yugabyte	Application Security BASH Black Box CEH GIAC
IT Security Consultant at Xtremax	Android Black Box Burp Suite Crest DNS
Principal Application & Product Security Architect (Remote) at ID.me	Application Security CCPA NIST Privacy Product Security

White Box Cyber Security Jobs

0 White Box Cyber Security Jobs. Page 1 of 1

5 closed white box cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

White Box Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

White Box Cyber Security Jobs

0 White Box Cyber Security Jobs. Page 1 of 1

5 closed white box cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

White Box Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter