{ "count" : 15972, "data" : [ { "id" : "6a2c7bd274d8ee00a094b368", "title" : "Incident Commander, Program Manager", "company" : "Block", "industry" : "FinTech", "salary" : { "min" : 175000.0, "max" : 245000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Incident Commander, Program Manager in Oakland, CA, adjusted for Block's size and the FinTech industry." }, "location" : "US - CA - Oakland", "locations" : [ "US - CA - Oakland" ], "timestamp" : "2026-06-15T03:42:48.826", "fingerprint" : "68a553691f3791e241a3cc080c0d0cd3be79c274b2d15d91becd333ede12ad4a", "source" : "greenhouse", "language" : "en", "applyUrl" : "http://block.xyz/careers/jobs/5124221008?gh_jid=5124221008", "externalId" : "5124221008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Oakland", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.8044557,-122.2713560" } ], "locationText" : "Oakland, California, United States", "experienceMinYears" : 7, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement" ], "majorSkills" : "Incident management, Crisis response, Program management", "majorSkillsList" : [ "Incident management", "Crisis response", "Program management" ], "coreResponsibilities" : "Lead incident commander, Direct real-time response, Coordinate cross-functional teams, Accountability for incident escalation, Accountability for containment, Accountability for remediation, Accountability for resolution, Document incident timelines, Maintain incident timelines, Document key decisions, Maintain key decisions, Document supporting evidence, Maintain supporting evidence, Oversee incident report preparation, Manage internal communication channels, Share accurate updates, Facilitate post-incident reviews, Identify lessons learned, Improve incident preparedness, Improve incident response", "teamCollaboration" : "Cross-functional teams; Legal; Compliance; Engineering; Product; Customer Success", "projectManagementSkills" : [ "Project management" ], "domainKnowledge" : "Economic empowerment; Operational resilience; Responsible innovation", "domainList" : [ "economic-empowerment", "operational-resilience", "responsible-innovation" ], "domainSpecificKnowledge" : [ "Economic empowerment", "Operational resilience", "Responsible innovation" ], "documentationSkills" : "Incident reports", "qualificationsBasic" : "7+ years incident management, 5+ years project management", "rawDescription" : "Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block. The Role Block's Critical Incident Management Team (CIMT) plays an important role in protecting our operations, customers, and regulatory standing in the face of significant business incidents. As our organization continues to grow, we are expanding our incident command capabilities to ensure fast, coordinated, and effective responses to high-impact events. As an Incident Commander within the Risk organization, you will be at the center of Block's response to complex, high-stakes incidents, helping maintain our operational resilience and uphold our commitment to responsible innovation. You Will Be the lead incident commander for high-severity incidents across Block's ecosystem, including fraud events, customer-impacting issues, regulatory matters, and escalated incidents. Direct the real-time response and coordination among cross-functional teams such as Legal, Compliance, Engineering, Product, and Customer Success Be the central point of accountability for incident escalation, containment, remediation, and resolution Document and maintain detailed incident timelines, key decisions, and supporting evidence throughout the lifecycle of the incident Oversee the preparation of final incident reports Manage internal communication channels and ensure accurate, updates are shared with stakeholders at all levels Facilitate post-incident reviews to identify lessons learned and improve incident preparedness and response You Have 7 + years of Proven experience in incident management, crisis response, or a related role within a high-stakes operational environment 5+ years of Project management, especially under time-sensitive and high-pressure conditions Understanding of regulatory and compliance considerations in the financial services or technology space We're working to build a more inclusive economy where our customers have equal access to opportunity, and we strive to live by these same values in building our workplace. Block is an equal opportunity employer evaluating all employees and job applicants without regard to identity or any legally protected class. We will consider qualified applicants with arrest or conviction records for employment in accordance with state and local laws and “fair chance” ordinances. We believe in being fair, and are committed to an inclusive interview experience, including providing reasonable accommodations to disabled applicants throughout the recruitment process. We encourage applicants to share any needed accommodations with their recruiter, who will treat these requests as confidentially as possible. Want to learn more about what we're doing to build a workplace that is fair and square? Check out our I+D page. While there is no specific deadline to apply for this role, U. S. roles are typically open for an average of 55 days before being filled by a successful candidate. Please refer to the date listed at the top of this job page for when this role was first posted. Block takes a market-based approach to pay, and pay may vary depending on your location. U. S. locations are categorized into one of four zones based on a cost of labor index for that geographic area. The successful candidate’s starting pay will be determined based on job-related skills, experience, qualifications, work location, and market conditions. These ranges may be modified in the future. To find a location’s zone designation, please refer to this resource. If a location of interest is not listed, please speak with a recruiter for additional information. Zone A: $163,600—$245,400 USD Zone B: $152,200—$228,200 USD Zone C: $144,000—$216,000 USD Zone D: $135,800—$203,600 USD Application Guidelines Candidates may submit up to 9 active applications within a 60-day period. Reapplications to the same role are accepted 90 days after a previous application has been reviewed. Use of AI in Our Hiring Process We may use automated AI tools to evaluate job applications for efficiency and consistency. These tools comply with local regulations, including bias audits, and we handle all personal data in accordance with state and local privacy laws. Contact us here with hiring practice or data usage questions. Every benefit we offer is designed with one goal: empowering you to do the best work of your career while building the life you want. Remote work, medical insurance, flexible time off, retirement savings plans, and modern family planning are just some of our offering. Check out our other benefits at Block. Block, Inc. (NYSE: XYZ) builds technology to increase access to the global economy. Each of our brands unlocks different aspects of the economy for more people. Square makes commerce and financial services accessible to sellers. Cash App is the easy way to spend, send, and store money. Afterpay is transforming the way customers manage their spending over time. TIDAL is a music platform that empowers artists to thrive as entrepreneurs. Bitkey is a simple self-custody wallet built for bitcoin. Proto is a suite of bitcoin mining products and services. Together, we’re helping build a financial system that is open to everyone. Privacy Policy", "summaryDescription" : "Incident Commander, Program Manager at Block. Skills: Incident management, Crisis response, Program management. Lead incident commander. Direct real-time response", "postedDate" : "2026-06-13T20:34:06.477", "createdAt" : "2026-06-13T20:34:06.477", "lastUpdated" : "2026-06-15T03:42:48.826", "ingestTimestamp" : "2026-06-13T20:34:06.477", "mongoId" : "6a2c7bd274d8ee00a094b368", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 175000, "salaryAnnualMax" : 245000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Incident management", "Crisis response", "Program management", "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement", "Project management", "Economic empowerment", "Operational resilience", "Responsible innovation" ], "skillCount" : 14, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 712.704, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a306fd5f292fd229cfed7df", "title" : "Security Incident Response Manager", "company" : "Stripe", "industry" : "FinTech", "salary" : { "min" : 110000.0, "max" : 150000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Manager-level Security Incident Response Manager in the FinTech industry in Ireland, adjusted for seniority and company size." }, "location" : "Ireland Locations", "locations" : [ "Ireland Locations" ], "timestamp" : "2026-06-16T11:17:32.753", "fingerprint" : "5f1795380bd689254fa4ec13a24c81721330e837ac870f097537d3dd799086da", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://stripe.com/jobs/search?gh_jid=8007205", "externalId" : "8007205", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Ireland", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Ireland", "experienceMinYears" : 5, "experienceLevel" : "Manager", "technicalSkills" : "Python, SQL, MacOS, Linux, Windows", "professionalSkills" : [ "Security management", "Data analytics", "Network security", "Digital forensics", "Incident response", "Threat intelligence", "Data processing", "Data analysis" ], "hardSkillsList" : [ "Incident response", "Threat analysis", "Forensic investigation", "Data analysis", "Network security", "System administration" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "System administration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident Response Management, Security Operations, Team Leadership, Threat Analysis", "majorSkillsList" : [ "Incident Response Management", "Security Operations", "Team Leadership", "Threat Analysis" ], "coreResponsibilities" : "Leverage security management experience, Improve incident response capabilities, Manage team of security analysts, Manage investigators, Manage responders, Hire team members, Train team members, Evaluate team performance, Provide technical guidance, Develop response procedures, Ensure timely resolution of casework, Collaborate with internal stakeholders, Make continuous improvements to incident response function, Lead team of security analysts, Support team of security analysts, Triage threats, Assess threats, Respond to threats, Provide technical guidance to team, Influence organizational mission, Influence organizational vision, Ensure prioritization of project work, Ensure delivery of project work, Align project work with security roadmaps, Strengthen KPIs for response operations, Strengthen metrics for response operations, Provide clear reporting to stakeholders, Provide consistent reporting to stakeholders, Work cross-functionally with security engineering teams, Gather requirements for analyzing security events data, Gather requirements for responding to security events data, Protect Stripe networks, Protect Stripe systems, Protect Stripe data, Develop strategies for incident response, Document strategies for incident response, Implement strategies for incident response, Develop runbooks for incident response, Document runbooks for incident response, Implement runbooks for incident response, Develop capabilities for incident response, Document capabilities for incident response, Implement capabilities for incident response, Continuously improve security processes, Continuously improve response capabilities, Collaborate with security engineers, Collaborate with security analysts, Coach individual contributors, Mentor individual contributors, Enable career development, Champion quality standards within team", "teamCollaboration" : "Cross-functional teams; Security Analytics teams; Detection teams; Security engineering teams", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Threat actor tactics; Threat actor techniques; Threat actor procedures; Security incident response; Network security; Digital forensics; Data analytics", "domainList" : [ "threat-actor-tactics", "threat-actor-techniques", "threat-actor-procedures", "security-incident-response", "network-security", "digital-forensics", "data-analytics" ], "domainSpecificKnowledge" : [ "Threat actor tactics", "Threat actor techniques", "Threat actor procedures", "Security incident response", "Network security", "Digital forensics", "Data analytics" ], "toolProficiency" : [ "Chronicle", "Tines", "Osquery", "Splunk" ], "communicationSkills" : "Operational reporting; Incident reporting", "documentationSkills" : "Response procedures; Runbooks", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Ensure timely and effective resolution of casework", "qualificationsBasic" : "5+ years leading Security Operations or Incident Response teams, Hands-on, technical management experience, B.S. or M.S. Computer Science or related field, Equivalent experience in Security, Experience recruiting, growing, and leading technical teams, Performance management experience, Excellent written and verbal communication skills, Ability to develop and deliver operational or incident-related information to leadership, Advanced knowledge of data analytics, Advanced knowledge of network security, Advanced knowledge of digital forensics, Advanced knowledge of incident response investigations, Experience with Python, Experience with SQL, Familiarity with macOS, Familiarity with Linux, Familiarity with Windows, Understanding of threat actor TTPs", "qualificationsPreferred" : "Broad knowledge across information security domain, Familiarity with endpoint security, Familiarity with email security, Familiarity with network security, Familiarity with identity management, Familiarity with cloud security, Familiarity with vulnerability management, Familiarity with incident response, Familiarity with threat intelligence, Experience with engineering, Experience with data processing and analysis tools, Familiarity with network observability, Familiarity with security software, Familiarity with data engineering solutions, Familiarity with Chronicle, Familiarity with Tines, Familiarity with osquery, Familiarity with Splunk", "remoteFriendly" : true, "rawDescription" : "Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Security Incident Response team is responsible for triaging and assessing the severity of incoming security alerts, responding with initial containment measures and escalating as needed to incident responders for further investigation and resolution. They analyze a variety of data sources to identify potential threats, collect requirements for operational enhancements to detection and response systems, and generally scale security processes. From external attacks to insider threats, our goal is to respond with speed and precision, remediate, and support the incident postmortem process. The team is distributed globally and regularly coordinates with stakeholders in North America, Europe, and Asia. What you’ll do You will leverage your security management experience to improve incident response capabilities at Stripe. You will manage a team of security analysts, investigators, and responders on the front lines of the incident response process, hiring, training, and evaluating their performance, providing technical guidance where needed, developing clear and consistent response procedures, and ensuring timely and effective resolution of casework. You will also collaborate with various internal stakeholders, including the Security Analytics and Detection teams, and make continuous improvements to Stripe’s security incident response function. Responsibilities Lead and support a team of security analysts, investigators, and responders who triage, assess, and respond to threats Provide technical guidance to the team, as a subject matter expert Influence the organizational mission and vision by ensuring prioritization and delivery of project work that is aligned with relevant security roadmaps Strengthen KPIs and metrics for measuring response operations effectiveness, for clear and consistent reporting to internal stakeholders Work cross-functionally with security engineering teams to gather requirements for analyzing and responding to security events data at scale while protecting Stripe networks, systems, and data from threats Develop, document, and implement strategies, runbooks, and capabilities to support the incident response process Continuously improve security processes and response capabilities by collaborating with security engineers and analysts Coach and mentor individual contributors, enabling career development and championing quality standards within the team Who you are We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement. Minimum requirements 5+ years experience leading Security Operations or Incident Response teams, including hands-on, technical management experience of security analysts or engineers B. S. or M. S. Computer Science or related field, or equivalent experience in Security Experience recruiting, growing, and leading technical teams, including performance management Excellent written and verbal communication skills, including the ability to develop and deliver operational or incident-related information to leadership Advanced knowledge of data analytics (e. g. logs for first or third party applications, system / data access events), network security, digital forensics, and incident response investigations Experience with Python and SQL, and/or familiarity with other programming languages Familiarity with operating systems, file systems, and memory on macOS, Linux, or Windows Strong understanding of threat actor tactics, techniques, and procedures (TTPs) Preferred qualifications Broad knowledge and experience across the information security domain, including familiarity with endpoint, email, network, identity management, cloud security, vulnerability management, incident response, and threat intelligence. Experience with engineering, data processing and analysis tools Familiarity with network observability, security software, or data engineering solutions (Chronicle, Tines, osquery, Splunk, etc.)", "summaryDescription" : "Security Incident Response Manager at Stripe. Skills: Incident Response Management, Security Operations, Team Leadership, Threat Analysis. Leverage security management experience. Improve incident response capabilities", "postedDate" : "2026-06-16T01:16:18.624", "createdAt" : "2026-06-16T01:16:18.624", "lastUpdated" : "2026-06-16T11:17:32.753", "ingestTimestamp" : "2026-06-16T01:16:18.624", "mongoId" : "6a306fd5f292fd229cfed7df", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Incident response", "Threat analysis", "Forensic investigation", "Data analysis", "Network security", "System administration", "Leadership", "Incident Response Management", "Security Operations", "Team Leadership", "Threat Analysis", "Security management", "Data analytics", "Digital forensics", "Threat intelligence", "Data processing", "Roadmap planning", "Threat actor tactics", "Threat actor techniques", "Threat actor procedures", "Security incident response", "Chronicle", "Tines", "Osquery", "Splunk" ], "skillCount" : 25, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 688.9202, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305653f292fd229cf27dba", "title" : "Security Engineer II, Security Incident Response Team (SIRT)", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 159000.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-16T08:11:33.016", "fingerprint" : "0987fca027bd6689942ce9706e1f89c85b280b67309ecc2a54aad3db41923465", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10443978/apply", "externalId" : "c8d18061-5e73-4845-8dc5-690328d5af3a", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Cloud security, Network security, Endpoint security, Vulnerability management, Incident response, SIEM, Forensics, Scripting languages, AWS, Azure, GCP", "professionalSkills" : [ "Problem solving", "Analytical thinking", "Decision making" ], "hardSkillsList" : [ "Incident analysis", "Malware analysis", "Digital forensics", "Network traffic analysis", "Log analysis" ], "hardSkills" : [ { "name" : "Incident analysis", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Digital forensics", "level" : "intermediate" }, { "name" : "Network traffic analysis", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" } ], "majorSkills" : "Security Incident Response, Cloud Security, Threat Detection", "majorSkillsList" : [ "Security Incident Response", "Cloud Security", "Threat Detection" ], "coreResponsibilities" : "Respond to security incidents, Investigate security breaches, Analyze security alerts, Perform digital forensics, Develop incident response playbooks, Collaborate with engineering teams, Improve security posture, Stay current with threats", "teamCollaboration" : "Cross-functional teams; Engineering teams", "domainKnowledge" : "Cloud computing; Network protocols; Operating systems; Cyber threats", "domainList" : [ "cloud-computing", "network-protocols", "operating-systems", "cyber-threats" ], "domainSpecificKnowledge" : [ "Cloud computing", "Network protocols", "Operating systems", "Cyber threats" ], "toolProficiency" : [ "SIEM tools", "Forensic tools", "Threat intelligence platforms" ], "communicationSkills" : "Incident reporting; Technical briefings", "documentationSkills" : "Incident reports; Post-incident reviews", "continuousLearning" : "Stay current with threats", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Minimize impact of incidents; Reduce incident response time; Enhance security defenses", "qualificationsBasic" : "Bachelor's degree or equivalent practical experience, 5+ years of experience in security engineering, Experience with security incident response, Experience with cloud security", "qualificationsPreferred" : "Master's degree in Computer Science or related field, Experience with scripting languages, Experience with SIEM tools, Experience with threat intelligence platforms, Experience with digital forensics", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon is seeking qualified Security Engineers to join our innovative, high energy Information Security team. In this role you will work within the Amazon Security Incident Response Team (SIRT). SIRT Security Engineers respond to security events, conduct analysis of threats such as malware and intrusion attempts, and provide security services to safeguard highly sensitive data. They work hands-on with detection systems and vulnerability analysis tools to respond to potential threats to Amazon systems. SIRT Security Engineers are unique individuals prepared to relentlessly resolve security issues by gathering and analyzing event data and conducting root-cause analysis. With your technical expertise, you will be solving security challenges at scale, working to protect the applications powering the most sophisticated e-commerce platform ever built. We value broad and deep technical knowledge, specifically in the fields of forensics, malware analysis, network security, application security, threat hunting, and threat intelligence. Key job responsibilities - Responding to security incidents, and coordinating a cohesive response involving multiple teams across Amazon. - Providing security engineering solutions and support during customer-facing incidents, proactively considering the prevention of similar incidents from occurring in the future. - Assisting in the development of pragmatic solutions that achieve business requirements while maintaining an acceptable level of risk. - Identifying and recommending solutions that improve or expand Amazon’s incident response capabilities, leveraging AI approaches where suitable. - Working alongside and mentoring Information Security engineers to improve security, reduce and quickly address risk. - Evaluating the impact of current security trends, advisories, publications, and academic research to Amazon, coordinating response as necessary across affected teams. - Keeping your knowledge and skills current with the rapidly changing threat landscape. - Participating in a follow-the-sun on-call rotation. A day in the life You will be part of an operational team, which owns and drives outcomes for security issues reported through a variety of mechanisms. When not \"on deck\" for those operational duties, you will be identifying and developing solutions to consistently and efficiently handle issues. You will also work with partner security teams across Amazon to raise our security bar and delight customers. There are also training and travel opportunities due to SIRT being a global team with presence in multiple countries. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Basic Qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience - 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience - Bachelor's degree in computer science or equivalent - Knowledge of networking protocols such as HTTP, DNS and TCP/IP - Knowledge of industry-based security vulnerabilities and remediation techniques Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks - Experience with AWS products and services - Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "Security Engineer II, Security Incident Response Team (SIRT) at Amazon.com Services LLC. Skills: Security Incident Response, Cloud Security, Threat Detection. Respond to security incidents. Investigate security breaches", "postedDate" : "2026-06-15T22:01:16.090", "createdAt" : "2026-06-15T22:01:16.090", "lastUpdated" : "2026-06-16T08:11:33.016", "ingestTimestamp" : "2026-06-15T22:01:16.090", "mongoId" : "6a305653f292fd229cf27dba", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10443978/apply", "salaryAnnualMin" : 159000, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Incident analysis", "Malware analysis", "Digital forensics", "Network traffic analysis", "Log analysis", "Security Incident Response", "Cloud Security", "Threat Detection", "Problem solving", "Analytical thinking", "Decision making", "Cloud computing", "Network protocols", "Operating systems", "Cyber threats", "SIEM tools", "Forensic tools", "Threat intelligence platforms" ], "skillCount" : 18, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 622.694, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c6b2074d8ee00a0910568", "title" : "Corporate Security Engineer", "company" : "Xurrent", "industry" : "SaaS", "salary" : { "min" : 2500000.0, "max" : 4000000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Lead Corporate Security Engineer in Bangalore, India, adjusted for the SaaS industry and company size." }, "location" : "Bangalore, Karnataka, India", "locations" : [ "Bangalore", "Karnataka", "India" ], "certifications" : [ "CISSP", "CISM" ], "timestamp" : "2026-06-15T07:27:12.866", "fingerprint" : "da41361db96672ea5fbb082a64bec842ea55bf911fc3f7f5ed2008f90f5ac33c", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.xurrent.com/careers/?gh_jid=5160905007", "externalId" : "5160905007", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bangalore", "state" : "Karnataka", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "12.9767936,77.5900820" } ], "locationText" : "Bangalore, Karnataka, India", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "technicalSkills" : "Cloud security, SaaS", "professionalSkills" : [ "Program management", "Risk assessment", "Vendor risk management" ], "hardSkillsList" : [ "Incident response", "Vulnerability management", "Business continuity", "Disaster recovery", "Information security audits", "Security awareness training", "Phishing simulation" ], "softSkillsList" : [ "Curious" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Business continuity", "level" : "intermediate" }, { "name" : "Disaster recovery", "level" : "intermediate" }, { "name" : "Information security audits", "level" : "intermediate" }, { "name" : "Security awareness training", "level" : "intermediate" }, { "name" : "Phishing simulation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Curious" } ], "majorSkills" : "Security engineering, Program management, Compliance", "majorSkillsList" : [ "Security engineering", "Program management", "Compliance" ], "coreResponsibilities" : "Lead incident response process, Support vulnerability management process, Manage detection tools, Triage vulnerabilities, Provide guidance on remediation, Lead business continuity efforts, Lead disaster recovery efforts, Gather technical evidence for audits, Monitor security inboxes, Support responsible disclosure program, Develop vendor risk management program, Own corporate security policies, Own security awareness training, Run internal phishing simulations, Coordinate with audit firms, Coordinate with consultants, Coordinate with development teams, Stay informed about emerging threats, Stay informed about vulnerabilities, Define long-term vision for security, Define long-term vision for compliance, Implement long-term strategy for security, Implement long-term strategy for compliance, Implement roadmap for security, Implement roadmap for compliance, Communicate security risks to leadership, Communicate recommendations to leadership", "teamCollaboration" : "Cross-functional teams; Executive leadership", "projectManagementSkills" : [ "Program management" ], "domainKnowledge" : "Business security; Cloud security; SaaS platforms; ISO 27001; GDPR; SOC2; Security standards; Compliance standards", "domainList" : [ "business-security", "cloud-security", "saas-platforms", "iso-27001", "gdpr", "soc2", "security-standards", "compliance-standards" ], "domainSpecificKnowledge" : [ "Business security", "Cloud security", "SaaS platforms", "ISO 27001", "GDPR", "SOC2", "Security standards", "Compliance standards" ], "communicationSkills" : "Risk communication", "qualificationsBasic" : "Bachelor's in Computer Science, Bachelor's in Information Security, Background in security engineering, Background in program management, In-depth knowledge of business security, In-depth knowledge of cloud security, Familiarity with ISO 27001, Familiarity with GDPR, Familiarity with SOC2", "qualificationsPreferred" : "Advanced degrees in cybersecurity, Certifications in cybersecurity", "rawDescription" : "Join Xurrent, where our AI-driven Operations Management platform powers the way modern enterprises manage and evolve their service delivery. We’re looking for curious, driven individuals who want to make a real impact and grow with a company leading the next wave of service and operations innovation. Mission of the Position: The Corporate Security Engineer will lead the security program to ensure the confidentiality, integrity, and availability of the Xurrent company and customer data. The role requires expertise in security, compliance, and program management, and a firm understanding of compliance and security standards. Responsibilities: Take full ownership of incident response process including annual tabletop exercises Support the vulnerability management process including management of detection tools, assisting in the triage process, and providing guidance to internal teams on remediation of detected vulnerabilities Lead the company’s business continuity and disaster recovery efforts Gather technical evidence for annual information security audits Monitor security inboxes and support responsible disclosure program Risk assessment development and communication to stakeholders Third party (vendor) risk management program development and ownership Ownership of corporate security policies Ownership of security awareness training and internal phishing simulation campaigns Coordinate with audit firms, consultants, and development teams to provide the information required to complete security review and audits in a timely manner. Stay informed about emerging threats and vulnerabilities. Define and implement the long-term vision, strategy, and roadmap for security and compliance aligned with company objectives. Communicate security risks and recommendations to executive leadership. Requirements: In-depth knowledge of business and cloud security, particularly in a SaaS environment. Strong background in security engineering and program management. Familiarity with compliance requirements relevant to SaaS platforms (ISO 27001, GDPR, SOC2). Excellent communication and interpersonal skills. Bachelor’s degree in Computer Science, Information Security, or related field. Advanced degrees or certifications in cybersecurity (for example, CISSP, CISM) preferred. Important Notice: Beware of Recruitment Scams We have been made aware of fraudulent job offers being circulated under Xurrent’s name. Please note that only communications from verified recruiters using emails ending in \"@xurrent.com\" are official. If you receive unsolicited job offers, interview requests, or messages that seem suspicious, please exercise caution and do not share personal information or make any payments. Please note that Xurrent does not issue job offers without an application and interview process. Only candidates who successfully complete the interview process may receive an offer letter. We're actively addressing this and appreciate your help in staying alert and helping us protect our community. Statement of Equal Opportunity Xurrent is an equal opportunity employer. We’re committed to creating an inclusive environment for all our employees, where different backgrounds and perspectives are valued and encouraged - regardless of race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, sexual orientation or on the basis of any protected group status under any applicable law.", "summaryDescription" : "Corporate Security Engineer at Xurrent. Skills: Security engineering, Program management, Compliance. Lead incident response process. Support vulnerability management process", "postedDate" : "2026-06-14T02:48:47.504", "createdAt" : "2026-06-14T02:48:47.504", "lastUpdated" : "2026-06-15T07:27:12.866", "ingestTimestamp" : "2026-06-14T02:48:47.504", "mongoId" : "6a2c6b2074d8ee00a0910568", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Incident response", "Vulnerability management", "Business continuity", "Disaster recovery", "Information security audits", "Security awareness training", "Phishing simulation", "Curious", "Security engineering", "Program management", "Compliance", "Risk assessment", "Vendor risk management", "Business security", "Cloud security", "SaaS platforms", "ISO 27001", "GDPR", "SOC2", "Security standards", "Compliance standards", "CISSP", "CISM" ], "skillCount" : 23, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.8888889, "_score" : 566.12256, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3060aff292fd229cf92b93", "title" : "Command Center Specialist (Nights)", "company" : "Core Scientific", "industry" : "Technology", "salary" : { "min" : 65000.0, "max" : 90000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Command Center Specialist in Austin, United States, adjusted for the technology industry and company size." }, "location" : "Austin, Texas, United States", "locations" : [ "Austin", "Texas", "United States" ], "certifications" : [ "Genetec Security Software Certification" ], "timestamp" : "2026-06-16T07:39:19.328", "fingerprint" : "d8054ae5ce10960a93a10893b908393c390796223d11c68f433ff0ffa958d777", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/corescientific/jobs/8584179002", "externalId" : "8584179002", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Windows operating system", "professionalSkills" : [ "IT troubleshooting" ], "hardSkillsList" : [ "Access Control", "IP Cameras" ], "softSkillsList" : [ "Conflict resolution" ], "hardSkills" : [ { "name" : "Access Control", "level" : "intermediate" }, { "name" : "IP Cameras", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Conflict resolution" } ], "majorSkills" : "Data Center support, Incident documentation, Security surveillance", "majorSkillsList" : [ "Data Center support", "Incident documentation", "Security surveillance" ], "coreResponsibilities" : "Monitor all dashboards, datacenters, incidents, changes, Document impactful events, Communicate impactful events to client and leadership, Surveil operations, Communicate day-to-day security issues, Respond to security issues, Address security issues, Create detailed documentation of all incidents, Analyze data, Organize data, Monitor and evaluate price points for hash price,, Support incidents, changes, and service requests, Notify all teams involved in recovery, Draft concise and accurate situational reports, Prepare briefing materials, Present briefing materials, Prioritize tasks, Multi-task in a fast-paced environment, Listen to concerns, Understand concerns, Clarify concerns, Resolve concerns raised by co-workers and leadership, Coordinate with managers on physical access control systems, Coordinate with managers on identity management, Coordinate with managers on facilities access, Coordinate with managers on access needs for special, Monitor data center space, Report suspicious activity, Coordinate with on-site teams, Take necessary actions during emergency scenarios, Improve operational effectiveness, Improve SOPs, Deliver support to the customer, Manage stressful situations, Foster open communication, Foster respectful communication, Foster professional communication", "teamCollaboration" : "Work as a member of a team; Communicate with coworkers; Communicate with teammates; Communicate with leaders", "domainKnowledge" : "Data center infrastructure; Data center principles; ITIL service delivery", "domainList" : [ "data-center-infrastructure", "data-center-principles", "itil-service-delivery" ], "domainSpecificKnowledge" : [ "Data center infrastructure", "Data center principles", "ITIL service delivery" ], "toolProficiency" : [ "MS Excel", "MS Word", "MS Power Point", "Genetec Security Software" ], "communicationSkills" : "Verbal communication; Written communication; Situational reports; Briefing materials", "documentationSkills" : "Detailed documentation", "continuousLearning" : "Willing to learn new technologies", "problemSolvingSkills" : "IT troubleshooting", "specialRequirements" : "Night shift position, 12HR SHIFTS, 3 days on, 4 days off, 4 days on, 3 days off, Long night shifts, Weekend shifts, Holiday shifts, Minimal travel, Hot and cold environments, Lift up to 50 pounds", "qualificationsBasic" : "Associate degree in related fields OR 3 years Data Center support experience, Expertise in MS Excel, Word, Power Point, Understanding of the Windows operating system, IT troubleshooting skills – network, platform, storage, Willing to learn new technologies and applications, Verbal and written communication skills, Experience with IP Cameras, Experience with Access Control", "qualificationsPreferred" : "Understanding of data center infrastructure, Experience with Confluence, Jira, Experience with Slack, Zabbix, Sigma, Zoom, Basic knowledge of data center principles, General electrical engineering knowledge, Understanding of ITIL service delivery concepts", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Who We Are Core Scientific is a leading provider of infrastructure for high-performance compute in North America. Our mission is to accelerate digital innovation by scaling high-value compute rapidly, efficiently, and responsibly. We transform energy into high-value compute with unmatched efficiency at scale. Core Scientific is a publicly traded company (NASDAQ: CORZ). We power AI, HPC, and other next-generation data center workloads demanding exceptional computing power, in addition to our digital asset mining operations. Our footprint consists of 11 data center campuses across seven states, housing advanced infrastructure for our customers. What sets us apart? We have an entrepreneurial culture, a \"can-do\" and collaborative attitude, and we own and control our infrastructure. These strategic advantages enable us to maintain operational excellence, increase efficiency, and rapidly deploy cutting-edge innovations developed by our team of experts. Join us and accelerate your career alongside our groundbreaking journey. We seek smart, creative, and collaborative professionals who thrive in a fast-paced, result-driven environment. Ready to be part of something exceptional? Apply today and make an impact at Core Scientific. Title Command Center Specialist (Nights) Reports To Manager, Command Center The Job The Command Center Specialist is responsible for monitoring all dashboards, datacenters, incidents, changes, while documenting and communicating all impactful events to the client as well as leadership. The Command Center Specialist is also responsible for surveillance of operations and will need to communicate day-to-day security issues, respond to and address security issues as they occur, and communicate and create detailed documentation of all incidents. Responsibilities Analyze data and organize it accordingly and be an excellent communicator with the ability to speak and write clearly and accurately. Monitor and evaluate price points regularly for hash price, energy, and Bitcoin. Support all incidents, changes, and service requests within the data center space in a timely manner. Document all major incidents and notify all teams involved in recovery within the data center space. Draft concise and accurate situational reports. Prepare and present briefing materials. Ability to prioritize and multi-task in a fast-paced environment. Professional demeanor and excellent interpersonal skills. Work independently with little direct supervision. Effectively listen to, understand, clarify, and resolve the concerns and issues raised by co-workers and leadership. Coordinate with the managers on physical access control systems, identity management, facilities access, and access needs for special events. Monitoring of the data center space and reporting of any suspicious activity. Coordination with on-site teams to take necessary actions during emergency scenarios such as weather, fire, and active shooter. Work as a member of a team to continuously improve operational effectiveness, improve SOPs, and deliver support to the customer. Position requires long hours; night, weekend, and holiday work; and managing stressful situations and conflict resolutions. Foster open, respectful, and professional communication both within the team and with coworkers, teammates, and leaders across the organization. Performs other duties as assigned. Qualifications Required Associate degree in related fields of study OR 3 years of relevant, Data Center support experience. Expertise in MS Excel, Word, Power Point, etc. Strong understanding of the Windows operating system. Strong IT troubleshooting skills – network, platform, storage. Willing to learn new technologies and applications. Strong verbal and written communication skills. Experience with IP Cameras. Experience with Access Control. Experience or Certification(s) with Genetec Security Software. Preferred Strong understanding of data center infrastructure. Experience with applications such as Confluence, Jira. Experience with Slack, Zabbix, Sigma, Zoom. Basic knowledge of data center principles. General electrical engineering knowledge. Understanding of ITIL service delivery concepts. Location Austin, TX - Onsite Travel Minimal travel between data centers may be required as needed.  Work Environment This job operates in a data center, office, and shop environment. This role routinely uses standard maintenance equipment, including ladders, scissor lifts, forklifts, power tools, and voltmeters. While performing these duties, the employee will be exposed to hot and cold environments.  Physical Demands While performing the duties of this job, the employee is frequently required to sit, stand, walk, use hands, and lift up to 50 pounds.   Position Type/ Expected Hours of Work This is a full-time, night shift position. *** 12HR SHIFTS (3 days on, 4 days off; 4 days on, 3 days off) *** Supervisory Experience No", "summaryDescription" : "Command Center Specialist (Nights) at Core Scientific. Skills: Data Center support, Incident documentation, Security surveillance. Monitor all dashboards, datacenters, incidents, changes. Document impactful events", "postedDate" : "2026-06-15T23:26:53.851", "createdAt" : "2026-06-15T23:26:53.851", "lastUpdated" : "2026-06-16T07:39:19.328", "ingestTimestamp" : "2026-06-15T23:26:53.851", "mongoId" : "6a3060aff292fd229cf92b93", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 65000, "salaryAnnualMax" : 90000, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "Access Control", "IP Cameras", "Conflict resolution", "Data Center support", "Incident documentation", "Security surveillance", "IT troubleshooting", "Data center infrastructure", "Data center principles", "ITIL service delivery", "Genetec Security Software Certification", "MS Excel", "MS Word", "MS Power Point", "Genetec Security Software" ], "skillCount" : 15, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 565.0022, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c5f4074d8ee00a08ea55f", "title" : "Security Incident Response Lead", "company" : "Nscale", "industry" : "AI Infrastructure", "salary" : { "min" : 150000.0, "max" : 225000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "AMER", "locations" : [ "AMER" ], "timestamp" : "2026-06-15T02:45:24.541", "fingerprint" : "97da22b2e3f980604e8d6395c438f3f52604ff35672fecd27a2405a86ad0765f", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/nscaleoperationsukltd/jobs/4824321101", "externalId" : "4824321101", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" }, { "country" : "Canada", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States; Canada", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "Cloud infrastructure, SIEM, EDR/XDR, Automation", "professionalSkills" : [ "Incident leadership", "Incident coordination", "Technical leadership", "Root cause analysis", "Threat hunting", "Detection engineering" ], "hardSkillsList" : [ "Digital forensics", "Incident response", "Security operations", "Forensics techniques", "Investigation techniques", "Threat intelligence", "Incident lifecycles" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Digital forensics", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Forensics techniques", "level" : "intermediate" }, { "name" : "Investigation techniques", "level" : "intermediate" }, { "name" : "Threat intelligence", "level" : "intermediate" }, { "name" : "Incident lifecycles", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Digital forensics, Cloud security", "majorSkillsList" : [ "Incident response", "Digital forensics", "Cloud security" ], "coreResponsibilities" : "Lead end-to-end security incident response, Act as incident commander, Coordinate cross-functional response efforts, Conduct investigations, Oversee investigations, Apply digital forensics techniques, Drive containment efforts, Drive eradication efforts, Drive recovery efforts, Contribute to threat hunting, Contribute to proactive investigations, Develop incident response playbooks, Maintain incident response playbooks, Develop escalation frameworks, Establish escalation frameworks, Lead post-incident reviews, Lead root cause analysis, Drive long-term remediation actions, Partner to improve alerting, Partner to improve triage, Partner to improve response workflows, Build incident response tooling, Scale incident response tooling, Enhance case management systems", "teamCollaboration" : "Cross-functional response efforts; Partner with Detection & Response; Coordinate with Infrastructure; Coordinate with IT; Coordinate with Legal; Coordinate with Compliance", "domainKnowledge" : "AI infrastructure; High-performance computing; Large-scale distributed systems; Attack techniques; Threat actors; Incident lifecycles; Cloud environments; Production environments", "domainList" : [ "ai-infrastructure", "high-performance-computing", "large-scale-distributed-systems", "attack-techniques", "threat-actors", "incident-lifecycles", "cloud-environments", "production-environments" ], "domainSpecificKnowledge" : [ "AI infrastructure", "High-performance computing", "Large-scale distributed systems", "Attack techniques", "Threat actors", "Incident lifecycles", "Cloud environments", "Production environments" ], "toolProficiency" : [ "SIEM", "EDR/XDR", "Detection tooling", "Case management systems" ], "communicationSkills" : "Brief leadership; Coordinate across teams", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "End-to-end IR effectiveness; High-severity incident coordination; Post-incident review completion; Remediation completion; IR tooling maturity; Automation maturity; Workflow maturity", "qualificationsBasic" : "8-12+ years incident response experience, 8-12+ years security operations experience, 8-12+ years digital forensics experience, Proven experience leading high-severity investigations, Hands-on experience with SIEM, Hands-on experience with EDR/XDR, Hands-on experience with detection tooling, Operate as technical leader, Make decisions under pressure, Brief leadership, Coordinate across teams", "qualificationsPreferred" : "Experience in AI infrastructure, Experience in high-performance computing, Experience in large-scale distributed systems, Familiarity with detection engineering, Familiarity with threat hunting, Familiarity with building automation for IR", "remoteFriendly" : true, "rawDescription" : "About Nscale Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility. We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future. About the Role We’re hiring a Security Incident Response Lead to own and evolve Nscale’s incident response capability in a high-scale, AI-native environment. This is a hands-on leadership role focused on leading investigations across infrastructure, enterprise systems, and security events, while driving effective containment, eradication, and recovery. The role operates at the center of incident coordination and partners closely with Detection & Response as well as cross-functional stakeholders including Infrastructure, IT, Legal, and Compliance. You will help shape how Nscale detects and responds to threats by building the processes, tooling, and operational rigor behind the incident response function. This role is critical to strengthening the organization’s security posture and ensuring high-severity events are managed with speed, clarity, and technical depth. This role will be part of the global CISO organization. What you'll be doing Incident Leadership & Coordination Lead end-to-end security incident response across the organization Act as the incident commander for high-severity events Coordinate cross-functional response efforts with Infrastructure, IT, Legal, and Compliance Participate in and help design on-call and escalation rotations Investigations & Forensics Conduct and oversee investigations across endpoints, cloud, and infrastructure systems Apply digital forensics techniques across logs, endpoints, and cloud environments Drive containment, eradication, and recovery efforts for active security incidents Contribute to threat hunting and proactive investigations Process, Playbooks & Operational Rigor Develop and maintain incident response playbooks and runbooks Establish escalation frameworks to support effective incident handling Lead post-incident reviews and root cause analysis efforts Drive long-term remediation actions following incidents Tooling & Response Improvement Partner with Detection & Response teams to improve alerting, triage, and response workflows Build and scale incident response tooling and automation Enhance case management systems that support investigation and response operations KPIs End-to-end security incident response effectiveness High-severity incident coordination and command Post-incident review and remediation completion Incident response tooling, automation, and workflow maturity About You 8–12+ years of experience in incident response, security operations, or digital forensics Proven experience leading complex, high-severity incident investigations in cloud or distributed environments Strong expertise in forensics and investigation techniques across endpoints, cloud, and logs Hands-on experience with SIEM, EDR/XDR, and detection tooling Familiarity with cloud infrastructure and modern production environments Deep understanding of attack techniques, threat actors, and incident lifecycles Ability to operate as a technical leader during incidents and make decisions under pressure Strong communication skills with the ability to brief leadership and coordinate across teams Experience in AI infrastructure, high-performance computing, or large-scale distributed systems is a plus Familiarity with detection engineering, threat hunting, or building automation for incident response workflows is beneficial What we can offer you At Nscale, you'll find a collaborative, supportive, and innovative environment where your contributions spark real impact. We're building something extraordinary, and we want you at the core. Highly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months. \uD83D\uDE80 Join one of the fastest-growing AI infrastructure companies — your chance to directly shape how global AI capacity is planned and deployed. ✨ Expect a dynamic progression plan tailored to your ambitions. Grow by leading critical cross-functional initiatives and shaping capital strategy — always with our full support. Human-First Flexibility: We treat you as humans first. \uD83E\uDEF6\uD83C\uDFFD Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments. Equal Opportunities Statement We strongly encourage applications from people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds. If there’s anything we can do to accommodate your specific situation, please let us know. The responsibilities outlined in this job description are not exhaustive and are intended to provide a general overview of the position. The employee may be required to perform additional duties, tasks, and responsibilities as assigned by management, consistent with the skills and qualifications required for the role. For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here. Salary Range The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation. The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation. Salary Range $150,000—$225,000 USD For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.", "summaryDescription" : "Security Incident Response Lead at Nscale. Skills: Incident response, Digital forensics, Cloud security. Lead end-to-end security incident response. Act as incident commander", "postedDate" : "2026-06-12T22:26:36.876", "createdAt" : "2026-06-12T22:26:36.876", "lastUpdated" : "2026-06-15T02:45:24.541", "ingestTimestamp" : "2026-06-12T22:26:36.876", "mongoId" : "6a2c5f4074d8ee00a08ea55f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 150000, "salaryAnnualMax" : 225000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Digital forensics", "Incident response", "Security operations", "Forensics techniques", "Investigation techniques", "Threat intelligence", "Incident lifecycles", "Leadership", "Cloud security", "Incident leadership", "Incident coordination", "Technical leadership", "Root cause analysis", "Threat hunting", "Detection engineering", "AI infrastructure", "High-performance computing", "Large-scale distributed systems", "Attack techniques", "Threat actors", "Cloud environments", "Production environments", "SIEM", "EDR/XDR", "Detection tooling", "Case management systems" ], "skillCount" : 26, "jobCategory" : "other", "jobSubcategory" : "security", "dataQualityScore" : 0.8888889, "_score" : 512.4938, "daysOld" : 2, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "AI Infrastructure" }, { "id" : "6a2ca4b674d8ee00a09b2fe4", "title" : "Corporate Facility Security Officer", "company" : "Accenture Federal Services", "salary" : { "min" : 146000.0, "max" : 278500.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Chantilly, Virginia, United States", "locations" : [ "Chantilly", "Virginia", "United States" ], "timestamp" : "2026-06-16T02:02:46.677", "fingerprint" : "1542fea70e8ebd5c13da84e62767805374264ee4f47de21a7c8d52cb428831c2", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/afscareersmarketplace/jobs/4687333006", "externalId" : "4687333006", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Chantilly", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8852190,-77.4486772" } ], "locationText" : "Chantilly, Virginia, United States", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "rawDescription" : "The Corporate Facility Security Officer (CFSO) is a senior position within the Accenture Federal Services (AFS) Security and Intelligence Directorate (S Personnel Security processing Managing multiple CAGE codes, Facility Clearances and Safeguarding requirements Supporting Special Access Programs (SAP) and IC customer related requirements Facilitating numerous successful annual DCSA assessments Overseeing construction, operation and accreditation of a SCIF, SWA and/or SAPF Excellent working knowledge of the 32 CFR Part 117, Special Access Program Security Manual, ICDs (e. g. ICD 705), SEADs, NISS, SWFT, DISS, NBIS, e-APP, FOCI and ITAR Bonus Points If you have: Direct experience managing FOCI programs 3+ years of experience in SCIF construction 3+ years as an Insider Threat Program Senior Official (ITPSO); completion of ITPSO curriculum Understanding of NIST 800-171 and CMMC Level 2 compliance requirements Related USG experience, credentials or certification #LI-DNI As required by local law, Accenture Federal Services provides reasonable ranges of compensation for hired roles based on labor costs in the states of California, Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, New Jersey, New York, Washington, Vermont, the District of Columbia, and the city of Cleveland. The base pay range for this position in these locations is shown below. Compensation for roles at Accenture Federal Services varies depending on a wide array of factors, including but not limited to office location, role, skill set, and level of experience. Accenture Federal Services offers a wide variety of benefits. You can find more information on benefits here. We accept applications on an on-going basis and there is no fixed deadline to apply. The pay range for the states of California, Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, New Jersey, New York, Washington, Vermont, the District of Columbia, and the city of Cleveland is: $146,000—$278,500 USD What We Believe As a company wholly dedicated to serving the US federal government, we bring together the best talent to help reinvent how federal agencies operate and deliver greater value for their mission and the American people. We have an unwavering commitment to creating a culture in which all our people are respected, feel a sense of belonging, and have equal opportunity. As a business imperative, every person at Accenture Federal Services has the responsibility to create and sustain a culture where everyone feels welcomed and included. This is grounded in our core values and our experience that hiring and developing great people who reflect different perspectives, experiences, and backgrounds is key to driving innovation and delivering the results that our clients and the country count on. Equal Employment Opportunity Statement We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities. For details, view a copy of the Accenture Federal Services Equal Opportunity Policy Statement. Accenture Federal Services is an Equal Employment Opportunity employer. Additionally, as an Affirmative Action Employer for Veterans and Individuals with Disabilities, Accenture Federal Services is committed to providing veteran employment opportunities to our service men and women. Requesting An Accommodation Accenture Federal Services is committed to providing equal employment opportunities for persons with disabilities or religious observances, including reasonable accommodation when needed. If you are hired by Accenture Federal Services and require accommodation to perform the essential functions of your role, you will be asked to participate in our reasonable accommodation process. Accommodations made to facilitate the recruiting process are not a guarantee of future or continued accommodations once hired. If you are being considered for employment opportunities with Accenture Federal Services and need an accommodation for a disability or religious observance during the interview process or for the job you are interviewing for, please speak with your recruiter. Other Employment Statements Applicants for employment in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States. Candidates who are currently employed by a client of Accenture Federal Services or an affiliated Accenture business may not be eligible for consideration. Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process. The Company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. Additionally, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the Company's legal duty to furnish information. California requires additional notifications for applicants and employees. If you are a California resident, live in or plan to work from Los Angeles County upon being hired for this position, please click here for additional important information.", "summaryDescription" : "Corporate Facility Security Officer at Accenture Federal Services", "postedDate" : "2026-06-14T19:25:02.430", "createdAt" : "2026-06-14T19:25:02.430", "lastUpdated" : "2026-06-16T02:02:46.677", "ingestTimestamp" : "2026-06-14T19:25:02.430", "mongoId" : "6a2ca4b674d8ee00a09b2fe4", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 146000, "salaryAnnualMax" : 278500, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 491.67715, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a0ae3b91663d49372e864c5", "title" : "Corporate Security Agent (Incident Commander)", "company" : "Surefox North America Inc", "salary" : { "min" : 35.0, "max" : 40.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "San Francisco, CA", "locations" : [ "San Francisco, CA", "United States of America" ], "certifications" : [ "BSIS guard card", "CPR/First Aid/AED for all ages", "CCW or firearms permits (preferred)", "TECC/TCCC (Tactical Casualty Care) certifications (preferred)", "NREMT licensure (preferred)" ], "timestamp" : "2026-05-18T14:57:25.810", "fingerprint" : "ccb43cf31f3cc3fe784884689461de314cd59ed6c798cd620e1deb9a475f3e77", "source" : "workday", "language" : "en", "applyUrl" : "https://logsite.wd12.myworkdayjobs.com/Surefox/job/San-Francisco-CA/Corporate-Security-Agent--Incident-Commander-_JR101579", "externalId" : "JR101579", "locationPoint" : "19.68044,-99.74877", "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite" }, { "city" : "New York City", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite" } ], "locationText" : "San Francisco, California, United States; New York City, New York, United States", "employmentType" : "PART_TIME", "minimumEducation" : "high school degree or equivalent", "experienceMinYears" : 3, "technicalSkills" : "Video Management Systems (VMS), Access Control Systems (ACS)", "professionalSkills" : [ "process management", "cross-functional coordination", "vendor/stakeholder management", "operational metrics", "resource planning", "continuous improvement", "emergency response", "incident investigations", "vulnerability assessments" ], "hardSkillsList" : [ "monitoring camera feeds", "conducting site risk assessments", "implementing specialized physical protocols", "dispatching", "communication hub", "delivering advanced detection capabilities", "merging digital alarm monitoring with physical security patrols", "badge printing", "credentialing", "technical security integrators", "writing incident reports", "providing low-profile physical security", "maintaining a high level of physical fitness", "maintaining a professional personal appearance", "passing the Surefox Physical Agility Test (SPAT)" ], "softSkillsList" : [ "high integrity", "professionalism", "exceptional observational skills", "pays close attention to detail", "situational awareness", "interpersonal skills" ], "hardSkills" : [ { "name" : "monitoring camera feeds", "level" : "intermediate" }, { "name" : "conducting site risk assessments", "level" : "intermediate" }, { "name" : "implementing specialized physical protocols", "level" : "intermediate" }, { "name" : "dispatching", "level" : "intermediate" }, { "name" : "communication hub", "level" : "intermediate" }, { "name" : "delivering advanced detection capabilities", "level" : "intermediate" }, { "name" : "merging digital alarm monitoring with physical security patrols", "level" : "intermediate" }, { "name" : "badge printing", "level" : "intermediate" }, { "name" : "credentialing", "level" : "intermediate" }, { "name" : "technical security integrators", "level" : "intermediate" }, { "name" : "writing incident reports", "level" : "intermediate" }, { "name" : "providing low-profile physical security", "level" : "intermediate" }, { "name" : "maintaining a high level of physical fitness", "level" : "intermediate" }, { "name" : "maintaining a professional personal appearance", "level" : "intermediate" }, { "name" : "passing the Surefox Physical Agility Test (SPAT)", "level" : "intermediate" } ], "softSkills" : [ { "name" : "high integrity" }, { "name" : "professionalism" }, { "name" : "exceptional observational skills" }, { "name" : "pays close attention to detail" }, { "name" : "situational awareness" }, { "name" : "interpersonal skills" } ], "majorSkills" : "Incident Commander, emergency response, client liaison, incident reporting, risk assessment, physical security", "majorSkillsList" : [ "Incident Commander", "emergency response", "client liaison", "incident reporting", "risk assessment", "physical security" ], "coreResponsibilities" : "acting as a liaison between Surefox and its clients, providing emergency response, performing all duties in accordance with client policies and procedures, and all state & federal regulations, responding to emergency events, medical & non-medical issues, staffing deficiencies, and handling client requests in a timely manner, initiating preliminary investigations by writing incident reports on all internal client and company issues, monitor camera feeds, Video Management Systems (VMS), and Access Control Systems (ACS) to identify and neutralize threats before they escalate, Conduct ongoing site risk assessments and funnel actionable intelligence to leadership to inform high-level decision-making, Maintain \"eyes on the ground\" for incident verification, implementing specialized physical protocols such as two-swipe entry and strictly controlled access points, Act as the primary dispatcher and communication hub between the GSOC and physical response teams during critical incidents, Deliver advanced detection capabilities by merging digital alarm monitoring with physical security patrols (foot and vehicle), Oversee badge printing, credentialing, and technical security integrators to ensure the integrity of client perimeters, Conduct incident reports on accidents, suspicious activities, and system vulnerabilities, maintaining a high level of situational awareness, Provide low-profile physical security for assigned clients, promoting safety and discretion while conducting vulnerability assessments", "teamCollaboration" : "cross-functional coordination; liaison between Surefox and its clients; communication hub between the GSOC and physical response teams; funnel actionable intelligence to leadership", "domainKnowledge" : "physical security; security technology across all platforms; state & federal regulations", "domainList" : [ "physical-security", "security-technology-across-all-platforms", "state-federal-regulations" ], "domainSpecificKnowledge" : [ "physical security", "security technology across all platforms", "state & federal regulations" ], "toolProficiency" : [ "Video Management Systems (VMS)", "Access Control Systems (ACS)" ], "communicationSkills" : "Ability to effectively communicate with people at all levels and from various backgrounds; interpersonal skills; writing skills", "documentationSkills" : "writing incident reports", "problemSolvingSkills" : "Good judgment with the ability to make timely and sound decisions; reacting to and handling emergencies", "specialRequirements" : "Must be eligible for employment within the United States, Must be a minimum of 18 years old per state licensing guidelines, Must be able to pass an extensive background check and drug screening, Must live within driving distance, Must have a current BSIS guard card or eligible to qualify for guard card, All applicants must be able to pass the Surefox Physical Agility Test (SPAT), with or without reasonable accommodation, prior to the scheduled start date., Ability to work nights, weekends, and holidays as required, Military Reserve eligibility encouraged, Veteran owned company, No visa sponsorship", "outcomesObjectives" : "neutralize threats before they escalate; inform high-level decision-making; ensure the integrity of client perimeters; promoting safety and discretion", "qualificationsBasic" : "Must be eligible for employment within the United States, Must be a minimum of 18 years old per state licensing guidelines, Must be able to pass an extensive background check and drug screening, Must live within driving distance, Must have at least 3+ years of physical security experience, Must have a current BSIS guard card or eligible to qualify for guard card, Must have a high school degree or equivalent, Demonstrated competence in reacting to and handling emergencies, Ability to effectively communicate with people at all levels and from various backgrounds, Good judgment with the ability to make timely and sound decisions, Ability to understand and follow written and verbal instructions, Ability to work independently and as a team member, All applicants must be able to pass the Surefox Physical Agility Test (SPAT), with or without reasonable accommodation, prior to the scheduled start date., CPR/First Aid/AED for all ages is required, Ability to work nights, weekends, and holidays as required, Demonstrate an operational understanding of today’s technology across all platforms", "qualificationsPreferred" : "Current CCW or firearms permits for potential transition to armed agent status., Bachelor’s Degree in Criminal Justice, Intelligence Studies, or a related field., Prior Military or Law Enforcement (ODO) experience is highly prioritized., Formal TECC/TCCC (Tactical Casualty Care) certifications, NREMT licensure, or experience with advanced tactical medical integration., Experience with Executive Protection, anti-terrorism protocols, or high-threat driving., Experience with overseas protection assignments and international travel logistics.", "remoteFriendly" : false, "rawDescription" : "Surefox North America Inc is a veteran owned company that pride ourselves on creating a diverse and unique culture of trained and talented individuals. We are currently seeking an experienced individuals with high integrity and professionalism who can join our team. You will be working on uniquely assigned projects under the guidance of the Site Supervisors and Area Managers for our top clients. In your day to day role as an Incident Commander, you will be acting as a liaison between Surefox and its clients while providing emergency response. You will perform all duties in accordance with client policies and procedures, and all state & federal regulations. Other responsibilities include responding to emergency events, medical & non-medical issues, staffing deficiencies, and handling client requests in a timely manner. Under certain circumstances, an Incident Commander will be expected to initiate preliminary investigations by writing incident reports on all internal client and company issues. We are looking for someone who has exceptional observational skills and pays close attention to detail. As we encourage veterans and candidates that are currently in the military reserve to apply, we welcome all who share the same passions for protection as we do. We are not offering visa sponsorship for this position at this time. Base Hourly Rate: $35.00-$40.00 Work Schedule: Day / Swing / Grave shifts available # ****What you will do**** * Monitor camera feeds, Video Management Systems (VMS), and Access Control Systems (ACS) to identify and neutralize threats before they escalate * Conduct ongoing site risk assessments and funnel actionable intelligence to leadership to inform high-level decision-making * Maintain \"eyes on the ground\" for incident verification, implementing specialized physical protocols such as two-swipe entry and strictly controlled access points * Act as the primary dispatcher and communication hub between the GSOC and physical response teams during critical incidents * Deliver advanced detection capabilities by merging digital alarm monitoring with physical security patrols (foot and vehicle) * Oversee badge printing, credentialing, and technical security integrators to ensure the integrity of client perimeters * Conduct incident reports on accidents, suspicious activities, and system vulnerabilities, maintaining a high level of situational awareness * Provide low-profile physical security for assigned clients, promoting safety and discretion while conducting vulnerability assessments * Maintain a high level of physical fitness, a professional personal appearance, and a thorough understanding of today’s security technology across all platforms # ****What is required**** * Must be eligible for employment within the United States * Must be a minimum of 18 years old per state licensing guidelines * Must be able to pass an extensive background check and drug screening * Must live within driving distance * Must have at least 3+ years of physical security experience * Must have a current BSIS guard card or eligible to qualify for guard card * Must have a high school degree or equivalent * Demonstrated competence in reacting to and handling emergencies * Ability to effectively communicate with people at all levels and from various backgrounds * Good judgment with the ability to make timely and sound decisions * Ability to understand and follow written and verbal instructions * Ability to work independently and as a team member * All applicants must be able to pass the Surefox Physical Agility Test (SPAT), with or without reasonable accommodation, prior to the scheduled start date. * Please be aware that passing the physical agility test is a requirement for this position. * The SPAT is a timed sequence of multiple physical events requiring you to progress along a predetermined path from event to event in a continuous manner until complete * CPR/First Aid/AED for all ages is required * Ability to work nights, weekends, and holidays as required * Demonstrate an operational understanding of today’s technology across all platforms * Strong writing and interpersonal skills # ****What is Desired / Optional**** * **Specialized Permits: Current CCW or firearms permits for potential transition to armed agent status.** * Educational Background: Bachelor’s Degree in Criminal Justice, Intelligence Studies, or a related field. * Professional Experience: Prior Military or Law Enforcement (ODO) experience is highly prioritized. * Technical Certifications: Formal TECC/TCCC (Tactical Casualty Care) certifications, NREMT licensure, or experience with advanced tactical medical integration. * Specialized Training: Experience with Executive Protection, anti-terrorism protocols, or high-threat driving. ****International Proficiency:** Experience with overseas protection assignments and international travel logistics.** If you share our values and are ready to build your next career, we want to hear from you!", "summaryDescription" : "Corporate Security Agent (Incident Commander) at Surefox North America Inc. Skills: Incident Commander, emergency response, client liaison, incident reporting, risk assessment, physical security. acting as a liaison between Surefox and its clients. providing emergency response", "postedDate" : "2026-05-15T13:51:14.149", "createdAt" : "2026-05-18T13:51:14.108", "lastUpdated" : "2026-05-18T14:57:25.810", "ingestTimestamp" : "2026-05-18T13:51:14.108", "mongoId" : "6a0ae3b91663d49372e864c5", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://logsite.wd12.myworkdayjobs.com/Surefox/job/San-Francisco-CA/Corporate-Security-Agent--Incident-Commander-_JR101579", "salaryAnnualMin" : 72800, "salaryAnnualMax" : 83200, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "monitoring camera feeds", "conducting site risk assessments", "implementing specialized physical protocols", "dispatching", "communication hub", "delivering advanced detection capabilities", "merging digital alarm monitoring with physical security patrols", "badge printing", "credentialing", "technical security integrators", "writing incident reports", "providing low-profile physical security", "maintaining a high level of physical fitness", "maintaining a professional personal appearance", "passing the Surefox Physical Agility Test (SPAT)", "high integrity", "professionalism", "exceptional observational skills", "pays close attention to detail", "situational awareness", "interpersonal skills", "Incident Commander", "emergency response", "client liaison", "incident reporting", "risk assessment", "physical security", "process management", "cross-functional coordination", "vendor/stakeholder management", "operational metrics", "resource planning", "continuous improvement", "incident investigations", "vulnerability assessments", "security technology across all platforms", "state & federal regulations", "BSIS guard card", "CPR/First Aid/AED for all ages", "CCW or firearms permits (preferred)", "TECC/TCCC (Tactical Casualty Care) certifications (preferred)", "NREMT licensure (preferred)", "Video Management Systems (VMS)", "Access Control Systems (ACS)" ], "skillCount" : 44, "jobCategory" : "engineering", "seniorityLevel" : "mid", "dataQualityScore" : 0.8888889, "_score" : 487.8548, "daysOld" : 3, "hasLocation" : true, "hasGeo" : false }, { "id" : "6a2c68fa74d8ee00a0905806", "title" : "Senior Incident Response Specialist, Cyber Security", "industry" : "Cygnify", "salary" : { "min" : 120000.0, "max" : 180000.0, "currency" : "MYR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Incident Response Specialist in Kuala Lumpur, Malaysia, adjusted for the cybersecurity industry and senior experience level." }, "location" : "Kuala Lumpur, Malaysia", "locations" : [ "Kuala Lumpur, Malaysia" ], "timestamp" : "2026-06-16T02:39:21.304", "fingerprint" : "d361c038e80e7ee25f06c2708e696babafce6881749e9a55b1eb9bfeb96da610", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/cygnify/f8691c89-168e-4178-9678-8a9d39b9914d/application", "externalId" : "f8691c89-168e-4178-9678-8a9d39b9914d", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Kuala Lumpur", "country" : "Malaysia", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "3.1516964,101.6942371" } ], "locationText" : "Kuala Lumpur, Malaysia", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Elastic Stack, SIEM, Cloud", "professionalSkills" : [ "Incident triage", "Log analysis", "Root cause analysis", "Use case improvements", "Detection quality", "Incident handling", "Evidence collection", "Detection workflows", "Readiness enhancement", "Log source onboarding" ], "hardSkillsList" : [ "Security alerts", "Security events", "Malware investigation", "Phishing investigation", "Insider threats", "Cloud breaches", "Detection rule creation", "Threat hunting", "Compliance reporting", "Audit support", "Simulation exercises", "Tabletop exercises" ], "hardSkills" : [ { "name" : "Security alerts", "level" : "intermediate" }, { "name" : "Security events", "level" : "intermediate" }, { "name" : "Malware investigation", "level" : "intermediate" }, { "name" : "Phishing investigation", "level" : "intermediate" }, { "name" : "Insider threats", "level" : "intermediate" }, { "name" : "Cloud breaches", "level" : "intermediate" }, { "name" : "Detection rule creation", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Compliance reporting", "level" : "intermediate" }, { "name" : "Audit support", "level" : "intermediate" }, { "name" : "Simulation exercises", "level" : "intermediate" }, { "name" : "Tabletop exercises", "level" : "intermediate" } ], "majorSkills" : "Incident Response, Cyber Security, SIEM platform", "majorSkillsList" : [ "Incident Response", "Cyber Security", "SIEM platform" ], "coreResponsibilities" : "Monitor security alerts, Investigate security alerts, Analyze security incidents, Contain security incidents, Escalate security incidents, Tune SIEM rules, Suggest new detections, Analyze logs, Correlate logs, Create incident documentation, Maintain incident documentation, Create incident reports, Maintain incident reports, Create lessons learned, Maintain lessons learned, Support playbook execution, Remediate incidents, Perform root cause analysis, Provide use case insights, Validate use cases, Test use cases, Escalate confirmed incidents, Participate in reviews, Improve processes, Improve detections, Validate security events, Identify legitimate threats, Investigate malware incidents, Investigate phishing incidents, Investigate insider threats, Investigate cloud breaches, Assist in rule creation, Assist in rule tuning, Map MITRE ATT&CK, Improve detection quality, Hunt threats, Handle incidents, Collect evidence, Document incidents, Support compliance, Support audits, Contribute to automation, Participate in training, Participate in simulations, Participate in exercises, Onboard log sources, Manage log availability", "teamCollaboration" : "Collaborate with IT; Collaborate with network; Collaborate with application teams; Collaborate with MSSP; Collaborate with CSIRT; Collaborate with IT infrastructure", "domainKnowledge" : "Cyber resilience; MITRE ATT&CK; Cloud breaches; Insider threats; Malware; Phishing", "domainList" : [ "cyber-resilience", "mitre-att-ck", "cloud-breaches", "insider-threats", "malware", "phishing" ], "domainSpecificKnowledge" : [ "Cyber resilience", "MITRE ATT&CK", "Cloud breaches", "Insider threats", "Malware", "Phishing" ], "toolProficiency" : [ "Elastic Stack", "SIEM" ], "documentationSkills" : "Incident documentation; Incident reports; Lessons learned; Evidence collection; Compliance documentation; Audit documentation", "continuousLearning" : "Training sessions; Simulations; Tabletop exercises", "innovationCreativity" : "Automation opportunities", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Ensure timely response; Maintain cyber resilience; Align with MTTD goals; Align with MTTR goals", "qualificationsBasic" : "Perform deep-dive investigations, Conduct threat hunting, Support incident response reporting, Manage continuous logs availability", "qualificationsPreferred" : "MITRE ATT&CK mapping, Automation opportunities", "rawDescription" : "Role Mission The Senior Analyst - Cyber Security Incident Response is responsible for monitoring, detecting, and analyzing cybersecurity incidents through the Security Operations Centre (SOC) platform. The role supports the end-to-end incident lifecycle — including triage, investigation, containment, and closure — ensuring timely response to security events and maintaining cyber resilience. This role acts as the Level 2 (L2) Incident Responder, bridging SOC analysts and Incident Response management by performing deep technical analysis and coordinating with internal teams for resolution. Accountabilities: - Perform end-to-end incident triage and investigation of security alerts escalated from L1 SOC analysts. - Ensure timely incident analysis, containment, and escalation aligned with MTTD and MTTR goals. - Support the SIEM platform (Elastic Stack) by fine-tuning existing rules and suggesting new detections. - Conduct log analysis and correlation across multiple data sources (network, endpoint, and cloud). - Create and maintain incident documentation, reports, and lessons learned. - Support incident response playbook execution during containment and recovery phases. - Collaborate with IT, network, and application teams for incident remediation and root cause analysis. - Provide insights for use case improvements and participate in use case validation and testing. - Escalate confirmed incidents to CSIRT / Assistant Manager - Incident Response for further action. - Participate in post-incident reviews, contributing to process and detection improvements. - Monitor alerts generated from the SOC/SIEM and perform initial to intermediate-level investigations. - Review and validate security events from multiple log sources and identify legitimate threats. - Perform deep-dive investigations for incidents involving malware, phishing, insider threats, and cloud breaches. - Assist in detection rule creation and tuning under the guidance of senior incident responders. - Use frameworks like MITRE ATT&CK for mapping and improving detection quality. - Conduct threat hunting using Elastic Stack and related tools. - Collaborate with MSSP, CSIRT, and IT infrastructure teams to ensure timely incident handling. - Support incident response reporting, evidence collection, and documentation for compliance and audit. - Contribute to automation opportunities in detection and response workflows. - Participate in training sessions, simulations, and tabletop exercises to enhance readiness. - Responsible for the log source onboarding and managing the continuous logs availability on the SIEM platform. Requirements - Monitor alerts generated from the SOC/SIEM and perform initial to intermediate-level investigations. - Review and validate security events from multiple log sources and identify legitimate threats. - Perform deep-dive investigations for incidents involving malware, phishing, insider threats, and cloud breaches. - Assist in detection rule creation and tuning under the guidance of senior incident responders. - Use frameworks like MITRE ATT&CK for mapping and improving detection quality. - Conduct threat hunting using Elastic Stack and related tools. - Collaborate with MSSP, CSIRT, and IT infrastructure teams to ensure timely incident handling. - Support incident response reporting, evidence collection, and documentation for compliance and audit. - Contribute to automation opportunities in detection and response workflows. - Participate in training sessions, simulations, and tabletop exercises to enhance readiness. - Responsible for the log source onboarding and managing the continuous logs availability on the SIEM platform. #LI-JE1", "summaryDescription" : "Senior Incident Response Specialist, Cyber Security. Skills: Incident Response, Cyber Security, SIEM platform. Monitor security alerts. Investigate security alerts", "createdAt" : "2026-06-14T19:11:17.518", "lastUpdated" : "2026-06-16T02:39:21.304", "ingestTimestamp" : "2026-06-14T19:11:17.518", "mongoId" : "6a2c68fa74d8ee00a0905806", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Security alerts", "Security events", "Malware investigation", "Phishing investigation", "Insider threats", "Cloud breaches", "Detection rule creation", "Threat hunting", "Compliance reporting", "Audit support", "Simulation exercises", "Tabletop exercises", "Incident Response", "Cyber Security", "SIEM platform", "Incident triage", "Log analysis", "Root cause analysis", "Use case improvements", "Detection quality", "Incident handling", "Evidence collection", "Detection workflows", "Readiness enhancement", "Log source onboarding", "Cyber resilience", "MITRE ATT&CK", "Malware", "Phishing", "Elastic Stack", "SIEM" ], "skillCount" : 31, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 487.18567, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305b1ff292fd229cf59910", "title" : "Part-Time Residential Security Agent", "industry" : "Real Estate", "salary" : { "min" : 28000.0, "max" : 45000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an entry-level Part-Time Residential Security Agent in Palo Alto, CA, adjusted for the real estate industry." }, "location" : "Palo Alto, CA", "locations" : [ "Palo Alto, CA" ], "timestamp" : "2026-06-16T07:25:36.447", "fingerprint" : "2c7dad8883f19473298a5eedf4d48fe6fc9a95e74ffb811bc7147cf3f6e98749", "source" : "jazzhr", "language" : "en", "externalId" : "uZ2Uilg4ru", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Palo Alto", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.4443293,-122.1598465" } ], "locationText" : "Palo Alto, California, United States", "employmentType" : "PART_TIME", "coreResponsibilities" : "Provide residential security services, Monitor premises, Respond to incidents, Enforce security policies, Report suspicious activity", "qualificationsBasic" : "Security agent experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "summaryDescription" : "Part-Time Residential Security Agent. Provide residential security services. Monitor premises", "createdAt" : "2026-06-15T22:27:07.390", "lastUpdated" : "2026-06-16T07:25:36.447", "ingestTimestamp" : "2026-06-15T22:27:07.390", "mongoId" : "6a305b1ff292fd229cf59910", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 28000, "salaryAnnualMax" : 45000, "salaryBand" : "<30k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Entry", "dataQualityScore" : 0.44444445, "_score" : 478.8969, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Real Estate", "llmIndustryConfidence" : 0.85 }, { "id" : "68e0a7e5ce260f92cbf8ec2f", "title" : "Security Engineer I, Corporate Services Security", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 125500.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Arlington, Virginia, USA", "locations" : [ "Arlington, Virginia, USA" ], "timestamp" : "2026-06-15T02:11:38.217", "fingerprint" : "418154fcb96c9a8a4ab0acceaaef4f10a7f0cbb2c4482842e37898cf2f46bf2a", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3099188/apply", "externalId" : "60cf4257-a61e-446a-992e-59a55d77328b", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Ruby, Java, C/C++, EC2, RDS, AWS", "professionalSkills" : [ "Risk analysis", "Security policy", "Security tooling", "Security operations", "Threat intelligence", "Vulnerability detection", "Incident response", "Network security", "Security architecture" ], "hardSkillsList" : [ "Network security design", "TCP/IP protocols", "Incident triage", "Incident response", "Log management", "Alert writing", "Forensic methodologies" ], "hardSkills" : [ { "name" : "Network security design", "level" : "intermediate" }, { "name" : "TCP/IP protocols", "level" : "intermediate" }, { "name" : "Incident triage", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Log management", "level" : "intermediate" }, { "name" : "Alert writing", "level" : "intermediate" }, { "name" : "Forensic methodologies", "level" : "intermediate" } ], "majorSkills" : "Security automation, Vulnerability detection, Incident response, Network security", "majorSkillsList" : [ "Security automation", "Vulnerability detection", "Incident response", "Network security" ], "coreResponsibilities" : "Review threat intelligence and offensive security data, Develop technologies for automated vulnerability detection and prevention, Perform risk analysis, Drive technical mitigations, Participate in security operations support, Perform incident response and triage, Develop security policies and procedures, Interpret security policies and procedures, Implement security policies and procedures, Evaluate new security tooling and technologies, Recommend new security tooling and technologies, Support learning and development for internal customers", "teamCollaboration" : "Internal customers", "domainKnowledge" : "Security exploit concepts; Cybersecurity attacks; Network security; TCP/IP protocols; Network security architecture; Forensic methodologies", "domainList" : [ "security-exploit-concepts", "cybersecurity-attacks", "network-security", "tcp-ip-protocols", "network-security-architecture", "forensic-methodologies" ], "domainSpecificKnowledge" : [ "Security exploit concepts", "Cybersecurity attacks", "Network security", "TCP/IP protocols", "Network security architecture", "Forensic methodologies" ], "toolProficiency" : [ "SIEM", "Log management tools", "BurpSuite", "Metasploit", "IDA Pro", "Caldera" ], "communicationSkills" : "Translating technical issues", "continuousLearning" : "Learning and development", "innovationCreativity" : "Inventing security tooling; Developing security tooling; Automating security tooling", "problemSolvingSkills" : "Solve security challenges", "qualificationsBasic" : "Bachelor's degree or above in Computer Science, Computer Engineering, Cybersecurity, or other related discipline, In-depth understanding of security exploit concepts, Advanced knowledge in network security design, TCP/IP protocols and topology, and network security architecture, Experience with incident triage and response, Working knowledge of Python, Ruby, Java, or C/C++, Versed in SIEM, log management tools, and alert writing", "qualificationsPreferred" : "3+ years of progressive experience in a security-focused role, Experience in a security operations team or conducting threat hunting operations, Experience in generating automated metrics to measure IT security effectiveness and consistency, Effective teacher and instructor, Experience developing and delivering training, Excellent written communication skills, Experience architecting, securing, and operating Amazon Web Services, Experience in using standard Security Assessment and Penetration Testing tools, Knowledgeable of forensic methodologies and best practices", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We are open to hiring candidates to work out of one of the following locations: Arlington, VA, USA We are the \"blue team\" for Amazon's Corporate Services Security organization. Our team designs and builds secure monitoring solutions, develops security automation, and solves security challenges at a massive scale. We are responsible for securing the infrastructure and software built and operated by service teams in Amazon Finance, Legal, People Experience & Technology, and Communications & Corporate Responsibility Key job responsibilities · Review threat intelligence and offensive security data to develop technologies for automated vulnerability detection and prevention · Perform risk analysis and drive technical mitigations · Participate in security operations support to include incident response and triage · Develop, interpret, and implement security policies and procedures · Evaluate and recommend new security tooling and technologies · Support the learning and development our internal customers A day in the life If you enjoy inventing, developing, and automating security tooling, this position will provide you with a unique opportunity to secure thousands of EC2 instances, hundreds of RDS databases, petabytes of data, and millions of lines of code. You will help defend critical Amazon data and join a team that secures the applications and infrastructure used by hundreds of millions of customers every day. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor's degree or above in Computer Science, Computer Engineering, Cybersecurity, or other related discipline - An in-depth understanding of security exploit concepts and how to detect and prevent cybersecurity attacks and anomalies - Advanced knowledge in network security design, TCP/IP protocols and topology, and network security architecture - Experience with incident triage and response - Working knowledge of at-least one of the following languages: Python, Ruby, Java, or C/C++ - Versed in security information and event management (SIEM), log management tools, and alert writing Preferred Qualifications: - 3+ years of progressive experience in a security-focused role - Experience in a security operations team or conducting threat hunting operations - Experience in generating automated metrics to measure IT security effectiveness and consistency - An effective teacher and instructor, with experience developing and delivering training to security, technical, and business professionals - Excellent written communication skills with a focus on translating technically complex security issues into simple, easy to understand concepts for leadership consumption - Experience architecting, securing, and operating Amazon Web Services - Experience in using standard Security Assessment and Penetration Testing tools such as BurpSuite, Metasploit, IDA Pro, Caldera - Knowledgeable of forensic methodologies and best practices to investigate intrusions, preserve evidence, and coordinate a unified security response Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $125,500/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Engineer I, Corporate Services Security at Amazon.com Services LLC. Skills: Security automation, Vulnerability detection, Incident response, Network security. Review threat intelligence and offensive security data. Develop technologies for automated vulnerability detection and prevention", "postedDate" : "2026-06-13T16:54:11.174", "createdAt" : "2026-06-13T16:54:11.174", "lastUpdated" : "2026-06-15T02:11:38.217", "ingestTimestamp" : "2026-06-13T16:54:11.174", "mongoId" : "68e0a7e5ce260f92cbf8ec2f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3099188/apply", "salaryAnnualMin" : 125500, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Network security design", "TCP/IP protocols", "Incident triage", "Incident response", "Log management", "Alert writing", "Forensic methodologies", "Security automation", "Vulnerability detection", "Network security", "Risk analysis", "Security policy", "Security tooling", "Security operations", "Threat intelligence", "Security architecture", "Security exploit concepts", "Cybersecurity attacks", "Network security architecture", "SIEM", "Log management tools", "BurpSuite", "Metasploit", "IDA Pro", "Caldera" ], "skillCount" : 25, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 475.77283, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2ca36a74d8ee00a09aba74", "title" : "Sr. Security Engineer, Corporate Information Security", "company" : "Betterment", "industry" : "FinTech", "salary" : { "min" : 175000.0, "max" : 235000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Engineer in New York, adjusted for the FinTech industry and company size." }, "location" : "61 West 23rd Street, Fifth Floor, New York, New York", "locations" : [ "61 West 23rd Street", "Fifth Floor", "New York", "New York" ], "timestamp" : "2026-06-15T09:22:09.285", "fingerprint" : "72c875a3162a4c2e09d8c8dc48b7c153e2abafe284223ef079d06afa2c355b42", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.betterment.com/careers/current-openings/job?gh_jid=7979278&gh_jid=7979278", "externalId" : "7979278", "industryFunction" : { }, "structuredLocations" : [ { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "40.7127281,-74.0060152" } ], "locationText" : "New York, New York, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Python, Go, Okta, Google Workspace, Slack, Atlassian, Glean, Jamf, SaaS, Windows, Linux, MacOS, Mobile, Managed browser, Workstation, AI Governance, CIS benchmarks, ACLs, Firewall rules, Cryptography, VPNs, Tunneling, Encapsulation", "professionalSkills" : [ "Identity architecture", "Access controls", "Endpoint hardening", "Risk reduction", "Business enablement", "Network monitoring", "Automation" ], "hardSkillsList" : [ "Vulnerability management", "Security automation", "Network monitoring", "ACLs", "Firewall rules", "Cryptography", "VPNs", "Tunneling", "Encapsulation" ], "softSkillsList" : [ "AI fluency" ], "hardSkills" : [ { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Security automation", "level" : "intermediate" }, { "name" : "Network monitoring", "level" : "intermediate" }, { "name" : "ACLs", "level" : "intermediate" }, { "name" : "Firewall rules", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" }, { "name" : "VPNs", "level" : "intermediate" }, { "name" : "Tunneling", "level" : "intermediate" }, { "name" : "Encapsulation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "AI fluency" } ], "majorSkills" : "Identity architecture, Access controls, Endpoint hardening, Workforce security", "majorSkillsList" : [ "Identity architecture", "Access controls", "Endpoint hardening", "Workforce security" ], "coreResponsibilities" : "Design identity architecture, Implement identity architecture, Improve identity architecture, Design privileged access controls, Implement privileged access controls, Improve privileged access controls, Design endpoint hardening standards, Implement endpoint hardening standards, Improve endpoint hardening standards, Improve workforce security posture, Embed secure access patterns, Partner with Security teams, Partner with IT, Partner with Legal, Partner with Compliance, Partner with business units, Operationalize CIS benchmarks, Extend security to mobile, Extend security to managed browser", "teamCollaboration" : "Cross-functional teams; Security teams; IT; Legal; Compliance; Business units", "domainKnowledge" : "Workforce security; Identity management; Logical access; Change management; SaaS security; Endpoint security; Mobile security; Managed browser security; Workstation security; AI Governance; CIS benchmarks; SOC 2; ISO 27001; NIST; Enterprise network; Privileged Access Management; Identity Governance", "domainList" : [ "workforce-security", "identity-management", "logical-access", "change-management", "saas-security", "endpoint-security", "mobile-security", "managed-browser-security", "workstation-security", "ai-governance", "cis-benchmarks", "soc-2", "iso-27001", "nist", "enterprise-network", "privileged-access-management", "identity-governance" ], "domainSpecificKnowledge" : [ "Workforce security", "Identity management", "Logical access", "Change management", "SaaS security", "Endpoint security", "Mobile security", "Managed browser security", "Workstation security", "AI Governance", "CIS benchmarks", "SOC 2", "ISO 27001", "NIST", "Enterprise network", "Privileged Access Management", "Identity Governance" ], "toolProficiency" : [ "Okta", "Google Workspace", "Slack", "Atlassian", "Glean", "Jamf", "CyberArk", "BeyondTrust", "Delinea" ], "communicationSkills" : "Writing RFCs; Writing one-pagers; Writing audit narratives", "documentationSkills" : "Technical writing; Audit narratives", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "qualificationsBasic" : "5+ years Python, Experience with Okta, Experience with Google Workspace, Experience with Slack, Experience with Atlassian, Experience with Glean, Experience with Jamf, Experience with SaaS portfolio, Experience with Windows, Experience with Linux, Experience with macOS, Experience with mobile, Experience with managed browser, Experience with workstation environments, Experience with AI Governance, Experience with CIS benchmarks, Experience with RFCs, Experience with one-pagers, Experience with audit narratives, Experience with SOC 2, Experience with ISO 27001, Experience with NIST, Experience with network monitoring, Experience with ACLs, Experience with firewall rules, Experience with cryptography, Experience with VPNs, Experience with tunneling, Experience with encapsulation", "qualificationsPreferred" : "Privileged Access Management experience, Identity Governance experience, Cloud security experience, Endpoint security experience, Vulnerability management experience, Security automation experience, AI fluency", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "About Betterment Betterment is a leading, technology-driven financial services company that offers investing, savings and retirement solutions for retail investors and investment advisors as well as financial wellness solutions, including a 401(k) for small and medium-sized businesses. Our team is passionate about our mission, to empower people to build wealth with confidence and ease. We're headquartered in NYC and offer hybrid NY-based positions (four days/week in-office, with no required office days during the summer and winter holidays). About the Role Betterment is hiring a Sr. Security Engineer, Corporate Information Security to be a principal member of the Workforce Security team. We're responsible for managing identity and logical access across the company, owning change management for the systems employees and contractors rely on every day, and operating the technologies that secure them: Okta, Google Workspace, Slack, Atlassian, Glean, Jamf, and the SaaS portfolio that surrounds them. As we extend centralized management to a small Windows and Linux footprint, you'll help shape how we do that securely from day one. This is a hands-on senior IC role focused on designing, implementing, and continuously improving identity architecture, privileged access controls, endpoint hardening standards, and our overall workforce security posture. You'll embed secure access patterns across SaaS, managed browser, mobile, and workstation environments partnering closely with other Security teams, IT, Legal, Compliance, and the business units we serve. In parallel, you'll partner with our AI Governance an opinion on operationalizing CIS benchmarks across macOS and Windows without crushing the user experience; comfort extending security to mobile and managed browser surfaces. Vulnerability Python, Go, or similar with a track record of automation that survives the person who built it. AI fluency: Curiosity for AI tools and workflows; an instinct for enabling responsibly rather than reflexively blocking. Communication: Strong writing — RFCs, one-pagers, audit narratives — and the cross-functional patience to bring stakeholders along. Compliance posture: Comfort operating in SOC 2 and ISO 27001/NIST environments, balancing risk reduction with business enablement. Enterprise network: Experience with network monitoring building/testing ACLs, firewall rules, cryptography, VPNs and tunneling/encapsulation. Preferred Qualifications Hands-on experience with Privileged Access Management (CyberArk, BeyondTrust, Delinea), Identity Governance to empower people to build wealth with confidence and ease. We set audacious goals We set them for the company, our customers, and ourselves, and we won’t stop until we reach them. We don’t just show up; we give our all, then celebrate our wins. We value all perspectives When we collaborate, we're at our best. We believe diverse perspectives lead to better outcomes and strive to uphold our supportive and inclusive community. We simplify financial services We’re financial services pioneers, always finding new ways to improve, optimize, and enhance. Constant improvement is in our DNA. Our Commitment to Your Total Well-being: We offer a competitive suite of benefits, including medical, dental, and vision coverage; life and AD short- and long-term disability; infertility support and WPATH-aligned transgender health benefits; an Employee Assistance Program (EAP); transit benefits and FSA and HSA options Ownership: Equity for all employees, including new hire and refresher grants. Time: Flexible paid time off, paid parental leave, and a fully paid four-week sabbatical in your sixth year. Growth: Company-paid professional coaching for all employees. Wealth: Day-one 401(k) match plus matching on qualified student loan payments. What happens next We’ll take a few weeks to review all applications. If we’d like to spend more time with you, we’ll reach out to arrange next steps, which will include 3-4 sets of meetings with your future colleagues. In the interview process, we’ll look to learn more about your skills, experiences, capabilities, and motivators. Many of our questions will be aimed at understanding how you might operate here at Betterment. Depending on the role, we may ask you to complete a case study exercise or technical assessments, as we want to collect a robust set of data points to better inform our decisions. On average, it takes us around 3-5 weeks to make a hiring decision, depending on your availability and sense of urgency. As a best practice, we aim to interview at least 2-3 final round candidates before making a hiring decision. Please note that, as we usually receive an overwhelming number of applications for open positions, we’re unable to offer individual feedback during the interview process. We recognize that interviewing for a new role is a big deal. We appreciate you considering Betterment as the next step in your career, and our Recruiting Team is here to support and advocate for you through the interview process! Betterment is dedicated to providing accommodations to candidates upon request. If you need accommodations at any point throughout the interview process, please reach out to your recruiter. Please note that in any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information. Come join us! We’re an equal opportunity employer and comply with all applicable federal, state, and local fair employment practices laws. We strictly prohibit and do not tolerate discrimination against employees, applicants, or any other covered persons because of race, color, religion, creed, national origin or ancestry, ethnicity, sex, gender (including gender nonconformity and status as a transgender or transsexual individual), sexual orientation, marital status, age, physical or mental disability, citizenship, past, current or prospective service in the uniformed services, predisposing genetic characteristic, domestic violence victim status, arrest records, or any other characteristic protected under applicable federal, state or local law.", "summaryDescription" : "Sr. Security Engineer, Corporate Information Security at Betterment. Skills: Identity architecture, Access controls, Endpoint hardening, Workforce security. Design identity architecture. Implement identity architecture", "postedDate" : "2026-06-14T03:38:21.776", "createdAt" : "2026-06-14T03:38:21.776", "lastUpdated" : "2026-06-15T09:22:09.285", "ingestTimestamp" : "2026-06-14T03:38:21.776", "mongoId" : "6a2ca36a74d8ee00a09aba74", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 175000, "salaryAnnualMax" : 235000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Vulnerability management", "Security automation", "Network monitoring", "ACLs", "Firewall rules", "Cryptography", "VPNs", "Tunneling", "Encapsulation", "AI fluency", "Identity architecture", "Access controls", "Endpoint hardening", "Workforce security", "Risk reduction", "Business enablement", "Automation", "Identity management", "Logical access", "Change management", "SaaS security", "Endpoint security", "Mobile security", "Managed browser security", "Workstation security", "AI Governance", "CIS benchmarks", "SOC 2", "ISO 27001", "NIST", "Enterprise network", "Privileged Access Management", "Identity Governance", "Okta", "Google Workspace", "Slack", "Atlassian", "Glean", "Jamf", "CyberArk", "BeyondTrust", "Delinea" ], "skillCount" : 42, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 465.97586, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a25145474d8ee00a00bb3b2", "title" : "Senior Security Engineer, AWS Security Incident Response", "company" : "Amazon Web Services Japan GK", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 1.2E7, "max" : 1.8E7, "currency" : "JPY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Security Engineer in Tokyo, Japan, adjusted for AWS's size and the technology industry." }, "location" : "Tokyo, JPN", "locations" : [ "Tokyo, JPN" ], "certifications" : [ "GCIH", "GSEC", "GREM", "GCFA", "CISSP" ], "timestamp" : "2026-06-15T08:24:56.602", "fingerprint" : "a57d3db022abec12088d7bb9660b2ed2ff73f018f6b5050988fd19a160c05a1a", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10441597/apply", "externalId" : "79b6888c-343c-4289-bbab-a95d6a41e1f2", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tokyo", "country" : "Japan", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "35.6768601,139.7638947" } ], "locationText" : "Tokyo, Japan", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Python, Java, C++, AWS, Amazon GuardDuty, AWS CloudTrail, AWS Security Hub, AWS IAM", "professionalSkills" : [ "Malware analysis", "Forensic analysis", "Attribution skills", "System design", "Automation development", "Detection engineering", "Incident response", "Threat monitoring", "Security operations" ], "hardSkillsList" : [ "Scripting", "Programming", "Code review", "Log analysis", "Automation", "Command line tools", "Security issue identification", "Risk assessment", "Mitigation planning", "Vulnerability identification", "Attack pattern analysis", "Remediation" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Programming", "level" : "intermediate" }, { "name" : "Code review", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" }, { "name" : "Command line tools", "level" : "intermediate" }, { "name" : "Security issue identification", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Mitigation planning", "level" : "intermediate" }, { "name" : "Vulnerability identification", "level" : "intermediate" }, { "name" : "Attack pattern analysis", "level" : "intermediate" }, { "name" : "Remediation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Security Incident Response, Automation, AI Feedback Loops, Detection Engineering", "majorSkillsList" : [ "Security Incident Response", "Automation", "AI Feedback Loops", "Detection Engineering" ], "coreResponsibilities" : "Build automation mechanisms, Investigate complex security incidents, Build frameworks for scalable detection, Build frameworks for auto-remediation, Architect AI feedback loops, Respond to threats, Build detection enhancements, Build auto-remediation playbooks, Build AI training pipelines, Lead incident response for customers, Scope blast radius, Coordinate containment, Guide remediation, Walk customers through compromises, Build pipelines to capture investigation patterns, Translate patterns into detection rules, Translate patterns into auto-remediation, Measure impact on investigation volume, Measure impact on investigation accuracy, Build mechanisms for engineer contribution, Build AI feedback loops, Improve autonomous investigation accuracy, Define and track metrics, Measure automation effectiveness, Reduce false positives, Increase auto-resolution coverage, Track engineer contribution rates, Mentor junior engineers, Structure artifacts as reusable automation inputs, Participate in on-call rotations, Review automation dashboard metrics, Investigate new attack patterns, Analyze malware behavior, Extract indicators, Build detection rules, Step into high-severity incidents, Analyze logs, Correlate indicators across accounts, Codify attack chains, Improve AI agent performance, Review and approve detection rule contributions", "teamCollaboration" : "Cross-functional teams; Leadership collaboration", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Attack patterns; Supply chain attacks; Cryptomining; Cloud-native architecture; Security operations", "domainList" : [ "attack-patterns", "supply-chain-attacks", "cryptomining", "cloud-native-architecture", "security-operations" ], "domainSpecificKnowledge" : [ "Attack patterns", "Supply chain attacks", "Cryptomining", "Cloud-native architecture", "Security operations" ], "toolProficiency" : [ "AWS" ], "communicationSkills" : "Customer calls; Executive presentations", "continuousLearning" : "One-on-one coaching", "innovationCreativity" : "Prototype development", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Data-driven decision making", "specialRequirements" : "On-call rotation, 24/7 follow-the-sun operating model", "outcomesObjectives" : "Reduce false positives; Increase auto-resolution coverage; Improve autonomous investigation accuracy", "qualificationsBasic" : "5+ years scripting, programming, or security code review, Bachelor's degree or above in Computer Science, Computer Engineering, Cybersecurity, or other related discipline, Speak, write, and read fluently in Japanese, 5+ years troubleshooting systems issues, analyzing logs, automating complex tasks using command line tools, and identifying security issues, risks, and developing mitigation plans, Experience in industry-based security vulnerabilities identification, attack patterns, and remediation, Experience as a mentor, tech lead, or leading an engineering team", "qualificationsPreferred" : "Master's degree in Computer Science, Information Security, or a related field, Experience in automation or monitoring frameworks, deployment or development, Information security professional certification (GCIH, GSEC, GREM, GCFA, CISSP, or equivalent), Experience with AWS services in a security operations context", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Security Incident Response is looking for a Senior Security Engineer who builds the automation mechanisms that scale security response. You will investigate complex security incidents hands-on, build the frameworks that turn investigation expertise into scalable detection and auto-remediation, and architect the AI feedback loops that make the service smarter with every investigation. The AWS Security Incident Response team provides 24/7 security response through a follow-the-sun operating model. The service combines automated triage workflows, AI-powered investigation agents, and human security analysts to respond to threats across customer AWS environments at massive scale. Our AI systems autonomously resolve over 90% of routine investigations within minutes. The next challenge is building the mechanisms that accelerate this further — enabling every engineer on the team to contribute to detection and automation quality from their investigation work. Your deep understanding of how attacks work — from initial exploitation through lateral movement to data exfiltration — is what makes your automation effective. You will build detection enhancements, auto-remediation playbooks, and AI training pipelines that catch real threats, not just generate noise. We treat every investigation as a confirmed security incident until the data proves otherwise. Native Japanese language skills and fluent English language skills in speaking, reading, and writing. Key job responsibilities - Investigate and respond to complex security incidents hands-on — applying malware analysis, forensic analysis, or attribution skills to credential compromise, data exfiltration, supply chain attacks, and cryptomining - Lead incident response for customers during high-severity events: scope blast radius, coordinate containment, guide remediation, and get on calls with customers to walk them through what was compromised and the specific steps to contain the threat - Own the response-to-automation flywheel: build pipelines that capture investigation patterns (including Trust & Safety abuse cases), translate them into detection rules and auto-remediation, and measure impact on investigation volume and accuracy - Build mechanisms that enable every engineer on the team to contribute detection rules, automation playbooks, and AI training data — and build the AI feedback loops that ensure human corrections systematically improve autonomous investigation accuracy - Define and track metrics that measure automation effectiveness: false positive reduction, auto-resolution coverage, and engineer contribution rates to the pipeline - Mentor junior engineers on investigation methodology and structuring artifacts as reusable automation inputs - Participate in on-call rotations as part of the 24/7 follow-the-sun operating model, including weekends A day in the life - Review automation dashboard metrics: AI agent resolution rates, false positive trends, and engineer-submitted detection rules going live - Investigate new attack patterns the AI is struggling with — analyze malware behavior, extract indicators, and build detection rules that catch the pattern without generating false positives - Step into high-severity incidents directly — analyzing logs, correlating indicators across accounts, scoping blast radius, and getting on a call with the customer to guide containment - Codify attack chains from investigations into detection rules and AI agent improvements so the system catches the pattern autonomously next time - Review and approve detection rule contributions from junior engineers using your contribution framework About the team The AWS Security Incident Response team provides 24/7 threat monitoring, investigation, and response for customer AWS environments. The team is driving a strategic transformation — raising operational standards, building AI-powered investigation capabilities, and expanding coverage. We respond to customer requests within minutes. Zero queue tolerance is the operating standard. We value engineers who solve root causes over those who close tickets. Senior engineers enjoy close collaboration with leadership, one-on-one coaching, and the opportunity to shape the future of security operations at AWS scale. Basic Qualifications: - 5+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience - Bachelor's degree or above in Computer Science, Computer Engineering, Cybersecurity, or other related discipline - Speak, write, and read fluently in Japanese - 5+ years of non-internship experience in troubleshooting systems issues, analyzing logs, automating complex tasks using command line tools, and identifying security issues, risks, and developing mitigation plans - Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques; including experience as a mentor, tech lead, or leading an engineering team Preferred Qualifications: - Master's degree in Computer Science, Information Security, or a related field - Experience in automation or monitoring frameworks, deployment or development - Knowledge of compliance and security standards across the enterprise IT landscape - * Information security professional certification (GCIH, GSEC, GREM, GCFA, CISSP, or equivalent) - * Experience with AWS services in a security operations context (Amazon GuardDuty, AWS CloudTrail, AWS Security Hub, AWS IAM) Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Senior Security Engineer, AWS Security Incident Response at Amazon Web Services Japan GK. Skills: Security Incident Response, Automation, AI Feedback Loops, Detection Engineering. Build automation mechanisms. Investigate complex security incidents", "postedDate" : "2026-06-13T18:41:50.371", "createdAt" : "2026-06-13T18:41:50.371", "lastUpdated" : "2026-06-15T08:24:56.602", "ingestTimestamp" : "2026-06-13T18:41:50.371", "mongoId" : "6a25145474d8ee00a00bb3b2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10441597/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Scripting", "Programming", "Code review", "Log analysis", "Automation", "Command line tools", "Security issue identification", "Risk assessment", "Mitigation planning", "Vulnerability identification", "Attack pattern analysis", "Remediation", "Mentoring", "Security Incident Response", "AI Feedback Loops", "Detection Engineering", "Malware analysis", "Forensic analysis", "Attribution skills", "System design", "Automation development", "Detection engineering", "Incident response", "Threat monitoring", "Security operations", "Roadmap planning", "Attack patterns", "Supply chain attacks", "Cryptomining", "Cloud-native architecture", "GCIH", "GSEC", "GREM", "GCFA", "CISSP", "AWS" ], "skillCount" : 36, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 463.1677, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "694ae6ce70f0b99d589b2804", "title" : "Security Operations and Incident Response Manager", "company" : "Hyundai Capital America", "industry" : "FinTech", "salary" : { "min" : 155000.0, "max" : 210000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager in Security Operations and Incident Response in Irvine, United States, adjusted for the FinTech industry and company size." }, "location" : "United States-California-Irvine", "locations" : [ "United States-California-Irvine", "
Headquarters 1 (HCA_HQ1)
3161 Michelson Dr. Ste 1900
Irvine, 92612

