Keyfactor, Inc.

Title: Security Compliance Analyst
Location: Barcelona, Spain
Job Function: Compliance
Employment Type: Full-Time
Industry: Enterprise Software
About the position 
We at Keyfactor are looking to hire a Security Compliance Analyst to join our fast-growing Cloud Operations and Compliance department. Security and Compliance works with all areas of the business, standing on the front lines to protect and enable fast, secure growth. The Security Compliance Analyst position will directly assist the Cloud Operations and Compliance Teams with the internal and external security and compliance responsibilities.
The position is based in Barcelona office with flexibility to work in hybrid setting when necessary. Applicants must hold Valid Right to Work in Spain to apply for this position.
RESONSIBILITIES
<ul>
<li>Participate in the collection of evidence for various audits and assessments (e.g., SOC, ISO27001, etc.)</li>
<li>Working with Keyfactor’s team members, suppliers, and business partners to ensure adherence to established Information Security policies</li>
<li>Communicating with the organization, including training, regarding information security policy implementations and technical measures</li>
<li>Consulting with all levels of the organization on information security control implementations and alignment with industry standards and best practices</li>
<li>Participate in internal risk assessments and audits</li>
<li>Responding in a timely manner to customers’ vendor risk assessments, information security questionnaires and evaluations</li>
</ul>
SKILLS AND QUALIFICATIONS
<ul>
<li>Fundamental technical troubleshooting and problem-solving skills</li>
<li>Formal industry and regulatory audit execution such as SOC 2, GDPR, CCPA, ISO 27001, PCI DSS, FedRAMP, and/or Sarbanes-Oxley</li>
<li>Information Security Policy composition, maintenance, and implementation experience</li>
<li>Executing risk management and treatment plans</li>
<li>Multi-tasking and prioritization involving complex technical and policy-related subjects</li>
<li>Currently maintains or is in the process of obtaining industry security certifications (e.g., CISSP, CEH, CISM, CISA, CIPT, etc.)</li>
<li>Basic systems administration capabilities (e.g., Windows Server, Active Directory user accounts, password management, security groups, etc.)</li>
</ul>
COMPENSATION
Salary will be commensurate with experience.
CULTURE, CAREER OPPORTUNITIES AND BENEFITS
We build teams that continually strive to get better than the day before. You will be challenged daily and given opportunities to grow personally and professionally. We balance autonomy and structure to create an entrepreneurial environment to spur creativity and new ideas. A few initiatives that make our culture special include:
<ul>
<li>Comprehensive benefit coverage</li>
<li>Dedicated employee focused ambassadors via Key Contributor &amp; Culture Committee</li>
<li>DIVERSE Commitment</li>
<li>Global Volunteer Day</li>
<li>Flexible time off</li>
<li>Monthly Cross Functional meetings</li>
<li>Monthly Leadership Development meetings</li>
<li>Monthly All Hands meetings – followed by group gatherings</li>
<li>Second Friday’s (the office is closed on the second Friday of every month)</li>
<li>The Keyfactor Alliance Program</li>
<li>Weekly Feedback Snapshot</li>
</ul>
OUR CORE VALUES
Our core values are extremely important to how we run our business and what we look for in every team member:
<ul>
<li>Trust is paramount – We deliver security software and solutions where trust is of the highest importance for our customers. We are honest and a trusted partner in every aspect of business.</li>
<li>Customers are core - We strategize, operate, and execute through a customer-centric view. We prioritize the security interests of our customers, and we act as if their data were our own.</li>
<li>Innovation never stops, it only accelerates - The speed of change is accelerating. We are committed, through investment and focus, to stay ahead of the innovation curve.</li>
<li>Deliver with agility - We thrive in high paced and continually changing environments. We navigate through newly added variables, adjust accordingly, while driving towards our strategic goals.</li>
<li>Teams make “it” happen - Vision and goals are not individually achievable - They require teamwork. We pride ourselves in operating as a cohesive team, creating promoters and partners, and winning as one.</li>
<li>Keyfactor is a proud equal opportunity employer. navigate through newly added variables, adjust accordingly, while driving towards our strategic goals.</li>
<li>Teams make “it” happen - Vision and goals are not individually achievable - They require teamwork. We pride ourselves in operating as a cohesive team, creating promoters and partners, and winning as one.</li>
</ul>

Keyfactor is a proud equal opportunity employer.

Barcelona

Security Compliance Analyst

Arctic Wolf Networks

Arctic Wolf, with its unicorn valuation, is the leader in security operations in an exciting and fast-growing industry—cybersecurity. We have won countless awards for our excellence in security operations and remain dedicated to providing an industry-leading customer and employee experience.
Our mission is simple: End Cyber Risk. We’re looking for a Senior Concierge Security Engineer to be part of making this happen.  
The Sr. Concierge Security Engineer (CSE) is critical to delivering world-class Arctic Wolf security services.  The CSE owns the security relationship with their assigned customers and leverages their cross-domain expertise to fulfill these key responsibilities:
<ul>
<li>Primary cybersecurity technical point of contact for customers;</li>
<li>Create and maintain an outstanding partnership with customers;</li>
<li>Implement, manage and support the direct delivery of Arctic Wolf network and endpoint security solutions to customers;</li>
<li>Action customer requests in a timely manner, including directing and coordinating efforts with other teams, as needed.</li>
<li>Proactively interact and communicate with internal and external stakeholders;</li>
<li>Mentor junior security analysts and engineers to support their professional growth.</li>
</ul>
The CSE role combines aspects of an IT Security Analyst, a Security Architect, and an Incident Response Consultant.  A successful CSE possesses a strong ability to communicate, educate, and share information effectively with non-technical people.
Who You Are:
You thrive in fast-paced environments and have a positive can-do attitude.  You are a critical thinker that continually learns and can navigate uncertainty.  You enjoy working with customers and in a team, are an excellent communicator, and are able easily interact with a variety of people, personalities and technical skill levels.  Above all, your passion for cybersecurity and partnering with customers shows in everything you do!
You possess these required skills and experience:
<ul>
<li>7+ years of experience in a hands-on security role with a strong knowledge of security architecture</li>
<li>BS Degree in a relevant field or certifications and experience equivalent</li>
<li>Stellar partnering and relationship building skills in a professional context</li>
<li>Excellent communication skills, both written and verbal</li>
<li>Strong understanding of a defense-in-depth cybersecurity model</li>
<li>Strong knowledge of and experience using and securing Windows and Linux/Unix operating systems</li>
<li>Strong understanding of enterprise IT security solutions, including: Firewalls, Intrusion Detection Systems, Antivirus, Content Filtering, and Proxies</li>
<li>Strong experience and understanding of enterprise IT operations, including: Networking, Windows Active Directory, LDAP, Server Administration, and Cloud Infrastructure</li>
<li>Strong analytical and problem-solving skills</li>
<li>Experience with Security Information and Event Management (SIEM) tools</li>
<li>Basic understanding of secure DevOps principles for working in the cloud</li>
<li>Familiarity with scripting tools and languages such as Python, Bash, and Power Shell</li>
</ul>
And you may have these additional skills and experience:
<ul>
<li>Security testing and forensics tools</li>
<li>Malware analysis</li>
<li>Incident response</li>
<li>Authentication and identity management</li>
<li>Risk management, assessment and common compliance frameworks</li>
<li>Penetration testing and attack simulation</li>
</ul>
Bonus Points:
<ul>
<li>Speaking at conferences and writing technical blog posts, particularly in the Cybersecurity space</li>
<li>Proficiency in multiple spoken languages is a definite plus. Proficiency in English, both written and spoken communication is required.</li>
</ul>
About Arctic Wolf 
At Arctic Wolf we’re cultivating a collaborative and productive work environment that welcomes a diversity of backgrounds, cultures, and ideas to make our teams even stronger as we grow globally. We’ve been named one of the 50 Most Innovative Companies in the world for 2022 (Fast Company)—and the 2nd Most Innovative Security Company. This is in addition to consecutive awards from Top Workplace USA (2021, 2022), Best Places to Work - USA (2021, 2022) and Great Place to Work - Canada (2021, 2022). 
Our Values
Arctic Wolf recognizes that success comes from delighting our customers, so we work together to ensure that happens every day. We believe in diversity and inclusion, and truly value the unique qualities and unique perspectives all employees bring to the organization. And we appreciate that—by protecting people’s and organizations’ sensitive data and seeking to end cyber risk— we get to work in an industry that is fundamental to the greater good. 
We celebrate unique perspectives by creating a platform for all voices to be heard through our Pack Unity program. We encourage all employees to join or create a new alliance. See more about our Pack Unity <a href="https://arcticwolf.com/company/careers/diversity-equity-inclusion-and-belonging/" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>.  
We also believe and practice corporate responsibility, and have recently joined the Pledge 1% Movement, ensuring that we continue to give back to our community. We know that through our mission to End Cyber Risk we will continue to engage and give back to our communities. 
All wolves receive compelling compensation and benefits packages, including: 
<ul>
<li>Equity for all employees</li>
<li>Flexible time off, paid volunteer days and paid parental leave</li>
<li>RRSP and 401k match</li>
<li>Training and career development programs</li>
</ul>
 Arctic Wolf is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, provincial, or local law. Arctic Wolf is committed to fostering a welcoming, accessible, respectful, and inclusive environment ensuring equal access and participation for people with disabilities. As such, we strive to make our entire employee experience as accessible as possible and provide accommodations as required for candidates and employees with disabilities and/or other specific needs where possible. Please let us know if you require any accommodations by emailing <a href="mailto:recruiting@arcticwolf.com" rel="noopener noreferrer nofollow ugc" target="_blank">recruiting@arcticwolf.com</a>. 
Security Requirements 
<ul>
<li>Conducts duties and responsibilities in accordance with AWN’s Information Security policies, standards, processes and controls to protect the confidentiality, integrity and availability of AWN business information (in accordance with our employee handbook and corporate policies).</li>
<li>Background checks are required for this position.</li>
</ul>

