About the Team: 
The Security team at STR is comprised of highly skilled professionals who are responsible for maintaining compliance IAW with Government protocol and directives.   
The Classified Cybersecurity (CCS) team consists of a collaborative group of ISSM’s, ISSO’s, and ISSE’s who are passionate about national security that take great pride in maintaining confidentiality, integrity, and availability of our systems.   
The Role: 
STR has an exciting opportunity for an ISSM that will be responsible for classified programs Cybersecurity/Risk Management Framework (RMF) posture in accordance with government directives and program requirements.   
In this dynamic position you will interface directly with the government cognizant security agency (CSA) and collaborate with other Cybersecurity professionals, Security professionals, System Administrators, engineering community, and other government customers on overall compliance and configuration change management. 
Please note…this is not a remote and/or hybrid role and a requires you to be onsite. 
What you will Do: 
<ul>
<li>Responsible for the Cybersecurity program as stipulated by various US Government requirements including (but not limited to): Joint Special Access Implementation Guide (JSIG), National Industrial Security Operating Manual (NISPOM), and the DCSA Assessment and Authorization Process Manual (DAAPM) </li>
<li>Supervisor and Team Lead for assigned Cybersecurity staff supporting accredited networks </li>
<li>Monitor cybersecurity compliance by performing periodic self-inspections, tests, and reviews of information systems to ensure that workstations/servers are operating as authorized/accredited </li>
<li>Coordinate with program/project stakeholders, Cybersecurity staff (other ISSM’s, ISSO’s, ISSE’s), the Facility Security Officer (FSO), Contractor Program Security Officer (CPSO), and other Security and IT team members to define, implement and maintain an acceptable information systems security posture </li>
<li>Maintain day-to-day security posture and continuous monitoring of IS including security event log review and analysis </li>
<li>Performs Assessment and Authorization (A&amp;A) activities such as information system certification testing of required configuration controls and preparing/maintaining various documentation including Standard Operating Procedures (SOP), System Security Plan (SSP), Risk Assessment Report (RAR), Security Controls Traceability Matrix (SCTM), etc. </li>
<li>Manages and maintains Continuous Monitoring (ConMon)/Plan of Action and Milestones (POA&amp;M) reports </li>
<li>Responsible for security sustainment activities including (but not limited to): hardware change management, software change management, account management, media protection, user interface, file transfers, etc</li>
<li>Assists the FSO, CPSO and Computer <a href="https://infosec-jobs.com/insights/incident-response-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">Incident Response</a> Team (CIRT) in data spill incident response </li>
<li>Maintain thorough understanding of NIST 800-53 controls, determines controls applicable to the application, and documents control implementation in the SCTM </li>
<li>Perform other tasks as assigned by manager </li>
</ul>
Who you Are:  
<ul>
<li>This position requires an active Top Secret security clearance, with the ability to obtain an SAP and SCI access for which U.S. citizenship is needed by U.S. Government  </li>
<li>Two (2) to four (4) years’ experience as an ISSM implementing DAAPM, JSIG, and/or ICD503 IS requirements </li>
<li>DoD 8570 IAM Level III certification (CISM, CISSP, etc.) or the ability to obtain within 6 months upon being hired </li>
<li>Experience with configuration/certification and auditing/analysis of Windows/Linux operating systems in a Peer-to-peer, LAN &amp; WAN network environment </li>
<li>Familiarity/understanding using authorization/accreditation databases (eMASS, Xacta, etc.) </li>
<li>Excellent communications skills </li>
<li>Demonstrated strong critical thinking and problem-solving skills </li>
<li>Detail oriented and self-motivated </li>
<li>Ability to effectively prioritize multiple projects </li>
<li>Ability to work with people in a team environment and deal effectively with changing project priorities </li>
<li>Strong customer service skills </li>
</ul>STR is a growing technology company with locations near Boston, MA, Arlington, VA, near Dayton, OH, Melbourne, FL, and Carlsbad, CA. We specialize in advanced research and development for defense, intelligence, and national security in: cyber; next generation sensors, radar, sonar, communications, and electronic warfare; and artificial intelligence algorithms and analytics to make sense of the complexity that is exploding around us.
STR is committed to creating a collaborative learning environment that supports deep technical understanding and recognizes the contributions and achievements of all team members. Our work is challenging, and we go home at night knowing that we pushed the envelope of technology and made the world safer.
STR is not just any company. Our people, culture, and attitude along with their unique set of skills, experiences, and perspectives put us on a trajectory to change the world. We can't do it alone, though - we need fellow trailblazers. If you are one, join our team and help to keep our society safe! Visit us at <a href="http://www.str.us/" rel="noopener noreferrer nofollow ugc" target="_blank">www.str.us</a> for more info.
STR is an equal opportunity employer. We are fully dedicated to hiring the most qualified candidate regardless of race, color, religion, sex (including gender identity, sexual orientation and pregnancy), marital status, national origin, age, veteran status, disability, genetic information or any other characteristic protected by federal, state or local laws.
If you need a reasonable accommodation for any portion of the employment process, email us at <a href="mailto:appassist@str.us" rel="noopener noreferrer nofollow ugc" target="_blank">appassist@str.us</a> and provide your contact info.
Pursuant to applicable federal law and regulations, positions at STR require employees to obtain national security clearances and satisfy the requirements for compliance with export control and other applicable laws.

Information Systems Security Manager (ISSM)

Coupang

Company Introduction 
We exist to wow our customers. We know we’re doing the right thing when we hear our customers say, “How did we ever live without Coupang?” Born out of an obsession to make shopping, eating, and living easier than ever, we’re collectively disrupting the multi-billion-dollar e-commerce industry from the ground up. We are one of the fastest-growing e-commerce companies that established an unparalleled reputation for being a dominant and reliable force in South Korean commerce.

We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurial surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At Coupang, you will see yourself, your colleagues, your team, and the company grow every day. 

Our mission to build the future of commerce is real. We push the boundaries of what’s possible to solve problems and break traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world.

Job Overview
The Director of Security Technical Program Management is an interdisciplinary security leadership role in the Security Organization (Information Security, Privacy, Governance, Risk, Compliance).  You will lead the planning, communication, tracking and execution of highly technical security initiatives and transformative programs and projects. You will work closely with the Chief Information Security Officer, Internal Control, Finance, Communications, Compliance and other security and engineering leaders.  

Key Responsibilities
Responsibilities will include, but not be limited to, the following:
<ul>
<li>Manage technical security projects and programs, defining milestones and success criteria, resource allocation, and successful on-time delivery.</li>
<li>Define and lead strategy, tactical planning and execution of multiple technical programs and projects across the Security Organization, and in close collaboration with internal partner organizations and teams.</li>
<li>Work with various product and domain owners to come up with solutions to address security, privacy and compliance issues.</li>
<li>Strengthen Coupang’s overall security posture and culture by acting as the bridge between security, engineering, product, infrastructure and other technical teams, while coordinating high impact security programs and projects.</li>
<li>Standardization and optimization of project reporting.</li>
<li>Enhance our capabilities to protect Coupang, our customers and partners.</li>
</ul>

Basic Qualifications
<ul>
<li>Bachelor’s degree in Computer Science or a related technical discipline.</li>
<li>15+ years of technical program, project or product management and/or software engineering experience.</li>
<li>Proven experience moving large scale technical programs from inception to delivery and articulating progress and impact through clear metrics, analytics and reporting.</li>
<li>Ability to solve problems through creative thinking and partnerships with other teams.</li>
<li>Highly organized and with the ability to multi-task and context switch effectively.</li>
<li>Drive consensus between stakeholders through skilled communication and collaboration.</li>
<li>Skilled communicator with acute active listening abilities.   </li>
</ul>

Preferred Qualifications
<ul>
<li>Exposure to security concepts, problems and solutions</li>
<li>Experience with agile development or methodology, DevOps CI/CD or secure development lifecycle practices</li>
<li>Has worked in a high growth, fast-paced, start-up environment</li>
<li>Led or participated in establishing and running a Project Management Office (PMO)</li>
<li>Certified Project Management Professional (PMP) or Program Management Professional (PgMP), CISSP, CISM, CISA, Cloud certificates</li>
<li>Experience in leading audit and compliance program including PCI-DSS, ISO.</li>
<li>Experience in handling cyber security regulatory matters</li>
</ul>

Recruitment Process &amp; Others
Recruitment Process  
<ul>
<li>Application Review - Phone Interview - Onsite (or Virtual Onsite) Interview – Offer  </li>
<li>The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances.  </li>
<li>Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage.  </li>
</ul>
Details to Consider  
<ul>
<li>This job posting may be closed prior to the stated end date for application if all openings are filled.     </li>
<li>Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process.     </li>
<li>Coupang does not discriminate against disabled applicants or those with veteran status. We are proud to offer equal opportunities for all applicants.  </li>
<li>Job titles and responsibilities may be subject to change depending on the candidate’s overall experience, etc. This will be communicated to the candidate at the appropriate time before the offer. </li>
</ul>
Privacy Notice  
<ul>
<li>Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below.  </li>
<li><a href="https://www.coupang.jobs/en/privacy-policy/" rel="noopener noreferrer nofollow ugc" target="_blank">https://www.coupang.jobs/en/privacy-policy/</a></li>
</ul>

Document Return Policy  
<ul>
<li>This notification is given pursuant to Article 11 (6) of the Fair Hiring Procedure Act.   </li>
<li>A job applicant, who has applied but not been finally selected for a position at Coupang (the “Company”), may request the Company to return his/her hiring documents submitted pursuant to the Fair Hiring Procedure Act.  However, this will not apply where the hiring documents were submitted via the website of the Company or e-mail, or where the job applicant submitted those documents voluntarily without a request from the Company.  In addition, if the hiring documents were destroyed due to a natural disaster or any other reasons not attributable to the Company, such documents will be deemed to have been returned to the job applicant.  </li>
<li>A job applicant who wishes to request the return of his/her hiring documents pursuant to the main sentence of paragraph 2 above should fill out a “Request for Return of Hiring Documents” [Annex Form No. 3 in the Enforcement Rule of the Fair Hiring Procedure Act] and submit the request to the Company (Coupang Recruiting Team, Tower 730, 570 Songpa-daero, Songpa-gu, Seoul). In such case, within fourteen (14) days from the date of identifying the receipt of the request, the Company will send the hiring documents to the job applicant’s designated address via registered mail.  Please be informed that the job applicant is required to pay the postage on the registered mail.  </li>
<li>In preparation for a job applicant’s request for the return of hiring documents pursuant to the main sentence of paragraph 2 above, the Company shall retain the original hiring documents submitted by the job applicant for 180 days from the completion of the recruiting process.  If no request is made until the end of this period, all of his/her hiring documents will be destroyed immediately in accordance with the Personal Information Protection Act. </li>
</ul>

Senior Staff Engineer, Technical Program Management (Information Security)

Node.Digital

Senior Cyber Security EngineerLocation: Dulles, VAMust have an active Secret Security ClearanceNode is supporting a U.S. Government customer on a large mission-critical development and sustainment program to design, build, deliver, and operate a network operations environment, including introducing new cyber capabilities to address emerging threats.Node is seeking a Senior Cyber Security Engineer to support the design, development, and deployment of advanced cybersecurity capabilities.The Sr Cyber Security Engineer designs, develops, documents, analyzes, tests, integrates, debugs, conducts research, and/or discovers and analyzes security flaws or vulnerabilities in software, networks, systems, and applications. The Senior Cyber Security Engineer ensures system security needs are established and maintained for various objects/matters.Responsibilities:• Identify Security Requirements for systems.• Ensure security requirements are planned, implemented, and tested.• Test and verify requirements are implemented and documented for ATO purposes.• Manage RMF process to obtain and maintain system ATO.• Responsible for reviewing and commenting on security risks and security issues related to any Change Requests, Infrastructure Change Requests, and Configuration Change Requests• Analyze output from various security devices and malware and incident reports to improve detection of and to minimize future incidents.• Assess and analyze system security to identify and mitigate risks and vulnerabilities.• Recommend countermeasures to mitigate risks and vulnerabilities.• Prepare/Update documentation, including incident reports, security recommendations, etc.• Assist in identifying, prioritizing, and coordinating the protection of critical cybersecurity infrastructure and key resources.• Perform basic system design functions, including interpretive analyses, chart preparation, and associated diagrams/enhancement plans.• Test existing and new technologies.• Review/analyze requested changes for equipment, technology, and/or other factors/trends, which are planned for deployment in the customer space.• Support the configuration and administration of cyber security tools and systems.RequirementsRequired Skills:• U.S. Citizenship• Must hold an active Secret clearance and be able to obtain a TS/SCI clearance• Must be able to obtain DHS Suitability• 6+ years of applicable experience in cybersecurity• Experience with commercial cyber tools and technologies• Experience with standard security principles, policies, standards, and industry best practices• Experience and knowledge of networking (TCP/IP, topology, sockets, and security) and web technologies (Internet security)• Experience or knowledge of intrusion detection and prevention systems (IDS/IPS), log analysis, malware analysis, network traffic flow and packet analysisDesired Skills:• Experience in ServiceNow• Experience with AWS Security Hub and Guard Duty• Experience editing /auditing Security Groups, NACLs, or Access-Lists.• Experience or knowledge of Endpoint Protection/Detection/Response and Extended Detection and Response solution• Understanding and ideally experience with Windows or Linux/Unix operating systems.• Experience with Security Event Incident Management (SEIM), Log Correlation, and Network Behavior Anomaly detection systems• Experience and/or familiarity with development languages such as Java, Swing, JUnit, Perl, Python, HTML• Demonstrated experience and/or familiarity with VMware and virtual machines.• Experience with SAFe• Experience with automated testing tools• Experience with one or more of the following:• Security COTS integration• Security Incident Event Management• Insider Threat Monitoring• Operating System hardening tools• Vulnerability assessment testing• Penetration Testing• Dynamic and Static Testing tools operations• Identification and Authentication schemes• Public Key Infrastructure and Identity Management• Cross Domain Solutions• Computer Network Exploitation (CNE)• Computer Network Operations (CNO)• Malware Analysis• Reverse Software Engineering• Ability to write custom tools and modify existing intrusion detection toolsRequired Education:BS Cyber Engineering, Computer Science, Computer Engineering, Computer Information Systems, OR a related field. Two years of related work experience may be substituted for each year of degree-level education.Desired Certifications:• Information Systems Security Engineering Professional (ISSEP)• Certified Ethical Hacker (CEH)• SANS/GIAC Reverse Engineering Malware (GREM)• ArcSight Certified Security Analyst (ACSA) or ArcSight Certified Advance Security Analyst (ACASA)- Certified Information Systems Security Professional (CISSP)Company Overview:Node. Digital is an independent Digital Automation &amp; Cognitive Engineering company that integrates best-of-breed technologies to accelerate business impact.Our Core Values help us in our mission. They include:OUR CORE VALUESIdentifying the~RIGHT PEOPLE~and developing them to their full capabilitiesOur customer’s “Mission” is our “Mission”. Our~MISSION FIRST~approach is designed to keep our customers fully engaged while becoming their trusted partnerWe believe in~SIMPLIFYING~complex problems with a relentless focus on agile delivery excellenceOur mantra is “~Simple*Secure*Speed~” in the delivery of innovative services and solutions.BenefitsWe are proud to offer competitive compensation and benefits packages to include:<ul> <li>Medical</li> <li>Dental</li> <li>Vision</li> <li>Basic Life</li> <li>Long-Term Disability</li> <li>Health Saving Account</li> <li>401K</li> <li>Three weeks of PTO</li> <li>10 Paid Holidays</li> <li>Pre-Approved Online Training</li> </ul>

Senior Cyber Security Engineer

Company Introduction 

We exist to wow our customers. We know we’re doing the right thing when we hear our customers say, “How did we ever live without Coupang?” Born out of an obsession to make shopping, eating, and living easier than ever, we’re collectively disrupting the multi-billion-dollar e-commerce industry from the ground up. We are one of the fastest-growing e-commerce companies that established an unparalleled reputation for being a dominant and reliable force in South Korean commerce.

We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurial surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At Coupang, you will see yourself, your colleagues, your team, and the company grow every day. 

Our mission to build the future of commerce is real. We push the boundaries of what’s possible to solve problems and break traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world.

Job Overview

Coupang’s Identity &amp; Access Management (IAM) Team is responsible for managing the company’s IAM Infrastructure. IAM is responsible for providing a platform that defines and manages the correct access to enterprise assets by the right users in the right context. This is a critical position within the company that requires creative thinking, careful implementation, and the ability to effectively communicate with other teams.
As Identity and Access Management (IAM) Solutions Engineering Director, you will provide strategic direction and leadership to develop and enhance our IAM program with an in-depth knowledge of IAM tools, technologies, processes, and best practices. Your responsibilities will encompass leading the IAM solutions architecture, staying abreast of emerging trends, overseeing day-to-day IAM operations, managing the overall IAM strategic roadmap, executing related activities, and ensuring the appropriate implementation of architecture and design for our IAM technology landscape.
This role will report directly to the Head of Identity and Access Management and act as the senior IAM representative in discussions with both internal and external partners on all matters relating to IAM improvements, enhancements, and efficiency gains as outcomes from the strategy.

Key Responsibilities
Responsibilities will include, but not be limited to, the following:
<ul>
<li>In-depth knowledge of IAM technologies, including access management, access control, access review, privileged access, and identity governance and administration.</li>
<li>Build deep relationships with engineering leaders across the company to drive security risk decisions and influence technical architecture at the earliest time possible.</li>
<li>Provide expertise and leadership in the implementation of identity and access management services, such as role-based access control, frictionless access, and critical system access control.</li>
</ul>
<ul>
<li>Define, manage, and automate (where it makes sense) the end-to-end process for application security design, development, testing and deployment.</li>
<li>Act as a senior level of escalation on any issues and concerns with IAM services.</li>
</ul>

Basic Qualifications
<ul>
<li>Minimum of 10 years architecting, implementing, managing, and supporting IAM solutions</li>
<li>Minimum of 7 years in a leadership role</li>
<li>Expert experience and knowledge of Access Management systems such as Okta, Azure AD, ADFS, Ping, etc.</li>
<li>Expert experience and knowledge of Identity Governance and Administration systems such as Saviynt, SailPoint, etc.</li>
<li>Expert experience and knowledge of Privileged Access Management systems such CyberArk, BeyondTrust, Teleport, AWS SSM, etc.</li>
<li>Proficient knowledge of Dynamic Authorization systems such as Axiomatics, PlainID, etc.</li>
<li>Proficient knowledge of Active Directory, Radiant Logic FID, or a comparable product</li>
<li>Expert knowledge of DevOps/CICD/IAC for IAM and Automation/Orchestration Tools (Ansible, Jenkins, Terraform, etc.)</li>
<li>Deep knowledge on IAM controls, processes and procedures</li>
<li>Exceptional ability to consistently deliver creative, thoughtful and business-orientated results that appropriately balances growth and risk in a fast-paced and high-pressure environment</li>
<li>Ability to adapt easily to rapid and diverse business changes</li>
<li>Strong leadership skills, with the ability to inspire and motivate a team to achieve goals.</li>
<li>Excellent communication skills, both verbal and written, with the ability to articulate complex technical concepts to non-technical stakeholders.</li>
<li>Strong problem-solving skills, with the ability to identify root causes and develop solutions.</li>
</ul>

Preferred Qualifications
<ul>
<li>Okta</li>
<li>Saviynt</li>
<li>PlainID</li>
<li>Radiant Logic FID</li>
<li>Teleport, CyberArk, BeyondTrust Privileged Identity, Netwrix NPS, or a comparable product</li>
<li>Desired certification: CISSP</li>
</ul>

Recruitment Process &amp; Others
Recruitment Process  
<ul>
<li>Application Review - Phone Interview - Onsite (or Virtual Onsite) Interview – Offer  </li>
<li>The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances.  </li>
<li>Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage.  </li>
</ul>
Details to Consider  
<ul>
<li>This job posting may be closed prior to the stated end date for application if all openings are filled.     </li>
<li>Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process.     </li>
<li>Coupang does not discriminate against disabled applicants or those with veteran status. We are proud to offer equal opportunities for all applicants.  </li>
<li>Job titles and responsibilities may be subject to change depending on the candidate’s overall experience, etc. This will be communicated to the candidate at the appropriate time before the offer. </li>
</ul>
Privacy Notice  
<ul>
<li>Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below.  </li>
<li><a href="https://www.coupang.jobs/en/privacy-policy/" rel="noopener noreferrer nofollow ugc" target="_blank">https://www.coupang.jobs/en/privacy-policy/</a></li>
</ul>

Document Return Policy  
<ul>
<li>This notification is given pursuant to Article 11 (6) of the Fair Hiring Procedure Act.   </li>
<li>A job applicant, who has applied but not been finally selected for a position at Coupang (the “Company”), may request the Company to return his/her hiring documents submitted pursuant to the Fair Hiring Procedure Act.  However, this will not apply where the hiring documents were submitted via the website of the Company or e-mail, or where the job applicant submitted those documents voluntarily without a request from the Company.  In addition, if the hiring documents were destroyed due to a natural disaster or any other reasons not attributable to the Company, such documents will be deemed to have been returned to the job applicant.  </li>
<li>A job applicant who wishes to request the return of his/her hiring documents pursuant to the main sentence of paragraph 2 above should fill out a “Request for Return of Hiring Documents” [Annex Form No. 3 in the Enforcement Rule of the Fair Hiring Procedure Act] and submit the request to the Company (Coupang Recruiting Team, Tower 730, 570 Songpa-daero, Songpa-gu, Seoul). In such case, within fourteen (14) days from the date of identifying the receipt of the request, the Company will send the hiring documents to the job applicant’s designated address via registered mail.  Please be informed that the job applicant is required to pay the postage on the registered mail.  </li>
<li>In preparation for a job applicant’s request for the return of hiring documents pursuant to the main sentence of paragraph 2 above, the Company shall retain the original hiring documents submitted by the job applicant for 180 days from the completion of the recruiting process.  If no request is made until the end of this period, all of his/her hiring documents will be destroyed immediately in accordance with the Personal Information Protection Act. </li>
</ul>

Director, Identity and Access Management (Information Security)

EMW, Inc.

Previously proposed candidates were non-compliant for the following reasons: Candidate lacks knowledge of the NCDF concepts and no API design and standardization experience indicated; Candidate lacks knowledge of the NCDF concepts and of the FMN security approach/requirements not indicated Deadline Date: Thursday 23 May 2024Requirement: Specialised Consultants for Security Profile and Interface developmentLocation: OFF-SITE Note: Please refer to your Subcontract Agreement, article 6.4.1.a, which states “Off-Site Discount: 5% (this discount is applicable to all requirements, and applies when the assigned personnel are permitted to work Off-Site, such as at- home)". Please be sure to price this discount in your overall price proposal when submitting bids against off-site RFQsPeriod of Performance: Base period: 24 June 2024 – 31st December 2024 with possibility to exercise 1 (one) one‐year option: 1st January 2025 until 31st December 2025.  Start date is as soon as possible but not later than 24 June 2024Required Security Clearance: NATO SECRET1 INTRODUCTIONThe NATO Communications and Information Agency (NCI Agency) located in The Hague, The Netherlands, is involved in the development of new capabilities for NATO as well as in the support of existing capabilities. In light of these, Command and Control (C2) Service Line have a requirement for subject matter experts to be embedded with a team of NCI Agency staff in support of the Scientific Programme of Work for 2021.2 OBJECTIVESThe main objective of this statement of work are:Support the development and validation of C2 Services Enabling requirements, architectural products and technical specifications;Support the Alliance Federation information sharing concepts, services and specifications; supporting TIDE and CWIX activities and;Providing technical support for C3S activities in the area of identity and access management,  API security, Data Management and Message and Information transformation and standardisation.3 SCOPE OF WORKThe consultant is requested to participate and provide expert support to NCI Agency in the execution of scientific activities advancing the following objectives:ACT Interoperability Standardization (IOS) ‐ Joint C2 Cross‐COI Concepts: Maintenance of standards to support seamless information sharing techniques.ACT Interoperability Standardization (IOS) ‐ Joint C2 Cross‐COI Concepts (NATO Core Data Framework (NCDF) implementation development and support): Assist ACT with the maturing of the NATO Core Data Framework (NCDF), AFSC, Data Centric Security (DCS)This work will further develop and contribute to the definition of Information Sharing Scenarios for Core and C2 Services. This includes knowledge and expertise in Metadata Labelling, Binding, Binding Profiles, Label to Marking mapping, label interoperability cross domain information exchanges including , NATO Common Cross-Community Semantic Reference Model (CXCSRM) , MIP Information Model (MIM), Cross‐Domain Information Sharing (CDIS) solutions and the validation of information sharing Core and C2 Services at various exercise venues such as TIDE Sprint, CWIX and further support may be required for Steadfast Cobalt as added scope to this task.The consultants will work off‐site and regularly coordinate their efforts with the team using the Agile/Sprint procedures already established. This requires both face‐to‐face meetings and remote tele‐ or video‐conferences.The expertise is focused on:‐ requirement elicitation, formalization and validation‐ API design with specific attention to the security aspects‐ System and services architecture design‐ Design, validate, implement and test identity and data management infrastructures and API security.‐ Design, validate, implement and test messages and information transformation and standardization.Other related areas will be the technical input and validation of the NATO Core Metadata Specification (NCMS), NATO Core Data Framework (NCDF) and technical input for the NCDF adoption of the NATO Core Metadata Specification (NCMS), of the data centric security and metadata labelling.This expertise is required to supplement the current level of expertise within the C2 SL so the consultants must be ready to quickly integrate with the current team and take up duties. The work required will be based on submitted Delivery Acceptance Sheets indicating the effort completed for each of deliverables as defined below.A request for available staff has not been successful in this request for consultancy support4 DELIVARABLESThe consultant, directed from the NCIA team and following an agile methodology shall deliver:Deliverable 1 ‐ D001:The architecture for the protection of the NATO Core Data Framework API. The architecture shall adhere to the API security Best Practices, shall be based on the adoption and profiling of the NATO standards and of the Federated Mission Network (FMN) adopted protocols and methodologies. The API architecture shall cover at least the aspects of the user authentication/authorization and the propagation of the user identity to the backend services via the impersonation and/or the delegation approaches.An initial “NCDF API security implementation guide” document to guide the API implementation. It shall contain enough information to guide the implementation of the security services and the configuration of the security infrastructure.This deliverable will be provided in form a single document, the “NCDF API security architecture and implementation guide” containing both the architecture definition and the implementation guide.Deliverable 2 ‐ D002:Shall participate to the design, implementation and test of the secure NCDF Data Lake API for the NCDF Data Lake services.Those activities will be executed using the agile methodologies and the expected deliverables and timeline will be decided at runtime as part of the sprint planning activities.Deliverable 3 (Optional) ‐ D003:May participate to further improvements of the NCDF Data Lake API and of the related NCDF Data Lake services.Those activities will be executed in 2024 and will be using the agile methodologies. The expected deliverables and timeline will be decided at runtime as part of the sprint planning activities.Deliverable 4 (Optional) ‐ D004May participate to further improvements of the NCDF Data Lake API and of the related NCDF Data Lake services.Those activities will be executed in 2025 and will be using the agile methodologies. The expecteddeliverables and timeline will be decided at runtime as part of the sprint planning activities.Optional deliverables D003 and D004 may be exercised at the discretion of NCIA.For the mentioned deliverables, the consultant is expectedTo co‐author with the NCI Agency publications in international conferences and journals contributing to discoveries and advances made during the period of performance.To prepare documentation and make presentations to sponsors and stakeholders throughout the contract period. This may require the consultants to independently represent specific technical areas on behalf of NCI Agency without direct support of Agency staff e.g. TIDE Sprint, CWIX execution.5 PAYMENT MILESTONESAll of the defined deliverables are briefings, reports, designs or specifications with a well‐defined NCI Agency‐specified format.All deliverables are to be peer reviewed within the deliverable cycle. Input and guidance will be provided by NCI Agency in written from or/and during the targeted review meetings.D001: “NCDF API security architecture and implementation guide”Delivery Date: 08 July 2024Payment Milestones: 100% upon completion and acceptance of deliverables.D002:  Participation to the design, implementation and test of the secure NCDF Data Lake APIDelivery Date: 30 September 2024Payment Milestones: 100% upon completion and acceptance of deliverables.D003 (Optional): Up to 10 (Ten) one‐week sprints for additional NCDF Data Lake related development work.  Note that these sprints may be activated in increments (due as agreed, no later than December 2024).Delivery Date: 31 Dec 2024Payment Milestones: Upon completion of each second sprint.D004 (Optional): Up to 16 (sixteen) one‐week sprints for additional NCDF Data Lake related development work. Note that these sprints may be activated in increments (due as agreed, no later than December 2025).Delivery Date: 31 Dec 2025 Payment Milestones: Upon completion of each second sprint.The NCIA team reserves the possibility to exercise a number of options sprints, based on the same deliverable timeframe and cost, at a later time, depending on the project priorities and  requirementsThe payment shall be dependent upon successful acceptance of the Delivery Acceptance Sheet (DAS) – (Annex B) including the EBA Receipt numberPayment will be provided based on these deliveries as indicated in the table Invoices shall be accompanied with a Delivery Acceptance Sheet (Annex B) signed by the Contractor and project authority.6 SCHEDULEThis task order will be active immediately after signing of the contract by both parties.The BASE period of performance is as soon as possible but not later than 24 June 2024 and will end no later than 31st December 2024.If exercised the options, the period of performance is 01st January 2025 to 31st December 2025.7 CONSTRAINTSAll the deliverables provided under this statement of work will be based on NCI Agency templates or agreed with the project point of contact.All code, scripts, documentation, etc. will be stored under configuration management and/or in the provided NCI Agency tools.NATO will retain the intellectual property rights for all products developed in relation to this project.8 SECURITYThe duties of the consultants require a valid NATO SECRET security clearance.The expected classification level of the deliverables is NATO UNCLASSIFIED. However, in some particular circumstances it might be decided that a part of the deliverables will be classified as NATO RESTRICTED.The execution of duties may require the consultants to access information, as well as CIS systems, classified up to NATO SECRET.9 PRACTICAL ARRANGEMENTSService on the contract will be performed off‐site at the consultant’s own office. Office space and computer equipment will be provided at NCI Agency‐NL for access during scheduled visits for the duration of this contract; contractor is responsible for office space and computer equipment at their own facilities.Extraordinary travel (Purchaser Directed Travel) may be required to other NATO or non‐NATO locations as necessary so agility must be maintained.Travel expenses will be reimbursed in accordance with Article 5.5 of AAS+ Framework Contract.Requirements10 QUALIFICATIONS10.1 THE FOLLOWING EXPERTISE AND KNOWLEDGE IS ESSENTIAL FOR THIS REQUIREMENT:<ul> <li>The duties of the consultants require a valid NATO SECRET security clearance.</li> <li>Knowledge of Information Management principles;</li> <li>Knowledge of the Modern Data Architecture. Data Lakes, Hubs &amp; Warehouses concepts and experience in design related system and services architecture;</li> <li>Knowledge of design and implementation of architectures and protocols for distributed and federated systems.</li> <li>Detailed knowledge and experience with Web Service‐specific security standards and products including Security Policy Information File (SPIF), SAML 1.x and 2.0, XACML, WS‐Security, WS‐Trust, OpenId Connect, OAuth 2.0, Microsoft Active Directory Federation Services (ADFS) v3.0, and competing products in this space;</li> <li>Detailed knowledge and experience with Service Oriented Architecture (SOA) implementation concepts including Web Services, SOAP, REST, Publish‐Subscribe, XML and WSDL, as well as Web Services specifications;</li> <li>Knowledge and experience with NATO Core Data Framework (NCDF) concepts, technologies and business cases, standard specifications and related implementations.</li> <li>Ability to independently produce and edit technical documentation and scientific reports in English;</li> <li>Excellent communications skills;</li> <li>Good understanding of the project management methodologies, including PRINCE 2 and Agile/Scrum</li> </ul>10.2 DESIRABLE EXPERTISE:The following expertise and knowledge is desirable for this requirement:<ul> <li>Knowledge of NATO Confidentiality Label Syntax specifications (specifically ADatP‐4774 &amp; 4778), profiles and emerging standards;</li> <li>Knowledge of NATO Metadata Binding Mechanism specifications, profiles and emerging standards, including Metadata Labelling Strategy and the Data Centric Security Strategy;</li> <li>Knowledge of NATO Core Metadata Specification (NCMS), profiles and emerging standards;</li> <li>Knowledge of the NATO C3 Policies, including the Data Management Policy</li> <li>knowledge of methods and mechanisms to resolve security label translation/mapping between NATO and NATO national systems;</li> <li>Knowledge and experience with Standards Transformation Framework (STF) concepts, technologies, business cases.</li> <li>Expertise in security labelling and object level protection solutions;</li> <li>Expertise in secure communication and API security.</li> <li>Familiarity with NATO organisational and political structures (especially NHQC3S, ACT HQ and NCI Agency) and relationships with NATO and Partner nations;</li> </ul>