" ], "timestamp" : "2026-06-15T08:40:47.148", "fingerprint" : "d5f865261d9c50964a8d89f96af400da1cdb2f3eecdc20e0391203f2e5cc71a5", "source" : "taleo", "language" : "en", "applyUrl" : "https://hyundaicapital.taleo.net/careersection/ex/jobdetail.ftl?job=105024", "externalId" : "105024", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "experienceLevel" : "Manager", "technicalSkills" : "SIEM, EDR, Threat intelligence, Ransomware, Phishing, Account takeover, Forensic analysis, Automation, Cloud security, AWS, Azure, Google Cloud, Oracle Cloud, Python, PowerShell", "professionalSkills" : [ "Incident response", "Threat hunting", "Tool administration", "Rule tuning", "Vulnerability management", "IAM", "DLP", "Application security", "Risk assessment", "Operational performance" ], "hardSkillsList" : [ "Security monitoring", "Threat detection", "Alert triage", "Incident handling", "Forensic investigation", "Playbook development", "Post-incident review", "Tool configuration", "Detection rule tuning", "Automation scripting", "Cloud monitoring", "Vulnerability scanning" ], "softSkillsList" : [ "Analytical mindset", "Leadership" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Alert triage", "level" : "intermediate" }, { "name" : "Incident handling", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" }, { "name" : "Playbook development", "level" : "intermediate" }, { "name" : "Post-incident review", "level" : "intermediate" }, { "name" : "Tool configuration", "level" : "intermediate" }, { "name" : "Detection rule tuning", "level" : "intermediate" }, { "name" : "Automation scripting", "level" : "intermediate" }, { "name" : "Cloud monitoring", "level" : "intermediate" }, { "name" : "Vulnerability scanning", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Analytical mindset" }, { "name" : "Leadership" } ], "majorSkills" : "Incident response, Security operations, Threat detection, SIEM management", "majorSkillsList" : [ "Incident response", "Security operations", "Threat detection", "SIEM management" ], "coreResponsibilities" : "Monitor security events, Analyze security events, Detect threats, Respond to threats, Tune SIEM rules, Optimize SIEM ingestion, Leverage threat intelligence, Analyze financial threats, Develop detection strategies, Triage security alerts, Correlate data, Escalate critical incidents, Lead incident response, Support incident response, Perform forensic investigations, Document findings, Create incident response playbooks, Maintain incident response playbooks, Conduct post-incident reviews, Recommend improvements, Update security controls, Coordinate with MSSP partners, Validate escalations, Provide tuning feedback, Manage security tools, Configure security tools, Ensure tool performance, Ensure tool coverage, Develop detection rules, Tune detection rules, Develop alerts, Tune alerts, Implement automation responses, Streamline tasks, Monitor cloud environments, Secure cloud environments, Protect financial data, Protect workloads, Integrate security tools, Partner with vulnerability management, Partner with IAM teams, Collaborate with IT Infrastructure, Collaborate with IT Application Teams, Collaborate with DevOps, Collaborate with IAM, Collaborate with DLP, Collaborate with Application Security, Integrate security operations, Conduct vulnerability scans", "teamCollaboration" : "Cross-functional collaboration; Collaborate with IT Infrastructure; Collaborate with IT Application Teams; Collaborate with DevOps; Collaborate with IAM; Collaborate with DLP; Collaborate with Application Security; Collaborate with threat intelligence; Collaborate with vulnerability management; Collaborate with engineering teams; Collaborate with cybersecurity architecture; Collaborate with cybersecurity engineering", "domainKnowledge" : "Financial systems; Cybersecurity; Cloud environments; MITRE framework", "domainList" : [ "financial-systems", "cybersecurity", "cloud-environments", "mitre-framework" ], "domainSpecificKnowledge" : [ "Financial systems", "Cybersecurity", "Cloud environments", "MITRE framework" ], "toolProficiency" : [ "Splunk", "NGSIEM", "EDR", "SIEM", "Firewalls", "Vulnerability scanners" ], "communicationSkills" : "Communicate risk; Communicate operational performance; Documentation skills", "documentationSkills" : "Document findings", "continuousLearning" : "Continuous learning; Staying ahead of threats; Tuition reimbursement", "problemSolvingSkills" : "Analytical mindset; Root cause analysis", "specialRequirements" : "Work at home, Office environment", "outcomesObjectives" : "Reduce false positives; Improve detection fidelity; Enhance detection strategies; Prevent recurrence", "qualificationsBasic" : "5+ years experience, Experience with SIEM platforms, Experience with EDR, Experience with threat intelligence platforms, Experience with incident response lifecycle, Experience with cybersecurity metrics, Experience with KPIs, Experience communicating risk, Experience communicating operational performance, Experience with cloud environments, Experience with automation scripts, Experience with vulnerability scanners, Experience with firewalls", "qualificationsPreferred" : "Experience with Splunk, Experience with NGSIEM, Experience with AWS, Experience with Azure, Experience with Google Cloud, Experience with Oracle Cloud, Experience with Python, Experience with PowerShell", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Who We Are Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 2 million consumers and businesses. Embodying our commitment to grow, innovate, and diversify, we strive to reimagine the customer and dealer experience and launch innovative new products that broaden our market reach. We believe that success comes from within and are proud to support our team members through skill development and career advancement. Hyundai Capital America is an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce. We are a values-driven company dedicated to supporting both internal and external communities through volunteering, philanthropy, and the empowerment of our Employee Resource Groups. Together, we strive to be the leader in financing freedom of movement. We Take Care of Our People Along with competitive pay, as an employee of HCA, you are eligible for the following benefits: · Medical, Dental and Vision plans that include no-cost and low-cost plan options · Immediate 401(k) matching and vesting · Vehicle purchase and lease discounts plus monthly vehicle allowances · Paid Volunteer Time Off with company donation to a charity of your choice · Tuition reimbursement What to Expect The Security Operations & Incident Response (SOIR) Manager is responsible for the enterprise-wide incident response function within the Security Operations Center (SOC), ensuring rapid detection, containment, and remediation of cybersecurity threats. This role is pivotal in maintaining the integrity, confidentiality, and availability of Hyundai Capital America’s digital assets and infrastructure. This role will oversee 3 rd party vendor of incident responders and collaborate with threat intelligence, vulnerability management, and engineering teams to drive continuous improvement in detection and response capabilities. In addition, this role will create and maintain incident response playbooks and establish processes for proactive threat hunting, as well as be responsible for administration and day-to-day support of HCA EDR, SIEM, and HCA Monitoring, Threat detection, and remediation tools. What You Will Do 1. Security Monitoring & Threat Detection : · Monitor and analyze security events in real-time using SIEM platforms (e.g., Splunk, NGSIEM etc.) to detect and respond to threats targeting financial systems, such as ransomware, phishing, or account takeover. · Tune and optimize SIEM correlation rules and ingestion pipelines to reduce false positives and improve detection fidelity. · Leverage threat intelligence platforms to analyze emerging financial-specific threats, correlate intelligence with internal data, and develop actionable insights to enhance detection and prevention strategies. 2. Incident Response & Remediation : · Alert Triage: Investigate and triage security alerts, correlating data from endpoints, networks, and cloud environments to identify true positives and escalate critical incidents. · Incident Handling: Lead and support incident response activities, including containment, eradication, and recovery, for security incidents spanning the MITRE framework. · Forensic Analysis: Perform forensic investigations to determine the root cause of incidents, and document findings for audits and legal purposes. · Playbook Development: Create and maintain incident response playbooks, ensuring rapid and consistent response processes. · Post-Incident Review: Conduct post-Incident reviews to identify lessons learned, recommend improvements, and update security controls to prevent recurrence. · Coordinate with MSSP partners in a co-managed SIEM/SOC model to validate escalations and provide tuning feedback. 3. Tool Administration and Management of SOC Solutions : · Tool Administration: Manage and configure security tools, including SIEM, EDR, firewalls, and vulnerability scanners, to ensure optimal performance and coverage. · Rule Tuning: Develop and tune detection rules, signatures, and alerts to reduce false positives and improve detection accuracy in financial environments. · Automation: Implement automation responses (e.g. SOUR) scripts (e.g., Python, PowerShell) to streamline tasks like alert enrichment, incident triage, or vulnerability scans. · Cloud Security Monitoring: Monitor and secure cloud environments (e.g., AWS, Azure, Google Cloud, Oracle Cloud) using native security tools and third-party integrations, protecting financial data and workloads. · Collaborate with cybersecurity architecture & engineering team to ensure proper integration of security tools across cloud, network, and endpoint environments. · Partner with vulnerability management and IAM teams to ensure holistic security coverage. 4. Collaboration, Automation, and Innovation Activities : · Cross-Functional Collaboration: Partner with IT Infrastructure and IT Application Teams, DevOps, IAM, DLP, and Application Security teams to integrate security operations with broader cybersecurity initiatives, such as cloud migrations or fintech development. · Vulnerability Management: Collaborate with Vulnerability Management team to conduct regular vulnerability scans across networks, systems, and applications to identify weaknesses, such as unpatched software or misconfigurations and support the patching management and/or adequate remediation plan. 5. Documentation, Reporting, and Compliance Activities : · Incident Documentation: Document security incidents, investigations, and remediation actions in detail to support audits, compliance, and lessons learned. · Vulnerability and Penetration Test Reports: Produce comprehensive reports on vulnerability scans and penetration tests, including risk assessments, remediation plans, and validation results. · Metrics and Reporting: Develop and report on SOC metrics (e.g., Mean Time to Detect, Mean Time to Respond, vulnerability remediation rates, penetration test coverage) to demonstrate operational effectiveness. · Runbooks and Procedures: Maintain and update SOC runbooks, standard operating procedures (SOPs), and knowledge bases for incident response, vulnerability management, and penetration testing. What You Will Bring · Minimum 5-7 years progressive experience in cybersecurity with proven knowledge in Security Operations Center practices and incident response processes; including 3+ years of experience in financial services, with a strong understanding of financial threats (e.g., fraud, data breaches) and regulations (e.g., PCI DSS, Korean SOX, GDPR) · Hands-on experience with SIEM platforms, EDR solutions, and other Monitoring and Vulnerability management tools (e.g., Splunk, Crowdstrike, Rapid 7) · Strong understanding of cyber threat landscapes, attack vectors, MITRE ATT&CK framework, and adversary tactics, techniques, and procedures · Bachelor’s degree in Computer Science, Information Security, or related field · Master’s degree preferred · Certification in one of the following: CISSP, CCSP, CISM, TOGAF or equivalent · Demonstrated ability to manage major incident investigations, including root cause analysis, executive reporting, and coordination with legal, compliance, and law enforcement when necessary · Familiarity with regulatory and compliance frameworks such as HIPAA, PCI-DSS, NIST, ISO 27001, and GDPR. · Proven ability to develop and maintain incident response playbooks, escalation procedures, and SOC standard operating procedures (SOPs) · Experience with cybersecurity metrics and KPIs, and the ability to communicate risk and operational performance to executive leadership · Demonstrated expertise in incident response lifecycle, including detection, triage, containment, eradication, recovery, and post-incident review · Analytical mindset with attention to detail · Excellent communication and documentation skills · Ability to work under pressure and manage multiple incidents simultaneously · Passion for continuous learning and staying ahead of emerging threats Work Environment Employees in this class are subject to extended periods of sitting, standing, and walking, vision to monitor and moderate noise levels. Work is performed in an at home and office environment. The posted salary range for this job takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; geographic location, and other business and organizational needs. Successful candidates may be hired anywhere in the salary range based on these factors. It is uncommon to hire candidates at or near the top of the range. California Privacy Notice This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here . This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used, and whether that information is sold or shared, so that you can exercise meaningful control over our use of your personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (“CCPA”). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at Privacy2@hcs.com . United States-California-Irvine", "summaryDescription" : "Security Operations and Incident Response Manager at Hyundai Capital America. Skills: Incident response, Security operations, Threat detection, SIEM management. Monitor security events. Analyze security events", "createdAt" : "2026-06-14T08:13:57.992", "lastUpdated" : "2026-06-15T08:40:47.148", "ingestTimestamp" : "2026-06-14T08:13:57.992", "mongoId" : "694ae6ce70f0b99d589b2804", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 155000, "salaryAnnualMax" : 210000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Security monitoring", "Threat detection", "Alert triage", "Incident handling", "Forensic investigation", "Playbook development", "Post-incident review", "Tool configuration", "Detection rule tuning", "Automation scripting", "Cloud monitoring", "Vulnerability scanning", "Analytical mindset", "Leadership", "Incident response", "Security operations", "SIEM management", "Threat hunting", "Tool administration", "Rule tuning", "Vulnerability management", "IAM", "DLP", "Application security", "Risk assessment", "Operational performance", "Financial systems", "Cybersecurity", "Cloud environments", "MITRE framework", "Splunk", "NGSIEM", "EDR", "SIEM", "Firewalls", "Vulnerability scanners" ], "skillCount" : 36, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.7777778, "_score" : 460.7084, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "68b706967fc9a711f0f6f106", "title" : "Senior Security Incident Response Engineer", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 143300.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T03:15:22.523", "fingerprint" : "557fc71c43f8425ad3ede7e1896c755a137ec1863b4d9868b798c7018c19161b", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3054814/apply", "externalId" : "9b21d22c-d0c3-4bd6-9b1b-3f576fbb97c6", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Operating system security, Network security, Cryptography, Software security, Malware analysis, Forensics, Security operations, Incident response, Security automation, Cloud computing, AWS", "professionalSkills" : [ "Security engineering", "Threat landscape", "Security automation tooling" ], "hardSkillsList" : [ "Incident response lifecycle", "Security monitoring", "Programmatic automation", "Security issue prevention" ], "softSkillsList" : [ "Creative problem solving", "Critical thinking" ], "hardSkills" : [ { "name" : "Incident response lifecycle", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Programmatic automation", "level" : "intermediate" }, { "name" : "Security issue prevention", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Creative problem solving" }, { "name" : "Critical thinking" } ], "majorSkills" : "Incident response, Security automation, Cloud security", "majorSkillsList" : [ "Incident response", "Security automation", "Cloud security" ], "coreResponsibilities" : "Lead response to security issues, Conduct security monitoring, Conduct response activities, Design and build tooling, Enable programmatic automation, Lead security engineer, Provide security guidance, Provide technical guidance, Influence process and priorities, Improve security outcomes, Provide strategic guidance, Bar raise security issues, Escalate security issues, Identify prevention opportunities, Mentor junior engineers, Develop junior engineers", "teamCollaboration" : "Global team environment; Multiple security teams; Cross-functional teams", "domainKnowledge" : "Operating system security; Network security; Cryptography; Software security; Malware analysis; Forensics; Security operations; Incident response; Security intelligence; Cloud provider security", "domainList" : [ "operating-system-security", "network-security", "cryptography", "software-security", "malware-analysis", "forensics", "security-operations", "incident-response", "security-intelligence", "cloud-provider-security" ], "domainSpecificKnowledge" : [ "Operating system security", "Network security", "Cryptography", "Software security", "Malware analysis", "Forensics", "Security operations", "Incident response", "Security intelligence", "Cloud provider security" ], "toolProficiency" : [ "SOAR platforms", "SIEM platforms" ], "communicationSkills" : "Oral communication; Written communication", "continuousLearning" : "Learning about security domains", "innovationCreativity" : "Creative problem solving", "problemSolvingSkills" : "Creative problem solving; Critical problem solving", "outcomesObjectives" : "Improve security outcomes", "qualificationsBasic" : "BS degree in Computer Science or equivalent, 7+ years systems/network/application security, 5+ years on Security team, 1 year programming/scripting language, Experience leading junior engineers", "qualificationsPreferred" : "Excellent written/verbal communication, 7+ years security response/automation/threat intelligence, Malware analysis experience, Forensics experience, SOAR platforms experience, SIEM platforms experience, Experience with MS Windows, Linux, MacOS, Experience with Amazon Web Services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Amazon Web Services team is looking for a passionate Senior Security Incident Response Engineer who can lead the response to security issues across the largest cloud provider in the world. You must thrive in dynamic/ambiguous situations, and think like both an attacker and defender, while working through the entire incident response lifecycle. You’ll be working in a global team environment where clear and accurate communication and collaboration on security issues is critical. In this role you’ll be conducting security monitoring and response activities for the Amazon internal network. We value broad and deep technical knowledge, specifically in the fields of operating system security, network security, cryptography, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. We don’t expect you to be an expert in all of the domains mentioned above, but we do expect you to be excited to learn about them! You’ll apply your creative and critical problem solving skills to quickly design and build tooling that enables programmatic automation at a massive scale. You must have a passion for engineering solutions to complex security challenges, and recognize and fill gaps in capabilities. Above all, you should be passionate about information security, the threat landscape and security automation and tooling. Key job responsibilities - Work across multiple security teams as a lead security engineer providing security and technical guidance. - Influence your team’s and partners’ process, priorities, and choices by using data to improve security outcomes - Provide technical and strategic guidance to senior leaders and stakeholders through effective oral and written communications - Bar raise security issues and escalate appropriately - Identify opportunities to prevent security issues at scale - Mentor and develop teammates both technically and professionally About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - BS degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent related field. - 7+ years of demonstrated experience with a focus in areas such as systems, network, and/or application security. - 5+ years experience on a Security team, especially experience coordinating responses to security incidents. - 1 year proficiency with one high-level programming or scripting language. - Experience leading and coaching junior security engineers to improve their skills and effectiveness Preferred Qualifications: - Excellent written and verbal communication skills with the ability to adapt messaging to executive, technical, and non-technical audiences. - 7+ years experience working in security response, security automation tooling, or threat intelligence. - Experience with malware analysis, forensics, SOAR, SIEM platforms, and a variety of Operating Systems (MS Windows, Linux, MacOS) - Experience with Amazon Web Services. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Senior Security Incident Response Engineer at Amazon.com Services LLC. Skills: Incident response, Security automation, Cloud security. Lead response to security issues. Conduct security monitoring", "postedDate" : "2026-06-13T10:52:46.897", "createdAt" : "2026-06-13T10:52:46.897", "lastUpdated" : "2026-06-15T03:15:22.523", "ingestTimestamp" : "2026-06-13T10:52:46.897", "mongoId" : "68b706967fc9a711f0f6f106", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3054814/apply", "salaryAnnualMin" : 143300, "salaryAnnualMax" : 247600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Incident response lifecycle", "Security monitoring", "Programmatic automation", "Security issue prevention", "Creative problem solving", "Critical thinking", "Incident response", "Security automation", "Cloud security", "Security engineering", "Threat landscape", "Security automation tooling", "Operating system security", "Network security", "Cryptography", "Software security", "Malware analysis", "Forensics", "Security operations", "Security intelligence", "Cloud provider security", "SOAR platforms", "SIEM platforms" ], "skillCount" : 23, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 453.38422, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Computing" }, { "id" : "6a3089aaf292fd229c094821", "title" : "[8NW] Senior SecOps Incident Response Automation Engineer", "company" : "Software Mind", "industry" : "Information Technology And Services", "salary" : { "min" : 3.5E7, "max" : 5.0E7, "currency" : "CRC", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior SecOps Incident Response Automation Engineer in San José, Costa Rica, adjusted for the FinTech industry and senior experience level." }, "location" : "San José, San José Province, CR", "locations" : [ "San José", "San José Province", "CR" ], "timestamp" : "2026-06-16T10:11:45.575", "fingerprint" : "65df1f71ef24fcafefd9c420b9edd4eb5708b68d7f9ce438053fd226a38910ba", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/SoftwareMind/744000132277150--8nw-senior-secops-incident-response-automation-engineer-", "externalId" : "744000132277150", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San José", "state" : "San José Province", "country" : "Costa Rica", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "9.9327707,-84.0796144" } ], "locationText" : "San José, San José Province, Costa Rica", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SOAR, SIEM, APIs, Python, Panther SIEM", "professionalSkills" : [ "Automation development", "Incident response", "Data retrieval", "Data manipulation", "Data reporting", "Data management", "Data presentation" ], "hardSkillsList" : [ "SOAR automation", "Incident response workflows", "API integrations", "Scripting for automation" ], "softSkillsList" : [ "Negotiation" ], "hardSkills" : [ { "name" : "SOAR automation", "level" : "intermediate" }, { "name" : "Incident response workflows", "level" : "intermediate" }, { "name" : "API integrations", "level" : "intermediate" }, { "name" : "Scripting for automation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Negotiation" } ], "majorSkills" : "Incident Response Automation, SOAR Platform Development, Security Operations", "majorSkillsList" : [ "Incident Response Automation", "SOAR Platform Development", "Security Operations" ], "coreResponsibilities" : "Build SOAR automated response platform, Maintain SOAR automated response platform, Support AI-enabled response, Route escalations to personnel, Build automated SOC response tools, Build automation programs, Build incident response workflows, Perform Security team tasks, Support on-call response team, Respond to security incidents", "teamCollaboration" : "Technical stakeholders; Non-technical stakeholders", "domainKnowledge" : "Fintech industry; Regulated industry environment; SOC response; SIEM; SOAR; APIs; AI/LLM response automation; DLP design; DLP tuning", "domainList" : [ "fintech-industry", "regulated-industry-environment", "soc-response", "siem", "soar", "apis", "ai-llm-response-automation", "dlp-design", "dlp-tuning" ], "domainSpecificKnowledge" : [ "Fintech industry", "Regulated industry environment", "SOC response", "SIEM", "SOAR", "APIs", "AI/LLM response automation", "DLP design", "DLP tuning" ], "toolProficiency" : [ "Torq", "Tines", "Google Sheets", "Excel" ], "communicationSkills" : "English fluency; Effective communication", "continuousLearning" : "Desire to learn AI/LLM", "problemSolvingSkills" : "Identify problems; Assess problems; Tackle problems", "specialRequirements" : "On-call response team support, Occasional off-hours support", "qualificationsBasic" : "Excellent English fluency/proficiency, SOC response experience, Experience in a fintech industry, Experience in a highly regulated industry, Experience working in a lean team, Experience working in a fast-paced technical environment, Experience designing SIEM findings, Experience implementing SIEM findings, Experience tuning SIEM findings, Experience designing SOAR findings, Experience implementing SOAR findings, Experience tuning SOAR findings, Experience configuring advanced automations, Experience with APIs, Understanding of APIs, API integrations experience, Ability to set up API connections, Using APIs to access/retrieve data, Experience with scripting for automation, Experience in data management, Experience in data manipulation, Experience in data presentation", "qualificationsPreferred" : "Python for scripting experience, AI/LLM response automation experience, DLP design experience, DLP tuning experience, Panther SIEM experience", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "We are Software Mind, an awesome team of engineers who are ready to ramp up any top-notch company’s projects! Our aim? To always be one step ahead. Become part of a multicultural company in constant growth with an excellent work environment certified by Great Place To Work! Overview Software Mind is seeking qualified candidates located in Latam to fill the role of Sr. SecOps Incident Response Automation Engineer. In addition to a competitive salary rate and a positive work environment, committed to delivering high-quality technology solutions, we also offer: * Flexible schedules * An authentic work-life balance * Payment in US Dollars About the role: Our client develops digital experiences and platforms that provide consumers with information about financial services and financial products, to help them make the best financial decisions for their unique needs. We are looking for a Senior SecOps Incident Response Automation Engineer to support the client's new, greenfield projects, and build an incident response automation program using Torq (or similar SOAR tools), manage escalations, build incident response workflows, write playbooks, and automate a wide range of manual processes. The role is part of a new team and program being built from the ground up. The role provides plenty of autonomy, and the client is looking for someone who is a high driver who is biased to take action and able to identify, assess, and tackle problems that are sometimes ambiguous. They are looking for a proactive individual with great communication skills who enjoys taking on ownership of tasks and challenges. ## Qualifications Role Responsibilities: * Help build and maintain a new SOAR automated response platform using Torq, that supports AI-enabled response and escalations to be routed to on-call personnel at appropriate times. * Build automated SOC response tools, automation programs, incident response workflows, etc. * Perform various Security team tasks as needed. * Be available to support the on-call response team, occasionally on an “as needed” basis during off-hours to respond to potential security incidents. Required Skills & Qualities: * Communication and Negotiation - excellent English fluency/proficiency is required, and candidates must be able to communicate effectively to technical and non-technical stakeholders. * SOC response experience (ideally with experience in a fintech industry or another highly regulated industry environment) * Experience working as part of a lean team in a fast-paced technical environment or organization. * Experience designing, implementing, and tuning SIEM and SOAR findings, including experience configuring advanced automations with cutting-edge tools like Torq, Tines, or similar. * Experience in data retrieval, data manipulation, and data reporting, including the following skills: * Experience working with APIs (at a minimum, having a strong understanding of APIs, API integrations, the ability to set up API connections, and using APIs to access/retrieve data). * Experience with scripting for automation * Experience in data management, manipulation, and presentation (using data in Google Sheets, Excel, and databases). Control work areas: * 90% SOC/SIEM/SOAR automation development * 5% Join the on-call response team * 5% Other ## Additional Information Nice to have: * Experience using Python for scripting * Experience with AI/LLM response automation within the area of SOC response, or at minimum, a desire and willingness to learn * Experience with DLP design and tuning * Experience with Panther SIEM", "summaryDescription" : "[8NW] Senior SecOps Incident Response Automation Engineer at Software Mind. Skills: Incident Response Automation, SOAR Platform Development, Security Operations. Build SOAR automated response platform. Maintain SOAR automated response platform", "postedDate" : "2026-06-15T19:59:33.000", "createdAt" : "2026-06-16T01:45:15.499", "lastUpdated" : "2026-06-16T10:11:45.575", "ingestTimestamp" : "2026-06-16T01:45:15.499", "mongoId" : "6a3089aaf292fd229c094821", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "SOAR automation", "Incident response workflows", "API integrations", "Scripting for automation", "Negotiation", "Incident Response Automation", "SOAR Platform Development", "Security Operations", "Automation development", "Incident response", "Data retrieval", "Data manipulation", "Data reporting", "Data management", "Data presentation", "Fintech industry", "Regulated industry environment", "SOC response", "SIEM", "SOAR", "APIs", "AI/LLM response automation", "DLP design", "DLP tuning", "Torq", "Tines", "Google Sheets", "Excel" ], "skillCount" : 28, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 448.80508, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c8c8374d8ee00a0975b5a", "title" : "Incident Response Lead", "company" : "WHOOP", "industry" : "Information Security", "salary" : { "min" : 130000.0, "max" : 170000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Boston, MA", "locations" : [ "Boston, MA" ], "certifications" : [ "GCIH", "GCFA", "CISSP" ], "timestamp" : "2026-06-15T12:05:20.732", "fingerprint" : "bddddbefd297cde0f29d2286596a2e145615d870cd25df0e237c4a59536e642a", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/whoop/90e465bb-f1fb-4763-892e-320780db4f6f/application", "externalId" : "90e465bb-f1fb-4763-892e-320780db4f6f", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Boston", "state" : "Massachusetts", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "42.3588336,-71.0578303" } ], "locationText" : "Boston, Massachusetts, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 7, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "SIEM, EDR, Cloud security monitoring, Digital forensics, Threat detection", "professionalSkills" : [ "Incident command", "Root cause analysis", "Breach impact assessment", "Regulatory notification" ], "hardSkillsList" : [ "Incident response", "Digital forensics", "Threat detection", "SOC operations", "Host investigation", "Cloud investigation", "Log investigation" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Digital forensics", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "SOC operations", "level" : "intermediate" }, { "name" : "Host investigation", "level" : "intermediate" }, { "name" : "Cloud investigation", "level" : "intermediate" }, { "name" : "Log investigation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Digital forensics, Threat detection, SOC operations", "majorSkillsList" : [ "Incident response", "Digital forensics", "Threat detection", "SOC operations" ], "coreResponsibilities" : "Lead incident response activities, Serve as incident commander, Partner with SOC, Validate alerts, Guide investigations, Drive containment, Drive eradication, Conduct host investigations, Conduct cloud investigations, Conduct log investigations, Coordinate with forensic firms, Maintain incident response playbooks, Improve escalation procedures, Improve communication workflows, Lead post-incident reviews, Lead root cause analysis, Define remediation actions, Track remediation actions, Develop tabletop exercises, Execute incident simulations, Support breach impact assessments, Support regulatory notification, Improve detection capabilities, Improve response capabilities, Own incident metrics, Own incident reporting, Report response times, Report trends, Report risk reduction", "teamCollaboration" : "24x7 SOC provider; Cross-functional stakeholders; Security, IT, GRC, Legal", "projectManagementSkills" : [ "Remediation tracking" ], "domainKnowledge" : "Cloud-native environments; MITRE ATT&CK; GDPR; HIPAA; PCI", "domainList" : [ "cloud-native-environments", "mitre-att-ck", "gdpr", "hipaa", "pci" ], "domainSpecificKnowledge" : [ "Cloud-native environments", "MITRE ATT&CK", "GDPR", "HIPAA", "PCI" ], "toolProficiency" : [ "SIEM platforms", "EDR tools", "Cloud monitoring" ], "communicationSkills" : "Cross-functional coordination", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "On-call escalation rotation", "outcomesObjectives" : "Systemic risk reduction", "qualificationsBasic" : "7+ years incident response, Lead incident investigations, Host, cloud, log investigations, SIEM platforms expertise, EDR tools expertise, Cloud security monitoring expertise, Work with external SOC, Attack frameworks understanding, GDPR, HIPAA, PCI support, Excellent communication skills, Bachelor's degree or certifications", "qualificationsPreferred" : "GCIH certification, GCFA certification, CISSP certification", "workSiteFlexibility" : "Onsite", "rawDescription" : "At WHOOP, we’re on a mission to unlock human performance and healthspan. Our wearable technology provides personalized insights that help millions of members better understand their bodies and make smarter decisions about training, recovery, and lifestyle. We are seeking a Incident Response Lead to drive security incident response across the enterprise. In this role, you will serve as the primary internal escalation point and hands-on responder for security incidents, partnering closely with WHOOP’s 24x7 SOC provider and cross-functional stakeholders to investigate, contain, and remediate threats. This is a highly technical individual contributor role with significant ownership and visibility across Security, IT, GRC, and Legal. RESPONSIBILITIES: - - Lead hands-on incident response activities, serving as the primary internal escalation point for security events - Serve as the central incident commander across Security, IT, GRC, and Legal during active incidents - Partner with the SOC to validate alerts, guide investigations, and drive containment and eradication efforts - Conduct host, cloud, and log-based investigations, and coordinate with external forensic firms when needed - Maintain and continuously improve incident response playbooks, escalation procedures, and communication workflows - Lead post-incident reviews and root cause analysis, ensuring remediation actions are clearly defined and tracked - Develop and execute tabletop exercises and incident simulations to test and strengthen response readiness - Partner with GRC and Legal to support breach impact assessments and regulatory notification processes - Drive continuous improvement of detection and response capabilities across SIEM, EDR, cloud monitoring, and identity systems - Own incident metrics and reporting, including response times, trends, and systemic risk reduction initiatives - Participate in an on-call escalation rotation to provide after-hours incident leadership when required QUALIFICATIONS: - - 7+ years of experience in incident response, digital forensics, threat detection, or SOC operations - Proven experience leading incident investigations in complex, cloud-native environments - Strong experience conducting host, cloud, and log-based investigations - Hands-on expertise with SIEM platforms, EDR tools, and cloud security monitoring - Experience working with external SOC or MDR providers - Strong understanding of attack frameworks (MITRE ATT&CK) and their application to detection and response - Experience supporting breach response obligations under GDPR, HIPAA, PCI, or similar regulatory frameworks - Excellent communication skills with the ability to coordinate cross-functional stakeholders under pressure - Bachelor’s degree or relevant certifications (GCIH, GCFA, CISSP, or equivalent) This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office. Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply. WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values. At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success. The U.S. base salary range for this full-time position is $130,000 - $170,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training. In addition to the base salary, the successful candidate will also receive benefits and a generous equity package. These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements. ", "summaryDescription" : "Incident Response Lead at WHOOP. Skills: Incident response, Digital forensics, Threat detection, SOC operations. Lead incident response activities. Serve as incident commander", "createdAt" : "2026-06-14T04:00:46.619", "lastUpdated" : "2026-06-15T12:05:20.732", "ingestTimestamp" : "2026-06-14T04:00:46.619", "mongoId" : "6a2c8c8374d8ee00a0975b5a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 130000, "salaryAnnualMax" : 170000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Incident response", "Digital forensics", "Threat detection", "SOC operations", "Host investigation", "Cloud investigation", "Log investigation", "Leadership", "Incident command", "Root cause analysis", "Breach impact assessment", "Regulatory notification", "Remediation tracking", "Cloud-native environments", "MITRE ATT&CK", "GDPR", "HIPAA", "PCI", "GCIH", "GCFA", "CISSP", "SIEM platforms", "EDR tools", "Cloud monitoring" ], "skillCount" : 24, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.8888889, "_score" : 448.4703, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a30704bf292fd229cff307e", "title" : "Senior Security Operations Analyst", "company" : "NuHarbor Security", "industry" : "Cybersecurity", "salary" : { "min" : 110000.0, "max" : 135000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Remote", "locations" : [ "Remote", "Vermont", "United States" ], "certifications" : [ "Relevant industry certifications" ], "timestamp" : "2026-06-16T11:21:20.145", "fingerprint" : "3beb472f9b9441ed873cd3e0d296125167bd0a272c7086b41fed4fc363a7dc2c", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.nuharborsecurity.com/careers?gh_jid=7988994", "externalId" : "7988994", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SIEM, EDR, Identity telemetry, CrowdStrike, Microsoft Defender, Microsoft Sentinel, Splunk Enterprise Security, Python, PowerShell", "professionalSkills" : [ "Root cause analysis", "Attack chain reconstruction", "Client-ready documentation", "Technical shift ownership", "Investigation methodology", "Documentation standards", "Client communication", "Automation playbooks", "Alert tuning", "Noise identification", "Alert fidelity", "Detection engineering", "Cybersecurity program enhancement" ], "hardSkillsList" : [ "Security event triaging", "Threat hunting", "Scripting" ], "softSkillsList" : [ "Mentorship" ], "hardSkills" : [ { "name" : "Security event triaging", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentorship" } ], "majorSkills" : "Security Operations, Incident Response, Threat Analysis", "majorSkillsList" : [ "Security Operations", "Incident Response", "Threat Analysis" ], "coreResponsibilities" : "Own investigations end-to-end, Conduct root cause analysis, Reconstruct attack chains, Produce client-ready written narrative, Correlate across SIEM, EDR, and identity telemetry, Identify what alerts missed, Self-assign to difficult work, Deliver work reflecting technical excellence, Support Security Analyst team, Triage alerts, Classify alerts, Dispose alerts, Escalate alerts within SLA, Identify security gaps, Communicate security mitigations, Communicate proactively with Manager, Facilitate client-facing meetings, Produce ticket documentation, Include evidence trail in tickets, Include analyst reasoning in tickets, Include disposition rationale in tickets, Include plain-language client summary, Remain current on emerging threats, Remain current on CVEs, Remain current on attacker techniques, Support onboarding of new clients, Train junior analysts, Mentor junior analysts, Support junior analysts, Coach on investigation methodology, Coach on documentation standards, Coach on client communication, Review escalations from junior analysts, Ensure investigative completeness, Ensure documentation quality, Develop automation playbooks, Refine automation playbooks, Contribute tuning feedback, Contribute noise identification, Contribute alert fidelity assessments, Develop recommendations for client cybersecurity program, Develop enhancements for client cybersecurity program, Coordinate with NuHarbor clients, Coordinate with internal stakeholders during incident response, Coordinate with internal stakeholders after incident response", "teamCollaboration" : "Security Operations team; Detection Engineering program; Internal stakeholders", "projectManagementSkills" : [ "Incident response management" ], "domainKnowledge" : "Cybersecurity services; SOC operations; MSSP environment; Endpoint Detection and Response", "domainList" : [ "cybersecurity-services", "soc-operations", "mssp-environment", "endpoint-detection-and-response" ], "domainSpecificKnowledge" : [ "Cybersecurity services", "SOC operations", "MSSP environment", "Endpoint Detection and Response" ], "toolProficiency" : [ "SIEM", "EDR", "SOAR" ], "communicationSkills" : "Client-ready documentation; Client-facing meetings; Incident briefings; Escalation reviews; Threat landscape discussions; Plain-language client summary", "documentationSkills" : "Client-ready documentation; Runbooks; Support procedures; Ticket documentation", "continuousLearning" : "Remain current on emerging threats; Remain current on CVEs; Remain current on attacker techniques", "innovationCreativity" : "Develop automation playbooks; Refine automation playbooks", "problemSolvingSkills" : "Deep investigations; Root cause analysis; Attack chain reconstruction; Identify what alerts missed; Self-assign to complex problems; Troubleshooting", "specialRequirements" : "Work Sunday - Thursday, 8:30am - 5:00pm, Authorized to work within the United States", "outcomesObjectives" : "Improve cybersecurity of clients; Deliver work that reflects technical excellence; Deliver work that reflects client outcomes", "qualificationsBasic" : "Bachelor's Degree and five (5) years of experience in cybersecurity, Relevant industry certifications, Demonstrated experience with SOC operations, Executing security event triaging and tuning, Demonstrated experience writing runbooks and support procedures, Demonstrated experience executing Monitoring and Response, Containment, eradication, and recovery experience, Demonstrated experience with threat hunting, Hands on experience with at least two EDR/SOAR solutions, Demonstrated experience with scripting in Python, PowerShell, or equivalent, Excellent written and verbal communication skills, Previous experience in technical support or security-focused role, Authorized to work within the United States", "qualificationsPreferred" : "Bachelor's Degree and seven (7) or more years of experience in cybersecurity, Progressive cybersecurity disciplines experience", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "The Company Every day, NuHarbor Security improves the cybersecurity of our clients by making it stronger and easier to understand. Our comprehensive suite of security services, from strategic advising to 24-hour monitoring and management, provide an organizational view of security that is focused on results and recommendations that are valuable for both business and technical leaders. We’re growing quickly because our clients, and the general market, are looking for these outcomes and for the data it gives them to explain, promote, and justify, their security investment and mission. The Role The Senior Security Analyst is a senior individual contributor within the NuHarbor Managed Services Security Operations team. This role serves as the technical anchor on shift, conducting deep investigations, producing client-ready documentation, and actively raising the quality of the team's work through mentorship and technical shift ownership. Senior Security Analysts are expected to operate with minimal direction, self-assign to the most complex open problems, and deliver work that reflects NuHarbor's commitment to technical excellence and client outcomes. . What you’ll do Live by the NuHarbor corporate values: Help Clients Win, Always Improve, Protect the House. Own investigations end-to-end from initial alert through root cause analysis, attack chain reconstruction, and client-ready written narrative. Correlate across SIEM, EDR, and identity telemetry to identify what alerts missed, not just what they flagged. Self-assign to difficult, ambiguous, or high-priority work without requiring direction, including work that falls outside defined lanes. Support the Security Analyst team with alert triage, classification, disposition, and escalation within SLA requirements. Identify and communicate security gaps and mitigations in the context of client environments. Communicate proactively with the Security Operations Manager on active threats, escalations, and items requiring leadership visibility. Facilitate client-facing meetings including incident briefings, escalation reviews, and threat landscape discussions. Produce ticket documentation that requires no editorial cleanup, every ticket must include an evidence trail, analyst reasoning, disposition rationale, and a plain-language client summary Remain current on emerging threats, CVEs, and attacker techniques relevant to client environments. Support the onboarding of new clients onto NuHarbor Security Services and Platforms. Train, mentor, and support junior analysts, including structured coaching on investigation methodology, documentation standards, and client communication. Review escalations to clients from junior analysts prior to client delivery, ensuring investigative completeness and documentation quality. Develop and refine automation playbooks to reduce alert volume and improve analyst workflow. Contribute tuning feedback, noise identification, and alert fidelity assessments to the Detection Engineering program, in coordination with DE leadership. Develop recommendations and enhancements to mature a client’s cybersecurity program. Coordinate with NuHarbor clients and internal stakeholders during and after incident response activities. Your foundation. The requirements for this role: Bachelor’s Degree and five (5) years of experience. Experience should be in a cybersecurity field and should include relevant industry certifications. In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required. Demonstrated experience with SOC operations, executing security event triaging and tuning. Demonstrated experience writing runbooks and support procedures. Demonstrated experience executing Monitoring and Response across multiple phases, containment, eradication, and recovery, in a SOC or MSSP environment. Demonstrated experience with security event triaging and threat hunting executed through both a SIEM and EDR toolset. Hands on experience with at least two of the following Endpoint Detection and Response (EDR) and Security Orchestration Automation and Response solutions. CrowdStrike Microsoft Defender Microsoft Sentinel Splunk Enterprise Security Demonstrated experience with scripting in at least one language (Python, PowerShell, or equivalent) in a manner that supports automation solutions. Excellent written and verbal communication skills. Previous experience in technical support or security-focused role. Willing and able to work Sunday - Thursday, 8:30am - 5:00pm. Must be authorized to work within the United States. Additional capabilities that will differentiate you for this role: Bachelor’s Degree and seven (7) or more years of experience in cybersecurity with progressive responsibility in SOC, MDR, or MSSP environment. Holds at least two relevant industry certifications (GCFA, GCIH, CEH, CISSP, etc.) Demonstrated experience communicating and presenting to executive level client stakeholders. Technical writing and reporting experience. Experience executing initial triaging and response through a SOAR platform. Experience with multiple operating systems (Linux, MacOS, Windows), their command lines, processes, and file systems. Experience with memory and storage forensics. Experience with static and dynamic malware analysis. Demonstrated ability to translate complex technical findings into clear, business-relevant narratives for non-technical audiences. Experience with data science techniques (clustering, anomaly detection, data normalization, etc. General systems administrator experience. Fluency with the MITRE ATT&CK framework as an active investigation and communication tool. Experience working in multiple cybersecurity disciplines (i. e. Penetration Testing, Threat, Information Assurance, Engineering, etc.) The Rewards What you can expect: The engagement and support of company leadership who recognize the challenge of marketing a complex cybersecurity service in a chaotic market. An organization that recognizes and rewards employee commitment and contribution to our customers’ satisfaction and success Growth in your career and capabilities as you help to chart a path to improving customer interactivity and service adoption. A collaborative and driven working environment in a rapidly growing company and market A fun and social working environment where you are encouraged to be your true self. You can also expect competitive salary and benefits, including paid time to give back in your community and generous PTO. The salary for this role is targeted in the 110K - 135K, based on Burlington, VT salaries. Geographical location will be taken into consideration in salary offer. We are purpose driven. We, as an organization, above anything else protect the house first and then help our customers win. If this sounds like the kind of organization you’d like to be a part of, we‘d like to hear from you. AAP/EEO Statement The Equal Employment Opportunity Policy of NuHarbor Security is to provide a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status or disability. NuHarbor Security hires and promotes individuals solely based on their qualifications for the job to be filled. NuHarbor Security believes that employees should be provided with a working environment which enables each associate to be productive and to work to the best of his or her ability. We do not condone or tolerate an atmosphere of intimidation or harassment based on race, color, religion, national origin, gender, sexual orientation, age, marital status, or disability. We expect and require the cooperation of all employees in maintaining a discrimination and harassment-free atmosphere.", "summaryDescription" : "Senior Security Operations Analyst at NuHarbor Security. Skills: Security Operations, Incident Response, Threat Analysis. Own investigations end-to-end. Conduct root cause analysis", "postedDate" : "2026-06-16T01:19:48.332", "createdAt" : "2026-06-16T01:19:48.332", "lastUpdated" : "2026-06-16T11:21:20.145", "ingestTimestamp" : "2026-06-16T01:19:48.332", "mongoId" : "6a30704bf292fd229cff307e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 110000, "salaryAnnualMax" : 135000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security event triaging", "Threat hunting", "Scripting", "Mentorship", "Security Operations", "Incident Response", "Threat Analysis", "Root cause analysis", "Attack chain reconstruction", "Client-ready documentation", "Technical shift ownership", "Investigation methodology", "Documentation standards", "Client communication", "Automation playbooks", "Alert tuning", "Noise identification", "Alert fidelity", "Detection engineering", "Cybersecurity program enhancement", "Incident response management", "Cybersecurity services", "SOC operations", "MSSP environment", "Endpoint Detection and Response", "Relevant industry certifications", "SIEM", "EDR", "SOAR" ], "skillCount" : 29, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 448.3471, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a30569ff292fd229cf2bd14", "title" : "Client Security Expert/Architect", "company" : "OKX", "industry" : "Cybersecurity", "salary" : { "min" : 600000.0, "max" : 1200000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Client Security Expert/Architect in China Mainland, adjusted for the technology industry and company size." }, "location" : "China Mainland_INTERNAL", "locations" : [ "China Mainland_INTERNAL" ], "timestamp" : "2026-06-16T07:37:09.887", "fingerprint" : "4784bb4c25350667ac327c944aa8f57f0ce8cdb3fb82b7cd8aa5f977634e9847", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/okx/jobs/7773152003", "externalId" : "7773152003", "industryFunction" : { }, "structuredLocations" : [ { "country" : "China", "continent" : "as", "workMode" : "onsite" } ], "locationText" : "China", "minimumEducation" : "Bachelor's", "technicalSkills" : "Android, IOS, AI Agents, Backend development", "professionalSkills" : [ "Architecture design", "System design", "Data pipeline design", "Security strategy" ], "hardSkillsList" : [ "Reverse engineering", "Vulnerability discovery", "Attack reconstruction", "Log analysis", "Data analysis", "Device fingerprinting", "Environment detection", "Behavioral risk control", "Endpoint data processing" ], "hardSkills" : [ { "name" : "Reverse engineering", "level" : "intermediate" }, { "name" : "Vulnerability discovery", "level" : "intermediate" }, { "name" : "Attack reconstruction", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Device fingerprinting", "level" : "intermediate" }, { "name" : "Environment detection", "level" : "intermediate" }, { "name" : "Behavioral risk control", "level" : "intermediate" }, { "name" : "Endpoint data processing", "level" : "intermediate" } ], "majorSkills" : "Client-side security, AI Agent integration, Backend architecture, Security data pipeline", "majorSkillsList" : [ "Client-side security", "AI Agent integration", "Backend architecture", "Security data pipeline" ], "coreResponsibilities" : "Identify client-side security risks, Propose security solutions, Drive security implementation, Lead offensive exercises, Lead defensive exercises, Drive remediation of risk issues, Analyze attack techniques, Reconstruct attack mechanisms, Produce countermeasure plans, Design defense solutions, Build defense solutions, Own architecture design, Design backend data pipeline, Optimize data pipeline, Design intelligent security strategy, Design automated countermeasure architecture", "domainKnowledge" : "Client security; Android system; iOS system; Cheating techniques; Fraud techniques; Web3; Blockchain; Browser-side security; Distributed system design; High-concurrency system; High-availability system; Endpoint data; AI Agent principles; Risk control system; Security data platform; Threat intelligence system", "domainList" : [ "client-security", "android-system", "ios-system", "cheating-techniques", "fraud-techniques", "web3", "blockchain", "browser-side-security", "distributed-system-design", "high-concurrency-system", "high-availability-system", "endpoint-data", "ai-agent-principles", "risk-control-system", "security-data-platform", "threat-intelligence-system" ], "domainSpecificKnowledge" : [ "Client security", "Android system", "iOS system", "Cheating techniques", "Fraud techniques", "Web3", "Blockchain", "Browser-side security", "Distributed system design", "High-concurrency system", "High-availability system", "Endpoint data", "AI Agent principles", "Risk control system", "Security data platform", "Threat intelligence system" ], "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Improve defensive effectiveness; Improve mitigation efficiency; Improve strategy iteration speed; Improve incident response speed", "qualificationsBasic" : "Bachelor's degree or above, 3+ years of experience in backend development or architecture design, Familiar with low-level Android and iOS system architecture, Familiar with security mechanisms, Familiar with reverse engineering, Familiar with typical cheating/fraud techniques, Proficient in leveraging AI Agents for security workflows, Hands-on experience integrating AI tools, Backend architecture skills, Expertise in high-concurrency, high-availability distributed system design, Familiarity with the client security domain, Ability to understand endpoint-collected data, Familiar with AI Agent technical principles, Familiar with AI Agent application paradigms, Practical experience integrating AI capabilities", "qualificationsPreferred" : "Client security experience in Web3/blockchain scenarios, Familiarity with browser-side security, Risk control system architecture, Security backend experience in Web3/blockchain scenarios, Architecture experience in security data platforms or threat intelligence systems", "workSiteFlexibility" : "Onsite", "rawDescription" : "Client Security Expert Job Description: Identify client-side security risks, propose solutions, and drive their implementation. Lead offensive and defensive exercises on mobile clients, and drive remediation of business-related risk issues. Analyze attack techniques used by black/gray-market actors, reconstruct attack mechanisms and details, and produce countermeasure plans. Design and build systematic client-side defense solutions to improve defensive effectiveness and mitigation efficiency. Requirements: Bachelor's degree or above in Computer Science or a related field. Familiar with low-level Android and iOS system architecture, security mechanisms, and reverse engineering. Familiar with typical cheating/fraud techniques used by black/gray-market actors. Proficient in leveraging AI Agents for security workflows, including reverse engineering, vulnerability discovery, attack reconstruction, and log/data analysis, with hands-on experience integrating AI tools into daily security operations. Candidates with the following experience will be preferred: Client security experience in Web3/blockchain scenarios. Familiarity with browser-side security. Client Security Architect Job Description: Own the overall architecture design for client-side security, ensuring high availability, high performance, and scalability of the system. Design and optimize the backend data pipeline for security data collection, processing, and analysis, supporting various business scenarios. Incorporate AI Agent capabilities to design intelligent security strategy operations and automated countermeasure architecture, improving strategy iteration speed and incident response speed. Requirements: Bachelor's degree or above in Computer Science or a related field; 3+ years of experience in backend development or architecture design. Strong backend architecture skills, with expertise in high-concurrency, high-availability distributed system design. Familiarity with the client security domain (e.g., device fingerprinting, environment detection, behavioral risk control), with the ability to understand endpoint-collected data and design corresponding backend processing solutions. Familiar with AI Agent technical principles and application paradigms, with practical experience integrating AI capabilities into security architecture design. Candidates with the following experience will be preferred: Risk control system architecture (e.g., rule engines). Security backend experience in Web3/blockchain scenarios. Architecture experience in security data platforms or threat intelligence systems. Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX's Candidate Privacy Notice.", "summaryDescription" : "Client Security Expert/Architect at OKX. Skills: Client-side security, AI Agent integration, Backend architecture, Security data pipeline. Identify client-side security risks. Propose security solutions", "postedDate" : "2026-06-15T23:18:59.154", "createdAt" : "2026-06-15T23:18:59.154", "lastUpdated" : "2026-06-16T07:37:09.887", "ingestTimestamp" : "2026-06-15T23:18:59.154", "mongoId" : "6a30569ff292fd229cf2bd14", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Reverse engineering", "Vulnerability discovery", "Attack reconstruction", "Log analysis", "Data analysis", "Device fingerprinting", "Environment detection", "Behavioral risk control", "Endpoint data processing", "Client-side security", "AI Agent integration", "Backend architecture", "Security data pipeline", "Architecture design", "System design", "Data pipeline design", "Security strategy", "Client security", "Android system", "iOS system", "Cheating techniques", "Fraud techniques", "Web3", "Blockchain", "Browser-side security", "Distributed system design", "High-concurrency system", "High-availability system", "Endpoint data", "AI Agent principles", "Risk control system", "Security data platform", "Threat intelligence system" ], "skillCount" : 33, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 444.67722, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a30512af292fd229cefb6a7", "title" : "Client Security Expert/Architect", "company" : "OKX", "industry" : "Cybersecurity", "salary" : { "min" : 550000.0, "max" : 950000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Client Security Expert/Architect in China Mainland, adjusted for the technology industry and company size." }, "location" : "China Mainland_INTERNAL", "locations" : [ "China Mainland_INTERNAL" ], "timestamp" : "2026-06-16T10:38:28.960", "fingerprint" : "c510b08434bcaf2665e6914c60855a8e2522bf81bde6f2d7cc11af3d444035ac", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/okx/jobs/7773152003", "externalId" : "7773152003", "industryFunction" : { }, "structuredLocations" : [ { "country" : "China", "continent" : "as", "workMode" : "onsite" } ], "locationText" : "China", "minimumEducation" : "Bachelor's", "technicalSkills" : "Android, IOS, AI Agents, Backend development", "professionalSkills" : [ "Architecture design", "System design", "Risk control" ], "hardSkillsList" : [ "Reverse engineering", "Vulnerability discovery", "Attack reconstruction", "Log analysis", "Data analysis", "Device fingerprinting", "Environment detection", "Behavioral risk control" ], "hardSkills" : [ { "name" : "Reverse engineering", "level" : "intermediate" }, { "name" : "Vulnerability discovery", "level" : "intermediate" }, { "name" : "Attack reconstruction", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Device fingerprinting", "level" : "intermediate" }, { "name" : "Environment detection", "level" : "intermediate" }, { "name" : "Behavioral risk control", "level" : "intermediate" } ], "majorSkills" : "Client-side security, AI Agent integration, Backend architecture", "majorSkillsList" : [ "Client-side security", "AI Agent integration", "Backend architecture" ], "coreResponsibilities" : "Identify client-side security risks, Propose security solutions, Drive security implementation, Lead offensive exercises, Lead defensive exercises, Drive remediation of risk issues, Analyze attack techniques, Reconstruct attack mechanisms, Produce countermeasure plans, Design defense solutions, Build defense solutions, Own architecture design, Design backend data pipeline, Optimize data pipeline, Incorporate AI Agent capabilities, Design intelligent security strategy, Automate countermeasure architecture", "domainKnowledge" : "Client security; Web3; Blockchain; Browser-side security; High-concurrency systems; High-availability systems; Distributed systems; AI Agent principles; Security data platforms; Threat intelligence systems", "domainList" : [ "client-security", "web3", "blockchain", "browser-side-security", "high-concurrency-systems", "high-availability-systems", "distributed-systems", "ai-agent-principles", "security-data-platforms", "threat-intelligence-systems" ], "domainSpecificKnowledge" : [ "Client security", "Web3", "Blockchain", "Browser-side security", "High-concurrency systems", "High-availability systems", "Distributed systems", "AI Agent principles", "Security data platforms", "Threat intelligence systems" ], "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Improve defensive effectiveness; Improve mitigation efficiency; Improve strategy iteration speed; Improve incident response speed", "qualificationsBasic" : "3+ years backend development, 3+ years architecture design", "qualificationsPreferred" : "Client security experience, Web3lockchain scenarios, Browser-side security familiarity, Risk control system architecture, Security backend experience, Web3lockchain scenarios, Architecture experience, Security data platforms, Threat intelligence systems", "workSiteFlexibility" : "Onsite", "rawDescription" : "Client Security Expert Job Description: Identify client-side security risks, propose solutions, and drive their implementation. Lead offensive and defensive exercises on mobile clients, and drive remediation of business-related risk issues. Analyze attack techniques used by black/gray-market actors, reconstruct attack mechanisms and details, and produce countermeasure plans. Design and build systematic client-side defense solutions to improve defensive effectiveness and mitigation efficiency. Requirements: Bachelor's degree or above in Computer Science or a related field. Familiar with low-level Android and iOS system architecture, security mechanisms, and reverse engineering. Familiar with typical cheating/fraud techniques used by black/gray-market actors. Proficient in leveraging AI Agents for security workflows, including reverse engineering, vulnerability discovery, attack reconstruction, and log/data analysis, with hands-on experience integrating AI tools into daily security operations. Candidates with the following experience will be preferred: Client security experience in Web3/blockchain scenarios. Familiarity with browser-side security. Client Security Architect Job Description: Own the overall architecture design for client-side security, ensuring high availability, high performance, and scalability of the system. Design and optimize the backend data pipeline for security data collection, processing, and analysis, supporting various business scenarios. Incorporate AI Agent capabilities to design intelligent security strategy operations and automated countermeasure architecture, improving strategy iteration speed and incident response speed. Requirements: Bachelor's degree or above in Computer Science or a related field; 3+ years of experience in backend development or architecture design. Strong backend architecture skills, with expertise in high-concurrency, high-availability distributed system design. Familiarity with the client security domain (e.g., device fingerprinting, environment detection, behavioral risk control), with the ability to understand endpoint-collected data and design corresponding backend processing solutions. Familiar with AI Agent technical principles and application paradigms, with practical experience integrating AI capabilities into security architecture design. Candidates with the following experience will be preferred: Risk control system architecture (e.g., rule engines). Security backend experience in Web3/blockchain scenarios. Architecture experience in security data platforms or threat intelligence systems. Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX's Candidate Privacy Notice.", "summaryDescription" : "Client Security Expert/Architect at OKX. Skills: Client-side security, AI Agent integration, Backend architecture. Identify client-side security risks. Propose security solutions", "postedDate" : "2026-06-15T23:15:51.835", "createdAt" : "2026-06-15T23:15:51.835", "lastUpdated" : "2026-06-16T10:38:28.960", "ingestTimestamp" : "2026-06-15T23:15:51.835", "mongoId" : "6a30512af292fd229cefb6a7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Reverse engineering", "Vulnerability discovery", "Attack reconstruction", "Log analysis", "Data analysis", "Device fingerprinting", "Environment detection", "Behavioral risk control", "Client-side security", "AI Agent integration", "Backend architecture", "Architecture design", "System design", "Risk control", "Client security", "Web3", "Blockchain", "Browser-side security", "High-concurrency systems", "High-availability systems", "Distributed systems", "AI Agent principles", "Security data platforms", "Threat intelligence systems" ], "skillCount" : 24, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 440.3993, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3056c3f292fd229cf2e4e2", "title" : "Senior Security Architect (m/f/d)", "company" : "Isar Aerospace SE", "industry" : "Technology", "salary" : { "min" : 950000.0, "max" : 1350000.0, "currency" : "NOK", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for Senior Security Architect in Andenes, Norway, adjusted for senior experience level and the aerospace industry." }, "location" : "Andenes, Nordland, Norway", "locations" : [ "Andenes", "Nordland", "Norway" ], "certifications" : [ "CISSP", "CISM", "OSCP" ], "timestamp" : "2026-06-16T08:01:17.028", "fingerprint" : "d4afaa4d4930740801d776a2213f0ec123b825e62f7fee8b28ff2ba1da3c8cde", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/isaraerospace/jobs/4897729101", "externalId" : "4897729101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Andenes", "state" : "Nordland", "country" : "Norway", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "69.3122989,16.1057085" } ], "locationText" : "Andenes, Nordland, Norway", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Security architecture, Network security, Application security, Cloud security, Identity management, Endpoint security, Adversary emulation, Attack path analysis, Detection engineering, Incident response, Vulnerability management, Threat intelligence, ISO 27001, NIST", "professionalSkills" : [ "Security posture", "Risk assessment", "Vulnerability assessment", "Threat analysis", "Use case development", "Service reviews", "Incident handling", "Risk prioritization", "Gap closure", "Threat tracking", "Control validation", "Documentation production", "Standards execution" ], "hardSkillsList" : [ "Penetration testing", "Security design", "Security operations", "Incident command" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Security design", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Incident command", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Security architecture, Offensive security, Detection engineering, Incident response", "majorSkillsList" : [ "Security architecture", "Offensive security", "Detection engineering", "Incident response" ], "coreResponsibilities" : "Design security architecture, Implement security architecture, Build resilience, Run adversary emulation, Run attack path analysis, Prove controls fire, Prove detections fire, Convert findings into fixes, Convert findings into detections, Convert findings into hardened designs, Develop detection capability, Operationalize detection capability, Tune monitoring, Keep coverage honest, Own technical relationship, Set detection backlog, Set use-case backlog, Hold MSSP to standards, Run MSSP service reviews, Develop incident response plans, Maintain incident response plans, Lead incident handling, Run risk assessments, Run vulnerability assessments, Prioritize gaps, Close gaps, Track emerging threats, Track emerging tactics, Use threat intelligence, Anticipate adversary targeting, Harden systems, Partner with IT teams, Partner with engineering teams, Implement controls, Validate controls, Produce clear documentation, Produce clear standards", "teamCollaboration" : "Cross-functional teams; IT teams; Engineering teams", "projectManagementSkills" : [ "Detection backlog management", "Use-case backlog management", "Incident response planning" ], "domainKnowledge" : "New Space; Space business; Rocket systems; Satellite launch; Low Earth Orbit", "domainList" : [ "new-space", "space-business", "rocket-systems", "satellite-launch", "low-earth-orbit" ], "domainSpecificKnowledge" : [ "New Space", "Space business", "Rocket systems", "Satellite launch", "Low Earth Orbit" ], "toolProficiency" : [ "Azure", "AWS", "CIS Benchmarks" ], "communicationSkills" : "Translate technical risk", "documentationSkills" : "Clear documentation", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Security clearance requirements", "qualificationsBasic" : "10+ years information security, Hands-on depth defending systems, Hands-on depth attacking systems, Build secure architecture, Break secure architecture, Operate across full security stack, Switch context fast, Go deep where problem demands, Design security architecture, Implement security architecture, Detection capability, Incident response capability, Vulnerability management capability, In-depth networking protocols knowledge, In-depth systems architecture knowledge, In-depth core security principles knowledge, In-depth best practices knowledge, High autonomy operation, Take full ownership, Guide others, Excellent communication skills, Excellent collaboration skills, Translate technical risk, Bachelor's degree or equivalent experience, Master's degree or equivalent experience", "qualificationsPreferred" : "Aerospace experience, Defense experience, Regulated environments experience, Safety-critical environments experience, Defensive certifications, Architecture certifications, Offensive certifications, Cloud security depth, Azure security services depth, AWS security services depth, Hardening standards familiarity", "workSiteFlexibility" : "Onsite", "rawDescription" : "Mission Brief You are the guardian and the challenger of our security posture. At Isar Aerospace, the systems that build our rockets are mission critical, and protecting them takes more than good design. It takes someone who will attack their own work to be sure it holds. We are looking for a deeply hands-on Senior Security Architect. You will be in the environment, building and testing our defenses yourself, not directing from the sidelines. You wear two hats: the Defender who designs and operates the controls that keep us safe, and the Adversary who continuously attacks those controls the way a real threat would. You own your work end to end and turn what you find under attack into stronger defenses, sharper detection, and faster response. This is a senior role with one of the broadest mandates on the team. You are the kind of expert who can pick up almost anything we throw at you, from architecture to incident response to offensive testing, and go deep where it matters. A versatile generalist with real depth, not a narrow specialist, and a technical anchor others lean on. Your Role in Our Space Mission: Design the Defense: Lead the design and implementation of security architecture across our systems, networks, and applications, building in resilience from the start. Attack What We Build: Run realistic adversary emulation and attack-path analysis against our own environment, prove whether our controls and detections actually fire, and convert every finding into a fix, a new detection, or a hardened design. Own the Detection: Develop and operationalize our detection and response capability, tune monitoring to separate signal from noise, and keep our coverage honest against how attackers actually operate. Direct the MSSP: Own the technical relationship with our managed security provider. Set the detection and use-case backlog, hold them to escalation and response-quality standards, run service reviews, and make sure we get the protection we pay for. Lead the Response: Develop and maintain incident response plans, and lead the handling of incidents from day-to-day alerts through to high-profile events. Hunt and Reduce Risk: Run risk and vulnerability assessments across business-critical infrastructure, then work with stakeholders to prioritize and close the gaps that matter most. Stay Ahead of the Threat: Track emerging threats and tactics, and use threat intelligence to anticipate how an adversary would target us and harden accordingly. Embed Security with Engineering: Partner with IT and engineering teams to implement and validate controls, and produce clear documentation and standards others can execute against. Qualification Checklist Experience: 10+ years in information security, with hands-on depth across both defending and attacking systems. Dual Mindset: You can both build secure architecture and break it under controlled, agreed scope, and you know how to feed one into the other. Versatile Range: Comfortable operating across the full security stack and switching context fast, from design to detection to active testing, while still going deep where the problem demands it. Security Architecture: Proven experience designing and implementing security architecture across networks, cloud, identity, and endpoints. Operational Depth: Strong capability in detection, incident response, and vulnerability management, not just advisory or paper work. Foundations: In-depth knowledge of networking protocols, systems architecture, and core security principles and best practices. Frameworks: Familiarity with industry standards such as ISO 27001 and NIST. Autonomy: Operates with very high autonomy as an internal expert, taking full ownership of their work and guiding others. Communication: Excellent communication and collaboration skills, able to translate technical risk for a range of audiences. Education: Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field, or the equivalent through relevant certifications and hands-on experience. Bonus Skills Experience in aerospace, defense, or other regulated, safety-critical environments. Relevant certifications: defensive or architecture (e.g., CISSP, CISM) and offensive (e.g., OSCP or equivalent) are both valued. Cloud security depth in a major platform (Azure or AWS) and its native security services. Familiarity with hardening standards (e.g., CIS Benchmarks) applied in production. Benefits Employee Participation Program: Share in our success through our virtual company share program 6 weeks of vacation: Enjoy the days off to relax and recharge Subsidised lunch: Stay energised with delicious, subsidised lunches every day Relocation support: Benefit from our relocation bonus with deductible expenses up to an agreed amount Wellness allowance: Stay healthy and fit with our yearly allowance for wellness activities (e.g., Gym, Massages) Individual learning allowance: Grow your skills with an individual learning budget granted after the probation period Physical and mental well-being: Access via OpenUp the online support from certified psychologists and lifestyle experts at no cost to you and your family And Much More! Discover additional perks and benefits when you join our team. Who we are We are Isar Aerospace and we are at the forefront of New Space building a modern space business to enable faster, better and cheaper access to space. Our mission is to help democratise space and use it for good in order to improve life on Earth now and for the future generations. We are a fast-growing company aiming to provide sustainable and environmentally friendly launch solutions for small and medium-sized satellites and constellations into Low Earth Orbit. The company is privately funded by world-leading technology investors with strong commitment and support and our team is made of driven and talented people with a real passion for space innovation. We're making rockets in a way that hasn't been done before disrupting a traditional industry. If you are up for the challenge, want to work on cutting-edge projects and be part of a team changing the world for better, come, join us and launch your career! Want to find out more about us? Visit www.isaraerospace.com Data Protection We process your personal data for the purpose of managing the recruitment process and assessing your application. For detailed information on how your data is processed, including your rights, please refer to our Privacy Policy. Disclaimer Isar Aerospace SE is an equal-opportunity employer committed to fairness and inclusivity. We do not prioritize any specific religion, gender, nationality, or background. Due to security clearance requirements, affiliations with countries listed under § 13 para. 1 no. 17 SÜG may affect the application process. All qualified applicants are encouraged to apply. We use Metaview to record interview audio so our team can review it later and stay focused during the conversation. We will record interviews only if you opt in. Please note that we will request your consent separately during the interview process. Participation is completely voluntary and will not affect your application in any way. For more information on how we process your personal data, please see our Privacy Policy.", "summaryDescription" : "Senior Security Architect (m/f/d) at Isar Aerospace SE. Skills: Security architecture, Offensive security, Detection engineering, Incident response. Design security architecture. Implement security architecture", "postedDate" : "2026-06-15T23:17:35.898", "createdAt" : "2026-06-15T23:17:35.898", "lastUpdated" : "2026-06-16T08:01:17.028", "ingestTimestamp" : "2026-06-15T23:17:35.898", "mongoId" : "6a3056c3f292fd229cf2e4e2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Penetration testing", "Security design", "Security operations", "Incident command", "Leadership", "Security architecture", "Offensive security", "Detection engineering", "Incident response", "Security posture", "Risk assessment", "Vulnerability assessment", "Threat analysis", "Use case development", "Service reviews", "Incident handling", "Risk prioritization", "Gap closure", "Threat tracking", "Control validation", "Documentation production", "Standards execution", "Detection backlog management", "Use-case backlog management", "Incident response planning", "New Space", "Space business", "Rocket systems", "Satellite launch", "Low Earth Orbit", "CISSP", "CISM", "OSCP", "Azure", "AWS", "CIS Benchmarks" ], "skillCount" : 36, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 439.37457, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Aerospace", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2adaa174d8ee00a071c511", "title" : "Lead Corporate Security Agent", "company" : "Wells Fargo", "industry" : "Financial Services", "salary" : { "min" : 96000.0, "max" : 154000.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "DENVER, CO", "locations" : [ "DENVER, CO", "United States of America" ], "timestamp" : "2026-06-14T23:26:54.945", "fingerprint" : "3426fbb5fe51fd990fca8679f95f5be74b4e7ba9eb60c6445fba97832377fcc9", "source" : "workday", "language" : "en", "applyUrl" : "https://wd1.myworkdaysite.com/recruiting/wf/WellsFargoJobs/job/DENVER-CO/Lead-Corporate-Security-Agent_R-550118", "externalId" : "R-550118", "industryFunction" : { }, "locationPoint" : "40.23315,-76.13717", "structuredLocations" : [ { "city" : "Denver", "state" : "Colorado", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.7392364,-104.9848620" } ], "locationText" : "Denver, Colorado, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "professionalSkills" : [ "Corporate Security", "Security functions", "Security policies", "Compliance requirements", "Security Risk", "Threat Mitigation", "Safety assessments", "Security assessments", "Fiscal management", "Strategic planning", "Business-critical security" ], "hardSkillsList" : [ "Risk assessment", "Threat mitigation", "Site assessments", "Investigation processes" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Threat mitigation", "level" : "intermediate" }, { "name" : "Site assessments", "level" : "intermediate" }, { "name" : "Investigation processes", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Corporate Security, Risk mitigation, Stakeholder engagement", "majorSkillsList" : [ "Corporate Security", "Risk mitigation", "Stakeholder engagement" ], "coreResponsibilities" : "Lead complex security issues, Act as onsite key contributor, Make decisions involving complex security situations, Engage with professionals and managers, Serve as expert advisor to leadership, Assist leadership in program compliance, Assist leadership in fiscal management, Assist leadership in strategic planning, Review and analyze security issues, Review and analyze customer interactions, Review and analyze fiscal management, Lead Security Risk and Threat Mitigation efforts, Complete safety and security trainings, Complete site assessments, Conduct site-based security assessments, Assist on-site with special events, Collaborate and consult with peers, Address security incidents, Resolve security issues, Achieve security objectives, Develop relationships with law enforcement, Develop relationships with business partners, Develop relationships with security vendors, Serve as primary business partner contact", "teamCollaboration" : "Cross-functional issues; Collaborative effort; Business lines; Peers and colleagues; Centers of Excellence; Business partner management", "domainKnowledge" : "Security functions; Security policies; Compliance requirements; Security Risk; Threat Mitigation; Law enforcement; Security vendors", "domainList" : [ "security-functions", "security-policies", "compliance-requirements", "security-risk", "threat-mitigation", "law-enforcement", "security-vendors" ], "domainSpecificKnowledge" : [ "Security functions", "Security policies", "Compliance requirements", "Security Risk", "Threat Mitigation", "Law enforcement", "Security vendors" ], "toolProficiency" : [ "Microsoft Office", "SharePoint" ], "communicationSkills" : "Verbal communications; Written communications; Presentation skills", "continuousLearning" : "Safety and security trainings", "problemSolvingSkills" : "Analytical skills; Attention to detail; Attention to accuracy", "specialRequirements" : "Travel within assigned region, Work nights, weekends, holidays, Travel with little notice, Up to 35% business travel", "qualificationsBasic" : "5+ years Corporate Security experience, Valid government driver's license, Working personal automobile, Current automobile insurance", "qualificationsPreferred" : "Experience with law enforcement, Conducting investigations experience, Managing high-volume caseload, Physical security assessments experience, Leading training experience, Conducting site assessments experience, Working operable personal cellular telephone, Ability to take initiative, Work independently with minimal supervision, Proactively manage and mitigate issues, Analytical skills, High attention to detail, High attention to accuracy, Professional verbal communications, Professional written communications, Professional presentation skills, Intermediate Microsoft Office skills, Intermediate SharePoint skills", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "**About this role:** Wells Fargo is seeking a Lead Corporate Security Agent in the Denver, CO and surrounding area. **In this role, you will:** * Lead highly complex security issues including those that are cross-functional with broad impact and act as onsite key contributor in large-scale planning related to preventing or mitigating criminal acts involving company assets, individuals, or customers * Make decisions involving complex security situations that require a solid understanding of security functions, policies, procedures, and compliance requirements * Strategically engage with all levels of professionals and managers across the enterprise and serve as an expert advisor to leadership * Assist Corporate Security leadership in achieving overall Corporate Security program compliance, fiscal management, and strategic planning with business-critical security initiatives with moderate financial or legal impact * Review and analyze complex variety of security issues, customer interactions, and fiscal management that require in-depth evaluation of multiple factors including intangibles or unprecedented factors * Lead Security Risk and Threat Mitigation efforts as part of a collaborative effort with other business lines * Complete frequent safety and security trainings and site assessments at all retail locations, both proactively and reactively * Conduct site-based security assessments and assist on-site with special events * Strategically collaborate and consult with peers, colleagues, mid-level to senior managers, and Centers of Excellence to address security incidents, resolve issues and achieve goals; may lead projects, teams or serve as a peer mentor * Develop and maintain effective relationships with all levels of law enforcement, business partners, and security vendors * Serve as primary business partner contact with Corporate Security, with moderate exposure to internal business partner management **Required Qualifications:** * 5+ years of Corporate Security experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education * Valid government driver’s license, working personal automobile and current automobile insurance **Desired Qualifications:** * Experience working with and building relationships with federal, state, and local law enforcement * Experience in conducting comprehensive investigations * Experience managing high-volume case load, and understanding complex investigative processes * Physical security assessments experience * Experience leading training and conducting site assessments * Working, operable personal cellular telephone * Ability to take initiative and work independently with minimal supervision in a structured environment * Ability to proactively manage and mitigate issues * Strong analytical skills with high attention to detail and accuracy * Highly refined and professional verbal and written communications * Professional presentation skills * Intermediate Microsoft Office (Word, Excel, Outlook, and PowerPoint) and SharePoint skills **Job Expectations:** * Ability to travel within assigned region, including nights, weekends, and holidays, occasionally with little advanced notice. * Ability to work in assigned Wells Fargo office location – when not in the field at other Wells Fargo locations as required for role (e.g., branches, ATMs, administrative facilities) * In office expectations of a minimum of four days a week at different sites as needed while maintaining a permanent office in an assigned high-density building. The assigned office location may change as Wells Fargo’s facility portfolio shifts over time * Up to 35% business travel * Relocation assistance is not available for this position * This position is not eligible for Visa sponsorship * Based on applicant volume the posting may come down early * **Location:** Denver, Colorado (1700 Lincoln Street) * Base Compensation Range: 96,000.00 - 154,000.00 USD Annual Eligible for discretionary annual bonus. **Pay Range** Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities. $96,000.00 - $154,000.00 **Benefits** Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit [Benefits - Wells Fargo Jobs](https://www.wellsfargojobs.com/en/life-at-wells-fargo/benefits) for an overview of the following benefit plans and programs offered to employees. * Health benefits * 401(k) Plan * Paid time off * Disability benefits * Life insurance, critical illness insurance, and accident insurance * Parental leave * Critical caregiving leave * Discounts and savings * Commuter benefits * Tuition reimbursement * Scholarships for dependent children * Adoption reimbursement **Posting End Date:** 18 Jun 2026 ***_Job posting may come down early due to volume of applicants._** **We Value Equal Opportunity** Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic. Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements. **Applicants with Disabilities** To request a medical accommodation during the application or interview process, visit [Disability Inclusion at Wells Fargo](https://www.wellsfargojobs.com/en/diversity/disability-inclusion/). **Drug and Alcohol Policy** **** Wells Fargo maintains a drug free workplace. Please see our [Drug and Alcohol Policy](https://www.wellsfargojobs.com/en/wells-fargo-drug-and-alcohol-policy) to learn more. **Wells Fargo Recruitment and Hiring Requirements:** a. Third-Party recordings are prohibited unless authorized by Wells Fargo. b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.", "summaryDescription" : "Lead Corporate Security Agent at Wells Fargo. Skills: Corporate Security, Risk mitigation, Stakeholder engagement. Lead complex security issues. Act as onsite key contributor", "postedDate" : "2026-06-11T01:18:33.827", "createdAt" : "2026-06-12T01:18:33.000", "lastUpdated" : "2026-06-14T23:26:54.945", "ingestTimestamp" : "2026-06-12T01:18:33.000", "mongoId" : "6a2adaa174d8ee00a071c511", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://wd1.myworkdaysite.com/recruiting/wf/WellsFargoJobs/job/DENVER-CO/Lead-Corporate-Security-Agent_R-550118", "salaryAnnualMin" : 96000, "salaryAnnualMax" : 154000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Risk assessment", "Threat mitigation", "Site assessments", "Investigation processes", "Leadership", "Corporate Security", "Risk mitigation", "Stakeholder engagement", "Security functions", "Security policies", "Compliance requirements", "Security Risk", "Threat Mitigation", "Safety assessments", "Security assessments", "Fiscal management", "Strategic planning", "Business-critical security", "Law enforcement", "Security vendors", "Microsoft Office", "SharePoint" ], "skillCount" : 22, "jobCategory" : "engineering", "seniorityLevel" : "mid", "dataQualityScore" : 1.0, "_score" : 439.2884, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services" }, { "id" : "68dd1eeace260f92cbea0d48", "title" : "Security Engineer, Corporate Services Security", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 136000.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Boston, Massachusetts, USA", "locations" : [ "Boston, Massachusetts, USA" ], "timestamp" : "2026-06-15T05:44:44.106", "fingerprint" : "8bae78392acbe54e5bc142c819e39feec5276108e47c860ece1e51fa379f6f43", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3098656/apply", "externalId" : "b22c0072-7252-41a3-980c-b06f4163a21e", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Boston", "state" : "Massachusetts", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "42.3588336,-71.0578303" } ], "locationText" : "Boston, Massachusetts, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "AWS, Java, Python, Javascript", "professionalSkills" : [ "Application security", "Risk assessment", "Security architecture" ], "hardSkillsList" : [ "Secure code review", "Threat modeling", "Adversarial security analysis" ], "hardSkills" : [ { "name" : "Secure code review", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Adversarial security analysis", "level" : "intermediate" } ], "majorSkills" : "Application security, Security engineering, Risk management", "majorSkillsList" : [ "Application security", "Security engineering", "Risk management" ], "coreResponsibilities" : "Perform design reviews, Perform security reviews, Prioritize remediation, Promote security throughout Company, Build working relationships, Handle disparate tasks, Manage security review activities, Escalate issues to senior leadership, Build tooling, Improve tooling, Share tooling benefits, Assist with recruiting, Assist with administrative work, Create threat models, Update threat models, Maintain threat models, Perform manual secure code review, Perform automated secure code review, Develop security automation tools, Perform adversarial security analysis, Provide security training, Provide security outreach, Provide security architecture guidance, Provide design guidance, Solve complex security problems, Influence process, Influence priorities, Influence choices, Improve security outcomes, Provide technical guidance, Provide strategic guidance, Collaborate with application teams, Inspect application code, Build new frameworks, Fine-tune service design", "teamCollaboration" : "Development teams; Service team; Across Amazon; Application development teams; Builder teams", "domainKnowledge" : "Application security; AWS Services; Corporate services security", "domainList" : [ "application-security", "aws-services", "corporate-services-security" ], "domainSpecificKnowledge" : [ "Application security", "AWS Services", "Corporate services security" ], "toolProficiency" : [ "AWS Services" ], "communicationSkills" : "Oral communication; Written communication", "innovationCreativity" : "Pursue projects", "problemSolvingSkills" : "Troubleshooting systems issues; Analyze logs; Solve complex security problems", "outcomesObjectives" : "Minimize security risks; Provide high quality findings; Improve security outcomes", "qualificationsBasic" : "2+ years troubleshooting systems issues, 2+ years analyzing logs, 2+ years automating tasks, Bachelor's degree in computer science, Bachelor's degree in STEM, 2+ years IT Security experience, Knowledge of networking protocols, Knowledge of security vulnerabilities, Experience in scripting, Experience in programming, Experience in security code reviewing", "qualificationsPreferred" : "2+ years threat modeling experience, 2+ years secure coding, 2+ years identity management, 2+ years software development, 2+ years cryptography, 2+ years system administration, 2+ years network security, 2+ years scripting experience, 2+ years programming experience, 2+ years security code review, Knowledge of command line tools, Knowledge of AWS products, Knowledge of AWS services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We are open to hiring candidates to work out of one of the following locations: Boston, MA, USA Corporate Services Security (CPSS) is the Amazon security team aligned to Finance & Global Business Services (FGBS), People eXperience & Technology (PXT), Legal, and Communications and Corporate Responsibility (CCR) business organizations. Our Mission is to protect and safeguard Amazon's corporate services, systems, and data. Through proactive engagement with the development teams, we understand the dynamic business processes that run Amazon, and enable our stakeholders to innovate, build, and scale securely. The Product Security Team within CPSS supports numerous applications built using AWS Services. Apart from work, we provide opportunities for our engineers to pursue projects they are passionate about while maintaining work life harmony. Key job responsibilities A successful candidate will need a combination of application security, technical, and communication skills, as well as the ability to handle a mix of disparate tasks and include projects in addition to managing security review activities. This role will provide career growth opportunities as you gain new security skills in the course of your duties. Perform Design and Security Reviews to determine the level of risk they present to our customers, and then accordingly prioritize their remediation in conjunction with the service team. Participate in efforts to promote security throughout the Company and build good working relationships within the team and with others across Amazon Demonstrate high capacity and tolerance for context switching and interruptions while remaining productive and effective Escalate issues to senior leadership when issues are not progressing at the correct pace based on impact to ensure we are putting customers first. Explore building and improving our tooling to make your own life easier and share that benefit with all our engineers globally. Assistance with recruiting activities and administrative work Creating, updating, and maintaining threat models for a wide variety of software projects Manual and Automated Secure Code Review, primarily in Java, Python and Javascript Development of security automation tools Adversarial security analysis using tools to augment manual effort Provide Security training and outreach for internal development teams Provide Security architecture and design guidance to application development teams Independently solve systemic, complex security problems that require novel methods or approaches Influence your team’s and partners’ process, priorities, and choices by using data to improve security outcomes Provide technical and strategic guidance to senior leaders and stakeholders through effective oral and written communications A day in the life As a Security Engineer, you will collaborate with application development teams to ensure we keep our customers safe while developing novel services. In a given day, you might be inspecting an application’s code for security issues, building a new framework to help our software developers build faster and more securely, or fine-tuning the design for a new service. The ideal candidate combines technical acumen with an ability to lead by influence and communicate clearly. Technically, this person will be a security specialist with one or more areas of deep expertise within application security. They will clearly articulate risks to technical and non-technical audiences alike. Successful candidates will effectively harmonize disparate opinions while effectively prioritizing risks to guide their partners towards secure solutions. The Corporate Services Security (CPSS) Product Security Team is responsible for securing the applications, infrastructure and data developed across People eXperience and Technology (PXT), Finance & Global Business Services (FGBS), Legal and Communications and Corporate Responsibility (CCR). We partner with builder teams to minimize security risks across their applications while being a business enabler. Our team develops security tooling and automation to provide high quality security findings earlier in development lifecycles. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience - 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience - Bachelor's degree in computer science or equivalent - Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or experience in IT Security - Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years of IT Security experience - Knowledge of networking protocols such as HTTP, DNS and TCP/IP - Knowledge of industry-based security vulnerabilities and remediation techniques - Experience in scripting, programming, and security code reviewing in a common programming language (non-internship) - Experience in troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship experience) Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - 2+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience - Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks - Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP - Knowledge of networking protocols, to include HTTP(S), DNS, and TCP/IP - Experience with AWS products and services Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $136,000/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Engineer, Corporate Services Security at Amazon.com Services LLC. Skills: Application security, Security engineering, Risk management. Perform design reviews. Perform security reviews", "postedDate" : "2026-06-13T11:33:36.094", "createdAt" : "2026-06-13T11:33:36.094", "lastUpdated" : "2026-06-15T05:44:44.106", "ingestTimestamp" : "2026-06-13T11:33:36.094", "mongoId" : "68dd1eeace260f92cbea0d48", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3098656/apply", "salaryAnnualMin" : 136000, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Secure code review", "Threat modeling", "Adversarial security analysis", "Application security", "Security engineering", "Risk management", "Risk assessment", "Security architecture", "AWS Services", "Corporate services security" ], "skillCount" : 10, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 438.43533, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "69e104402beec4dd3def2577", "title" : "Security Engineer, AWS Security Incident Response", "company" : "Amazon Web Services", "industry" : "Solutions Architect, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 135000.0, "max" : 195000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Security Engineer in Singapore, adjusted for the technology industry and a large company size." }, "location" : "SGP", "locations" : [ "SGP" ], "certifications" : [ "GCIH", "GSEC", "Security+" ], "timestamp" : "2026-06-15T02:22:21.224", "fingerprint" : "40bb89751ca82072e1830c381dd327c4aca04b10b3800fda172ae2e11fc89203", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10386227/apply", "externalId" : "bf3e3eb2-1460-4e11-bafb-1fe3f4b46363", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "technicalSkills" : "AWS, Amazon GuardDuty, CrowdStrike Falcon, Wiz Defend", "professionalSkills" : [ "Security response", "Threat detection", "Incident response", "Security automation", "Security posture improvement", "Risk assessment", "Vulnerability assessment", "Remediation proposal" ], "hardSkillsList" : [ "Threat analysis", "Security monitoring", "Incident documentation", "Incident reporting", "Auto-remediation capabilities" ], "softSkillsList" : [ "Learning new concepts" ], "hardSkills" : [ { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Incident documentation", "level" : "intermediate" }, { "name" : "Incident reporting", "level" : "intermediate" }, { "name" : "Auto-remediation capabilities", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Learning new concepts" } ], "majorSkills" : "Incident response, Threat detection, Security automation", "majorSkillsList" : [ "Incident response", "Threat detection", "Security automation" ], "coreResponsibilities" : "Respond to threat findings, Identify security threats, Evaluate security threats, Communicate security threats, Propose remediation for security issues, Contribute to security automation development, Contribute to security posture improvements, Track effectiveness of detective controls, Report effectiveness of detective controls, Develop processes for response effectiveness, Develop policies for response effectiveness, Monitor networks for potential threats, Monitor systems for potential threats, Perform triage for security alerts, Document suspicious activity, Report security issues, Perform threat detection, Perform incident response, Detect cyber threats, Mitigate cyber threats, Protect AWS Customers, Learn new technologies, Learn new procedures", "teamCollaboration" : "Work alongside security engineers; Work with partner teams", "domainKnowledge" : "AWS Security; Incident response; Threat monitoring; Detective controls; Protective controls; Attack techniques; Cyber threats", "domainList" : [ "aws-security", "incident-response", "threat-monitoring", "detective-controls", "protective-controls", "attack-techniques", "cyber-threats" ], "domainSpecificKnowledge" : [ "AWS Security", "Incident response", "Threat monitoring", "Detective controls", "Protective controls", "Attack techniques", "Cyber threats" ], "toolProficiency" : [ "CrowdStrike Falcon", "Wiz Defend" ], "communicationSkills" : "Explain technical concepts", "documentationSkills" : "Document suspicious activity", "continuousLearning" : "Learning new concepts; Learning new technologies; Learning new procedures", "problemSolvingSkills" : "Work through ambiguity; Identify suspicious activity", "specialRequirements" : "On-call support, Periodic on-call responsibilities, On-call responsibilities including weekends", "outcomesObjectives" : "Keep customers secure; Increase security response effectiveness; Minimize disruption to customer workloads", "qualificationsBasic" : "Bachelor's degree in Engineering, Experience with web protocols, Experience with common security attacks, Experience with remediation, Knowledge of system, Knowledge of network, Knowledge of OS, Experience solving problems by writing code, Experience solving problems with scripts", "qualificationsPreferred" : "Experience with AWS services, Experience with other cloud offerings, Experience triaging security alerts, Front-line analysis experience, Escalation experience, GCIH certification, GSEC certification, Security+ certification", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Security Incident Response is looking for technical Security Engineers that are passionate about learning new concepts and work well within a team environment to keep customers secure. We value engineers that can work through ambiguity to identify suspicious activity, lead security response, and can explain technical security concepts to non-technical audiences. Key job responsibilities * Respond to threat findings that indicate unauthorized activity has occurred * Identify, evaluate and communicate security threats, risks and vulnerabilities, and propose recommended remediation for security issues. * Contribute to the development of security automation and security posture improvements. * Track and report on the effectiveness of AWS detective controls such as Amazon GuardDuty and partner products such as CrowdStrike Falcon or Wiz Defend * Develop processes and policies to increase security response effectiveness. * On-call support: This role requires periodic on-call responsibilities including weekends. A day in the life As a Security Engineer in AWS Security Incident Response, your responsibilities include monitoring networks and systems for potential threats, performing triage for security alerts, documenting suspicious activity, and reporting issues so they can be adequately handled. You will work alongside our security engineers and partner teams to perform daily threat detection and incident response, using the full capability of AWS technologies and services to detect and mitigate cyber threats at a massive scale and help protect AWS Customers. You should also enjoy learning about the most up-to-date new technologies and procedures to protect information systems and data. About the team AWS Security Incident Response provides 24/7 threat monitoring, investigation, and response across for customer’s AWS environments. The service enhances existing security capabilities by providing security monitoring for all native AWS services and supports vendor agnostic detective and protective controls to provide holistic security controls for customers. This is done by leveraging data on common attack techniques to enhance detective controls and incident response, then building auto-remediation capabilities to minimize disruption to customer workloads. When a security event does happen, you will be there provide guidance. Basic Qualifications: - Bachelor's degree in Engineering, Computer Science, or a related field - Experience with web protocols, common security attacks, and remediation (non-internship) - Knowledge of system, network and OS - Experience solving basic problems by writing code or scripts with some assistance Preferred Qualifications: - Experience with AWS services or other cloud offerings - Experience triaging security alerts, front-line analysis, and escalation - GCIH (GIAC Certified Incident Handler) or GSEC (GIAC Security Essentials) or Security+ Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security Engineer, AWS Security Incident Response at Amazon Web Services. Skills: Incident response, Threat detection, Security automation. Respond to threat findings. Identify security threats", "postedDate" : "2026-06-13T04:14:17.343", "createdAt" : "2026-06-13T04:14:17.343", "lastUpdated" : "2026-06-15T02:22:21.224", "ingestTimestamp" : "2026-06-13T04:14:17.343", "mongoId" : "69e104402beec4dd3def2577", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10386227/apply", "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Threat analysis", "Security monitoring", "Incident documentation", "Incident reporting", "Auto-remediation capabilities", "Learning new concepts", "Incident response", "Threat detection", "Security automation", "Security response", "Security posture improvement", "Risk assessment", "Vulnerability assessment", "Remediation proposal", "AWS Security", "Threat monitoring", "Detective controls", "Protective controls", "Attack techniques", "Cyber threats", "GCIH", "GSEC", "Security+", "CrowdStrike Falcon", "Wiz Defend" ], "skillCount" : 25, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 436.9841, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "69cf3f052beec4dd3d9340a4", "title" : "AWS Security Operations/Incident Response Engineer", "company" : "Amazon Web Services, Inc.", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 159000.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Herndon, Virginia, USA", "locations" : [ "Herndon, Virginia, USA" ], "certifications" : [ "CCSP", "Certified Cloud Security Professional", "CEH", "Certified Ethical Hacker", "CFR", "CyberSec First Responder", "Cloud+", "CySA+", "CompTIA Cybersecurity Analyst", "GCED", "GIAC Certified Enterprise Defender", "GICSP", "Global Industrial Cyber Security Professional", "PenTest+", "AWS certification", "AWS Solutions Architect" ], "timestamp" : "2026-06-15T08:10:44.516", "fingerprint" : "e7b6067f8d5e1ee3cf111fd915ee7bae8c724b95799fbd946bdb1b7400dc7409", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10382311/apply", "externalId" : "49079c29-efa4-48bb-96db-5c916f303463", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" } ], "locationText" : "Herndon, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Java, C++, HTTP(S), DNS, TCP/IP, Cryptography, Network security, Software security, Malware analysis, Forensics, Security operations, Incident response, Security intelligence, AWS", "professionalSkills" : [ "Risk assessment", "Security engineering" ], "hardSkillsList" : [ "Log analysis", "Incident response", "Forensics", "System tooling development", "Risk assessment", "Cryptography", "Network security", "Software security", "Malware analysis", "Security operations", "Security intelligence" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Forensics", "level" : "intermediate" }, { "name" : "System tooling development", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Software security", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Security intelligence", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Security operations, Cloud security", "majorSkillsList" : [ "Incident response", "Security operations", "Cloud security" ], "coreResponsibilities" : "Respond to security incidents, Prevent future incidents, Design cohesive responses, Coordinate responses across teams, Build security utilities, Build security tools, Communicate effectively", "teamCollaboration" : "Multiple teams across organization; Fellow Security Engineers", "domainKnowledge" : "Cloud security; National security; Cryptography; Network security; Software security; Malware analysis; Forensics; Security operations; Incident response; Security intelligence; AWS services", "domainList" : [ "cloud-security", "national-security", "cryptography", "network-security", "software-security", "malware-analysis", "forensics", "security-operations", "incident-response", "security-intelligence", "aws-services" ], "domainSpecificKnowledge" : [ "Cloud security", "National security", "Cryptography", "Network security", "Software security", "Malware analysis", "Forensics", "Security operations", "Incident response", "Security intelligence", "AWS services" ], "toolProficiency" : [ "Splunk", "ELK" ], "communicationSkills" : "Communicate at multiple levels; Communicate to multiple audiences", "problemSolvingSkills" : "Think like attacker; Think like defender; Mitigate risks", "specialRequirements" : "US Citizen, TS/SCI with polygraph, On-call responsibilities", "qualificationsBasic" : "Bachelor's degree or CCSP or CEH or CFR or Cloud+ or CySA+ or GCED or GICSP or PenTest+, 2+ years scripting or programming or security code review, Knowledge of networking protocols, Current, active US Government Security Clearance of TS/SCI with Polygraph", "qualificationsPreferred" : "AWS certification, Cloud Technology Certification, Knowledge of web protocols, Knowledge of common attacks, Knowledge of Linux/Unix tools, Knowledge of Linux/Unix architecture, Deep understanding of AWS service catalog, Used AWS services in production, Experience with log analysis systems, Familiarity with Windows logging systems, Familiarity with Linux logging systems, Understanding of high-level cryptography principles", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Web Services (AWS) is the leading cloud provider, providing infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS’s multi-tenant infrastructure. Governmental organizations are also looking to and depending on AWS for cloud solutions and services. The AWS Security Incident Response team is seeking a focused Security Engineer who can take on a leadership role in responding to security issues in support of our National Security program. This engineer will work as a part of a growing team of security engineers who are focused on protecting the AWS infrastructure that is used by our national security customers. Our security engineers perform many duties during an average day: log analysis, incident response, forensics, system/tooling development, and risk assessment, just to name a few. You must thrive in high-pressure situations, think like both an attacker and defender, and drive relevant teams to take the right actions in the right time frames to mitigate risks. They also need to balance technical risks against business needs and be able to articulate risks and mitigations to members of leadership at various levels. You should have a good mix of deep technical knowledge and a demonstrated background in information security. We value broad and deep technical knowledge, specifically in the fields of cryptography, network security, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active TS/SCI security clearance with polygraph. Key job responsibilities - Confidently and intelligently respond to security incidents, and proactively consider how to prevent the same type of incidents from occurring in the future. - Design and coordinate cohesive responses to security events that involve multiple teams across the organization. - Build security utilities and tools for internal use that enable you and your fellow Security Engineers to operate at high speed and wide scale. - Ability to communicate effectively at multiple levels of sensitivity, and multiple audiences. - Recognize, adopt and instill the best practices in security engineering fields throughout the organization: development, cryptography, network security, security operations, incident response, security intelligence. - Fulfill regular on-call responsibilities. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor's degree, or CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud+ or CySA+ (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest+ - 2+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience - Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP - Current, active US Government Security Clearance of TS/SCI with Polygraph Preferred Qualifications: - AWS certification, such as, AWS Solutions Architect, or a similar cloud certification, or Cloud Technology Certification - Knowledge of web protocols, common attacks, and Linux/Unix tools and architecture - Deep understanding of the AWS service catalog. Ideally, you have used AWS services in a production capacity. - Experience with log analysis systems, like Splunk or ELK. - Familiarity with Windows and Linux logging systems. - Understanding of high-level cryptography principles (PKI, encryption algorithms, etc) Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, VA, Herndon - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "AWS Security Operations/Incident Response Engineer at Amazon Web Services, Inc.. Skills: Incident response, Security operations, Cloud security. Respond to security incidents. Prevent future incidents", "postedDate" : "2026-06-13T14:00:19.237", "createdAt" : "2026-06-13T14:00:19.237", "lastUpdated" : "2026-06-15T08:10:44.516", "ingestTimestamp" : "2026-06-13T14:00:19.237", "mongoId" : "69cf3f052beec4dd3d9340a4", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10382311/apply", "salaryAnnualMin" : 159000, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Log analysis", "Incident response", "Forensics", "System tooling development", "Risk assessment", "Cryptography", "Network security", "Software security", "Malware analysis", "Security operations", "Security intelligence", "Leadership", "Cloud security", "Security engineering", "National security", "AWS services", "CCSP", "Certified Cloud Security Professional", "CEH", "Certified Ethical Hacker", "CFR", "CyberSec First Responder", "Cloud+", "CySA+", "CompTIA Cybersecurity Analyst", "GCED", "GIAC Certified Enterprise Defender", "GICSP", "Global Industrial Cyber Security Professional", "PenTest+", "AWS certification", "AWS Solutions Architect", "Splunk", "ELK" ], "skillCount" : 34, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 432.8007, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Security" }, { "id" : "6a305b45f292fd229cf5ba35", "title" : "Insurance Agent", "company" : "Horace Mann", "industry" : "Insurance", "salary" : { "min" : 65000.0, "max" : 110000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Insurance Agent in Phoenix, adjusted for mid-seniority and the insurance industry." }, "location" : "Arizona", "locations" : [ "Arizona" ], "certifications" : [ "Life and Health Insurance License", "Property and Casualty Insurance License", "FINRA Series 6", "FINRA Series 63" ], "timestamp" : "2026-06-16T08:09:45.391", "fingerprint" : "8226664d4b78edd630cea127550a3f263379d9a17457f7de75f31daca8905f71", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/horacemannagents/jobs/6030694004", "externalId" : "6030694004", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Phoenix", "state" : "Arizona", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.4484367,-112.0741410" } ], "locationText" : "Phoenix, Arizona, United States", "professionalSkills" : [ "Business management" ], "majorSkills" : "Insurance sales, Client relationships, Financial security", "majorSkillsList" : [ "Insurance sales", "Client relationships", "Financial security" ], "coreResponsibilities" : "Identify solutions for educators, Implement solutions for educators, Achieve market access, Build relationships, Present products to groups, Present products to individuals, Engage in networking, Engage in community events, Engage in industry events, Invest time in business, Invest resources in business", "domainKnowledge" : "Insurance products; Financial services", "domainList" : [ "insurance-products", "financial-services" ], "domainSpecificKnowledge" : [ "Insurance products", "Financial services" ], "continuousLearning" : "Ongoing training", "problemSolvingSkills" : "Identify and implement solutions", "specialRequirements" : "No external office required for 2 years", "outcomesObjectives" : "Help educators achieve affordable insurance; Help educators achieve financial security; Grow your agency; Grow your network", "qualificationsBasic" : "Resident State General Lines Insurance Licenses, Life and Health Insurance License, Property and Casualty Insurance License, Ability to obtain FINRA Series 6 & 63 licenses", "qualificationsPreferred" : "2-5 years of experience in the insurance and financial services industry", "remoteFriendly" : false, "workSiteFlexibility" : "Flexible", "rawDescription" : "Join Horace Mann and Unlock Your Financial Potential Ready to take control of your financial future? At Horace Mann, we are here to support you in achieving your goals and making a meaningful difference in the lives of the educators who trust you. Join us and take the first step toward building a brighter, more prosperous future. If you're ready to take the next step toward realizing your financial goals, we invite you to join our team as an Exclusive Insurance Agent. With Horace Mann’s expertise and your ambition, together, we can help you unlock your full potential. What We Offer: Competitive, performance-based [1099] compensation with an industry-leading 48-month incentive package Earning incentives tied to your activity and success during the first 48 months Quarterly production incentives for the first 48 months, rewarding consistent performance Dedicated Service Representative to handle client service work, allowing you to focus on building your business Exclusive territory in a niche market designed to increase your opportunities for success Cutting-edge technology and ongoing training to support and grow your operations A comprehensive multiline product portfolio to meet a variety of client needs Market and relationship-building programs to help you establish and grow your network No external office required for 2 years Your Path to Success: Several factors will contribute to your success in this role, including: A commitment to identifying and implementing solutions that help educators achieve affordable insurance solutions and financial security A focus on achieving market access and building strong relationships The ability to confidently present products to both groups and individuals Active engagement in networking, community, and industry events A dedication to investing time and resources to ensure the long-term success of your business What We’re Looking For: Strong interpersonal and business management skills to build and manage your agency 2-5 years of experience in the insurance and financial services industry (preferred) Resident State General Lines Insurance Licenses: Life and Health Insurance License Property and Casualty Insurance License Ability to obtain FINRA Series 6 & 63 licenses (if applicable in your region) #LI-WW1 #VIZI#", "summaryDescription" : "Insurance Agent at Horace Mann. Skills: Insurance sales, Client relationships, Financial security. Identify solutions for educators. Implement solutions for educators", "postedDate" : "2026-06-15T23:24:28.523", "createdAt" : "2026-06-15T23:24:28.523", "lastUpdated" : "2026-06-16T08:09:45.391", "ingestTimestamp" : "2026-06-15T23:24:28.523", "mongoId" : "6a305b45f292fd229cf5ba35", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 65000, "salaryAnnualMax" : 110000, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "Insurance sales", "Client relationships", "Financial security", "Business management", "Insurance products", "Financial services", "Life and Health Insurance License", "Property and Casualty Insurance License", "FINRA Series 6", "FINRA Series 63" ], "skillCount" : 10, "jobCategory" : "sales", "jobSubcategory" : "revenue", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 428.71768, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Insurance", "llmIndustryConfidence" : 0.98 }, { "id" : "68c2e418f8b1b0376634c36a", "title" : "Security Engineer, Incident Response, CorpSec", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 125500.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T02:14:41.009", "fingerprint" : "1d73ed9116d8a3da3a8809fe15ae6abbeb90fed1911a7e130db33978905c1cf9", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3079013/apply", "externalId" : "6e9703e8-c44e-4f5b-9f27-1aa702f0786e", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Operating system security, Network security, Cryptography, Software security, Threat hunting, Detection engineering, Malware analysis, Forensics, Security operations, Incident response, Security intelligence, Programming language, Scripting language, Amazon Web Services", "professionalSkills" : [ "Security monitoring", "Response activities" ], "hardSkillsList" : [ "Incident response lifecycle", "Security monitoring", "Response activities", "Threat hunting", "Detection engineering", "Malware analysis", "Forensics", "Security operations", "Security intelligence" ], "softSkillsList" : [ "Leadership", "Curiosity", "Critical thinking" ], "hardSkills" : [ { "name" : "Incident response lifecycle", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Response activities", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Detection engineering", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Forensics", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Security intelligence", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Curiosity" }, { "name" : "Critical thinking" } ], "majorSkills" : "Incident response, Security engineering, Threat intelligence", "majorSkillsList" : [ "Incident response", "Security engineering", "Threat intelligence" ], "coreResponsibilities" : "Lead response to security issues, Conduct security monitoring, Conduct response activities", "teamCollaboration" : "Global team environment; Security issues", "domainKnowledge" : "Operating system security; Network security; Cryptography; Software security; Threat hunting; Detection engineering; Malware analysis; Forensics; Security operations; Incident response; Security intelligence; Cloud provider", "domainList" : [ "operating-system-security", "network-security", "cryptography", "software-security", "threat-hunting", "detection-engineering", "malware-analysis", "forensics", "security-operations", "incident-response", "security-intelligence", "cloud-provider" ], "domainSpecificKnowledge" : [ "Operating system security", "Network security", "Cryptography", "Software security", "Threat hunting", "Detection engineering", "Malware analysis", "Forensics", "Security operations", "Incident response", "Security intelligence", "Cloud provider" ], "toolProficiency" : [ "SOAR", "SIEM platforms" ], "communicationSkills" : "Clear communication; Accurate communication", "continuousLearning" : "Learn about security domains", "problemSolvingSkills" : "Think like attacker; Think like defender", "qualificationsBasic" : "BS degree in Computer Science or equivalent, 3 years systems, network, or application security experience, 3 years experience on Security team, Coordinating security incident responses, Proficiency with one high-level programming or scripting language", "qualificationsPreferred" : "Experience in security operations or incident response, Experience in security automation tooling, Experience in threat intelligence, Familiarity with threat hunting, Familiarity with detection engineering, Familiarity with malware analysis, Familiarity with forensics, Familiarity with SOAR, Familiarity with SIEM platforms, Familiarity with variety of Operating Systems, Experience with Amazon Web Services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS is looking for a passionate Security Engineer, Incident Response who can lead the response to security issues across the largest cloud provider in the world. You must thrive in high-pressure situations, and think like both an attacker and defender, while working through the entire incident response lifecycle. You’ll be working in a global team environment where clear and accurate communication and collaboration on security issues is critical. In this role you’ll be conducting security monitoring and response activities for the Amazon internal network. We value broad and deep technical knowledge, specifically in the fields of operating system security, network security, cryptography, software security, threat hunting, detection engineering, malware analysis, forensics, security operations, incident response, and emergent security intelligence. We don’t expect you to be an expert in all of the domains mentioned above, but we do expect you to be excited to learn about them! About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - BS degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent related field. Or equivalent industry certification. - 3 years of demonstrated experience with a focus in areas such as systems, network, and/or application security. - 3 years experience on a Security team, especially experience coordinating responses to security incidents. Proficiency with one high-level programming or scripting language. Preferred Qualifications: - Experience working in security operations or incident response, security automation tooling, or threat intelligence. - Familiarity with threat hunting, detection engineering, malware analysis, forensics, SOAR, SIEM platforms, and a variety of Operating Systems (MS Windows, Linux, MacOS). - Experience with Amazon Web Services. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $125,500/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Engineer, Incident Response, CorpSec at Amazon.com Services LLC. Skills: Incident response, Security engineering, Threat intelligence. Lead response to security issues. Conduct security monitoring", "postedDate" : "2026-06-13T11:16:05.380", "createdAt" : "2026-06-13T11:16:05.380", "lastUpdated" : "2026-06-15T02:14:41.009", "ingestTimestamp" : "2026-06-13T11:16:05.380", "mongoId" : "68c2e418f8b1b0376634c36a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3079013/apply", "salaryAnnualMin" : 125500, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Incident response lifecycle", "Security monitoring", "Response activities", "Threat hunting", "Detection engineering", "Malware analysis", "Forensics", "Security operations", "Security intelligence", "Leadership", "Curiosity", "Critical thinking", "Incident response", "Security engineering", "Threat intelligence", "Operating system security", "Network security", "Cryptography", "Software security", "Cloud provider", "SOAR", "SIEM platforms" ], "skillCount" : 22, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 428.18192, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Computing" }, { "id" : "6a305a35f292fd229cf4e392", "title" : "Security Guard", "industry" : "Glassboro", "salary" : { "min" : 18.5, "max" : 18.5, "currency" : "USD", "frequency" : "bi-week-salary" }, "location" : "Glassboro, New Jersey", "locations" : [ "Glassboro, New Jersey" ], "certifications" : [ "Formal security training", "Security certifications" ], "timestamp" : "2026-06-16T12:49:33.227", "fingerprint" : "699b14726ecbdf3b8941e5afdab9904003e40c9cb34e53e0c3506ea6917cd09c", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/restore-dispensaries/a3b3f556-d5a0-4227-a03e-744cf582e5f5/apply", "externalId" : "a3b3f556-d5a0-4227-a03e-744cf582e5f5", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Glassboro", "state" : "New Jersey", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.7027677,-75.1119434" } ], "locationText" : "Glassboro, New Jersey, United States", "employmentType" : "PART_TIME", "minimumEducation" : "High School", "technicalSkills" : "CCTV systems, Surveillance monitoring", "professionalSkills" : [ "Conflict resolution", "Asset protection" ], "hardSkillsList" : [ "Access control", "Inventory transfer", "Incident documentation" ], "softSkillsList" : [ "Discretion", "Confidentiality", "Adaptability", "Decision-making" ], "hardSkills" : [ { "name" : "Access control", "level" : "intermediate" }, { "name" : "Inventory transfer", "level" : "intermediate" }, { "name" : "Incident documentation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Discretion" }, { "name" : "Confidentiality" }, { "name" : "Adaptability" }, { "name" : "Decision-making" } ], "majorSkills" : "Site security, Access control, Incident response", "majorSkillsList" : [ "Site security", "Access control", "Incident response" ], "coreResponsibilities" : "Maintain site security protocols, Monitor restricted access areas, Verify credentials upon entry, Conduct routine inspections, Supervise CCTV systems, Monitor live surveillance feeds, Support product deliveries, Ensure secure transfer of inventory, Maintain strict access control, Maintain visitor logs, De-escalate tense situations, Protect company assets, Protect patients, Protect team members, Coordinate with management, Complete incident documentation", "teamCollaboration" : "Coordinate with management; Respectful communication with staff", "domainKnowledge" : "Company policy; State regulations; Regulated industries", "domainList" : [ "company-policy", "state-regulations", "regulated-industries" ], "domainSpecificKnowledge" : [ "Company policy", "State regulations", "Regulated industries" ], "toolProficiency" : [ "CCTV systems" ], "communicationSkills" : "De-escalation skills; Respectful communication", "documentationSkills" : "Incident documentation", "problemSolvingSkills" : "Decision-making", "specialRequirements" : "Flexibility to work rotating shifts, Comfort working in dynamic retail environment", "outcomesObjectives" : "Protect company assets; Protect patients; Protect team members", "qualificationsBasic" : "Prior experience in security, Observational skills, Attention to detail, Ability to remain calm, Ability to follow structured protocols, Ability to work rotating shifts", "qualificationsPreferred" : "Experience with CCTV systems, Experience with surveillance monitoring, Formal security training, Security certifications", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "## Key Responsibilities Maintain site security protocols in accordance with company policy and state regulations Monitor restricted access areas and verify credentials upon entry Conduct routine interior and exterior perimeter inspections Supervise CCTV systems and monitor live surveillance feeds Support product deliveries and ensure secure transfer of inventory Maintain strict access control and visitor logs De-escalate tense or potentially risky situations using professional conflict-resolution techniques Protect company assets, patients, and team members Coordinate with management regarding security concerns or incidents Complete required incident documentation accurately and promptly Maintain a visible, professional presence at the storefront ## Required Qualifications Prior experience in security, loss prevention, or related protective services role Strong observational skills and attention to detail Ability to remain calm and professional in high-pressure situations Experience with CCTV systems or surveillance monitoring preferred Strong communication and de-escalation skills Ability to follow structured protocols and regulatory requirements Flexibility to work rotating shifts, including opening and closing ## What You Bring Accountability Commitment to safety and compliance Reliability and punctuality Strong sense of responsibility for asset protection Professionalism Calm and composed demeanor Respectful communication with patients and staff Discretion and confidentiality Adaptability Ability to assess evolving situations Quick, sound decision-making Comfort working in a dynamic retail environment ## Bonus If You Have Experience in regulated industries (cannabis, pharmacy, banking, etc.) Formal security training or certifications Proven experience in incident response and documentation Strong situational awareness and a preventative mindset", "summaryDescription" : "Security Guard. Skills: Site security, Access control, Incident response. Maintain site security protocols. Monitor restricted access areas", "postedDate" : "2026-06-15T11:59:33.776", "createdAt" : "2026-06-15T11:59:33.776", "lastUpdated" : "2026-06-16T12:49:33.227", "ingestTimestamp" : "2026-06-16T03:22:21.896", "mongoId" : "6a305a35f292fd229cf4e392", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMax" : 18, "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Access control", "Inventory transfer", "Incident documentation", "Discretion", "Confidentiality", "Adaptability", "Decision-making", "Site security", "Incident response", "Conflict resolution", "Asset protection", "Company policy", "State regulations", "Regulated industries", "Formal security training", "Security certifications", "CCTV systems" ], "skillCount" : 17, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Entry", "dataQualityScore" : 0.7777778, "_score" : 425.73547, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Retail", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6bcd74d8ee00a0914a7e", "title" : "2026 Security Analyst - Early Career Rotation Program", "company" : "Anduril Industries", "industry" : "Technology", "salary" : { "min" : 85000.0, "max" : 115000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for entry-level security analysts in the US, adjusted for the defense technology industry in a high cost-of-living area like Costa Mesa, California." }, "location" : "Costa Mesa, California, United States", "locations" : [ "Costa Mesa", "California", "United States" ], "timestamp" : "2026-06-16T05:38:00.692", "fingerprint" : "78984d156692e01025df53984ec263a52d0b127bf8e569f44afcc2c579307b5d", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://boards.greenhouse.io/andurilindustries/jobs/5159902007?gh_jid=5159902007", "externalId" : "5159902007", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Costa Mesa", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6633386,-117.9033170" } ], "locationText" : "Costa Mesa, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 0, "experienceMaxYears" : 2, "experienceLevel" : "Entry", "softSkillsList" : [ "Adaptability", "Discretion" ], "softSkills" : [ { "name" : "Adaptability" }, { "name" : "Discretion" } ], "majorSkills" : "Corporate Security", "majorSkillsList" : [ "Corporate Security" ], "coreResponsibilities" : "Rotate through four key Corporate Security teams, Develop comprehensive understanding of Corporate Security functions, Gain hands-on experience across security disciplines, Support Strategic Security Services, Support Global Security Operations, Support Specialty Programs, Support Technical Security, Learn foundational knowledge base, Develop critical skills", "teamCollaboration" : "Cross-functional teams", "domainKnowledge" : "Defense technology; Military capabilities; AI; Autonomy; Computer vision; Sensor fusion; Networking technology; Corporate security", "domainList" : [ "defense-technology", "military-capabilities", "ai", "autonomy", "computer-vision", "sensor-fusion", "networking-technology", "corporate-security" ], "domainSpecificKnowledge" : [ "Defense technology", "Military capabilities", "AI", "Autonomy", "Computer vision", "Sensor fusion", "Networking technology", "Corporate security" ], "continuousLearning" : "Rotational program", "problemSolvingSkills" : "Problem-solving", "specialRequirements" : "12-month program, 4 months per rotation", "outcomesObjectives" : "Springboard for successful career", "qualificationsBasic" : "Recent graduate", "qualificationsPreferred" : "Impeccable analytical abilities, Keen attention to detail, High degree of adaptability, High degree of discretion", "workSiteFlexibility" : "Onsite", "rawDescription" : "Anduril Industries is a defense technology company with a mission to transform U. S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century’s most innovative companies to the defense industry, Anduril is changing how military systems are designed, built and sold. Anduril’s family of systems is powered by Lattice OS, an AI-powered operating system that turns thousands of data streams into a realtime, 3D command and control center. As the world enters an era of strategic competition, Anduril is committed to bringing cutting-edge autonomy, AI, computer vision, sensor fusion, and networking technology to the military in months, not years. ABOUT THE JOB The Anduril Corporate Security team is looking for emerging leaders to join its inaugural Emerging Talent Rotational Program in Costa Mesa, CA. In this role, you will develop a comprehensive understanding of how Anduril's Corporate Security team functions to protect our people, assets, and information, enabling the company's mission and growth. You will gain hands-on experience across four critical security disciplines: Strategic Security Services, Global Security Operations, Specialty Programs, and Technical Security. This program will establish a foundational knowledge base and critical skills that will be a springboard for a successful career in corporate security. We are looking for proactive problem-solvers with impeccable analytical abilities, keen attention to detail, and a high degree of adaptability and discretion. If you are a highly motivated recent grad, who is eager to learn and make a visible impact in safeguarding a cutting-edge technology company, this program is for you. WHAT YOU’LL DO Rotate through four key Corporate Security teams over 12 months (4 months each): Rotation 1: Strategic Security Services (Travel Security, GSOC and are considered part of Anduril's total compensation package. Additionally, Anduril offers top-tier benefits for full-time employees, including: Benefits At Anduril, we invest in our people. Our comprehensive, competitive benefits package (available at little to no cost to employees) ensures you’re supported in health, recovery, and whatever comes next. For more information, Explore Our Benefits. Protecting Yourself from Recruitment Scams Anduril is committed to maintaining the integrity of our Talent acquisition process and the security of our candidates. We've observed a rise in sophisticated phishing and fraudulent schemes where individuals impersonate Anduril representatives, luring job seekers with false interviews or job offers. These scammers often attempt to extract payment or sensitive personal information. To ensure your safety and help you navigate your job search with confidence, please keep the following critical points in mind: No Financial Requests: Anduril will never solicit payment or demand personal financial details (such as banking information, credit card numbers, or social security numbers) at any stage of our hiring process. Our legitimate recruitment is entirely free for candidates. Please always verify communications: Direct from Anduril: If you receive an email from one of our recruiters, it will only come from an @anduril.com address. Via Agency Partner: If contacted by a recruiting agency for an Anduril role, their email will clearly identify their agency. If you suspect any suspicious activity, please verify the agency's authenticity by reaching out to contact@anduril.com. Exercise Caution with Unsolicited Outreach: If you receive any communication that appears suspicious, contains grammatical errors, or makes unusual requests, do not engage. Always confirm the sender's email domain is @anduril.com before providing any personal information or clicking on links. What to Do If You Suspect Fraud: Should you encounter any questionable or fraudulent outreach claiming to be from Anduril, please report it immediately to contact@anduril.com. Your proactive caution is invaluable in protecting your personal information and upholding the security and trustworthiness of our recruitment efforts. Data Privacy To view Anduril's candidate data privacy policy, please visit https://anduril.com/applicant-privacy-notice/. By submitting your application, you consent to Anduril Industries using a third-party service provider to conduct pre-employment risk, integrity, and due diligence screening and assessing potential risks as part of your application process. This third-party service provider provides risk-intelligence services that may include analysis of sanctions and watchlists, adverse media, public-record information, and other lawful open-source or commercial data sources. This third-party service provider does not act as a consumer reporting agency. Use of this provider helps to ensure compliance with applicable laws and protect technology, intellectual property, and organizational security.", "summaryDescription" : "2026 Security Analyst - Early Career Rotation Program at Anduril Industries. Skills: Corporate Security. Rotate through four key Corporate Security teams. Develop comprehensive understanding of Corporate Security functions", "postedDate" : "2026-06-14T19:07:38.050", "createdAt" : "2026-06-14T19:07:38.050", "lastUpdated" : "2026-06-16T05:38:00.692", "ingestTimestamp" : "2026-06-14T19:07:38.050", "mongoId" : "6a2c6bcd74d8ee00a0914a7e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 85000, "salaryAnnualMax" : 115000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Adaptability", "Discretion", "Corporate Security", "Defense technology", "Military capabilities", "AI", "Autonomy", "Computer vision", "Sensor fusion", "Networking technology", "Corporate security" ], "skillCount" : 11, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Entry", "dataQualityScore" : 1.0, "_score" : 423.6771, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Defense Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a30511af292fd229cefa87a", "title" : "Vector Command Specialist", "industry" : "IT", "salary" : { "min" : 60000.0, "max" : 90000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Bulgaria, adjusted for mid-seniority in the cybersecurity industry." }, "location" : "US", "locations" : [ "US" ], "timestamp" : "2026-06-16T11:24:18.124", "fingerprint" : "476026a0901de633c4e62f03338b1285a95ea5047730da953032338cc4950b0f", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/3d22a7ec-740b-4efe-bf7e-2ed28423d546/apply", "externalId" : "3d22a7ec-740b-4efe-bf7e-2ed28423d546", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "employmentType" : "FULL_TIME", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Python, PowerShell, Bash", "professionalSkills" : [ "External reconnaissance", "OSINT research", "Vulnerability validation", "Security reporting", "Remediation guidance", "Customer onboarding", "Attack surface management" ], "hardSkillsList" : [ "External reconnaissance", "OSINT methodologies", "Vulnerability validation", "Scripting", "Data analysis" ], "softSkillsList" : [ "Analytical", "Problem-solving" ], "hardSkills" : [ { "name" : "External reconnaissance", "level" : "intermediate" }, { "name" : "OSINT methodologies", "level" : "intermediate" }, { "name" : "Vulnerability validation", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Analytical" }, { "name" : "Problem-solving" } ], "majorSkills" : "Attack surface management, External reconnaissance, OSINT, Vulnerability validation", "majorSkillsList" : [ "Attack surface management", "External reconnaissance", "OSINT", "Vulnerability validation" ], "coreResponsibilities" : "Onboard customers to platforms, Ensure adoption of Vector Command, Conduct manual external reconnaissance, Conduct exposure validation, Conduct OSINT research, Identify customer attack surfaces, Assess customer security risks, Serve as technical liaison, Manage customer communications, Oversee security report accuracy, Oversee security report quality, Oversee security report timeliness, Ensure report consistency, Ensure report technical rigor, Translate security findings, Provide remediation guidance, Coordinate customer update sessions, Coordinate red team review calls, Partner with internal security teams, Align findings internally, Prioritize exposures, Support remediation planning, Track evolving customer attack surfaces, Identify changes in exposure", "teamCollaboration" : "Cross-functional security teams; Offensive security leadership", "domainKnowledge" : "External attack surface management; Offensive security; Penetration testing; Cybersecurity; Network fundamentals; Web application security; Windows operating systems; Linux operating systems", "domainList" : [ "external-attack-surface-management", "offensive-security", "penetration-testing", "cybersecurity", "network-fundamentals", "web-application-security", "windows-operating-systems", "linux-operating-systems" ], "domainSpecificKnowledge" : [ "External attack surface management", "Offensive security", "Penetration testing", "Cybersecurity", "Network fundamentals", "Web application security", "Windows operating systems", "Linux operating systems" ], "toolProficiency" : [ "Vector Command" ], "communicationSkills" : "Customer communication; Technical liaison; Actionable recommendations; Customer update sessions; Red team reviews", "documentationSkills" : "Security reports", "continuousLearning" : "Professional development opportunities", "problemSolvingSkills" : "Analytical mindset; Problem-solving mindset; Troubleshooting", "outcomesObjectives" : "Ensure smooth adoption; Identify and assess risks; Ensure consistency and rigor; Tailor guidance to stakeholders; Proactively identify changes", "qualificationsBasic" : "3+ years offensive security experience, 3+ years penetration testing experience, 3+ years technical security consulting experience, External attack surface reconnaissance expertise, OSINT methodologies expertise, Manual vulnerability validation techniques expertise, Solid understanding of networking fundamentals, Solid understanding of web application security, Solid understanding of Windows operating systems, Solid understanding of Linux operating systems, Ability to write scripts in Python, Ability to use scripts in Python, Ability to write scripts in PowerShell, Ability to use scripts in PowerShell, Ability to write scripts in Bash, Ability to use scripts in Bash, Experience translating technical findings, Ability to break down complex environments", "qualificationsPreferred" : "Python automation experience, PowerShell automation experience, Bash automation experience, Python dataset analysis experience, PowerShell dataset analysis experience, Bash dataset analysis experience, Clear, structured recommendations experience, Actionable recommendations experience, Analytical mindset, Problem-solving mindset", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Accountabilities Onboard customers to external attack surface management platforms and ensure smooth adoption of Vector Command technologies and workflows. Conduct manual external reconnaissance, exposure validation, and OSINT research to identify and assess customer attack surfaces and security risks. Serve as the primary technical liaison for customers, managing communications related to alerts, testing activities, red team operations, and ongoing security assessments. Oversee the accuracy, quality, and timeliness of customer-facing security reports and deliverables, ensuring consistency and technical rigor. Translate complex offensive security findings into clear, actionable remediation guidance tailored to both technical teams and business stakeholders. Coordinate monthly customer update sessions and red team review calls in collaboration with offensive security leadership. Partner cross-functionally with internal security teams to align findings, prioritize exposures, and support remediation planning. Track evolving customer attack surfaces and proactively identify changes in exposure that may impact security posture. Requirements: 3+ years of experience in offensive security, penetration testing, or technical security consulting roles. Strong expertise in external attack surface reconnaissance, OSINT methodologies, and manual vulnerability validation techniques. Solid understanding of networking fundamentals, web application security, and Windows/Linux operating systems. Ability to write and use scripts in Python, PowerShell, or Bash to automate security tasks and analyze datasets. Experience translating highly technical security findings into clear, structured, and actionable recommendations. Strong ability to break down complex environments into manageable components for assessment and remediation. Excellent communication skills with the ability to engage both technical and non-technical stakeholders. High attention to detail with strong accountability for reporting accuracy and customer deliverables. Strong analytical and problem-solving mindset with the ability to operate in fast-paced, dynamic environments. Benefits: Competitive base salary with performance-based incentives and equity opportunities. Comprehensive healthcare coverage including medical, dental, and vision plans. Retirement savings plan and financial wellness benefits. Flexible remote work arrangements supporting work-life balance. Paid time off and company holiday programs. Professional development opportunities within a leading cybersecurity environment. Exposure to advanced offensive security methodologies and enterprise-scale attack surface management. Opportunity to work directly with customers and security leaders on high-impact cybersecurity challenges. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Vector Command Specialist. Skills: Attack surface management, External reconnaissance, OSINT, Vulnerability validation. Onboard customers to platforms. Ensure adoption of Vector Command", "postedDate" : "2026-06-15T09:56:33.687", "createdAt" : "2026-06-15T09:56:33.687", "lastUpdated" : "2026-06-16T11:24:18.124", "ingestTimestamp" : "2026-06-16T03:22:33.022", "mongoId" : "6a30511af292fd229cefa87a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "External reconnaissance", "OSINT methodologies", "Vulnerability validation", "Scripting", "Data analysis", "Analytical", "Problem-solving", "Attack surface management", "OSINT", "OSINT research", "Security reporting", "Remediation guidance", "Customer onboarding", "External attack surface management", "Offensive security", "Penetration testing", "Cybersecurity", "Network fundamentals", "Web application security", "Windows operating systems", "Linux operating systems", "Vector Command" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 418.4475, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.95 }, { "id" : "69c94a6b9bc74574cbbb35f2", "title" : "Security Engineer, Corporate Services Security", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 159300.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Boston, Massachusetts, USA", "locations" : [ "Boston, Massachusetts, USA" ], "timestamp" : "2026-06-15T01:54:29.606", "fingerprint" : "27bd63fbca333b4a8a93086e06f8561205780056b58d0a62966b5694b4a38a5a", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3193009/apply", "externalId" : "8e1140d5-aa7c-4966-90dc-3560c0129722", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Boston", "state" : "Massachusetts", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "42.3588336,-71.0578303" } ], "locationText" : "Boston, Massachusetts, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "GenAI Security, Java, Python, Javascript, AWS", "professionalSkills" : [ "Application security", "Security architecture", "Threat modeling", "Secure code review", "Security analysis", "Security training", "Security guidance" ], "hardSkillsList" : [ "Identity management", "Authentication", "Cryptography", "Network security", "Scripting", "Programming", "Security code review", "Log analysis", "Automation" ], "softSkillsList" : [ "Context switching", "Tolerance for interruptions" ], "hardSkills" : [ { "name" : "Identity management", "level" : "intermediate" }, { "name" : "Authentication", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Programming", "level" : "intermediate" }, { "name" : "Security code review", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Context switching" }, { "name" : "Tolerance for interruptions" } ], "majorSkills" : "Application security, GenAI Security, Security architecture", "majorSkillsList" : [ "Application security", "GenAI Security", "Security architecture" ], "coreResponsibilities" : "Perform design and security reviews, Prioritize remediation, Promote security throughout Company, Build working relationships, Handle context switching, Handle interruptions, Escalate issues, Provide recommendations to leadership, Build and improve tooling, Share tooling benefits, Contribute to recruiting, Contribute to mentoring, Contribute to administrative work, Create threat models, Update threat models, Maintain threat models, Perform manual secure code review, Perform automated secure code review, Develop security automation tools, Perform adversarial security analysis, Provide security training, Provide security outreach, Provide security architecture guidance, Provide design guidance, Solve systemic security problems, Solve complex security problems, Influence team process, Influence partner process, Influence team priorities, Influence partner priorities, Influence team choices, Influence partner choices, Provide technical guidance, Provide strategic guidance, Communicate effectively", "teamCollaboration" : "Partner with builder teams; Work with service team; Work with development teams; Work with partners", "projectManagementSkills" : [ "Security backlog management", "Prioritization", "Tracking" ], "domainKnowledge" : "Application security; GenAI Security; Finance security; Communication security; Corporate security; Organizational security policies; Industry standards", "domainList" : [ "application-security", "genai-security", "finance-security", "communication-security", "corporate-security", "organizational-security-policies", "industry-standards" ], "domainSpecificKnowledge" : [ "Application security", "GenAI Security", "Finance security", "Communication security", "Corporate security", "Organizational security policies", "Industry standards" ], "toolProficiency" : [ "Security tooling" ], "communicationSkills" : "Technical communication; Oral communication; Written communication", "documentationSkills" : "Threat models", "continuousLearning" : "Gain new security skills", "innovationCreativity" : "Build novel services; Build new framework; Fine-tune design", "problemSolvingSkills" : "Security consultations; Security guidance; Issue remediation; Vulnerability remediation; Compliance gap remediation; Systemic problems; Complex problems; Novel methods", "outcomesObjectives" : "Minimize security risks; Build security in; Improve security outcomes", "qualificationsBasic" : "4+ years threat modeling, secure coding, identity management, software development, cryptography, system administration, network security, 2+ years scripting, programming, security code review, Bachelor's degree in computer science, Knowledge of industry security vulnerabilities and remediation", "qualificationsPreferred" : "Experience with AWS products, Experience with Python, Experience with Java, Experience with C++, Knowledge of command line tools", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Corporate Services Security (CPSS) Finance and Communication Security (FCS) Team is responsible for securing the applications, infrastructure and data developed across Finance & Global Business Services (FGBS) and Communications and Corporate Responsibility (CCR). We partner with builder teams to minimize security risks across their applications while being a business enabler. Our team is responsible for the following: 1.Security consultations and guidance - Get expert advice on security best practices and implementation strategies 2.Application security reviews and threat modeling -Comprehensive security assessments for new features and applications 3.Security architecture decisions - Design reviews and architectural guidance to build security in from the start 4.Issue remediation - Support for addressing security findings, vulnerabilities, and compliance gaps 5.Security backlog management - Prioritization and tracking of security improvements and technical backlog 6.Compliance and security standards questions - Guidance on meeting organizational security policies and industry standards 7.Security tooling and automation - Help with integrating security tools into your development workflows Key job responsibilities A successful candidate will possess demonstrated combination of application security, GenAI Security, technical, and communication skills, as well as the ability to handle a mix of disparate tasks and include projects in addition to managing security review activities. This role will provide career growth opportunities as you gain new security skills in the course of your duties. Perform Design and Security Reviews to determine the level of risk they present to our customers, and then accordingly prioritize their remediation in conjunction with the service team. Participate in efforts to promote security throughout the Company and build good working relationships within the team and with others across Amazon Demonstrate high capacity and tolerance for context switching and interruptions while remaining productive and effective Escalate issues and provide recommendations to senior leadership when issues are not progressing at the correct pace based on impact to ensure we are putting customers first. Explore building and improving our tooling to make your own life easier and share that benefit with all our engineers globally. Contribute to recruiting activities, mentoring and administrative work Create, update, and maintain threat models for a wide variety of software projects Perform Manual and Automated Secure Code Review, primarily in Java, Python and Javascript Develop security automation tools Adversarial security analysis using tools to augment manual effort Provide Security training and outreach for internal development teams Provide Security architecture and design guidance to application development teams Independently solve systemic, complex security problems that require novel methods or approaches Influence your team’s and partners’ process, priorities, and choices by using data to improve security outcomes Provide technical and strategic guidance to senior leaders and stakeholders through effective oral and written communications A day in the life As a Security Engineer, you will collaborate with application development teams to ensure we keep our customers safe while developing novel services using GenAI. In a given day, you might be inspecting an application’s code for security issues, building a new framework to help our software developers build faster and more securely, or fine-tuning the design for a new service. The ideal candidate combines technical acumen with an ability to lead by influence and communicate clearly. Technically, this person will be a security specialist with one or more areas of deep expertise within application security. They will clearly articulate risks to technical and non-technical audiences alike. Successful candidates will effectively harmonize disparate opinions while effectively prioritizing risks to guide their partners towards secure solutions. The Corporate Services Security (CPSS) Product Security Team is responsible for securing the applications, infrastructure and data developed across People eXperience and Technology (PXT), Finance & Global Business Services (FGBS), Legal and Communications and Corporate Responsibility (CCR). We partner with builder teams to minimize security risks across their applications while being a business enabler. Our team develops security tooling and automation to provide high quality security findings earlier in development lifecycles. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 4+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience - Bachelor's degree in computer science or equivalent - Knowledge of industry-based security vulnerabilities and remediation techniques Preferred Qualifications: - Experience with AWS products and services - Experience with programming languages such as Python, Java, C++ - Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, MA, Boston - 159,300.00 - 202,400.00 USD annually USA, WA, Seattle - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "Security Engineer, Corporate Services Security at Amazon.com Services LLC. Skills: Application security, GenAI Security, Security architecture. Perform design and security reviews. Prioritize remediation", "postedDate" : "2026-06-13T02:06:47.574", "createdAt" : "2026-06-13T02:06:47.574", "lastUpdated" : "2026-06-15T01:54:29.606", "ingestTimestamp" : "2026-06-13T02:06:47.574", "mongoId" : "69c94a6b9bc74574cbbb35f2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3193009/apply", "salaryAnnualMin" : 159300, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Identity management", "Authentication", "Cryptography", "Network security", "Scripting", "Programming", "Security code review", "Log analysis", "Automation", "Context switching", "Tolerance for interruptions", "Application security", "GenAI Security", "Security architecture", "Threat modeling", "Secure code review", "Security analysis", "Security training", "Security guidance", "Security backlog management", "Prioritization", "Tracking", "Finance security", "Communication security", "Corporate security", "Organizational security policies", "Industry standards", "Security tooling" ], "skillCount" : 28, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 411.69513, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a307a55f292fd229c03aba6", "title" : "Manager, AV Incident Management", "company" : "May Mobility", "salary" : { "min" : 150000.0, "max" : 225000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Ann Arbor, Michigan, United States", "locations" : [ "Ann Arbor", "Michigan", "United States" ], "timestamp" : "2026-06-16T10:30:40.536", "fingerprint" : "3053d197eb8333d33227ff4e5ed999fd054ab117a0661ad9829b7a124b47c017", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/maymobility/jobs/8587945002", "externalId" : "8587945002", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Ann Arbor", "state" : "Michigan", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "42.2813722,-83.7484616" } ], "locationText" : "Ann Arbor, Michigan, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "rawDescription" : "May Mobility is transforming cities through autonomous technology to create a safer, greener, more accessible world. Based in Ann Arbor, Michigan, May develops and deploys autonomous vehicles (AVs) powered by our innovative Multi-Policy Decision Making (MPDM) technology that literally reimagines the way AVs think. Our vehicles do more than just drive themselves - they provide value to communities, bridge public transit gaps and move people where they need to go safely, easily and with a lot more fun. We’re building the world’s best autonomy system to reimagine transit by minimizing congestion, expanding access and encouraging better land use in order to foster more green, vibrant and livable spaces. Since our founding in 2017, we’ve given more than 500,000 autonomous rides to real people around the globe. And we’re just getting started. We’re hiring people who share our passion for building the future, today, solving real-world problems and seeing the impact of their work. Join us. Job Summary The Manager, AV Incident Management is responsible for leading May Mobility's incident management function within the Systems Risk Management team. This role owns the end-to-end incident response process across our autonomous vehicle operations, ensuring every incident is identified, managed, and closed in a way that is accurate, timely, and defensible to regulators and partners. As May Mobility scales its fleet and expands toward continuous autonomous operations, this role provides the senior leadership and operational expertise needed to mature our incident management capability in line with that growth. This individual will develop and maintain the processes, standards, and team structures that keep our operations safe and our safety case credible. Essential Responsibilities Lead and continuously improve the incident management process across all AV operational sites, ensuring consistent, high-quality response to incidents of all severities Enable and support regulatory incident reporting, including NHTSA Standing General Order requirements and applicable state-level reporting, ensuring accurate and timely submissions Develop and maintain incident response standards, escalation frameworks, and operational protocols in alignment with May Mobility's safety case and risk management approach Design and lead a tiered incident response team structure that scales effectively with fleet growth, balancing full-time and contract resources to maintain coverage and quality Serve as the primary point of contact for regulators, first responders, and partners during significant incidents, coordinating response and communications in partnership with Legal and Safety leadership Work cross-functionally with Safety, Engineering, Legal, and Operations to ensure incidents drive systemic improvement, not just resolution Develop and lead the talent within the incident management team, building a clear career pathway and ensuring the team has the skills and capacity to meet operational demands Provide regular reporting to senior leadership on incident trends, team performance, and emerging risks Skills and Abilities Success in this role typically requires the following competencies: Deep understanding of AV operations and the regulatory environment governing autonomous vehicle deployment in the United States Proven ability to lead and make decisions under pressure, with clear judgment on escalation and regulatory reporting thresholds Strong process ownership instincts - able to design systems that work consistently across teams and time zones Effective communicator across technical, legal, and executive audiences Ability to build and develop a team from a small base, with a practical approach to scaling that stays ahead of operational demand High integrity in handling sensitive operational and safety information Qualifications and Experience Candidates most successful in this role typically hold the following qualifications or comparable knowledge or experience: Required Qualifications: 7+ years of experience in incident management, safety operations, or crisis management within an autonomous vehicle, aviation, rail, or similarly regulated industry Direct experience owning regulatory incident reporting to federal or state transportation authorities Demonstrated experience designing and implementing escalation structures and on-call coverage models for 24/7 operations Proven track record working across Safety, Engineering, Legal, and Operations functions at a senior level Experience building and leading small, high-performing teams in a fast-paced operational environment Desirable Qualifications: Experience at an AV company that has operated or launched driverless commercial service Background in first responder coordination and external communications during major incidents Familiarity with safety case frameworks and risk-based assessment methodologies Prior military experience, especially those with Special Operations or Officer Command roles, or equivalent Federal or State Government experience Physical Requirements Standard office working conditions which includes but not limited to: Prolonged sitting Prolonged standing Prolonged computer use Travel Required? 0-10% Benefits and Perks Comprehensive healthcare suite including medical, dental, vision, life, and disability plans. Domestic partners who have been residing together at least one year are also eligible to participate. Health Savings and Flexible Spending Healthcare and Dependent Care Accounts available. Rich retirement benefits, including an immediately vested employer safe harbor match. Generous paid parental leave as well as a phased return to work. Flexible vacation policy in addition to paid company holidays. Total Wellness Program providing numerous resources for overall wellbeing Don’t meet every single requirement? Studies have shown that women and/or people of color are less likely to apply to a job unless they meet every qualification. At May Mobility, we’re committed to building a diverse, inclusive, and authentic workforce, so if you’re excited about this role but your previous experience doesn’t align perfectly with every qualification, we encourage you to apply anyway! You may be the perfect candidate for this or another role at May. Want to learn more about our culture & benefits? Check out our website! May Mobility is an equal opportunity employer. All applicants for employment will be considered without regard to race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity or expression, veteran status, genetics or any other legally protected basis. Below, you have the opportunity to share your preferred gender pronouns, gender, ethnicity, and veteran status with May Mobility to help us identify areas of improvement in our hiring and recruitment processes. Completion of these questions is entirely voluntary. Any information you choose to provide will be kept confidential, and will not impact the hiring decision in any way. If you believe that you will need any type of accommodation, please let us know. Note to Recruitment Agencies: May Mobility does not accept unsolicited agency resumes. Furthermore, May Mobility does not pay placement fees for candidates submitted by any agency other than its approved partners. Salary Range $150,000—$225,000 USD", "summaryDescription" : "Manager, AV Incident Management at May Mobility", "postedDate" : "2026-06-16T01:15:48.328", "createdAt" : "2026-06-16T01:15:48.328", "lastUpdated" : "2026-06-16T10:30:40.536", "ingestTimestamp" : "2026-06-16T01:15:48.328", "mongoId" : "6a307a55f292fd229c03aba6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 150000, "salaryAnnualMax" : 225000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 408.76596, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3057f5f292fd229cf3f231", "title" : "Senior Cyber Security Specialist", "company" : "Avaloq", "industry" : "Financial Services", "salary" : { "min" : 135000.0, "max" : 175000.0, "currency" : "CHF", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Cyber Security Specialist in Bioggio, Switzerland, adjusted for the FinTech industry and company size." }, "location" : "Bioggio, Canton Ticino, CH", "locations" : [ "Bioggio", "Canton Ticino", "CH" ], "certifications" : [ "CISSP", "SANS" ], "timestamp" : "2026-06-16T08:14:43.050", "fingerprint" : "bb3bf1fd4e7d55411eb83fbc341b38e2ce2335d962e33ef3f3feb348a180b316", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Avaloq1/744000132197944-senior-cyber-security-specialist", "externalId" : "744000132197944", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bioggio", "state" : "Ticino", "country" : "Switzerland", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "46.0141052,8.9076167" } ], "locationText" : "Bioggio, Ticino, Switzerland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SIEM, EDR, AWS, Azure, Oracle, Splunk", "professionalSkills" : [ "Cyber Security" ], "hardSkillsList" : [ "Incident response", "Threat analysis", "Security monitoring", "Security services management" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Security services management", "level" : "intermediate" } ], "majorSkills" : "Cyber Security Operations, Incident Response, SIEM tuning", "majorSkillsList" : [ "Cyber Security Operations", "Incident Response", "SIEM tuning" ], "coreResponsibilities" : "Handle daily incidents/threats, Correlate alerts, Implement monitoring use cases, Recommend Cyber Security changes, Drive implementation of changes, Manage security services, Manage service provider relationships, Participate in Security projects, Support development of procedures, Provide implementations for threats, Provide recommendations for threats, Protect against threats, Resolve threats, Participate in selection of security solutions, Evaluate security solutions, Improve enterprise security, Manage major Cyber Security Incidents, Support major Cyber Security Incidents, Support on-call rotation, Act as technical Lead, Drive initiatives, Drive projects", "teamCollaboration" : "Global cyber security operations team; Talented team", "domainKnowledge" : "Cyber security domains; Cloud computing; Threat Intelligence Management; Digital Forensics; Cyber Security Incident Response", "domainList" : [ "cyber-security-domains", "cloud-computing", "threat-intelligence-management", "digital-forensics", "cyber-security-incident-response" ], "domainSpecificKnowledge" : [ "Cyber security domains", "Cloud computing", "Threat Intelligence Management", "Digital Forensics", "Cyber Security Incident Response" ], "toolProficiency" : [ "SIEM solutions", "EDR solutions", "Splunk Apps", "SOAR solutions" ], "documentationSkills" : "Documentation", "specialRequirements" : "On-call rotation", "qualificationsBasic" : "4-6 years SOC/CDC experience, SIEM use case creation, SIEM use case tuning, Threat Intelligence Management experience, Fluent in English", "qualificationsPreferred" : "CISSP certification, SANS certification, Splunk Apps experience, Splunk Enterprise Security experience, Splunk search language knowledge, Automation experience, SOAR solutions experience, Digital Forensics experience, Cyber Security Incident Response experience", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Founded and headquartered in Switzerland, Avaloq is continuously expanding its global footprint with around 2,500 colleagues in 12 countries, and more than 170 clients in 35 countries. We are an industry-leading provider of wealth management technology and services for financial institutions around the world, including private banks and wealth managers, investment managers, as well as retail and neo banks. Our research led approach and continual innovation is powered by the passion and creativity of our colleagues. We are always looking for talented people to join us on our mission to orchestrate the financial ecosystem and democratize access to wealth management. Avaloq offers the opportunity to work closely with some of the world’s leading financial institutions as we jointly develop and shape careers. Championing a collaborative, supportive and flexible work environment empowers our colleagues to reach their full potential. We are looking for an individual with a passion for cyber security to work alongside a talented team to Improve and operate a cyber security Center. The role requires a strong background and understanding of all cyber security domains. In this position, you will be part of the global cyber security operations team with focus on identification, analysis and response to cyber security threats and events. You will support the Head of our Cyber Security Operations Center in improving the effectiveness of the team and Leads the planning, implementation, documentation. You can expect a demanding and complex international environment, which is highly stimulating and encouraging. The growth of the company demands your structured and innovative approach, as well as flexibility to a high degree. As a committed team player, you will support developing the maturity of the cyber security operation center, its controls and processes. Your key tasks * Handle daily incidents/threats * Assist correlating alerts, implementing monitoring Use Cases * Recommend Cyber Security changes or enhancements and drive implementation * Manage and cultivate the defined security services and the relationship to our service providers * Participate in organizational Security projects, as required * Support in development processes, and procedures for the team * Provide implementations, recommendations for protecting and resolving threats and incidents * Participate in the selection and evaluation of security solutions, or enhancements to existing cyber security solutions, to improve overall enterprise security * Manage and support in major Cyber Security Incidents * Support in on-call rotation * Act as a technical Lead role model in the team on driving initiatives and projects ## Qualifications * 4-6 years of working experience in a SOC / CDC or similar roles * Working experience in the creation of playbooks and the tuning of SIEM use cases * Deep knowledge and expertise in SIEM and EDR solutions * Solid knowledge about Cloud like (AWS, Azure, Oracle etc) * Working experience in Threat Intelligence Management * Fluent in English (both written and verbal) * Knowledge of German is considered a strong asset It would be a real bonus if you have * Information and Cyber Security certificates like CISSP, SANS or similar * Working experience with Splunk Apps, especially Enterprise Security and knowledge of the Splunk “search”-language * Working experience with automation and SOAR solutions * Working experience in Digital Forensics and Cyber Security Incident Response ## Additional Information We realize that managing work life balance is a challenge we all face in our daily lives and in order to support with this we are pleased to offer hybrid and flexible working for most of our Avaloqers to maintain work life balance and still continue our fantastic Avaloq culture in our global offices. In Avaloq we are proud to embrace diversity and understand the success of our business is built on the power of different opinions, we are whole heartedly committed to fostering an equal opportunity environment and inclusive culture where you can be your true authentic self. We hire, compensate and promote regardless of origin, age, gender identity, sexual orientation or any other fantastic traits that make us all unique, we have done our best to write this advert in an inclusive and neutral way. Please be aware that we will not accept speculative CV submissions for any of our roles from recruitment agencies, and any unsolicited candidate submissions will be exempt from any payment expectations. #LI-Hybrid", "summaryDescription" : "Senior Cyber Security Specialist at Avaloq. Skills: Cyber Security Operations, Incident Response, SIEM tuning. Handle daily incidents/threats. Correlate alerts", "postedDate" : "2026-06-15T13:04:15.000", "createdAt" : "2026-06-15T23:44:55.017", "lastUpdated" : "2026-06-16T08:14:43.050", "ingestTimestamp" : "2026-06-15T23:44:55.017", "mongoId" : "6a3057f5f292fd229cf3f231", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Incident response", "Threat analysis", "Security monitoring", "Security services management", "Cyber Security Operations", "Incident Response", "SIEM tuning", "Cyber Security", "Cyber security domains", "Cloud computing", "Threat Intelligence Management", "Digital Forensics", "Cyber Security Incident Response", "CISSP", "SANS", "SIEM solutions", "EDR solutions", "Splunk Apps", "SOAR solutions" ], "skillCount" : 19, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 406.8681, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305299f292fd229cf0ec61", "title" : "Senior Cyber Security Specialist", "company" : "Avaloq", "industry" : "Financial Services", "salary" : { "min" : 135000.0, "max" : 175000.0, "currency" : "CHF", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Cyber Security Specialist in Bioggio, Switzerland, adjusted for the FinTech industry and company size." }, "location" : "Bioggio, Canton Ticino, CH", "locations" : [ "Bioggio", "Canton Ticino", "CH" ], "certifications" : [ "CISSP", "SANS" ], "timestamp" : "2026-06-16T08:29:37.048", "fingerprint" : "50545fa5c12fe38cf8ac3a90e9d739c9b1a419db521bdc38142890221e997e19", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Avaloq1/744000132197944-senior-cyber-security-specialist", "externalId" : "744000132197944", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bioggio", "state" : "Ticino", "country" : "Switzerland", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "46.0141052,8.9076167" } ], "locationText" : "Bioggio, Ticino, Switzerland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SIEM, EDR, AWS, Azure, Oracle, Splunk", "professionalSkills" : [ "Cyber Security" ], "hardSkillsList" : [ "Incident response", "Threat analysis", "Security monitoring", "Security services management", "Security solution evaluation" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Security services management", "level" : "intermediate" }, { "name" : "Security solution evaluation", "level" : "intermediate" } ], "majorSkills" : "Cyber Security Operations, Incident Response, SIEM Tuning", "majorSkillsList" : [ "Cyber Security Operations", "Incident Response", "SIEM Tuning" ], "coreResponsibilities" : "Handle daily incidents/threats, Correlate alerts, Implement monitoring Use Cases, Recommend Cyber Security changes, Drive implementation of changes, Manage security services, Manage relationship to service providers, Participate in Security projects, Support development of procedures, Provide implementations for threats, Provide recommendations for threats, Provide implementations for incidents, Provide recommendations for incidents, Participate in selection of security solutions, Participate in evaluation of security solutions, Manage major Cyber Security Incidents, Support major Cyber Security Incidents, Support on-call rotation, Act as technical Lead, Drive initiatives, Drive projects", "teamCollaboration" : "Global cyber security operations team; Talented team", "domainKnowledge" : "Cyber security domains; Cloud; Digital Forensics; Cyber Security Incident Response", "domainList" : [ "cyber-security-domains", "cloud", "digital-forensics", "cyber-security-incident-response" ], "domainSpecificKnowledge" : [ "Cyber security domains", "Cloud", "Digital Forensics", "Cyber Security Incident Response" ], "toolProficiency" : [ "SIEM", "EDR", "Splunk Apps", "Splunk Enterprise Security", "SOAR" ], "documentationSkills" : "Documentation", "specialRequirements" : "On-call rotation", "qualificationsBasic" : "4-6 years SOC/CDC experience, SIEM use case creation, SIEM use case tuning, Threat Intelligence Management experience, Fluent in English", "qualificationsPreferred" : "CISSP certification, SANS certification, Splunk Apps experience, Splunk Enterprise Security experience, Splunk search language knowledge, Automation experience, SOAR solutions experience, Digital Forensics experience, Cyber Security Incident Response experience", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Founded and headquartered in Switzerland, Avaloq is continuously expanding its global footprint with around 2,500 colleagues in 12 countries, and more than 170 clients in 35 countries. We are an industry-leading provider of wealth management technology and services for financial institutions around the world, including private banks and wealth managers, investment managers, as well as retail and neo banks. Our research led approach and continual innovation is powered by the passion and creativity of our colleagues. We are always looking for talented people to join us on our mission to orchestrate the financial ecosystem and democratize access to wealth management. Avaloq offers the opportunity to work closely with some of the world’s leading financial institutions as we jointly develop and shape careers. Championing a collaborative, supportive and flexible work environment empowers our colleagues to reach their full potential. We are looking for an individual with a passion for cyber security to work alongside a talented team to Improve and operate a cyber security Center. The role requires a strong background and understanding of all cyber security domains. In this position, you will be part of the global cyber security operations team with focus on identification, analysis and response to cyber security threats and events. You will support the Head of our Cyber Security Operations Center in improving the effectiveness of the team and Leads the planning, implementation, documentation. You can expect a demanding and complex international environment, which is highly stimulating and encouraging. The growth of the company demands your structured and innovative approach, as well as flexibility to a high degree. As a committed team player, you will support developing the maturity of the cyber security operation center, its controls and processes. Your key tasks * Handle daily incidents/threats * Assist correlating alerts, implementing monitoring Use Cases * Recommend Cyber Security changes or enhancements and drive implementation * Manage and cultivate the defined security services and the relationship to our service providers * Participate in organizational Security projects, as required * Support in development processes, and procedures for the team * Provide implementations, recommendations for protecting and resolving threats and incidents * Participate in the selection and evaluation of security solutions, or enhancements to existing cyber security solutions, to improve overall enterprise security * Manage and support in major Cyber Security Incidents * Support in on-call rotation * Act as a technical Lead role model in the team on driving initiatives and projects ## Qualifications * 4-6 years of working experience in a SOC / CDC or similar roles * Working experience in the creation of playbooks and the tuning of SIEM use cases * Deep knowledge and expertise in SIEM and EDR solutions * Solid knowledge about Cloud like (AWS, Azure, Oracle etc) * Working experience in Threat Intelligence Management * Fluent in English (both written and verbal) * Knowledge of German is considered a strong asset It would be a real bonus if you have * Information and Cyber Security certificates like CISSP, SANS or similar * Working experience with Splunk Apps, especially Enterprise Security and knowledge of the Splunk “search”-language * Working experience with automation and SOAR solutions * Working experience in Digital Forensics and Cyber Security Incident Response ## Additional Information We realize that managing work life balance is a challenge we all face in our daily lives and in order to support with this we are pleased to offer hybrid and flexible working for most of our Avaloqers to maintain work life balance and still continue our fantastic Avaloq culture in our global offices. In Avaloq we are proud to embrace diversity and understand the success of our business is built on the power of different opinions, we are whole heartedly committed to fostering an equal opportunity environment and inclusive culture where you can be your true authentic self. We hire, compensate and promote regardless of origin, age, gender identity, sexual orientation or any other fantastic traits that make us all unique, we have done our best to write this advert in an inclusive and neutral way. Please be aware that we will not accept speculative CV submissions for any of our roles from recruitment agencies, and any unsolicited candidate submissions will be exempt from any payment expectations. #LI-Hybrid", "summaryDescription" : "Senior Cyber Security Specialist at Avaloq. Skills: Cyber Security Operations, Incident Response, SIEM Tuning. Handle daily incidents/threats. Correlate alerts", "postedDate" : "2026-06-15T13:04:15.000", "createdAt" : "2026-06-15T21:55:54.859", "lastUpdated" : "2026-06-16T08:29:37.048", "ingestTimestamp" : "2026-06-15T21:55:54.859", "mongoId" : "6a305299f292fd229cf0ec61", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Incident response", "Threat analysis", "Security monitoring", "Security services management", "Security solution evaluation", "Cyber Security Operations", "Incident Response", "SIEM Tuning", "Cyber Security", "Cyber security domains", "Cloud", "Digital Forensics", "Cyber Security Incident Response", "CISSP", "SANS", "SIEM", "EDR", "Splunk Apps", "Splunk Enterprise Security", "SOAR" ], "skillCount" : 20, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 406.8681, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a307252f292fd229cffcfe8", "title" : "Service Desk Incident Manager", "company" : "Link Solutions, Inc.", "industry" : "Information Technology And Services", "salary" : { "min" : 42000.0, "max" : 62000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Aberdeen Proving Ground, MD, United States", "locations" : [ "Aberdeen Proving Ground", "MD", "United States" ], "certifications" : [ "IAT Level II", "Microsoft 365 Certified: Endpoint Administrator Associate", "ITIL v4", "Microsoft operating system environment certification" ], "timestamp" : "2026-06-16T11:11:21.732", "fingerprint" : "800cd0221c425842d51bf55500bd1e37e5403736f8470c813b02d211cdf47b8c", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/LinkSolutionsInc/744000132276730-service-desk-incident-manager", "externalId" : "744000132276730", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Aberdeen Proving Ground", "state" : "Maryland", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.3890776,-76.2305823" } ], "locationText" : "Aberdeen Proving Ground, Maryland, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "mid", "technicalSkills" : "Microsoft Office, Microsoft 365", "professionalSkills" : [ "Problem solver", "Troubleshooter" ], "hardSkillsList" : [ "Incident management", "Service request management" ], "hardSkills" : [ { "name" : "Incident management", "level" : "intermediate" }, { "name" : "Service request management", "level" : "intermediate" } ], "majorSkills" : "Incident management, Service request management, Process improvement", "majorSkillsList" : [ "Incident management", "Service request management", "Process improvement" ], "coreResponsibilities" : "Oversee service request queue, Monitor ticket management system, Track service requests, Report on service requests, Lead incident response activities, Coordinate with Service Desk Leads, Coordinate with technical support teams, Track high-priority incidents, Manage high-priority incidents, Implement metrics-driven processes, Enforce metrics-driven processes, Identify incident trends, Analyze incident trends, Ensure SLAs are met, Support compliance requirements", "teamCollaboration" : "Coordinate with technical support teams", "domainKnowledge" : "DoD standards; DoD IT environments", "domainList" : [ "dod-standards", "dod-it-environments" ], "domainSpecificKnowledge" : [ "DoD standards", "DoD IT environments" ], "toolProficiency" : [ "ServiceNow ITSM" ], "communicationSkills" : "Written communication; Oral communication", "documentationSkills" : "Technical process documentation; Procedure documentation", "continuousLearning" : "Certification reimbursement", "problemSolvingSkills" : "Problem solving; Troubleshooting", "specialRequirements" : "U. S. Citizen, Active DoW Secret Clearance, Non-remote", "outcomesObjectives" : "Improve efficiency; Improve service delivery; Contribute to mission success; Contribute to national security", "qualificationsBasic" : "U. S. Citizen with active DoW Secret Clearance, Five (5+) years IT or Service Desk experience OR BAS degree with two (2+) years IT or Service Desk experience, IAT Level II Certification equivalent or higher, Microsoft Office products proficiency, Receive Microsoft 365 Certified: Endpoint Administrator Associate within 6 months", "qualificationsPreferred" : "Experience in Department of Defense environment, ITIL v4 certification, Microsoft operating system environment certification, Experience with ServiceNow ITSM platform, Experience creating and modifying documentation, Excellent communication skills, Excellent organizational skills, Ability to prioritize and manage multiple tasks", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Link Solutions, Inc. delivers reliable and effective Information Technology services to government clients in support of critical mission needs. Delivering a broad range of Infrastructure Operations, Application Development, Cybersecurity, Virtualization, Cloud and Mobility services. If you’re looking for a technology company that values innovation, with a vision toward the future of the technology landscape, look no further than Link Solutions! Link is quality and compliance-focused, under our guiding philosophy, “Mission First, Customer Always\". We are certified in ISO 9001:2015, ISO 20000-1:2018, and ISO 27001:2022; CMMC Level 2 certified; and appraised at CMMI Maturity Level 3 for Services and Development. Link Solutions is seeking a Service Desk Incident Manager to join our team at Aberdeen Proving Ground, MD. * U.S. Citizen with an active DoW Secret Clearance * IAT Level II certification equivalent or higher * Non-remote (relocation incentive available) In this critical role, the Service Desk Incident Manager will lead the coordination and execution of incident management and service request processes, ensuring seamless operations in support of the Army Research Laboratory’s vital mission. This position is responsible for driving efficient resolution, maintaining operational readiness, and continuously improving service delivery in alignment with Department of Defense (DoD) standards and industry best practices. The ideal candidate will play a key role in enhancing performance, streamlining processes, and fostering a culture of accountability and excellence—ultimately ensuring that technical support services directly contribute to mission success and national security objectives. Job Responsibilities: * Oversee and manage the service request queue, ensuring timely intake, assignment, escalation, and resolution of incidents. * Utilize the ticket management system to monitor, track, and report on service requests and incident statuses. * Lead incident response activities by coordinating with Service Desk Leads and technical support teams. * Track and manage high-priority incidents, ensuring proper escalation paths and communication protocols. * Implement and enforce metrics-driven processes to improve efficiency and service delivery. * Identify and analyze incident trends to drive problem management and continuous improvement efforts. * Ensure service level agreements (SLAs) are met and support compliance requirements for DoD IT environments. Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. ## Qualifications * U.S. Citizen with an active DoW Secret Clearance * Five (5+) years of relevant experience working in an IT or Service Desk environment OR a BA/BS degree in Information Technology, Computer Science, Engineering, or related field with two (2+) years of experience working in an IT or Service Desk environment. * IAT Level II Certification equivalent or higher per DoD 8570/DoD 8140 (CompTIA Security+ CE, CCNA Security, GICSP, GSEC, SSCP, etc.). * A problem solver and troubleshooter who thrives in resolving complex problems. * Strong self-starter requiring minimal supervision. * Proficiency with Microsoft Office products. * Must receive Microsoft 365 Certified: Endpoint Administrator Associate, or equivalent, within 6 months of start date. Preferred * Experience working in a Department of Defense (DoD) environment. * Information Technology Infrastructure Library (ITIL) v4 certification A Microsoft operating system environment certification (e.g., Windows 10, Windows 11, or Microsoft Server 2019, etc.). * Experience with incident management within the ServiceNow Information Technology Service Management (ITSM) platform. * Experience creating and modifying documentation for technical processes and procedures. * Excellent communication skills (written and oral) and interpersonal skills. * Excellent organizational skills, attention to detail, and ability to prioritize and manage multiple tasks. Salary Range: $42,000 - $62,000 Several factors influence the final salary or hourly rate, including but not limited to contract wage determinations, relevant work experience, role-specific skills and competencies, geographic location, educational background, certifications, and federal government contract labor categories. ## Additional Information Link Solutions Inc. offers a competitive compensation and benefits package to include paid holidays, paid time off, medical, dental, vision, company-paid long and short-term disability, life insurance, referral bonuses, relocation incentive program, certification reimbursement program, retirement, and more. Link Solutions, Inc. is an EOE. AA/M/F/D/V. We participate in the E-Verify Employment Verification Program. All your information will be kept confidential according to EEO guidelines.", "summaryDescription" : "Service Desk Incident Manager at Link Solutions, Inc.. Skills: Incident management, Service request management, Process improvement. Oversee service request queue. Monitor ticket management system", "postedDate" : "2026-06-15T20:00:03.000", "createdAt" : "2026-06-16T01:35:52.828", "lastUpdated" : "2026-06-16T11:11:21.732", "ingestTimestamp" : "2026-06-16T01:35:52.828", "mongoId" : "6a307252f292fd229cffcfe8", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 42000, "salaryAnnualMax" : 62000, "salaryBand" : "30k-50k", "hasSalary" : true, "allSkills" : [ "Incident management", "Service request management", "Process improvement", "Problem solver", "Troubleshooter", "DoD standards", "DoD IT environments", "IAT Level II", "Microsoft 365 Certified: Endpoint Administrator Associate", "ITIL v4", "Microsoft operating system environment certification", "ServiceNow ITSM" ], "skillCount" : 12, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "_score" : 404.59238, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305569f292fd229cf1f517", "title" : "Lead IT Security Analyst", "company" : "Culina Group", "industry" : "Logistics And Supply Chain", "salary" : { "min" : 75000.0, "max" : 105000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Lead IT Security Analyst in Lutterworth, United Kingdom, adjusted for the logistics industry and company size." }, "location" : "lutterworth , United Kingdom", "locations" : [ "lutterworth ", "United Kingdom" ], "certifications" : [ "YSA+", "AZ-500", "CCNA Security", "CEH" ], "timestamp" : "2026-06-16T09:33:29.877", "fingerprint" : "a85d64477494a256b1fa39a8bad5337abc5a42219c71d72e2274b6f706b402af", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/CulinaGroup1/744000132259622-lead-it-security-analyst", "externalId" : "744000132259622", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Lutterworth", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.4552224,-1.1997815" } ], "locationText" : "Lutterworth, United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SIEM, EDR, Firewalls, Network security, IAM, DLP, Email security, Vulnerability scanning, Cloud platforms, Hybrid infrastructures", "professionalSkills" : [ "Threat intelligence analysis", "Security assessments", "Architecture reviews", "Access controls", "Identity management", "Privileged access", "Tool lifecycle management", "Technology evaluation", "Roadmap contribution", "Stakeholder engagement", "Technical advising", "Security-by-design principles" ], "hardSkillsList" : [ "Incident response", "Root cause analysis", "Threat detection", "Security operations", "Vulnerability management", "Secure configuration", "Access control management", "Identity management", "Privileged access management" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Root cause analysis", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Secure configuration", "level" : "intermediate" }, { "name" : "Access control management", "level" : "intermediate" }, { "name" : "Identity management", "level" : "intermediate" }, { "name" : "Privileged access management", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Cyber security operations, Infrastructure protection, Vulnerability management, Incident response", "majorSkillsList" : [ "Cyber security operations", "Infrastructure protection", "Vulnerability management", "Incident response" ], "coreResponsibilities" : "Act as senior escalation point, Lead cyber incident response, Oversee security operations, Ensure effective configuration, Collaborate with managed security providers, Lead vulnerability management programme, Coordinate remediation activities, Analyse threat intelligence, Provide clear recommendations, Conduct security assessments, Support secure architecture reviews, Ensure secure configuration standards, Review and strengthen access controls, Maintain and enhance core security technologies, Support lifecycle management of security tools, Evaluate and recommend new technologies, Identify opportunities to strengthen controls, Mentor and support junior analysts, Contribute to IT security roadmap, Act as trusted technical advisor, Provide regular updates, Represent IT Security across projects", "teamCollaboration" : "Cross-functional teams; IT architects; Solution designers; Infrastructure teams; Cloud teams; Networking teams; Service teams; Head of IT Security", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Cyber security; Infrastructure protection; Vulnerability management; Incident response; Cloud platforms; Hybrid infrastructures; Security operations; Threat intelligence; Secure configuration standards; Access controls; Identity management; Privileged access", "domainList" : [ "cyber-security", "infrastructure-protection", "vulnerability-management", "incident-response", "cloud-platforms", "hybrid-infrastructures", "security-operations", "threat-intelligence", "secure-configuration-standards", "access-controls", "identity-management", "privileged-access" ], "domainSpecificKnowledge" : [ "Cyber security", "Infrastructure protection", "Vulnerability management", "Incident response", "Cloud platforms", "Hybrid infrastructures", "Security operations", "Threat intelligence", "Secure configuration standards", "Access controls", "Identity management", "Privileged access" ], "toolProficiency" : [ "SIEM", "EDR", "Firewalls", "Network security tools", "IAM", "DLP", "Email security", "Vulnerability scanning" ], "communicationSkills" : "Technical information communication", "continuousLearning" : "Employee development programmes", "problemSolvingSkills" : "Analytical mindset; Identify vulnerabilities; Assess threats; Prioritise actions", "outcomesObjectives" : "Strengthen organisation's cyber security; Ensure confidentiality, integrity, availability; Reduce risk exposure; Improve security capability; Enhance overall security maturity; Embed security-by-design principles", "qualificationsBasic" : "3-5+ years' experience in IT security, 3-5+ years' experience in cyber security operations, 3-5+ years' experience in infrastructure protection, 3-5+ years' experience in vulnerability management, 3-5+ years' experience in incident response, CIS Hardening standards implementation, Experience with SIEM, Experience with EDR, Experience with IAM, Experience with DLP, Experience with email security, Experience with vulnerability scanning, Experience with cloud platforms, Experience with hybrid infrastructures, Experience in structured security operations, Experience in SOC environments, YSA+ certification, AZ-500 certification, CCNA Security certification, CEH certification", "qualificationsPreferred" : "Broader exposure to enterprise IT environment", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Culina group are a market leading ambient and chilled food & drink 3PL specialist, providing warehouse and distribution alongside fresh, food manufacturing, co-packing and bonded divisions. Working in partnership with some of the biggest household names in the food and drink sector. With over 20 million square feet of warehousing spread across 100+ depots, we employ in excess of 22,000 people to ensure that our 2.2 million deliveries reach the correct location. Our extensive network enables us to provide a comprehensive supply chain management service covering the whole of the UK and Ireland. Role Overview The Lead IT Security Analyst is a senior technical specialist responsible for strengthening the organisation's cyber security across security operations, infrastructure protection, vulnerability management, and incident response. Reporting to the Head of IT Security, this role plays a critical part in ensuring the confidentiality, integrity, and availability of systems and data. Acting as a senior escalation point, the role provides technical leadership, drives continuous improvement, and ensures security is embedded into all technology change and transformation activities. Key Responsibilities Technical Security Operations * Act as the senior escalation point for security events across SIEM, EDR, firewalls, and network security tools. * Lead cyber incident response activities, including triage, containment, investigation, and root cause analysis. * Oversee day-to-day security operations and threat detection capabilities across the IT estate. * Ensure the effective configuration, tuning, and maturity of SOC/SIEM tooling and alerting. * Collaborate with managed security service providers to ensure high-quality and timely service delivery. Vulnerability & Threat Management * Lead the vulnerability management programme across infrastructure, cloud, and applications. * Coordinate remediation activities with IT and operational teams to reduce risk exposure. * Analyse threat intelligence to identify emerging threats and vulnerabilities. * Provide clear recommendations on prioritisation and implementation of security controls. Technical Design, Assurance & Architecture * Conduct security assessments of new solutions, infrastructure changes, and cloud deployment. * Support secure architecture reviews alongside IT architects and solution designers. * Ensure secure configuration standards (e.g. CIS Hardening) are implemented and maintained. * Review and strengthen access controls, identity management, and privileged access processes. Security Tooling & Control Maturity * Maintain and enhance core security technologies (SIEM, EDR, IAM, DLP, email security, vulnerability scanning, etc.). * Support the lifecycle management of security tools and platforms. * Evaluate and recommend new technologies to improve security capability and resilience. Continuous Improvement & Technical Leadership * Identify opportunities to strengthen technical controls and enhance overall security maturity. * Mentor and support the development of junior Security Analysts. * Contribute to the IT security roadmap and continuous improvement initiatives. Stakeholder Engagement * Act as a trusted technical advisor to infrastructure, cloud, networking, and service teams. * Provide regular updates, insights, and escalation support to the Head of IT Security. * Represent IT Security across projects, ensuring security-by-design principles are embedded. Keys to Success * Strong technical expertise across cyber security operations, infrastructure, and threat management, with the ability to respond effectively to complex incidents. * Ability to lead and coordinate incident response and investigations, ensuring swift resolution and minimal business impact. * Proven capability to translate technical risks into practical solutions that balance security and operational needs. * Strong analytical mindset with the ability to identify vulnerabilities, assess threats, and prioritise actions effectively. * Skilled in communicating complex technical information clearly to both technical and non-technical stakeholders. * Ability to influence and collaborate across teams, acting as a trusted security advisor. * Demonstrated experience in mentoring and supporting junior team members, building overall team capability. * Proactive approach to continuous improvement, driving enhancements in tooling, processes, and controls. * Strong focus on security-by-design, ensuring robust security practices are embedded into all technology changes. * Resilient and adaptable, with the ability to operate effectively in a fast-paced, evolving threat landscape. ## Qualifications Essential Requirements * 3-5+ years' experience in IT security, cyber operations, SOC analysis, or similar technical security roles. * Strong understanding of core cyber security principles, including network security, cloud security, and infrastructure hardening. * Hands-on experience with key security technologies, including SIEM, EDR, firewalls, Identity & Access Management (IAM), and vulnerability scanning tools. * Proven experience in responding to cyber security incidents, including investigation, analysis, and remediation. * Familiarity with recognised security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework (CSF), and CIS Controls. * Strong analytical, problem-solving, and troubleshooting skills, with the ability to interpret complex technical data. Desirable * Relevant industry certifications such as Security+, CySA+, AZ-500, CCNA Security, CEH, or equivalent. * Broader exposure to enterprise IT environment, including cloud platforms and hybrid infrastructures. * Experience working within structured security operations or SOC environments. ## Additional Information As part of our drive to make Culina Group a great place to work. We are proud to be an inclusive and diverse organisation where we are committed to employee development and recognising success for hard working performers. Our dedicated learning and development programmes are open to every employee to give you the opportunity to shape your own future within logistics and continue to work in an environment where team culture thrives. Our People are the driving force behind our success, which is why we offer a wide range of benefits which include: * Annual Leave – Competitive holiday entitlement of 25 Days plus 8 Bank Holidays * Company Bonus – We do our best work to succeed together. When we achieve our goals you'll be rewarded through our bonus scheme * Private Medical Cover – This gives you peace of mind, you have choice, flexibility and speed of access to the most clinically appropriate care via Bupa * Pension scheme – we want colleagues to enjoy a comfortable retirement so we offer a great contribution of 5% employee and 8% employer * Life Assurance - x4 your annual salary * Wellness – Via our Employee Assistance Programme we offer immediate access to a confidential telephone counselling and legal information service that operates 24 hours a days, 365 days a year * Eye Care Vouchers – We can provide you with substantial savings with free eye tests and discounts on prescription glasses * Reward & Recognition – We recognise that employees have gone the extra mile via Employee of the month and year, special recognition and long service awards. * Everyday discounts - via our benefit platform you will have access to over 50 retailer discounts for everyday savings! If you meet the requirements for the above role and are looking for your next career opportunity please apply now and become a part of our #WinningTeam!", "summaryDescription" : "Lead IT Security Analyst at Culina Group. Skills: Cyber security operations, Infrastructure protection, Vulnerability management, Incident response. Act as senior escalation point. Lead cyber incident response", "postedDate" : "2026-06-15T18:08:42.000", "createdAt" : "2026-06-15T23:42:21.351", "lastUpdated" : "2026-06-16T09:33:29.877", "ingestTimestamp" : "2026-06-15T23:42:21.351", "mongoId" : "6a305569f292fd229cf1f517", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Incident response", "Root cause analysis", "Threat detection", "Security operations", "Vulnerability management", "Secure configuration", "Access control management", "Identity management", "Privileged access management", "Leadership", "Mentoring", "Cyber security operations", "Infrastructure protection", "Threat intelligence analysis", "Security assessments", "Architecture reviews", "Access controls", "Privileged access", "Tool lifecycle management", "Technology evaluation", "Roadmap contribution", "Stakeholder engagement", "Technical advising", "Security-by-design principles", "Roadmap planning", "Cyber security", "Cloud platforms", "Hybrid infrastructures", "Threat intelligence", "Secure configuration standards", "YSA+", "AZ-500", "CCNA Security", "CEH", "SIEM", "EDR", "Firewalls", "Network security tools", "IAM", "DLP", "Email security", "Vulnerability scanning" ], "skillCount" : 42, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 1.0, "_score" : 404.56213, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Logistics", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3057f3f292fd229cf3f142", "title" : "Lead IT Security Analyst", "company" : "Culina Group", "industry" : "Logistics And Supply Chain", "salary" : { "min" : 75000.0, "max" : 105000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Lead IT Security Analyst in Lutterworth, United Kingdom, adjusted for the logistics industry and company size." }, "location" : "lutterworth , United Kingdom", "locations" : [ "lutterworth ", "United Kingdom" ], "certifications" : [ "YSA+", "AZ-500", "CCNA Security", "CEH" ], "timestamp" : "2026-06-16T09:33:04.036", "fingerprint" : "e4d4c4fd0f1c1ce416092cfe267db19ccae4a8bacf5331fa4c9c7223dd090489", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/CulinaGroup1/744000132259622-lead-it-security-analyst", "externalId" : "744000132259622", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Lutterworth", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.4552224,-1.1997815" } ], "locationText" : "Lutterworth, United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SIEM, EDR, Firewalls, Network security, IAM, DLP, Email security, Vulnerability scanning, Cloud platforms, Hybrid infrastructures", "professionalSkills" : [ "Threat intelligence analysis", "Security assessments", "Secure architecture reviews", "Access controls", "Identity management", "Privileged access", "Tool lifecycle management", "Technology evaluation", "Roadmap contribution", "Stakeholder engagement", "Technical advising", "Security-by-design principles" ], "hardSkillsList" : [ "Incident response", "Root cause analysis", "Threat detection", "Configuration tuning", "Remediation coordination", "Security control implementation" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Root cause analysis", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Configuration tuning", "level" : "intermediate" }, { "name" : "Remediation coordination", "level" : "intermediate" }, { "name" : "Security control implementation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Cyber security operations, Infrastructure protection, Vulnerability management, Incident response", "majorSkillsList" : [ "Cyber security operations", "Infrastructure protection", "Vulnerability management", "Incident response" ], "coreResponsibilities" : "Act as senior escalation point, Lead cyber incident response, Oversee security operations, Oversee threat detection, Ensure SOC/SIEM tooling configuration, Ensure SOC/SIEM tooling tuning, Ensure SOC/SIEM tooling maturity, Collaborate with managed security providers, Lead vulnerability management programme, Coordinate remediation activities, Analyse threat intelligence, Provide recommendations on security controls, Conduct security assessments, Support secure architecture reviews, Ensure secure configuration standards, Review access controls, Review identity management, Review privileged access processes, Maintain core security technologies, Enhance core security technologies, Support security tool lifecycle management, Support security platform lifecycle management, Evaluate new technologies, Recommend new technologies, Identify opportunities to strengthen controls, Identify opportunities to enhance maturity, Mentor junior analysts, Support junior analyst development, Contribute to IT security roadmap, Contribute to continuous improvement", "teamCollaboration" : "With managed security providers; With IT teams; With operational teams; With IT architects; With solution designers; With infrastructure teams; With cloud teams; With networking teams; With service teams; Across projects", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Cyber security; Infrastructure protection; Vulnerability management; Incident response; Cloud platforms; Hybrid infrastructures; Security operations; SOC environments; CIS Hardening", "domainList" : [ "cyber-security", "infrastructure-protection", "vulnerability-management", "incident-response", "cloud-platforms", "hybrid-infrastructures", "security-operations", "soc-environments", "cis-hardening" ], "domainSpecificKnowledge" : [ "Cyber security", "Infrastructure protection", "Vulnerability management", "Incident response", "Cloud platforms", "Hybrid infrastructures", "Security operations", "SOC environments", "CIS Hardening" ], "toolProficiency" : [ "SIEM tooling", "EDR tooling", "Firewalls", "Network security tools", "Vulnerability scanning tools", "IAM tools", "DLP tools", "Email security tools" ], "communicationSkills" : "Technical information communication", "continuousLearning" : "Employee development programmes", "problemSolvingSkills" : "Analytical mindset; Identify vulnerabilities; Assess threats; Prioritise actions; Root cause analysis", "outcomesObjectives" : "Reduce risk exposure; Improve security capability; Enhance security resilience; Strengthen technical controls; Enhance security maturity; Build team capability", "qualificationsBasic" : "3-5+ years' experience in IT security, 3-5+ years' experience in cyber security operations, 3-5+ years' experience in infrastructure protection, 3-5+ years' experience in vulnerability management, 3-5+ years' experience in incident response, CIS Hardening standards implementation, Experience with SIEM, Experience with EDR, Experience with IAM, Experience with DLP, Experience with email security, Experience with vulnerability scanning, Experience with cloud platforms, Experience with hybrid infrastructures, Experience in structured security operations, Experience in SOC environments, YSA+ certification, AZ-500 certification, CCNA Security certification, CEH certification", "qualificationsPreferred" : "Broader exposure to enterprise IT environment", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Culina group are a market leading ambient and chilled food & drink 3PL specialist, providing warehouse and distribution alongside fresh, food manufacturing, co-packing and bonded divisions. Working in partnership with some of the biggest household names in the food and drink sector. With over 20 million square feet of warehousing spread across 100+ depots, we employ in excess of 22,000 people to ensure that our 2.2 million deliveries reach the correct location. Our extensive network enables us to provide a comprehensive supply chain management service covering the whole of the UK and Ireland. Role Overview The Lead IT Security Analyst is a senior technical specialist responsible for strengthening the organisation's cyber security across security operations, infrastructure protection, vulnerability management, and incident response. Reporting to the Head of IT Security, this role plays a critical part in ensuring the confidentiality, integrity, and availability of systems and data. Acting as a senior escalation point, the role provides technical leadership, drives continuous improvement, and ensures security is embedded into all technology change and transformation activities. Key Responsibilities Technical Security Operations * Act as the senior escalation point for security events across SIEM, EDR, firewalls, and network security tools. * Lead cyber incident response activities, including triage, containment, investigation, and root cause analysis. * Oversee day-to-day security operations and threat detection capabilities across the IT estate. * Ensure the effective configuration, tuning, and maturity of SOC/SIEM tooling and alerting. * Collaborate with managed security service providers to ensure high-quality and timely service delivery. Vulnerability & Threat Management * Lead the vulnerability management programme across infrastructure, cloud, and applications. * Coordinate remediation activities with IT and operational teams to reduce risk exposure. * Analyse threat intelligence to identify emerging threats and vulnerabilities. * Provide clear recommendations on prioritisation and implementation of security controls. Technical Design, Assurance & Architecture * Conduct security assessments of new solutions, infrastructure changes, and cloud deployment. * Support secure architecture reviews alongside IT architects and solution designers. * Ensure secure configuration standards (e.g. CIS Hardening) are implemented and maintained. * Review and strengthen access controls, identity management, and privileged access processes. Security Tooling & Control Maturity * Maintain and enhance core security technologies (SIEM, EDR, IAM, DLP, email security, vulnerability scanning, etc.). * Support the lifecycle management of security tools and platforms. * Evaluate and recommend new technologies to improve security capability and resilience. Continuous Improvement & Technical Leadership * Identify opportunities to strengthen technical controls and enhance overall security maturity. * Mentor and support the development of junior Security Analysts. * Contribute to the IT security roadmap and continuous improvement initiatives. Stakeholder Engagement * Act as a trusted technical advisor to infrastructure, cloud, networking, and service teams. * Provide regular updates, insights, and escalation support to the Head of IT Security. * Represent IT Security across projects, ensuring security-by-design principles are embedded. Keys to Success * Strong technical expertise across cyber security operations, infrastructure, and threat management, with the ability to respond effectively to complex incidents. * Ability to lead and coordinate incident response and investigations, ensuring swift resolution and minimal business impact. * Proven capability to translate technical risks into practical solutions that balance security and operational needs. * Strong analytical mindset with the ability to identify vulnerabilities, assess threats, and prioritise actions effectively. * Skilled in communicating complex technical information clearly to both technical and non-technical stakeholders. * Ability to influence and collaborate across teams, acting as a trusted security advisor. * Demonstrated experience in mentoring and supporting junior team members, building overall team capability. * Proactive approach to continuous improvement, driving enhancements in tooling, processes, and controls. * Strong focus on security-by-design, ensuring robust security practices are embedded into all technology changes. * Resilient and adaptable, with the ability to operate effectively in a fast-paced, evolving threat landscape. ## Qualifications Essential Requirements * 3-5+ years' experience in IT security, cyber operations, SOC analysis, or similar technical security roles. * Strong understanding of core cyber security principles, including network security, cloud security, and infrastructure hardening. * Hands-on experience with key security technologies, including SIEM, EDR, firewalls, Identity & Access Management (IAM), and vulnerability scanning tools. * Proven experience in responding to cyber security incidents, including investigation, analysis, and remediation. * Familiarity with recognised security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework (CSF), and CIS Controls. * Strong analytical, problem-solving, and troubleshooting skills, with the ability to interpret complex technical data. Desirable * Relevant industry certifications such as Security+, CySA+, AZ-500, CCNA Security, CEH, or equivalent. * Broader exposure to enterprise IT environment, including cloud platforms and hybrid infrastructures. * Experience working within structured security operations or SOC environments. ## Additional Information As part of our drive to make Culina Group a great place to work. We are proud to be an inclusive and diverse organisation where we are committed to employee development and recognising success for hard working performers. Our dedicated learning and development programmes are open to every employee to give you the opportunity to shape your own future within logistics and continue to work in an environment where team culture thrives. Our People are the driving force behind our success, which is why we offer a wide range of benefits which include: * Annual Leave – Competitive holiday entitlement of 25 Days plus 8 Bank Holidays * Company Bonus – We do our best work to succeed together. When we achieve our goals you'll be rewarded through our bonus scheme * Private Medical Cover – This gives you peace of mind, you have choice, flexibility and speed of access to the most clinically appropriate care via Bupa * Pension scheme – we want colleagues to enjoy a comfortable retirement so we offer a great contribution of 5% employee and 8% employer * Life Assurance - x4 your annual salary * Wellness – Via our Employee Assistance Programme we offer immediate access to a confidential telephone counselling and legal information service that operates 24 hours a days, 365 days a year * Eye Care Vouchers – We can provide you with substantial savings with free eye tests and discounts on prescription glasses * Reward & Recognition – We recognise that employees have gone the extra mile via Employee of the month and year, special recognition and long service awards. * Everyday discounts - via our benefit platform you will have access to over 50 retailer discounts for everyday savings! If you meet the requirements for the above role and are looking for your next career opportunity please apply now and become a part of our #WinningTeam!", "summaryDescription" : "Lead IT Security Analyst at Culina Group. Skills: Cyber security operations, Infrastructure protection, Vulnerability management, Incident response. Act as senior escalation point. Lead cyber incident response", "postedDate" : "2026-06-15T18:08:42.000", "createdAt" : "2026-06-15T23:41:05.435", "lastUpdated" : "2026-06-16T09:33:04.036", "ingestTimestamp" : "2026-06-15T23:41:05.435", "mongoId" : "6a3057f3f292fd229cf3f142", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Incident response", "Root cause analysis", "Threat detection", "Configuration tuning", "Remediation coordination", "Security control implementation", "Leadership", "Mentoring", "Cyber security operations", "Infrastructure protection", "Vulnerability management", "Threat intelligence analysis", "Security assessments", "Secure architecture reviews", "Access controls", "Identity management", "Privileged access", "Tool lifecycle management", "Technology evaluation", "Roadmap contribution", "Stakeholder engagement", "Technical advising", "Security-by-design principles", "Roadmap planning", "Cyber security", "Cloud platforms", "Hybrid infrastructures", "Security operations", "SOC environments", "CIS Hardening", "YSA+", "AZ-500", "CCNA Security", "CEH", "SIEM tooling", "EDR tooling", "Firewalls", "Network security tools", "Vulnerability scanning tools", "IAM tools", "DLP tools", "Email security tools" ], "skillCount" : 42, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 1.0, "_score" : 404.56213, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Logistics", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305119f292fd229cefa150", "title" : "Security Analyst (Cyber Defense Analyst)", "industry" : "IT", "salary" : { "min" : 1750000.0, "max" : 2750000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Analyst in India, adjusted for seniority and industry." }, "location" : "India", "locations" : [ "India" ], "certifications" : [ "GCIH", "CySA+", "GSEC", "SSCP", "CCSP" ], "timestamp" : "2026-06-16T11:24:45.864", "fingerprint" : "79d0850a6e7105df6d7a472da8558864f5a1306c8e56ca957ae1be846f7f2629", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/63fc29fe-8221-46d6-ba45-613929eed7ce/apply", "externalId" : "63fc29fe-8221-46d6-ba45-613929eed7ce", "industryFunction" : { }, "structuredLocations" : [ { "country" : "India", "continent" : "as", "workMode" : "onsite" } ], "locationText" : "India", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SIEM, Microsoft Defender XDR, Microsoft 365, AWS, Azure, Windows, MacOS, PowerShell, Python", "professionalSkills" : [ "Threat hunting", "Detection engineering", "Vulnerability remediation", "Risk reduction" ], "hardSkillsList" : [ "Incident response", "Security analysis", "Threat analysis", "Security monitoring", "Data correlation" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security analysis", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Data correlation", "level" : "intermediate" } ], "majorSkills" : "Cyber defense, Incident response, Security analysis", "majorSkillsList" : [ "Cyber defense", "Incident response", "Security analysis" ], "coreResponsibilities" : "Monitor security alerts, Triage security alerts, Analyze security alerts, Investigate security incidents, Determine incident scope, Determine incident impact, Correlate security events, Validate threats, Support escalation decisions, Contribute to incident response, Document investigations, Document findings, Document response activities, Conduct threat hunting, Identify attack patterns, Identify adversary techniques, Identify detection gaps, Support detection engineering, Support automation initiatives, Assist refining incident response, Assist refining playbooks, Assist refining procedures, Collaborate with owners, Prioritize vulnerability remediation, Track risk reduction", "teamCollaboration" : "Cross-team development", "domainKnowledge" : "Cybersecurity; Cyber defense; Incident response; SIEM platforms; Enterprise security; Endpoint security; Identity systems; Cloud environments; Network security; Application security; Threat frameworks; MITRE ATT&CK; NIST CSF; CIS Controls; Vulnerability management; Networking fundamentals; AWS; Azure; Windows OS; macOS; Microsoft 365 ecosystem", "domainList" : [ "cybersecurity", "cyber-defense", "incident-response", "siem-platforms", "enterprise-security", "endpoint-security", "identity-systems", "cloud-environments", "network-security", "application-security", "threat-frameworks", "mitre-att-ck", "nist-csf", "cis-controls", "vulnerability-management", "networking-fundamentals", "aws", "azure", "windows-os", "macos", "microsoft-365-ecosystem" ], "domainSpecificKnowledge" : [ "Cybersecurity", "Cyber defense", "Incident response", "SIEM platforms", "Enterprise security", "Endpoint security", "Identity systems", "Cloud environments", "Network security", "Application security", "Threat frameworks", "MITRE ATT&CK", "NIST CSF", "CIS Controls", "Vulnerability management", "Networking fundamentals", "AWS", "Azure", "Windows OS", "macOS", "Microsoft 365 ecosystem" ], "toolProficiency" : [ "CrowdStrike NG-SIEM", "Microsoft Defender XDR", "Tenable", "Wiz" ], "communicationSkills" : "Technical findings communication", "documentationSkills" : "Incident reports", "continuousLearning" : "Certification support", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "5+ years cybersecurity experience, Hands-on SIEM tools experience, Microsoft Defender XDR experience, Microsoft 365 security experience, Networking fundamentals understanding, Cloud environments understanding, Operating systems understanding, MITRE ATT&CK familiarity, NIST CSF familiarity, CIS Controls familiarity, Write clear incident reports, Communicate technical findings, Scripting or query languages exposure, Bachelor's degree", "qualificationsPreferred" : "CrowdStrike NG-SIEM experience, Vulnerability management tools experience, Tenable experience, Wiz experience, GCIH certification preferred, CySA+ certification preferred, GSEC certification preferred, SSCP certification preferred, CCSP certification preferred", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Accountabilities Monitor, triage, and analyze security alerts and telemetry across SIEM and enterprise security platforms to identify potential threats and anomalies. Investigate security incidents across endpoints, identity systems, cloud environments, networks, and applications to determine scope and impact. Correlate security events to validate threats, support escalation decisions, and contribute to timely incident response actions. Document investigations, findings, and response activities while maintaining clear communication with stakeholders and leadership. Conduct proactive threat hunting activities to identify emerging attack patterns, adversary techniques, and detection gaps. Support detection engineering and automation initiatives to improve monitoring coverage and response efficiency. Assist in refining incident response processes, playbooks, and operational procedures to enhance cyber defense maturity. Collaborate with infrastructure and system owners to prioritize vulnerability remediation and track risk reduction efforts. Requirements: 5+ years of experience in cybersecurity, SOC, cyber defense, or incident response roles within enterprise environments. Hands-on experience with SIEM tools (searches, dashboards, alerts, investigations), preferably CrowdStrike NG-SIEM. Experience with Microsoft Defender XDR and Microsoft 365 security ecosystem (identity, email, and collaboration security). Strong understanding of networking fundamentals, cloud environments (AWS/Azure), and operating systems (Windows and macOS). Familiarity with threat frameworks such as MITRE ATT&CK, NIST CSF, or CIS Controls. Ability to write clear incident reports and communicate technical findings to both technical and non-technical stakeholders. Exposure to scripting or query languages such as PowerShell, Python, or similar for analysis and automation. Experience with vulnerability management tools such as Tenable or Wiz is preferred. Relevant certifications such as GCIH, CySA+, GSEC, SSCP, or CCSP are strongly preferred. Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or related field. Benefits: Competitive compensation with comprehensive benefits package. Health insurance coverage with options for dependents. Paid time off, company holidays, and additional leave benefits. Flexible work arrangements supporting work-life balance. Continuous learning and certification support to accelerate career growth. Employee wellness programs focused on physical and mental well-being. Strong engineering-driven culture with access to advanced security tools and lab environments. Inclusive, collaborative workplace with opportunities for cross-team development and ownership. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Security Analyst (Cyber Defense Analyst). Skills: Cyber defense, Incident response, Security analysis. Monitor security alerts. Triage security alerts", "postedDate" : "2026-06-15T12:04:42.126", "createdAt" : "2026-06-15T12:04:42.126", "lastUpdated" : "2026-06-16T11:24:45.864", "ingestTimestamp" : "2026-06-16T03:23:21.500", "mongoId" : "6a305119f292fd229cefa150", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Incident response", "Security analysis", "Threat analysis", "Security monitoring", "Data correlation", "Cyber defense", "Threat hunting", "Detection engineering", "Vulnerability remediation", "Risk reduction", "Cybersecurity", "SIEM platforms", "Enterprise security", "Endpoint security", "Identity systems", "Cloud environments", "Network security", "Application security", "Threat frameworks", "MITRE ATT&CK", "NIST CSF", "CIS Controls", "Vulnerability management", "Networking fundamentals", "AWS", "Azure", "Windows OS", "macOS", "Microsoft 365 ecosystem", "GCIH", "CySA+", "GSEC", "SSCP", "CCSP", "CrowdStrike NG-SIEM", "Microsoft Defender XDR", "Tenable", "Wiz" ], "skillCount" : 38, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 402.85135, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a308fdef292fd229c0addaa", "title" : "Security Specialist", "company" : "ARSIEM Corporation", "industry" : "0001-0031", "salary" : { "min" : 75000.0, "max" : 110000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Specialist in Bulgaria, adjusted for the government industry and remote work." }, "location" : "Remote", "locations" : [ "Remote" ], "certifications" : [ "CISSP", "GIAC" ], "timestamp" : "2026-06-16T12:10:57.382", "fingerprint" : "d9ef4a4eada39c1b28b874903ba8faddee73732ec58a929084f8da0d09532a43", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/arsiem/c57d9e84-c663-40cf-94e3-3f5418b64d94/apply", "externalId" : "c57d9e84-c663-40cf-94e3-3f5418b64d94", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SIEM, SOAR, Endpoint security, Network security, Cloud security, Vulnerability management, Incident response, Scripting, Automation", "professionalSkills" : [ "Risk assessment", "Threat analysis", "Security architecture", "Compliance management" ], "hardSkillsList" : [ "Security monitoring", "Forensic analysis", "Penetration testing" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Forensic analysis", "level" : "intermediate" }, { "name" : "Penetration testing", "level" : "intermediate" } ], "majorSkills" : "Incident response, Threat intelligence, Security operations", "majorSkillsList" : [ "Incident response", "Threat intelligence", "Security operations" ], "coreResponsibilities" : "Monitor security alerts, Investigate security incidents, Develop incident response playbooks, Conduct threat hunting exercises, Perform vulnerability assessments, Implement security controls, Automate security processes, Document security procedures, Collaborate with IT teams, Stay updated on threats", "teamCollaboration" : "Cross-functional teams; IT operations; Engineering teams", "domainKnowledge" : "Cyber threats; Security frameworks; Compliance regulations; Network protocols", "domainList" : [ "cyber-threats", "security-frameworks", "compliance-regulations", "network-protocols" ], "domainSpecificKnowledge" : [ "Cyber threats", "Security frameworks", "Compliance regulations", "Network protocols" ], "toolProficiency" : [ "Splunk", "Palo Alto", "CrowdStrike", "Nessus" ], "communicationSkills" : "Incident reporting; Technical briefings", "documentationSkills" : "Security policies; Incident reports; Playbooks", "continuousLearning" : "Industry conferences; Training courses", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Forensic investigation", "outcomesObjectives" : "Minimize security risks; Reduce incident impact; Improve security posture", "qualificationsBasic" : "5+ years experience, Bachelor's degree", "qualificationsPreferred" : "Master's degree, CISSP certification", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Description About ARSIEM Corporation At ARSIEM Corporation we are committed to fostering a proven and trusted partnership with our government clients. We provide support to multiple agencies across the United States Government. ARSIEM has an experienced workforce of qualified professionals committed to providing the best possible support. As demand increases, ARSIEM continues to provide reliable and cutting-edge technical solutions at the best value to our clients. That means a career packed with opportunities to grow and the ability to have an impact on every client you work with. ARSIEM is looking for a self-starting, motivated Quality Assurance Analyst to support a federal Microsoft 365 Contractor Support Services program. The Quality Assurance Analyst will support contractor-side quality control, deliverable review, performance monitoring, reporting quality, corrective action tracking, and documentation compliance against the PWS, QASP, and Quality Control Plan. This position is primarily remote. ## Responsibilities Support security, privacy, and governance activities across the Microsoft 365 cloud suite. Assist with data readiness planning and integration of Microsoft Purview to protect sensitive data. Support management of user permissions, data retention, compliance settings, and enterprise policies. Assist with documentation and management of Security Change Requests and audit logging solutions. Support Microsoft security and cyber architecture activities related to M365 services. Assist with security and configuration support for SharePoint Online, OneDrive for Business, Exchange Online, Teams, Power Platform, Copilot, Azure/Azure AD, Intune, and AvePoint Online Services. Support AvePoint Online Services security capabilities, including tenant-to-tenant considerations, Splunk Enterprise integration, bring-your-own-key configurations, IP restrictions, SFTP, and related interfaces. Collaborate with systems support staff and technical teams to identify, mitigate, and document risks. Contribute to bi-weekly and monthly status reporting, including action items, risks, mitigations, escalations, accomplishments, and closures. ## Minimum Qualifications Minimum 5 years of experience supporting Microsoft 365 cloud-based services in a large corporate or government environment. Experience supporting M365 security, compliance, governance, or privacy activities. Knowledge of Microsoft Purview, Defender, Azure AD, Intune, Exchange Online, SharePoint Online, Teams, and related M365 security capabilities. Experience managing or supporting user permissions, data retention, compliance settings, and audit logging. Experience with Power Platform security and governance concepts. Experience creating or supporting PowerShell scripts. Ability to troubleshoot technical and security issues across the M365 platform and AvePoint Online Services. Strong written and oral communication skills. Ability to complete IRS MBI/security onboarding and required IRS security training. ## Preferred Qualifications Experience with federal security processes, audit logging, security change requests, or cyber architecture support. Experience supporting M365 in a regulated or government enterprise environment. Knowledge of Power Apps, Power Automate, Power BI, Copilot for Power Platform, AI Builder, and Dataverse governance. Experience with risk tracking, mitigation planning, and technical documentation. ## Benefits For an overview of ARSIEM benefits, please visit https://www.arsiem.com/careers/ ## Additional Information Clearance Requirement: This position requires the ability to complete IRS MBI/security onboarding and required federal security training. Candidate Referral: Do you know someone who would be GREAT at this role? If you do, ARSIEM has a way for you to earn a bonus through our referral program for persons presenting NEW (not in our resume database) candidates who are successfully placed on one of our projects. The bonus for this position is 3,500, and the referrer is eligible to receive the sum for any applicant we place within 12 months of referral. The bonus is paid after the referred employee reaches 6 months of employment. ARSIEM is proud to be an Equal Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other federally protected class.", "summaryDescription" : "Security Specialist at ARSIEM Corporation. Skills: Incident response, Threat intelligence, Security operations. Monitor security alerts. Investigate security incidents", "postedDate" : "2026-06-14T01:09:27.473", "createdAt" : "2026-06-14T01:09:27.473", "lastUpdated" : "2026-06-16T12:10:57.382", "ingestTimestamp" : "2026-06-16T03:27:20.614", "mongoId" : "6a308fdef292fd229c0addaa", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Security monitoring", "Forensic analysis", "Penetration testing", "Incident response", "Threat intelligence", "Security operations", "Risk assessment", "Threat analysis", "Security architecture", "Compliance management", "Cyber threats", "Security frameworks", "Compliance regulations", "Network protocols", "CISSP", "GIAC", "Splunk", "Palo Alto", "CrowdStrike", "Nessus" ], "skillCount" : 20, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 399.48666, "daysOld" : 2, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "68c2e423f8b1b0376634c56d", "title" : "Senior Incident Response Engineer, Devices & Services Security", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 143300.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Hawthorne, California, USA", "locations" : [ "Hawthorne, California, USA" ], "certifications" : [ "CISSP", "CISM", "CRISC", "GCIH", "CCIR", "GCDA" ], "timestamp" : "2026-06-15T08:13:32.312", "fingerprint" : "3317fe4da3a6f579d3a5ccdc8430939e8a2a28d3935ec2384cf4f9b32c5db032", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3072356/apply", "externalId" : "2d1861cb-aa75-46c6-9067-b6a683645372", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Hawthorne", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.9128272,-118.3426122" } ], "locationText" : "Hawthorne, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, WAF, EDR/XDR, Python, PowerShell, Bash, Splunk, SOAR, SQL", "professionalSkills" : [ "Incident response", "Detection engineering", "Security operations", "Threat hunting", "Risk assessment", "Root cause analysis" ], "hardSkillsList" : [ "Log analysis", "Network telemetry", "Attacker TTPs", "MITRE ATT&CK", "Scripting", "Automation", "Forensic analysis", "Malware analysis", "SQL queries" ], "softSkillsList" : [ "Judgment under pressure", "Calmness" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Network telemetry", "level" : "intermediate" }, { "name" : "Attacker TTPs", "level" : "intermediate" }, { "name" : "MITRE ATT&CK", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" }, { "name" : "Forensic analysis", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "SQL queries", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Judgment under pressure" }, { "name" : "Calmness" } ], "majorSkills" : "Incident response, Security engineering, Detection engineering", "majorSkillsList" : [ "Incident response", "Security engineering", "Detection engineering" ], "coreResponsibilities" : "Investigate security incidents, Respond to security incidents, Drive rapid response, Drive effective response, Act as incident responder, Act as incident commander, Coordinate technical response, Keep stakeholders informed, Conduct post-mortem analysis, Identify root causes, Identify security improvement opportunities, Consult with builder teams, Ensure security designed into products, Collaborate with stakeholders, Execute incident response, Develop detections, Maintain detections, Respond to detections, Combat fraud, Combat abuse, Develop prevention capabilities, Develop detection capabilities, Develop response capabilities, Increase capability through automation, Increase efficiency through automation, Increase signal quality using AI/ML, Assist in runbook development, Assist in playbook tuning, Drive process improvements, Coordinate response efforts, Share learnings, Maintain WAF products, Support WAF products, Protect services from abuse, Drive WAF adoption, Evaluate WAF rules, Tune WAF rules, Develop SQL queries, Analyze log data, Extract information from logs, Extract information from databases, Extract information from services, Spearhead incident response, Drive decision-making, Conduct impact assessments, Implement containment strategies, Develop durable solutions, Proactively hunt threats, Create new detection mechanisms, Consult on security for new product designs, Analyze data, Identify hidden vulnerabilities", "teamCollaboration" : "Cross-functional teams; Global Amazon Security team; Other Incident Response teams", "projectManagementSkills" : [ "Runbook development", "Playbook tuning" ], "domainKnowledge" : "Devices and Services security; IoT platforms; Customer safety; Customer privacy; Fraud and abuse; Distributed systems; Cloud-native architectures; Service-oriented environments; IoT device security; Embedded systems", "domainList" : [ "devices-and-services-security", "iot-platforms", "customer-safety", "customer-privacy", "fraud-and-abuse", "distributed-systems", "cloud-native-architectures", "service-oriented-environments", "iot-device-security", "embedded-systems" ], "domainSpecificKnowledge" : [ "Devices and Services security", "IoT platforms", "Customer safety", "Customer privacy", "Fraud and abuse", "Distributed systems", "Cloud-native architectures", "Service-oriented environments", "IoT device security", "Embedded systems" ], "toolProficiency" : [ "AWS", "WAF", "EDR/XDR", "Splunk", "SOAR", "SQL" ], "communicationSkills" : "Clear communication; Stakeholder communication", "documentationSkills" : "Document work thoroughly; Contribute to post-incident reviews", "continuousLearning" : "Expand AI/ML skills", "innovationCreativity" : "Identify opportunities to raise the bar", "problemSolvingSkills" : "Problem-solvers; Investigative instincts; Troubleshooting", "specialRequirements" : "On-call rotation", "outcomesObjectives" : "Reduce or eliminate risk; Improve security for Amazon products; Improve security for Amazon services", "qualificationsBasic" : "5+ years cybersecurity experience, Incident response experience, Detection engineering experience, Security operations experience, Working knowledge of AWS, Working knowledge of WAF, Working knowledge of EDR/XDR tools, Working knowledge of network telemetry, Working knowledge of log analysis, Practical knowledge of attacker TTPs, Experience leveraging MITRE ATT&CK, Interpersonal skills, Communication skills, Proficiency with scripting, Proficiency with automation", "qualificationsPreferred" : "Proficiency with SIEM platform, Writing SIEM searches, Creating SIEM alerts, Analyzing SIEM log data, Forensic techniques, Threat hunting techniques, Identify adversary behavior, Detect anomalies, Analyze malware, Experience in large enterprise environments, Supporting multiple business lines, Experience securing distributed systems, Responding to incidents in distributed systems, Experience with cloud-native architectures, Experience with service-oriented environments, Experience with IoT device security, Experience with embedded systems forensics", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Are you ready to protect millions of homes and families as part of Amazon's elite Device Security Incident Response team? Join us in defending Ring, Blink, eero, and other industry-leading IoT platforms where every incident response decision impacts real people's safety and privacy. We’re looking for a seasoned security engineer to join a cross-functional Incident Response team supporting multiple Amazon devices brands. This is a hands-on role is focused on protecting the security and privacy of millions of customers by responding to incidents that impact real-world products and services. Our customers trust us with their safety and personal spaces, and it’s our responsibility to uphold that trust through strong, effective security practices. You will become a subject matter expert in the brands you support, leading our response to incidents through detection, assessment, containment, eradication, and post-mortem, while identifying opportunities to raise the bar on security for Amazon products and Customers. This high-visibility role requires clear communication, sound judgment under pressure, and the ability to work across organizational boundaries. You will be a strong advocate for customer safety and privacy, ensuring our devices deliver protection without compromise. You will document your work thoroughly, contribute to post-incident reviews, and collaborate with engineering teams to drive long-term improvements across the business. You will have opportunities to utilize, or expand your AI/ML skills, as we focus on automation. Key job responsibilities * Investigate and respond to security incidents in the Devices and Services org, setting the pace, and driving rapid, effective response that reduces or eliminates risk * Act as an incident responder or commander during active security events, coordinating technical response while keeping business stakeholders informed * Conduct thorough post-mortem analysis of security incidents, driving root cause identification, and identifying opportunities to improve security for Amazon products and services * Security consults with builder teams to ensure that security is designed into products from their inception * Collaborate with both technical, and non-technical stakeholders at all levels of the business, to execute rapid, and effective incident response * Develop, maintain, and respond to detections using Splunk/SOAR, as well as internal Amazon tooling * Combat various forms of fraud and abuse, by coordinating with business teams to develop comprehensive prevention/detection/response capabilities * Contribute to team efforts to increase capability and efficiency through automation of manual workloads and increase signal quality using AI/ML tools or approaches * Assist in runbook development, playbook tuning, and continuous process improvements * Participate in an on-call rotation (approx. two weekend days per month) * Work within a global, collaborative Amazon Security team where engineers and specialists support one another to solve complex problems and respond to security challenges together * Coordinate response efforts with other Incident Response teams at Amazon when appropriate, and share learnings * Maintain and support WAF products that protect Amazon services from abuse, drive adoption, evaluate or tune rules * Develop and update SQL queries to investigate security incidents, analyze log data, and extract relevant information from logs, databases and services. A day in the life As a Security Incident Response Engineer, you'll guide our team through complex security challenges impacting millions of customers. You'll: • Spearhead end-to-end incident response across Amazon's device ecosystem • Drive real-time decision-making during active incidents • Conduct impact assessments and implement containment strategies • Develop durable solutions with engineering teams • Proactively hunt threats and create new detection mechanisms • Consult on security for new product designs • Analyze data to identify hidden vulnerabilities We seek naturally curious problem-solvers who combine technical expertise with investigative instincts. You'll be the calm voice in the storm, transforming chaos into clarity and consistently safeguarding our customers' trust in Amazon's devices and services. About the team We're a tight-knit group of Security Engineers united by our mission to protect Amazon's customers. Though small, our impact is outsized. We've driven meaningful improvements across Amazon's device ecosystem through technical excellence and relentless customer advocacy. We're engineers first, approaching challenges with security expertise to create practical solutions. We champion \"better products\" over \"more products,\" solving problems collaboratively with empathy and partnership. We're not the team that just says \"no\" – we find secure paths forward. When incidents arise, we need our builders to feel relief when we arrive. We build bridges, not ivory towers, transforming security from a barrier into an enabler of innovation. Basic Qualifications: - * 5+ years of industry experience in cybersecurity, with a strong foundation in incident response, detection engineering, or security operations - * Working knowledge of AWS, WAF, EDR/XDR tools, network telemetry, and log analysis - * Practical knowledge of attacker tactics, techniques, and procedures (TTPs), with experience leveraging MITRE ATT&CK or similar frameworks to guide incident response or detection engineering - * Strong interpersonal and communication skills; able to calmly manage high-stakes coordination and decision-making - * Proficiency with scripting or automation (e.g., Python, PowerShell, Bash) Preferred Qualifications: - * Proficiency with at least one SIEM platform, including writing searches, creating alerts, and analyzing log data to support security investigations; experience with Splunk strongly preferred - * Exposure to AI/ML-driven anomaly detection, or behavior modeling tools - * Demonstrated ability to use forensic or threat hunting techniques to identify adversary behavior, detect anomalies, analyze potential malware to support containment and eradication - * Security certifications such as CISSP, CISM, CRISC, GCIH, CCIR, GCDA, etc. - * Prior experience in large enterprise environments or supporting multiple business lines - * Experience securing or responding to incidents in large-scale distributed systems, including cloud-native architectures and service-oriented environments - * Experience with IOT device security and embedded systems forensics Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Senior Incident Response Engineer, Devices & Services Security at Amazon.com Services LLC. Skills: Incident response, Security engineering, Detection engineering. Investigate security incidents. Respond to security incidents", "postedDate" : "2026-06-13T10:06:54.792", "createdAt" : "2026-06-13T10:06:54.792", "lastUpdated" : "2026-06-15T08:13:32.312", "ingestTimestamp" : "2026-06-13T10:06:54.792", "mongoId" : "68c2e423f8b1b0376634c56d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3072356/apply", "salaryAnnualMin" : 143300, "salaryAnnualMax" : 247600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Log analysis", "Network telemetry", "Attacker TTPs", "MITRE ATT&CK", "Scripting", "Automation", "Forensic analysis", "Malware analysis", "SQL queries", "Judgment under pressure", "Calmness", "Incident response", "Security engineering", "Detection engineering", "Security operations", "Threat hunting", "Risk assessment", "Root cause analysis", "Runbook development", "Playbook tuning", "Devices and Services security", "IoT platforms", "Customer safety", "Customer privacy", "Fraud and abuse", "Distributed systems", "Cloud-native architectures", "Service-oriented environments", "IoT device security", "Embedded systems", "CISSP", "CISM", "CRISC", "GCIH", "CCIR", "GCDA", "AWS", "WAF", "EDR/XDR", "Splunk", "SOAR", "SQL" ], "skillCount" : 42, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 398.81003, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Security" }, { "id" : "69d5e4962beec4dd3d931981", "title" : "AWS Security Operations/Incident Response Engineer", "company" : "Amazon Web Services, Inc.", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 136000.0, "max" : 184000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Herndon, Virginia, USA", "locations" : [ "Herndon, Virginia, USA" ], "certifications" : [ "GCIH", "GSEC", "Security+" ], "timestamp" : "2026-06-15T02:08:07.757", "fingerprint" : "0c97d9ed2d550c199650d60b2166fb48eb0e947fd71728e016fa19334f04915f", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10385139/apply", "externalId" : "f0a1c5b4-3fd4-4296-8fb3-027521c0d98b", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" } ], "locationText" : "Herndon, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Cryptography, Network security, Software security, Malware analysis, Forensics, Security operations, Incident response, Security intelligence", "professionalSkills" : [ "Risk assessment", "Information security" ], "hardSkillsList" : [ "Log analysis", "Forensics", "System development", "Tool development" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Forensics", "level" : "intermediate" }, { "name" : "System development", "level" : "intermediate" }, { "name" : "Tool development", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Security operations, Cloud security", "majorSkillsList" : [ "Incident response", "Security operations", "Cloud security" ], "coreResponsibilities" : "Respond to security incidents, Prevent future incidents, Design security responses, Coordinate security responses, Build security utilities, Build security tools, Communicate effectively, Instill best practices", "teamCollaboration" : "Multiple teams across organization; Security engineers", "domainKnowledge" : "Cloud security; National security program", "domainList" : [ "cloud-security", "national-security-program" ], "domainSpecificKnowledge" : [ "Cloud security", "National security program" ], "communicationSkills" : "Communicate at multiple levels", "problemSolvingSkills" : "Think like attacker; Think like defender", "specialRequirements" : "On-call responsibilities, US Citizen, TS/SCI with polygraph", "qualificationsBasic" : "Associate's degree or above, GCIH or GSEC or Security+, Current, active US Government Security Clearance of TS/SCI with Polygraph, US Citizen", "qualificationsPreferred" : "Experience with AWS products and services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Web Services (AWS) is the leading cloud provider, providing virtual infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS’s multi-tenant infrastructure. Governmental organizations are also looking to and depending on AWS for cloud solutions and services. The AWS Security Incident Response team is seeking a focused Security Engineer who can take on a leadership role in responding to security issues in support of our National Security program. This engineer will work as a part of a growing team of security engineers who are focused on protecting the AWS infrastructure that is used by our national security customers. Our security engineers perform many duties during an average day: log analysis, incident response, forensics, system/tooling development, and risk assessment, just to name a few. You must thrive in high-pressure situations, think like both an attacker and defender, and drive relevant teams to take the right actions in the right time frames to mitigate risks. They also need to balance technical risks against business needs and be able to articulate risks and mitigations to members of leadership at various levels. You should have a good mix of deep technical knowledge and a demonstrated background in information security. We value broad and deep technical knowledge, specifically in the fields of cryptography, network security, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active TS/SCI security clearance with polygraph. Key job responsibilities You should be able to accomplish most of the following: - Confidently and intelligently respond to security incidents, and proactively consider how to prevent the same type of incidents from occurring in the future. - Design and coordinate cohesive responses to security events that involve multiple teams across the organization. - Build security utilities and tools for internal use that enable you and your fellow Security Engineers to operate at high speed and wide scale. - Ability to communicate effectively at multiple levels of sensitivity, and multiple audiences. - Recognize, adopt and instill the best practices in security engineering fields throughout the organization: development, cryptography, network security, security operations, incident response, security intelligence. - Fulfill regular on-call responsibilities. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Associate's degree or above - GCIH (GIAC Certified Incident Handler) or GSEC (GIAC Security Essentials) or Security+ - Current, active US Government Security Clearance of TS/SCI with Polygraph Preferred Qualifications: - Experience with AWS products and services Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, VA, Herndon - 136,000.00 - 184,000.00 USD annually", "summaryDescription" : "AWS Security Operations/Incident Response Engineer at Amazon Web Services, Inc.. Skills: Incident response, Security operations, Cloud security. Respond to security incidents. Prevent future incidents", "postedDate" : "2026-06-13T01:35:14.469", "createdAt" : "2026-06-13T01:35:14.469", "lastUpdated" : "2026-06-15T02:08:07.757", "ingestTimestamp" : "2026-06-13T01:35:14.469", "mongoId" : "69d5e4962beec4dd3d931981", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10385139/apply", "salaryAnnualMin" : 136000, "salaryAnnualMax" : 184000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Log analysis", "Forensics", "System development", "Tool development", "Leadership", "Incident response", "Security operations", "Cloud security", "Risk assessment", "Information security", "National security program", "GCIH", "GSEC", "Security+" ], "skillCount" : 14, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 398.15445, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a3056e5f292fd229cf30757", "title" : "Corporate Recruiter", "company" : "Pansophic Learning", "industry" : "Education", "salary" : { "min" : 65000.0, "max" : 85000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Remote (Pansophic Learning)", "locations" : [ "Remote (Pansophic Learning)" ], "timestamp" : "2026-06-16T06:58:25.843", "fingerprint" : "d9c847f0a75283c61f46d29434543ab5f0df8db7b37a97bcdd815e80b6ab10ee", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/pansophiclearning/jobs/7773735003", "externalId" : "7773735003", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Talent acquisition", "Recruitment strategies", "Stakeholder management", "Talent sourcing", "Candidate screening", "Full-cycle recruiting", "Hiring management", "Service delivery", "Record keeping", "Compliance management", "Social media strategy" ], "hardSkillsList" : [ "Employment law", "Labor law" ], "hardSkills" : [ { "name" : "Employment law", "level" : "intermediate" }, { "name" : "Labor law", "level" : "intermediate" } ], "majorSkills" : "Talent acquisition, Recruitment strategies, Full-cycle recruiting", "majorSkillsList" : [ "Talent acquisition", "Recruitment strategies", "Full-cycle recruiting" ], "coreResponsibilities" : "Develop and maintain relationships with key Shared Services, Identify top active talent in the education industry, Engage with passive talent, Screen candidates to assess qualifications, experience, and fit, Manage the full-cycle recruiting process, Schedule interviews, Conduct background checks, Extend job offers, Ensure hiring managers and candidates receive high level, Maintain accurate records of candidate information and job, Advise company leadership on available tools and approaches, Ensure compliance with company policies and state/federal regulations, Partner with Marketing & Communications to implement a", "teamCollaboration" : "Collaboration with Company leadership; Partner with Marketing & Communications", "domainKnowledge" : "Education industry", "domainList" : [ "education-industry" ], "domainSpecificKnowledge" : [ "Education industry" ], "toolProficiency" : [ "Applicant tracking systems", "LinkedIn", "Indeed" ], "communicationSkills" : "Written communication; Verbal communication", "qualificationsBasic" : "Bachelor's degree required, 5+ years of experience in talent acquisition, Experience with major applicant tracking systems required, Experience with high growth, high-volume recruiting needs required, Experience developing and deploying practices that increase the pipeline of diverse talent for key talent communities, Basic knowledge of employment and labor laws across the United States", "qualificationsPreferred" : "Greenhouse preferred, Comfort working in a fast-paced environment", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Pansophic Learning is an education company that strives to provide students and educators exceptional learning solutions that enable them to maximize their success academically and in life, regardless of geographic, financial, or demographic circumstance. These learning solutions include high quality content, technology, teaching and exceptional schools. We are looking for a creative Talent Acquisition expert who works in collaboration with Company leadership to develop and help implement talent recruitment strategies nationally in a fast-paced, high growth environment. Responsibilities Develop and maintain relationships with key Shared Services stakeholders Identify top active talent in the education industry through various sourcing methods, including online job boards, social media, and referrals Engage with passive talent through LinkedIn, Indeed, etc Screen candidates to assess their qualifications, experience, and fit for various Shared Services roles Manage the full-cycle recruiting process, including scheduling interviews, conducting background checks, and extending job offers Ensure hiring managers and candidates consistently receive a high level of service throughout the screening, selection and placement process Maintain accurate records of candidate information and job postings Understands talent acquisition best practices and advises company leadership on available tools and approaches Ensures compliance with all necessary company policies and state/federal regulations Partner with Marketing & Communications to implement a social media strategy Other duties as assigned Skills/Qualifications Bachelor’s degree required 5+ years of experience in talent acquisition Experience with major applicant tracking systems required, Greenhouse preferred Experience with high growth, high-volume recruiting needs required Experience developing and deploying practices that increase the pipeline of diverse talent for key talent communities Basic knowledge of employment and labor laws across the United States Comfort working in a fast-paced environment Strong written and verbal communication skills Strong time management skills Compensation and Benefits: The compensation and benefits information below is accurate as of the date of this posting. The Company reserves the right to modify this information at any time, with or without notice, subject to applicable law. The annual starting salary for this position is between $65,000 – $85,000 annually. Factors which may affect starting pay within this range may include geography/market, skills, education, experience and other qualifications of the successful candidate. We offer the following benefits for this position, subject to applicable eligibility requirements: medical insurance, dental insurance, vision insurance, 401(k) retirement plan, life insurance, long-term disability insurance, short-term disability insurance, 10 paid holidays annually. Paid Time Off: Paid Time Off to cover sick, vacation, and personal absences. We offer 4 unique health insurance plans to choose from that cover a wide range of deductibles and co- insurance levels. Our goal is to provide you with maximum choice in finding a plan that meets you and your family’s needs. Employees can choose from co-pay or High Deductible Health Plans. EQUAL EMPLOYMENT OPPORTUNITY It is our policy to abide by all federal, state and local laws prohibiting employment discrimination based solely on a person’s race, color, religious creed, sex, national origin, ancestry, citizenship status, pregnancy, childbirth, physical disability, mental and/or intellectual disability, age, military status, veteran status (including protected veterans), marital status, registered domestic partner or civil union status, familial status, gender (including sex stereotyping and gender identity or expression), medical condition, genetic information, sexual orientation, or any other protected status except where a reasonable, bona fide occupational qualification exists. #LI-AB1", "summaryDescription" : "Corporate Recruiter at Pansophic Learning. Skills: Talent acquisition, Recruitment strategies, Full-cycle recruiting. Develop and maintain relationships with key Shared Services. Identify top active talent in the education industry", "postedDate" : "2026-06-15T23:19:58.753", "createdAt" : "2026-06-15T23:19:58.753", "lastUpdated" : "2026-06-16T06:58:25.843", "ingestTimestamp" : "2026-06-15T23:19:58.753", "mongoId" : "6a3056e5f292fd229cf30757", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 65000, "salaryAnnualMax" : 85000, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "Employment law", "Labor law", "Talent acquisition", "Recruitment strategies", "Full-cycle recruiting", "Stakeholder management", "Talent sourcing", "Candidate screening", "Hiring management", "Service delivery", "Record keeping", "Compliance management", "Social media strategy", "Education industry", "Applicant tracking systems", "LinkedIn", "Indeed" ], "skillCount" : 17, "jobCategory" : "operations", "jobSubcategory" : "hr", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 397.16534, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Education", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305fb0f292fd229cf7f937", "title" : "Corporate Recruiter", "company" : "Level. works", "industry" : "Logistics", "salary" : { "min" : 3750.0, "max" : 5000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : false }, "location" : "Rotterdam, South Holland, Netherlands", "locations" : [ "Rotterdam", "South Holland", "Netherlands" ], "timestamp" : "2026-06-16T09:59:40.990", "fingerprint" : "03eb9bccffdbdf34e97ab8ce63df8e59d275f17e8c45c49ab76bf3492918ce0f", "source" : "greenhouse", "language" : "nl", "applyUrl" : "https://job-boards.eu.greenhouse.io/levelworks/jobs/4040331101", "externalId" : "4040331101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Rotterdam", "state" : "South Holland", "country" : "Netherlands", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "51.9244424,4.4777500" } ], "locationText" : "Rotterdam, South Holland, Netherlands", "employmentType" : "FULL_TIME", "minimumEducation" : "HBO", "professionalSkills" : [ "Talent acquisition", "Recruitment process", "Onboarding", "Offboarding", "Wervingsplannen" ], "hardSkillsList" : [ "Sourcing", "Recruitment", "Onboarding", "Offboarding" ], "softSkillsList" : [ "Energiek", "Proactief", "Communicatief" ], "hardSkills" : [ { "name" : "Sourcing", "level" : "intermediate" }, { "name" : "Recruitment", "level" : "intermediate" }, { "name" : "Onboarding", "level" : "intermediate" }, { "name" : "Offboarding", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Energiek" }, { "name" : "Proactief" }, { "name" : "Communicatief" } ], "majorSkills" : "Recruitment, Talent acquisition, Onboarding", "majorSkillsList" : [ "Recruitment", "Talent acquisition", "Onboarding" ], "coreResponsibilities" : "Verantwoordelijk voor recruitmentproces van A-Z, Samenwerken met marketing afdeling, Contact met andere disciplines om vacatures te bespreken, Opzetten van onboarding, Opzetten van offboarding, Zelfstandig wervingsplannen opzetten, Wervingsplannen aanpassen, Eindverantwoordelijk voor gehele proces, Communiceren met kandidaten, Samenwerken met hiring managers, Stimuleren van groei en ontwikkeling, Opzetten HR-processen", "teamCollaboration" : "Samenwerken met oprichter; Samenwerken met Corporate Recruiter; Samenwerken met marketing afdeling; Samenwerken met andere disciplines; Samenwerken met hiring managers", "domainKnowledge" : "Arbeidsbemiddeling; Talent management", "domainList" : [ "arbeidsbemiddeling", "talent-management" ], "domainSpecificKnowledge" : [ "Arbeidsbemiddeling", "Talent management" ], "communicationSkills" : "Heldere inzichten; Open communicatie; Eerlijke communicatie", "continuousLearning" : "Budget voor opleiding", "qualificationsBasic" : "HBO werk- en denkniveau, Minimaal 3 jaar ervaring als Recruiter/Recruitment Consultant", "qualificationsPreferred" : "Relevante werkervaring als Talent Acquisition Specialist", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Als Corporate Recruiter pak je een zelfstandige rol waarin je hét gezicht en eerste aanspreekpunt bent voor nieuw talent. Je schakelt doorlopend met verschillende afdelingen en werkt nauw samen met oprichter Roel en Corporate Recruiter Isabel. Samen zetten jullie alles op alles om de juiste kandidaten te vinden die meebouwen aan onze missie “Wij zijn Level.works, de meest vooruitstrevende speler in de arbeidsbemiddeling die werk toegankelijk maakt en kansen biedt aan degene die dat verdienen\". WAT JE GAAT DOEN In de rol van Corporate Recruiter ben je verantwoordelijk voor het recruitmentproces van A- Z. Je werkt samen met onze marketing afdeling om de juiste kanalen in te zetten en heb je veelvuldig contact met andere disciplines om de vacatures te bespreken. Naast recruitment werkzaamheden zet je ook een goede onboarding en offboarding neer. Verder: Zet je zelfstandig wervingsplannen op en past deze snel aan om in te spelen op onze groei. Je bent eindverantwoordelijk voor het gehele proces, van sourcing tot onboarding; Communiceer je open en eerlijk met kandidaten en geeft helder inzicht in de kansen en uitdagingen die bij een snelgroeiende organisatie horen; Werk je intensief samen met hiring managers. Door korte lijntjes maak je snel beslissingen en houd je iedereen betrokken; Stimuleer je groei en ontwikkeling. Naast het aantrekken van kandidaten die bij onze cultuur passen, ben je ook gericht op je eigen ontwikkeling en groei binnen het vakgebied; Zet je de HR-processen op voor zowel nieuwe medewerkers als huidige medewerkers met onze ondersteuning. WAT JE DAARVOOR TERUGKRIJGT Een salaris tussen €3.750 tot €5.000 per maand op voltijd basis, passend bij jouw ervaring; Pensioenregeling, 25 vakantiedagen en 8% vakantiegeld; Een NS-Businesscard voor je reis; Elke dag een uitgebreide lunch om samen met je collega’s van te genieten; Veel vrijheid en verantwoordelijkheid om deze functie eigen te maken. Je kunt hybride werken, zowel thuis als op kantoor; Een kans om jouw ideeën te delen en in je werk te implementeren; Een geweldige werkplek op de mooiste plek van Rotterdam, schuin tegenover Rotterdam Centraal Station; Een budget voor jouw opleiding Veel leuke extra's met het hele team zoals vrijdagmiddagborrels, maandelijkse activiteiten, diners, skitrip, sport events en andere uitstapjes; WAT JE MEENEEMT Je beschikt over minimaal HBO werk- en denkniveau; Je hebt relevante werkervaring als Talent Acquisition Specialist of minimaal 3 jaar ervaring als Recruiter/Recruitment Consultant; Je vindt het leuk om mensen te ondersteunen en met hen te verbinden; Je bent energiek, proactief en beschikt over uitzonderlijke communicatieve vaardigheden; Je neemt initiatief en voelt je verantwoordelijk voor elke stap in het recruitmentproces. Je bent vloeiend in zowel geschreven als gesproken Nederlands. Verder heb je een goede beheersing van de Engelse taal. WIE ZIJN WIJ Level.works levert praktisch opgeleid talent voor techniek, openbaar vervoer, transport en logistiek. Wij vinden, selecteren en leiden op zodat onze opdrachtgevers altijd de juiste mensen heeft. Met onze unieke proposities en vaardigheden, ontwikkelen wij ons tot meest vooruitstrevende arbeidsbemiddelaar. Wij zijn overtuigd dat werk toegankelijk moet zijn en iedereen de mogelijkheid verdient om te groeien. Wij zijn een dynamische en innovatieve snelgroeiende scale-up met een informele sfeer. Met ruim 80 collega’s kun je gewoon jezelf zijn bij ons. BEN JE ENTHOUSIAST? Denk jij na het lezen van deze uitdaging dat jij de beste match bent voor deze rol? Dan ontvangen we graag je gegevens via de sollicitatieknop.", "summaryDescription" : "Corporate Recruiter at Level. works. Skills: Recruitment, Talent acquisition, Onboarding. Verantwoordelijk voor recruitmentproces van A-Z. Samenwerken met marketing afdeling", "postedDate" : "2026-06-15T23:23:01.402", "createdAt" : "2026-06-15T23:23:01.402", "lastUpdated" : "2026-06-16T09:59:40.990", "ingestTimestamp" : "2026-06-15T23:23:01.402", "mongoId" : "6a305fb0f292fd229cf7f937", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Sourcing", "Recruitment", "Onboarding", "Offboarding", "Energiek", "Proactief", "Communicatief", "Talent acquisition", "Recruitment process", "Wervingsplannen", "Arbeidsbemiddeling", "Talent management" ], "skillCount" : 12, "jobCategory" : "operations", "jobSubcategory" : "hr", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 392.67386, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Staffing and Recruiting", "llmIndustryConfidence" : 0.98 }, { "id" : "68c2e412f8b1b0376634c220", "title" : "Security Engineer, AWS Global Services", "company" : "Amazon Web Services, Inc.", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 125500.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Dallas, Texas, USA", "locations" : [ "Dallas, Texas, USA" ], "timestamp" : "2026-06-16T02:15:50.236", "fingerprint" : "3392e875c3aecdd97b186d51b13a88b5b9dcb3ad1bd3555c75bc5b3bde3b9439", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3071644/apply", "externalId" : "4623f239-96aa-4999-aa47-0ce9ce373481", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Dallas", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "32.7762719,-96.7968559" } ], "locationText" : "Dallas, Texas, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Go, AWS, Cloud security, Security automation, Incident response, Threat modeling, Security architecture, CI/CD, Container security, Infrastructure as code", "professionalSkills" : [ "System design", "Risk assessment", "Security analysis" ], "hardSkillsList" : [ "Security engineering", "Cloud security controls", "Security automation scripting" ], "hardSkills" : [ { "name" : "Security engineering", "level" : "intermediate" }, { "name" : "Cloud security controls", "level" : "intermediate" }, { "name" : "Security automation scripting", "level" : "intermediate" } ], "majorSkills" : "Cloud security, Security engineering, Incident response", "majorSkillsList" : [ "Cloud security", "Security engineering", "Incident response" ], "coreResponsibilities" : "Design and implement security controls, Develop and maintain security automation, Respond to security incidents, Conduct threat modeling exercises, Develop security architecture designs, Collaborate with engineering teams, Improve security posture, Identify and mitigate security risks, Stay current with security threats", "teamCollaboration" : "Engineering teams; Cross-functional teams", "domainKnowledge" : "Cloud security; AWS services; Security best practices; Threat landscape", "domainList" : [ "cloud-security", "aws-services", "security-best-practices", "threat-landscape" ], "domainSpecificKnowledge" : [ "Cloud security", "AWS services", "Security best practices", "Threat landscape" ], "toolProficiency" : [ "AWS security services", "Security tooling" ], "documentationSkills" : "Technical documentation", "continuousLearning" : "Stay current with security threats", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Improve security posture; Mitigate security risks", "qualificationsBasic" : "Bachelor's degree or equivalent practical experience, 5+ years of experience in software development, 3+ years of experience in security engineering, Experience with cloud security controls, Experience with security automation, Experience with incident response, Experience with threat modeling, Experience with security architecture", "qualificationsPreferred" : "Master's degree or PhD in Computer Science or related field, Experience with AWS security services, Experience with security tooling, Experience with programming languages like Python or Go, Experience with CI/CD pipelines, Experience with container security, Experience with infrastructure as code", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Global Services includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center. You’ll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud. Do you want to work on planetary scale security solutions in the cloud? Are you skilled at performing Incident Response activities and helping customers build threat detection and incident response capabilities using highly scalable computing architectures? Are you excited to help customers automate security operations giving them unprecedented capability and agility? Do you enjoy working on fast-paced complex projects focused on game changing business outcomes for customers globally? AWS Security Incident Response Service is seeking a motivated professional who desires to join our global, innovative & high-energy Security team. The right candidate must thrive in high-pressure situations, think like both an attacker & defender, and help relevant teams take the right actions in the right timeframes to mitigate risks. As a member of the AWS Customer Incident Response Team (CIRT) in the AWS Global Services Security Organization you will have the opportunity to pioneer technically excellent security solutions supporting customer initiatives that are meaningful to their business. As a member of AWS CIRT, you will be able to delight customers with leading edge security incident response via AWS Security Incident Response service and other escalation mechanisms. Our goal of securing the world’s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers. Building on those experiences you’ll collaborate with AWS service teams on new features, innovate with new technologies, and explore new challenges. Key job responsibilities • Perform and oversee incident response operations • Become a deep technical resource that earns the trust of customer stakeholders before, during, and after a security event. • Independently contribute to teams that include Amazonians, partners, and customers to build and deploy threat detection and incident response capabilities. • Design, build, and deploy solutions to automate security operations and incident response on AWS. • Independently contribute to internal builder projects to develop new consulting engagement models and capabilities for customers. • Develop high-quality content, such as automation tools, reference architectures, and white papers to help our consultants, partners, and customers build on the work that we deliver. • Innovate on behalf of customers by translating your thoughts into action-oriented results. • Mentor and invest in our employees, partners, and customers to raise the bar for our customers. • Periodic on-call required. A day in the life As a Security Engineer on the proactive side of AWS CIRT, responsibilities include monitoring networks and systems for potential threats, performing triage for security alerts, documenting suspicious activity, and reporting issues so they can be adequately handled. You will work alongside our security engineers and partner teams to perform daily threat detection and incident response, using the full capability of AWS technologies and services to detect and mitigate cyber threats at a massive scale and help protect AWS Customers. You should also enjoy learning about the most up-to-date new technologies and procedures to protect information systems and data. About the team Proactive side of AWS CIRT provides 24/7 threat monitoring, investigation, and response across for customer’s AWS environments. AWS CIRT enhances existing security capabilities by supporting security monitoring for all native AWS services and supports vendor agnostic detective and protective controls to provide holistic security controls for customers. This is done by leveraging data on common attack techniques to enhance detective controls and incident response, then building auto-remediation capabilities to minimize disruption to customer workloads. When a security event does happen, you will be there provide guidance. About AWS Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS? Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Completed Bachelor’s Degree in Computer Science, or equivalent experience - Demonstrated experience in a technical field and understanding of security concepts and common security threats in host operating systems (Linux/ Windows), Network security concepts, log analysis and investigation. - Familiarity with at least one functional scripting language (e.g. Python, JavaScript, shell scripting). Preferred Qualifications: - Knowledge of common system security vulnerabilities and remediation techniques. - Understanding of the tools, tactics, and techniques used by threat actors during security events. - Familiarity/experience with AWS services and security concepts. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $125,500/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Engineer, AWS Global Services at Amazon Web Services, Inc.. Skills: Cloud security, Security engineering, Incident response. Design and implement security controls. Develop and maintain security automation", "postedDate" : "2026-06-14T19:43:16.913", "createdAt" : "2026-06-14T19:43:16.913", "lastUpdated" : "2026-06-16T02:15:50.236", "ingestTimestamp" : "2026-06-14T19:43:16.913", "mongoId" : "68c2e412f8b1b0376634c220", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3071644/apply", "salaryAnnualMin" : 125500, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security engineering", "Cloud security controls", "Security automation scripting", "Cloud security", "Incident response", "System design", "Risk assessment", "Security analysis", "AWS services", "Security best practices", "Threat landscape", "AWS security services", "Security tooling" ], "skillCount" : 13, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 387.54572, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a191e7758b93c861e39f6d9", "title" : "Security Operation", "company" : "Mercedes-Benz Group China Ltd.", "industry" : "Cybersecurity", "salary" : { "min" : 450000.0, "max" : 750000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Operation role in Beijing, China, adjusted for the technology industry and a large company size." }, "location" : "China (Mainland)-Beijing-Beijing", "locations" : [ "China (Mainland)-Beijing-Beijing", "Daimler Tower 8, Wangjing Street Chaoyang District, , Beijing" ], "certifications" : [ "CISA", "CISSP", "CISM" ], "timestamp" : "2026-06-16T06:35:48.202", "fingerprint" : "0f6917ea953a3e131579c32b1270584e12d4a83b21426a992e4f929c5c0f6ad5", "source" : "taleo", "language" : "en", "applyUrl" : "https://tas-daimler.taleo.net/careersection/ex/jobdetail.ftl?job=873155", "externalId" : "873155", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Beijing", "country" : "China", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "39.9057136,116.3912972" } ], "locationText" : "Beijing, China", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SIEM, SOAR, Firewalls, Intrusion detection, Vulnerability scanners, Python, PowerShell, AWS, Azure, Ali Cloud", "professionalSkills" : [ "Risk assessment", "Incident response", "Vulnerability management", "Log analysis", "Forensic investigations", "Threat analysis" ], "hardSkillsList" : [ "Security operations", "Incident response", "Vulnerability management", "Threat detection", "Forensic investigation" ], "softSkillsList" : [ "Adaptability" ], "hardSkills" : [ { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Adaptability" } ], "majorSkills" : "Security operations, Incident response, Vulnerability management", "majorSkillsList" : [ "Security operations", "Incident response", "Vulnerability management" ], "coreResponsibilities" : "Safeguard information assets, Manage security risks, Respond to incidents, Improve security posture, Protect information assets, Identify security risks, Assess security risks, Mitigate security risks, Lead incident response, Coordinate incident response, Monitor security incidents, Respond to security incidents, Contain security threats, Eradicate security threats, Recover from security threats, Investigate security incidents, Analyze logs, Conduct forensic investigations, Develop incident reports, Identify gaps, Recommend improvements, Coordinate response activities, Conduct vulnerability assessments, Manage remediation efforts, Identify vulnerabilities, Assess vulnerabilities, Report vulnerabilities, Remediate vulnerabilities, Fine-tune detection rules, Minimize false positives, Improve detection accuracy, Analyze security measures, Update policies, Update configurations, Update procedures, Track emerging threats, Track attack patterns, Track tactics, Track techniques, Track procedures, Develop documentation, Maintain documentation, Develop playbooks, Maintain playbooks, Develop procedures, Maintain procedures, Onboard new team members, Facilitate team integration, Develop planning processes, Develop collaboration processes, Provide technical support, Provide administrative support, Integrate security into SDLC, Provide security training, Provide security awareness, Communicate security status, Communicate security risks, Communicate security incidents", "teamCollaboration" : "IT teams; RD application teams; Business stakeholders; Executive leadership", "domainKnowledge" : "Security operations; Incident response; Vulnerability management; Cloud platforms; ISO 27001; SOC; NIST", "domainList" : [ "security-operations", "incident-response", "vulnerability-management", "cloud-platforms", "iso-27001", "soc", "nist" ], "domainSpecificKnowledge" : [ "Security operations", "Incident response", "Vulnerability management", "Cloud platforms", "ISO 27001", "SOC", "NIST" ], "toolProficiency" : [ "SIEM", "SOAR", "Firewalls", "Intrusion detection", "Vulnerability scanners" ], "communicationSkills" : "Written communication; Verbal communication; Technical audiences; Executive audiences", "documentationSkills" : "Documentation; Playbooks; Standard operating procedures", "problemSolvingSkills" : "Analytical skills; Troubleshooting skills; Issue resolution", "outcomesObjectives" : "Minimize impact; Ensure timely recovery; Minimize false positives; Improve detection accuracy", "qualificationsBasic" : "5+ years experience in security operations, Bachelor's degree in Computer Science", "qualificationsPreferred" : "CISA certification, CISSP certification, CISM certification", "remoteFriendly" : false, "rawDescription" : "Objective of job To safeguard the organization's information assets by proactively managing security risks, effectively responding to incidents, and continuously improving the overall security posture. -Protect the organization's information assets by maintaining confidentiality, integrity, and availability. -Proactively identify, assess, and mitigate security risks and vulnerabilities. -Lead and coordinate effective responses to security incidents, minimizing impact and ensuring timely recovery. -Continuously improve the organization's security posture through proactive monitoring, analysis, and implementation of security best practices. -Ensure compliance with relevant security standards, regulations, and policies. Job designation •Security Incident Management -Monitor and respond to security incidents in alignment with incident response protocols. -Lead incident response efforts to ensure timely containment, eradication, and recovery from security threats. -Conduct thorough investigations of security incidents, including log analysis, host-based and network forensic investigations, to determine the root cause and impact. -Develop incident analysis and findings reports for management, including gap identification and recommendations for improvement. -Coordinate investigation, containment, and other response activities with business stakeholders and groups. •Vulnerability Management -Conduct vulnerability assessments and manage remediation efforts. -Continually identify, assess, report on, manage, and remediate vulnerabilities across endpoints, workloads, and systems. •Security Operations -Fine-tune incident detection and alert-triggering rules to minimize false positives and improve detection accuracy. -Analyze and improve security measures by assessing and updating policies, configurations, and procedures. -Maintain situational awareness by tracking emerging threats, attack patterns, and tactics, techniques, and procedures -Develop and maintain documentation, playbooks, and standard operating procedures. -Perform onboarding of new team members and facilitate smooth integration. -Help develop processes used for internal and external planning and collaboration. -Provide technical and administrative support for day-to-day operations. •Collaboration and Communication -Collaborate with IT and RD application teams to ensure security is integrated into all stages of the software development lifecycle. -Provide security training and awareness programs for employees. -Communicate security status, risks, and incidents to executive leadership and other key stakeholders. Qualification •Technical Skills and Knowledge: -Strong understanding of security operations concepts, incident response methodologies, and vulnerability management principles. Hands-on experience administering and configuring security tools such as SIEM, SOAR, firewalls, intrusion detection/prevention systems, and vulnerability scanners. -Familiarity with scripting languages (e.g., Python, PowerShell) for task automation and tool customization. -Knowledge of cloud platforms such as AWS, Azure, Ali Cloud or other cloud platform. -Strong analytical and troubleshooting skills for rapid issue resolution under pressure. -Excellent communication skills, both written and verbal, for technical and executive audiences. -Adaptability and resilience in the face of evolving cyber threats. •Proficiency in security frameworks and various compliance standards like ISO 27001, SOC, NIST, etc. •Relevant certifications, CISA, CISSP, CISM •> 5 years experience in security operations, incident response, threat detection and analysis, or similar roles •Education: Bachelor's degree and above in Computer Science encompassing Information Security Mercedes-Benz Group China Ltd.", "summaryDescription" : "Security Operation at Mercedes-Benz Group China Ltd.. Skills: Security operations, Incident response, Vulnerability management. Safeguard information assets. Manage security risks", "createdAt" : "2026-06-14T21:18:50.139", "lastUpdated" : "2026-06-16T06:35:48.202", "ingestTimestamp" : "2026-06-14T21:18:50.139", "mongoId" : "6a191e7758b93c861e39f6d9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Security operations", "Incident response", "Vulnerability management", "Threat detection", "Forensic investigation", "Adaptability", "Risk assessment", "Log analysis", "Forensic investigations", "Threat analysis", "Cloud platforms", "ISO 27001", "SOC", "NIST", "CISA", "CISSP", "CISM", "SIEM", "SOAR", "Firewalls", "Intrusion detection", "Vulnerability scanners" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 386.07004, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "68e0a7e4ce260f92cbf8eb8e", "title" : "Sr. Security Engineer, Defensive Security, Corporate Services Security (CPSS)", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 143300.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Arlington, Virginia, USA", "locations" : [ "Arlington, Virginia, USA" ], "timestamp" : "2026-06-15T03:58:54.848", "fingerprint" : "fde55c64fe4103a0eadc013c8888c208eb2f0053f5c7ce2103671295d3ab1b32", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3099439/apply", "externalId" : "7bdf575a-1635-4606-870c-91c6abe3cabe", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Scripting, Programming", "professionalSkills" : [ "Risk assessment", "Threat intelligence", "Fraud detection", "Security automation", "Risk identification" ], "hardSkillsList" : [ "Security code reviewing", "Log analysis", "Command line automation" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Security code reviewing", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Command line automation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Defensive security, Threat intelligence, Security automation", "majorSkillsList" : [ "Defensive security", "Threat intelligence", "Security automation" ], "coreResponsibilities" : "Deliver security automation, Develop custom tooling, Operationalize threat intelligence data, Partner with internal teams, Assist in improvement of operational excellence", "teamCollaboration" : "Cross-organizational tooling; Internal teams", "domainKnowledge" : "Corporate services security; Defensive security; Fraud emulation; Risk assessment; Customer platforms", "domainList" : [ "corporate-services-security", "defensive-security", "fraud-emulation", "risk-assessment", "customer-platforms" ], "domainSpecificKnowledge" : [ "Corporate services security", "Defensive security", "Fraud emulation", "Risk assessment", "Customer platforms" ], "problemSolvingSkills" : "Troubleshooting systems issues; Analyzing logs", "qualificationsBasic" : "5+ years identifying security issues, Experience scripting/programming, Experience troubleshooting systems issues, Experience identifying security vulnerabilities, Experience as a mentor", "qualificationsPreferred" : "Experience applying threat modeling, Experience with security in microservices, Experience with security in web services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We are open to hiring candidates to work out of one of the following locations: Arlington, VA, USA As a Senior Security Engineer in the Defensive Security team, you will play a pivotal role in integrating threat intelligence data into our security detections, developing cross-organizational tooling, and providing undifferentiated fraud emulation, detection, and response capabilities. The Corporate Services Security (CPSS) organization is looking for a Senior Security Engineer to join it's Defensive Security team. CPSS is responsible for protecting and defending the data and systems of Amazon’s corporate services. Key job responsibilities - Deliver security automation to support security event operations and threat emulation activities - Develop custom tooling supporting fraud detection capabilities - Operationalize raw threat intelligence data to enable informed risk assessments of customer platforms - Partner with other internal teams across the CPSS organization to drive key engineering and business decisions impacting security across our customer's domains - Assist in the improvement of operational excellence for our customer's business and technical teams A day in the life CPSS's Capabilities Team is the team providing cross-functional capabilities that support peer DefSec teams and the larger CPSS organization. We tackle ambitious projects that allow our customers to quickly operationalize raw threat intelligence and operationalize it for use across Amazon. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training and Career growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Basic Qualifications: - 5+ years of work in identifying security issues and risks, and developing mitigation plans experience - Experience (non-internship) in scripting, programming, and security code reviewing in a common programming language - Experience (non-internship) in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools - Experience working in identifying security issues and risks, and developing mitigation plans - Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques - Experience as a mentor, tech lead or leading an engineering team Preferred Qualifications: - Experience applying threat modeling or other risk identification techniques or equivalent - Experience with security in service-oriented architectures/microservices and web services Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Sr. Security Engineer, Defensive Security, Corporate Services Security (CPSS) at Amazon.com Services LLC. Skills: Defensive security, Threat intelligence, Security automation. Deliver security automation. Develop custom tooling", "postedDate" : "2026-06-13T08:35:25.874", "createdAt" : "2026-06-13T08:35:25.874", "lastUpdated" : "2026-06-15T03:58:54.848", "ingestTimestamp" : "2026-06-13T08:35:25.874", "mongoId" : "68e0a7e4ce260f92cbf8eb8e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3099439/apply", "salaryAnnualMin" : 143300, "salaryAnnualMax" : 247600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security code reviewing", "Log analysis", "Command line automation", "Mentoring", "Defensive security", "Threat intelligence", "Security automation", "Risk assessment", "Fraud detection", "Risk identification", "Corporate services security", "Fraud emulation", "Customer platforms" ], "skillCount" : 13, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 385.9888, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "69cf73592beec4dd3d9c848a", "title" : "Security Operation", "company" : "Mercedes-Benz Group China Ltd.", "industry" : "Cybersecurity", "salary" : { "min" : 350000.0, "max" : 600000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Operation role in Beijing, China, adjusted for the technology industry and a large company size." }, "location" : "China (Mainland)-Beijing-Beijing", "locations" : [ "China (Mainland)-Beijing-Beijing", "Daimler Tower 8, Wangjing Street Chaoyang District, , Beijing" ], "certifications" : [ "CISA", "CISSP", "CISM" ], "timestamp" : "2026-06-16T01:03:53.353", "fingerprint" : "12e7c692808b606638a409de22e204ced74c36d329570ca4dc447417c29bfe36", "source" : "taleo", "language" : "en", "applyUrl" : "https://daimler.taleo.net/careersection/ex/jobdetail.ftl?job=873155", "externalId" : "873155", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Beijing", "country" : "China", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "39.9057136,116.3912972" } ], "locationText" : "Beijing, China", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SIEM, SOAR, Firewalls, Intrusion detection, Vulnerability scanners, Python, PowerShell, AWS, Azure, Ali Cloud", "professionalSkills" : [ "Security operations", "Incident response", "Vulnerability management", "Risk assessment", "Troubleshooting" ], "hardSkillsList" : [ "Log analysis", "Forensic investigations" ], "softSkillsList" : [ "Adaptability" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Forensic investigations", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Adaptability" } ], "majorSkills" : "Security operations, Incident response, Vulnerability management", "majorSkillsList" : [ "Security operations", "Incident response", "Vulnerability management" ], "coreResponsibilities" : "Safeguard information assets, Manage security risks, Respond to incidents, Improve security posture, Protect information assets, Identify security risks, Assess security risks, Mitigate security risks, Lead incident response, Coordinate incident response, Monitor security incidents, Respond to security incidents, Contain security threats, Eradicate security threats, Recover from security threats, Investigate security incidents, Analyze logs, Conduct forensic investigations, Develop incident reports, Identify gaps, Recommend improvements, Coordinate response activities, Conduct vulnerability assessments, Manage remediation efforts, Identify vulnerabilities, Assess vulnerabilities, Report vulnerabilities, Remediate vulnerabilities, Fine-tune detection rules, Improve detection accuracy, Analyze security measures, Update policies, Update configurations, Update procedures, Track emerging threats, Track attack patterns, Track tactics, Track techniques, Track procedures, Develop documentation, Maintain documentation, Develop playbooks, Maintain playbooks, Develop procedures, Maintain procedures, Onboard new team members, Facilitate team integration, Develop planning processes, Develop collaboration processes, Provide technical support, Provide administrative support, Integrate security into SDLC, Provide security training, Provide awareness programs, Communicate security status, Communicate security risks, Communicate security incidents", "teamCollaboration" : "IT teams; RD application teams; Business stakeholders; Executive leadership", "domainKnowledge" : "Security operations concepts; Incident response methodologies; Vulnerability management principles; Cloud platforms; Security frameworks; Compliance standards", "domainList" : [ "security-operations-concepts", "incident-response-methodologies", "vulnerability-management-principles", "cloud-platforms", "security-frameworks", "compliance-standards" ], "domainSpecificKnowledge" : [ "Security operations concepts", "Incident response methodologies", "Vulnerability management principles", "Cloud platforms", "Security frameworks", "Compliance standards" ], "toolProficiency" : [ "SIEM", "SOAR", "Firewalls", "Intrusion detection", "Vulnerability scanners" ], "communicationSkills" : "Written communication; Verbal communication; Technical audiences; Executive audiences", "documentationSkills" : "Documentation; Playbooks; Standard operating procedures", "problemSolvingSkills" : "Analytical skills; Troubleshooting skills; Issue resolution", "qualificationsBasic" : "5+ years experience in security operations, Bachelor's degree and above in Computer Science", "qualificationsPreferred" : "CISA, CISSP, CISM certifications", "remoteFriendly" : false, "rawDescription" : "Objective of job To safeguard the organization's information assets by proactively managing security risks, effectively responding to incidents, and continuously improving the overall security posture. -Protect the organization's information assets by maintaining confidentiality, integrity, and availability. -Proactively identify, assess, and mitigate security risks and vulnerabilities. -Lead and coordinate effective responses to security incidents, minimizing impact and ensuring timely recovery. -Continuously improve the organization's security posture through proactive monitoring, analysis, and implementation of security best practices. -Ensure compliance with relevant security standards, regulations, and policies. Job designation •Security Incident Management -Monitor and respond to security incidents in alignment with incident response protocols. -Lead incident response efforts to ensure timely containment, eradication, and recovery from security threats. -Conduct thorough investigations of security incidents, including log analysis, host-based and network forensic investigations, to determine the root cause and impact. -Develop incident analysis and findings reports for management, including gap identification and recommendations for improvement. -Coordinate investigation, containment, and other response activities with business stakeholders and groups. •Vulnerability Management -Conduct vulnerability assessments and manage remediation efforts. -Continually identify, assess, report on, manage, and remediate vulnerabilities across endpoints, workloads, and systems. •Security Operations -Fine-tune incident detection and alert-triggering rules to minimize false positives and improve detection accuracy. -Analyze and improve security measures by assessing and updating policies, configurations, and procedures. -Maintain situational awareness by tracking emerging threats, attack patterns, and tactics, techniques, and procedures -Develop and maintain documentation, playbooks, and standard operating procedures. -Perform onboarding of new team members and facilitate smooth integration. -Help develop processes used for internal and external planning and collaboration. -Provide technical and administrative support for day-to-day operations. •Collaboration and Communication -Collaborate with IT and RD application teams to ensure security is integrated into all stages of the software development lifecycle. -Provide security training and awareness programs for employees. -Communicate security status, risks, and incidents to executive leadership and other key stakeholders. Qualification •Technical Skills and Knowledge: -Strong understanding of security operations concepts, incident response methodologies, and vulnerability management principles. Hands-on experience administering and configuring security tools such as SIEM, SOAR, firewalls, intrusion detection/prevention systems, and vulnerability scanners. -Familiarity with scripting languages (e.g., Python, PowerShell) for task automation and tool customization. -Knowledge of cloud platforms such as AWS, Azure, Ali Cloud or other cloud platform. -Strong analytical and troubleshooting skills for rapid issue resolution under pressure. -Excellent communication skills, both written and verbal, for technical and executive audiences. -Adaptability and resilience in the face of evolving cyber threats. •Proficiency in security frameworks and various compliance standards like ISO 27001, SOC, NIST, etc. •Relevant certifications, CISA, CISSP, CISM •> 5 years experience in security operations, incident response, threat detection and analysis, or similar roles •Education: Bachelor's degree and above in Computer Science encompassing Information Security Mercedes-Benz Group China Ltd.", "summaryDescription" : "Security Operation at Mercedes-Benz Group China Ltd.. Skills: Security operations, Incident response, Vulnerability management. Safeguard information assets. Manage security risks", "createdAt" : "2026-06-14T20:49:19.814", "lastUpdated" : "2026-06-16T01:03:53.353", "ingestTimestamp" : "2026-06-14T20:49:19.814", "mongoId" : "69cf73592beec4dd3d9c848a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Log analysis", "Forensic investigations", "Adaptability", "Security operations", "Incident response", "Vulnerability management", "Risk assessment", "Troubleshooting", "Security operations concepts", "Incident response methodologies", "Vulnerability management principles", "Cloud platforms", "Security frameworks", "Compliance standards", "CISA", "CISSP", "CISM", "SIEM", "SOAR", "Firewalls", "Intrusion detection", "Vulnerability scanners" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 384.85254, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c91cb74d8ee00a09841a3", "title" : "Security Specialist II", "company" : "Redwood Materials", "industry" : "Manufacturing", "salary" : { "min" : 75000.0, "max" : 110000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Security Specialist in McCarran, Nevada, adjusted for the manufacturing industry and company size." }, "location" : "McCarran, NV", "locations" : [ "McCarran", "NV" ], "timestamp" : "2026-06-16T04:40:11.602", "fingerprint" : "ebe1e091a2bce01fd670a5ae114af4c4b574e0b9da2e18e3b01a1d3a661f8497", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://boards.greenhouse.io/redwoodmaterials/jobs/6019247004?gh_jid=6019247004", "externalId" : "6019247004", "industryFunction" : { }, "structuredLocations" : [ { "city" : "McCarran", "state" : "Nevada", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "36.0861034,-115.1611002" } ], "locationText" : "McCarran, Nevada, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "High School", "professionalSkills" : [ "Incident response", "Access control", "CCTV monitoring", "Alarm systems", "Emergency response" ], "hardSkillsList" : [ "First aid" ], "hardSkills" : [ { "name" : "First aid", "level" : "intermediate" } ], "majorSkills" : "Security operations, Incident response, Patrol procedures", "majorSkillsList" : [ "Security operations", "Incident response", "Patrol procedures" ], "coreResponsibilities" : "Perform assigned security duties, Patrol facilities and grounds, Monitor security systems, Respond to incidents, Serve as on-site responder, Follow response procedures, Follow escalation protocols, Notify supervisors of incidents, Conduct routine patrols, Conduct random patrols, Identify hazards, Identify security risks, Identify policy violations, Monitor CCTV systems, Operate CCTV systems, Monitor access control systems, Operate access control systems, Monitor alarm systems, Operate alarm systems, Monitor life-safety systems, Operate life-safety systems, Report system irregularities, Control site access, Document site access, Process visitors, Verify contractor credentials, Respond to alarms, Assess incident conditions, Escalate incidents to supervisors, Escalate incidents to emergency services, Provide initial emergency response, Provide basic first aid, Assist with evacuations, Control incident scenes, Complete incident reports, Complete daily activity logs, Complete shift documentation, Maintain accountability of issued equipment, Report equipment deficiencies, Support site operations, Support special events, Support high-visibility activities, Follow company policies, Follow post orders, Follow safety procedures, Report policy deviations, Communicate with supervisors, Communicate with team members, Ensure continuity between shifts", "teamCollaboration" : "Continuity between shifts", "domainKnowledge" : "Security operations; Patrol procedures; Access control systems; CCTV monitoring; Alarm systems; Emergency response protocols", "domainList" : [ "security-operations", "patrol-procedures", "access-control-systems", "cctv-monitoring", "alarm-systems", "emergency-response-protocols" ], "domainSpecificKnowledge" : [ "Security operations", "Patrol procedures", "Access control systems", "CCTV monitoring", "Alarm systems", "Emergency response protocols" ], "toolProficiency" : [ "CCTV", "Access control systems", "Alarms", "Life-safety systems" ], "communicationSkills" : "Complete accurate reports; Maintain shift continuity; Communicate professionally", "documentationSkills" : "Incident reports; Daily activity logs; Shift documentation", "problemSolvingSkills" : "Assess situations; Make sound decisions", "specialRequirements" : "Work rotating shifts, Work nights, Work weekends, Work holidays, Work overtime, Work extended hours, Stand for extended periods, Walk for extended periods, Patrol for extended periods, Respond to incidents for extended periods", "outcomesObjectives" : "Adherence to procedures; Response effectiveness; Completion of assigned tasks", "qualificationsBasic" : "High school diploma or equivalent, Prior security experience, Prior military experience, Prior law enforcement experience, Prior emergency response experience, Prior industrial security experience", "qualificationsPreferred" : "Working knowledge of security operations, Working knowledge of patrol procedures, Working knowledge of access control systems, Working knowledge of CCTV monitoring, Working knowledge of alarm systems, Working knowledge of emergency response protocols", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "About Redwood Materials Redwood is localizing a global battery supply chain that seamlessly integrates recovery, reuse, and recycling — keeping critical minerals in circulation and driving the energy transition. Founded in 2017, we’re delivering low-cost and large-scale energy storage and producing battery materials in the U. S. for the first time, all from batteries we already have. Security Specialist Security Specialists operate under direct or general supervision during assigned shifts. Work is performed in accordance with established procedures, post orders, and supervisor direction. Personnel are expected to carry out assigned duties, follow escalation protocols, and notify supervisors of incidents requiring higher-level decision-making. Performance is evaluated based on adherence to procedures, response effectiveness, and completion of assigned tasks. Responsibilities will include: Perform assigned security duties during scheduled shifts, including patrols, monitoring systems, and incident response. Serve as an on-site responder to security, safety, and medical incidents, following established response procedures and escalation protocols. Conduct routine and random patrols of facilities and grounds to identify hazards, security risks, or policy violations. Monitor and operate CCTV, access control systems, alarms, and life-safety systems, reporting irregularities to supervision. Control and document site access, including visitor processing, credential checks, and contractor verification. Respond to alarms and incidents, assess conditions, and escalate to supervisors or emergency services as required. Provide initial emergency response support, including basic first aid, evacuation assistance, and scene control until relieved. Complete incident reports, daily activity logs, and shift documentation accurately and before the end of each shift. Maintain accountability of issued equipment, ensuring readiness and reporting deficiencies. Support site operations, special events, and high-visibility activities as directed by supervision. Follow all company policies, post orders, and safety procedures, reporting any deviations. Communicate effectively with supervisors and team members to ensure continuity between shifts. All other duties as assigned. Desired Qualifications High school diploma or equivalent required; prior security, military, law enforcement, emergency response, or industrial security experience preferred Working knowledge of security operations, patrol procedures, access control systems, CCTV monitoring, alarm systems, and emergency response protocols Ability to follow and apply established procedures, post orders, safety requirements, and escalation protocols in a fast-paced operational environment Ability to work rotating shifts, including nights, weekends, holidays, overtime, and extended hours as operationally required Effective verbal and written communication skills, including the ability to complete accurate reports, maintain shift continuity, and communicate professionally with employees, contractors, visitors, and emergency responders Ability to assess situations, remain calm under pressure, and make sound decisions during security, safety, medical, or operational incidents Ability to stand, walk, patrol, and respond to incidents for extended periods while maintaining situational awareness and operational readiness The position is full-time. Compensation will be commensurate with experience. We collect personal information (PI) from you in connection with your application for employment with Redwood Materials, including the following categories of PI: identifiers, personal records, professional or employment information, and inferences drawn from your PI. We collect your PI for our purposes, including performing services and operations related to your potential employment. If you have additional privacy-related questions, please contact us at privacy@redwoodmaterials.com.", "summaryDescription" : "Security Specialist II at Redwood Materials. Skills: Security operations, Incident response, Patrol procedures. Perform assigned security duties. Patrol facilities and grounds", "postedDate" : "2026-06-14T21:48:11.737", "createdAt" : "2026-06-14T21:48:11.737", "lastUpdated" : "2026-06-16T04:40:11.602", "ingestTimestamp" : "2026-06-14T21:48:11.737", "mongoId" : "6a2c91cb74d8ee00a09841a3", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 75000, "salaryAnnualMax" : 110000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "First aid", "Security operations", "Incident response", "Patrol procedures", "Access control", "CCTV monitoring", "Alarm systems", "Emergency response", "Access control systems", "Emergency response protocols", "CCTV", "Alarms", "Life-safety systems" ], "skillCount" : 13, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 384.59628, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Manufacturing", "llmIndustryConfidence" : 0.95 }, { "id" : "6a30669ef292fd229cfb3cc4", "title" : "Corporate Receptionist", "company" : "Lincoln International", "salary" : { "min" : 52000.0, "max" : 68000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Junior Corporate Receptionist in New York, adjusted for the financial services industry and company size." }, "location" : "444 Madison Avenue Suite 300, New York, NY 10022", "locations" : [ "444 Madison Avenue Suite 300", "New York", "NY 10022" ], "timestamp" : "2026-06-16T06:18:54.330", "fingerprint" : "63c28fc006bf090b137363272accf4c5f61b8fe358c521145c2422190ac391ed", "source" : "greenhouse", "language" : "en", "applyUrl" : "http://www.lincolninternational.com/greenhouse/?gh_jid=8007958", "externalId" : "8007958", "industryFunction" : { }, "structuredLocations" : [ { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "40.7127281,-74.0060152" } ], "locationText" : "New York, New York, United States", "rawDescription" : "Lincoln International, Inc. (NYSE: LCLN) is a trusted investment banking advisor to business owners and senior executives of leading private equity firms and their portfolio companies and to public and privately held companies. Our services include mergers and acquisitions advisory, private funds and capital markets advisory, and valuations and fairness opinions. The global enterprise is comprised of a tightly integrated team of more than 1,400 professionals in more than 30 offices in 14 countries, offering an unobstructed perspective on the global private capital markets, backed by superb execution and a deep commitment to client success. With extensive industry knowledge and relationships, timely market intelligence and strategic insights, we forge deep, productive client relationships that endure for decades. Connect with us to learn more at www.lincolninternational.com. At Lincoln International, we know that the success of our global organization is a direct outcome of the strength of our people. We encourage diversity of thought and create talent density by attracting, retaining and engaging high performers from all demographics, backgrounds and perspectives. We value diversity, equity and inclusion as a catalyst to foster innovation and creative problem solving, access the best candidates and adapt to a highly dynamic, competitive environment. We know that employing a diverse team and valuing the unique perspectives of our people allows us to better understand and serve the needs of our clients. Lincoln International is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. We encourage you to read more about our commitment to diversity and Environmental, Social assist with setting up required resources and other services, such as catering, in support of smooth and efficient meeting facilitation Troubleshoot minor issues with A/V and phones; coordinate with the appropriate resource, if needed Maintain a clean office environment Responsible for mail/package coordination and delivery Refresh refrigerators in conference rooms daily and stock kitchen condiments, as needed Expense processing through Concur Gain proficiency in Salesforce to perform basic administrative tasks Assist Office Manager with planning and executing internal and external events Assist Office Manager with new hire and leaver office tasks Advise Office Manager of any office maintenance issues Ad-hoc projects and administrative responsibilities as required Qualifications: Professional and Cultural Characteristics: Associate or bachelor’s degree preferred 1-3 years of experience as a corporate receptionist Enthusiastic, positive demeanor and desire to provide exceptional guest service always Excellent internal and external interpersonal skills with the ability to establish and maintain strong working relationships at all levels Proficiency in Microsoft Office required; knowledge of Salesforce and Concur is a plus Strong comfort level with technology in general Exceptional organizational, time management and critical thinking skills Value and possess strong competency in the following behaviors: Excellence, Entrepreneurship, Integration, Collaboration, and Integrity Additional Information: Lincoln International is not currently hiring individuals for this position who now or in the future require sponsorship for employment visa status. The pay range for this role is $60,000-$70,000 on an annual basis. This is the lowest to highest salary we in good faith believe we would pay for this role at the time of this posting. We may ultimately pay more or less than the posted range, and the range may be modified in the future. This range is only applicable for jobs to be performed in New York City. An employee’s pay position within the salary range will be based on several factors including, but not limited to, relevant education, qualifications, certifications, experience, skills, seniority, geographic location, performance, shift, travel requirements, revenue-based metrics, and business or organizational needs. This job is also eligible for bonus pay. We offer a comprehensive package of benefits to eligible employees. You can apply for this role through LinkedIn or Lincoln’s Company Page, or through Lincoln’s Internal Jobs Board if you are a current employee. Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, or any other form of compensation that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law. Click here to view Lincoln International's Candidate Privacy Notices. Lincoln International is a trade name for Lincoln International, Inc. and its subsidiaries and affiliates, which include the following licensed entities: (i) Lincoln International LLC and MarshBerry Capital, LLC (United States), SEC-registered broker-dealers and a members of FINRA (www.finra.org) and SIPC (www.sipc.org) (investment banking services) and (ii) Lincoln International LLP (FRN 474606) and IMAS Corporate Finance LLP (FRN 553889) (United Kingdom), authorized and regulated by the U. K. Financial Conduct Authority. No entity affiliated with Lincoln International, LP provides banking or securities brokerage services, nor is any such affiliate subject to FINMA supervision in Switzerland or similar regulatory authorities regarding such activities in other jurisdictions. Retail clients are NOT the intended recipients of our communications or services and should not act upon this communication. © 2026 Lincoln International LLC. All Rights Reserved. 110 North Wacker Drive | 51st Floor | Chicago | Illinois | 60606 | United States.", "summaryDescription" : "Corporate Receptionist at Lincoln International", "postedDate" : "2026-06-15T23:26:27.290", "createdAt" : "2026-06-15T23:26:27.290", "lastUpdated" : "2026-06-16T06:18:54.330", "ingestTimestamp" : "2026-06-15T23:26:27.290", "mongoId" : "6a30669ef292fd229cfb3cc4", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 52000, "salaryAnnualMax" : 68000, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Junior", "dataQualityScore" : 0.6666667, "_score" : 383.0177, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.95 }, { "id" : "68c2e420f8b1b0376634c4fe", "title" : "Security Intelligence Engineer", "company" : "Amazon. com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 136000.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Annapolis Junction, Maryland, USA", "locations" : [ "Annapolis Junction, Maryland, USA" ], "timestamp" : "2026-06-16T01:05:11.332", "fingerprint" : "9b06336bfcc1bf2363c8f51ef1da42abb8057330354670e1abe99c0c103970f1", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3078108/apply", "externalId" : "bd0f1b1d-a69e-4571-86cb-3486f6a041c0", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Annapolis Junction", "state" : "Maryland", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.1189965,-76.7963417" }, { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" }, { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" }, { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" }, { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "40.7127281,-74.0060152" }, { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Annapolis Junction, Maryland, United States; Arlington, Virginia, United States; Austin, Texas, United States; Herndon, Virginia, United States; New York, New York, United States; Seattle, Washington, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Security intelligence, Incident response, Threat modeling, Threat analysis, Security tools, Security technologies, Cloud security, AWS, Azure, GCP, Python, Bash, SIEM platforms, Threat hunting, Network security, Endpoint security, Vulnerability management, Forensics, Malware analysis, Scripting", "professionalSkills" : [ "Analytical thinking", "Problem-solving", "Risk assessment" ], "hardSkillsList" : [ "Security analysis", "Incident management", "Threat intelligence gathering", "Data analysis", "Forensic analysis", "Malware reverse engineering" ], "hardSkills" : [ { "name" : "Security analysis", "level" : "intermediate" }, { "name" : "Incident management", "level" : "intermediate" }, { "name" : "Threat intelligence gathering", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Forensic analysis", "level" : "intermediate" }, { "name" : "Malware reverse engineering", "level" : "intermediate" } ], "majorSkills" : "Security intelligence, Incident response, Threat analysis", "majorSkillsList" : [ "Security intelligence", "Incident response", "Threat analysis" ], "coreResponsibilities" : "Develop and implement security intelligence strategies, Monitor security alerts and events, Investigate security incidents, Conduct threat analysis and intelligence gathering, Develop and maintain threat models, Provide security recommendations, Collaborate with incident response teams, Stay current with emerging threats and vulnerabilities, Automate security processes", "teamCollaboration" : "Incident response teams; Security operations center; Engineering teams; Product teams", "domainKnowledge" : "Cyber threats; Adversary tactics; Vulnerabilities; Cloud security; Network security; Endpoint security", "domainList" : [ "cyber-threats", "adversary-tactics", "vulnerabilities", "cloud-security", "network-security", "endpoint-security" ], "domainSpecificKnowledge" : [ "Cyber threats", "Adversary tactics", "Vulnerabilities", "Cloud security", "Network security", "Endpoint security" ], "toolProficiency" : [ "SIEM platforms", "Security tools", "Threat intelligence platforms" ], "communicationSkills" : "Technical reporting; Presenting findings", "documentationSkills" : "Security reports; Process documentation", "continuousLearning" : "Stay current with emerging threats", "problemSolvingSkills" : "Root cause analysis; Troubleshooting security issues", "outcomesObjectives" : "Enhance security posture; Reduce security risks; Improve incident detection and response times", "qualificationsBasic" : "Bachelor's degree or equivalent experience, 5+ years of experience in security engineering, Experience with security intelligence and incident response, Experience with threat modeling and analysis, Experience with security tools and technologies", "qualificationsPreferred" : "Master's degree in a related field, Experience with cloud security (AWS, Azure, GCP), Experience with scripting languages (Python, Bash), Experience with SIEM platforms, Experience with threat hunting", "remoteFriendly" : false, "workSiteFlexibility" : "onsite", "rawDescription" : "We are open to hiring candidates to work out of one of the following locations: Annapolis Junction, MD, USA | Arlington, VA, USA | Austin, TX, USA | Herndon, VA, USA | New York, NY, USA | Seattle, WA, USA The AWS Threat Intelligence team, part of Amazon Cyber Threat Intelligence (ACTI), is responsible for developing actionable intelligence on advanced cyber threats to AWS services and AWS customers. We obtain indicators and other intelligence from a variety of internal and external sources and use that information to develop an understanding of sophisticated actors and their tools, techniques, and procedures (TTPs). We leverage that understanding to proactively identify and mitigate malicious activity. The successful candidate will analyze actor TTPs to generate intelligence and insights into current threats. A deep understanding of current cyber threat actors as well as experience performing question-driven analysis is required. As a Security Intelligence Engineer, you will help enhance our capabilities by formulating new analytic techniques and working across teams to drive their supporting capabilities. You will likewise work to harness expansive data sets and generate actionable and unique insights from them using database querying and statistical analysis. Your efforts will help drive innovation and continual improvement in the \"state-of-the-art\" of cyber threat intelligence analysis and dissemination at Amazon. This position requires that the candidate selected be a US Citizen. Key job responsibilities *Perform deep dive analysis of malicious artifacts. *Analyze large and unstructured data sets to identify trends and anomalies indicative of malicious activities. *Create security techniques and automation for internal use that enable you to operate at high speed and broad scale. *Contribute to Amazon's understanding of the current threat landscape and the techniques, tactics, and procedures associated with specific threats. *Draft and publish finished written threat intelligence products based on findings. *Periodic on-call responsibilities. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Experience implementing security solutions at the business division level or equivalent - BS degree in Computer Science, Management of Information Systems (MIS), Computer Engineering, or similar degree, or 3+ years equivalent technology experience without a degree - 3 years experience with tracking high-sophistication cyber threat groups - 3 years experience across system security, network security, application security, and/or digital forensics - 2 years experience with SQL or other relational database query languages. Preferred Qualifications: - Experience with AWS products and services - MS degree in Computer Science, Management of Information Systems (MIS), Computer Engineering, or similar degree. - Strong understanding of Windows, Linux, and or OS X internals - Experience with malware analysis, network flow analysis, and large scale data analysis. - Experience with modern threat intelligence platforms (TIPs), especially the Vertex Project's Synapse - Experience with scripting in the Python programming language. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $136,000/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Intelligence Engineer at Amazon. com Services LLC. Skills: Security intelligence, Incident response, Threat analysis. Develop and implement security intelligence strategies. Monitor security alerts and events", "postedDate" : "2026-06-14T20:26:20.129", "createdAt" : "2026-06-14T20:26:20.129", "lastUpdated" : "2026-06-16T01:05:11.332", "ingestTimestamp" : "2026-06-14T20:26:20.129", "mongoId" : "68c2e420f8b1b0376634c4fe", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3078108/apply", "salaryAnnualMin" : 136000, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security analysis", "Incident management", "Threat intelligence gathering", "Data analysis", "Forensic analysis", "Malware reverse engineering", "Security intelligence", "Incident response", "Threat analysis", "Analytical thinking", "Problem-solving", "Risk assessment", "Cyber threats", "Adversary tactics", "Vulnerabilities", "Cloud security", "Network security", "Endpoint security", "SIEM platforms", "Security tools", "Threat intelligence platforms" ], "skillCount" : 21, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 380.42664, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 } ], "status" : 200, "message" : "OK", "pagination" : { "page" : 0, "limit" : 50, "totalCount" : 15972, "totalPages" : 320, "hasNext" : true, "hasPrevious" : false } }

Corporate Security Agent Incident Commander Jobs in San Francisco

Incident Commander, Program Manager

Security Incident Response Manager

Security Engineer II, Security Incident Response Team (SIRT)

Corporate Security Engineer

Command Center Specialist (Nights)

Security Incident Response Lead

Corporate Facility Security Officer

Corporate Security Agent (Incident Commander)

Senior Incident Response Specialist, Cyber Security

Part-Time Residential Security Agent

Security Engineer I, Corporate Services Security

Sr. Security Engineer, Corporate Information Security

Senior Security Engineer, AWS Security Incident Response

Security Operations and Incident Response Manager

Senior Security Incident Response Engineer

[8NW] Senior SecOps Incident Response Automation Engineer

Incident Response Lead

Senior Security Operations Analyst

Client Security Expert/Architect

Client Security Expert/Architect

Senior Security Architect (m/f/d)

Lead Corporate Security Agent

Security Engineer, Corporate Services Security

Security Engineer, AWS Security Incident Response

AWS Security Operations/Incident Response Engineer

Insurance Agent

Security Engineer, Incident Response, CorpSec

Security Guard

2026 Security Analyst - Early Career Rotation Program

Vector Command Specialist

Security Engineer, Corporate Services Security

Manager, AV Incident Management

Senior Cyber Security Specialist

Senior Cyber Security Specialist

Service Desk Incident Manager

Lead IT Security Analyst

Lead IT Security Analyst

Security Analyst (Cyber Defense Analyst)

Security Specialist

Senior Incident Response Engineer, Devices & Services Security

AWS Security Operations/Incident Response Engineer

Corporate Recruiter

Corporate Recruiter

Security Engineer, AWS Global Services

Security Operation

Sr. Security Engineer, Defensive Security, Corporate Services Security (CPSS)

Security Operation

Security Specialist II

Corporate Receptionist

Security Intelligence Engineer

Common Questions