Australia

Senior Concierge Security Engineer

XOR Security

<h3>Job Description:</h3>
XOR Security is currently seeking talented SOC Analyst for an exciting position supporting one of our premier clients. Our project is aimed at establishing cutting-edge techniques for network defense, identifying threats and detecting malicious activity using advanced toolsets. 
The ideal candidate will have hands-on experience as a SOC analyst performing Incident Response and Intrusion Detection on an operational Federal network.  The candidate will Monitor and analyze network traffic, Intrusion Detection Systems (IDS), security events and logs and provide a technical resource and escalation point for tier 1 analysts.  The candidate will perform incident response to investigate and resolve security incidents.  The candidate will need to be able to determine between false and true positives events, prioritizing them appropriately and see them through from end to end.  Additionally, the candidate will perform or review root cause analysis efforts following incident recovery.  The candidate will compose security alert notifications and other communications on behalf of the SOC.
In addition, the candidate will need to stay up to date with current vulnerabilities, attacks, and countermeasures.  The candidate will Develop follow-up action plans to resolve reportable issues and communicate with the other technologists to address security threats and incidents.  Also, the candidate will Regularly develop new use cases for automation and tuning of security tools.  The candidate will Define and create privacy and security reportable issues metrics and reports.  The candidate will need to contribute to security strategy and security posture by identifying security gaps, evaluate and implement enhancements.  The ideal candidate will possess a strong technical expertise of log and monitoring management systems, security event monitoring systems, network-based and host-based intrusion detection systems, firewall technologies, malware detection and enterprise-level antivirus solutions/systems, VPN technologies and encryptions standards
Location:
Washington D.C., USA
Schedule:
6am - 2pm or 10am - 6pm. Analyst should be flexible for both for potential rotation.
<h3>Skills and Qualifications:</h3>
<h4>Required Qualifications:</h4>
<ul>
<li>An industry technical certification such as GCIH</li>
<li>Experience with tools such as Active Directory, Cisco IOS, MS Server, ESA, WSA, Stealthwatch, AMP, Splunk, FortiSIEM, SNORT, Yara, IronPort, and Firepower.</li>
<li>Experience with deployment and documentation of enterprise project management and change management processes</li>
<li>Ability to identify solutions to potential network issues/embrace network simplification and strengthened security</li>
<li>Ability to conduct event triage and analysis and incident investigation</li>
<li>Three (3) years of experience in network defense environments</li>
</ul>
<h4>Desired Qualifications:</h4>
<ul>
<li>Understanding of command line scripting and implementation (e.g., Python, Powershell)</li>
<li>Ability to write new content/searches/scripts (e.g., Splunk dashboards, Splunk ES alerts, SNORT signatures, Python scripts, Powershell scripts)</li>
<li>Familiarity with Splunk Enterprise Security</li>
<li>Strong understanding of networking (TCP Flags, TCP Handshake, IP addressing, Firewalls, Proxy, IDS, IPS)</li>
<li>Ability to perform Netflow / packet capture (PCAP) analysis</li>
<li>Experience with cyber threat hunting</li>
<li>Bachelor’s Degree in Computer Science, Computer Engineering, Information Systems or equivalent experience</li>
</ul>
<h3>Closing Statement:</h3>
XOR Security offers a very competitive benefits package including health insurance coverage from the first day of employment, 401k with a vested company match, vacation and supplemental insurance benefits.
XOR Security is an Equal Opportunity Employer (EOE). M/F/D/V.
Citizenship Clearance RequirementApplicants selected may be subject to a government security investigation and must meet eligibility requirements - US CITIZENSHIP and PUBLIC TRUST CLEARANCE REQUIRED.

Washington

Mid Level SOC Analyst

Zopa

Our Story Hello there. We’re Zopa. We began our journey in 2005 with the drive to deliver customer-first financial products. Fast forward to 2020, we shifted gears and became a digital bank, leveraging our customer knowledge, money expertise and technical agility to forge ahead. Our diverse team is united by a mission to create simple, fair and honest financial products that have the customers’ needs at their heart.  We’re regularly recognised at industry awards for our game-changing products and are proud to be one of the market leaders in consumer lending in the UK. But our work doesn’t stop there.   After securing £220 million in our 2021 funding round led by SoftBank, we’ve entered the next stage in our journey. So far, we’ve lent out over £6 billion and made money work better for over half a million people across the UK who were looking to borrow or save with us. In less than 2 years after becoming a bank, we hit £1 billion in customer deposits and we’re also a top 5 credit card issuer in the UK. And this is just the beginning. We’re set on achieving big things with ambitious growth targets to match. This means there's a range of opportunities for you to excel and develop through a career at Zopa, while building better banking products that truly matter to our customers.     If you embrace unconventional challenges, are unafraid to think differently and are driven to make an outsized impact, you’ll thrive here at Zopa. For a closer look at our culture, check out <a href="https://www.youtube.com/watch?v=e5ek2PQ-DhE" rel="noopener noreferrer nofollow ugc" target="_blank">our latest video here</a>. And if you want to join us, have a look at <a href="https://www.zopa.com/about/careers" rel="noopener noreferrer nofollow ugc" target="_blank">our current open roles</a>!What's the challenge? The ZRE Security team are part of Zopa Reliability Engineering (ZRE) and are responsible for ensuring our Platform &amp; Infrastructure is secure, and meets the controls required in a regulated environment. As a Cloud Security Engineer, you will be an owner for ZRE security work, whilst helping ZRE to maintain a strong security posture. This includes proactively aligning our platform/infrastructure with our InfoSec policies and standards, whilst defining work for remediation and improvement. You will be a champion for Security both within the ZRE team and in the wider business, helping to encourage a security mindset in everything we do. All the while automating consistently and helping to design and support the technology infrastructure to help Zopa grow.
<h3>Responsibilities:</h3>
<ul>
<li>Work with our Infosec team to triage and define security work coming into ZRE</li><li>Define remediation plans for security issues</li><li>Define our AWS Account security baseline, including management of common Security controls using Organisations</li><li>Contribute a security perspective to design discussions for new projects within ZRE, and the wider business</li><li>Automate to improve response to security issues and reduce toil</li><li>Use Threat Modelling to identify vulnerabilities and attack vectors across our infrastructure</li></ul>
<h3>About you:</h3>
<ul>
<li>In-depth knowledge of AWS (Organisations, IAM, VPC Networking, KMS, GuardDuty, CloudTrail, Config)</li><li>Experience using Infrastructure as Code (e.g., Terraform)</li><li>Strong knowledge of Containers and Orchestration (Kubernetes, Docker)</li><li>Experience with Linux administration, hardening and troubleshooting</li><li>Operational experience with HashiCorp Vault (ACL management, auth methods, secret engines)</li><li>A passion for Information Security, with experience applying this to Cloud Operations</li><li>A well-rounded understanding of foundational security concepts including best practices and how to apply them. Such as, Threat Modelling, OWASP Top 10 &amp; common vulnerabilities, PKI, TLS</li><li>Comfortable with scripting languages e.g. Bash, Python, PowerShell</li><li>Functional understanding of Networking &amp; common protocols</li></ul>
<h3>Nice to have:</h3>
<ul>
<li>Experience working in an FCA regulated organisation, ideally within the financial sector</li><li>Exposure to Active Directory</li><li>Hands-on experience with Networking e.g., CCNA or experience with physical networks</li></ul>#LI-MW1Flexible working? Yes please!Whether you want to come into our open-plan, riverside London Bridge office or work from the comfort of your own home (or both!), you’ll be able to decide on an approach with your manager, looking at what works best for you, your role and your team.Not only that – you'll also have the option of working from abroad for up to 90 days a year!* But no matter where you are, we’ll make sure you’ve got everything you need to thrive, both in your work and home life, from day one. *Subject to having the right to work in the country of choiceTo thrive here, you’ll need to: Champion our customers. Whatever your role, you’ll be close to our customers. We care passionately about doing the best for them.  Help us make fearless choices. Our environment is fast-paced, agile and open. You’ll solve interesting and challenging problems, and be trusted and empowered to bring your ideas to life. Walk the talk. Like us, you’ll be honest, stick to your promises and face the tough moments head-on. Win smarter. You’ll be always on the lookout for a better way of doing things, going beyond ‘good enough’ and welcoming different points of view. Be in it together. You’ll join an ambitious, diverse and all-round approachable team with a mix of ideas and talents who inspire each other to be better every day.  Zopa is proud to offer a workplace free from discrimination. Diversity of experience, perspectives, and backgrounds leads to great products and unique company culture. We simply can’t expect to empower our customers to better manage their money without challenging the current status quo. Creating the best place for money is no easy task, which is why we need talent from all walks of life.