2024-0086 Specialised Consultants for Security Development (NS) - THU 23 May

Coalfire

About CoalfireCoalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Denver, Colorado with offices across the U.S. and U.K., and we support clients around the world.  But that’s not who we are – that’s just what we do. We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.   And we’re growing fast. We are looking for a Consultant to join Coalfire's Cyber Risk Advisory team.Job SummaryAs a Consultant on our Cyber Risk Advisory team, you will work as part of a team assessing the security, privacy and risk of client firms to best provide advice on cybersecurity programs, industry requirements and standards, and support remediation activities. You will have a strong understanding of framework requirements, and the ability to perform assessments and lead interviews and will be responsible for developing plans, policies, and reports for clients.  You will work closely with Project Managers, Directors and other Delivery team members to effectively manage project timelines and deliverables.    
<h3>What You'll Do</h3>
<ul>
<li>Support and guide information risk and security discussions with technical and non-technical groups</li><li>Identify enterprise information security, privacy and compliance related problems and challenges; research and develop technical solutions to rectify them</li><li>Participate in design and operationalization of tactical response and recovery activities in the event of an information security breach</li><li>Provide guidance on the administration and maintenance of security systems infrastructure, applications, devices, tools and software services</li><li>Perform information risk, security and related compliance assessments, including testing of related controls</li><li>Develop and operationalize enterprise information security programs and related components</li><li>Assess cyber-related policy, procedures, legislation, and implementation directives</li><li>Assess and remediate compliance with industry regulations and frameworks across multiple industries that are relevant to cybersecurity (e.g. NIST CSF, PCI, SOX 404, HIPAA, ISO, FEDRAMP, GLB, CCPA, GDPR)</li></ul>
<h3>What You'll Bring</h3>
<ul>
<li>At least 2 (2+) years working experience in cyber security, GRC, and cyber related risk management</li><li>Knowledge and awareness of the latest information risk, security and privacy innovations, trends, challenges and solutions</li><li>Exposure to industry acclaimed information governance, risk and security standards/frameworks and professional practices (NIST, ISO, CIS Critical Security Controls, ISSA, etc.)</li><li>Knowledge of the typical enterprise risk and security operational practices</li><li>Knowledge of information security related solutions, tools and utilities</li><li>Bachelor’s degree in Business Administration, Computer Science, Information Systems, Engineering or related field, or equivalent combination of education and experience</li></ul>
<h3>Bonus Points</h3>
<ul>
<li>CISM, CCSK, CIPP, CISA, CGEIT, or CRISC certification(s)</li><li>Consulting experience or security experience in an industry segment (finance, healthcare, energy, technology, etc.) </li><li>Cyber <a href="https://infosec-jobs.com/insights/incident-response-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">Incident Response</a> Experience</li><li>AWS, Azure, Google Cloud Platform certification(s) and experience</li></ul>Why You'll Want to Join UsAt Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.At Coalfire, equal opportunity and pay equity is integral to the way we do business. A reasonable estimate of the compensation range for this role is $64,000 to $112,00 based on national <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> averages. The actual salary offer to the successful candidate will be based on job-related education, geographic location, training, licensure and certifications and other factors. You may also be eligible to participate in annual incentive, commission, and/or recognition programs. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.#LI-JM3<a href="https://infosec-jobs.com/remote-jobs/" rel="noopener noreferrer nofollow ugc" target="_blank">#LI-Remote</a>

Consultant, Cyber Risk Advisory | Remote US

Ardent MC

Why do you need to choose between doing important work and having a fulfilling life? At Ardent, we have both. Ardent employees are committed to solving our customers’ most difficult problems—and we are committed to the well-being, personal goals, and professional development of our employee. We are “All In.” We put forth our strongest effort possible to get the mission accomplished and we do it together. We respect the skills and experience you bring to the Ardent team. And we provide a rewarding environment to help you succeed. 
We offer highly competitive benefits, professional development opportunities, and an exceptional culture that embraces flexibility, innovation, collaboration, and career growth. A collective service mindset underpins our work, and a shared camaraderie to serve clients, colleagues and our communities set us apart. Our full commitment to being "All In" for our employees and our clients is not just our approach, it is our standard. If this sounds like the perfect fit for you, choose Ardent and make a difference with us. 
Ardent is seeking a <a href="https://infosec-jobs.com/insights/devsecops-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">DevSecOps</a> Engineer to join our team.  
This is a remote position. 
Position Description:
Ardent and its partners are seeking a DevSecOps Engineer. Your responsibilities encompass integrating security practices seamlessly throughout the development and deployment processes. Your focus will be around automating security measures, ensuring they're ingrained in continuous integration, delivery, and deployment pipelines. 
Requirements
· The DevOps Engineer requires minimum of 7 years of programming experience. Includes 3+ years of experience in working within software engineer team who leveraged DevOps with development o Includes 3+ years of experience in at least two of the following fields in information security, computer or information science or related fields
· Experience using a wide variety of open source and COTS technologies and tools
· Experience in providing Analysis of Alternatives for tools and capabilities from various on premise, Cloud-based, and hybrid resources
· Experience in managing a Platform-as-a-Service environment (i.e., create blueprints, provision, maintain, upgrade and track inventory)
· Solid understanding of and experience implementing and integrating CI/CD Tools from the ground up, such as Atlassian (JIRA and Confluence), Github, Jenkins, Ansible, Artifactory, Docker, Kubernetes, Selenium, SonarQube, Gatling, JMeter, JUnit, AMP, aChecker, Jaws, Netsparker, OWASP ZAP, Tenable Nessus, Splunk, Prometheus, CloudWatch, New Relic, Grafana. Includes experience with Docker containerized application deployment and monitoring, cluster management
· Strong background working in an agile development environment, collaborating with Application Development and Architecture Teams
· Experience with service-oriented architecture, web services, Application Programming Interfaces
· Experience working in a High Availability environment with 99.99%+ uptime
· Strong background in Amazon Web Service (AWS), Azure and Google <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a>, MySQL, PostgreSQL, MongoDB Apache, NGINX, PHP
· Comfortable writing deployment scripts in languages such as Python, Shell, AWS Cloud Formation, Groovy, and Golang
· Experience with systems and IT operations
· Comfort with automated, frequent, incremental code testing and deployment as part of a set of mature DevOps practices
· Strong grasp of automation tools (e.g., Cloudwatch, Lamdba, GitOps, Cloud Formation, Terraform, etc.,)
· A strong focus on achieving value for business objectives
· Comfort with collaboration, open communication and reaching across functional borders
· Strong analytical, communication, and decision-making skills. Proficiency in a variety of computer programs and applications including VMWare, Windows, Linux, Oracle and Solaris.
· BA or BS degree in Science, Technology, Engineering, or Mathematics
Qualifications
· BA/BS in related fields (Computer Science, Software Engineering, or Business Management preferred).
· Expert knowledge of the underlying concepts of Branching, Merging, and Archiving software throughout the development lifecycle
· Minimum of five (5) years of relevant professional experience
· Proven experience managing system changes without interruption to the user
· Familiarity with Continuous Integration tools such as source control (GIT preferred), build (Maven), and automation (Jenkins)
· Understanding of the Agile SDLC and how DevOps play a role in it
· Good communication skills
Due to the nature of the work we support, all candidates in consideration for this role must be U.S. Citizens willing to undergo the government issued background investigation process.

DevSecOps Engineer - U.S. Citizenship Required

About CoalfireCoalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Denver, Colorado with offices across the U.S. and U.K., and we support clients around the world.  But that’s not who we are – that’s just what we do. We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.   And we’re growing fast. We are looking for an Associate to join Coalfire's Cyber Risk Advisory team.Job SummaryAs an Associate on our Cyber Risk Advisory team, you will support client engagements by conducting research, reviewing documents, participating in client interviews, and report preparation.  You’ll work collaboratively with a team to address client’s most pressing cybersecurity needs.  
<h3>What You'll Do</h3>

<h3>What You'll Bring</h3>
<ul>
<li>Bachelor's degree (four-year college or university) or equivalent combination of education and work experience. </li><li>Zero to two years of experience in IT and/or cybersecurity</li><li>An interest and a desire to advance your career in cybersecurity </li><li>Strong analytical and communications (written and oral) skills</li><li>Team player who thrives on collaboration </li></ul>
<h3>Bonus Points</h3>
<ul>
<li>Consulting/professional services experience</li><li>An understanding of cybersecurity frameworks such as the NIST Cybersecurity Framework and Risk Management Framework, the Center for Internet Security Top Critical Security Controls, FAIR Risk Analysis methodology</li><li>An understanding of Cloud services (IaaS, PaaS, SaaS) and underlying technologies</li></ul>Why You'll Want to Join UsAt Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.At Coalfire, equal opportunity and pay equity is integral to the way we do business. A reasonable estimate of the compensation range for this role is $53,000 to $92,00 based on national <a href="https://infosec-jobs.com/salaries/" rel="noopener noreferrer nofollow ugc" target="_blank">salary</a> averages. The actual salary offer to the successful candidate will be based on job-related education, geographic location, training, licensure and certifications and other factors. You may also be eligible to participate in annual incentive, commission, and/or recognition programs. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.#LI-JM3<a href="https://infosec-jobs.com/remote-jobs/" rel="noopener noreferrer nofollow ugc" target="_blank">#LI-Remote</a>

Associate, Cyber Risk Advisory | Remote US

Farfetch

THE ROLEWe are looking for a passionate expert to join our security team who loves to reveal potential weaknesses and then think of creative solutions to eliminate any issues. Your expertise is key in building the foundation of security projects that protect the security and privacy of our clients. People will rely on you to provide engineering and product teams with the security expertise necessary to make product decisions.
<h3>WHAT YOU’LL DO</h3>
<ul>
<li>Further, develop our <a href="https://infosec-jobs.com/insights/incident-response-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">Incident Response</a> program</li><li>Review logs/events from IDS, <a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a>, WAF, and NG Firewall / Web Proxy</li><li>Identify and find Indicators of Compromise within the corporate network and infrastructure</li><li>Be part of the on-call team responsible for detecting and responding to Cyber Security incidents</li><li>Analyse effectiveness of security controls and propose alternative cost effective solutions;</li><li>Assess the maturity level and map current detection &amp; prevention capabilities against know frameworks such as MITRE ATT&amp;CK</li><li>Help maintain our data and systems secure and protected throughout all the Cyber Kill Chain stages.</li></ul>
<h3>WHO YOU ARE</h3>
<ul>
<li>You are a graduate of a program in Computer Science, Information Security, or a related field</li><li>You have more than 3 years in a similar position or in a Security Operations Center (SOC) environment</li><li>You are comfortable being hands-on with experience in SIEM, Web Application Firewall, IDS/IPS</li><li>You are experienced in analytical and problem-solving within a complex IT environment</li><li>You are experienced in Malware and Forensics analysis</li><li>You are experienced in working under compliance or regulatory environments (SOX, PCI, etc)</li><li>You are a team player with experience working with remote, global teams</li><li>You are a holder of certifications on Information Security (OSCP, CEH, GCIH or similar).</li></ul>We are looking for a passionate expert to join our security team who loves to reveal potential weaknesses and then think of creative solutions to eliminate any issues. Your expertise is key in building the foundation of security projects that protect the security and privacy of our clients.

Senior Security Incident Response Analyst

Deloitte

Job Requisition ID: 35801 
<ul>
<li>Work in a highly innovative and transformative business</li>
<li>Mentoring, growth and training – receive support and coaching to progress your career</li>
<li>Preventive and supportive mental health initiatives</li>
</ul>

What will your typical day look like?  
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.

Key Role Responsibilities:
<ul>
<li>You will be leading a small team of Red Team Operators in the planning, execution, and reporting of Red Team engagements around the globe. This includes, but is not limited to:
<ul>
<li>Performing intelligence gathering against target networks, people, processes, and technologies.</li>
<li>Finding creative ways to obtain a foothold in a target network.</li>
<li>Delivering malware and establishing command and control (C2).</li>
<li>Moving stealthily within target networks, satisfying the campaign objectives, while staying undetected by the blue teams.</li>
<li>Establishing persistence and strategically tuning long-haul beacons to maintain long-term footholds where necessary.</li>
<li>Ensuring adherence to the Rules of Engagement during every step of the Red Team engagements.</li>
<li>Maintaining operational oversite of all actions conducted during Red Team engagements. Ensuring that every action is planned, executed, and logged properly at all times by every operator.</li>
<li>Maintaining in-depth documentation and auditing of actions taken during Red Team operations, at all times, for the purposes of deconfliction and non-repudiation.</li>
</ul>
</li>
<li>Identifying and acting on opportunities to train and mentor other members of the Red Team.</li>
<li>Assisting in the management of the Red Team Attack Network and the implementation of new tools and techniques to improve the team’s tradecraft.</li>
<li>Sharing your research within the Deloitte Global Red Team community, and with the broader security organization, by writing blogs, speaking at conferences, or publishing code.</li>
<li>Developing operational processes, field manuals, and attack methodologies to continuously improve the quality of engagements and knowledge sharing amongst the team.</li>
<li>Ensure deliverables meet the quality and timeliness expected of a world-class Red Team.</li>
<li>Working closely with a wide variety of Deloitte’s industry leading information security teams to identify and reduce risk around the globe.</li>
</ul>

About the team
Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.

Enough about us, let’s talk about you. 
You are someone with: 
Required:
<ul>
<li>3+ years of Red Team experience.</li>
<li>A passion for offensive security and Red Team operations, and a drive to stay up to date with modern attack techniques, public breaches, and new vulnerabilities.</li>
<li>A deep understanding of threat actor tactics, techniques, and procedures (TTPs).</li>
<li>Experience with, and a deep understanding of, digital forensics and incident response capabilities and procedures.</li>
<li>Experience with leading Red Team Operations against companies and their associated people, processes, and technologies.</li>
<li>The ability to create, update, and maintain documentation ranging from Red Team TTPs to governing documentation as needed.</li>
<li>Experience with enumerating and attacking Windows Active Directory and Azure EntraID environments.</li>
<li>Experience leading the designing, building, maintaining, and utilization of covert C2 infrastructure in various <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> platforms and environments. Automation experience is a plus!</li>
<li>Experience with modern malware development and obfuscation techniques.</li>
<li>A deep understanding of enterprise security architecture and the associated security controls.</li>
<li>A deep understanding of monitoring, detections, and indicators of compromise/attack, and the implications they have on covert Red Team Operations.</li>
<li>Hands on experience working with industry leading Red Team tools like Cobalt Strike, Nighthawk C2, Bloodhound, Evilginx2, etc...</li>
</ul>

Preferred:
<ul>
<li>Relevant certifications such as OSCP, OSCE, OSEP, OSED, OSEE, CRTP, CRTE, etc.</li>
<li>Public examples of blogs, conference talks, and open-source tooling demonstrating your expertise.</li>
<li>Experience operating against security products such as Microsoft Defender for Endpoint/Identity and CrowdStrike Falcon.</li>
<li>Experience with Social Engineering (physical, phishing).</li>
<li>Experience with Outflank OST.</li>
<li>Experience automating infrastructure deployment with Ansible and Terraform.</li>
<li>Experience leading red teaming efforts.</li>
</ul>

Why Deloitte? 
At Deloitte, we focus our energy on interesting and impactful work. We’re always learning, innovating and setting the standard; making a positive difference to our clients and our society. We put coaching at the heart of what we do, helping our people grow their careers in any direction – whether it be up, moving into something new, or even moving across the world.  
We embrace diversity, equity and inclusion. We have a diverse collection of people from different backgrounds, with different experiences, gender identities, abilities and thinking styles. What binds us together is a shared commitment to value everyone’s perspective and to cultivate inclusion; so that our work environment is a safe space we can all belong. 
 We prioritise flexibility and choice. At Deloitte, you get trust on Day 1. We know our people get their best work done when they’re in control of where and how they work, designing their work week around their client, team and personal commitments.
We help you live and work well. To support your personal and professional life, we offer a range of <a href="https://www2.deloitte.com/au/en/pages/careers/articles/benefits-discounts.html" rel="noopener noreferrer nofollow ugc" target="_blank">perks and benefits</a>, including retail discounts, wellbeing leave, paid volunteering days, twelve flexible working options, market-leading parental leave and return to work support package.

 Next Steps 
Sound like the sort of role for you? Apply now. 

By applying for this job, you’ll be assessed against the Deloitte Talent Standards. We’ve designed these standards so that you can grow in your career, and we can provide our clients with a consistent and exceptional Deloitte employee experience globally. The preferred candidate will be subject to background screening by Deloitte or by their external third-party provider.

Red Team Senior Operator

Xtremax

Security Engineer – Governance We are looking for an experienced and knowledgeable IT Security Governance to join our Security Engineer team. You will be responsible for the management and advances of our security policies, standards, and procedures.  Responsibilities:  <ul> <li>Ensure the strategy and implementation of information security in accordance with the needs &amp; applicable regulations  </li> <li>Develop an information security framework and architecture in accordance with the company's needs  </li> <li>Develop and maintain policies, standards, and procedures that support the information security framework in accordance with best practices and applicable regulations.  </li> <li>Actively identify, analyze, measure, provide control recommendations, and monitor follow-up on risk control &amp; information security.  </li> <li>Carry out regular evaluations of the implementation of IT security management policies, standards, and procedures  </li> </ul>RequirementsRequirements:  <ul> <li>Bachelor’s Degree in Software Engineering / Computer Science / Information Technology / equivalent or relevant work experience.  </li> <li>Minimum 2 years experiences in IT industry  </li> <li>Familiar and able to implement and lead various best practices &amp; regulations for IT Security &amp; Cyber Security such as ISO 27000, CSA Star, CIS, NIST, GDPR, etc.  </li> <li>Familiar with Security compliance or assessment tools  </li> <li>Having experience implement ISO 27017 and 27018 is a plus point  </li> <li>Familiar with <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> environment is a plus point.  </li> </ul>

IT Security Engineer - GRC

City

Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients’ best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations &amp; Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do from keeping the bank safe, managing global resources, and providing the technical tools our workers need to be successful to designing our digital architecture and ensuring our platforms provide a first-class customer experience. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services.Our commitment to diversity includes a workforce that represents the clients we serve from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.About Our Team:The Chief Information Security Office (CISO) is home to deeply talented colleagues that work to ensure the safety of Citi's clients', our revenue, our employees and our proprietary data. We manage information security as one end-to end program – one with a clear mandate and accountability. Our mission is a program that is fully anchored to modern control and architectural frameworks, is fully aligned with the enterprise architecture of the firm and is deeply integrated into the sectors and functions.Citi’s Cyber Intelligence Center (CIC) plays a key role in keeping Citi safe from cyberthreats. CIC collects, analyzes, and disseminates cyber intelligence to provide Citi leaders with decision advantage at the tactical, operational, and strategic levels. CIC ensures Citi’s Chief Information Security Office (CISO) is threat-focused and data-driven to best protect Citi from unique cyberthreats, better positioning Citi to accomplish its core mission of serving as a trusted partner to our clients globally. CIC uses a follow-the-sun model to provide timely intelligence around-the-clock.Citi’s Cyber Intelligence Center is seeking a senior leader to manage the CIC Internal Engagement (IE) team. CIC IE manages cross-team functions in CIC, and is a hybrid team with members in many locations and time zones. This role must coordinate and collaborate with cross-functional cyber intelligence and fusion center teams and engage with other business elements, partners, or clients, as necessary. The ideal candidate is an experienced leader with an in-depth knowledge of intelligence and cyberthreat principles and strong critical thinking and interpersonal skills.Primary Duties:<ul><li>Lead a team of cybersecurity and intelligence professionals</li><li>Liaise with other CIC Leadership team members to facilitate cross-team functions and communication and identify / meet needs of other teams</li><li>Manage administrative / business office functions such as budget, staffing, travel, and recordkeeping</li><li>Manage CIC coordination with internal and external auditors and assess risk</li><li>Lead / coordinate cybersecurity and intelligence training</li><li>Engage with intelligence consumers in CISO and Citi’s Businesses, Functions, and Technologies</li><li>Oversee a global network of information security officers who function as CIC intelligence collectors and local SMEs</li><li>Produce clearly-written, grammatically-correct communications of behalf of the CIC Director and CIC Leadership team</li><li>Demonstrate ability to consistently refine critical thinking skills; openness to constructive criticism</li></ul>Preferred Qualifications:<ul><li>Knowledge of banking, financial systems, and regulators</li><li>Analytic experience in covering cyberthreats, geopolitical, or financial crimes</li><li>Experience communicating in Smart Brevity and/or Bottom Line Up Front (BLUF) format</li><li>Good technical comprehension (banking, cyber, etc) with ability to appropriately customize technical details to intended audiences</li><li>Demonstrated use of analytic tools or cyber intelligence principles, such as Structured Analytic Techniques, OSINT tools, indicator pivoting, or cyberthreat frameworks, such as Mitre ATT&amp;CK or Cyber Kill Chain</li></ul>Job Skills/Qualifications:<ul><li>Bachelor’s degree required; a plus if education includes competency in an analytic or technical discipline</li><li>10+ years’ experience working in an intelligence analysis job function; cyberthreat, geopolitical, or financial crimes subject matter expertise preferred</li><li>Advanced intelligence analysis experience and skills</li><li>Excellent written and verbal communication and presentation skills</li><li>Ability to effectively communicate with all levels of senior management</li><li>Familiarity with open-source intelligence research and methodologies</li><li>Previous Intelligence background a plus</li></ul>Education:Bachelor’s degree/University degree or equivalent experienceMaster’s degree preferredThis job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.The Cyber Security Intelligence Group Manager is a senior management level position responsible for accomplishing results through the management of a team or department to drive efforts to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy.Responsibilities: <ul><li>Leading intelligence analysis of complex security and fraud matters, using advanced open-source intelligence resources and approved tradecraft</li><li>Applying and executing the intelligence cycle</li><li>Strategic and operational qualitative analysis of complex problem sets</li><li>Project management coordination and balancing multiple competing priorities</li><li>Building productive engagement models with internal and external stakeholders</li><li>Identifying intelligence gaps and development of innovative intelligence-driven solutions</li><li>Developing and delivering high quality written products and oral intelligence briefings to senior decision makers</li><li>Lead and manage a multidisciplinary team of analysts. This requires hiring, training, and mentoring analysts, including ongoing professional development.</li><li>Lead sub-programs. This requires management of people, management of vendors or outside resources, case/project assignments and oversight, approval of final products, and program reporting</li><li>Manage intelligence collection capabilities, including identification and vetting of new and innovative intelligence sources, methodologies, and collection tradecraft - Utilizing multiple intelligence concepts for collection and validation of both raw and processed information (structured and unstructured data).</li><li>Partner with Citi stakeholders, business partners, and external colleagues on open-source methodologies and tools for finding disparate data.</li><li>Deliver detailed and professional briefings on advanced analytics capabilities, resources, and tradecraft.</li><li>Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards.</li></ul>Qualifications:<ul><li>Minimum 10+ years of experience in program management, security and open-source intelligence analysis, and stakeholder engagements</li><li>Proven record of accomplishment in helping business partners understand control needs and driving the impact of the analytical assessment</li><li>Experience is utilizing visualization software applications - Specifically link analysis (e.g., Palantir, Semantica Pro, Link Explorer, I-2 or ESRI)</li><li>Demonstrated ability to analyze, evaluate and interpret complex data with a strong understanding and application of analytical techniques.</li><li>Self-starter and resourceful individual, with experience of operating in fast paced and dynamic operational settings</li><li>Ability to work independently and with minimal oversight, while producing high quality analysis</li></ul>Education:<ul><li>Bachelor's/University degree, Master's degree preferred</li></ul>This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.------------------------------------------------------Job Family Group: Technology------------------------------------------------------Job Family:Information Security------------------------------------------------------Time Type:Full time------------------------------------------------------Primary Location:New York New York United States------------------------------------------------------Primary Location Full Time Salary Range:$176,720.00 - $265,080.00In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental &amp; vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.------------------------------------------------------Anticipated Posting Close Date:May 16, 2024------------------------------------------------------Citi is an equal opportunity and affirmative action employer.Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View the "<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law</a>" poster. View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law Supplement</a>.View the <a href="http://citi.com/citi/diversity/assets/pdf/eeo_aa_policy.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a>.View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Pay Transparency Posting</a>

Cyber Security Intelligence Group Manager, SVP

Rackspace

Overview:Rackspace Managed Public Cloud is looking for a product manager to own and rapidly evolve our services and product portfolio for our Managed Google Cloud solution in line with the overall direction and strategy of the organizationThis role will be critical to building new, flexible offers focused on Google Cloud and ensuring such offers are able to deliver managed cloud solutions to Rackspace customersWith your peers, including other product managers and architects, you will act as a business and subject matter leader, managing the roadmap, feature set, and overall business results owner for your product areaThis includes working with product engineering, delivery, and development, assisting the marketing team with the collateral generation, launch activities, and marketing assets, engaging with prospects and customers to gather insights, understanding customer issues, supporting customer success and engaging with sales in enablement and pursuit as well as any other activities needed to execute on product business strategy<h3>You Will: </h3><ul><ul><li>Build and manage Google Cloud offers and customer journeys based on overall Managed Public Cloud solution strategy, customer feedback, industry trends, and other research, coordinating with Product Management peers as required</li><li>Own the execution of the roadmap, coordinate with internal engineering and delivery teams as well as selected partners</li><li>Define product requirements and use cases</li><li>Build relationships and coordinate with Google and Rackspace’s partner leaders to define managed service solutions based on Google Cloud technology</li><li>Develop a build/buy/partner framework for evaluating how to fill product gaps</li><li>Work with Engineering to manage and prioritize the product backlog</li><li>Collaborate with delivery to build capacity and skill set planning models</li><li>Perform market research to inform the roadmap and understand the competition</li><li>Coordinate with marketing on GTM planning and collateral development</li><li>Support sales on customer calls to pursue deals and gather customer feedback</li><li>Enable sales with training appropriate to positioning and supporting the product</li><li>Work with marketing to develop appropriate collateral, perform PR, and communicate bi-directionally with analysts</li><li>Develop business cases for new offers and releases</li><li>Ability to work within a remote team</li></ul></ul><h3>You Have:</h3><ul><ul><li>7-10+ years of product management, or equivalent, experience in the public cloud industry with a proven track record of product ownership and success growing products and services</li><li>Significant exposure and knowledge of the public cloud market with a focus on cloud-native solutions</li><li>Ability to define and launch innovative services products</li><li>Experience working with Agile engineering teams</li><li>Experience working with partners in the development and delivery of service products</li><li>Demonstrated ability to communicate with stakeholders clearly, experience communicating with industry analysts</li><li>Ability to own execution without continuous oversight</li><li>Demonstrated flexibility to wear multiple hats as required</li></ul></ul><h3>Education:</h3><ul><ul><li>Bachelor’s degree required</li><li> BS in Technology or Business preferred</li><li>MBA preferred</li></ul></ul><h3>Physical Demands</h3><ul><ul><li>General office environment: no special physical demands required.</li><li>May require long periods of sitting and viewing a computer monitor.</li></ul></ul><h3>Travel</h3><ul><ul><li>As per business needs and requirements	</li></ul></ul><h3>Sponsorship</h3><ul><ul><li>Candidates must be legally allowed to work with any employer</li></ul></ul>The following information is required by the Colorado Equal Pay Transparency Act and the New York City Pay Transparency Act. This applies only to individuals working in the state of Colorado or in New York City. The anticipated starting pay range of Colorado and New York City applicants for this role is $ 143,700 - $ 191,600 for CO and $ 153,000 - $ 204,000 for NYC.  Based on eligibility, compensation for the role may include variable compensation in the form of bonus, commissions, or other discretionary payments. These discretionary payments are based on company and/or individual performance, and may change at any time. Actual compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, licenses and certifications, and specific work location. Information on <a href="https://rackspace.jobs/benefits/" rel="noopener noreferrer nofollow ugc" target="_blank">benefits</a> offered is here.#LI-VM1#LI-Remote#LI-USA#rackspaceAbout Rackspace TechnologyWe are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.  More on Rackspace TechnologyThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

United States

Texas

Google Cloud Technical Product Manager

Wiz, Inc.

Come join the company that is reinventing <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> security and empowering businesses to thrive in the cloud. As the <a href="https://www.wiz.io/blog/100m-arr-in-18-months-wiz-becomes-the-fastest-growing-software-company-ever" rel="noopener noreferrer nofollow ugc" target="_blank">fastest-growing startup ever,</a> Wiz is on a mission to help organizations secure cloud environments that will accelerate their businesses. Trusted by security teams all over the world, we have a proven <a href="https://www.g2.com/products/wiz-wiz/reviews" rel="noopener noreferrer nofollow ugc" target="_blank">track record of success</a> and a culture that values world-class talent.  
Our Wizards from over 13 countries work together to protect the infrastructure of our hundreds of customers, including over 40% of the Fortune 100, who trust us to scan and secure over 230 billion files daily. We’re the leading player in a massive and growing market, but it’s still early enough for you to make a significant impact. At Wiz, you’ll have the freedom to think creatively, dream big, and use your full range of skills to contribute to our record growth. Come join our team and help us create secure cloud environments that allow the best companies to move faster. <h4>SUMMARY</h4>
We're looking for an experienced Network Security Analyst to join the Wiz Threat Research team to investigate network security threats affecting our customers’ cloud environments, in support of product development of Wiz features such as the <a href="https://www.wiz.io/blog/wiz-enhances-dynamic-scanner-to-analyze-and-validate-external-exposure" rel="noopener noreferrer nofollow ugc" target="_blank">Dynamic Scanner</a> and <a href="https://www.wiz.io/blog/detect-critical-application-misconfiguration-risks" rel="noopener noreferrer nofollow ugc" target="_blank">Host Configuration scanning</a>.
WHAT YOU'LL DO
<ul>
<li>Investigate network security risks in customer environments.</li>
<li>Develop network threat models of new cloud services and cloud-deployed applications.</li>
<li>Work closely with product management to support product roadmap decision-making.</li>
<li>Operationalize your knowledge of cloud network security by building security controls and detection rules related to public exposure, potential external attack vectors, lateral movement, and more.</li>
</ul>
<h4>WHAT YOU'LL BRING</h4>
<ul>
<li>5+ years experience in the field of cybersecurity analysis</li>
<li>Understanding of core cybersecurity topics related to networking and/or cloud</li>
<li>Well-acquainted with network and API security risks and their potential impact</li>
<li>Proficient in scripting languages (Python, Rego, R, MATLAB, or similar)</li>
<li>Familiar with network and application scanning tools (Burp Suite, nmap, Metasploit, Nuclei, or similar)</li>
<li>Strong writing and presentation skills</li>
<li>Capable of applying analytic techniques to complex problems</li>
<li>An independent self-learner</li>
<li>Good communication and teamwork skills</li>
</ul>
<h4>BONUS SKILLS</h4>
<ul>
<li>Familiar with cloud service architectures</li>
<li>Hands-on experience in penetration testing and/or exploitation</li>
<li>Data analysis experience (e.g., using SQL)</li>
</ul>
#LI-hybrid
#LI-LE1If your experience is close but doesn’t fulfill all requirements, please apply. Wiz is on a mission to build a special company. To achieve our goal, we are focused on hiring Wizards with different backgrounds, perspectives, and experiences.
Wiz is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law.
By submitting your application, you acknowledge that Wiz will process your personal data in accordance with <a href="https://www.wiz.io/legal/privacy" rel="noopener noreferrer nofollow ugc" target="_blank">Wiz's Privacy Policy.</a>

Network Security Analyst

Du willst im Bereich Corporate Functions – Risk &amp; Reputation ein bedarfsgerechtes Risiko-und Compliance Management umsetzen? Unser Team setzt sich mit vielfältigen und innovativen Maßnahmen dafür ein, die fachliche Qualität im Einklang mit den regulatorischen Anforderungen zu sichern. Sichere unseren gemeinsamen Erfolg und mach mit uns den Unterschied: als Information Security Auditor Schwerpunkt IT-Prüfung (m/w/d).
Standorte: Düsseldorf und Berlin.
<h3>Dein Impact:</h3>
Als Information Security Auditor (m/w/d) im Bereich des CISO überprüfst Du die Wirksamkeit unseres Security Management Systems durch Audits von Businessprozessen, IT-Services und -Systemen, Dienstleistern und Bürogebäuden.
<ul>
<li>Auditprogramm: Du planst das Auditprogramm nach den Vorgaben von ISO27001, TISAX sowie Deloitte Policies und stimmst dieses mit den Normverantwortlichen innerhalb der 2nd Line of Defense ab.</li>
<li>Audits: Du leitest Audits von der Planung, Abstimmung, Durchführung, Dokumentation bis zum Verfolgen der Maßnahmen.</li>
<li>Cloud- und KI-Systeme: Dein fachlicher Schwerpunkt sind IT-Systeme aus den Bereichen Cloud und KI. Für diese definierst Du markt- und compliance-gerechte Auditkriterien.</li>
<li>International: Du begleitest und vertrittst in internationalen Deloitte Arbeitsgruppen die Abstimmung von Kriterien an IT-Systeme hinsichtlich Information Security Anforderungen.</li>
<li>Beratung: Du trägst zur Verbesserung und Angemessenheit des Information Security Management Systems (ISMS) nach ISO 27001 / TISAX und den Erhalt unserer Zertifikate bei.</li>
</ul>
<h3>Dein Skillset:</h3>
<ul>
<li>Studium, Ausbildung oder Berufserfahrung in den Bereichen IT-Prüfung, ISMS nach ISO27001, Informationssicherheit und Cyber Security</li>
<li>Idealerweise Personenzertifizierung in Bezug auf ISMS, ISO 27001, TISAX oder SOC 2 oder vergleichbare Standards</li>
<li>Starke analytische und konzeptionelle Fähigkeiten sowie Durchsetzungsvermögen</li>
<li>Kommunikationsstärke, Deutsch und Englisch sehr gut in Wort und Schrift sowie Reisebereitschaft (ca. 5% der Arbeitszeit)</li>
</ul>
<h3>Deine Chance:</h3>
<ul>
<li>Best-in-class Weiterbildung an der Deloitte University sowie im Rahmen individueller Qualifikationsangebote und Trainings</li>
<li>Umfassende Entwicklungschancen durch strukturierte Karriereplanung, Inclusive Leadership, Entsendungsprogramme, projektbasierte Job-Rotation sowie Förderung sozialen Engagements und Corporate Volunteering</li>
<li>Vereinbarkeit von Beruf &amp; Familie dank Mobile Working &amp; Teilzeit, Sabbaticals und Familienservice, z. B. zur Unterstützung für pflegende Angehörige, Elternzeit-Beratung und vielem mehr</li>
<li>Gesundheit &amp; Fitness im Fokus durch regelmäßige Gesundheitstage, Kooperationen mit Fitness-Anbietern und die Unterstützung von Sport- und Teamevents</li>
<li>Attraktive Arbeitgeberleistungen inklusive Bike- und Pkw-Leasing, Firmen-Smartphone zur privaten Nutzung sowie flexiblen Arbeitsmodellen wie z. B. Vertrauensarbeitszeit und EU Remote Working</li>
<li>Vielfältige Gestaltungsräume und aktive Förderung einer inklusiven Unternehmenskultur - u. a. durch unsere globale Diversity &amp; Inclusion-Initiative ALL IN und lokale Mitarbeiter:innen-Netzwerke</li>
</ul>
<h3>Bist du bereit? Mach mit uns den Unterschied!</h3>
Unser Recruiting-Team freut sich auf deine Bewerbungsunterlagen (CV sowie Abitur-, Hochschul- und Arbeitszeugnisse) über unser Online-Formular. Ein Anschreiben und ein Bewerbungsfoto sind bei uns nicht erforderlich.

Gleiche Chancen für alle: Wir freuen uns über Bewerbungen von Menschen, die so vielfältig sind wie wir – unabhängig von Alter, Behinderung, ethnischer Herkunft und Nationalität, Geschlecht, Religion, sexueller Orientierung oder sozialer Herkunft. Noch Fragen? Alle Infos zu unserem Bewerbungsprozess findest du in unseren <a href="https://job.deloitte.com/bewerbung/faq" rel="noopener noreferrer nofollow ugc" target="_blank">Bewerbungs-FAQs</a>.

Information Security Auditor - Schwerpunkt IT-Prüfung (m/w/d)

Minitab

Act as a technical subject matter expert for the department regarding information and cyber security technologies and landscape. Perform software security tasks of a highly complex nature which require extensive research and analysis.  Assume project and technical leadership roles across the department. 
Responsibilities 
<ul>
<li>Perform a digital footprint analysis, classifying assets and their sensitivity levels.  Define, harmonize, centralize, and manage the security logging and monitoring practice across customer facing products and development infrastructure.  Monitor and manage suspicious activity.  Prioritize and fine-tune settings and recommend hardening techniques to move issues towards resolution.</li>
<li>Evaluate, test and implement new security technologies and/or tools that enhance detection and response capabilities. Install and configure firewalls, <a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a>S, and endpoint security software.  Stay up to date on the latest emerging security technologies and how they might impact or be leveraged for the security of Software Development products and systems. </li>
<li>Assume a leadership role and drive consensus in educating teams regarding security strategy, landscape, protocol, and technologies.  Collaborate with team members to identify key security gaps and areas for improvement.  Conduct training sessions and workshops for team members and employees to raise awareness about security threats.  Assist with the high-level architectural design of software products as it relates to software security.</li>
<li>Anticipate, audit and act as a critical business continuity team member. Assist in real-time security incident handling to ensure efficient mitigation and remediation efforts, minimizing risk and impact to the company.  Work closely with teams to ensure that learnings are used to make development’s internal systems and products more secure and resilient to future attacks.</li>
</ul>
Qualifications
<ul>
<li>Bachelor's degree in Cybersecurity, Computer Science, IT, or a closely related discipline or equivalent experience.</li>
<li>Deep knowledge of <a href="https://infosec-jobs.com/insights/cloud-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a> security principles and tools including SIEMS, intrusion detection and prevention systems, log analytics, Microsoft Defender, Azure Sentinel and Azure DevOps.</li>
<li>Experience managing application or <a href="https://infosec-jobs.com/insights/devsecops-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">DevSecOps</a> “Blue Team” security programs.</li>
<li>Proven experience in application security, including threat modeling, secure coding, and vulnerability management.</li>
<li>Strong understanding of web application architectures, technologies, and protocols.</li>
<li>Familiarity with industry standards and frameworks such as OWASP, ISO 27001, and NIST.</li>
</ul>
The following is also desirable:
<ul>
<li>Information/Cyber Security certification such as CISSP or CompTIA+.</li>
<li>Experience with source control systems such as Team Foundation Server or Git.</li>
<li>Ability to discover and patch SQLi, XSS, CSRF, SSRF, authentication and authorization flaws, and other web-based security vulnerabilities (OWASP Top 10 and beyond).</li>
<li>Experience with standard web application security tools such as Arachni, Brakeman, and BurpSuite.</li>
<li>Familiarity with security best practices for Kubernetes based cloud applications.</li>
<li>Experience using an agile development process.</li>
</ul>
Minitab is an equal opportunity employer

Senior Security Engineer

CloudLinux

We are seeking a compliance Analyst to be responsible for managing the overall corporate risk profile, assisting in policy development and risk register updates, supporting compliance audits and monitoring, and maintaining documentation of compliance activities. This role plays a key part in ensuring the company's adherence to regulatory requirements. It will reporting to Compliance Officer.Join us and become part of a company that goes beyond just business. At CloudLinux, we believe in making a meaningful impact in the Linux and hosting industry. You'll be joining a supportive team that promotes collaboration and shared success. Learn more about us: <a href="https://&lt;a href=" rel="noopener noreferrer nofollow ugc" target="_blank">cloud</a>linux.com/" rel="nofollow noreferrer noopener" target="_blank"&gt;https://cloudlinux.com/ As our Jr. Compliance Analyst you’ll be responsible for: <ul> <li>Completing the risk assessments for assigned third-party relationships and gather due diligence documentation following the internal vendor risk assessment procedure (incl., KYC of our clients, Due Diligence of our critical vendors);</li> <li>Managing the Enterprise-Wide Risk Register with the relevant Risk Owners and monitoring the implementation of the Remediation actions plan;</li> <li>Contributing to internal audits to identify areas of compliance vulnerabilities and risks;</li> <li>Managing the updating of the Business Continuity and Disaster Recovery Plan and regular testing of its main scenarios;</li> <li>Contributing to quarter compliance monitoring with the final report preparation;</li> <li>Manage the AV/AM solution installation on the laptops/PCs.</li> </ul>RequirementsTo be successful in this role you should have:<ul> <li>A University Degree (Bachelor of Laws, Finance or higher).</li> <li>Experience in compliance and legal is advantageous, but not mandatory.</li> <li>Knowledge of key compliance regulations such as GDPR, CCPA, SOC 2, and ISO 27001.</li> <li>Proficiency in developing, revising, and implementing compliance policies and procedures.</li> <li>Ability to conduct risk assessments for the company's operations, products, and services.</li> <li>Skills in performing compliance audits and monitoring to ensure policy adherence.</li> <li>Competence in documenting compliance activities and incidents, and in preparing detailed reports for both internal and external stakeholders.</li> <li>Strong interpersonal skills for effective collaboration across various departments including legal, IT, product development, and customer support.</li> <li>Analytical skills to understand and apply complex regulatory requirements to the company’s practices.</li> <li>Exceptional attention to detail to ensure thorough compliance with all regulations and internal policies.</li> </ul>BenefitsWhat's in it for you?<ul> <li>A focus on professional development; </li> <li>Interesting and challenging projects</li> <li>Flexible working hours</li> <li>Paid one month vacation per year and unlimited sick leave</li> <li>Medical insurance reimbursement</li> <li>Co-working and gym/sports reimbursement</li> <li>The opportunity to receive a reward for the most innovative idea that the company can patent</li> </ul>By applying for this position, you agree with <a href="https://cloudlinux.com/privacy-policy" rel="noopener noreferrer nofollow ugc" target="_blank">Cloudlinux Privacy Policy</a> and give us your consent to maintain and process your personal data with this respect. Please read our Privacy Policy for more information.

Junior Compliance Analyst (remote opportunity, work anywhere)

<a href="https://www.wpp.com/about" rel="noopener noreferrer nofollow ugc" target="_blank">WPP</a> is the creative transformation company. We use the power of creativity to build better futures for our people, planet, clients, and communities.
Working at WPP means being part of a global network of more than 115,000 accomplished people in 110 countries. WPP has headquarters in New York, London and Singapore and a corporate presence in major markets worldwide.
We create transformative ideas and outcomes for our clients through an integrated offer of communications, experience, commerce, and technology.
WPP and our award-winning agencies work with most of the world's biggest companies and organisations – from Ford, Unilever and P&amp;G to Google, HSBC, and the UN. Our clients include 61 of the FTSE 100, 307 of the Fortune Global 500, all 30 of the Dow Jones 30 and 62 of the NASDAQ 100. WPP are the leader in the Bloomberg Gender Equality Index and 20th in the FTSE 100 rankings for Women on Boards.Why we're hiring:
This is an excellent opportunity for an experienced Security Analyst to join our Growing Cyber Security team. The Security Operations Analyst will work within a multi-national team comprised of both internal and external analysts. They will play a key role in ensuring the effectiveness of WPPs cyber security detection, analysis, and response capabilities. They will work with multiple stakeholders including engineers and incident responders to ensure that security events are appropriately triaged and effectively resolved.
The role holder will help to ensure that the security operations function continually improves, remains tuned to specific organisational threats, and operates an effective security toolset. They will be help review, improve, maintain and operate a suite of security incident response procedures and playbooks and contribute to  management reporting artefacts.

What you'll be doing:
<ul>
<li>Monitor and support the Security Incident and Event Monitoring (<a href="https://infosec-jobs.com/insights/siem-explained/" rel="noopener noreferrer nofollow ugc" target="_blank">SIEM</a>) solution for the detection of Alerts - SOC Level 1 Analysis</li>
<li>24*7*365 Shifts on a rotational basis - Performing the Monitoring, Alert Detection and Alert Response</li>
<li>Adherence to Shift Schedules, shift hand-over and completion of activities designated for the shift within the designated SLAs and KPIs</li>
<li>Familiarity with SIEM Platforms such as splunk, Sentinel, QRadar etc</li>
<li>Perform Alert Triage, Investigation, Alert context enrichment and opening of Incident, as per the documented playbooks.</li>
<li>Ability to learn additional security tools and platforms depending on the situational needs and ability to operate on those tools in optimum levels End-point security tools, MDR tools,  Email gateway, Phishing investigation tools etc.</li>
<li>Ability to engage with customer and internal teams for providing technical insights and analysis.</li>
<li>Contribute to regular management reporting artefacts.</li>
<li>Follow the escalation matrix as per defined process.</li>
</ul>
What you'll need:
Qualification Requirements (Desirable)
<ul>
<li>Computer Science Degree or equivalent</li>
<li>Certifications such as CEH, CCNA and other SOC tools/platforms</li>
</ul>
Skills / Experience Requirements
<ul>
<li>Monitoring and Alert investigation experience on 1 or more SIEM tools and/or SOAR Platforms</li>
<li>Minimum of 1 year of experience in Information Security</li>
<li>In depth operational experience with SIEM technologies.</li>
<li>Demonstrated process orientation and ability to manage out of the ordinary cyber threat detection and investigation steps</li>
<li>Strong communicator and fluent in English and ability to work smoothly with multinational clients</li>
<li>Good understanding on networking concepts</li>
<li>Be alert and reliable for rotating shift work</li>
<li>Good Coordination skills with various other teams for faster resolution/completion</li>
</ul>
Who you are:
You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are accepting: of new ideas, new partnerships, new ways of working.
You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.
You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.

What we'll give you:
Passionate, inspired people – We promote a culture of people that do extraordinary work.
Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.
Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?WPP is an equal opportunity employer and considers applicants for all positions without regard to race, color, religion or belief, sex, age, national origin, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability. We believe in creating a dynamic work environment that values diversity and inclusion and strives to recruit a diverse slate of candidates to help us achieve that goal.
Please read our Privacy Notice (<a href="https://www.wpp.com/people/wpp-privacy-policy-for-recruitment" rel="noopener noreferrer nofollow ugc" target="_blank">https://www.wpp.com/people/wpp-privacy-policy-for-recruitment</a>) for more information on how we process the information you provide.

Cyber Security Operations Analyst (L1)

Sr.  Data Architect–Google Cloud  In this role you will be delivering solutions on Google Cloud.  You will be the expert in the region and support the delivery of our data projects on Google Cloud.  Our Data Architects are experienced technologists with technical depth and breadth, along with strong interpersonal skills. In this role, you will work directly with customers and our team to help enable innovation through continuous, hands-on, deployment across technology stacks, will serve as the Data SME for our customers and be the focal touchpoint in engagements.   You Will: Data Architect is client facing, hands on technologist that works on assigned projects to act as the lead technologist for the engagement.  Design and implement MVP/Pilot GCP cloud solutions, create solution architecture document covering deep technical aspects of the implementation. Be "hands on" with technology and to contribute to the design, development and support development teams with recommendations and adoption of tools. You will work in teams to deliver innovative solutions on Google Cloud using core cloud data warehouse tools like Spark, Event Stream platforms, and other Big Data related technologies. Build and Deploy Data Pipelines on Google Cloud to enable AI &amp; ML capabilities. Drive the development of cloud-based and hybrid data warehouses &amp; business intelligence platforms. Build Data Pipelines to ingest structured and Unstructured Data. Training – Develop and execute a professional plan that will enhance skills. Contribute to sales process improvement, including developing knowledge bases, creating sales tools, and mentoring other Solutions Architects <h3>Technical Requirements: </h3><ul><ul><li>3+ years of Google Cloud experience and 5+ years of experience as a Data Architect with a proven track record and experience leading engagements from design to implementation of data analytics solutions.  </li><li>Hands-on experience with Google Cloud Platform. </li><li>Experience leading data warehousing, data ingestion, and data profiling activities. </li><li>Advanced SQL skills, including the ability to write, tune, and interpret SQL queries; tool specific experience in the RDBMS listed above is ideal. </li><li>Hands-on experience with Google cloud platform technologies: Google Cloud Platform Pub/Sub, Cloud Functions, DataFlow, DataProc (Hadoop, Spark, Hive), Cloud Machine Learning, Cloud Data Store and BigTable, BigQuery, DataLab, and DataStudio. </li><li>Proven experience in migration databases like mySQL, Postgres, and Oracle to Cloud SQL. </li><li>Certifications in architecture, data engineering and development on Google Cloud. </li></ul></ul><h3>Other Requirements: </h3><ul><ul><li>Highly motivated self-starter and team player and demonstrated success in prior roles. </li><li>Excellent problem solving, analytical, presentation, and whiteboarding skills </li><li>Track record of success dealing with ambiguity (internal and external) and work</li><li>Track record of success dealing with ambiguity (internal and external) and working collaboratively with other departments and organizations to solve challenging problems </li></ul></ul>About Rackspace TechnologyWe are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.  More on Rackspace TechnologyThough we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

India

Sr.  Data Architect – GCP

Job DescriptionOverview of the Role Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management.As a bank with a brain and a soul, Citi creates economic value that is systemically responsible and in our clients’ best interests. As a financial institution that touches every region of the world and every sector that shapes your daily life, our Enterprise Operations &amp; Technology teams are charged with a mission that rivals any large tech company. Our technology solutions are the foundations of everything we do from keeping the bank safe, managing global resources, and providing the technical tools our workers need to be successful to designing our digital architecture and ensuring our platforms provide a first-class customer experience. We reimagine client and partner experiences to deliver excellence through secure, reliable, and efficient services.Our commitment to diversity includes a workforce that represents the clients we serve from all walks of life, backgrounds, and origins. We foster an environment where the best people want to work. We value and demand respect for others, promote individuals based on merit, and ensure opportunities for personal development are widely available to all. Ideal candidates are innovators with well-rounded backgrounds who bring their authentic selves to work and complement our culture of delivering results with pride. If you are a problem solver who seeks passion in your work, come join us. We’ll enable growth and progress together.Citi's Data Security organization is responsible for providing support services to all Citi businesses and technology teams globally. The Info Security Tech Sr Analyst is an intermediate level position responsible for leading efforts to provide data security, encryption, key and certificate management solutions to all businesses within Citi. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy.Job Purpose:The Info Security Tech Sr Analyst will be responsible for the L3 operational support of multiple critical Data Security infrastructures / applications including but not limited to Secure File Transfer, Code Signing, Crypto Assets Inventory and other PKI and Encryption solutions. Duties include the oversight, planning, troubleshooting, and management of all the technology components that form the above solutions. Capacity planning for infrastructure growth, as well as coordinating large scale upgrade / migration efforts is among the responsibilities of the position. The candidate will be working on the product strategy with engineering and product vendors, and overseeing the cyber security risk and compliance landscape of the supported applications. Regular weekend work is expected.Responsibilities:<ul><li>Support internal and external customers in leveraging/adopting Data Security services</li><li>Deploy and perform testing of solutions in Development, UAT and Production environments. At all times ensure that solutions are assessed to meet operational and risk requirements</li><li>Interact with engineering and product vendors to investigate problems and understand product functionality, influence enhancements and roadmap as required to meet organizational goals</li><li>Work with strategic technology and business partners to define strategy and day to day operations of the supported products</li><li>Ensure compliance of all the supported applications with Citi published standards.</li><li>Manage operational and security risk of the supported products</li><li>Manage projects aligned to organizational goals</li><li>Identify and develop new and improved technical procedures and process control manuals</li><li>Assume informal/formal mentorship role within teams and assist with the coaching and training of new team members</li><li>Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency.</li></ul>Qualifications:<ul><li>5-8 years of relevant experience</li><li>Consistently demonstrates clear and concise written and verbal communication</li><li>Proven influencing and relationship management skills</li><li>Proven analytical skills</li><li>The ability to work on large scale projects with tight deadlines</li></ul>The candidate is expected to have knowledge and experience in the majority of the below:<ul><li>Linux (Red Hat)</li><li>File transfer protocols (SFTP/FTPS/HTTPS)</li><li>Encryption protocols (PGP/TLS/SSH)</li><li>Security protocols and cryptographic algorithms in general</li><li>Experience with large scale integration and hosting environments</li></ul>Knowledge or experience with any of the following technologies is an advantage:<ul><li>Axway SecureTransport</li><li>Linux scripting knowledge (Python, bash, Perl)</li><li>Web / Application Server technologies (e.g. Tomcat, NGINX)</li><li>API and Web services</li><li>Cloud security, containers, OpenShift, Kubernetes</li><li>Oracle Database SQL</li><li>Familiarity with load balancers, proxy servers and firewalls</li></ul>Education:<ul><li>Bachelor’s degree/University degree or equivalent experience</li></ul>This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.------------------------------------------------------Job Family Group: Technology------------------------------------------------------Job Family:Information Security------------------------------------------------------Time Type:Full time------------------------------------------------------Primary Location:New Castle Delaware United States------------------------------------------------------Primary Location Full Time Salary Range:$96,400.00 - $144,600.00In addition to salary, Citi’s offerings may also include, for eligible employees, discretionary and formulaic incentive and retention awards. Citi offers competitive employee benefits, including: medical, dental &amp; vision coverage; 401(k); life, accident, and disability insurance; and wellness programs. Citi also offers paid time off packages, including planned time off (vacation), unplanned time off (sick leave), and paid holidays. For additional information regarding Citi employee benefits, please visit citibenefits.com. Available offerings may vary by jurisdiction, job level, and date of hire.------------------------------------------------------Anticipated Posting Close Date:May 15, 2024------------------------------------------------------Citi is an equal opportunity and affirmative action employer.Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View the "<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law</a>" poster. View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law Supplement</a>.View the <a href="http://citi.com/citi/diversity/assets/pdf/eeo_aa_policy.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a>.View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Pay Transparency Posting</a>

Data Security Sr Analyst, AVP

The leading job board for Cyber Security Jobs. Start your career in Information Security Industry. Jobs are updated daily.

Job Position and Company	Location	Tags	Posted
Information Systems Security Manager (ISSM) at STR	Remote Full Time CISM Manager Incident Response
Senior Staff Engineer, Technical Program Management (Information Security) at Coupang	Full Time CISM Audit Chief
Senior Cyber Security Engineer at Node.Digital	Full Time Ethical Hacker Analyst Windows
Director, Identity and Access Management (Information Security) at Coupang	Full Time Application Security
2024-0086 Specialised Consultants for Security Development (NS) - THU 23 May at EMW, Inc.	Remote Consultant Contract
Consultant, Cyber Risk Advisory \| Remote US at Coalfire	Remote Full Time CISM Consultant Incident Response
DevSecOps Engineer - U.S. Citizenship Required at Ardent MC	Remote Full Time Windows Devsecops
Associate, Cyber Risk Advisory \| Remote US at Coalfire	Remote Full Time Consulting
Senior Security Incident Response Analyst at Farfetch	Remote Full Time Analyst Incident Response
Red Team Senior Operator at Deloitte	Full Time Incident Response Windows Red Team
IT Security Engineer - GRC at Xtremax	Full Time
Cyber Security Intelligence Group Manager, SVP at City	Full Time CISM CISO Manager Chief
Google Cloud Technical Product Manager at Rackspace	Remote Full Time Manager
Network Security Analyst at Wiz, Inc.	Full Time Analyst
Information Security Auditor - Schwerpunkt IT-Prüfung (m/w/d) at Deloitte	Remote Full Time CISO
Senior Security Engineer at Minitab	Full Time Blue Team Comptia Audit Application Security
Junior Compliance Analyst (remote opportunity, work anywhere) at CloudLinux	Remote Full Time Analyst
Cyber Security Operations Analyst (L1) at WPP	Remote Full Time Analyst Incident Response
Sr. Data Architect – GCP at Rackspace	Remote Full Time
Data Security Sr Analyst, AVP at City	Full Time Analyst

Cyber Security Jobs

403 Cyber Security Jobs. Page 1 of 21

Subscribe to the weekly
Cyber Security Jobs Newsletter