London

Cloud Security Engineer

Avertium

Avertium is the security partner that companies turn to for end-to-end Cybersecurity solutions that attack the chaos of the cybersecurity landscape with context. By fusing together human expertise and a business-first mindset with the right combination of technology and threat intelligence, Avertium delivers a more comprehensive, more programmatic approach to cybersecurity - one that drives action on the ground and influence in the boardroom. That's why over 1,200 mid-market and enterprise-level organizations across 15 industries turn to Avertium when they want to be more efficient, more effective, and more resilient when waging today's cyber war. Show no weakness.®The CyberSecurity Analyst is a trusted technical advisor working with an active Center of Excellence. The CS Analyst works closely with the client to provide proactive support assistance to reduce or prevent security issues from occurring on the client network.  The CS Analyst will administer and maintain security measures focused on application, web and infrastructure security for the client. The CS Analyst is responsible for working with key client contacts at multiple levels of the organization to identify and align business and IT Security objectives.  The CS Analyst will provide security analytics and assistance with security support requests. 
<h3>Responsibilities:</h3>
<ul>
<li>Monitor, respond to, and analyze SIEM alerts from monitoring tools. </li><li>Provide technical guidance / recommendations to clients to enhance their overall security posture within the managed products.  Handles daily incidents; monitors, tracks, analyzes and records. </li><li>Work with vendors, outside consultants, and other third parties to improve information security within the organization. </li><li>Responds to security related tickets escalated from clients, and works collaboratively with the client to assist in resolving security events. </li><li>Work with other IT professionals to resolve fast moving vulnerabilities such as spam, virus, spyware and malware. </li><li>Monitor security vulnerability information from vendors and third parties. </li><li>Create Weekly and Monthly Status Reports, including daily technical task reports and contract deliverables. </li></ul>
<h3>Qualifications for Success:</h3>
<ul>
<li>Strong written, verbal and non-verbal communication skills, especially conveying complex information in an understandable manner. </li><li>CISSP, CISA or GIAC certification is a plus. </li><li>A minimum of 2-4 years of experience working with Microsoft Active Directory. </li><li>Experience in managing an organization's PCI, HIPAA, or SSAE16 certification is preferred. </li><li>Analyze and resolve complex technical and business problems. </li><li>Must have proficient knowledge with three or more of the following technologies:  Application / stateful / UTM firewalls; SIEM; DLP; Web content filtering; Web application firewalls (WAF); Vulnerability scanning and penetration testing; IPS/IDS; Security Operations Center operations; Wireless Networking; UNIX, AIX &amp; Solaris, Linux, Windows Server Operating Systems; Endpoint and Malware </li><li>Knowledge with NIST, FISMA, DIACAP. </li><li>Knowledge of Windows 2003-12 server platforms. </li><li>Knowledge of VMware and VM server platforms. </li><li>Knowledge of UNIX server platforms. </li><li>Working knowledge of analyzing IIS, SQL, firewall, IPS/IDS, Windows. </li><li>Web and mail logged events. </li><li>Ability to analyze IANA assigned ports (well known, registered, dynamic and private ports). </li><li>Ability to troubleshoot common network devices, network, vulnerabilities and network attack patterns. </li><li>Ability to troubleshoot Windows Event IDs. </li><li>Interact with all levels of management. </li><li>Make decisions based on many variables. </li><li>Manage multiple tasks/projects simultaneously. </li><li>Minimum of Bachelor's Degree in computer science, telecommunications management, electrical engineering, or a related field or have 4 years of experience. </li><li>Advanced network and systems certifications such as CCNP, CCNA and CISSP, are preferred. </li><li>Other industry certifications such as ITIL, Microsoft, Juniper and Checkpoint are a plus. </li></ul>In addition to a career in the challenging world of cyber security, Avertium offers competitive salaries, full benefits, unlimited paid time off, participation in 401(k), and opportunities for professional growth and development. We offer the opportunity to work with cutting-edge security technologies in a stimulating work environment.Avertium provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Knoxville

CyberSecurity Analyst, Cyber Fusion Team, MSS | Knoxville, TN

Apply to Staff Directory Cyber Security Jobs in companies remotely and near you. New Staff Directory Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Security Compliance Analyst at Keyfactor, Inc.	Full Time CISM Audit Analyst Consulting
Senior Concierge Security Engineer at Arctic Wolf Networks	Remote Full Time Consultant Analyst Incident Response
Mid Level SOC Analyst at XOR Security	Full Time Soc Analyst Analyst Incident Response Active Directory
Cloud Security Engineer at Zopa	Full Time Manager Active Directory Agile AWS
CyberSecurity Analyst, Cyber Fusion Team, MSS \| Knoxville, TN at Avertium	Full Time Analyst Contract Windows Active Directory

Staff Directory Cyber Security Jobs

0 Staff Directory Cyber Security Jobs. Page 1 of 1

5 closed staff directory cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Staff Directory Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Staff Directory Cyber Security Jobs

0 Staff Directory Cyber Security Jobs. Page 1 of 1

5 closed staff directory cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Staff Directory Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter