{ "count" : 79619, "data" : [ { "id" : "6a2c5fb974d8ee00a08ee12d", "title" : "Cybersecurity Engineer", "company" : "cBEYONData + SMX", "salary" : { "min" : 120000.0, "max" : 200000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "cBEYONData", "locations" : [ "cBEYONData" ], "certifications" : [ "Security+", "CySA+", "CISSP", "CASP+", "CEH", "CISM", "AWS Security", "Azure Security" ], "timestamp" : "2026-06-15T00:46:05.169", "fingerprint" : "566bf0810b5188c2c2207ce8b8df4d9f1d2d9b0e9c3f7a6c2d5315fc41183273", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/ess/jobs/7751843003", "externalId" : "7751843003", "structuredLocations" : [ { "city" : "izabelin c", "state" : "mazovia", "country" : "poland", "continent" : "europe", "source" : "city_strategy", "geo" : "52.29929,20.80381" } ], "locationText" : "cBEYONData", "technicalSkills" : "SIEM, endpoint protection, vulnerability scanners, firewalls, IDS/IPS, AWS, Azure, Google Cloud", "professionalSkills" : [ "risk management", "network security", "cloud security", "secure system implementation", "vulnerability management", "security assessments", "risk analysis", "remediation planning", "compliance requirements", "secure solution delivery", "system hardening", "access control", "secure configuration" ], "hardSkillsList" : [ "security engineering", "security operations", "information assurance", "vulnerability management", "security assessments", "risk analysis", "remediation support", "network security", "access control", "identity management", "encryption", "secure configuration", "documentation", "compliance reporting", "audit readiness", "troubleshooting", "analytical skills" ], "hardSkills" : [ { "name" : "security engineering", "level" : "intermediate" }, { "name" : "security operations", "level" : "intermediate" }, { "name" : "information assurance", "level" : "intermediate" }, { "name" : "vulnerability management", "level" : "intermediate" }, { "name" : "security assessments", "level" : "intermediate" }, { "name" : "risk analysis", "level" : "intermediate" }, { "name" : "remediation support", "level" : "intermediate" }, { "name" : "network security", "level" : "intermediate" }, { "name" : "access control", "level" : "intermediate" }, { "name" : "identity management", "level" : "intermediate" }, { "name" : "encryption", "level" : "intermediate" }, { "name" : "secure configuration", "level" : "intermediate" }, { "name" : "documentation", "level" : "intermediate" }, { "name" : "compliance reporting", "level" : "intermediate" }, { "name" : "audit readiness", "level" : "intermediate" }, { "name" : "troubleshooting", "level" : "intermediate" }, { "name" : "analytical skills", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity Engineering, Security Operations, Risk Management, Compliance", "majorSkillsList" : [ "Cybersecurity Engineering", "Security Operations", "Risk Management", "Compliance" ], "coreResponsibilities" : "Design security solutions, Implement security solutions, Monitor security solutions, Maintain security solutions, Protect enterprise systems, Protect networks, Protect applications, Protect data, Support security engineering, Support security architecture, Support vulnerability management, Support incident response, Support compliance activities, Assist secure system implementation, Administer cybersecurity tools, Configure cybersecurity tools, Support cybersecurity tools, Conduct vulnerability assessments, Support vulnerability assessments, Conduct security reviews, Conduct risk analysis, Plan remediation, Track POA&M, Ensure systems align with frameworks, Ensure solutions align with policies, Ensure systems align with compliance, Ensure solutions align with compliance, Collaborate with teams, Support secure solution delivery, Develop security documentation, Maintain security documentation, Develop reports, Maintain reports, Develop technical artifacts, Maintain technical artifacts, Develop audit readiness materials, Maintain audit readiness materials, Support continuous monitoring, Support system hardening, Support access control, Support secure configuration, Help maintain secure systems, Help maintain compliant systems, Help maintain resilient systems, Support mission-focused modernization", "teamCollaboration" : "infrastructure teams; network teams; cloud teams; data teams; application teams; customer teams; engineering teams", "domainKnowledge" : "NIST; RMF; FedRAMP; FISMA; DoD 8570/8140; network security; cloud security; Zero Trust architectures; Zero Trust methodologies", "domainList" : [ "nist", "rmf", "fedramp", "fisma", "dod-8570-8140", "network-security", "cloud-security", "zero-trust-architectures", "zero-trust-methodologies" ], "domainSpecificKnowledge" : [ "NIST", "RMF", "FedRAMP", "FISMA", "DoD 8570/8140", "network security", "cloud security", "Zero Trust architectures", "Zero Trust methodologies" ], "toolProficiency" : [ "SIEM", "endpoint protection", "vulnerability scanners", "firewalls", "IDS/IPS" ], "communicationSkills" : "documentation; analytical; communication", "documentationSkills" : "security documentation; technical artifacts; audit readiness", "problemSolvingSkills" : "troubleshooting; analytical; risk analysis; vulnerability management", "specialRequirements" : "Active DoD security clearance, DoD 8570/8140", "qualificationsBasic" : "cybersecurity engineering experience, security operations experience, information assurance activities experience, enterprise federal DoD environments experience, NIST RMF FedRAMP FISMA knowledge, DoD 8570/8140 guidance knowledge, vulnerability management experience, security assessments experience, POA&M tracking experience, risk analysis experience, remediation support experience, network security understanding, access control understanding, identity management understanding, encryption understanding, secure configuration practices understanding, support security documentation, support compliance reporting, support audit readiness, troubleshooting skills, analytical skills, documentation skills, collaborate with engineering teams, collaborate with infrastructure teams, collaborate with cloud teams, collaborate with data teams, collaborate with customer teams", "qualificationsPreferred" : "Active DoD security clearance, federal DoD environments experience, mission-critical environments experience, AWS cloud security experience, Azure cloud security experience, Google Cloud security experience, Zero Trust architectures experience, Zero Trust methodologies experience, security architecture experience, system hardening experience, incident response experience, continuous monitoring experience, Security+ certification, CySA+ certification, CISSP certification, CASP+ certification, CEH certification, CISM certification, AWS Security certification, Azure Security certification", "rawDescription" : "cBEYONData + SMX is seeking Cybersecurity Engineers to support federal customers with cybersecurity operations, security engineering, compliance, risk management, network security, cloud security, and mission-focused modernization initiatives. Responsibilities Design, implement, monitor, and maintain security solutions that protect enterprise systems, networks, applications, and data Support security engineering, security architecture, vulnerability management, incident response, and compliance activities Assist with secure system implementation across federal, DoD, or enterprise technology environments Administer, configure, and support cybersecurity tools such as SIEM, endpoint protection, vulnerability scanners, firewalls, IDS/IPS, and related platforms Conduct or support vulnerability assessments, security reviews, risk analysis, remediation planning, and POA&M tracking Help ensure systems and solutions align with applicable security frameworks, policies, and compliance requirements Collaborate with infrastructure, network, cloud, data, application, and customer teams to support secure solution delivery Develop and maintain security documentation, reports, technical artifacts, and audit readiness materials Support continuous monitoring, system hardening, access control, and secure configuration activities Help maintain secure, compliant, and resilient systems in support of mission-focused modernization efforts Required Skills and Experience Experience supporting cybersecurity engineering, security operations, or information assurance activities in enterprise, federal, or DoD environments Knowledge of cybersecurity frameworks, policies, and standards such as NIST, RMF, FedRAMP, FISMA, DoD 8570/8140, or related guidance Experience with vulnerability management, security assessments, POA&M tracking, risk analysis, and remediation support Familiarity with security tools such as SIEM, endpoint protection, vulnerability scanners, firewalls, IDS/IPS, or similar technologies Understanding of network security, access control, identity management, encryption, and secure configuration practices Ability to support security documentation, compliance reporting, and audit readiness activities Strong troubleshooting, analytical, communication, and documentation skills Ability to collaborate with engineering, infrastructure, cloud, data, and customer teams to support secure solution delivery Desired Skills and Experience Active or current DoD security clearance Experience supporting federal, DoD, or mission-critical environments Familiarity with cloud security concepts across AWS, Azure, Google Cloud, or similar platforms Experience with Zero Trust architectures and methodologies Experience supporting security architecture, system hardening, incident response, or continuous monitoring Relevant certifications such as Security+, CySA+, CISSP, CASP+, CEH, CISM, AWS Security, Azure Security, or similar Application Deadline: 7/31/26 # LI-SA1 The SMX salary determination process takes into account a number of factors, including but not limited to, geographic location, Federal Government contract labor categories, relevant prior work experience, specific skills, education and certifications. At SMX, one of our Core Values is to Invest in Our People so we offer a competitive mix of compensation, learning & development opportunities, and benefits. Some key components of our robust benefits include health insurance, paid leave, and retirement. The proposed salary for this position is: $120,000—$200,000 USD SMX is an Equal Opportunity employer including disabilities and veterans. Selected applicant may be subject to a background investigation and/or education verification. SMX does not sponsor a new applicant for employment authorization or immigration related support for this position (i. e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-2, E-3, L-1 and O-1, or any EADs or other forms of work authorization that require immigration support from an employer).", "summaryDescription" : "Cybersecurity Engineer at cBEYONData + SMX. Skills: Cybersecurity Engineering, Security Operations, Risk Management, Compliance. Design security solutions. Implement security solutions", "postedDate" : "2026-06-12T22:24:44.083", "createdAt" : "2026-06-12T22:24:44.083", "lastUpdated" : "2026-06-15T00:46:05.169", "ingestTimestamp" : "2026-06-12T22:24:44.083", "mongoId" : "6a2c5fb974d8ee00a08ee12d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 120000, "salaryAnnualMax" : 200000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "security engineering", "security operations", "information assurance", "vulnerability management", "security assessments", "risk analysis", "remediation support", "network security", "access control", "identity management", "encryption", "secure configuration", "documentation", "compliance reporting", "audit readiness", "troubleshooting", "analytical skills", "Cybersecurity Engineering", "Security Operations", "Risk Management", "Compliance", "risk management", "cloud security", "secure system implementation", "remediation planning", "compliance requirements", "secure solution delivery", "system hardening", "NIST", "RMF", "FedRAMP", "FISMA", "DoD 8570/8140", "Zero Trust architectures", "Zero Trust methodologies", "Security+", "CySA+", "CISSP", "CASP+", "CEH", "CISM", "AWS Security", "Azure Security", "SIEM", "endpoint protection", "vulnerability scanners", "firewalls", "IDS/IPS" ], "skillCount" : 48, "jobCategory" : "other", "jobSubcategory" : "mission-intelligence&analytics", "dataQualityScore" : 0.7777778, "_score" : 1140.3278, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2a541174d8ee00a060149c", "title" : "Security Engineer (Contract)", "company" : "Varicent", "salary" : { "min" : 76800.0, "max" : 96000.0, "currency" : "CAD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Canada - Remote ", "locations" : [ "Canada - Remote", "Mexico" ], "certifications" : [ "CISSP", "CISA", "CCSP" ], "timestamp" : "2026-06-14T20:50:37.046", "fingerprint" : "052fe2dca4cc18eb5ab0d5918ded96ee961b2bf1aa817b9bc712fad16fda9f53", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/varicent/jobs/5250687008", "externalId" : "5250687008", "structuredLocations" : [ { "country" : "Canada", "continent" : "na", "workMode" : "remote" } ], "locationText" : "Canada", "employmentType" : "CONTRACT", "technicalSkills" : "SIEM, EDR, DLP, WAF, CASB, Secure Web Gateway, URL filtering, Email security, Application scanning, Vulnerability scanning, AWS, IBM Cloud, Google Cloud Platform, Python, PowerShell, Bash", "professionalSkills" : [ "Security operations", "Security engineering", "Risk assessment", "Threat modeling", "Third-party risk management", "Incident response", "Vulnerability management", "Application security testing", "Security tooling", "Security controls engineering", "AI security practices" ], "hardSkillsList" : [ "Security monitoring", "Incident triage", "Security event investigation", "Root-cause analysis", "Adversarial thinking", "Secure baseline reviews", "Infrastructure scanning", "Endpoint scanning", "Application vulnerability assessments", "Penetration testing validation", "Vendor risk assessments", "STRIDE-based threat modeling" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Incident triage", "level" : "intermediate" }, { "name" : "Security event investigation", "level" : "intermediate" }, { "name" : "Root-cause analysis", "level" : "intermediate" }, { "name" : "Adversarial thinking", "level" : "intermediate" }, { "name" : "Secure baseline reviews", "level" : "intermediate" }, { "name" : "Infrastructure scanning", "level" : "intermediate" }, { "name" : "Endpoint scanning", "level" : "intermediate" }, { "name" : "Application vulnerability assessments", "level" : "intermediate" }, { "name" : "Penetration testing validation", "level" : "intermediate" }, { "name" : "Vendor risk assessments", "level" : "intermediate" }, { "name" : "STRIDE-based threat modeling", "level" : "intermediate" } ], "majorSkills" : "Security engineering, Security operations, Incident response, Vulnerability management", "majorSkillsList" : [ "Security engineering", "Security operations", "Incident response", "Vulnerability management" ], "coreResponsibilities" : "Coordinate deployment, configuration, testing, monitoring, and maintenance of, Lead security initiatives from requirements gathering through implementation, Support proof-of-concept evaluations and product assessments, Identify enhancements for security tools, Maintain operational runbooks for security tools, Recommend improvements for security tools, Develop procedures, workflows, architecture diagrams, and operational playbooks, Investigate and triage security events, Detect, respond to, and support investigations of security, Document root-cause analysis and lessons learned, Follow incident response procedures and playbooks, Escalate critical findings appropriately and efficiently, Apply analytical and adversarial thinking to identify, protect,, Perform and support secure baseline reviews, Perform and support infrastructure scanning, Perform and support endpoint scanning, Perform and support application vulnerability assessments, Perform and support penetration testing validation, Perform AI red-teaming exercises, Review vulnerability findings for accuracy and completeness, Partner with stakeholders to prioritize remediation efforts, Escalate critical vulnerabilities, zero-day threats, and high-priority risks, Support rapid mitigation efforts, Contribute to continuous improvements in vulnerability management workflows, Integrate security testing into CI/CD pipelines, Conduct security risk assessments for internal initiatives, product, Perform STRIDE-based threat modeling for internal projects and, Produce actionable recommendations and clear risk reports, Apply a risk-based approach to evaluating Agentic AI, Apply a risk-based approach to evaluating AI-related security, Conduct vendor risk assessments within OneTrust, Support third-party risk management activities, Identify opportunities to strengthen controls, Identify opportunities to improve processes, Identify opportunities to enhance security outcomes, Stay informed on emerging threats, technologies, and industry, Share relevant insights with colleagues and stakeholders", "teamCollaboration" : "Partner with stakeholders across Cloud Operations, Engineering, IT, and business teams; Partner with stakeholders to prioritize remediation efforts; Share insights with colleagues and stakeholders; Trusted security partner to Engineering, Cloud Operations, and IT teams", "projectManagementSkills" : [ "Requirements gathering", "Design", "Testing", "Pilot execution", "Implementation" ], "domainKnowledge" : "Sales Performance Management; Revenue Performance Management; Cloud environments; Operating systems; Networks; Databases; Applications; Agentic AI technologies; AI-related security risks", "domainList" : [ "sales-performance-management", "revenue-performance-management", "cloud-environments", "operating-systems", "networks", "databases", "applications", "agentic-ai-technologies", "ai-related-security-risks" ], "domainSpecificKnowledge" : [ "Sales Performance Management", "Revenue Performance Management", "Cloud environments", "Operating systems", "Networks", "Databases", "Applications", "Agentic AI technologies", "AI-related security risks" ], "toolProficiency" : [ "SIEM", "EDR", "DLP", "WAF", "CASB", "Secure Web Gateway", "Email security", "OneTrust" ], "communicationSkills" : "Risk reports; Lessons learned", "documentationSkills" : "Operational runbooks; Procedures; Workflows; Architecture diagrams; Operational playbooks; Root-cause analysis documentation; Risk reports", "continuousLearning" : "Stay informed on emerging threats, technologies, and industry best practices", "innovationCreativity" : "Foundational security engineering initiatives; Emerging AI security practices; Continuous improvement; Automation", "problemSolvingSkills" : "Solving complex challenges; Analytical thinking; Adversarial thinking; Root cause analysis", "specialRequirements" : "Residing in Canada or Mexico", "outcomesObjectives" : "Strengthen our security posture; Make a measurable impact across the organization; Improve vulnerability management outcomes; Deliver clear risk assessments; Deliver STRIDE-based threat models; Deliver measurable improvements through automation; Deliver measurable improvements through process maturity; Deliver measurable improvements through enhanced operational efficiency; Strengthen incident response readiness; Reduce recurring security issues", "qualificationsBasic" : "Bachelor's degree in Technology Management, Information Security, Computer Science, Computer Engineering, or equivalent practical experience, 3–5 years of experience in Information Security, Security Engineering, or Security Operations, At least one industry-recognized security certification (CISSP, CISA, CCSP, or equivalent), Experience working with public cloud platforms such as AWS, IBM Cloud, or Google Cloud Platform (GCP), understanding of securing cloud environments, operating systems, networks, databases, and applications, Hands-on experience with security technologies including SIEM, WAF, DLP, EDR, and infrastructure/application/vulnerability scanning platforms, Experience developing security automations using Python, PowerShell, Bash, or similar scripting languages, Hands-on experience with OneTrust, including workflow management, evidence collection, and assessment reporting, Experience conducting threat modeling and risk assessments using STRIDE methodology", "qualificationsPreferred" : "AI red-teaming exercises experience", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "At Varicent, we’re not just transforming the Sales Performance Management (SPM) market—we’re redefining how organizations achieve revenue success. Our cutting-edge SaaS solutions empower revenue leaders globally to design smarter go-to-market strategies, maximize seller performance, and unlock untapped potential. Varicent stands at the forefront of innovation, celebrated as a market leader in the 2025 Forrester Wave Report for SPM, 2023 Ventana Research Revenue Performance Management (RPM) Value Index, Gartner Peer Insights, 2024 Gartner SPM Market Guide, and G2. Our solutions are trusted by a diverse range of global industry leaders like T-Mobile, ServiceNow, Wawanesa Bank, Shaw Industries, Moody's, Stryker and hundreds more. Here’s why you’ll thrive at Varicent: Innovate with Purpose: Build impactful solutions for customers worldwide. Join Excellence: Work in a diverse, collaborative, and innovative team. Shape the Future: Lead in redefining revenue optimization. Grow Together: Unlock your potential in a supportive environment. Join us at Varicent—where your talent and ambition meet limitless opportunities for success! Help Us Build a More Secure Future Our Information Security team is looking for a motivated, hands-on Security Engineer I In Canada to support the execution of day-to-day security operations while contributing to foundational security engineering initiatives. This role provides exposure across multiple security domains, including security monitoring and incident response, security tooling and controls engineering, application security testing, vulnerability management, security risk assessments, and emerging AI security practices. As a Security Security Engineer I, you will partner closely with stakeholders across Cloud Operations, Engineering, IT, and business teams to strengthen our security posture through operational excellence, continuous improvement, and a risk-based approach to decision-making. This is an exciting opportunity for a security professional who enjoys solving complex challenges, driving meaningful improvements, and making a measurable impact across the organization. Contract Length: 1 Year (Maternity Leave Backfill) Only Candidates residing in Canada or Mexico are eligible for this job What You'll Do Security Tooling Operations & Security Engineering Coordinate the deployment, configuration, testing, monitoring, and ongoing maintenance of security technologies, including SIEM, EDR, DLP, WAF, CASB, Secure Web Gateway, URL filtering, email security, and application/vulnerability scanning platforms. Lead small-to-medium-sized security initiatives from requirements gathering through design, testing, pilot execution, and implementation. Support proof-of-concept evaluations and product assessments to ensure proposed solutions align with security strategy, standards, and industry best practices. Act as a service or tool owner by identifying enhancements, maintaining operational runbooks, and recommending improvements for tools under your responsibility. Develop and maintain procedures, workflows, architecture diagrams, and operational playbooks that support security monitoring and engineering activities. Security Monitoring, Triage & Incident Response Investigate and triage security events using technologies such as SIEM, EDR, DLP, WAF, CASB, Secure Web Gateway, and email security solutions. Detect, respond to, and support investigations of security incidents while documenting root-cause analysis and lessons learned. Follow established incident response procedures and playbooks, escalating critical findings appropriately and efficiently. Apply analytical and adversarial thinking to identify, protect, detect, respond to, and recover from common cyber threats and attack vectors. Vulnerability Management & Security Testing Perform and support secure baseline reviews, infrastructure scanning, endpoint scanning, application vulnerability assessments, penetration testing validation, and AI red-teaming exercises. Review vulnerability findings for accuracy and completeness while partnering with stakeholders to prioritize remediation efforts based on risk. Escalate critical vulnerabilities, zero-day threats, and high-priority risks while supporting rapid mitigation efforts. Contribute to continuous improvements in vulnerability management workflows through automation and the integration of security testing into CI/CD pipelines. Security Risk Assessments, Threat Modeling & Third-Party Risk Conduct security risk assessments for internal initiatives, product enhancements, vendors, and productivity tools. Perform STRIDE-based threat modeling for internal projects and AI-enabled solutions, producing actionable recommendations and clear risk reports. Apply a risk-based approach to evaluating Agentic AI technologies and AI-related security risks. Conduct vendor risk assessments within OneTrust and support broader third-party risk management activities. Continuous Improvement & Security Enablement Identify opportunities to strengthen controls, improve processes, and enhance security outcomes across teams. Stay informed on emerging threats, technologies, and industry best practices, sharing relevant insights with colleagues and stakeholders. What You'll Bring Required Qualifications Bachelor's degree in Technology Management, Information Security, Computer Science, Computer Engineering, or equivalent practical experience. 3–5 years of experience in Information Security, Security Engineering, or Security Operations. At least one industry-recognized security certification (CISSP, CISA, CCSP, or equivalent). Experience working with public cloud platforms such as AWS, IBM Cloud, or Google Cloud Platform (GCP). Strong understanding of securing cloud environments, operating systems, networks, databases, and applications. Hands-on experience with security technologies including SIEM, WAF, DLP, EDR, and infrastructure/application vulnerability scanners. Knowledge of industry frameworks and standards such as NIST CSF and ISO 27001/27002. Familiarity with controls and compliance requirements related to SOC 1, SOC 2, PCI, and HIPAA. Excellent written and verbal communication skills with the ability to clearly document findings and communicate risk. Strong problem-solving skills, accountability, and a continuous learning mindset. Fluency in English. Preferred Qualifications Experience integrating security controls and tooling into CI/CD pipelines, including alerting, scanning, ticket creation, and deployment gating. Experience developing security automations using Python, PowerShell, Bash, or similar scripting languages. Hands-on experience with OneTrust, including workflow management, evidence collection, and assessment reporting. Experience conducting threat modeling and risk assessments using STRIDE methodology. What Success Looks Like First 1–3 Months: Ramp Up & Stabilize Operations Become proficient with existing security tools, monitoring platforms, alert queues, and incident response processes. Contribute to investigations and triage activities with high-quality documentation and timely escalation. Review vulnerability scanning coverage and support improvements to data quality and prioritization. Months 4–6: Expand Coverage & Drive Improvements Lead at least one security tooling or process improvement initiative from planning through implementation. Improve vulnerability management outcomes through stronger triage, stakeholder collaboration, and remediation tracking. Deliver clear risk assessments and STRIDE-based threat models for assigned projects, including AI-enabled solutions. Month 7 and Beyond: Operational Excellence & Lasting Impact Deliver measurable improvements through automation, process maturity, and enhanced operational efficiency. Strengthen incident response readiness and reduce recurring security issues through root-cause-driven improvements. Establish yourself as a trusted security partner to Engineering, Cloud Operations, and IT teams through consistent execution and pragmatic security guidance. The expected base salary range for this role is C76,800.00 $ 96,000.00, and individuals may be eligible to participate in our variable compensation program. *Final compensation may vary based on experience, skills, designations, and market conditions. This posting is for an existing vacancy. This hiring process utilizes artificial intelligence tools to assist in candidate screening and assessment. Our AI tools are designed to complement, not replace, human decision-making. Varicent is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. If you require accommodation at any time during the recruitment process please email accomodations@varicent.com Varicent is also committed to compliance with all fair employment practices regarding citizenship and immigration status. By applying for a position at Varicent and/or by using this portal, you declare and confirm that you have read and agree to our Job Applicant Privacy Notice and that the information provided by you as part of your application is true and complete and includes no misrepresentation or material omission of fact", "summaryDescription" : "Security Engineer (Contract) at Varicent. Skills: Security engineering, Security operations, Incident response, Vulnerability management. Coordinate deployment, configuration, testing, monitoring, and maintenance of. Lead security initiatives from requirements gathering through implementation", "postedDate" : "2026-06-11T19:21:13.598", "createdAt" : "2026-06-11T19:21:13.598", "lastUpdated" : "2026-06-14T20:50:37.046", "ingestTimestamp" : "2026-06-11T19:21:13.598", "mongoId" : "6a2a541174d8ee00a060149c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Security monitoring", "Incident triage", "Security event investigation", "Root-cause analysis", "Adversarial thinking", "Secure baseline reviews", "Infrastructure scanning", "Endpoint scanning", "Application vulnerability assessments", "Penetration testing validation", "Vendor risk assessments", "STRIDE-based threat modeling", "Security engineering", "Security operations", "Incident response", "Vulnerability management", "Risk assessment", "Threat modeling", "Third-party risk management", "Application security testing", "Security tooling", "Security controls engineering", "AI security practices", "Requirements gathering", "Design", "Testing", "Pilot execution", "Implementation", "Sales Performance Management", "Revenue Performance Management", "Cloud environments", "Operating systems", "Networks", "Databases", "Applications", "Agentic AI technologies", "AI-related security risks", "CISSP", "CISA", "CCSP", "SIEM", "EDR", "DLP", "WAF", "CASB", "Secure Web Gateway", "Email security", "OneTrust" ], "skillCount" : 48, "jobCategory" : "other", "jobSubcategory" : "security-", "dataQualityScore" : 0.8888889, "_score" : 1131.4596, "daysOld" : 3, "hasLocation" : true, "hasGeo" : false }, { "id" : "6a2a531f74d8ee00a05fcefa", "title" : "Cybersecurity Engineer", "company" : "540", "salary" : { "min" : 135000.0, "max" : 185000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Engineer in Patrick SFB, FL, adjusted for the technology industry and company size." }, "location" : "Patrick SFB, FL or Arlington, VA", "locations" : [ "Patrick SFB", "FL or Arlington", "VA" ], "certifications" : [ "CompTIA Security+" ], "timestamp" : "2026-06-14T22:15:34.671", "fingerprint" : "9ebf8513db5d9baf337af113db1b48dfd2f213e5c7a7a7a7eb84020bedc2f9b3", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/540/jobs/7768569003", "externalId" : "7768569003", "structuredLocations" : [ { "city" : "Patrick SFB", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "28.2712945,-80.6060006" }, { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Patrick SFB, Florida, United States; Arlington, Virginia, United States", "minimumEducation" : "Bachelor's Degree", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, Azure, Google Cloud, SAST, Linux", "professionalSkills" : [ "Information assurance", "System design", "Vulnerability management", "Security documentation", "Security assessments", "Incident response", "Secure development" ], "hardSkillsList" : [ "RMF process", "ATO packages", "NIST 800-53", "STIG testing", "IAM concepts", "Container security", "Cloud-native security", "Vulnerability scanning", "SIEM platforms", "SAST analysis" ], "softSkillsList" : [ "Problem-solving", "Analytical skills", "Independent work", "Team contribution" ], "hardSkills" : [ { "name" : "RMF process", "level" : "intermediate" }, { "name" : "ATO packages", "level" : "intermediate" }, { "name" : "NIST 800-53", "level" : "intermediate" }, { "name" : "STIG testing", "level" : "intermediate" }, { "name" : "IAM concepts", "level" : "intermediate" }, { "name" : "Container security", "level" : "intermediate" }, { "name" : "Cloud-native security", "level" : "intermediate" }, { "name" : "Vulnerability scanning", "level" : "intermediate" }, { "name" : "SIEM platforms", "level" : "intermediate" }, { "name" : "SAST analysis", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem-solving" }, { "name" : "Analytical skills" }, { "name" : "Independent work" }, { "name" : "Team contribution" } ], "majorSkills" : "Cybersecurity controls, Cloud infrastructure, RMF process, Vulnerability management", "majorSkillsList" : [ "Cybersecurity controls", "Cloud infrastructure", "RMF process", "Vulnerability management" ], "coreResponsibilities" : "Support implementation of security controls, Maintain compliance with DoD security requirements, Integrate security into system design, Support vulnerability management, Support scanning, Support remediation efforts, Monitor system security posture, Respond to security findings, Implement identity, Implement access management, Implement least privilege principles, Support development of security documentation, Support maintenance of security documentation, Participate in security assessments, Participate in audits, Participate in authorization activities, Support incident response activities, Support root cause analysis, Promote secure development practices, Promote secure operational practices", "teamCollaboration" : "Work with engineers; Work with architects; Work with security stakeholders; Cross-functional teams", "projectManagementSkills" : [ "RMF", "ATO packages" ], "domainKnowledge" : "DoD security; NIST 800-53; Containerized environments; Cloud-native applications; DoW environments; High-security environments; Highly-regulated environments", "domainList" : [ "dod-security", "nist-800-53", "containerized-environments", "cloud-native-applications", "dow-environments", "high-security-environments", "highly-regulated-environments" ], "domainSpecificKnowledge" : [ "DoD security", "NIST 800-53", "Containerized environments", "Cloud-native applications", "DoW environments", "High-security environments", "Highly-regulated environments" ], "toolProficiency" : [ "eMASS", "Vulnerability scanners", "SIEM platforms" ], "communicationSkills" : "Communicate effectively", "documentationSkills" : "Security documentation; SSPs; POA&Ms", "continuousLearning" : "Professional development; Training; Certifications; Conferences", "problemSolvingSkills" : "Problem-solving; Analytical skills; Root cause analysis", "specialRequirements" : "U. S. Citizens, Active DoW clearance, TS/SCI eligibility, Onsite support, Travel up to 25%", "qualificationsBasic" : "5+ years of experience in cybersecurity, Experience working with cloud environments, Experience completing the RMF process, Experience creating and managing ATO packages, Familiarity with DoD security frameworks, Familiarity with NIST 800-53 Rev. 5, Experience supporting vulnerability management, Experience supporting security assessments, Understanding of identity and access management, Familiarity with securing containerized environments, Familiarity with securing cloud-native applications, Experience with security tools, Experience implementing SAST, CompTIA Security+ certification required", "qualificationsPreferred" : "Experience supporting Google Cloud environments, Familiarity with cloud security concepts, Experience working with Linux-based systems, Experience with DevSecOps practices, Experience with CI/CD security integration, Experience supporting U. S. Federal Government programs, Experience supporting DoW environments, Experience supporting cybersecurity efforts within high-security environments, Experience supporting cybersecurity efforts within highly-regulated environments", "workSiteFlexibility" : "Onsite", "rawDescription" : "540 is seeking a Cybersecurity Engineer to support our partnership with Google and the Department of War in advancing mission-critical capabilities for a global data processing platform. This platform leverages Machine Learning, modern cloud and containerized technologies to ingest, process, and analyze high-volume, time-series data. In this role, you will support the implementation and maintenance of cybersecurity controls across a complex cloud and platform environment. You will work closely with engineers, architects, and security stakeholders to ensure systems are secure, compliant, and resilient within highly regulated, high-impact environments. Location: Patrick SFB, FL or Arlington, VA. Candidates should be local to either location. Onsite support may be required based on mission and customer needs. Travel up to 25% Citizenship & Clearance Requirement: Per client requirements, candidates must be U. S. Citizens with an active DoW clearance with TS/SCI eligibility Education Requirement: Bachelor’s Degree in Computer Science, Cybersecurity, or related field (preferred) 540 Internal Thrive Level: Security Specialist III WHY 540? 540 is a forward-thinking company that the government turns to in order to #getshitdone. We don’t just talk about innovation – we deliver it. We break down barriers, build impactful technology, and solve mission-critical problems. HOW YOU’LL DRIVE IMPACT Support implementation of security controls across cloud infrastructure, platforms, and applications Assist in maintaining compliance with DoD security requirements and frameworks (RMF, NIST 800-53) Collaborate with engineers and architects to integrate security into system design and development Support vulnerability management, scanning, and remediation efforts Assist in monitoring system security posture and responding to security findings Help implement identity, access management, and least privilege principles Support development and maintenance of security documentation, including SSPs and POA&Ms Participate in security assessments, audits, and authorization activities Support incident response activities and root cause analysis Collaborate with cross-functional teams to promote secure development and operational practices REQUIRED SKILLS & EXPERIENCE 5+ years of experience in cybersecurity, information assurance, or related roles Experience working with cloud environments (AWS, Azure, or Google Cloud) Experience completing the RMF process from start to finish, including required documentation Experience creating and managing ATO packages in eMASS Familiarity with DoD security frameworks and NIST 800-53 Rev. 5 Experience supporting vulnerability management and security assessments (including DISA STIG testing) Understanding of identity and access management concepts Familiarity with securing containerized environments and cloud-native applications Experience with security tools such as vulnerability scanners or SIEM platforms Experience implementing and analysing SAST for backend or full-stack applications Strong problem-solving and analytical skills Ability to communicate effectively with technical and non-technical stakeholders Ability to work independently while contributing to a team environment CompTIA Security+ certification required (or ability to obtain within 30 days of hire) NICE TO HAVE Experience supporting Google Cloud environments (GCP) Familiarity with cloud security concepts Experience working with Linux-based systems Experience with DevSecOps practices and CI/CD security integration Experience supporting U. S. Federal Government programs, particularly DoW environments Experience supporting cybersecurity efforts within high-security or highly-regulated environments BENEFITS & PERKS Flexible PTO + all Federal holidays off Health, dental and vision insurance plans Flexible Spending Account (FSA) 401k with employer match Company-sponsored life insurance, short- and long-term disability Professional development (training, certifications, conferences) Paid cloud developer accounts Referral bonuses HQ office perks (parking / metro reimbursement, nitro coffee & lunches) Annual social events (540 Week, hackathon, charity golf tournament, etc.) Access to 540’s Washington Capitals & Nationals tickets EQUAL EMPLOYMENT OPPORTUNITY (EEO) 540's policy is to provide equal employment opportunity to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.", "summaryDescription" : "Cybersecurity Engineer at 540. Skills: Cybersecurity controls, Cloud infrastructure, RMF process, Vulnerability management. Support implementation of security controls. Maintain compliance with DoD security requirements", "postedDate" : "2026-06-11T17:58:22.879", "createdAt" : "2026-06-11T17:58:22.879", "lastUpdated" : "2026-06-14T22:15:34.671", "ingestTimestamp" : "2026-06-11T17:58:22.879", "mongoId" : "6a2a531f74d8ee00a05fcefa", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 135000, "salaryAnnualMax" : 185000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "RMF process", "ATO packages", "NIST 800-53", "STIG testing", "IAM concepts", "Container security", "Cloud-native security", "Vulnerability scanning", "SIEM platforms", "SAST analysis", "Problem-solving", "Analytical skills", "Independent work", "Team contribution", "Cybersecurity controls", "Cloud infrastructure", "Vulnerability management", "Information assurance", "System design", "Security documentation", "Security assessments", "Incident response", "Secure development", "RMF", "DoD security", "Containerized environments", "Cloud-native applications", "DoW environments", "High-security environments", "Highly-regulated environments", "CompTIA Security+", "eMASS", "Vulnerability scanners" ], "skillCount" : 33, "jobCategory" : "other", "jobSubcategory" : "aftac", "dataQualityScore" : 0.8888889, "_score" : 1066.5645, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2c5f3874d8ee00a08ea027", "title" : "Staff Cybersecurity Engineer", "company" : "Empower Pharmacy", "industry" : "Healthcare", "salary" : { "min" : 165000.0, "max" : 225000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Lead Staff Cybersecurity Engineer in the US Healthcare industry, adjusted for remote work and company size." }, "location" : "US Remote", "locations" : [ "US Remote" ], "certifications" : [ "CISSP", "CISM", "GIAC", "GCIA", "GCIH", "CCSP", "CEH" ], "timestamp" : "2026-06-15T00:56:30.972", "fingerprint" : "caa8fa5b2cb94f8c77a5d2c9a64203ae902bb9faca14c0daede27694bf76f16b", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://careers.empowerpharmacy.com/jobs/4234871009?gh_jid=4234871009", "externalId" : "4234871009", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "minimumEducation" : "Master's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SAST, DAST, SCA", "professionalSkills" : [ "Customer Focus", "Strategic AI", "Optimizes Work Processes", "Manages Complexity", "Ensures Accountability", "Situational Adaptability" ], "hardSkillsList" : [ "CI/CD security integration", "Application security", "Threat intelligence", "Adversary tactics", "AI security risks" ], "softSkillsList" : [ "Resourcefulness", "Communicates Effectively" ], "hardSkills" : [ { "name" : "CI/CD security integration", "level" : "intermediate" }, { "name" : "Application security", "level" : "intermediate" }, { "name" : "Threat intelligence", "level" : "intermediate" }, { "name" : "Adversary tactics", "level" : "intermediate" }, { "name" : "AI security risks", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Resourcefulness" }, { "name" : "Communicates Effectively" } ], "majorSkills" : "Cybersecurity Engineering, DevSecOps, AI Security", "majorSkillsList" : [ "Cybersecurity Engineering", "DevSecOps", "AI Security" ], "coreResponsibilities" : "Guide responsible AI adoption, Optimize work processes, Secure resources efficiently, Simplify complex challenges, Deliver on commitments", "teamCollaboration" : "Partners effectively", "domainKnowledge" : "Pharmaceutical manufacturing; Compounded medication; AI-related security risks; Prompt injection; Model poisoning; Data privacy concerns", "domainList" : [ "pharmaceutical-manufacturing", "compounded-medication", "ai-related-security-risks", "prompt-injection", "model-poisoning", "data-privacy-concerns" ], "domainSpecificKnowledge" : [ "Pharmaceutical manufacturing", "Compounded medication", "AI-related security risks", "Prompt injection", "Model poisoning", "Data privacy concerns" ], "communicationSkills" : "Tailors messages", "innovationCreativity" : "Advancing care through technology", "problemSolvingSkills" : "Solves complex challenges", "specialRequirements" : "Talk and hear, Remain stationary, Use hands and fingers, Move about office, Stand, walk, reach, Climb or balance, Stoop, kneel, crouch", "qualificationsBasic" : "DevSecOps practices, CI/CD security integration, Application security tools, SAST, DAST, SCA, Threat intelligence platforms, Adversary tactics, AI-related security risks, Prompt injection, Model poisoning, Data privacy concerns", "qualificationsPreferred" : "CISSP, CISM, GIAC certifications, GCIA, GCIH, CCSP, Cloud provider security certifications, CEH", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Empower Pharmacy is a visionary healthcare company dedicated to making quality, affordable medication accessible to millions of patients nationwide. As the nation’s most advanced 503A compounding pharmacy and FDA-registered 503B outsourcing facility, we’re redefining what’s possible in personalized medicine and pharmaceutical manufacturing. We’re proud to be recognized as one of Houston’s fastest-growing private companies and ranked #116 in Healthcare master’s degree preferred. Experience with DevSecOps practices, CI/CD security integration, and application security tools such as SAST, DAST, and SCA. Familiarity with threat intelligence platforms and adversary tactics, techniques, and procedures. Knowledge of AI-related security risks, including prompt injection, model poisoning, and data privacy concerns. Preferred certifications include CISSP, CISM, GIAC certifications such as GCIA or GCIH, CCSP, cloud provider security certifications, or CEH. Key Competencies: Customer Focus: Builds trust through customer-centric solutions. Strategic AI: Guides responsible AI adoption and adaptation. Optimizes Work Processes: Drives efficiency with continuous improvement. Collaborates: Partners effectively to achieve shared goals. Resourcefulness: Secures and deploys resources efficiently. Manages Complexity: Simplifies and solves complex challenges. Ensures Accountability: Delivers on commitments with integrity. Situational Adaptability: Adjusts approach to shifting conditions. Communicates Effectively: Tailors messages to diverse audiences. Values: People: Empowering people defines who we are. Quality: Excellence in every product, every time. Service: Serving others is our highest purpose. Innovation: Advancing care through technology and discovery. Employee Benefits, Health and Wellness: We offer comprehensive benefits to support your health, well-being, and future, including medical, dental, and vision coverage, paid time off, 401(k) matching, wellness perks, IV therapy, and compounded medications. Learn more: https://careers.empowerpharmacy.com/benefits/ Physical Requirements: While performing the responsibilities of the job, the employee is required to talk and hear. The employee is often required to remain in a stationary position for a significant amount of the workday and frequently use their hands and fingers to handle or feel in order to access, input, and retrieve information from the computer and other office productivity devices. Employees are regularly required to move about the office and around the corporate campus. The employee is regularly required to stand, walk, reach with arms and hands, climb or balance, and to stoop, kneel, crouch or crawl.", "summaryDescription" : "Staff Cybersecurity Engineer at Empower Pharmacy. Skills: Cybersecurity Engineering, DevSecOps, AI Security. Guide responsible AI adoption. Optimize work processes", "postedDate" : "2026-06-12T22:04:19.552", "createdAt" : "2026-06-12T22:04:19.552", "lastUpdated" : "2026-06-15T00:56:30.972", "ingestTimestamp" : "2026-06-12T22:04:19.552", "mongoId" : "6a2c5f3874d8ee00a08ea027", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 165000, "salaryAnnualMax" : 225000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "CI/CD security integration", "Application security", "Threat intelligence", "Adversary tactics", "AI security risks", "Resourcefulness", "Communicates Effectively", "Cybersecurity Engineering", "DevSecOps", "AI Security", "Customer Focus", "Strategic AI", "Optimizes Work Processes", "Manages Complexity", "Ensures Accountability", "Situational Adaptability", "Pharmaceutical manufacturing", "Compounded medication", "AI-related security risks", "Prompt injection", "Model poisoning", "Data privacy concerns", "CISSP", "CISM", "GIAC", "GCIA", "GCIH", "CCSP", "CEH" ], "skillCount" : 29, "jobCategory" : "other", "jobSubcategory" : "it", "dataQualityScore" : 0.8888889, "_score" : 1006.7951, "daysOld" : 2, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Healthcare" }, { "id" : "6a2a477874d8ee00a05da30a", "title" : "Senior Cybersecurity Engineer", "company" : "Similarweb", "industry" : "Technology", "salary" : { "min" : 360000.0, "max" : 540000.0, "currency" : "ILS", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Engineer in Tel Aviv-Yafo, Israel, adjusted for the technology industry and company size." }, "location" : "Tel Aviv-Yafo, Israel", "locations" : [ "Tel Aviv-Yafo", "Israel" ], "certifications" : [ "CISSP", "CISM", "AWS Security Specialty", "CKS" ], "timestamp" : "2026-06-13T03:31:17.651", "fingerprint" : "1023f2c0f8097bbcbd3a81b6722b9f5767626a8202e77fb0a253fec3d64fff60", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/similarweb/jobs/7992665", "externalId" : "7992665", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tel Aviv-Yafo", "country" : "Israel", "continent" : "as", "source" : "llm", "workMode" : "hybrid", "geo" : "32.0852997,34.7818064" } ], "locationText" : "Tel Aviv-Yafo, Israel", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, GCP, Azure, EDR/XDR, SIEM, CDR, CNAPP, DLP, IAM, SASE, MFA, Python, Bash, PowerShell, Generative AI, LLM", "professionalSkills" : [ "Security initiatives", "Risk mitigation", "Security controls", "Security capabilities", "Security-by-design", "Vulnerability management", "Secure configuration", "Threat detection", "Security investigations", "GRC initiatives", "Audit support", "Compliance frameworks" ], "hardSkillsList" : [ "Security controls implementation", "Security technologies administration", "Risk assessment", "Security automation", "Vulnerability assessment", "Remediation tracking", "Secure baselines", "Threat monitoring", "Control implementation", "Audit support", "DDQ completion" ], "softSkillsList" : [ "Problem-solving" ], "hardSkills" : [ { "name" : "Security controls implementation", "level" : "intermediate" }, { "name" : "Security technologies administration", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Security automation", "level" : "intermediate" }, { "name" : "Vulnerability assessment", "level" : "intermediate" }, { "name" : "Remediation tracking", "level" : "intermediate" }, { "name" : "Secure baselines", "level" : "intermediate" }, { "name" : "Threat monitoring", "level" : "intermediate" }, { "name" : "Control implementation", "level" : "intermediate" }, { "name" : "Audit support", "level" : "intermediate" }, { "name" : "DDQ completion", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem-solving" } ], "majorSkills" : "Cloud security, Security technologies, AI security, GRC", "majorSkillsList" : [ "Cloud security", "Security technologies", "AI security", "GRC" ], "coreResponsibilities" : "Implement security controls, Manage security controls, Enhance security controls, Administer security technologies, Optimize security technologies, Maintain security technologies, Lead AI technology security, Assess AI risks, Define AI security controls, Establish AI guardrails, Design security processes, Implement security processes, Automate security processes, Drive security-by-design, Lead vulnerability management, Track remediation, Implement secure baselines, Manage hardening standards, Take role in security operations, Conduct threat detection, Perform IR, Perform security investigations, Monitor security posture, Lead GRC initiatives, Support audits, Complete DDQs", "teamCollaboration" : "Cross-functional teams; IT teams; R&D teams; Product teams; DevOps teams; Engineering teams", "domainKnowledge" : "Generative AI; LLM; AI agents; NIST CSF; ISO/IEC 27000 series; CIS Benchmarks; SOC 2; SOX; OWASP; MITRE ATT&CK", "domainList" : [ "generative-ai", "llm", "ai-agents", "nist-csf", "iso-iec-27000-series", "cis-benchmarks", "soc-2", "sox", "owasp", "mitre-att-ck" ], "domainSpecificKnowledge" : [ "Generative AI", "LLM", "AI agents", "NIST CSF", "ISO/IEC 27000 series", "CIS Benchmarks", "SOC 2", "SOX", "OWASP", "MITRE ATT&CK" ], "toolProficiency" : [ "EDR/XDR", "SIEM", "CDR", "CNAPP", "DLP", "IAM", "SASE", "MFA", "AWS", "GCP", "Azure", "Python", "Bash", "PowerShell" ], "communicationSkills" : "Problem-solving skills", "problemSolvingSkills" : "Problem-solving skills", "qualificationsBasic" : "5+ years Information Security experience, Experience securing cloud environments, Experience implementing security technologies, Experience with vulnerabilities management, Experience working with DevOps teams, Experience with scripting and automation, Experience supporting GRC initiatives, Communication skills, Problem-solving skills, Ability to work independently, Ability to collaborate effectively", "qualificationsPreferred" : "Experience in SaaS company, Experience in global technology company, CISSP certification, CISM certification, AWS Security Specialty certification, CKS certification", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Similarweb (NYSE: SMWB) is a leading digital intelligence company that empowers businesses with trusted insights into online behavior, market trends, and competitive performance. By analyzing billions of digital interactions every day, Similarweb helps organizations make data-driven decisions and accelerate growth. Why is this role so important at Similarweb? As a Senior Cybersecurity Engineer reporting directly to the Chief Information Security Officer (CISO), you will play a key role within Similarweb’s security team. In this position you will drive impactful security initiatives that support the company’s business objectives, leveraging innovative technologies and practical solutions to strengthen our security posture while enabling the business to operate securely and efficiently. You will collaborate with cross-functional teams across the organization, including IT, R&D, Product, and other stakeholders, to ensure that security is embedded throughout our products, services, and operations. You will help identify and mitigate risks, implement effective security controls, and continuously enhance our security capabilities in a dynamic, fast-growing, technology-driven environment. Responsibilities Implement, manage, and continuously enhance security controls across cloud environments (AWS, GCP, Azure), endpoints, SaaS platforms, and applications. Administer, optimize, and maintain security technologies, including EDR/XDR, SIEM, CDR, CNAPP, DLP, IAM, SASE, MFA, network security solutions, and more. Take a leading role in securing Similarweb's adoption of Generative AI & LLM-based technologies, assessing risks, defining security controls, and establishing guardrails for AI agents, MCP-based integrations, and AI-powered applications across the organization. Design, implement, and automate security processes, workflows, and controls to improve operational efficiency, visibility, and risk reduction across the organization. Partner with IT, DevOps, Engineering, and Product teams to drive security-by-design principles across system architecture, software development and AI lifecycles, cloud infrastructure, and business operations. Lead vulnerability management initiatives, including identification, assessment, prioritization, remediation tracking, validation, and reporting across applications and environments. Implement, manage, and maintain secure configuration baselines, hardening standards, and technical controls aligned with industry frameworks and best practices, including CIS Benchmarks, NIST(CSF), and ISO/IEC 27000 series. Take an active role in security operations activities, including threat detection, IR, security investigations, and continuous monitoring of the organization's security posture. Lead GRC initiatives through control implementation, assessments, audit support, customer security & Due Diligence Questionnaires (DDQs), and remediation efforts related to SOC 2, SOX, ISO 27001, and other compliance frameworks. Qualifications 5+ years of experience in Information Security, Cybersecurity, or a related technical field. Experience securing cloud environments (AWS, GCP, Azure), SaaS platforms, and enterprise applications (APIs and Integrations). Experience implementing and managing security technologies such as EDR/XDR, SIEM, CNAPP, IAM, SSO, MFA, Identity Providers (IdPs), WAF, VPN, DLP, ZTNA, and secure connectivity solutions Strong understanding of security frameworks, standards and best practices, such as NIST CSF, CSA, CIS Controls, MITRE ATT&CK, OWASP, SOC 2, or ISO/IEC 27000 series. Experience with vulnerabilities/CVEs management, assessment, incident response, and security operations processes. Experience working with DevOps, R&D, and IT teams to integrate security into OS, cloud infrastructure, SDLC, applications, and operational processes, including authentication and authorization technologies such as SSO, SAML, OAuth, and OpenID Connect. Experience with scripting and automation using Python, Bash, PowerShell, or similar technologies. Familiarity with AI security concepts, including risks and controls related to Generative AI, LLMs, AI agents, MCP-based integrations, and AI-powered applications. Experience supporting GRC initiatives, audits, compliance programs, and security assurance activities. Strong communication and problem-solving skills, with the ability to work independently and collaborate effectively across technical and business teams. Experience in a SaaS or global technology company - Advantage Security certifications such as CISSP, CISM, AWS Security Specialty, CKS or equivalent - an advantage. —----------------------------------------------------------------------------------------------------------- **At Similarweb, collaborating with our colleagues in-office creates a more connected, unified culture. Our best work is a product of our face-to-face collaboration, with the ability to work partially from home.** Why you’ll love being a Similarwebber: You’ll actually love the product you work with: Our customers aren’t our only raving fans. When we asked our employees why they chose to come work at Similarweb, 99% of them said “the product.” Imagine how exciting your job is when you get to work with the most powerful digital intelligence platform in the world. You’ll find a home for your big ideas: We encourage an open dialogue and empower employees to bring their ideas to the table. You’ll find the resources you need to take initiative and create meaningful change within the organization. We offer competitive perks & benefits: We take your well-being seriously, and offer competitive compensation packages to all employees. We also put a strong emphasis on community, with regular team outings and happy hours. You can grow your career in any direction you choose: Interested in becoming a VP or want to transition into a different department? Whether it’s Career Week, personalized coaching, or our ongoing learning solutions, you’ll find all the tools and opportunities you need to develop your career right here. Diversity isn’t just a buzzword: People want to work in a place where they can be themselves. We strive to create a workplace that is reflective of the communities we serve, where everyone is empowered to bring their full, authentic selves to work. We are committed to inclusivity across race, gender, ethnicity, culture, sexual orientation, age, religion, spirituality, identity and experience. Our culture of equality and mutual respect also helps us better understand and serve our customers in a world that is becoming more global, more diverse, and more digital every day. We will handle your application and information related to your application in accordance with the Applicant Privacy Policy available here. We will handle your application and information related to your application in accordance with the Applicant Privacy Policy available here.", "summaryDescription" : "Senior Cybersecurity Engineer at Similarweb. Skills: Cloud security, Security technologies, AI security, GRC. Implement security controls. Manage security controls", "postedDate" : "2026-06-11T17:06:51.871", "createdAt" : "2026-06-11T17:06:51.871", "lastUpdated" : "2026-06-13T03:31:17.651", "ingestTimestamp" : "2026-06-11T17:06:51.871", "mongoId" : "6a2a477874d8ee00a05da30a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Security controls implementation", "Security technologies administration", "Risk assessment", "Security automation", "Vulnerability assessment", "Remediation tracking", "Secure baselines", "Threat monitoring", "Control implementation", "Audit support", "DDQ completion", "Problem-solving", "Cloud security", "Security technologies", "AI security", "GRC", "Security initiatives", "Risk mitigation", "Security controls", "Security capabilities", "Security-by-design", "Vulnerability management", "Secure configuration", "Threat detection", "Security investigations", "GRC initiatives", "Compliance frameworks", "Generative AI", "LLM", "AI agents", "NIST CSF", "ISO/IEC 27000 series", "CIS Benchmarks", "SOC 2", "SOX", "OWASP", "MITRE ATT&CK", "CISSP", "CISM", "AWS Security Specialty", "CKS", "EDR/XDR", "SIEM", "CDR", "CNAPP", "DLP", "IAM", "SASE", "MFA", "AWS", "GCP", "Azure", "Python", "Bash", "PowerShell" ], "skillCount" : 55, "jobCategory" : "other", "jobSubcategory" : "r&d", "dataQualityScore" : 0.8888889, "_score" : 996.8783, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2a833274d8ee00a067574d", "title" : "Platform Security Engineer (DevSecOps) – Contract", "company" : "Qube Research & Technologies", "industry" : "Technology", "salary" : { "min" : 100000.0, "max" : 150000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Platform Security Engineer (DevSecOps) in London, UK, adjusted for the FinTech industry and contract employment type." }, "location" : "London, Greater London, England, United Kingdom", "locations" : [ "London", "Greater London", "England", "United Kingdom" ], "timestamp" : "2026-06-14T22:19:42.924", "fingerprint" : "4fe5d02350ee3612013f80c1d04bed4b88a831abdb619e84c4114f3d80a1e18e", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/quberesearchandtechnologies/jobs/8514641002", "externalId" : "8514641002", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "state" : "England", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, England, United Kingdom", "employmentType" : "CONTRACT", "technicalSkills" : "Vault, Terraform, Python, Go, Bash, Kubernetes, AWS, GitOps, CI/CD, OIDC, JWT", "professionalSkills" : [ "Systems thinking", "Automation", "Platform engineering" ], "hardSkillsList" : [ "Security platforms", "Identity workflows", "Secrets management", "Trust workflows", "Integration patterns", "Production debugging" ], "softSkillsList" : [ "Curiosity", "Pragmatism" ], "hardSkills" : [ { "name" : "Security platforms", "level" : "intermediate" }, { "name" : "Identity workflows", "level" : "intermediate" }, { "name" : "Secrets management", "level" : "intermediate" }, { "name" : "Trust workflows", "level" : "intermediate" }, { "name" : "Integration patterns", "level" : "intermediate" }, { "name" : "Production debugging", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Curiosity" }, { "name" : "Pragmatism" } ], "majorSkills" : "Platform security, DevSecOps, Automation", "majorSkillsList" : [ "Platform security", "DevSecOps", "Automation" ], "coreResponsibilities" : "Build security platforms, Operate security platforms, Automate identity workflows, Automate secrets workflows, Automate trust workflows, Create onboarding patterns, Create integration patterns, Debug production issues, Help teams adopt secure patterns, Reduce operational toil", "teamCollaboration" : "Work across infrastructure; Work across applications; Work across security; Work across people", "domainKnowledge" : "Security patterns; Platform capabilities; Identity management; Secrets management; Trust management; Cloud-native architecture", "domainList" : [ "security-patterns", "platform-capabilities", "identity-management", "secrets-management", "trust-management", "cloud-native-architecture" ], "domainSpecificKnowledge" : [ "Security patterns", "Platform capabilities", "Identity management", "Secrets management", "Trust management", "Cloud-native architecture" ], "toolProficiency" : [ "HashiCorp Vault Enterprise", "Terraform", "SailPoint", "PrivX", "CyberArk" ], "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Replace inconsistent security patterns; Build scalable platform capabilities; Make secure solutions easier to adopt", "qualificationsBasic" : "Hands-on engineer, Automate repetitive work, Ask questions before proposing solutions, Understand how systems work, Solve root causes, Work across infrastructure, applications, security, and people, Pragmatic about balancing security, usability, and delivery", "qualificationsPreferred" : "Experience with HashiCorp Vault Enterprise, Experience with Terraform, Experience with Python, Experience with Go, Experience with Bash, Experience with Kubernetes, Experience with AWS, Experience with GitOps/CI/CD, Experience with OIDC/JWT, Experience with SailPoint, Experience with PrivX, Experience with CyberArk", "workSiteFlexibility" : "Onsite", "rawDescription" : "Platform Security Engineer (DevSecOps) – Contract Qube Research & Technologies (QRT) is a technology and data-driven quantitative investment manager. We build systems that directly support research and trading activity. As our engineering and research environments scale, manual security, identity, and trust processes increasingly become bottlenecks. We're looking for a hands-on engineer to help us replace inconsistent security patterns with scalable platform capabilities that engineers actually want to use. What You'll Do Build and operate security platforms as code Automate identity, secrets, and trust workflows Create reusable onboarding and integration patterns Debug production issues across infrastructure, applications, and platforms Help teams adopt secure patterns without slowing delivery Reduce operational toil through automation and platform engineering Engineering teams will often have competing business priorities. Success depends on making secure solutions easier to adopt than insecure ones. Engineers Who Will Thrive In This Role You automate repetitive work rather than documenting it You ask questions before proposing solutions You enjoy understanding how systems actually work You like solving root causes rather than symptoms You are comfortable working across infrastructure, applications, security, and people You are pragmatic about balancing security, usability, and delivery Technologies We Use HashiCorp Vault Enterprise, Terraform, Python, Go, Bash, Kubernetes, AWS, GitOps/CI/CD, OIDC/JWT, SailPoint, PrivX and CyberArk. What Matters Most We are far more interested in: engineering judgement communication systems thinking automation curiosity pragmatism than experience with a particular vendor product. This is a hands-on production role. You will own the outcomes of the systems you build. Anti-Patterns To Avoid Treating security as policy enforcement rather than an engineering problem Optimising for tools rather than outcomes Waiting for perfect requirements before making progress Preferring manual processes over automation Assuming teams will adopt a platform simply because it exists The challenge is not deploying Vault. The challenge is building secure platform capabilities that survive contact with reality.", "summaryDescription" : "Platform Security Engineer (DevSecOps) – Contract at Qube Research & Technologies. Skills: Platform security, DevSecOps, Automation. Build security platforms. Operate security platforms", "postedDate" : "2026-06-11T23:28:40.273", "createdAt" : "2026-06-11T23:28:40.273", "lastUpdated" : "2026-06-14T22:19:42.924", "ingestTimestamp" : "2026-06-11T23:28:40.273", "mongoId" : "6a2a833274d8ee00a067574d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Security platforms", "Identity workflows", "Secrets management", "Trust workflows", "Integration patterns", "Production debugging", "Curiosity", "Pragmatism", "Platform security", "DevSecOps", "Automation", "Systems thinking", "Platform engineering", "Security patterns", "Platform capabilities", "Identity management", "Trust management", "Cloud-native architecture", "HashiCorp Vault Enterprise", "Terraform", "SailPoint", "PrivX", "CyberArk" ], "skillCount" : 23, "jobCategory" : "engineering", "jobSubcategory" : "technology-security", "dataQualityScore" : 0.8888889, "_score" : 965.3427, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2cf90174d8ee00a0a98c2b", "title" : "Corporate Security Technology & Data Engineer (Contract)", "company" : "OpenAI", "industry" : "Technical", "salary" : { "min" : 160000.0, "max" : 240000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Corporate Security Technology & Data Engineer in the US Technology industry, adjusted for company size and remote work." }, "location" : "United States", "locations" : [ "United States" ], "timestamp" : "2026-06-15T07:46:26.805", "fingerprint" : "7a3a2690a3ecb2125c57da90248c6b51b68e88be370db0ad003e2ce0c1066282", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/greenlight-workforce-solutions/0c7a7a83-8f0f-4435-91d6-e24711c5dbb6/application", "externalId" : "0c7a7a83-8f0f-4435-91d6-e24711c5dbb6", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Data engineering, Analytics engineering, Software engineering, Solutions architecture, Business systems, APIs, Data pipelines, Databases, Scripts, Automation tools, SQL, Python, JavaScript", "professionalSkills" : [ "Risk management", "Operational analytics", "Data strategy", "Technical requirements", "Data modeling", "Scalable reporting" ], "hardSkillsList" : [ "Data quality", "Data consistency", "Data reliability", "Data governance", "Access control", "Privacy", "Risk assessment" ], "softSkillsList" : [ "Self-directed" ], "hardSkills" : [ { "name" : "Data quality", "level" : "intermediate" }, { "name" : "Data consistency", "level" : "intermediate" }, { "name" : "Data reliability", "level" : "intermediate" }, { "name" : "Data governance", "level" : "intermediate" }, { "name" : "Access control", "level" : "intermediate" }, { "name" : "Privacy", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Self-directed" } ], "majorSkills" : "Data engineering, Security technology, AI automation, Dashboarding", "majorSkillsList" : [ "Data engineering", "Security technology", "AI automation", "Dashboarding" ], "coreResponsibilities" : "Partner with teams, Understand workflows, Understand data sources, Understand reporting needs, Understand automation goals, Build dashboards, Build metrics, Provide visibility, Use AI tools, Build internal tools, Build workflows, Create technical vision, Connect team projects, Assess data sources, Assess workflows, Identify gaps, Improve data quality, Improve data consistency, Improve data reliability, Design data pipelines, Design reporting structures, Build prototypes, Test with users, Iterate toward solutions, Establish data standards, Establish governance practices, Establish repeatable patterns, Translate business needs, Create technical requirements, Create practical solutions, Serve as technical partner, Advise on dashboards, Advise on automation, Advise on AI workflows, Advise on data strategy", "teamCollaboration" : "Partner with non-technical stakeholders; Work across stakeholders", "domainKnowledge" : "Corporate security; Executive protection; Protective intelligence; GSOC; Event security; Investigations; Risk management; Resilience; Travel security; Security technology; Physical security; Threat intelligence; Case management; Incident response; Trust and safety; Enterprise resilience", "domainList" : [ "corporate-security", "executive-protection", "protective-intelligence", "gsoc", "event-security", "investigations", "risk-management", "resilience", "travel-security", "security-technology", "physical-security", "threat-intelligence", "case-management", "incident-response", "trust-and-safety", "enterprise-resilience" ], "domainSpecificKnowledge" : [ "Corporate security", "Executive protection", "Protective intelligence", "GSOC", "Event security", "Investigations", "Risk management", "Resilience", "Travel security", "Security technology", "Physical security", "Threat intelligence", "Case management", "Incident response", "Trust and safety", "Enterprise resilience" ], "toolProficiency" : [ "ChatGPT", "Codex", "Agents", "Airtable", "Ontic", "Jira", "Asana", "Google Workspace", "Slack" ], "innovationCreativity" : "Prototype development", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Handling sensitive data", "outcomesObjectives" : "Develop clear understanding; Identify data fragmentation; Identify quality needs; Identify duplicated effort; Create connected ecosystem; Ensure reliable data flows; Strengthen automation; Provide real-time view", "qualificationsBasic" : "5+ years experience, Experience integrating security technologies, Experience building dashboards, Experience working with APIs, Ability to work with stakeholders, Understanding of data quality, Demonstrated ability to build tools", "qualificationsPreferred" : "Experience using AI tools, Experience with Airtable, Experience with Ontic, Experience with Jira, Experience with Google Workspace, Experience with Slack, Experience supporting security teams, Experience building executive dashboards, Comfort with SQL, Comfort with Python, Comfort with JavaScript, Comfort with APIs, Comfort with low-code platforms, Comfort with no-code platforms, Experience designing data governance, Experience designing permissions models, Experience designing access-control models", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "CONTRACTOR: CORPORATE SECURITY TECHNOLOGY & DATA ENGINEER Length: 6mo to start (room for extension) Location: Remote - US ABOUT THE TEAM Corporate Security protects OpenAI’s people, places, operations, and leadership. The team supports a wide range of work across executive protection, protective intelligence, GSOC, events, investigations, risk, resilience, travel security, and security technology. As OpenAI scales, Corporate Security is building more advanced ways to understand risk, measure performance, automate workflows, and give leaders real-time visibility into what is happening across the function. ABOUT THE ROLE We are looking for a contractor to help Corporate Security build a best-in-class technology, data, and dashboard ecosystem using OpenAI tools including ChatGPT, Codex, agents, and other automation capabilities. Today, teams across Corporate Security are experimenting with their own Codex, ChatGPT, and automation projects. This role will help connect those efforts into one cohesive vision. You will partner with every Corporate Security team to understand their workflows, data, metrics, and long-term goals, then build the systems that bring everything together at the Corporate Security level. This is a hands-on technical role for someone who can think strategically, build quickly, and care deeply about data quality. The goal is not just to create dashboards, but to ensure the right data is flowing cleanly through the right systems so Corporate Security leaders can make faster, better decisions. IN THIS ROLE, YOU WILL - Partner with teams across Corporate Security to understand their operational workflows, data sources, reporting needs, and automation goals. - Build best-in-class dashboards and metrics that provide real-time visibility into Corporate Security operations, performance, risks, and program health. - Use ChatGPT, Codex, agents, APIs, and automation tools to build scalable internal tools and workflows. - Create a unified technical vision that connects team-level projects into a broader Corporate Security data and technology ecosystem. - Assess current data sources and workflows, identify gaps, and improve the quality, consistency, and reliability of data. - Design clean data pipelines and reporting structures across systems such as Airtable, Ontic, Jira, Asana, Google Workspace, and other Corporate Security tools. - Build prototypes quickly, test with users, and iterate toward production-ready solutions. - Help establish data standards, governance practices, and repeatable patterns for future Corporate Security technology builds. - Translate ambiguous business needs into clear technical requirements and practical solutions. - Serve as a technical partner to Corporate Security leadership on dashboards, automation, AI-enabled workflows, and data strategy. YOU MIGHT THRIVE IN THIS ROLE IF YOU - Have strong experience building dashboards, data products, internal tools, or automation systems in complex operating environments. - Are comfortable working with ambiguous requirements and turning them into simple, scalable technical solutions. - Have experience integrating systems through APIs, scripts, databases, and automation platforms. - Care about data quality and know that dashboards are only as good as the data behind them. - Can partner with non-technical stakeholders and quickly understand how their work actually happens. - Are excited about using AI tools like ChatGPT, Codex, and agents to improve real-world operations. - Can move between strategy and execution, from designing the architecture to building the actual workflow. - Have strong judgment around privacy, access control, and responsible handling of sensitive operational data. - Are highly organized, self-directed, and able to drive work across multiple stakeholders. REQUIRED QUALIFICATIONS - 5+ years of experience in data engineering, analytics engineering, software engineering, solutions architecture, business systems, or a similar technical role. - Experience integrating physical security and risk-management technologies, including access control, visitor management, threat intelligence, case management, and incident response platforms - Experience building dashboards, reporting systems, or operational analytics products. - Experience working with APIs, data pipelines, databases, scripts, or automation tools. - Ability to work directly with business stakeholders and translate operational needs into technical solutions. - Strong understanding of data quality, data modeling, and scalable reporting practices. - Demonstrated ability to build practical tools in fast-moving environments. PREFERRED QUALIFICATIONS - Experience using ChatGPT, Codex, AI agents, or LLM-based tools to build internal workflows or automation. - Experience with Airtable, Ontic, Jira, Google Workspace, Slack, or similar enterprise tools. - Experience supporting security, risk, intelligence, operations, trust and safety, or enterprise resilience teams. - Experience building executive-facing dashboards or metrics programs. - Comfort with SQL, Python, JavaScript, APIs, and low-code/no-code platforms. - Experience designing data governance, permissions, and access-control models for sensitive data. WHAT SUCCESS LOOKS LIKE Within the first few months, this contractor will have developed a clear understanding of Corporate Security’s systems, workflows, and existing Codex/ChatGPT projects. They will identify where data is fragmented, where quality needs to improve, and where teams are duplicating effort. Over time, this person will help create a connected Corporate Security data and technology ecosystem, including reliable data flows, cleaner source systems, stronger automation, and dashboards that give leadership a real-time view of Corporate Security operations.", "summaryDescription" : "Corporate Security Technology & Data Engineer (Contract) at OpenAI. Skills: Data engineering, Security technology, AI automation, Dashboarding. Partner with teams. Understand workflows", "createdAt" : "2026-06-13T22:36:07.488", "lastUpdated" : "2026-06-15T07:46:26.805", "ingestTimestamp" : "2026-06-13T22:36:07.488", "mongoId" : "6a2cf90174d8ee00a0a98c2b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 160000, "salaryAnnualMax" : 240000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Data quality", "Data consistency", "Data reliability", "Data governance", "Access control", "Privacy", "Risk assessment", "Self-directed", "Data engineering", "Security technology", "AI automation", "Dashboarding", "Risk management", "Operational analytics", "Data strategy", "Technical requirements", "Data modeling", "Scalable reporting", "Corporate security", "Executive protection", "Protective intelligence", "GSOC", "Event security", "Investigations", "Resilience", "Travel security", "Physical security", "Threat intelligence", "Case management", "Incident response", "Trust and safety", "Enterprise resilience", "ChatGPT", "Codex", "Agents", "Airtable", "Ontic", "Jira", "Asana", "Google Workspace", "Slack" ], "skillCount" : 41, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 935.4242, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca13274d8ee00a09a4b5f", "title" : "Cybersecurity Analyst", "company" : "Level", "industry" : "Corporate", "salary" : { "min" : 85000.0, "max" : 115000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Analyst in Austin, United States, adjusted for the Education industry and company size." }, "location" : "Austin", "locations" : [ "Austin" ], "certifications" : [ "CompTIA Security+", "CySA+", "Microsoft Certified: Security Operations Analyst Associate", "Azure Security Engineer Associate", "CEH", "GIAC GSEC", "GIAC GCIA", "GIAC GCIH" ], "timestamp" : "2026-06-15T05:23:45.000", "fingerprint" : "c34b92369538dc90b549740abdc4c0b596f06d245e039dd634669205c40fec2e", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/level/b19529e9-60a7-4e0d-83cd-5ceb5aa2e1a9/application", "externalId" : "b19529e9-60a7-4e0d-83cd-5ceb5aa2e1a9", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 3, "experienceMaxYears" : 5, "technicalSkills" : "SIEM, EDR, Network monitoring, TCP/IP, Firewalls, DNS, VPNs, IDS/IPS, MDM, RBAC, IAM, Zero Trust, Azure, AWS, GCP, DevSecOps, CI/CD", "professionalSkills" : [ "Threat hunting", "Incident response", "Vulnerability management", "Compliance assessment", "Risk management", "Security audits" ], "hardSkillsList" : [ "Security monitoring", "Log analysis", "Threat detection", "Endpoint security", "Network traffic analysis", "Cloud security monitoring", "Vulnerability scanning", "Remediation tracking" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Endpoint security", "level" : "intermediate" }, { "name" : "Network traffic analysis", "level" : "intermediate" }, { "name" : "Cloud security monitoring", "level" : "intermediate" }, { "name" : "Vulnerability scanning", "level" : "intermediate" }, { "name" : "Remediation tracking", "level" : "intermediate" } ], "majorSkills" : "Security monitoring, Threat detection, Incident response, Endpoint security", "majorSkillsList" : [ "Security monitoring", "Threat detection", "Incident response", "Endpoint security" ], "coreResponsibilities" : "Monitor security alerts, Analyze security events, Investigate security incidents, Investigate anomalies, Investigate potential threats, Tune detection rules, Maintain detection rules, Tune alerts, Maintain alerts, Tune dashboards, Maintain dashboards, Conduct threat hunting, Identify indicators of compromise, Identify attacker TTPs, Participate incident response, Contain incidents, Eradicate incidents, Document timelines, Document remediation actions, Administer endpoint security tools, Support MDM operations, Manage identity controls, Manage access controls, Enforce RBAC policies, Conduct access reviews, Monitor network traffic, Monitor logs, Assist maintaining firewall rules, Assist maintaining network segmentation, Support Zero Trust implementation, Support least-privilege enforcement, Monitor cloud environments, Identify misconfigurations, Identify policy violations, Assist vulnerability scans, Assist remediation tracking, Assist compliance assessments, Collaborate development teams, Collaborate IT ops teams, Integrate security CI/CD pipelines", "teamCollaboration" : "Security team; Development teams; IT ops teams", "domainKnowledge" : "Network security fundamentals; Zero Trust concepts; DevSecOps principles; NIST CSF; SOC 2; CIS Controls", "domainList" : [ "network-security-fundamentals", "zero-trust-concepts", "devsecops-principles", "nist-csf", "soc-2", "cis-controls" ], "domainSpecificKnowledge" : [ "Network security fundamentals", "Zero Trust concepts", "DevSecOps principles", "NIST CSF", "SOC 2", "CIS Controls" ], "toolProficiency" : [ "SIEM platforms", "EDR platforms", "Antivirus platforms", "MDM platforms", "Firewall rules" ], "documentationSkills" : "IR playbooks; Runbooks; Escalation procedures", "problemSolvingSkills" : "Problem-solving skills", "specialRequirements" : "Based in Austin, TX, Willing to relocate", "qualificationsBasic" : "3-5 years cybersecurity analyst experience, Solid security monitoring knowledge, Solid log analysis knowledge, Solid SIEM platforms knowledge, Experience incident response, Working knowledge network security, Hands-on endpoint security experience, Hands-on EDR tools experience, Experience MDM platforms, Understanding RBAC principles, Understanding IAM principles, Familiarity Zero Trust concepts, Basic cloud security knowledge, Familiarity DevSecOps principles, Familiarity secure SDLC practices, Analytical skills, Problem-solving skills, Exceptional attention to detail", "qualificationsPreferred" : "CompTIA Security+ certification, CySA+ certification, Microsoft Certified: Security Operations Analyst Associate, Azure Security Engineer Associate, CEH certification, GIAC GSEC certification, GIAC GCIA certification, GIAC GCIH certification", "workSiteFlexibility" : "Onsite", "rawDescription" : "Level is a learning technology company dedicated to helping students build real academic and life skills with confidence and joy. We combine proven curriculum principles with world class interactive design to make meaningful practice something students want to come back to, not something they struggle through. We support what teachers, schools, and parents are already doing by increasing student engagement with high quality, standards aligned practice that reinforces classroom learning. That's why we're building: For students: Rewarding and motivating learning experiences that meet students where they are to build real academic proficiency. For educators: Tools that fit naturally into instruction and help students stay engaged while reducing teacher workload. For parents: Activities that help your kid catch up or get ahead, build confidence, and minimize homework battles, whether learning at school or at home. We are committed to helping every person maximize their potential and live a life of meaning. It's a difficult problem that requires brilliant people and tremendous effort over time. Level is looking for a skilled and motivated Cybersecurity Analyst to join our security team and help protect the organization's systems, networks, and data from evolving cyber threats. This is a hands-on technical role that requires a strong foundation in security monitoring, threat detection, incident response, and endpoint security. Reporting to the Director of Cybersecurity, this analyst will be a key contributor to day-to-day security operations, working across network security, cloud environments, and endpoint management tools to identify risks, respond to incidents, and continuously improve the organization's security posture. What You Will Do: - Monitor and analyze security alerts and events across SIEM, EDR, and network monitoring platforms - Investigate security incidents, anomalies, and potential threats to determine scope and impact - Tune and maintain detection rules, alerts, and dashboards to reduce noise and improve fidelity - Conduct threat hunting to proactively identify indicators of compromise (IOCs) and attacker TTPs - Participate in incident response including containment, eradication, and recovery; document timelines and remediation actions - Assist in developing and maintaining IR playbooks, runbooks, and escalation procedures - Administer endpoint security tools including EDR/antivirus platforms and support MDM operations - Manage identity and access controls, enforce RBAC policies, and conduct access reviews - Monitor network traffic and logs for suspicious activity; assist in maintaining firewall rules and network segmentation - Support Zero Trust implementation efforts and least-privilege enforcement - Monitor cloud environments (Azure, AWS, or GCP) for misconfigurations and policy violations - Assist with vulnerability scans, remediation tracking, and compliance assessments (NIST CSF, SOC 2, CIS Controls) - Collaborate with development and IT ops teams to integrate security into CI/CD pipelines (DevSecOps) - Assist with third-party risk management and security audits Qualifications Need to Have: - 3-5 years of hands-on experience in a cybersecurity analyst, SOC analyst, or related technical security role - Solid understanding of security monitoring, log analysis, and SIEM platforms - Experience participating in incident response activities, including investigation and remediation - Working knowledge of network security fundamentals: TCP/IP, firewalls, DNS, VPNs, IDS/IPS - Hands-on experience with endpoint security platforms and EDR tools - Experience with MDM platforms for device management and policy enforcement - Understanding of RBAC and IAM principles in enterprise environments - Familiarity with Zero Trust concepts and practical enterprise application - Basic cloud security knowledge in at least one of Azure, AWS, or GCP - Familiarity with DevSecOps principles and secure SDLC practices - Strong analytical and problem-solving skills with exceptional attention to detail - Based in Austin, TX or willing to relocate prior to start date Nice to Have: - CompTIA Security+ (strongly preferred), CySA+, or equivalent certification - Microsoft Certified: Security Operations Analyst Associate (SC-200) or Azure Security Engineer Associate (AZ-500) - CEH, GIAC GSEC, GCIA, or GCIH", "summaryDescription" : "Cybersecurity Analyst at Level. Skills: Security monitoring, Threat detection, Incident response, Endpoint security. Monitor security alerts. Analyze security events", "createdAt" : "2026-06-14T04:08:21.356", "lastUpdated" : "2026-06-15T05:23:45.000", "ingestTimestamp" : "2026-06-14T04:08:21.356", "mongoId" : "6a2ca13274d8ee00a09a4b5f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 85000, "salaryAnnualMax" : 115000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Security monitoring", "Log analysis", "Threat detection", "Endpoint security", "Network traffic analysis", "Cloud security monitoring", "Vulnerability scanning", "Remediation tracking", "Incident response", "Threat hunting", "Vulnerability management", "Compliance assessment", "Risk management", "Security audits", "Network security fundamentals", "Zero Trust concepts", "DevSecOps principles", "NIST CSF", "SOC 2", "CIS Controls", "CompTIA Security+", "CySA+", "Microsoft Certified: Security Operations Analyst Associate", "Azure Security Engineer Associate", "CEH", "GIAC GSEC", "GIAC GCIA", "GIAC GCIH", "SIEM platforms", "EDR platforms", "Antivirus platforms", "MDM platforms", "Firewall rules" ], "skillCount" : 33, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 917.04834, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Education", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6ae374d8ee00a090ee19", "title" : "Senior Security Engineer", "company" : "PubMatic", "industry" : "Cybersecurity", "salary" : { "min" : 2200000.0, "max" : 3500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Engineer in Gurugram, India, adjusted for the technology industry and company size." }, "location" : "Gurugram", "locations" : [ "Gurugram", "Pune" ], "timestamp" : "2026-06-15T11:31:26.144", "fingerprint" : "036fe461d5c32bde966d19674ee2896db18ea68e5c02dfd07b4ff5eed08ab41f", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://pubmatic.com/job/?gh_jid=4994052008", "externalId" : "4994052008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Gurugram", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "28.4646148,77.0299194" } ], "locationText" : "Gurugram, India", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Zero Trust, AWS, Azure, GCP, IDS/IPS, SIEM, WAF, DLP, Python, Bash, Ruby, Container security, Kubernetes security, Network protocols, Cryptography, Application security, Cloud Concepts", "professionalSkills" : [ "Risk assessments", "Vendor risk management", "Threat modeling", "Architecture analysis" ], "hardSkillsList" : [ "Vulnerability management", "Threat detection", "Incident response", "Security automation", "Cyber threat intelligence", "Network security", "Endpoint security", "Infrastructure security", "System security", "Authentication protocols", "Security protocols" ], "softSkillsList" : [ "Problem-solving", "Mentoring" ], "hardSkills" : [ { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security automation", "level" : "intermediate" }, { "name" : "Cyber threat intelligence", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Endpoint security", "level" : "intermediate" }, { "name" : "Infrastructure security", "level" : "intermediate" }, { "name" : "System security", "level" : "intermediate" }, { "name" : "Authentication protocols", "level" : "intermediate" }, { "name" : "Security protocols", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem-solving" }, { "name" : "Mentoring" } ], "majorSkills" : "Cybersecurity, Cloud security, Zero Trust, Incident response", "majorSkillsList" : [ "Cybersecurity", "Cloud security", "Zero Trust", "Incident response" ], "coreResponsibilities" : "Strengthen cybersecurity posture, Implement Zero Trust, Manage cloud security, Lead vulnerability management initiatives, Lead threat detection initiatives, Lead incident response initiatives, Lead security automation initiatives, Integrate security by design, Conduct risk assessments, Participate in red team exercises, Participate in blue team exercises, Support security awareness initiatives, Contribute to internal audits, Contribute to compliance efforts, Mentor junior team members, Deploy and manage security solutions, Monitor security alerts and events, Analyze security events, Utilize threat intelligence, Mitigate security risks, Develop detection rules, Update threat profiles, Manage intelligence requirements, Improve cyber threat intelligence function, Support Incident Response teams, Provide intelligence context, Provide remediation recommendations, Deploy and manage IDS/IPS, Deploy and manage WAF, Mitigate security issues, Mitigate misconfigurations, Mitigate vulnerabilities, Conduct security assessments, Manage vendor risk, Bolster network security, Participate in security incident response, Minimize incident impact, Facilitate recovery, Enhance security posture proactively, Integrate security practices, Set up security tooling, Secure defaults, Perform architecture analysis, Perform threat modeling, Review technical designs, Triage security bugs, Recommend solutions for security bugs, Participate in Red-Teaming exercises, Participate in Blue Teaming exercises, Execute VAPT exercises, Run security scans, Collaborate to mitigate security issues, Collaborate to mitigate vulnerabilities, Provide mentorship and guidance, Conduct security awareness sessions, Participate in security campaigns, Create security policies, Contribute to security policies, Participate in Audits, Participate in RFI's, Evaluate new security solutions, Conduct POCs, Demonstrate POVs, Implement anti-abuse solutions, Apply AI tools for anomaly detection, Apply AI tools for insider threat detection, Apply AI tools for incident response", "teamCollaboration" : "Cross-functional teams; Global teams; Operations teams; Engineering teams; Risk management teams; Incident Response teams", "projectManagementSkills" : [ "Agile" ], "domainKnowledge" : "Cyber Security; Infrastructure security; Network security; Endpoint security; Zero Trust; Cloud security; AI risk; AI threat modeling; LLM components", "domainList" : [ "cyber-security", "infrastructure-security", "network-security", "endpoint-security", "zero-trust", "cloud-security", "ai-risk", "ai-threat-modeling", "llm-components" ], "domainSpecificKnowledge" : [ "Cyber Security", "Infrastructure security", "Network security", "Endpoint security", "Zero Trust", "Cloud security", "AI risk", "AI threat modeling", "LLM components" ], "toolProficiency" : [ "Darktrace", "CrowdStrike", "Cloud proxy", "SOAR", "EDR", "PAM", "Firewalls", "JIRA" ], "communicationSkills" : "Articulate security concepts", "continuousLearning" : "Learning about new security products; Learning about new security features; Learning about new security strategies", "innovationCreativity" : "Hackathon", "problemSolvingSkills" : "Analytical skills; Problem-solving skills; Root cause analysis", "qualificationsBasic" : "8+ years experience, Experience with Global teams, In-depth knowledge of anti-abuse solutions, Applied knowledge of securing public, private cloud and on-prem infrastructure, Ability to perform security reviews, audits, security operations, Hands-on experience on EDR, DLP, SIEM, zero trust solutions, endpoint security solutions, Privilege Access management (PAM), Firewalls, Ability to assess engineering designs and architecture diagrams for abuse risks, Ability to assess abuse risks within infrastructure, Experience designing and implementing anti-abuse solutions, Proficiency in using and applying AI tools for anomaly detection, insider threat detection and incident response, Proficient in scripting", "qualificationsPreferred" : "AI risk assessment and policy development, Understanding of AI threat modeling", "rawDescription" : "About the Role The Senior Security Engineer role is a highly technical position responsible for strengthening the organization’s cybersecurity posture through robust infrastructure, endpoint, and cyber security measures. The role requires strong expertise in Zero Trust implementation, cloud security (AWS, Azure, GCP), and technologies like IDS/IPS, SIEM, WAF, and DLP. The engineer will lead initiatives in vulnerability management, threat detection, incident response, and security automation, leveraging advanced tools. The engineer will work closely with cross-functional teams to integrate security by design, conduct risk assessments, and participate in red and blue team exercises. They’ll also support security awareness initiatives and contribute to internal audits, compliance efforts, and help in mentoring junior team members. Familiarity with AI risk assessments, emerging threat landscapes, and scripting for automation (Python, Bash, Ruby) is are integral aspect of the position. This is a highly visible strategic role requiring a blend of technical expertise and deep knowledge of the security landscape. Excellent communication, proactive problem-solving, and the ability to align technical solutions with business goals are key to excelling in this security engineering role. What You'll Do: Proven experience as a Security Engineer with a focus on deploying and managing security solutions in the field of Cyber Security, End-point Security, and Network Security. Experience with vulnerability management, security incident response, and security incident and event management (SIEM) systems. Monitor security alerts and events from various sources, including security information and event management (SIEM) systems, and do a thorough analysis of the security events. Utilize advanced threat intelligence to proactively identify and mitigate potential security risks. Develop and implement detection rules and signatures to enhance threat detection capabilities. Monitor threat landscape to identify new tactics, techniques and procedures employed by threat actors and update associated profiles. Manage intelligence requirements from internal stakeholders across operations, engineering, risk management and others, soliciting feedback to continually drive improvements. Develop, manage, optimize, and continuously improve processes to enhance the overall cyber threat intelligence function. Support Incident Response and Engineering teams during incidents and other threat monitoring activities providing intelligence context, remediation recommendations and expertise. Strong experience with Darktrace, CrowdStrike, Cloud proxy, DLP solutions, SOAR, and other cyber security products. Should have strong understanding and experience with implementation of Zero trust Strong hands-on experience on deploying and managing IDS/IPS, WAF. Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to PubMatic’s container, and Kubernetes infrastructure. Proven experience in conducting security assessments, vendor risk management including third-party vendors in a corporate environment. Sound understanding of network protocols, firewalls, and networking concepts. Able to understand the network architecture and contribute to bolstering the network security. Participate in security incident response efforts, contributing to minimizing the impact of security incidents and facilitating recovery. Stay updated on emerging threats and trends, applying this knowledge to enhance our security posture proactively. Collaborate with cross-functional teams to ensure that security practices are seamlessly integrated into the infrastructure and security is implemented by design. Set up security tooling and secure defaults to ensure software security best practices are adhered. Perform architecture analysis, threat modeling and technical design reviews of sensitive features and infrastructure. Triage and recommend solutions for security bugs from tools, third party assessments and external reported bugs. Participate in Red-Teaming, Blue Teaming exercises. Work with Partners to execute VAPT exercises, run security scans and collaborate to mitigate security issues and vulnerabilities. Should have experience and in-depth technical knowledge of security engineering, system and network security, authentication and security protocols, cryptography, and application security. Good understanding of Cloud Concepts – AWS, AZURE, GCP. Provide mentorship and guidance to junior engineers to enhance their understanding of infrastructure and cyber security. Should be able to conduct security awareness sessions and participate in various security campaigns e.g., Phishing campaigns, Hackathon, security bulletins. Strong analytical and problem-solving skills with the ability to assess and mitigate complex security risks. Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to PubMatic’s infrastructure. Create and contribute to PubMatic security policies, standards, procedures, guidelines. Drive and participate in different Audits (both Internal and External), RFI’s to support new business initiatives. Experience and enthusiasm for learning about new security products, features, and strategies. AI risk assessment and policy development. Understanding of AI threat modeling – identifying new risks introduced by AI and LLM components. Work with different vendors, partners to evaluate new security solutions, conduct POC to demonstrate POV. We'd Love for You to Have Must Have: 8+ years of experience in Cyber Security, Infrastructure security. Experience of working with Global teams. Excellent communication and interpersonal skills to collaborate effectively with teams and articulate security concepts to both technical and non-technical stakeholders. In-depth knowledge of anti-abuse solutions, cyber security, network security, and/or infrastructure security. Applied knowledge of securing public, private cloud and on-prem infrastructure. Ability to perform security reviews, audits, security operations. Hands-on experience on EDR, DLP, SIEM, zero trust solutions, endpoint security solutions, Privilege Access management (PAM), Firewalls. Ability to assess engineering designs and architecture diagrams for abuse risks. Ability to assess abuse risks within infrastructure. Experience designing and implementing anti-abuse solutions. Should have proficiency in using and applying AI tools for anomaly detection, insider threat detection and incident response. Proficient in scripting languages such as Python, Ruby, or Bash for automating security tasks. Experience in managing we don’t just value diversity, we promote and celebrate it. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. About PubMatic PubMatic is one of the world’s leading scaled digital advertising platforms, offering more transparent advertising solutions to publishers, media buyers, commerce companies and data owners, allowing them to harness the power and potential of the open internet to drive better business outcomes. Founded in 2006 with the vision that data-driven decisioning would be the future of digital advertising, we enable content creators to run a more profitable advertising business, which in turn allows them to invest back into the multi-screen and multi-format content that consumers demand.", "summaryDescription" : "Senior Security Engineer at PubMatic. Skills: Cybersecurity, Cloud security, Zero Trust, Incident response. Strengthen cybersecurity posture. Implement Zero Trust", "postedDate" : "2026-06-14T03:22:32.536", "createdAt" : "2026-06-14T03:22:32.536", "lastUpdated" : "2026-06-15T11:31:26.144", "ingestTimestamp" : "2026-06-14T03:22:32.536", "mongoId" : "6a2c6ae374d8ee00a090ee19", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Vulnerability management", "Threat detection", "Incident response", "Security automation", "Cyber threat intelligence", "Network security", "Endpoint security", "Infrastructure security", "System security", "Authentication protocols", "Security protocols", "Problem-solving", "Mentoring", "Cybersecurity", "Cloud security", "Zero Trust", "Risk assessments", "Vendor risk management", "Threat modeling", "Architecture analysis", "Agile", "Cyber Security", "AI risk", "AI threat modeling", "LLM components", "Darktrace", "CrowdStrike", "Cloud proxy", "SOAR", "EDR", "PAM", "Firewalls", "JIRA" ], "skillCount" : 33, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 915.8628, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c6ae374d8ee00a090ee1a", "title" : "Senior Security Engineer", "company" : "PubMatic", "industry" : "Cybersecurity", "salary" : { "min" : 2500000.0, "max" : 4000000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Engineer in Gurugram, India, adjusted for the technology industry and company size." }, "location" : "Gurugram", "locations" : [ "Gurugram", "Pune" ], "timestamp" : "2026-06-15T09:39:27.679", "fingerprint" : "01d7824291008376c7b6e17f1602e170a7f25cac0134b1861071c3308ed3b798", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://pubmatic.com/job/?gh_jid=5154663008", "externalId" : "5154663008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Gurugram", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "28.4646148,77.0299194" } ], "locationText" : "Gurugram, India", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Zero Trust, AWS, Azure, GCP, IDS/IPS, SIEM, WAF, DLP, Python, Bash, Ruby, Container security, Kubernetes security, Network protocols, Cryptography, Application security, Cloud Concepts", "professionalSkills" : [ "Risk assessments", "Vendor risk management", "Threat modeling", "Architecture analysis" ], "hardSkillsList" : [ "Vulnerability management", "Threat detection", "Incident response", "Security automation", "Cyber threat intelligence", "Network security", "Endpoint security", "Infrastructure security", "System security", "Network security", "Authentication protocols", "Security protocols" ], "softSkillsList" : [ "Problem-solving", "Mentoring" ], "hardSkills" : [ { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security automation", "level" : "intermediate" }, { "name" : "Cyber threat intelligence", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Endpoint security", "level" : "intermediate" }, { "name" : "Infrastructure security", "level" : "intermediate" }, { "name" : "System security", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Authentication protocols", "level" : "intermediate" }, { "name" : "Security protocols", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem-solving" }, { "name" : "Mentoring" } ], "majorSkills" : "Cybersecurity, Cloud security, Zero Trust, Incident response", "majorSkillsList" : [ "Cybersecurity", "Cloud security", "Zero Trust", "Incident response" ], "coreResponsibilities" : "Strengthen cybersecurity posture, Lead Zero Trust implementation, Manage cloud security, Lead vulnerability management initiatives, Lead threat detection initiatives, Lead incident response initiatives, Lead security automation initiatives, Integrate security by design, Conduct risk assessments, Participate in red team exercises, Participate in blue team exercises, Support security awareness initiatives, Contribute to internal audits, Contribute to compliance efforts, Mentor junior team members, Deploy and manage security solutions, Monitor security alerts and events, Analyze security events, Utilize threat intelligence, Mitigate security risks, Develop detection rules, Update threat profiles, Manage intelligence requirements, Improve cyber threat intelligence function, Support Incident Response teams, Provide intelligence context, Provide remediation recommendations, Deploy and manage IDS/IPS, Deploy and manage WAF, Mitigate security issues, Mitigate misconfigurations, Mitigate vulnerabilities, Conduct security assessments, Manage vendor risk, Bolster network security, Participate in security incident response, Minimize incident impact, Facilitate recovery, Enhance security posture, Integrate security practices, Set up security tooling, Secure defaults, Perform architecture analysis, Perform threat modeling, Perform technical design reviews, Triage security bugs, Recommend solutions for security bugs, Execute VAPT exercises, Run security scans, Collaborate to mitigate security issues, Collaborate to mitigate vulnerabilities, Provide mentorship and guidance, Conduct security awareness sessions, Participate in security campaigns, Create security policies, Contribute to security policies, Participate in Audits, Support RFI's, Evaluate new security solutions, Conduct POCs", "teamCollaboration" : "Cross-functional teams; Global teams; Operations teams; Engineering teams; Risk management teams; Incident Response teams", "domainKnowledge" : "Cyber Security; Infrastructure security; AI risk assessments; Emerging threat landscapes; Network protocols; Networking concepts; Security engineering; System security; Network security; Authentication protocols; Security protocols; Application security; Cloud Concepts; AI threat modeling; LLM components; Public cloud; Private cloud; On-prem infrastructure; Abuse risks", "domainList" : [ "cyber-security", "infrastructure-security", "ai-risk-assessments", "emerging-threat-landscapes", "network-protocols", "networking-concepts", "security-engineering", "system-security", "network-security", "authentication-protocols", "security-protocols", "application-security", "cloud-concepts", "ai-threat-modeling", "llm-components", "public-cloud", "private-cloud", "on-prem-infrastructure", "abuse-risks" ], "domainSpecificKnowledge" : [ "Cyber Security", "Infrastructure security", "AI risk assessments", "Emerging threat landscapes", "Network protocols", "Networking concepts", "Security engineering", "System security", "Network security", "Authentication protocols", "Security protocols", "Application security", "Cloud Concepts", "AI threat modeling", "LLM components", "Public cloud", "Private cloud", "On-prem infrastructure", "Abuse risks" ], "toolProficiency" : [ "Darktrace", "CrowdStrike", "Cloud proxy", "SOAR", "EDR", "PAM", "Firewalls" ], "communicationSkills" : "Articulate security concepts; Technical stakeholders", "continuousLearning" : "Learning new security products; Learning new security features; Learning new security strategies", "problemSolvingSkills" : "Analytical skills; Problem-solving skills; Assess complex security risks; Mitigate complex security risks", "qualificationsBasic" : "8+ years experience, Experience with Global teams, In-depth knowledge of anti-abuse solutions, Applied knowledge of securing public, private cloud and on-prem infrastructure, Ability to perform security reviews, audits, security operations, Hands-on experience on EDR, DLP, SIEM, zero trust solutions, endpoint security solutions, Privilege Access management (PAM), Firewalls, Ability to assess engineering designs and architecture diagrams for abuse risks, Ability to assess abuse risks within infrastructure, Experience designing and implementing anti-abuse solutions, Proficiency in using and applying AI tools for anomaly detection, insider threat detection and incident response, Proficient in scripting", "qualificationsPreferred" : "AI risk assessment and policy development, Understanding of AI threat modeling", "rawDescription" : "About the Role The Senior Security Engineer role is a highly technical position responsible for strengthening the organization’s cybersecurity posture through robust infrastructure, endpoint, and cyber security measures. The role requires strong expertise in Zero Trust implementation, cloud security (AWS, Azure, GCP), and technologies like IDS/IPS, SIEM, WAF, and DLP. The engineer will lead initiatives in vulnerability management, threat detection, incident response, and security automation, leveraging advanced tools. The engineer will work closely with cross-functional teams to integrate security by design, conduct risk assessments, and participate in red and blue team exercises. They’ll also support security awareness initiatives and contribute to internal audits, compliance efforts, and help in mentoring junior team members. Familiarity with AI risk assessments, emerging threat landscapes, and scripting for automation (Python, Bash, Ruby) is are integral aspect of the position. This is a highly visible strategic role requiring a blend of technical expertise and deep knowledge of the security landscape. Excellent communication, proactive problem-solving, and the ability to align technical solutions with business goals are key to excelling in this security engineering role. What You'll Do: Proven experience as a Security Engineer with a focus on deploying and managing security solutions in the field of Cyber Security, End-point Security, and Network Security. Experience with vulnerability management, security incident response, and security incident and event management (SIEM) systems. Monitor security alerts and events from various sources, including security information and event management (SIEM) systems, and do a thorough analysis of the security events. Utilize advanced threat intelligence to proactively identify and mitigate potential security risks. Develop and implement detection rules and signatures to enhance threat detection capabilities. Monitor threat landscape to identify new tactics, techniques and procedures employed by threat actors and update associated profiles. Manage intelligence requirements from internal stakeholders across operations, engineering, risk management and others, soliciting feedback to continually drive improvements. Develop, manage, optimize, and continuously improve processes to enhance the overall cyber threat intelligence function. Support Incident Response and Engineering teams during incidents and other threat monitoring activities providing intelligence context, remediation recommendations and expertise. Strong experience with Darktrace, CrowdStrike, Cloud proxy, DLP solutions, SOAR, and other cyber security products. Should have strong understanding and experience with implementation of Zero trust Strong hands-on experience on deploying and managing IDS/IPS, WAF. Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to PubMatic’s container, and Kubernetes infrastructure. Proven experience in conducting security assessments, vendor risk management including third-party vendors in a corporate environment. Sound understanding of network protocols, firewalls, and networking concepts. Able to understand the network architecture and contribute to bolstering the network security. Participate in security incident response efforts, contributing to minimizing the impact of security incidents and facilitating recovery. Stay updated on emerging threats and trends, applying this knowledge to enhance our security posture proactively. Collaborate with cross-functional teams to ensure that security practices are seamlessly integrated into the infrastructure and security is implemented by design. Set up security tooling and secure defaults to ensure software security best practices are adhered. Perform architecture analysis, threat modeling and technical design reviews of sensitive features and infrastructure. Triage and recommend solutions for security bugs from tools, third party assessments and external reported bugs. Participate in Red-Teaming, Blue Teaming exercises. Work with Partners to execute VAPT exercises, run security scans and collaborate to mitigate security issues and vulnerabilities. Should have experience and in-depth technical knowledge of security engineering, system and network security, authentication and security protocols, cryptography, and application security. Good understanding of Cloud Concepts – AWS, AZURE, GCP. Provide mentorship and guidance to junior engineers to enhance their understanding of infrastructure and cyber security. Should be able to conduct security awareness sessions and participate in various security campaigns e.g., Phishing campaigns, Hackathon, security bulletins. Strong analytical and problem-solving skills with the ability to assess and mitigate complex security risks. Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to PubMatic’s infrastructure. Create and contribute to PubMatic security policies, standards, procedures, guidelines. Drive and participate in different Audits (both Internal and External), RFI’s to support new business initiatives. Experience and enthusiasm for learning about new security products, features, and strategies. AI risk assessment and policy development. Understanding of AI threat modeling – identifying new risks introduced by AI and LLM components. Work with different vendors, partners to evaluate new security solutions, conduct POC to demonstrate POV. We'd Love for You to Have Must Have: 8+ years of experience in Cyber Security, Infrastructure security. Experience of working with Global teams. Excellent communication and interpersonal skills to collaborate effectively with teams and articulate security concepts to both technical and non-technical stakeholders. In-depth knowledge of anti-abuse solutions, cyber security, network security, and/or infrastructure security. Applied knowledge of securing public, private cloud and on-prem infrastructure. Ability to perform security reviews, audits, security operations. Hands-on experience on EDR, DLP, SIEM, zero trust solutions, endpoint security solutions, Privilege Access management (PAM), Firewalls. Ability to assess engineering designs and architecture diagrams for abuse risks. Ability to assess abuse risks within infrastructure. Experience designing and implementing anti-abuse solutions. Should have proficiency in using and applying AI tools for anomaly detection, insider threat detection and incident response. Proficient in scripting languages such as Python, Ruby, or Bash for automating security tasks. Experience in managing we don’t just value diversity, we promote and celebrate it. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. About PubMatic PubMatic is one of the world’s leading scaled digital advertising platforms, offering more transparent advertising solutions to publishers, media buyers, commerce companies and data owners, allowing them to harness the power and potential of the open internet to drive better business outcomes. Founded in 2006 with the vision that data-driven decisioning would be the future of digital advertising, we enable content creators to run a more profitable advertising business, which in turn allows them to invest back into the multi-screen and multi-format content that consumers demand.", "summaryDescription" : "Senior Security Engineer at PubMatic. Skills: Cybersecurity, Cloud security, Zero Trust, Incident response. Strengthen cybersecurity posture. Lead Zero Trust implementation", "postedDate" : "2026-06-14T08:55:22.103", "createdAt" : "2026-06-14T08:55:22.103", "lastUpdated" : "2026-06-15T09:39:27.679", "ingestTimestamp" : "2026-06-14T08:55:22.103", "mongoId" : "6a2c6ae374d8ee00a090ee1a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Vulnerability management", "Threat detection", "Incident response", "Security automation", "Cyber threat intelligence", "Network security", "Endpoint security", "Infrastructure security", "System security", "Authentication protocols", "Security protocols", "Problem-solving", "Mentoring", "Cybersecurity", "Cloud security", "Zero Trust", "Risk assessments", "Vendor risk management", "Threat modeling", "Architecture analysis", "Cyber Security", "AI risk assessments", "Emerging threat landscapes", "Network protocols", "Networking concepts", "Security engineering", "Application security", "Cloud Concepts", "AI threat modeling", "LLM components", "Public cloud", "Private cloud", "On-prem infrastructure", "Abuse risks", "Darktrace", "CrowdStrike", "Cloud proxy", "SOAR", "EDR", "PAM", "Firewalls" ], "skillCount" : 41, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 913.37646, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2ca53574d8ee00a09b5343", "title" : "Senior Cybersecurity Operations Specialist (Security Services)", "company" : "GovTech", "industry" : "Cybersecurity", "salary" : { "min" : 95000.0, "max" : 145000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Operations Specialist in Singapore, adjusted for the government industry and a large company size." }, "location" : "Cybersecurity", "locations" : [ "Cybersecurity" ], "certifications" : [ "OSCP", "OSWE", "CASE", "GWEB" ], "timestamp" : "2026-06-15T08:28:23.725", "fingerprint" : "5f8d58b9cb5e84d2ada39a619482194a1418c152a9ae83c0c8e9c26725275740", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://jobs.careers.gov.sg/jobs/greenhouse/4003983201?gh_jid=4003983201", "externalId" : "4003983201", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Jenkins, GitLab CI, GitHub Actions", "professionalSkills" : [ "Risk communication", "Pattern recognition", "Constructive feedback" ], "hardSkillsList" : [ "Vulnerability analysis", "Security testing" ], "softSkillsList" : [ "Influence", "Diplomacy", "Analytical mindset" ], "hardSkills" : [ { "name" : "Vulnerability analysis", "level" : "intermediate" }, { "name" : "Security testing", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Influence" }, { "name" : "Diplomacy" }, { "name" : "Analytical mindset" } ], "majorSkills" : "Cybersecurity Operations, MITRE ATT&CK, Cloud Security", "majorSkillsList" : [ "Cybersecurity Operations", "MITRE ATT&CK", "Cloud Security" ], "coreResponsibilities" : "Perform security testing, Identify code vulnerabilities, Provide constructive feedback", "teamCollaboration" : "Non-technical stakeholders; Agency-level performance", "domainKnowledge" : "MITRE ATT&CK framework; Government Commercial Cloud", "domainList" : [ "mitre-att-ck-framework", "government-commercial-cloud" ], "domainSpecificKnowledge" : [ "MITRE ATT&CK framework", "Government Commercial Cloud" ], "communicationSkills" : "Risk communication", "problemSolvingSkills" : "Pattern recognition; Vulnerability analysis", "outcomesObjectives" : "Improve agency performance", "qualificationsBasic" : "Deep understanding MITRE ATT&CK, Knowledge of common TTPs", "qualificationsPreferred" : "OSCP certification, OSWE certification, CASE certification, GWEB certification", "rawDescription" : "GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT deep understanding of the MITRE ATT&CK framework and common TTPs. Cloud & DevOps: Experience with Government Commercial Cloud (GCC) environments and practical knowledge of Jenkins, GitLab CI, or GitHub Actions. Certifications: Professional certifications such as OSCP, OSWE (Offensive Security Web Expert), CASE (Certified Application Security Engineer), or GWEB are highly desirable. Soft Skills Influence & Diplomacy: Ability to communicate complex technical risks to non-technical stakeholders (CIOs/Project Owners) and influence change without direct reporting lines. Analytical Mindset: Ability to spot patterns in \"bad\" testing jobs or recurring code vulnerabilities and provide constructive feedback to improve agency-level performance.", "summaryDescription" : "Senior Cybersecurity Operations Specialist (Security Services) at GovTech. Skills: Cybersecurity Operations, MITRE ATT&CK, Cloud Security. Perform security testing. Identify code vulnerabilities", "postedDate" : "2026-06-14T02:49:40.729", "createdAt" : "2026-06-14T02:49:40.729", "lastUpdated" : "2026-06-15T08:28:23.725", "ingestTimestamp" : "2026-06-14T02:49:40.729", "mongoId" : "6a2ca53574d8ee00a09b5343", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Vulnerability analysis", "Security testing", "Influence", "Diplomacy", "Analytical mindset", "Cybersecurity Operations", "MITRE ATT&CK", "Cloud Security", "Risk communication", "Pattern recognition", "Constructive feedback", "MITRE ATT&CK framework", "Government Commercial Cloud", "OSCP", "OSWE", "CASE", "GWEB" ], "skillCount" : 17, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 908.5582, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cd4ee74d8ee00a0a39b53", "title" : "OT Cybersecurity Engineer", "company" : "Managed Services", "industry" : "Information Technology and Services", "salary" : { "min" : 185000.0, "max" : 275000.0, "currency" : "SAR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level OT Cybersecurity Engineer in Riyadh, Saudi Arabia, adjusted for the technology industry and managed services company type." }, "location" : "Riyadh, Riyadh Province, Saudi Arabia", "locations" : [ "Riyadh, Riyadh Province, Saudi Arabia" ], "certifications" : [ "GICSP", "CISSP", "CISM", "IEC 62443 certification" ], "timestamp" : "2026-06-15T09:51:11.262", "fingerprint" : "71d2fc30eca7df4ae741418398df16dffd2be581d451e9c159f25970c9c93ef1", "source" : "workable", "language" : "en", "applyUrl" : "https://apply.workable.com/j/D38A732281/apply", "externalId" : "D38A732281", "industryFunction" : { }, "locationPoint" : "24.68773,46.72185", "structuredLocations" : [ { "city" : "Riyadh", "state" : "Riyadh Province", "country" : "Saudi Arabia", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "25.2663059,47.7788542" } ], "locationText" : "Riyadh, Riyadh Province, Saudi Arabia", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "SCADA, PLCs, DCS, Modbus, OPC, DNP3, Network segmentation, Firewalls, Intrusion detection, Secure remote access, Endpoint security, Monitoring tools, SIEM, SOC operations, Threat detection", "professionalSkills" : [ "Risk assessment", "Vulnerability assessment", "Security audits", "Incident response", "Stakeholder management" ], "hardSkillsList" : [ "Industrial network security", "Cybersecurity controls", "OT risk assessments", "Vulnerability assessments", "Security audits", "Network segmentation", "Secure remote access", "Incident response activities", "Security requirements", "Technical documentation" ], "softSkillsList" : [ "Analytical skills", "Problem-solving skills", "Communication skills", "Stakeholder management skills" ], "hardSkills" : [ { "name" : "Industrial network security", "level" : "intermediate" }, { "name" : "Cybersecurity controls", "level" : "intermediate" }, { "name" : "OT risk assessments", "level" : "intermediate" }, { "name" : "Vulnerability assessments", "level" : "intermediate" }, { "name" : "Security audits", "level" : "intermediate" }, { "name" : "Network segmentation", "level" : "intermediate" }, { "name" : "Secure remote access", "level" : "intermediate" }, { "name" : "Incident response activities", "level" : "intermediate" }, { "name" : "Security requirements", "level" : "intermediate" }, { "name" : "Technical documentation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Analytical skills" }, { "name" : "Problem-solving skills" }, { "name" : "Communication skills" }, { "name" : "Stakeholder management skills" } ], "majorSkills" : "OT Cybersecurity, ICS Security, Industrial Networks, Risk Assessment", "majorSkillsList" : [ "OT Cybersecurity", "ICS Security", "Industrial Networks", "Risk Assessment" ], "coreResponsibilities" : "Design cybersecurity controls for OT/ICS environments, Implement cybersecurity controls for OT/ICS environments, Maintain cybersecurity controls for OT/ICS environments, Monitor cybersecurity threats impacting OT systems, Assess cybersecurity threats impacting OT systems, Respond to cybersecurity threats impacting OT systems, Conduct OT risk assessments, Conduct vulnerability assessments, Conduct security audits, Implement network segmentation for OT networks, Implement firewalls for OT networks, Implement intrusion detection for OT networks, Implement secure remote access for OT networks, Support incident response activities for OT cybersecurity events, Collaborate with IT teams, Collaborate with engineering teams, Collaborate with operations teams, Align IT and OT security practices, Ensure compliance with standards and frameworks, Develop OT cybersecurity policies, Maintain OT cybersecurity policies, Develop OT cybersecurity procedures, Maintain OT cybersecurity procedures, Develop technical documentation, Maintain technical documentation, Support security requirements for new OT projects, Support security requirements for OT upgrades, Support security requirements for system integrations, Provide guidance on OT cybersecurity best practices, Provide awareness on OT cybersecurity best practices", "teamCollaboration" : "Cross-functional teams; IT and OT security; Engineering and operations teams", "domainKnowledge" : "Industrial Control Systems; SCADA systems; Critical infrastructure; Industrial networks; IEC 62443; NIST; ISO 27001; ISA/IEC; Manufacturing environments; Energy environments; Utilities environments; Safety-critical environments", "domainList" : [ "industrial-control-systems", "scada-systems", "critical-infrastructure", "industrial-networks", "iec-62443", "nist", "iso-27001", "isa-iec", "manufacturing-environments", "energy-environments", "utilities-environments", "safety-critical-environments" ], "domainSpecificKnowledge" : [ "Industrial Control Systems", "SCADA systems", "Critical infrastructure", "Industrial networks", "IEC 62443", "NIST", "ISO 27001", "ISA/IEC", "Manufacturing environments", "Energy environments", "Utilities environments", "Safety-critical environments" ], "toolProficiency" : [ "Firewalls", "IDS/IPS", "Endpoint security", "Monitoring tools", "SIEM", "SOC operations" ], "communicationSkills" : "Stakeholder communication; Technical documentation; Reporting", "documentationSkills" : "Technical documentation; Policies; Procedures", "continuousLearning" : "Professional development; Certification support", "problemSolvingSkills" : "Analytical skills; Problem-solving skills", "qualificationsBasic" : "Bachelor’s degree in Cybersecurity, Engineering, Computer Science, Information Technology, or related field, Minimum of 3 years of experience in OT/ICS cybersecurity, industrial network security, or similar role, Hands-on experience with SCADA, PLCs, DCS, and industrial communication protocols, Understanding of OT network architecture, segmentation, and secure remote access, Experience with firewalls, IDS/IPS, endpoint security, and monitoring tools in OT environments, Knowledge of OT cybersecurity standards and frameworks, Ability to conduct risk assessments, vulnerability assessments, and security reviews for industrial systems, Documentation, reporting, and stakeholder communication skills", "qualificationsPreferred" : "Professional certifications such as GICSP, CISSP, CISM, or IEC 62443 certification, Experience in critical infrastructure, manufacturing, energy, utilities, or safety-critical environments, Familiarity with SIEM, SOC operations, threat detection, and incident response in OT environments, Experience working with cross-functional teams across cybersecurity, engineering, IT, and operations", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "### We are seeking an **OT Cybersecurity Engineer** to protect and enhance the security of Operational Technology environments, including Industrial Control Systems (ICS), SCADA systems, and critical infrastructure. In this role, you will work closely with engineering, IT, and operations teams to design, implement, and maintain cybersecurity controls that ensure the availability, integrity, and safety of OT systems while supporting business and operational objectives. This position is ideal for someone with strong hands-on experience in OT/ICS security, industrial networks, risk assessment, and cybersecurity controls within regulated or mission-critical environments. ### Key Responsibilities • Design, implement, and maintain cybersecurity controls for OT/ICS environments. • Monitor, assess, and respond to cybersecurity threats impacting OT systems. • Conduct OT risk assessments, vulnerability assessments, and security audits. • Implement network segmentation, firewalls, intrusion detection, and secure remote access for OT networks. • Support incident response activities related to OT cybersecurity events. • Collaborate with IT, engineering, and operations teams to align IT and OT security practices. • Ensure compliance with relevant standards and frameworks such as IEC 62443, NIST, ISO 27001, and ISA/IEC. • Develop and maintain OT cybersecurity policies, procedures, and technical documentation. • Support security requirements for new OT projects, upgrades, and system integrations. • Provide guidance and awareness to stakeholders on OT cybersecurity best practices. **Requirements** • Bachelor’s degree in Cybersecurity, Engineering, Computer Science, Information Technology, or a related field. Equivalent practical experience may also be considered. • Minimum of 3 years of experience in OT/ICS cybersecurity, industrial network security, or a similar role. • Hands-on experience with SCADA, PLCs, DCS, and industrial communication protocols such as Modbus, OPC, and DNP3. • Strong understanding of OT network architecture, segmentation, and secure remote access. • Experience with firewalls, IDS/IPS, endpoint security, and monitoring tools in OT environments. • Knowledge of OT cybersecurity standards and frameworks, including IEC 62443, NIST, ISA/IEC, and ISO 27001. • Ability to conduct risk assessments, vulnerability assessments, and security reviews for industrial systems. • Strong documentation, reporting, and stakeholder communication skills. ### Preferred Qualifications • Professional certifications such as GICSP, CISSP, CISM, or IEC 62443 certification. • Experience in critical infrastructure, manufacturing, energy, utilities, or safety-critical environments. • Familiarity with SIEM, SOC operations, threat detection, and incident response in OT environments. • Experience working with cross-functional teams across cybersecurity, engineering, IT, and operations. ### Skills & Competencies • Strong analytical and problem-solving skills. • Ability to balance cybersecurity requirements with operational availability and safety. • Excellent communication and stakeholder management skills. • Ability to work independently and within cross-functional teams. • High attention to detail, accuracy, and documentation quality. • Practical mindset with the ability to support secure and reliable operations. **Benefits** • Competitive salary and benefits package. • Opportunity to work on mission-critical OT and cybersecurity projects. • Professional development and certification support. • Collaborative, technical, and safety-focused work environment. • Exposure to advanced cybersecurity practices across OT, ICS, and critical infrastructure environments.", "summaryDescription" : "OT Cybersecurity Engineer at Managed Services. Skills: OT Cybersecurity, ICS Security, Industrial Networks, Risk Assessment. Design cybersecurity controls for OT/ICS environments. Implement cybersecurity controls for OT/ICS environments", "postedDate" : "2026-06-11T00:00:00.000", "createdAt" : "2026-06-14T09:41:13.573", "lastUpdated" : "2026-06-15T09:51:11.262", "ingestTimestamp" : "2026-06-14T09:41:13.573", "mongoId" : "6a2cd4ee74d8ee00a0a39b53", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://apply.workable.com/j/D38A732281", "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ "Industrial network security", "Cybersecurity controls", "OT risk assessments", "Vulnerability assessments", "Security audits", "Network segmentation", "Secure remote access", "Incident response activities", "Security requirements", "Technical documentation", "Analytical skills", "Problem-solving skills", "Communication skills", "Stakeholder management skills", "OT Cybersecurity", "ICS Security", "Industrial Networks", "Risk Assessment", "Risk assessment", "Vulnerability assessment", "Incident response", "Stakeholder management", "Industrial Control Systems", "SCADA systems", "Critical infrastructure", "Industrial networks", "IEC 62443", "NIST", "ISO 27001", "ISA/IEC", "Manufacturing environments", "Energy environments", "Utilities environments", "Safety-critical environments", "GICSP", "CISSP", "CISM", "IEC 62443 certification", "Firewalls", "IDS/IPS", "Endpoint security", "Monitoring tools", "SIEM", "SOC operations" ], "skillCount" : 44, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "mid", "dataQualityScore" : 1.0, "_score" : 905.41364, "daysOld" : 4, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca18874d8ee00a09a5cb5", "title" : "Information / Cybersecurity Engineer (Clearance Required)", "company" : "Nexxis Solutions", "industry" : "Government", "salary" : { "min" : 115000.0, "max" : 155000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Information/Cybersecurity Engineer in Annapolis Junction, United States, adjusted for mid-seniority level and industry." }, "location" : "Annapolis Junction, MD", "locations" : [ "Annapolis Junction", "MD" ], "timestamp" : "2026-06-15T05:13:36.867", "fingerprint" : "598c9533a9e614d34ba5de3683468e491b6e899be4b78b18ab67f9d63bcca9ec", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://nexxis-solutions.breezy.hr/p/47e43887d893-information-cybersecurity-engineer-clearance-required", "externalId" : "47e43887d893", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Annapolis Junction", "state" : "Maryland", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.1189965,-76.7963417" } ], "locationText" : "Annapolis Junction, Maryland, United States", "employmentType" : "FULL_TIME", "professionalSkills" : [ "Risk assessment" ], "coreResponsibilities" : "Provide information security engineering, Provide system security engineering, Provide life cycle solutions, Provide system security testing, Provide risk assessment, Provide continuous monitoring, Provide Cybersecurity expertise", "specialRequirements" : "Clearance Required", "qualificationsBasic" : "Clearance Required", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Nexxis Solutions is supporting current and near-term efforts to provide information and system security engineering, life cycle solutions, system security testing, risk assessment, and continuous monitoring. We are looking for candidates to provide Cybersecurity expertise to systems and projects t", "summaryDescription" : "Information / Cybersecurity Engineer (Clearance Required) at Nexxis Solutions. Provide information security engineering. Provide system security engineering", "createdAt" : "2026-06-14T01:38:44.756", "lastUpdated" : "2026-06-15T05:13:36.867", "ingestTimestamp" : "2026-06-14T01:38:44.756", "mongoId" : "6a2ca18874d8ee00a09a5cb5", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115000, "salaryAnnualMax" : 155000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Risk assessment" ], "skillCount" : 1, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 898.29333, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c926c74d8ee00a0985bcd", "title" : "Cybersecurity Specialist", "company" : "New Era Technology", "industry" : "Consulting", "salary" : { "min" : 165000.0, "max" : 220000.0, "currency" : "AUD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Lead Cybersecurity Specialist in Melbourne, Australia, adjusted for the technology industry and company size." }, "location" : "Australia-New Zealand ", "locations" : [ "Australia-New Zealand" ], "certifications" : [ "Microsoft certification", "VMware certification", "Veeam certification", "Citrix certification" ], "timestamp" : "2026-06-15T05:08:16.844", "fingerprint" : "c1f573db3a3c008744fdf26d82a2848fb9860ac3ebb55e5241c7cfe1f282030f", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/neweratechau/jobs/8517622002", "externalId" : "8517622002", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Melbourne", "country" : "Australia", "continent" : "oc", "source" : "llm", "workMode" : "onsite", "geo" : "-37.8142454,144.9631732" }, { "city" : "Sydney", "country" : "Australia", "continent" : "oc", "source" : "llm", "workMode" : "onsite", "geo" : "-33.8698439,151.2082848" }, { "city" : "Newcastle", "country" : "Australia", "continent" : "oc", "source" : "llm", "workMode" : "onsite", "geo" : "-32.9192953,151.7795348" }, { "city" : "Brisbane", "country" : "Australia", "continent" : "oc", "source" : "llm", "workMode" : "onsite", "geo" : "-27.4689623,153.0235009" } ], "locationText" : "Melbourne, Australia; Sydney, Australia; Newcastle, Australia; Brisbane, Australia", "experienceMinYears" : 5, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "Cisco, FortiGate, Microsoft, Azure, VMware, Hyper-V, Backup solutions", "professionalSkills" : [ "Technical leadership", "Risk assessment", "Security investigations", "Solution design", "Client advising" ], "hardSkillsList" : [ "Incident response", "Vulnerability assessments", "Threat hunting", "Security audits", "Network troubleshooting" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Vulnerability assessments", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Security audits", "level" : "intermediate" }, { "name" : "Network troubleshooting", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Cybersecurity solutions, Technical advisory, Security architecture", "majorSkillsList" : [ "Cybersecurity solutions", "Technical advisory", "Security architecture" ], "coreResponsibilities" : "Engage clients, Understand business needs, Understand risks, Understand cybersecurity requirements, Lead solution workshops, Lead technical discussions, Lead client presentations, Design scalable solutions, Design secure solutions, Align solutions to frameworks, Support pre-sales, Scope solutions, Design proposals, Act as trusted advisor, Translate technical concepts, Develop architecture designs, Develop roadmaps, Develop security strategies, Champion cybersecurity awareness, Champion cybersecurity compliance, Champion cybersecurity best practices, Collaborate with engineering teams, Embed security into solutions, Lead incident response, Lead risk assessments, Lead security investigations, Provide technical leadership, Provide escalation support, Mentor engineers, Conduct vulnerability assessments, Conduct threat hunting, Conduct security audits, Maintain knowledge of threats, Maintain knowledge of tools, Maintain knowledge of best practices", "teamCollaboration" : "Solutions Group collaboration; Engineering teams collaboration", "domainKnowledge" : "NIST; ISO 27001; Essential Eight; LAN/WAN; TCP/IP", "domainList" : [ "nist", "iso-27001", "essential-eight", "lan-wan", "tcp-ip" ], "domainSpecificKnowledge" : [ "NIST", "ISO 27001", "Essential Eight", "LAN/WAN", "TCP/IP" ], "communicationSkills" : "Client presentations; Technical concepts translation", "documentationSkills" : "Architecture designs; Roadmaps; Security strategies", "continuousLearning" : "Continuous training; Knowledge sharing", "problemSolvingSkills" : "Problem-solving; Logical thinking; Lateral thinking", "qualificationsBasic" : "5+ years experience cybersecurity, Solution design experience, Pre-sales exposure, Client-facing experience, Solid infrastructure knowledge, Solid networking knowledge, Hands-on troubleshooting experience, Written communication skills, Verbal communication skills, Problem-solving skills, Stakeholder engagement skills, Team-oriented mindset, Ability to work under pressure, Excellent interpersonal skills, Logical thinking capacity, Lateral thinking capacity, Passion for cybersecurity, Continuous learning passion, Knowledge sharing passion", "qualificationsPreferred" : "Solutions Architecture experience, Pre-sales experience, Microsoft certification a plus, VMware certification a plus, Veeam certification a plus, Citrix certification a plus", "rawDescription" : "Join New Era Technology, where People First is at the heart of everything we do. With a global team of over 3,000 professionals, we're committed to creating a workplace where everyone feels valued, empowered, and inspired to grow. Our mission is to securely connect people, places, and information with end-to-end technology solutions at scale. At New Era, you'll join a team-oriented culture that prioritizes your personal and professional development. Work alongside industry-certified experts, access continuous training, and enjoy competitive benefits. Guided by our core attributes — putting people first, embracing continuous learning, and thriving through collaboration and inclusion — we nurture our people to deliver exceptional customer service. If you want to make an impact in a supportive, growth-oriented environment, New Era is the place for you. Apply today and help us shape the future of work—together What is the role This role is open for candidates based in Melbourne, Sydney, Newcastle, and Brisbane. The Cybersecurity Lead drives the design and delivery of cybersecurity solutions for New Era’s clients, acting as both a technical expert and trusted advisor. The role bridges technical execution and client outcomes, supports pre-sales by shaping solutions and communicating value, and champions cybersecurity awareness, guidance, and compliance alongside the Solutions Group. Other key responsibilities include but may not be limited to following: Engage with clients to understand business needs, risks, and cybersecurity requirements Lead solution workshops, technical discussions, and client presentations Design scalable, secure solutions aligned to frameworks (e. g. NIST, ISO 27001, Essential Eight) Support pre-sales, including scoping, solution design, and proposals Act as a trusted advisor, translating technical concepts into business outcomes Develop architecture designs, roadmaps, and security strategies Champion cybersecurity awareness, compliance, and best practices internally Collaborate with engineering teams to embed security into solutions Lead incident response, risk assessments, and security investigations Provide technical leadership, escalation support, and mentoring engineers Conduct vulnerability assessments, threat hunting, and security audits Maintain up-to-date knowledge of threats, tools, and best practices Who we are looking for Successful candidate must possess: Must have 5+ years’ experience in cybersecurity, including solution design or pre-sales exposure Strong client-facing experience with the ability to lead discussions and influence outcomes Experience working in a Cyber Security team Solid infrastructure and networking knowledge (LAN/WAN, TCP/IP), with hands-on troubleshooting experience Familiarity with key technologies such as Cisco/FortiGate, Microsoft/Azure, VMware/Hyper-V, backup solutions, and security frameworks Experience in incident response, remote support, and working within cybersecurity teams Strong written and verbal communication, problem-solving, and stakeholder engagement skills Team-oriented mindset and ability to work under pressure Excellent interpersonal, problem solving as well as logical and lateral thinking capacity Passion for cybersecurity, continuous learning, and knowledge sharing Relevant tertiary qualification and cybersecurity certifications (Microsoft, VMware, Veeam, Citrix a plus) Solutions Architecture, Pre-sales experience is desirable What we offer A friendly team environment with a strong technical support network Broad range of options for training and developing your IT skills Opportunity to work with the IT industry's latest technologies Internal career growth for high performers and IT super-stars Cost price on products from our suppliers Lunches and snacks provided in our main offices Comprehensive Employer Assistance Program Referral bonus New Era Technology, LLC., and its subsidiaries (“New Era” “we”, “us”, or “our”) in its operating regions worldwide are committed to respecting your privacy and recognize the need for appropriate protection and management of any Personal Data that you may provide us. In this, we are also committed to providing you with a positive experience on our websites and while using our products, services and solutions (“Solutions”). View our Privacy Policy here https://www.neweratech.com/us/privacy-policy/ We never ask candidates to pay any fees at any point in our hiring process. If you are ever asked to provide payment for training, certification, equipment, or any other purpose, it is not from our company. Only communications from our official company channels should be trusted. Please note our official email domain is @neweratech.com. If you suspect fraudulent activity, please contact us immediately at privacy@neweratech.com .", "summaryDescription" : "Cybersecurity Specialist at New Era Technology. Skills: Cybersecurity solutions, Technical advisory, Security architecture. Engage clients. Understand business needs", "postedDate" : "2026-06-14T09:10:21.227", "createdAt" : "2026-06-14T09:10:21.227", "lastUpdated" : "2026-06-15T05:08:16.844", "ingestTimestamp" : "2026-06-14T09:10:21.227", "mongoId" : "6a2c926c74d8ee00a0985bcd", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ "Incident response", "Vulnerability assessments", "Threat hunting", "Security audits", "Network troubleshooting", "Mentoring", "Cybersecurity solutions", "Technical advisory", "Security architecture", "Technical leadership", "Risk assessment", "Security investigations", "Solution design", "Client advising", "NIST", "ISO 27001", "Essential Eight", "LAN/WAN", "TCP/IP", "Microsoft certification", "VMware certification", "Veeam certification", "Citrix certification" ], "skillCount" : 23, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.8888889, "_score" : 886.5726, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c5dc974d8ee00a08de8b8", "title" : "Cybersecurity Analyst", "company" : "SkyePoint Decisions", "industry" : "IT service provider", "salary" : { "min" : 95000.0, "max" : 135000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Analyst in Arlington, United States, adjusted for industry and contract employment type." }, "location" : "1801 North Lynn St, Arlington, VA 22209", "locations" : [ "1801 North Lynn St", "Arlington", "VA 22209" ], "certifications" : [ "CISSP-ISSAP", "CISSP-ISSEP", "CISSP", "Security+ CE", "CySA+", "PPDA", "Agile IC", "SNOW App Dev" ], "timestamp" : "2026-06-15T00:47:32.599", "fingerprint" : "ac1a419fb03473c9fa3f06eee0d53bbb3539addd4fcad99688fd84023b604265", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/skyepointdecisionsinc/jobs/4273942009", "externalId" : "4273942009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "CONTRACT", "minimumEducation" : "Bachelor's", "technicalSkills" : "Windows Server, Active Directory, SQL, Oracle, Azure AD", "professionalSkills" : [ "Cybersecurity Architecture", "Critical Infrastructure", "Applications Development", "Business processes", "Enterprise application security", "Customer service excellence", "Business acumen" ], "hardSkillsList" : [ "FISMA compliance", "NIST SP 800-53", "CIS Benchmarks", "DISA STIGs", "Research plans execution" ], "hardSkills" : [ { "name" : "FISMA compliance", "level" : "intermediate" }, { "name" : "NIST SP 800-53", "level" : "intermediate" }, { "name" : "CIS Benchmarks", "level" : "intermediate" }, { "name" : "DISA STIGs", "level" : "intermediate" }, { "name" : "Research plans execution", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity, NIST SP 800-53, FISMA compliance", "majorSkillsList" : [ "Cybersecurity", "NIST SP 800-53", "FISMA compliance" ], "coreResponsibilities" : "Support Security Standards HS, Provide cyber and technology security experience, Enable innovative business processes, Enable effective business processes, Enable secure business processes, Develop research plans, Execute research plans, Work with Windows Server, Manage Active Directory, Work with enterprise application virtualization, Work with server virtualization", "projectManagementSkills" : [ "Agile IC" ], "domainKnowledge" : "Cybersecurity domains; Enterprise application security; CIS Benchmarks; DISA STIGs; Cloud identity services", "domainList" : [ "cybersecurity-domains", "enterprise-application-security", "cis-benchmarks", "disa-stigs", "cloud-identity-services" ], "domainSpecificKnowledge" : [ "Cybersecurity domains", "Enterprise application security", "CIS Benchmarks", "DISA STIGs", "Cloud identity services" ], "documentationSkills" : "Technical writing skills", "continuousLearning" : "Certification incentive program", "specialRequirements" : "U. S. citizenship required, Onsite 5 days a week", "qualificationsBasic" : "4 years experience in lieu of degree, Active Secret clearance, Ability to obtain Top Secret clearance", "qualificationsPreferred" : "Process automation experience, AI tools and automation platforms, Virtualized IT systems development, Enterprise mobile device deployments, Red Hat Enterprise Linux systems, Networking technologies expertise", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U. S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results. This is a contingent position based upon customer approval. SkyePoint Decisions is seeking a Cybersecurity Analyst to support the Diplomatic Security Cyber Mission (DSCM) program providing leading cyber and technology security experience to enable innovative, effective, and secure business processes. This position is located in Arlington, VA and will be onsite 5 days a week. No hybrid/telework allowed. Responsibilities: Support the Security Standards HS and an additional 4 years may be considered in lieu of bachelors degree. Must possess, or obtain prior to start date, at least one of the following certifications (continued certification is required as a condition of employment): CISSP-ISSAP, CISSP-ISSEP, CISSP, Security+ CE, CySA+, PPDA, Agile IC, SNOW App Dev. Experience and expertise across multiple cybersecurity domains, including FISMA compliance, NIST SP 800‑53 Revision 5 security controls, enterprise application security configuration, CIS Benchmarks, and DISA STIGs. Experience developing and executing research plans. Experience working with Windows Server in an enterprise environment. Experience managing Active Directory in a multi-domain environment. Experience with enterprise application or server virtualization. Demonstrated customer service excellence and strong business acumen. U. S. citizenship required. Active Secret clearance with the ability to obtain a final Top Secret security clearance. Preferred Qualifications: Experience with process automation - strongly desired. Demonstrated use of AI tools and automation platforms to enhance workflows, analysis, and documentation efficiency. Strong technical writing skills. Experience engineering or maintaining database infrastructure (SQL, Oracle). Experience with Active Directory Federation Services (ADFS), Azure AD, or cloud identity services. Experience developing or managing virtualized IT systems. Networking technologies expertise. Experience configuring or administering enterprise mobile device deployments. Experience working with Red Hat Enterprise Linux systems in an enterprise environment. Compensation: Salary Range: $90,000-$103,000 The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package. Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations. In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched. What We Can Offer You: At SkyePoint, we go B.I. G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day. Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs. Flexible Work Environment SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives. SkyePoint Decisions is a participating E-Verify Employer. U. S. Citizenship is required for most positions. Equal Opportunity Employer/Veterans/Disabled. CCPA Disclosure Notice Here", "summaryDescription" : "Cybersecurity Analyst at SkyePoint Decisions. Skills: Cybersecurity, NIST SP 800-53, FISMA compliance. Support Security Standards HS. Provide cyber and technology security experience", "postedDate" : "2026-06-12T21:39:27.187", "createdAt" : "2026-06-12T21:39:27.187", "lastUpdated" : "2026-06-15T00:47:32.599", "ingestTimestamp" : "2026-06-12T21:39:27.187", "mongoId" : "6a2c5dc974d8ee00a08de8b8", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 95000, "salaryAnnualMax" : 135000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "FISMA compliance", "NIST SP 800-53", "CIS Benchmarks", "DISA STIGs", "Research plans execution", "Cybersecurity", "Cybersecurity Architecture", "Critical Infrastructure", "Applications Development", "Business processes", "Enterprise application security", "Customer service excellence", "Business acumen", "Agile IC", "Cybersecurity domains", "Cloud identity services", "CISSP-ISSAP", "CISSP-ISSEP", "CISSP", "Security+ CE", "CySA+", "PPDA", "SNOW App Dev" ], "skillCount" : 23, "jobCategory" : "other", "jobSubcategory" : "billable-", "dataQualityScore" : 0.8888889, "_score" : 885.86255, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "IT service provider" }, { "id" : "6a2c7a4074d8ee00a0944f12", "title" : "Network Security Engineer", "company" : "GuidePoint Security", "industry" : "Cybersecurity", "salary" : { "min" : 115000.0, "max" : 155000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Network Security Engineer in the Washington D.C. metro area, adjusted for the cybersecurity industry and full-time employment." }, "location" : "Federal", "locations" : [ "Federal" ], "certifications" : [ "DOD 8570 IAT Level II", "Security+" ], "timestamp" : "2026-06-15T10:21:19.947", "fingerprint" : "b71774dca8735a1b20540cd1a57e21dd4ba7e294d6ce2e399a043bc67e3fd897", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://boards.greenhouse.io/guidepointsecurity/jobs/6020492004?gh_jid=6020492004", "externalId" : "6020492004", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "onsite" } ], "locationText" : "United States", "technicalSkills" : "Network security, Firewalls, Intrusion prevention systems, Full packet capture, Mail gateways, Malware defense, TLS inspection, Juniper SRX, Palo Alto Strata, F5 Load Balancer, Cisco FTD/ASA, Gigamon, FireEye, RSA Netwitness", "professionalSkills" : [ "Network security architecture", "Cybersecurity technologies" ], "hardSkillsList" : [ "Network security", "Cyber defense capabilities" ], "hardSkills" : [ { "name" : "Network security", "level" : "intermediate" }, { "name" : "Cyber defense capabilities", "level" : "intermediate" } ], "majorSkills" : "Network security, Cybersecurity technologies", "majorSkillsList" : [ "Network security", "Cybersecurity technologies" ], "coreResponsibilities" : "Support design, build, sustainment, Integrate network based cyber defense, Interact with network security products, Provide support integrating requirements, Maintain production network security solutions, Resolve network connectivity issues, Integrate, operate, sustain Cybersecurity technologies, Plan and implement policy changes, Administer configuration changes, Work special projects, Investigate security incidents, Document security incidents, Implement corrective measures, Brief senior leadership", "teamCollaboration" : "Team of skilled professionals; Support fellow stakeholders", "domainKnowledge" : "Network security; Cybersecurity", "domainList" : [ "network-security", "cybersecurity" ], "domainSpecificKnowledge" : [ "Network security", "Cybersecurity" ], "toolProficiency" : [ "Juniper SRX", "Palo Alto Strata", "F5 Load Balancer", "Cisco FTD/ASA", "Gigamon", "FireEye", "RSA Netwitness" ], "communicationSkills" : "Brief senior leadership", "documentationSkills" : "Document security incidents", "problemSolvingSkills" : "Resolve network connectivity issues", "specialRequirements" : "Active TS/SCI clearance, Poly preferred, 100% onsite", "qualificationsBasic" : "Active TS/SCI clearance, Polygraph preferred, Related technical experience, DOD 8570 IAT Level II certification, Security+ minimum to start", "qualificationsPreferred" : "F5 Load Balancer ASM a plus", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U. S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk. About GuidePoint Security GuidePoint Security is a leading cybersecurity solutions and services firm enabling federal government organizations to make smarter security decisions that minimize risk. With more than 800 vetted technology vendor partnerships and deep practitioner expertise across every major cybersecurity domain, GuidePoint serves more than half of the U. S. Government’s cabinet-level agencies across Civilian, DoD, and Intelligence Community segments, as well as Federal System Integrators and major defense prime contractors. We are growing our federal presales engineering team and looking for technically exceptional engineers who thrive at the intersection of federal mission and cybersecurity technology. We are seeking a Network Security Engineer who will be part of a team of skilled Cybersecurity professionals that support the design, build, and sustainment of network based cyber defense capabilities within the organization. Network Security Engineers interact daily with a wide variety of industry leading network security products including, but not limited to, firewalls, Intrusion prevention systems, full packet capture solutions, mail gateways, advanced malware defense systems, and TLS inspection solutions. Network Security Engineers provide support to fellow stakeholders when integrating new Cybersecurity requirements into the enterprise and maintain all production network security solutions that are servicing the organization. When required, Network Security Engineers support fellow stakeholders in resolving network connectivity issues. MUST possess Active TS/SCI clearance (Poly preferred) is required prior to starting. 100% onsite – Multiple government site throughout the D. C. metro area. Key Responsibilities Participate on a team of skilled network security engineers responsible for the ingratiation, operations, and sustainment of a suite of enterprise class Cybersecurity technologies Perform the planning and implementing policy changes on next generation firewalls Assists in the analyses and design of a worldwide network security architecture Administer configuration changes on enterprise load balancers that include enterprise TLS break/inspect Work focused special projects both independently and within a group Participate in the investigation and documentation of security related incidents Implement corrective measures in response to emerging network security threats Brief senior contract leadership and government stakeholders on the status of the enterprise network security posture Requirements An active Top Secret with SCI clearance (Polygraph preferred) is required prior to consideration for this role. Related technical experience in network security technologies such as Juniper SRX, Palo Alto Strata, F5 Load Balancer (ASM is a plus), Cisco FTD/ASA, Gigamon, FireEye, and RSA Netwitness DOD 8570 IAT Level II certification. (security+ minimum to start) We use Greenhouse Software as our applicant tracking system and Zoom Scheduler for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application. Why GuidePoint? GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,200 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 6,200 customers. Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity. This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation. Some added perks…. Remote workforce primarily (U. S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions) Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options) Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans 12 corporate holidays and a Flexible Time Off (FTO) program Healthy mobile phone and home internet allowance Eligibility for retirement plan after 2 months at open enrollment Pet Benefit Option", "summaryDescription" : "Network Security Engineer at GuidePoint Security. Skills: Network security, Cybersecurity technologies. Support design, build, sustainment. Integrate network based cyber defense", "postedDate" : "2026-06-13T21:09:42.843", "createdAt" : "2026-06-13T21:09:42.843", "lastUpdated" : "2026-06-15T10:21:19.947", "ingestTimestamp" : "2026-06-13T21:09:42.843", "mongoId" : "6a2c7a4074d8ee00a0944f12", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115000, "salaryAnnualMax" : 155000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Network security", "Cyber defense capabilities", "Cybersecurity technologies", "Network security architecture", "Cybersecurity", "DOD 8570 IAT Level II", "Security+", "Juniper SRX", "Palo Alto Strata", "F5 Load Balancer", "Cisco FTD/ASA", "Gigamon", "FireEye", "RSA Netwitness" ], "skillCount" : 14, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 877.7283, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c7eb474d8ee00a0953505", "title" : "Data Security Engineer", "company" : "Clarity Innovations", "industry" : "Government", "salary" : { "min" : 165000.0, "max" : 225000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Lead Data Security Engineer in Herndon, United States, adjusted for government industry and senior experience level." }, "location" : "Herndon, VA OR Columbia, MD", "locations" : [ "Herndon", "VA OR Columbia", "MD" ], "timestamp" : "2026-06-15T11:40:44.076", "fingerprint" : "4ae0b396b319388f2ffc1890f08730637f8e52af3ddf82ee8f408c96c63bd230", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/clarityinnovates/jobs/5163581007", "externalId" : "5163581007", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" }, { "city" : "Columbia", "state" : "Maryland", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.1938429,-76.8646092" } ], "locationText" : "Herndon, Virginia, United States; Columbia, Maryland, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Data security, Cybersecurity, DevSecOps", "professionalSkills" : [ "Risk analysis", "Security assessments" ], "hardSkillsList" : [ "Vulnerability management", "Remediation", "CVE analysis", "Risk prioritization", "Security hardening", "POA&Ms development", "POA&Ms management", "Data protection", "Encryption", "Access controls", "Secure system design" ], "hardSkills" : [ { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Remediation", "level" : "intermediate" }, { "name" : "CVE analysis", "level" : "intermediate" }, { "name" : "Risk prioritization", "level" : "intermediate" }, { "name" : "Security hardening", "level" : "intermediate" }, { "name" : "POA&Ms development", "level" : "intermediate" }, { "name" : "POA&Ms management", "level" : "intermediate" }, { "name" : "Data protection", "level" : "intermediate" }, { "name" : "Encryption", "level" : "intermediate" }, { "name" : "Access controls", "level" : "intermediate" }, { "name" : "Secure system design", "level" : "intermediate" } ], "majorSkills" : "Vulnerability management, POA&Ms management, Cybersecurity frameworks", "majorSkillsList" : [ "Vulnerability management", "POA&Ms management", "Cybersecurity frameworks" ], "coreResponsibilities" : "Identify security vulnerabilities, Assess security vulnerabilities, Prioritize security vulnerabilities, Coordinate remediation of vulnerabilities, Develop POA&Ms, Maintain POA&Ms, Track POA&Ms, Monitor compliance, Conduct security assessments, Conduct vulnerability scans, Conduct risk analyses, Implement security controls, Implement corrective actions, Review system architectures, Review system configurations, Support ATO activities, Support accreditation activities, Support continuous monitoring, Investigate security incidents, Document security findings, Recommend corrective actions, Maintain security documentation, Maintain audit artifacts, Maintain compliance evidence", "teamCollaboration" : "Engineering teams; Operations teams; Development teams", "domainKnowledge" : "Information Warfare; Cyber Operations; Operational Security; Data Structuring; RMF; NIST 800-53; STIGs; Zero Trust principles", "domainList" : [ "information-warfare", "cyber-operations", "operational-security", "data-structuring", "rmf", "nist-800-53", "stigs", "zero-trust-principles" ], "domainSpecificKnowledge" : [ "Information Warfare", "Cyber Operations", "Operational Security", "Data Structuring", "RMF", "NIST 800-53", "STIGs", "Zero Trust principles" ], "communicationSkills" : "Documenting risks; Documenting findings; Documenting compliance", "documentationSkills" : "Security documentation; Audit artifacts; Compliance evidence", "problemSolvingSkills" : "Risk analysis", "qualificationsBasic" : "Vulnerability management experience, Remediation processes experience, CVE analysis knowledge, Risk prioritization knowledge, Security hardening knowledge, POA&Ms development experience, POA&Ms management experience, RMF familiarity, NIST 800-53 familiarity, STIGs familiarity, Zero Trust principles familiarity, Data protection understanding, Encryption understanding, Access controls understanding, Secure system design understanding, Written communication skills", "qualificationsPreferred" : "5-8 years cyberse", "workSiteFlexibility" : "Flexible", "rawDescription" : "Clarity Innovations is a trusted national security partner, dedicated to safeguarding our nation’s interests and delivering innovative solutions that empower the Intelligence Community (IC) and Department of Defense (DoD) to transform data into actionable intelligence, ensuring mission success in an evolving world. Our mission-first software and data engineering platform modernizes data operations, utilizing advanced workflows, CI/CD, and secure DevSecOps practices. We focus on challenges in Information Warfare, Cyber Operations, Operational Security, and Data Structuring, enabling end-to-end solutions that drive operational impact. We are committed to delivering cutting-edge tools and capabilities that address the most complex national security challenges, empowering our partners to stay ahead of emerging threats and ensuring the success of their critical missions. At Clarity, we are people-focused and set on being a destination employer for top talent, offering an environment where innovation thrives, careers grow, and individuals are valued. Join us as we continue to lead innovation and tackle the most pressing challenges in national security. Data Security Engineer The Data Security Engineer is responsible for ensuring the confidentiality, integrity, and availability of enterprise data assets through the implementation of security controls, vulnerability management, and compliance activities. This role proactively identifies and mitigates cybersecurity risks, manages remediation efforts for identified vulnerabilities and CVEs, develops and tracks Plans of Action and Milestones (POA&Ms), and ensures adherence to organizational and regulatory security policies. Key Responsibilities: Identify, assess, prioritize, and coordinate remediation of security vulnerabilities, including CVEs affecting infrastructure, applications, and data platforms. Develop, maintain, and track POA&Ms to document security findings, remediation plans, risk acceptance decisions, and closure activities. Monitor compliance with cybersecurity frameworks, security policies, and regulatory requirements. Conduct security assessments, vulnerability scans, and risk analyses to identify potential threats to data systems. Collaborate with engineering, operations, and development teams to implement security controls and corrective actions. Review system architectures and configurations to ensure data protection requirements are met. Support Authority to Operate (ATO), accreditation, and continuous monitoring activities. Investigate security incidents, document findings, and recommend corrective actions to prevent recurrence. Maintain security documentation, audit artifacts, and compliance evidence. Required Skills: Experience with vulnerability management and remediation processes. Knowledge of CVE analysis, risk prioritization, and security hardening practices. Experience developing and managing POA&Ms. Familiarity with cybersecurity frameworks such as RMF, NIST 800-53, STIGs, and Zero Trust principles. Understanding of data protection, encryption, access controls, and secure system design. Strong written communication skills for documenting risks, findings, and compliance activities. Preferred Experience: 5–8 years of cybersecurity, information assurance, or security engineering experience. 2–3 years supporting vulnerability management, RMF, ATO, POA&M, or compliance activities. Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field (or equivalent experience). We are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.", "summaryDescription" : "Data Security Engineer at Clarity Innovations. Skills: Vulnerability management, POA&Ms management, Cybersecurity frameworks. Identify security vulnerabilities. Assess security vulnerabilities", "postedDate" : "2026-06-14T04:03:04.991", "createdAt" : "2026-06-14T04:03:04.991", "lastUpdated" : "2026-06-15T11:40:44.076", "ingestTimestamp" : "2026-06-14T04:03:04.991", "mongoId" : "6a2c7eb474d8ee00a0953505", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 165000, "salaryAnnualMax" : 225000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Vulnerability management", "Remediation", "CVE analysis", "Risk prioritization", "Security hardening", "POA&Ms development", "POA&Ms management", "Data protection", "Encryption", "Access controls", "Secure system design", "Cybersecurity frameworks", "Risk analysis", "Security assessments", "Information Warfare", "Cyber Operations", "Operational Security", "Data Structuring", "RMF", "NIST 800-53", "STIGs", "Zero Trust principles" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 1.0, "_score" : 875.2267, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "69f8950e4c40e2acd1fa4a70", "title" : "Cybersecurity Analyst", "company" : "Texas Workforce Commission", "industry" : "Government", "salary" : { "max" : 6982.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "826970", "locations" : [ "826970", "
Austin:1117 Trinity St (320TX-4002)
1117 Trinity St
Austin, 78701-1919

" ], "timestamp" : "2026-06-15T09:42:30.940", "fingerprint" : "79d57d066c1e9f1688bb80c121b3a094589b0455ca67250a444d6c53761b762b", "source" : "taleo", "language" : "en", "applyUrl" : "https://aa270.taleo.net/careersection/ex/jobdetail.ftl?job=34795", "externalId" : "34795", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Cybersecurity analysis, Information security analysis, Digital forensics, Vulnerability scanning, Forensic analysis, Data recovery, System monitoring", "professionalSkills" : [ "Risk assessment", "Independent judgment" ], "hardSkillsList" : [ "Account permissions review", "Security violation review", "Incident detection", "Incident analysis", "Incident prevention", "Network vulnerability scans", "Application vulnerability scans", "System monitoring", "Cybersecurity alert analysis" ], "softSkillsList" : [ "Critical thinking" ], "hardSkills" : [ { "name" : "Account permissions review", "level" : "intermediate" }, { "name" : "Security violation review", "level" : "intermediate" }, { "name" : "Incident detection", "level" : "intermediate" }, { "name" : "Incident analysis", "level" : "intermediate" }, { "name" : "Incident prevention", "level" : "intermediate" }, { "name" : "Network vulnerability scans", "level" : "intermediate" }, { "name" : "Application vulnerability scans", "level" : "intermediate" }, { "name" : "System monitoring", "level" : "intermediate" }, { "name" : "Cybersecurity alert analysis", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Critical thinking" } ], "majorSkills" : "Cybersecurity analysis, Information security, Digital forensics", "majorSkillsList" : [ "Cybersecurity analysis", "Information security", "Digital forensics" ], "coreResponsibilities" : "Perform technical risk assessments, Review account permissions, Review security violations, Conduct cybersecurity incident detection, Conduct cybersecurity incident analysis, Conduct cybersecurity incident prevention, Perform vulnerability scans, Identify network weaknesses, Identify application weaknesses, Execute forensic analysis, Recover data using tools, Monitor systems, Monitor procedures, Protect data systems, Analyze cybersecurity alerts", "domainKnowledge" : "Information security; Cybersecurity", "domainList" : [ "information-security", "cybersecurity" ], "domainSpecificKnowledge" : [ "Information security", "Cybersecurity" ], "toolProficiency" : [ "Assessment tools" ], "continuousLearning" : "Training opportunities; Development opportunities", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Must be Texas resident, Willing to relocate to Texas", "qualificationsBasic" : "Four years cybersecurity analysis experience, Four years information security analysis experience, Four years digital forensics experience, Relevant academic credits may apply, Acceptance into TWC Internship, Acceptance into TWC Apprenticeship", "qualificationsPreferred" : "High interest in cybersecurity", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "WHO WE ARE: Texas Workforce Commission connects people with careers across the state. While we are based in Austin on the north lawn of the Texas State Capitol, we have offices statewide. We're a Family Friendly Certified Workplace with great work-life balance, competitive salaries, extensive opportunities for training and development, and fantastic benefits. This position is located at 1117 Trinity Street, Austin, Texas in the Chief Info Security Officer department. TWC is not considering applications from individuals who require sponsorship for an employment visa, including those currently on student or postgraduate visas. You must be a Texas resident to work for the Texas Workforce Commission or willing to relocate to Texas. WHO YOU ARE: A person with technical experience and experience or a high interest in cybersecurity WHAT YOU WILL DO: The Cybersecurity Analyst I performs moderately complex (journey-level) information security and cybersecurity analysis work. Works under general supervision, with moderate latitude for the use of initiative and independent judgment. YOU WILL BE TRUSTED TO: -Perform technical risk assessments and reviews of account permissions and security violations. -Conduct cybersecurity incident detection, analysis, and prevention. -Perform vulnerability scans of networks and applications to identify weaknesses. -Execute forensic analysis and recovery of data using assessment tools. -Monitor systems and procedures to protect data systems from unauthorized access. -Analyze cybersecurity alerts from tools, network devices, and information systems. - Perform other duties as assigned. YOU QUALIFY WITH: -Four years of full-time experience in cybersecurity analysis, information security analysis, or digital forensics. -Relevant academic credits may be applied toward experience qualifications for this position. -Acceptance into a TWC Internship or TWC Apprenticeship will satisfy the minimum qualifications. YOU ARE A GREAT FIT WITH: You are ready to learn and use critical thinking skills to succeed. YOU GAIN: - A Family Friendly Certified Workplace. - Competitive salary: $6,982.50/month - Defined Retirement Benefit Plan - Optional 401(k) and 457 accounts - Medical Insurance - Paid time off, including time for vacation, sick and family care leave - Additional benefits for active employees can be found at https://www.ers.texas.gov/Active-Employees/Health-Benefits. VETERANS: Use your military skills to qualify for this position or other jobs! Go to www.texasskillstowork.com to translate your military work experience and training courses into civilian job terms, qualifications, and skill sets. Also, you can compare this position to military occupations (MOS) at the Texas State Auditor's Office by pasting this link into your browser: https://hr.sao.texas.gov/Compensation/MilitaryCrosswalk/MOSC_InformationTechnology.pdf HOW TO APPLY: To be considered, please complete a State of Texas Application for Employment and apply online at www.workintexas.com or on Taleo ( Job Search ). TWC is not considering applications from individuals who require sponsorship for an employment visa, including those currently on student or postgraduate visas. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire. A position utilizing this classification will be designated as security sensitive according to the Texas Labor Code, Section 301.042. United States-Texas-Austin", "summaryDescription" : "Cybersecurity Analyst at Texas Workforce Commission. Skills: Cybersecurity analysis, Information security, Digital forensics. Perform technical risk assessments. Review account permissions", "createdAt" : "2026-06-14T07:31:02.477", "lastUpdated" : "2026-06-15T09:42:30.940", "ingestTimestamp" : "2026-06-14T07:31:02.477", "mongoId" : "69f8950e4c40e2acd1fa4a70", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMax" : 83784, "hasSalary" : false, "allSkills" : [ "Account permissions review", "Security violation review", "Incident detection", "Incident analysis", "Incident prevention", "Network vulnerability scans", "Application vulnerability scans", "System monitoring", "Cybersecurity alert analysis", "Critical thinking", "Cybersecurity analysis", "Information security", "Digital forensics", "Risk assessment", "Independent judgment", "Cybersecurity", "Assessment tools" ], "skillCount" : 17, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 869.36664, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cafe274d8ee00a09d81e7", "title" : "Technical Recruiter, Cyber Security (Contract)", "company" : "TRM Labs", "industry" : "G&A", "salary" : { "min" : 100000.0, "max" : 150000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Technical Recruiter in North America, adjusted for the cybersecurity industry and contract employment type." }, "location" : "North America", "locations" : [ "North America", "United States", "Washington DC", "Washington", "Los Angeles", "San Francisco, CA", "New York City" ], "timestamp" : "2026-06-15T08:16:22.804", "fingerprint" : "62429656d35b031e54b29246f0ed058a56965c74e444a7fb8fb6e6cd9181ec8a", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/trm-labs/45166a6e-6337-4132-9429-930cde7fd499/application", "externalId" : "45166a6e-6337-4132-9429-930cde7fd499", "industryFunction" : { }, "structuredLocations" : [ { "continent" : "na", "workMode" : "onsite" } ], "locationText" : "", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Talent acquisition", "Market research", "Sourcing strategies", "Recruiting processes", "Hiring managers" ], "hardSkillsList" : [ "Sourcing tools", "Personalized outreach", "Recruiting metrics", "Conversion rates", "Market data" ], "softSkillsList" : [ "Flexibility", "Persistence" ], "hardSkills" : [ { "name" : "Sourcing tools", "level" : "intermediate" }, { "name" : "Personalized outreach", "level" : "intermediate" }, { "name" : "Recruiting metrics", "level" : "intermediate" }, { "name" : "Conversion rates", "level" : "intermediate" }, { "name" : "Market data", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Flexibility" }, { "name" : "Persistence" } ], "majorSkills" : "Technical recruiting, Cyber security, Talent acquisition", "majorSkillsList" : [ "Technical recruiting", "Cyber security", "Talent acquisition" ], "coreResponsibilities" : "Build recruiting engine, Identify talent, Recruit talent, Manage recruiting lifecycle, Create candidate experiences, Develop sourcing strategies, Hire diverse team, Improve recruiting processes, Increase hiring efficiency, Schedule intake meeting, Open position in ATS, Post job description, Design interview process, Configure interview plan, Conduct recruiter screens, Sync with hiring team, Analyze interview data, Provide recommendations, Refine search, Optimize search", "teamCollaboration" : "Hiring managers; Hiring team; Talent team; Cross time zones; PST business hours", "projectManagementSkills" : [ "Recruiting lifecycle" ], "domainKnowledge" : "Cyber security", "domainList" : [ "cyber-security" ], "domainSpecificKnowledge" : [ "Cyber security" ], "toolProficiency" : [ "ATS" ], "communicationSkills" : "Provide updates; Manage expectations", "documentationSkills" : "Thorough documentation", "problemSolvingSkills" : "Analyze data; Identify drivers; Refine strategies", "outcomesObjectives" : "Velocity of talent acquisition; Quality of talent acquisition", "qualificationsBasic" : "5+ years recruiting experience, 2+ years tech recruiting, Hiring hard-to-fill roles, Analyze recruiting metrics, Familiarize with new roles, Exceptional communication skills, Build trust with hiring managers, Results-oriented mindset", "qualificationsPreferred" : "Experience in US tech startups", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "BUILD A SAFER WORLD. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM's platforms enable investigators to trace illicit activity, build cases, and construct operating pictures of threat networks. Leading agencies and businesses worldwide rely on TRM to make the world safer and more secure. Our ability to identify, hire, and retain exceptional talent is foundational to our mission. The Talent team at TRM is made up of seasoned professionals who have experience hiring world-class Engineering, Data Science, GTM, and People teams for the most notable startups in Silicon Valley. As a Technical Recruiter, you will help drive TRM's ability to attract, engage, and hire top talent at TRM. Your success will be measured by the velocity and quality of TRM's talent acquisition. The impact you’ll have here: - Build a high-velocity recruiting engine that efficiently identifies and recruits the best talent to TRM. - Manage the full recruiting lifecycle across a variety of roles and teams. - Create positive candidate experiences throughout every touchpoint. - Develop creative and impactful sourcing strategies that will help us find and hire a diverse and exceptional team. - Continuously improve our recruiting processes and increase the efficiency of our hiring. What we’re looking for: - 5+ years of recruiting experience in high-growth US-headquartered tech startups - 2+ years of tech recruiting experience within cyber security companies. - Proven experience in hiring hard-to-fill roles, with expertise in using sourcing tools, conducting market research, and developing personalized outreach strategies. - Ability to analyze and interpret recruiting metrics, conversion rates, and market data, using these insights to refine strategies and provide actionable feedback to hiring managers. - Quickly familiarize oneself with new roles and requirements, showcasing flexibility, curiosity, and a high tolerance for change in a fast-paced, high-growth environment. - Exceptional communication skills to work effectively with hiring managers, provide regular updates, and manage expectations. Skilled at building trust and acting as a strategic partner in the hiring process. - Strong persistence and a results-oriented mindset to handle challenges, follow up on passive leads, and meet ambitious outreach targets. About the Team: - Our talent team is fully remote, embracing async communication and collaboration through Slack channels, thorough documentation, and proactive updates to keep work moving forward smoothly across time zones. - We’re committed to structured alignment, holding weekly hiring syncs for each role, weekly team sourcing syncs, and bi-weekly team meetings to ensure everyone is on the same page and to solve challenges collectively. - Driven by a dedication to our craft, we continuously refine our best practices and data quality to deliver an exceptional experience for both internal stakeholders and candidates, supported by precise, reliable reporting. - As a globally distributed team, we operate across various time zones, yet most of us overlap for collaboration and meetings between 7am-12pm PST, bringing flexibility and resilience to our work routines. - All team members, regardless of location, maintain at least a 4-hour overlap with PST business hours to enable real-time collaboration and drive solutions effectively across the team. Learn about TRM Speed in this position: - Within 72 hours of receiving a position, you schedule the intake meeting, open the position in the ATS, post the description, design the interview process, configure the interview plan. - Within week of opening a position, you have conducted 5-10 Recruiter Screens and have conducted the first sync with the Hiring Team for calibration. - Two weeks after the initial interviews, you analyze the data to identify what is and isn’t driving pass rates and conversions. You share your insights and recommendations with the hiring team to refine and optimize the search, and you continue to monitor and adjust the approach until the position is filled. The following represents the estimated range of compensation for this role: - Individual pay is determined by skills, qualifications, experience, and location. The compensation details listed in this posting reflect the US base salary only - The estimated base salary range for this role is $150,000 - $180,000. - Additionally, this role may be eligible to participate in TRM’s equity plan. LIFE AT TRM We are building a safer world. That promise shows up in how we work every day. TRM moves quickly. We are a high velocity, high ownership team that expects clarity, follow-through, and impact. People who thrive here are energized by hard problems, experimentation, and continuous feedback. If something takes months elsewhere, it will ship here in days. Our work sits at the intersection of AI, national security, and fighting crime. The problems are complex, the stakes are real, and the environment evolves quickly. The pace and intensity of the work reflect the importance of the mission. As a result, the way we operate requires a high level of ownership, adaptability, collaboration, and creative problem-solving. At TRM, you should expect: - Priorities and targets to change quickly as we experiment and iterate - Work that often requires operating with a high degree of ambiguity - A high level of personal ownership and accountability - Close collaboration across teams and functions - Frequent, high-touch communication - Creative problem solving and out-of-the-box thinking - A pace that rewards urgency, adaptability, and outcomes This environment is energizing for people who enjoy building, solving hard problems, and making progress in situations that are not always fully defined. It also requires comfort navigating ambiguity, adjusting course as new information emerges, and maintaining focus and positivity in a fast-moving and intense environment. We also recognize that this style of operating is not for everyone. If you are primarily optimizing for predictability or a consistently balanced workload, we encourage you to use the interview process to pressure test whether this environment is truly the right fit. We want teammates who thrive here, not just survive here. At the same time, many people find this work deeply rewarding. If you are excited by meaningful problems, motivated by ambitious goals, and energized by working alongside mission-driven colleagues, there is a good chance you will find TRM to be an exceptional place to grow and contribute. Learn more: Interviewing at TRM: How We Hire and What Success Looks Like https://www.trmlabs.com/resources/blog/interviewing-at-trm-how-we-hire-and-what-success-looks-like AI FLUENCY AT TRM AI fluency is a baseline expectation at TRM. We believe AI meaningfully changes how top performers operate. We expect every team member to use AI to accelerate and reimagine their craft, not just automate surface tasks. At TRM, AI fluency means you are among the top 10 percent of operators in your function in how you apply AI to: - Accelerate repeatable workflows - Structure and solve problems - Improve output quality - Increase speed and leverage You will be evaluated on applied AI fluency during the interview process. LEADERSHIP PRINCIPLES We hire and grow against three leadership principles. They’re the standards for how we operate, treat each other, and make decisions. - Impact-Oriented Trailblazer: We put customers first and move with speed, focus, and adaptability. We treat every plan like an experiment – test, ship, measure, and iterate quickly. - Master Craftsperson: We care deeply about our craft. We balance speed with high standards, own outcomes end‑to‑end, and invest in getting better everyday. - Inspiring Colleague: We add clarity and energy, not noise. We bring humility, candor, and a one‑team mindset — giving and receiving feedback to make the team stronger. JOIN OUR MISSION At TRM we care deeply about our craft. We are looking for individuals who want their work to matter, who experiment with speed and rigor, and who take pride in building a safer world for billions of people. If you’re excited by TRM’s mission but don’t check every box, we encourage you to apply — we hire for slope, judgment, and the will to learn fast. TRM is a Series C company with $220M in total funding, backed by Blockchain Capital, Goldman Sachs, Bessemer, Y Combinator, Thoma Bravo, and others. Headquartered in San Francisco, TRM operates as a distributed-first company with hubs in Los Angeles, San Francisco, New York, Washington D.C., London, and Singapore. PRIVACY POLICY AND ADDITIONAL INFORMATION By submitting your application, you agree to allow TRM Labs to process your personal information in accordance with our Privacy Policy https://www.trmlabs.com/policies/privacy-policy. We collect the information you provide (such as your resume, work history, and contact details) solely for the purpose of evaluating your candidacy for current and future roles at TRM. Because our hiring cycles for certain positions may span 24 to 36 months, we retain your personal information for up to 36 months from the date of your application. After that period, your data is deleted unless a different retention period is required or permitted by law. If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with applicable data protection laws, you have the right to access, correct, or request deletion of your personal data at any time before that period ends. To exercise any of these rights, contact us at privacy@trmlabs.com. To notify TRM Labs that you believe this job posting is non-compliant, please submit a report through this form https://docs.google.com/forms/d/e/1FAIpQLSc6e8jRCl2cQwgIzXLpIGQXtwvMQh__TcokvO2toAAkT44A6Q/viewform?usp=dialog. No response will be provided to inquiries unrelated to job posting compliance. The use of AI tools of any kind (including but not limited to notetakers, interview assistants, and real-time coaching tools such as Otter.ai, Fireflies, Fathom, Cluey, or similar) during TRM interviews is not permitted without prior approval from TRM. TRM uses its own internal tools for note-taking to ensure a consistent and confidential experience for all candidates. We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this form https://docs.google.com/forms/d/e/1FAIpQLSevmAzPxWOYm_7kMHb9lEJlX3tpdBeHvvvNWjsI_6xhUfnXjw/viewform?usp=dialog. RECRUITMENT AGENCIES TRM Labs does not accept unsolicited agency resumes. Please do not forward resumes to TRM employees. TRM Labs is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company without a signed agreement. LEARN MORE: COMPANY VALUES https://www.trmlabs.com/culture | INTERVIEWING https://www.trmlabs.com/interviewing | FAQS https://www.trmlabs.com/faq", "summaryDescription" : "Technical Recruiter, Cyber Security (Contract) at TRM Labs. Skills: Technical recruiting, Cyber security, Talent acquisition. Build recruiting engine. Identify talent", "createdAt" : "2026-06-13T21:34:14.277", "lastUpdated" : "2026-06-15T08:16:22.804", "ingestTimestamp" : "2026-06-13T21:34:14.277", "mongoId" : "6a2cafe274d8ee00a09d81e7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 100000, "salaryAnnualMax" : 150000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Sourcing tools", "Personalized outreach", "Recruiting metrics", "Conversion rates", "Market data", "Flexibility", "Persistence", "Technical recruiting", "Cyber security", "Talent acquisition", "Market research", "Sourcing strategies", "Recruiting processes", "Hiring managers", "Recruiting lifecycle", "ATS" ], "skillCount" : 16, "jobCategory" : "operations", "jobSubcategory" : "hr", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 862.9439, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2a8fb174d8ee00a0689ba6", "title" : "Director, Cybersecurity", "company" : "Radiant", "industry" : "Engineering", "salary" : { "min" : 186000.0, "max" : 258300.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "El Segundo, CA", "locations" : [ "El Segundo, CA" ], "certifications" : [ "CPP", "PSP", "PCI" ], "timestamp" : "2026-06-14T22:22:14.326", "fingerprint" : "78274d3d0e968936c46044b76fe8cc1a2b0d943a5d956b0e7a2ae514b489f946", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/radiant-industries/8ea841fd-4a73-4632-bb2c-56a65689082d/application", "externalId" : "8ea841fd-4a73-4632-bb2c-56a65689082d", "industryFunction" : { }, "structuredLocations" : [ { "city" : "El Segundo", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.9170280,-118.4156337" } ], "locationText" : "El Segundo, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 7, "experienceLevel" : "Director", "technicalSkills" : "Application security", "professionalSkills" : [ "Risk management framework", "Security policies", "Security procedures", "Regulatory requirements" ], "hardSkillsList" : [ "Cybersecurity audits", "Control testing", "Information protection" ], "softSkillsList" : [ "Creativity", "Innovation" ], "hardSkills" : [ { "name" : "Cybersecurity audits", "level" : "intermediate" }, { "name" : "Control testing", "level" : "intermediate" }, { "name" : "Information protection", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Creativity" }, { "name" : "Innovation" } ], "majorSkills" : "Cybersecurity strategy, Security controls, Information protection", "majorSkillsList" : [ "Cybersecurity strategy", "Security controls", "Information protection" ], "coreResponsibilities" : "Lead development and implementation of security strategies, Lead development and implementation of security policies, Manage budget for security infrastructure, Manage resources for security infrastructure, Lead cybersecurity audits, Lead cybersecurity assessments, Lead control testing, Review regulatory requirements, Provide solutions meeting regulatory intent, Provide rationale meeting regulatory intent, Review operational requirements, Review system specification documents, Ensure security requirements are addressed, Ensure security requirements are incorporated, Educate stakeholders on protecting material, Educate stakeholders on protecting information, Serve as liaison with regulators, Serve as liaison with auditors, Serve as liaison with government stakeholders", "teamCollaboration" : "Partnering with engineering; Partnering with IT", "domainKnowledge" : "Nuclear industry security; Defense industry security; Export control regulations; ICS/OT cybersecurity; Nuclear security regulations; COMSEC; Insider threat programs; Physical-cyber integration", "domainList" : [ "nuclear-industry-security", "defense-industry-security", "export-control-regulations", "ics-ot-cybersecurity", "nuclear-security-regulations", "comsec", "insider-threat-programs", "physical-cyber-integration" ], "domainSpecificKnowledge" : [ "Nuclear industry security", "Defense industry security", "Export control regulations", "ICS/OT cybersecurity", "Nuclear security regulations", "COMSEC", "Insider threat programs", "Physical-cyber integration" ], "communicationSkills" : "Educate stakeholders", "innovationCreativity" : "Drive innovation; Advocate for controls; Advocate for access solutions", "problemSolvingSkills" : "Provide solutions", "specialRequirements" : "Work extended hours, Work weekends, 100% onsite, Export controls compliance", "qualificationsBasic" : "7+ years cybersecurity experience, Defense or high-assurance environment experience, Understanding of application security, Performing assessments utilizing risk management framework, Proven track record of developing and implementing security policies and procedures, Knowledge of relevant federal and state regulations, Bachelor's degree in Computer Science, Engineering, or related field", "qualificationsPreferred" : "Direct experience with nuclear security regulations, Experience interfacing with executive leadership, Experience interfacing with external regulators, Familiarity with ICS/OT cybersecurity, Prior work with COMSEC, Prior work with insider threat programs, Prior work with physical-cyber integration, Previous experience working with defense contracts, Understanding of relevant export control regulations", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "ABOUT RADIANT Radiant is an El Segundo, CA-based startup building the world’s first mass-produced, portable nuclear microreactors. The company’s first reactor, Kaleidos, is a 1-megawatt, fail-safe microreactor that can be transported anywhere power is needed and run for up to 5 years without refueling. Portable nuclear power with rapid-deploy capability can replace similar-sized diesel generators and provide critical asset support for hospitals, data centers, remote sites, and military bases. Radiant’s unique, practical approach to nuclear development leverages modern software engineering to rapidly deliver safe, factory-built microreactors that use existing, well-qualified materials. Founded in 2020, Radiant is on track to test its first reactor at the Idaho National Laboratory this summer, with initial customer deliveries beginning in 2028. About the Role Radiant is seeking a Director, Cybersecurity to implement the controls and protection necessary for safeguarding our sensitive information and technology. You will be responsible for cybersecurity, partnering with our engineering and IT departments to implement security controls, as well as developing and managing information protection programs. You will drive innovation across the nuclear industry by advocating for controls and access solutions that have not been previously deployed. A successful candidate will leveragetheir experience on DoD and IC programs and bring those same designs to the nuclear space. Creativity and a passion for challenging the status quo are a must. Responsibilities & Duties: - Lead the development and implementation of comprehensive security strategies and policies. - Manage budget and resources for security infrastructure. - Lead cybersecurity audits, assessments, and control testing. - Review regulatory requirements and provide solutions and rationale that meet the intent of those requirements with modern tools. - Review operational requirements and system specification documents to ensure applicable security requirements are addressed and incorporated into security processes. - Educate stakeholders on modern and efficient means for protecting material and information. - Serve as our liaison with regulators, auditors, and government stakeholders. Required Qualifications & Skills: - 7+ years of experience in cybersecurity, preferably in a defense or high-assurance environment. - Strong understanding of application security and performing assessments utilizing a risk management framework. - Proven track record of developing and implementing security policies and procedures. - Knowledge of relevant federal and state regulations affecting nuclear and defense industry security. - Bachelor's degree in Computer Science, Engineering, or a related field. Desired Qualifications & Skills: - Direct experience with nuclear security regulations (NRC 10 CFR 73). - Experience interfacing with executive leadership and external regulators. - Familiarity with ICS/OT cybersecurity in energy or defense environments. - Prior work with COMSEC, insider threat programs, or physical-cyber integration. - Professional certifications (e.g., CPP, PSP, PCI from ASIS International). - Previous experience working with defense contracts and understanding of relevant export control regulations (Part 810, Pat 110, EAR, ITAR). Additional Requirements: - Must be willing to work extended hours and weekends as necessary to accomplish our mission. - Must work 100% onsite at El Segundo HQ. BENEFITS AND PERKS - Stock: Substantial incentive stock plan for all full-time employees. - Medical: 100% up to base silver level plan for employee + 50% dependents, offers up to Platinum plans. - One Medical: Sponsored memberships for employees and their dependents. - Vision: 100% top tier plan coverage + 50% for dependents. - Dental: 100% top tier plan coverage, orthodontia extra, 50% for dependents. - Voluntary life, accident, hospital, critical illness, commuter and FSA/HSA are offered as employee contributed benefits. - 8-weeks of paid parental leave for all parents. Additional paid pregnancy leave for CA employees. - Daily catered lunch. Free snacks and drinks. - Flexible PTO policy. Remote workday allocation. - Company and team-bonding events, happy hours and in-person camaraderie. - Beautiful El Segundo headquarters close to the Pacific Ocean. Total Compensation and Benefits Radiant compensates people for impact and invests in those who continue to raise the bar. Radiant’s new hire compensation package includes base salary, substantial equity grants, and comprehensive health benefits. Total compensation and level are determined through a rigorous evaluation of interview performance, experience, education, and qualifications, and are designed to support continued growth as scope, responsibility, and impact expand at Radiant. The best of today’s advanced reactor builders don’t wait for job postings. They join the winning team. If that’s you, contact us directly for immediate opportunities: recruiting@radiantnuclear.com. We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law. Unfortunately, we are unable to provide visa sponsorship at this time. This position involves access to technology that is subject to U.S. export controls. Any job offer made will be contingent upon the applicant’s capacity to serve in compliance with U.S. export controls.", "summaryDescription" : "Director, Cybersecurity at Radiant. Skills: Cybersecurity strategy, Security controls, Information protection. Lead development and implementation of security strategies. Lead development and implementation of security policies", "postedDate" : "2026-06-11T17:28:57.136", "createdAt" : "2026-06-11T17:28:57.136", "lastUpdated" : "2026-06-14T22:22:14.326", "ingestTimestamp" : "2026-06-11T17:28:57.136", "mongoId" : "6a2a8fb174d8ee00a0689ba6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 186000, "salaryAnnualMax" : 258300, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Cybersecurity audits", "Control testing", "Information protection", "Creativity", "Innovation", "Cybersecurity strategy", "Security controls", "Risk management framework", "Security policies", "Security procedures", "Regulatory requirements", "Nuclear industry security", "Defense industry security", "Export control regulations", "ICS/OT cybersecurity", "Nuclear security regulations", "COMSEC", "Insider threat programs", "Physical-cyber integration", "CPP", "PSP", "PCI" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "security", "dataQualityScore" : 1.0, "_score" : 862.7629, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Nuclear" }, { "id" : "6a2ca5f474d8ee00a09b8c7e", "title" : "IT & Cybersecurity Manager", "company" : "Nooks", "industry" : "Cybersecurity", "salary" : { "min" : 155000.0, "max" : 175000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Colorado Springs, Colorado, United States", "locations" : [ "Colorado Springs", "Colorado", "United States" ], "certifications" : [ "DoD 8570/8140 IAM Level III" ], "timestamp" : "2026-06-15T05:01:45.302", "fingerprint" : "34802dfd1ce43275651ae8eaeb82788c2f3ca85e89600eee1ff97cc21e5c0c3c", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/nooks/jobs/4274144009", "externalId" : "4274144009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Colorado Springs", "state" : "Colorado", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8339578,-104.8253480" } ], "locationText" : "Colorado Springs, Colorado, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 10, "experienceLevel" : "Manager", "technicalSkills" : "Networking, Cloud infrastructure, IAM, Endpoint security", "professionalSkills" : [ "Risk assessment", "Budget management", "Vendor management", "Technology lifecycle management" ], "hardSkillsList" : [ "Incident response planning", "Configuration management", "Risk assessment", "Remediation" ], "softSkillsList" : [ "Leadership", "Service-first mindset" ], "hardSkills" : [ { "name" : "Incident response planning", "level" : "intermediate" }, { "name" : "Configuration management", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Remediation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Service-first mindset" } ], "majorSkills" : "IT operations, Cybersecurity operations, Security protocols, Incident response", "majorSkillsList" : [ "IT operations", "Cybersecurity operations", "Security protocols", "Incident response" ], "coreResponsibilities" : "Foster technical growth, Develop leadership capabilities, Establish security protocols, Enforce security protocols, Develop incident response plans, Oversee hardware lifecycle, Oversee software lifecycle, Oversee networking assets lifecycle, Ensure maximum efficiency, Ensure minimal downtime, Ensure rigorous configuration management, Manage third-party service providers, Oversee IT/Cyber departmental budget, Prioritize security investments, Prioritize tech investments, Lead local response efforts for outages, Lead local response efforts for security events, Maintain clear communication channels, Maintain disciplined communication channels, Provide direct technical assistance, Troubleshoot complex issues, Support peak project demands, Support system migrations", "teamCollaboration" : "Corporate policy alignment; Federal frameworks alignment; Corporate leadership communication", "projectManagementSkills" : [ "Configuration management" ], "domainKnowledge" : "Classified Infrastructure-as-a-Service; NIST; DAAPM; JSIG; ISO 27001; SOC2; ITIL", "domainList" : [ "classified-infrastructure-as-a-service", "nist", "daapm", "jsig", "iso-27001", "soc2", "itil" ], "domainSpecificKnowledge" : [ "Classified Infrastructure-as-a-Service", "NIST", "DAAPM", "JSIG", "ISO 27001", "SOC2", "ITIL" ], "toolProficiency" : [ "ITSM tools", "Security monitoring tools" ], "communicationSkills" : "Clear communication; Disciplined communication", "innovationCreativity" : "Innovation", "problemSolvingSkills" : "Troubleshooting; Incident response", "specialRequirements" : "US citizen, Active Top Secret/SCI clearance, Maintain Top Secret/SCI eligibility", "outcomesObjectives" : "Ensure maximum efficiency; Ensure minimal downtime; Ensure rigorous configuration management", "qualificationsBasic" : "US citizen, Active Top Secret/SCI clearance, Maintain Top Secret/SCI eligibility, Bachelor's degree or higher, Active DoD 8570/8140 IAM Level III certification, 10+ years of experience in IT/Cyber operations, 3 years in leadership or management capacity, Implement and enforce enterprise IT and security policies, Experience leading IT and cybersecurity teams, Align operational and security priorities, Working knowledge of compliance frameworks, Broad technical understanding of networking, Broad technical understanding of cloud infrastructure, Broad technical understanding of IAM, Broad technical understanding of endpoint security, Risk assessment and remediation experience, Experience managing budgets, Experience managing vendors, Experience managing technology lifecycles, Proficiency with ITSM tools, Proficiency with security monitoring tools", "qualificationsPreferred" : "Maintain eligibility up to the Top Secret/SCI level within 45 days of hire", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "ABOUT NOOKS Are you seeking an exciting and unique opportunity to grow and support our national security? As a startup, we are offering a limited-time opportunity to be an equity owner in a pioneering new industry. Nooks is pioneering Classified Infrastructure-as-a-Service (CIaaS) to provide government and industry partners with the fastest, most efficient access to classified infrastructure. We are building a nationwide network of accredited classified spaces and systems, ensuring that the best technologies equip our nation’s warfighters. At Nooks, we value innovation, collaboration, and a service-first mindset. ABOUT THE ROLE: As the IT foster technical growth and leadership capabilities within your team. Establish and enforce local security protocols and incident response plans in alignment with corporate policy and federal frameworks (NIST, DAAPM, JSIG, ISO 27001, or SOC2). Oversee the lifecycle of site hardware, software, and networking assets to ensure maximum efficiency, minimal downtime, and rigorous configuration management. Manage third-party service providers and oversee the IT/Cyber departmental budget, prioritizing high-ROI security and tech investments. Lead local response efforts for outages or security events while maintaining clear, disciplined communication channels with corporate leadership. Transition seamlessly from strategy to execution, providing direct technical assistance during complex troubleshooting, peak project demands, or system migrations. THE SKILLSET: You must be a US citizen and have an active Top Secret/SCI security clearance. Candidates must be capable of maintaining eligibility up to the Top Secret/SCI level within 45 days of hire. Bachelor’s degree or higher in Information Technology, Cybersecurity, Computer Science, or a related technical field. Active DoD 8570/8140 IAM Level III certification (CISSP, CISM, or GSLC). 10+ years of experience in IT/Cyber operations with at least 3 years in a leadership or management capacity. Proven ability to implement and enforce enterprise IT and security policies in regulated or classified environments. Experience leading IT and cybersecurity teams and aligning operational and security priorities. Working knowledge of compliance frameworks such as NIST, ISO 27001, SOC 2, and ITIL. Broad technical understanding of networking, cloud infrastructure, IAM, and endpoint security. Strong risk assessment and remediation experience aligned with enterprise risk tolerance. Experience managing budgets, vendors, and technology lifecycles within corporate governance models. Proficiency with ITSM and security monitoring tools to report operational health and compliance metrics. Salary Range for all departments Salary Range $155,000—$175,000 USD", "summaryDescription" : "IT & Cybersecurity Manager at Nooks. Skills: IT operations, Cybersecurity operations, Security protocols, Incident response. Foster technical growth. Develop leadership capabilities", "postedDate" : "2026-06-14T04:46:16.678", "createdAt" : "2026-06-14T04:46:16.678", "lastUpdated" : "2026-06-15T05:01:45.302", "ingestTimestamp" : "2026-06-14T04:46:16.678", "mongoId" : "6a2ca5f474d8ee00a09b8c7e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 155000, "salaryAnnualMax" : 175000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Incident response planning", "Configuration management", "Risk assessment", "Remediation", "Leadership", "Service-first mindset", "IT operations", "Cybersecurity operations", "Security protocols", "Incident response", "Budget management", "Vendor management", "Technology lifecycle management", "Classified Infrastructure-as-a-Service", "NIST", "DAAPM", "JSIG", "ISO 27001", "SOC2", "ITIL", "DoD 8570/8140 IAM Level III", "ITSM tools", "Security monitoring tools" ], "skillCount" : 23, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "_score" : 859.4957, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2a72cf74d8ee00a064d7ef", "title" : "Cybersecurity Engineer", "industry" : "Safety & Compliance", "salary" : { "min" : 115000.0, "max" : 145000.0, "currency" : "CHF", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Engineer in Zurich, Switzerland, adjusted for the technology industry and senior experience level." }, "location" : "Zurich", "locations" : [ "Zurich" ], "certifications" : [ "CISSP", "CISM", "CISA", "CRISC", "ISO 27001 Lead Implementer", "ISO 27001 Auditor", "CCSK", "CCSP" ], "timestamp" : "2026-06-15T00:34:33.748", "fingerprint" : "7bbd473bc743556a7aed5293190fad707ab65a6fa0a0461c19c81d1ee05a3d7c", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/gravisrobotics/2cf7de56-dedf-45cc-8e9f-4a10607b4e04/apply", "externalId" : "2cf7de56-dedf-45cc-8e9f-4a10607b4e04", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Zurich", "country" : "Switzerland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "47.3744489,8.5410422" } ], "locationText" : "Zurich, Switzerland", "employmentType" : "FULL_TIME", "experienceMinYears" : 3, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "C, C++, Python, Rust, SAST, DAST, ISO 27001, ISO 27002, ISO 270036, NIST CSF, NIST SP 800-161, NIST SSDF, CIS Controls, OWASP", "professionalSkills" : [ "Regulatory compliance", "Risk analysis", "Control design", "Product security", "Supply chain security", "GRC", "Threat modelling", "Secure coding", "Code reviews", "Secure development", "Vulnerability handling", "Vulnerability triage", "Security hardening", "Secure engineering", "Conformity assessments", "Technical documentation", "CE marking", "Penetration testing", "Vulnerability assessments" ], "hardSkillsList" : [ "Risk analysis", "Control design", "Secure coding", "Code reviews", "Threat modelling", "Vulnerability handling", "Vulnerability triage", "Security hardening", "Conformity assessments", "Technical documentation", "CE marking" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Risk analysis", "level" : "intermediate" }, { "name" : "Control design", "level" : "intermediate" }, { "name" : "Secure coding", "level" : "intermediate" }, { "name" : "Code reviews", "level" : "intermediate" }, { "name" : "Threat modelling", "level" : "intermediate" }, { "name" : "Vulnerability handling", "level" : "intermediate" }, { "name" : "Vulnerability triage", "level" : "intermediate" }, { "name" : "Security hardening", "level" : "intermediate" }, { "name" : "Conformity assessments", "level" : "intermediate" }, { "name" : "Technical documentation", "level" : "intermediate" }, { "name" : "CE marking", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Product security, Regulatory compliance, GRC, Secure engineering", "majorSkillsList" : [ "Product security", "Regulatory compliance", "GRC", "Secure engineering" ], "coreResponsibilities" : "Lead CRA readiness, Scope products, Classify products, Assess gaps, Analyze risks, Design controls, Develop remediation roadmaps, Translate requirements, Map controls, Maintain technical documentation, Support conformity assessments, Support CE marking, Engage Notified Bodies, Stay current on threats, Stay current on regulations, Stay current on best practices, Establish product security capabilities, Mature product security capabilities, Manage secure development lifecycle, Manage secure update processes, Handle vulnerabilities, Manage coordinated vulnerability disclosure, Setup PSIRT, Operate PSIRT, Generate SBOM, Manage SBOM, Triage SBOM vulnerabilities, Conduct risk assessments, Conduct threat modelling, Define mitigation strategies, Define metrics, Define KPIs, Participate in incident response, Participate in alert response, Propose improvement actions, Implement improvement actions, Assess security hardening, Improve security hardening, Write secure code, Conduct manual code reviews, Conduct automated code reviews, Define secure coding guidelines, Enforce secure coding guidelines, Enforce SAST tooling, Enforce DAST tooling, Mentor engineers, Upskill engineers, Collaborate cross-functionally, Facilitate workshops, Drive change, Produce assessment reports, Produce control designs, Produce implementation plans, Produce policies, Produce process maps, Produce training materials, Monitor security metrics, Report security metrics, Monitor security posture, Report security posture, Monitor compliance status, Report compliance status, Explain security topics", "teamCollaboration" : "Cross-functionally with security; Cross-functionally with engineering; Cross-functionally with product; Cross-functionally with operations; Cross-functionally with legal; Cross-functionally with compliance; Engage engineers; Engage executives", "projectManagementSkills" : [ "Roadmap development", "Remediation roadmaps" ], "domainKnowledge" : "Product security; Supply chain security; GRC; Industrial automation; Robotics; Embedded systems", "domainList" : [ "product-security", "supply-chain-security", "grc", "industrial-automation", "robotics", "embedded-systems" ], "domainSpecificKnowledge" : [ "Product security", "Supply chain security", "GRC", "Industrial automation", "Robotics", "Embedded systems" ], "toolProficiency" : [ "SAST tooling", "DAST tooling" ], "communicationSkills" : "Written communication; Verbal communication; Explain complex topics", "documentationSkills" : "Technical documentation; Assessment reports; Control designs; Implementation plans; Policies; Process maps; Training materials", "continuousLearning" : "Stay current on threats; Stay current on regulations; Stay current on best practices", "problemSolvingSkills" : "Risk analysis; Threat modelling; Vulnerability handling; Vulnerability triage; Root cause analysis", "outcomesObjectives" : "Support conformity assessments; Support CE marking; Establish product security capabilities; Mature product security capabilities; Improve security hardening; Report security metrics; Report security posture; Report compliance status", "qualificationsBasic" : "3+ years security experience, EU regulatory compliance, GRC familiarity, Industrial cybersecurity standards, Embedded cybersecurity standards, IEC 62443 familiarity, Security frameworks knowledge, ISO 27001 knowledge, NIST CSF knowledge, NIST SP 800-161 knowledge, NIST SSDF knowledge, CIS Controls knowledge, OWASP knowledge, Control mapping experience, Tailored implementation experience, Product security capabilities establishment, PSIRT establishment experience, CVD establishment experience, SBOM establishment experience, Secure development pipeline experience, Secure update pipeline experience, Secure code writing, C, C++, Python, or Rust proficiency, Manual code reviews, Automated code reviews, Vulnerability identification experience, OWASP Top 10 knowledge, CWE knowledge, Mitigation strategies experience, Written communication, Verbal communication, Engage engineers, Engage executives", "qualificationsPreferred" : "CISSP certification, CISM certification, CISA certification, CRISC certification, ISO 27001 Lead Implementer, ISO 27001 Auditor, CCSK certification, CCSP certification, Conformity assessments experience, Technical documentation experience, CE marking processes experience, Penetration testing experience, Vulnerability assessments experience, SAST tooling experience, DAST tooling experience, Notified Bodies engagement experience, Cryptography knowledge, Secure boot processes knowledge, Secure OTA update knowledge, Industrial automation background, Robotics background, Embedded systems background", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "## What You Will Do Regulatory & Compliance Lead CRA readiness for Gravis products with digital elements: scoping, product classification, gapassessments against essential requirements, risk analysis, control design, and remediationroadmaps Translate CRA, NIS2, and Machinery Regulation requirements into actionable control frameworksand policies; map to ISO 27001/27002/27036, NIST CSF, NIST SP 800-161, NIST SSDF, CISControls, and OWASP Maintain comprehensive technical documentation to support conformity assessments, CE marking, and engagement with Notified Bodies Stay current on emerging threats, regulatory changes, and best practices in product security,supply chain security, and GRC Product Security Establish and mature product security capabilities: secure development lifecycle, secure updateprocesses, vulnerability handling, coordinated vulnerability disclosure (CVD), PSIRT setup andoperations, SBOM generation, management, and vulnerability triage Conduct risk assessments and threat modelling for products and suppliers; define mitigationstrategies, metrics, and KPIs Participate in incident and alert response reviews; propose and implement improvement actions Assess and improve the security hardening of enterprise and embedded solutions Secure Engineering Write secure code for critical system components in C, C++, Python, and/or Rust Conduct manual and automated code reviews with a strict focus on security vulnerabilities (OWASP Top 10, CWE) Define and enforce secure coding guidelines and SAST/DAST tooling across engineering teams Mentor and upskill engineers on secure development best practices Collaboration & Communication Collaborate cross-functionally with security, engineering, product, operations, legal, and compliance teams; facilitate workshops and drive change Produce clear, high-quality deliverables: assessment reports, control designs, implementationplans, policies, process maps, and training materials Regularly monitor and report on security metrics, security posture, and compliance status tomanagement. Explain complex security topics clearly to both technical and non-technical stakeholders ## Required Qualifications 3+ years of security experience with direct focus on EU regulatory compliance (CRA, NIS2,Machinery Regulation) and GRC Strong familiarity with industrial or embedded cybersecurity standards, particularly IEC 62443 Broad knowledge of security frameworks — ISO 27001, NIST CSF, NIST SP 800-161, NIST SSDF,CIS Controls, OWASP — including control mapping and tailored implementation Demonstrable experience establishing product security capabilities (PSIRT, CVD, SBOM, securedevelopment/update pipelines) in a product or software organisation Proficiency writing secure code in one or more of: C, C++, Python, Rust Experience conducting manual and automated code reviews focused on identifying securityvulnerabilities Deep understanding of common vulnerability classes (OWASP Top 10, CWE) and proven mitigation strategies Strong written and verbal communication skills; comfortable engaging both engineers andexecutives ## Nice To Have Relevant cybersecurity certifications: CISSP, CISM, CISA, CRISC, ISO 27001 LeadImplementer/Auditor, CCSK, or CCSP Practical experience with conformity assessments, technical documentation, and CE markingprocesses Experience with penetration testing and vulnerability assessments Hands-on experience with SAST and DAST tooling Experience engaging with Notified Bodies through the conformity assessment process Knowledge of cryptography, secure boot processes, and secure over-the-air (OTA) updatemechanisms Background in industrial automation, robotics, or embedded systems environments", "summaryDescription" : "Cybersecurity Engineer. Skills: Product security, Regulatory compliance, GRC, Secure engineering. Lead CRA readiness. Scope products", "postedDate" : "2026-06-09T06:48:02.133", "createdAt" : "2026-06-09T06:48:02.133", "lastUpdated" : "2026-06-15T00:34:33.748", "ingestTimestamp" : "2026-06-12T06:10:11.270", "mongoId" : "6a2a72cf74d8ee00a064d7ef", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Risk analysis", "Control design", "Secure coding", "Code reviews", "Threat modelling", "Vulnerability handling", "Vulnerability triage", "Security hardening", "Conformity assessments", "Technical documentation", "CE marking", "Mentoring", "Product security", "Regulatory compliance", "GRC", "Secure engineering", "Supply chain security", "Secure development", "Penetration testing", "Vulnerability assessments", "Roadmap development", "Remediation roadmaps", "Industrial automation", "Robotics", "Embedded systems", "CISSP", "CISM", "CISA", "CRISC", "ISO 27001 Lead Implementer", "ISO 27001 Auditor", "CCSK", "CCSP", "SAST tooling", "DAST tooling" ], "skillCount" : 35, "jobCategory" : "other", "dataQualityScore" : 0.8888889, "_score" : 853.1624, "daysOld" : 5, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2a8a7774d8ee00a0681fdf", "title" : "Cybersecurity – Information System Security Officer (ISSO)", "company" : "Boeing", "salary" : { "min" : 113050.0, "max" : 152950.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "USA - Ridley Park, PA", "locations" : [ "USA - Ridley Park, PA", "United States of America" ], "certifications" : [ "IAM Level 1 DoD 8140.03 compliant certification" ], "timestamp" : "2026-06-13T02:47:33.340", "fingerprint" : "bc0ab20ff8240feba7df8afca44b6c18182830d243e595306277245618514f06", "source" : "workday", "language" : "en", "applyUrl" : "https://boeing.wd1.myworkdayjobs.com/EXTERNAL_CAREERS/job/USA---Ridley-Park-PA/Cybersecurity---Information-System-Security-Officer--ISSO-_JR2026496226-1", "externalId" : "JR2026496226", "locationPoint" : "39.88122,-75.3238", "structuredLocations" : [ { "city" : "Ridley Park", "state" : "Pennsylvania", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.8812236,-75.3237993" } ], "locationText" : "Ridley Park, Pennsylvania, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Cybersecurity, Information Assurance, Risk Management Framework, NIST SP 800", "professionalSkills" : [ "Information System Security", "Security Analysis", "Risk Assessment", "Incident Response", "Configuration Management", "Compliance" ], "hardSkillsList" : [ "Security policy implementation", "System authorization", "Continuous monitoring", "Hardware/software inventory" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Security policy implementation", "level" : "intermediate" }, { "name" : "System authorization", "level" : "intermediate" }, { "name" : "Continuous monitoring", "level" : "intermediate" }, { "name" : "Hardware/software inventory", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Information System Security, Risk Management Framework, Cybersecurity", "majorSkillsList" : [ "Information System Security", "Risk Management Framework", "Cybersecurity" ], "coreResponsibilities" : "Perform security analysis, Assess compliance with standards, Lead Assessment and Authorization (A&A) processes, Implement RMF for information systems, Facilitate MOUs, Facilitate ISAs, Facilitate RALs, Support Continuous Monitoring (CONMON), Oversee configuration management, Ensure security posture integrity, Lead staff with assessments, Document state of compliance, Conduct risk assessments, Conduct investigations, Execute risk mitigations, Oversee incident response, Conduct periodic inventory assessments, Serve as spokesperson on projects, Advise management on technical research, Interface with government customers, Interface with suppliers, Implement protective mechanisms, Ensure understanding of cybersecurity requirements, Oversee development of program information security, Deploy program information security, Meet program and enterprise requirements, Manage security compliance monitoring, Perform security compliance monitoring, Oversee security assessments, Participate in security audits, Prepare technical reports, Review technical reports, Present technical briefings, Identify root causes, Prioritize threats, Recommend corrective action, Implement corrective action, Explore industry knowledge, Explore industry methods", "teamCollaboration" : "Interface with government customers; Interface with suppliers; Work with management; Work with customers", "projectManagementSkills" : [ "Program information security" ], "domainKnowledge" : "Classified computing domains; Information System Security; Risk Management Framework; DAAG; CNSSI 1253; ICD-503; JSIG; NIST SP 800; DFARs compliance", "domainList" : [ "classified-computing-domains", "information-system-security", "risk-management-framework", "daag", "cnssi-1253", "icd-503", "jsig", "nist-sp-800", "dfars-compliance" ], "domainSpecificKnowledge" : [ "Classified computing domains", "Information System Security", "Risk Management Framework", "DAAG", "CNSSI 1253", "ICD-503", "JSIG", "NIST SP 800", "DFARs compliance" ], "toolProficiency" : [ "NESSUS", "ACAS", "DISA STIGs", "SCAP", "HBSS" ], "communicationSkills" : "Technical reports; Technical briefings", "documentationSkills" : "Memorandums of Understanding; Interconnection Security Agreements; Risk Acknowledgement Letters; Technical reports", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Active U.S. Secret Security Clearance, U.S. Citizenship Required", "qualificationsBasic" : "IAM Level 1 DoD 8140.03 compliant certification, 3+ years cybersecurity, IT, or related experience, 3+ years RMF, cybersecurity policies, RMF implementation experience", "qualificationsPreferred" : "3+ years ISSO/ISSM experience, 3+ years experience with security tools for RMF, 3+ years assessing and documenting test data, 3+ years DFARs compliance experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Cybersecurity – Information System Security Officer (ISSO) **Company:** The Boeing Company Boeing Classified Cybersecurity is currently seeking a highly motivated **Cybersecurity – Information System Security Officer (ISSO)** to join their team in **Ridley Park, PA**. The selected candidate will rely on Cybersecurity and Information Assurance (IA) background to be a technical leader and support Enterprise activities and Boeing customers throughout multiple classified computing domains. The ISSO is responsible for maintaining and implementing all Information System Security policies, standards, and directives to ensure assessment and authorization of information systems processing classified information. **Position Responsibilities:** * Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards * Lead and implement the Assessment and Authorization (A&A) processes under the Risk Management Framework (RMF) for new and existing information systems * Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acknowledgement Letters (RAL) and support Continuous Monitoring (CONMON) * Oversee configuration management of assigned systems; auditing systems to ensure security posture integrity * Lead staff with assessments and test/analysis data to document state of compliance with security requirements * Conduct risk assessments and investigations, execute appropriate risk mitigations, and oversee incident response activities * Conduct periodic hardware/software inventory assessments * Serve as organization spokesperson on advanced projects and programs * Act as advisor to management and customers on advanced technical research studies * Interface with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements **Additional Responsibilities:** * Oversee the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures * Manage and perform security compliance continuous monitoring * Oversee and participate in security assessments and audits * Prepare, review, and present technical reports and briefings * Identify root causes, prioritizes threats and recommends and/or implements corrective action * Explore the enterprise and industry for evolving state of industry knowledge and methods regarding information security best practices **Basic Qualifications (Required Skills/Experience):** * IAM Level 1 DoD 8140.03 (previously 8570.01) compliant certification (i.e. , Security+ CE, CAP, CISSP, CASP, CISM, GSLC) * 3+ years of combined experience and/or education in cybersecurity, IT, or a related field * 3+ years of experience with the Risk Management Framework (RMF), cybersecurity policies, and RMF implementation (e.g., DAAG, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series) **Preferred Qualifications (Desired Skills/Experience):** * 3+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs * 3+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS * 3+ years of experience assessing and documenting test or analysis data to show cyber security compliance * 3+ years of experience with DFARs compliance **Conflict of Interest:** Successful candidates for this job must satisfy the Company’s Conflict of Interest (COI) assessment process. **Drug Free Workplace:** Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies _._ **Pay & Benefits:** At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities. The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements. Pay is based upon candidate experience and qualifications, as well as market and business considerations. Summary pay range: $113,050 – $152,950 **Language Requirements:** Not Applicable **Education:** Not Applicable **Relocation:** Relocation assistance is not a negotiable benefit for this position. **Export Control Requirement:** This is not an Export Control position. **Safety Sensitive:** This is not a Safety Sensitive Position. **Security Clearance:** This position requires an active U.S. Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active) **Visa Sponsorship:** Employer will not sponsor applicants for employment visa status. **Contingent Upon Award Program** This position is not contingent upon program award **Shift:** Shift 1 (United States of America) **Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud** \\- [Recruitment Fraud Warning](http://www.boeing.com/careers/recruitment-fraud-warning.page) Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law. [EEO is the law](http://www.boeing.com/resources/boeingdotcom/careers/footer/EEOIsTheLawPoster.pdf) [Boeing EEO Policy](https://tbcdn.talentbrew.com/company/185/v1_0/img/2018_Policy_Statement.pdf) [Request an Accommodation](http://www.boeing.com/careers/request-accommodation.page) [Applicant Privacy](http://www.boeing.com/careers/privacy-statement.page) **Boeing Participates in E – Verify** * [E-Verify (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterEnglish.pdf) * [E-Verify (Spanish) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterSpanish.pdf) **Right to Work Statement** * [Right to Work (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWEnglishversion.pdf) * [Right to Work (Spanish)](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWSpanishversion.pdf)", "summaryDescription" : "Cybersecurity – Information System Security Officer (ISSO) at Boeing. Skills: Information System Security, Risk Management Framework, Cybersecurity. Perform security analysis. Assess compliance with standards", "postedDate" : "2026-06-11T16:32:13.076", "createdAt" : "2026-06-11T16:32:13.030", "lastUpdated" : "2026-06-13T02:47:33.340", "ingestTimestamp" : "2026-06-11T16:32:13.030", "mongoId" : "6a2a8a7774d8ee00a0681fdf", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://boeing.wd1.myworkdayjobs.com/EXTERNAL_CAREERS/job/USA---Ridley-Park-PA/Cybersecurity---Information-System-Security-Officer--ISSO-_JR2026496226-1", "salaryAnnualMin" : 113050, "salaryAnnualMax" : 152950, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security policy implementation", "System authorization", "Continuous monitoring", "Hardware/software inventory", "Leadership", "Information System Security", "Risk Management Framework", "Cybersecurity", "Security Analysis", "Risk Assessment", "Incident Response", "Configuration Management", "Compliance", "Program information security", "Classified computing domains", "DAAG", "CNSSI 1253", "ICD-503", "JSIG", "NIST SP 800", "DFARs compliance", "IAM Level 1 DoD 8140.03 compliant certification", "NESSUS", "ACAS", "DISA STIGs", "SCAP", "HBSS" ], "skillCount" : 27, "jobCategory" : "engineering", "seniorityLevel" : "mid", "dataQualityScore" : 0.8888889, "_score" : 832.04767, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "694ae6ce70f0b99d589b27ff", "title" : "Cybersecurity GRC Specialist", "company" : "Hyundai Capital America", "industry" : "Financial Services", "salary" : { "min" : 115500.0, "max" : 154000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity GRC Specialist in Irvine, CA, adjusted for the Financial Services industry and manager experience level." }, "location" : "United States-California-Irvine", "locations" : [ "United States-California-Irvine", "
Headquarters 1 (HCA_HQ1)
3161 Michelson Dr. Ste 1900
Irvine, 92612

" ], "certifications" : [ "CISSP", "CISM", "CRISC", "CGEIT", "CISA", "ITIL" ], "timestamp" : "2026-06-15T07:26:07.663", "fingerprint" : "028859dc321449421afae6164280d515a7620332b2573dec7f41455905f5c6bc", "source" : "taleo", "language" : "en", "applyUrl" : "https://hyundaicapital.taleo.net/careersection/ex/jobdetail.ftl?job=104123", "externalId" : "104123", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "experienceLevel" : "Manager", "technicalSkills" : "Cybersecurity governance, Risk management, Compliance, IT systems", "professionalSkills" : [ "Risk assessments", "Impact analyses", "Remediations", "IT general controls", "Vulnerability analysis", "Threat analysis", "Risk treatment", "Audit controls", "Vendor risk management", "IT risk management", "Reporting" ], "hardSkillsList" : [ "Policy enforcement", "Risk Register management", "ISO 27001 standards", "ISO 27001", "ISO 31000:2009", "ISO 27005:2008", "NIST Special Publications", "NIST Methodologies", "SP800-12", "SP800-30", "SP800-37", "SP800-39", "SP800-53", "SP800-150", "SP800-161", "Gramm-Leach-Bliley Act", "NYDFS Cybersecurity Regulation", "PCI-DSS", "FFIEC", "SOX" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Policy enforcement", "level" : "intermediate" }, { "name" : "Risk Register management", "level" : "intermediate" }, { "name" : "ISO 27001 standards", "level" : "intermediate" }, { "name" : "ISO 27001", "level" : "intermediate" }, { "name" : "ISO 31000:2009", "level" : "intermediate" }, { "name" : "ISO 27005:2008", "level" : "intermediate" }, { "name" : "NIST Special Publications", "level" : "intermediate" }, { "name" : "NIST Methodologies", "level" : "intermediate" }, { "name" : "SP800-12", "level" : "intermediate" }, { "name" : "SP800-30", "level" : "intermediate" }, { "name" : "SP800-37", "level" : "intermediate" }, { "name" : "SP800-39", "level" : "intermediate" }, { "name" : "SP800-53", "level" : "intermediate" }, { "name" : "SP800-150", "level" : "intermediate" }, { "name" : "SP800-161", "level" : "intermediate" }, { "name" : "Gramm-Leach-Bliley Act", "level" : "intermediate" }, { "name" : "NYDFS Cybersecurity Regulation", "level" : "intermediate" }, { "name" : "PCI-DSS", "level" : "intermediate" }, { "name" : "FFIEC", "level" : "intermediate" }, { "name" : "SOX", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Cybersecurity governance, Risk management, Compliance", "majorSkillsList" : [ "Cybersecurity governance", "Risk management", "Compliance" ], "coreResponsibilities" : "Manage security policies, Maintain security policies, Enforce security policies, Develop Risk Register, Implement Risk Register, Maintain Risk Register, Execute Risk Register, Develop Policy Risk Exception Process, Implement Policy Risk Exception Process, Maintain Policy Risk Exception Process, Execute Policy Risk Exception Process, Conduct risk assessments, Conduct impact analyses, Identify risks, Manage remediations, Ensure compliance, Perform GSIF assessments, Monitor GSIF assessments, Ensure remediations follow GSIF ISO 27001 standards, Collaborate with Cybersecurity Risk Management, Collaborate with Cybersecurity Engineering Operations, Collaborate with IT, Ensure security best practices are integrated, Develop metrics for senior management, Develop reporting for senior management, Develop metrics for stakeholders, Develop reporting for stakeholders, Identify security risks, Provide actionable insights, Address gaps, Develop governance mechanisms, Maintain governance mechanisms, Develop automation tools, Maintain automation tools, Track Risk Register, Track compliance status, Develop dashboards, Maintain dashboards, Develop regular reporting, Manage management performance metrics, Manage risk metrics", "teamCollaboration" : "Cross-functional departments; Cybersecurity Risk Management; Cybersecurity Engineering Operations; IT; Senior management; Stakeholders", "domainKnowledge" : "Financial services; IT systems; Cybersecurity risk management frameworks; IT general controls; ISO 27001/2; ISO 31000:2009; ISO 27005:2008; NIST Special Publications; NIST Methodologies; California Consumer Privacy Act; Gramm-Leach-Bliley Act; NYDFS Cybersecurity Regulation; PCI-DSS; FFIEC; SOX; Financial regulatory frameworks; Cybersecurity best practices", "domainList" : [ "financial-services", "it-systems", "cybersecurity-risk-management-frameworks", "it-general-controls", "iso-27001-2", "iso-31000-2009", "iso-27005-2008", "nist-special-publications", "nist-methodologies", "california-consumer-privacy-act", "gramm-leach-bliley-act", "nydfs-cybersecurity-regulation", "pci-dss", "ffiec", "sox", "financial-regulatory-frameworks", "cybersecurity-best-practices" ], "domainSpecificKnowledge" : [ "Financial services", "IT systems", "Cybersecurity risk management frameworks", "IT general controls", "ISO 27001/2", "ISO 31000:2009", "ISO 27005:2008", "NIST Special Publications", "NIST Methodologies", "California Consumer Privacy Act", "Gramm-Leach-Bliley Act", "NYDFS Cybersecurity Regulation", "PCI-DSS", "FFIEC", "SOX", "Financial regulatory frameworks", "Cybersecurity best practices" ], "toolProficiency" : [ "Governance automation tools" ], "communicationSkills" : "Communicate complex security concepts", "continuousLearning" : "Tuition reimbursement", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "5-7 years progressive experience, Bachelor's degree in Cybersecurity, Working knowledge of Cybersecurity risk management frameworks, Working knowledge of Information Security & Risk Frameworks, Working knowledge of CCPA, Working knowledge of GLBA, Working knowledge of NYDFS Cybersecurity Regulation, Working knowledge of PCI-DSS, Working knowledge of FFIEC, Working knowledge of SOX", "qualificationsPreferred" : "Master's degree a plus, CISSP certification highly desirable, CISM certification highly desirable, CRISC certification highly desirable, CGEIT certification highly desirable, CISA certification highly desirable, ITIL certification highly desirable, Basic understanding of financial regulatory frameworks", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Who We Are Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 2 million consumers and businesses. Embodying our commitment to grow, innovate, and diversify, we strive to reimagine the customer and dealer experience and launch innovative new products that broaden our market reach. We believe that success comes from within and are proud to support our team members through skill development and career advancement. Hyundai Capital America is an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce. We are a values-driven company dedicated to supporting both internal and external communities through volunteering, philanthropy, and the empowerment of our Employee Resource Groups. Together, we strive to be the leader in financing freedom of movement. We Take Care of Our People Along with competitive pay, as an employee of HCA, you are eligible for the following benefits: ·          Medical, Dental and Vision plans that include no-cost and low-cost plan options ·          Immediate 401(k) matching and vesting ·          Vehicle purchase and lease discounts plus monthly vehicle allowances ·          Paid Volunteer Time Off with company donation to a charity of your choice ·          Tuition reimbursement What to Expect The Cybersecurity Governance Manager plays a critical role in the organization's second line of defense, ensuring policies, governance frameworks, and regulatory adherence in cybersecurity governance, risk and compliance across the organization. This role establishes oversight mechanisms, monitors compliance with industry regulations, and ensures access-related risks are effectively managed. In addition, this role ensures governance and compliance strategies are aligned with business objectives and security standards. What You Will Do 1.      Cybersecurity Governance and Risk Management ·          Manage, maintain and enforce security policies, standards and guidelines related to Cybersecurity governance processes. ·          Develop, implement, maintain and execute a Cybersecurity Risk Register, Policy Risk Exception Process, and Procedures. ·    Conduct risk assessments and impact analyses to identify risks, manage remediations, to ensure compliance across business systems, IT Infrastructure, and network operating environments. 2.      Cybersecurity Risk Assessment ·      Perform Global Integrated Security Framework (GSIF) assessments, monitor and ensure remediations are following GSIF ISO 27001 standards across cross-functional departments. ·       Collaborate with Cybersecurity Risk Management, Cybersecurity Engineering Operations, and IT to ensure security best practices are integrated within each project and system deployment. 3.      Cybersecurity Governance and Risk Reporting ·          Develop metrics and reporting for senior management and stakeholders that identify security risks and provide actionable insights to address gaps. ·         Develop and maintain the governance mechanisms and automation tools track the Risk Register, and compliance status across the organization. ·         Develop and maintain dashboards and regular reporting to manage management performance metrics, risk metrics. What You Will Bring ·          Minimum 5-7 years progressive experience in cybersecurity governance, risk management, or compliance within financial services with a deep understanding of the IT systems. ·          Bachelor’s degree in Cybersecurity, Information Security, Risk Management or a related field ·          Master’s degree a plus. ·          Certifications such as CISSP, CISM, CRISC, CGEIT, CISA, and ITIL are highly desirable. ·          Working knowledge of Cybersecurity risk management frameworks, Governance, Risk, and Compliance process, IT general controls (e.g. asset classification, risk assessments, vulnerability and threat analysis, risk treatment, audit controls and remediation, vendor risk management, and IT risk management & reporting). ·          Working knowledge of Information Security & Risk Frameworks including ISO 27001/2, ISO 31000:2009, ISO 27005:2008; NIST Special Publications and Methodologies (e.g. SP800-12, 30, 37, 39, 53,150, 161). ·          Working knowledge of California Consumer Privacy Act (CCPA), Gramm-Leach-Bliley Act (GLBA), NYDFS Cybersecurity Regulation, PCI-DSS, FFIEC, SOX, and other relevant laws and regulations. ·          Basic understanding of financial regulatory frameworks and cybersecurity best practices. ·          Ability to communicate complex security concepts to business leaders and technical teams. Work Environment Employees in this class are subject to extended periods of sitting, standing and walking, and using a computer. Work is performed in an office environment. The posted salary range for this job takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; geographic location, and other business and organizational needs. Successful candidates may be hired anywhere in the salary range based on these factors. It is uncommon to hire candidates at or near the top of the range. California Privacy Notice This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here . This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used, and whether that information is sold or shared, so that you can exercise meaningful control over our use of your personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (“CCPA”). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at Privacy2@hcs.com . United States-California-Irvine", "summaryDescription" : "Cybersecurity GRC Specialist at Hyundai Capital America. Skills: Cybersecurity governance, Risk management, Compliance. Manage security policies. Maintain security policies", "createdAt" : "2026-06-14T02:33:22.264", "lastUpdated" : "2026-06-15T07:26:07.663", "ingestTimestamp" : "2026-06-14T02:33:22.264", "mongoId" : "694ae6ce70f0b99d589b27ff", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115500, "salaryAnnualMax" : 154000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Policy enforcement", "Risk Register management", "ISO 27001 standards", "ISO 27001", "ISO 31000:2009", "ISO 27005:2008", "NIST Special Publications", "NIST Methodologies", "SP800-12", "SP800-30", "SP800-37", "SP800-39", "SP800-53", "SP800-150", "SP800-161", "Gramm-Leach-Bliley Act", "NYDFS Cybersecurity Regulation", "PCI-DSS", "FFIEC", "SOX", "Leadership", "Cybersecurity governance", "Risk management", "Compliance", "Risk assessments", "Impact analyses", "Remediations", "IT general controls", "Vulnerability analysis", "Threat analysis", "Risk treatment", "Audit controls", "Vendor risk management", "IT risk management", "Reporting", "Financial services", "IT systems", "Cybersecurity risk management frameworks", "ISO 27001/2", "California Consumer Privacy Act", "Financial regulatory frameworks", "Cybersecurity best practices", "CISSP", "CISM", "CRISC", "CGEIT", "CISA", "ITIL", "Governance automation tools" ], "skillCount" : 49, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 828.4813, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2617a374d8ee00a01f6f0f", "title" : "Sr Cybersecurity Engineer", "company" : "Workday", "industry" : "Technology", "salary" : { "min" : 84000.0, "max" : 126000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : false }, "location" : "Ireland, Dublin", "locations" : [ "Ireland, Dublin" ], "timestamp" : "2026-06-11T19:57:34.821", "fingerprint" : "4c398f5995bd3fbdfef4df86ae51fbafcc4a589791c20f3808df7738f6d9ccc0", "source" : "workday", "language" : "en", "applyUrl" : "https://workday.wd5.myworkdayjobs.com/Workday/job/Ireland-Dublin/Sr-Cybersecurity-Engineer_JR-0106976", "externalId" : "JR-0106976", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Dublin", "country" : "Ireland", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "53.3493795,-6.2605593" } ], "locationText" : "Dublin, Ireland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, GCP, Terraform, Ansible, Consul, Python, GoLang", "professionalSkills" : [ "Network security architecture", "Security controls design", "Security policy development", "Infrastructure security" ], "hardSkillsList" : [ "Network security assessments", "Incident response plans", "Encryption management", "Authentication management", "Intrusion detection management", "Firewall management" ], "softSkillsList" : [ "Courageous collaborators", "Curious minds" ], "hardSkills" : [ { "name" : "Network security assessments", "level" : "intermediate" }, { "name" : "Incident response plans", "level" : "intermediate" }, { "name" : "Encryption management", "level" : "intermediate" }, { "name" : "Authentication management", "level" : "intermediate" }, { "name" : "Intrusion detection management", "level" : "intermediate" }, { "name" : "Firewall management", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Courageous collaborators" }, { "name" : "Curious minds" } ], "majorSkills" : "Network security controls, Cloud security architecture, Security automation", "majorSkillsList" : [ "Network security controls", "Cloud security architecture", "Security automation" ], "coreResponsibilities" : "Design next-generation network security controls, Implement network security patterns, Build scalable systems for monitoring, Enforce security posture, Serve as technical lead, Guide team members, Evaluate production infrastructure designs, Determine security requirements, Conduct network security assessments, Partner with Cybersecurity teams, Develop security policies, Develop security standards, Develop security guidelines, Implement control enforcement, Provide operational support, Support critical security infrastructure, Support DDoS detection, Support WAF controls, Support firewall controls", "teamCollaboration" : "Consult with partners; Partner with Trust teams", "projectManagementSkills" : [ "Drive initiatives" ], "domainKnowledge" : "Public cloud environments; Multi-cloud infrastructure; Hybrid infrastructure; Network security threats; Attack techniques; Data protection regulations; Industry best practices; CIS; NIST; FedRAMP", "domainList" : [ "public-cloud-environments", "multi-cloud-infrastructure", "hybrid-infrastructure", "network-security-threats", "attack-techniques", "data-protection-regulations", "industry-best-practices", "cis", "nist", "fedramp" ], "domainSpecificKnowledge" : [ "Public cloud environments", "Multi-cloud infrastructure", "Hybrid infrastructure", "Network security threats", "Attack techniques", "Data protection regulations", "Industry best practices", "CIS", "NIST", "FedRAMP" ], "toolProficiency" : [ "Terraform", "Ansible", "Consul", "AWS Network Firewall", "GCP Cloud Armor" ], "communicationSkills" : "Written communication; Verbal communication", "documentationSkills" : "Document architectures", "continuousLearning" : "Skills development", "innovationCreativity" : "Innovative solutions", "problemSolvingSkills" : "Solve sophisticated challenges", "outcomesObjectives" : "Deliver scalable network security controls; Improve platform resilience; Ensure consistency of security controls; Leverage AI for solutions", "qualificationsBasic" : "7+ years network security architecture, Hands-on AWS/GCP network security, Proficient in Python or Go, Proficient in Terraform, Ansible, or Consul", "qualificationsPreferred" : "Deep understanding of public cloud, Experience designing multi-cloud networks, Experience with security platforms, Foundation in information security, Skilled in security engineering, Commitment to security by design, Ability to build consensus, Document complex security architectures", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "**Your work days are brighter here.** We’re obsessed with making hard work pay off, for our people, our customers, and the world around us. As a Fortune 500 company and a leading AI platform for managing people, money, and agents, we’re shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join, you’ll feel it. Not just in the products we build, but in how we show up for each other. Our culture is rooted in integrity, empathy, and shared enthusiasm. We’re in this together, tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun-drenched optimism and drive. Whether you're building smarter solutions, supporting customers, or creating a space where everyone belongs, you’ll do meaningful work with Workmates who’ve got your back. In return, we’ll give you the trust to take risks, the tools to grow, the skills to develop and the support of a company invested in you for the long haul. So, if you want to inspire a brighter work day for everyone, including yourself, you’ve found a match in Workday, and we hope to be a match for you too. **About the Team** The Network Security team delivers innovative solutions to sophisticated challenges, serving as a critical component of the Workday Security organization's mission to ensure the security and safety of Workday customers, users, and their data. We design, build, and operate critical security controls for customer data environments, overcoming constantly shifting — and exciting — technical challenges to ensure trust in the Workday service. Our team is responsible for operating the systems and controls that we build, advising other Workday business units on ways to securely implement services and infrastructure, and partnering with our information security team to ensure policy compliance and address gaps. We operate data centers and cloud environments across the globe and are constantly improving our network security posture and capabilities. Over the next year, we are focused on delivering scalable network security controls such as web application firewalls for customer data environments, improving platform resilience and the consistency of security controls across the enterprise, and leveraging AI and agents to accelerate how we deliver effective solutions for all of Workday's customers. Our team is spread across the US and EU, and though we connect mostly virtually, we love sharing in each other's successes, celebrating wins, and embracing fun with informal team meetings and activities. We genuinely enjoy getting to know each other beyond our technical skills — because great work is even better when you're part of a great team. **About the Role** As a Senior Cybersecurity Engineer on the Network Security team, you will play a pivotal role in designing and delivering the security controls that protect Workday's customer data environments across AWS, GCP, and private cloud environments. You are both a builder and a leader — architecting scalable security solutions while mentoring team members and consulting with partners across the organization to ensure security is embedded into everything we do. In this role, you will be responsible for: * Architect and Build: Design and implement next-generation network security controls, patterns, and templates across AWS, GCP, and private cloud environments. * Automate: Enhance the security of the enterprise by building scalable systems for effective continuous monitoring and enforcement of expected security posture using tools such as Terraform, GoLang, and Python. * Mentor: Serve as a technical lead by driving initiatives forward and guiding team members in their development. * Consult: Evaluate production infrastructure designs to determine security requirements and conduct rigorous network security assessments. * Collaborate: Partner with Cybersecurity and Trust teams to develop policies, standards, and guidelines aligned with industry best practices (CIS, NIST, FedRAMP) and implement control enforcement against those standards. * Operational Excellence: Provide operational support for critical security infrastructure, including DDoS detection, WAF, and firewall controls (appliances and cloud-native) in a production environment. **About You** ****Basic Qualifications**** * 7+ years of progressively responsible experience in network security architecture and design * Hands-on experience deploying network security controls across AWS and/or GCP, including cloud-native security controls (e.g., AWS Network Firewall, WAF, GCP Cloud Armor) * Proficient in at least one scripting language (Python, Go) and automation tooling (Terraform, Ansible, or Consul) ****Other Qualifications**** * Deep understanding of public cloud environments (AWS, GCP) with the ability to design, deploy, and manage secure network architectures across multi-cloud and hybrid infrastructure, ensuring consistent security posture at scale * Extensive experience with security platforms, including industry-leading firewalls and web application firewall (WAF) controls, with the ability to evaluate, implement, and operate these platforms to protect customer data environments effectively * Strong foundation in information security, including understanding of application, system, and network security threats, attack techniques, and mitigating controls, with the ability to implement effective security policies and ensure compliance with data protection regulations * Skilled in security engineering, with experience designing and implementing secure network architectures, managing encryption, authentication, intrusion detection, and firewall technologies, and developing incident response plans to address security breaches * Demonstrated commitment to security by design, with the ability to integrate security measures into the architecture of systems from the outset, including risk assessment methodologies and the design of systems that can resist, tolerate, and recover from security events * Proven ability to leverage AI and agentic capabilities to streamline processes and deliver engineering and security solutions at scale. Experience using these evolving toolsets to ensure consistency of control implementation across disparate systems is a strong differentiator. * Experience with host-based network security systems (e.g., Illumio, Calico) and large-scale data center networking * Experience supporting DDoS detection, IPS/IDS tooling, and participating in an on-call rotation for production networks * Ability to align security programs with industry standards such as CIS, NIST, and FedRAMP * Organized, thorough problem solver with the ability to build consensus among multiple partners and document complex security architectures clearly * Excellent written and verbal communication skills, with the ability to build and leverage positive relationships across the organization **Workday Pay Transparency Statement (For EU Locations Only)** Listed below is the base salary range applicable to this position. Workday pay ranges (and the precise pay offered to the successful candidate) are based on a number of objective criteria such as relevant experience and skills, and educational qualifications, level of responsibility, demands of the role, work location and business need. As a part of the total compensation package, this role may be eligible for the Workday Bonus Plan or a role-specific commission/bonus, as well as annual refresh stock grants awarded by Workday Inc. For more information regarding Workday’s comprehensive benefits, please [_click here_](http://benefits.workday.com/). Primary Location Base Pay Range: €84,000 EUR - €126,000 EUR Ireland **Our Approach to Flexible Work** With Flex Work, we’re combining the best of both worlds: in-person time and remote. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. We know that flexibility can take shape in many ways, so rather than a number of required days in-office each week, we simply **spend at least half (50%) of our time each quarter in the office or in the field** with our customers, prospects, and partners (depending on role). This means you'll have the freedom to create a flexible schedule that caters to your business, team, and personal needs, while being intentional to make the most of time spent together. Those in our remote \"home office\" roles also have the opportunity to come together in our offices for important moments that matter. Pursuant to applicable Fair Chance law, Workday will consider for employment qualified applicants with arrest and conviction records. Workday is an Equal Opportunity Employer including individuals with disabilities and protected veterans. At Workday, we are committed to providing an accessible and inclusive hiring experience where all candidates can fully demonstrate their skills. If you require assistance or an accommodation at any point, please email [_accommodations @workday.com_](mailto:accommodations@workday.com). **Are you being referred to one of our roles? If so, ask your connection at Workday about our Employee Referral process!** At Workday, we value our candidates’ privacy and data security. Workday will never ask candidates to apply to jobs through websites that are not Workday Careers. Please be aware of sites that may ask for you to input your data in connection with a job posting that appears to be from Workday but is not. In addition, Workday will never ask candidates to pay a recruiting fee, or pay for consulting or coaching services, in order to apply for a job at Workday.", "summaryDescription" : "Sr Cybersecurity Engineer at Workday. Skills: Network security controls, Cloud security architecture, Security automation. Design next-generation network security controls. Implement network security patterns", "postedDate" : "2026-06-09T10:37:28.210", "createdAt" : "2026-06-11T10:37:28.093", "lastUpdated" : "2026-06-11T19:57:34.821", "ingestTimestamp" : "2026-06-11T10:37:28.093", "mongoId" : "6a2617a374d8ee00a01f6f0f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://workday.wd5.myworkdayjobs.com/Workday/job/Ireland-Dublin/Sr-Cybersecurity-Engineer_JR-0106976", "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Network security assessments", "Incident response plans", "Encryption management", "Authentication management", "Intrusion detection management", "Firewall management", "Courageous collaborators", "Curious minds", "Network security controls", "Cloud security architecture", "Security automation", "Network security architecture", "Security controls design", "Security policy development", "Infrastructure security", "Drive initiatives", "Public cloud environments", "Multi-cloud infrastructure", "Hybrid infrastructure", "Network security threats", "Attack techniques", "Data protection regulations", "Industry best practices", "CIS", "NIST", "FedRAMP", "Terraform", "Ansible", "Consul", "AWS Network Firewall", "GCP Cloud Armor" ], "skillCount" : 31, "jobCategory" : "engineering", "seniorityLevel" : "senior", "dataQualityScore" : 1.0, "_score" : 822.2869, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2a66e574d8ee00a062dc58", "title" : "Cybersecurity Engineer", "company" : "Aprio", "industry" : "Information Technology", "salary" : { "min" : 80000.0, "max" : 90000.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "Atlanta, GA", "locations" : [ "Atlanta, GA", "Hackensack, NJ", "Washington, D.C.", "Charlotte, NC", "Boston, MA", "Dallas, TX", "Fort Lauderdale, FL", "New York, NY", "Houston, TX", "Philadelphia, PA", "Chicago, IL" ], "certifications" : [ "Security+", "SSCP", "GSEC", "AZ-500", "AWS Security Specialty" ], "timestamp" : "2026-06-15T00:36:53.772", "fingerprint" : "a2862b1c546acbb883ae9c350496c9cb6585fea4020cd48efc34a5ad1435f775", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/Aprio/970835d4-48f1-4127-9c99-e14c2c320a77/apply", "externalId" : "970835d4-48f1-4127-9c99-e14c2c320a77", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Atlanta", "state" : "Georgia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.7544657,-84.3898151" } ], "locationText" : "Atlanta, Georgia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Network segmentation, Vulnerability management, Cloud security, Endpoint security, Centralized logging, Encryption, Key management, Azure, AWS, GCP, Python, PowerShell, Bash", "professionalSkills" : [ "Project ownership", "Control implementation", "Domain depth", "Vulnerability operations", "Patch operations", "Change support", "Evidence production", "Documentation", "Detection support", "Response support", "Associate mentorship", "Automation", "Tooling" ], "hardSkillsList" : [ "Vulnerability scanning", "Patch remediation", "Access requests", "Configuration changes", "Logging coverage", "Tool configuration", "Hardening changes" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Vulnerability scanning", "level" : "intermediate" }, { "name" : "Patch remediation", "level" : "intermediate" }, { "name" : "Access requests", "level" : "intermediate" }, { "name" : "Configuration changes", "level" : "intermediate" }, { "name" : "Logging coverage", "level" : "intermediate" }, { "name" : "Tool configuration", "level" : "intermediate" }, { "name" : "Hardening changes", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Security Engineering, Cloud Security, Vulnerability Management, Identity Management", "majorSkillsList" : [ "Security Engineering", "Cloud Security", "Vulnerability Management", "Identity Management" ], "coreResponsibilities" : "Own engineering projects end-to-end, Configure security controls, Operate security controls, Partner with Senior engineers, Pick up control implementation, Deliver control implementation, Document control implementation, Hand off control implementation, Grow depth in a domain, Partner with Associate engineers, Execute approved patterns, Execute approved standards, Run vulnerability workflows, Run patch workflows, Scan for vulnerabilities, Prioritize remediation, Remediate vulnerabilities, Validate remediation, Track remediation against SLA, Close the loop on remediation, Participate in change reviews, Assess security impact, Implement approved changes, Validate post-change posture, Produce operational documentation, Produce runbooks, Produce change records, Produce evidence artifacts, Partner with SOC, Partner with Detection Engineering, Ensure logging coverage, Ensure telemetry quality, Provide engineering for response, Provide access tooling, Provide isolation capabilities, Provide evidence capture, Pair with Associate engineers, Review Associate tickets, Walk Associate engineers through toolset, Grow Associate engineers toward independence, Contribute scripts for automation, Contribute automation to reduce toil, Perform validation checks, Perform evidence collection, Perform repeatable deployments", "teamCollaboration" : "Partner with Senior engineers; Partner with Principal engineers; Partner with SOC; Partner with Detection Engineering; Pair with Associate engineers; Cross-team initiative", "projectManagementSkills" : [ "Scoping", "Design partnership", "Build", "Test", "Deploy", "Document", "Handoff" ], "domainKnowledge" : "Identity; Endpoint security; Vulnerability management; Cloud security; Logging; IAM; Encryption; Key management", "domainList" : [ "identity", "endpoint-security", "vulnerability-management", "cloud-security", "logging", "iam", "encryption", "key-management" ], "domainSpecificKnowledge" : [ "Identity", "Endpoint security", "Vulnerability management", "Cloud security", "Logging", "IAM", "Encryption", "Key management" ], "communicationSkills" : "Operational documentation; Runbooks; Change records; Evidence artifacts", "documentationSkills" : "Operational documentation; Runbooks; Change records; Evidence artifacts", "continuousLearning" : "Tuition Assistance Program; CPA support program", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Prioritize remediation; Assess security impact", "outcomesObjectives" : "Deliver projects on time; Log clean work; Own small-to-medium project end-to-end; Result is documented; Result is evidenced; Result is handed off cleanly; Be go-to on at least one domain; Execute approved patterns without oversight; Associate engineers routinely paired; Working partner on cross-team initiative", "qualificationsBasic" : "3+ years in security engineering, 3+ years in cloud engineering, 3+ years in security operations, Fundamentals in identity and access management, Fundamentals in network segmentation, Fundamentals in vulnerability management, Fundamentals in cloud security, Fundamentals in endpoint security, Fundamentals in centralized logging, Experience with Azure, Experience with AWS, Experience with GCP, Comfortable executing vulnerability and patch workflows, Ability to write clear operational documentation, Collaboration skills across Security, IT, and delivery teams, Comfortable mentoring Associate Engineers", "qualificationsPreferred" : "Regulated-environment exposure, Scripting / automation experience, Infrastructure-as-code familiarity, Familiarity with incident-response procedures, Familiarity with evidence handling, Bachelor’s degree in Computer Science, Bachelor’s degree in Information Systems, Bachelor’s degree in Cybersecurity, Equivalent applicable years of experience", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Description Work with a Top 20 CPA and advisory firm that Accounts for Anything. Aprio has 40 U.S. office locations, as well as international office locations and more than 3,200 team members that speak 60+ languages across the globe. By bringing together proven expertise, deep understanding, and strategic foresight for fast-growing industries, Aprio ensures clients are prepared for wherever life or business may take them. Discover a top-rated culture, vast growth opportunities and your next big career move with Aprio. Join Aprio's (Insert Team) team and you will help clients maximize their opportunities. Aprio is a progressive, fast-growing firm looking for a (Title) to join their dynamic team. ## What You'll Do You will own small-to-medium engineering projects end-to-end, configure and operate control sets without direct oversight, and partner closely with Senior and Principal engineers on the larger initiatives that cross multiple domains. You’re the engineer who can pick up a control implementation, deliver it, document it, and hand it off cleanly to operations. You’ll start to grow real depth in a domain you care about — identity, endpoint, vulnerability, cloud security, or logging — and you’ll be a working partner to Associate engineers on day-to-day execution. ## Key Responsibilities Project ownership: Take small-to-medium engineering projects end-to-end — scoping, design partnership with a Senior, build, test, deploy, document, and hand off to operations. Deliver them on time without surprises. Control implementation and operation: Configure and operate security controls across identity, network, cloud, endpoint, logging/monitoring, encryption/key management, and vulnerability management. Execute against approved patterns and standards. Domain depth: Develop deepening expertise in at least one control domain (e.g., endpoint, identity, vulnerability management, cloud security, IAM, monitoring). Become a real go-to on that domain for the team. Vulnerability and patch operations: Run vulnerability and patch workflows — scan, prioritize, remediate, validate. Track remediation against SLA and close the loop. Change support: Participate in change reviews, assess security impact for in-scope systems, implement approved changes, and validate post-change posture. Evidence and documentation: Produce clean operational documentation — runbooks, change records, evidence artifacts — that holds up under audit and peer review. Detection and response support: Partner with the SOC and Detection Engineering on logging coverage, telemetry quality, and the engineering pieces of response (access tooling, isolation capabilities, evidence capture). Associate mentorship: Pair with Associate engineers on day-to-day execution. Review their tickets, walk them through the toolset, and grow them toward independence. Automation and tooling: Contribute scripts and automation to reduce manual toil (validation checks, evidence collection, repeatable deployments) under the guidance of Senior+ engineers. ## What Success Looks Like First 30–60 days: Tooling and tenant familiarity is complete. You’re executing standard tasks (access requests, configuration changes, vuln workflows, evidence collection) on your own and logging clean work. By 90 days: You’ve owned at least one small-to-medium project end-to-end — a vulnerability project, a hardening change, a logging coverage gap, or a tool configuration — and the result is documented, evidenced, and handed off cleanly. By 6–12 months: You’re the go-to on at least one domain, you’re trusted to execute approved patterns without close oversight, Associate engineers are routinely paired with you, and you’re a working partner on at least one cross-team initiative led by a Senior or Principal engineer. ## Required Qualifications 3+ years in security engineering, cloud engineering, or security operations with hands-on responsibility for implementing controls. Strong fundamentals in at least one of: identity and access management, network segmentation, vulnerability management, cloud security, endpoint security, centralized logging. Experience with at least one major cloud platform (Azure, AWS, GCP) in an engineering capacity. Comfortable executing vulnerability and patch workflows (scan, prioritize, remediate, validate). Ability to write clear operational documentation — runbooks, evidence artifacts, change records. Strong collaboration skills across Security, IT, and delivery teams. Comfortable mentoring Associate Engineers on day-to-day work ## Preferred Qualifications Regulated-environment exposure (CMMC, NIST 800-171, FedRAMP-aligned, SOC 2, ISO 27001). Scripting / automation experience (Python, PowerShell, Bash); infrastructure-as-code familiarity a plus. Security certifications (Security+, SSCP, GSEC, AZ-500, AWS Security Specialty, or cloud/security engineering equivalents). Familiarity with incident-response procedures and evidence handling. Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field — or equivalent applicable years of experience ## Additional Information Why work for Aprio: Whether you are just starting out, looking to advance into management or searching for your next leadership role, Aprio offers an opportunity to grow with a future-focused, innovative firm. Perks/Benefits we offer for full-time team members: - Medical, Dental, and Vision Insurance on the first day of employment - Flexible Spending Account and Dependent Care Account - 401k with Profit Sharing - 9+ holidays and discretionary time off structure - Parental Leave – coverage for both primary and secondary caregivers - Tuition Assistance Program and CPA support program with cash incentive upon completion - Discretionary incentive compensation based on firm, group and individual performance - Incentive compensation related to origination of new client sales - Top rated wellness program - Flexible working environment including remote and hybrid options What’s in it for you: - Working with an industry leader: Be part of a high-growth firm that is passionate for what’s next. - An awesome culture: Thirty-one fundamental behaviors guide our culture every day ensuring we always deliver an exceptional team-member and client experience. We call it the Aprio Way. This shared mindset creates lasting relationships between team members and with clients. - A great team: Work with a high-energy, passionate, caring and ambitious team of professionals in a collaborative culture. - Entrepreneurship: Have the freedom to innovate and bring your ideas to help us grow to become the CPA firm of choice nationally. - Growth opportunities: Grow professionally in an environment that fosters continuous learning and advancement. - Competitive compensation: You will be rewarded with competitive compensation, industry-leading benefits and a flexible work environment to enjoy work/life balance. EQUAL OPPORTUNITY EMPLOYER Aprio is an Equal Opportunity Employer encouraging diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race; color; religion; national origin; sex; pregnancy; sexual orientation; gender identity and/or expression; age; disability; genetic information, citizenship status; military service obligations or any other category protected by applicable federal, state, or local law. Aprio, LLP and Aprio Advisory Group, LLC, operate in an alternative business structure, with Aprio Advisory Group, LLC providing non-attest tax and consulting services, and Aprio, LLP providing CPA firm services.", "summaryDescription" : "Cybersecurity Engineer at Aprio. Skills: Security Engineering, Cloud Security, Vulnerability Management, Identity Management. Own engineering projects end-to-end. Configure security controls", "postedDate" : "2026-06-08T21:15:48.001", "createdAt" : "2026-06-08T21:15:48.001", "lastUpdated" : "2026-06-15T00:36:53.772", "ingestTimestamp" : "2026-06-12T06:18:13.086", "mongoId" : "6a2a66e574d8ee00a062dc58", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 80000, "salaryAnnualMax" : 90000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Vulnerability scanning", "Patch remediation", "Access requests", "Configuration changes", "Logging coverage", "Tool configuration", "Hardening changes", "Mentoring", "Security Engineering", "Cloud Security", "Vulnerability Management", "Identity Management", "Project ownership", "Control implementation", "Domain depth", "Vulnerability operations", "Patch operations", "Change support", "Evidence production", "Documentation", "Detection support", "Response support", "Associate mentorship", "Automation", "Tooling", "Scoping", "Design partnership", "Build", "Test", "Deploy", "Document", "Handoff", "Identity", "Endpoint security", "Vulnerability management", "Cloud security", "Logging", "IAM", "Encryption", "Key management", "Security+", "SSCP", "GSEC", "AZ-500", "AWS Security Specialty" ], "skillCount" : 45, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 820.80896, "daysOld" : 6, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "CPA and advisory firm" }, { "id" : "6a2abe2074d8ee00a06ecaa5", "title" : "Cybersecurity – Information System Security Manager (ISSM)", "company" : "Boeing", "salary" : { "min" : 130900.0, "max" : 189750.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "USA - Tukwila, WA", "locations" : [ "USA - Tukwila, WA", "United States of America" ], "certifications" : [ "CISSP", "GSLC", "CISM" ], "timestamp" : "2026-06-14T22:56:40.272", "fingerprint" : "566d24a9b1613b4261fb0e46b5511e82a6599262bc813602cd9f602bcf153573", "source" : "workday", "language" : "en", "applyUrl" : "https://boeing.wd1.myworkdayjobs.com/external_subsidiary/job/USA---Tukwila-WA/Cybersecurity---Information-System-Security-Manager--ISSM-_JR2026514381-1", "externalId" : "JR2026514381", "locationPoint" : "47.47399,-122.26096", "structuredLocations" : [ { "city" : "Tukwila", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.4627356,-122.2559156" } ], "locationText" : "Tukwila, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceLevel" : "Manager", "technicalSkills" : "Cybersecurity, DFARS, NIST SP 800-171, CMMC, RMF, DAAPM, CNSSI 1253, ICD-503, JSIG, NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, HBSS", "professionalSkills" : [ "Risk management", "Program management", "Security governance", "Configuration management", "Incident response" ], "hardSkillsList" : [ "Security analysis", "Risk assessment", "Incident response", "Hardware inventory", "Software inventory" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Security analysis", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Hardware inventory", "level" : "intermediate" }, { "name" : "Software inventory", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Cybersecurity, DFARS, NIST SP 800-171, CMMC", "majorSkillsList" : [ "Cybersecurity", "DFARS", "NIST SP 800-171", "CMMC" ], "coreResponsibilities" : "Lead ISSOs performing cybersecurity governance, Perform security analysis, Assess compliance with standards, Oversee configuration management, Ensure security posture integrity, Lead staff with assessments, Document state of compliance, Conduct risk assessments, Execute risk mitigations, Oversee incident response, Conduct inventory assessments, Serve as organization spokesperson, Advise management on research, Interface with government customers, Implement protective mechanisms", "teamCollaboration" : "Program stakeholders; Government customers; Company personnel", "projectManagementSkills" : [ "Program management" ], "domainKnowledge" : "Controlled Unclassified Information (CUI); DFARS; NIST SP 800-171; CMMC; Risk Management Framework (RMF)", "domainList" : [ "controlled-unclassified-information-cui", "dfars", "nist-sp-800-171", "cmmc", "risk-management-framework-rmf" ], "domainSpecificKnowledge" : [ "Controlled Unclassified Information (CUI)", "DFARS", "NIST SP 800-171", "CMMC", "Risk Management Framework (RMF)" ], "toolProficiency" : [ "NESSUS", "ACAS", "DISA STIGs", "SCAP", "Audit Reduction", "HBSS" ], "communicationSkills" : "Technical research; Government interface", "documentationSkills" : "Security documentation; System Security Plans; POA&Ms", "problemSolvingSkills" : "Risk assessment; Remediation", "specialRequirements" : "U.S. Citizenship Required, U.S. Person required", "outcomesObjectives" : "Ensure continuous compliance; Protect CUI", "qualificationsBasic" : "IAM Level III certification, 5+ years RMF experience, 3+ years DFARS/NIST SP 800-171 controls, 3+ years CMMC requirements experience, U.S. Secret Security Clearance", "qualificationsPreferred" : "5+ years ISSO/ISSM experience, 5+ years RMF tool experience, 5+ years assessing compliance data", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Cybersecurity – Information System Security Manager (ISSM) **Company:** The Boeing Company Boeing Classified Cybersecurity is currently seeking a highly motivated **Cybersecurity – Information System Security Manager (ISSM)** to join the team in Mesa, AZ; El Segundo, CA; Huntington Beach, CA; or Tukwila, WA. The selected candidate will lead implementation and sustainment of DFARS/NIST SP 800-171 and Cybersecurity Maturity Model Certification (CMMC) controls for systems handling Controlled Unclassified Information (CUI), ensuring continuous compliance, risk management, and overall program management of a large portfolio of systems. The ISSM will develop and maintain security documentation (including System Security Plans and POA&Ms), coordinate audits and remediation with program stakeholders and assessors, and drive ongoing monitoring to protect CUI in accordance with DFARS 252.204-7012 and CMMC requirements. **Position Responsibilities:** * Leads a team of ISSOs performing cybersecurity governance work on CUI, DFARS, and CMMC systems * Performs security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards * Oversees configuration management of assigned systems; auditing systems to ensure security posture integrity * Leads staff with assessments and test/analysis data to document state of compliance with security requirements * Conducts risk assessments and investigations, execute appropriate risk mitigations, and oversee incident response activities * Conducts periodic hardware/software inventory assessments * Serves as organization spokesperson on advanced projects and programs * Acts as advisor to management and customers on advanced technical research studies * Interfaces with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements **Basic Qualifications (Required Skills/Experience):** * Currently hold certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM) * 5+ years of experience with cyber security policies and implementation of Risk Management Framework (RMF): e.g. DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series * 3+ years of experience implementing and sustaining Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012/National Institute of Standards and Technology (NIST) SP 800-171 controls and mapping to Cybersecurity Maturity Model Certification (CMMC) requirements **Preferred Qualifications (Desired Skills/Experience):** * 5+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs * 5+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS * 5+ years of experience assessing and documenting test or analysis data to show cyber security compliance **Conflict of Interest:** Successful candidates for this job must satisfy the Company’s Conflict of Interest (COI) assessment process. **Drug Free Workplace:** Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies _._ **Pay & Benefits:** At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities. The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements. Pay is based upon candidate experience and qualifications, as well as market and business considerations. Summary pay range: $130,900 - $189,750 **Language Requirements:** Not Applicable **Education:** Not Applicable **Relocation:** Relocation assistance is not a negotiable benefit for this position. **Export Control Requirement:** This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R. §120.62 is required. “U.S. Person” includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee. **Safety Sensitive:** This is not a Safety Sensitive Position. **Security Clearance:** This position requires an active U.S. Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active) **Visa Sponsorship:** Employer will not sponsor applicants for employment visa status. **Contingent Upon Award Program** This position is not contingent upon program award **Shift:** Shift 1 (United States of America) **Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud** \\- [Recruitment Fraud Warning](http://www.boeing.com/careers/recruitment-fraud-warning.page) Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law. [EEO is the law](http://www.boeing.com/resources/boeingdotcom/careers/footer/EEOIsTheLawPoster.pdf) [Boeing EEO Policy](https://tbcdn.talentbrew.com/company/185/v1_0/img/2018_Policy_Statement.pdf) [Request an Accommodation](http://www.boeing.com/careers/request-accommodation.page) [Applicant Privacy](http://www.boeing.com/careers/privacy-statement.page) **Boeing Participates in E – Verify** * [E-Verify (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterEnglish.pdf) * [E-Verify (Spanish) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterSpanish.pdf) **Right to Work Statement** * [Right to Work (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWEnglishversion.pdf) * [Right to Work (Spanish)](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWSpanishversion.pdf)", "summaryDescription" : "Cybersecurity – Information System Security Manager (ISSM) at Boeing. Skills: Cybersecurity, DFARS, NIST SP 800-171, CMMC. Lead ISSOs performing cybersecurity governance. Perform security analysis", "postedDate" : "2026-06-11T03:51:49.191", "createdAt" : "2026-06-12T03:51:49.136", "lastUpdated" : "2026-06-14T22:56:40.272", "ingestTimestamp" : "2026-06-12T03:51:49.136", "mongoId" : "6a2abe2074d8ee00a06ecaa5", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://boeing.wd1.myworkdayjobs.com/external_subsidiary/job/USA---Tukwila-WA/Cybersecurity---Information-System-Security-Manager--ISSM-_JR2026514381-1", "salaryAnnualMin" : 130900, "salaryAnnualMax" : 189750, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security analysis", "Risk assessment", "Incident response", "Hardware inventory", "Software inventory", "Leadership", "Cybersecurity", "DFARS", "NIST SP 800-171", "CMMC", "Risk management", "Program management", "Security governance", "Configuration management", "Controlled Unclassified Information (CUI)", "Risk Management Framework (RMF)", "CISSP", "GSLC", "CISM", "NESSUS", "ACAS", "DISA STIGs", "SCAP", "Audit Reduction", "HBSS" ], "skillCount" : 25, "jobCategory" : "engineering", "seniorityLevel" : "manager", "dataQualityScore" : 1.0, "_score" : 814.6972, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2a67ec74d8ee00a0631fcf", "title" : "DevOps Engineer (security)", "company" : "Onapsis", "industry" : "Technology", "salary" : { "min" : 120000.0, "max" : 180000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level DevOps Engineer in Bucharest, Romania, adjusted for the Cybersecurity industry and a mid-sized company." }, "location" : "Bucharest, Bucharest, Romania", "locations" : [ "Bucharest", "Bucharest", "Romania" ], "timestamp" : "2026-06-14T21:02:59.501", "fingerprint" : "b35c3f12bc9e2fe514088e8840ddc835b36cc86e3b28eca4fe3eaceb220132e7", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/onapsis/jobs/8582612002", "externalId" : "8582612002", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bucharest", "country" : "Romania", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "44.4361414,26.1026840" } ], "locationText" : "Bucharest, Romania", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Python, Bash, Git, GitLab, Docker, Kubernetes, AWS, Azure, GCP, Grafana, New Relic, OpenTelemetry", "professionalSkills" : [ "Shift-Left-On-Security", "Application security", "SDLC", "CI/CD", "DevSecOps", "Threat modeling", "Risk mitigation", "Vulnerability management", "Compliance automation", "Penetration testing", "Incident response", "Secure coding" ], "hardSkillsList" : [ "SAST", "DAST", "SCA", "OSS management", "Linux system administration", "Networking", "Access management", "Troubleshooting" ], "softSkillsList" : [ "Attention to detail", "Security-first mindset", "Continuous learning mindset" ], "hardSkills" : [ { "name" : "SAST", "level" : "intermediate" }, { "name" : "DAST", "level" : "intermediate" }, { "name" : "SCA", "level" : "intermediate" }, { "name" : "OSS management", "level" : "intermediate" }, { "name" : "Linux system administration", "level" : "intermediate" }, { "name" : "Networking", "level" : "intermediate" }, { "name" : "Access management", "level" : "intermediate" }, { "name" : "Troubleshooting", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Attention to detail" }, { "name" : "Security-first mindset" }, { "name" : "Continuous learning mindset" } ], "majorSkills" : "DevSecOps, Cybersecurity, Cloud Infrastructure, CI/CD", "majorSkillsList" : [ "DevSecOps", "Cybersecurity", "Cloud Infrastructure", "CI/CD" ], "coreResponsibilities" : "Embed automated security testing, Maintain automated security testing, Optimize automated security testing, Perform platform security assessments, Verify reported exploits, Support vulnerability remediation, Participate in security audits, Provide actionable feedback, Coordinate compliance timelines, Provision test environments, Configure test environments, Deploy target application builds, Coordinate secure access requirements, Evaluate security releases, Generate compliance reports, Support security monitoring, Support security observability, Conduct internal training, Advocate secure coding standards, Advocate DevSecOps best practices, Conduct threat modeling exercises, Identify vulnerabilities", "teamCollaboration" : "Engineering teams; Operations teams; InfoSec teams; Platform Engineering teams; Cross-functional teams", "projectManagementSkills" : [ "CI/CD pipelines" ], "domainKnowledge" : "Business applications; Cybersecurity; SAP; Oracle; Cloud-native architecture; ISO 27001/27002; NIST 800-53; PCI DSS; CIS Controls; SecOps", "domainList" : [ "business-applications", "cybersecurity", "sap", "oracle", "cloud-native-architecture", "iso-27001-27002", "nist-800-53", "pci-dss", "cis-controls", "secops" ], "domainSpecificKnowledge" : [ "Business applications", "Cybersecurity", "SAP", "Oracle", "Cloud-native architecture", "ISO 27001/27002", "NIST 800-53", "PCI DSS", "CIS Controls", "SecOps" ], "toolProficiency" : [ "GitLab", "Docker", "Kubernetes", "Grafana", "New Relic", "OpenTelemetry", "Terraform" ], "communicationSkills" : "Effective communication", "documentationSkills" : "Contribute to documentation", "continuousLearning" : "Continuous learning mindset; Willingness to share knowledge; Support team growth", "problemSolvingSkills" : "Analytical thinking; Problem-solving skills; Troubleshoot issues", "qualificationsBasic" : "Cybersecurity Expertise (2+ Years), Shift-Left-On-Security frameworks, Application security testing methodologies, SAST, DAST, SCA, OSS management, Threat Modeling exercises, Secure code reviews, DevOps practices, Cloud Technologies, Software Development Lifecycle (SDLC), Version Control tools, CI/CD (Git/GitLab), Containerization, Orchestration, Docker, Kubernetes, Linux system administration, Scripting language (Python, Bash), Communication, Collaboration, Managing priorities, Handling operational pressure, Escalating risks or blockers, Continuous improvement initiatives, Analytical thinking, Problem-solving skills, Attention to detail, Security-first mindset", "qualificationsPreferred" : "Knowledge of compliance and auditing standards (ISO 27001/27002, NIST 800-53, PCI DSS, CIS Controls), Active SecOps experience, Exposure to Infrastructure as Code (IaC), Terraform", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "About the job The world’s most critical--and at-risk--business applications have been neglected for far too long. Onapsis eliminates this blind spot by providing cybersecurity solutions dedicated to business-critical applications. Onapsis helps nearly 30% of the Forbes Global 100 understand the threats and risks across their SAP and Oracle landscapes, whether running on-premises, in the cloud, or in a hybrid environment. We are looking for self-motivated and enthusiastic DevSecOps Engineer who want to impact cybersecurity by continuing to advance, maintain, and enhance our platform features in Threat Detection & Response, Vulnerability Management, and Compliance Automation. What you will be doing, your legacy: Working closely with leadership, product management, and our Engineering and Operations teams to design and implement security-focused capabilities across the SDLC using Shift-Left-On-Security principles. This role partners with InfoSec, Technical Operations, and Platform Engineering teams to ensure CI/CD frameworks, infrastructure, and automation tooling are secure by design, resilient, and capable of protecting our customers at scale. Key Responsibilities: Security Automation & CI/CD: Embed, maintain, and optimize automated security testing (SAST, DAST, SCA) directly into GitLab CI/CD pipelines. Vulnerability & Patch Management: Perform platform security assessments, verify reported exploits, and support vulnerability remediation activities. Security Compliance: Participate in security audits, provide actionable feedback, and coordinate with engineering teams to meet compliance timelines and regulatory standards. Penetration Testing Enablement: Provision and configure isolated test environments, deploy target application builds, and coordinate secure access requirements for penetration testing activities. Security Operations & Incident Response: Collaborate with cross-functional teams to evaluate security releases, generate compliance reports, and support security monitoring/observability using Grafana, New Relic, or OpenTelemetry. Security Advocacy: Conduct internal software security training and advocate for secure coding standards and DevSecOps best practices across engineering teams. Threat Modeling & Risk Mitigation: Conduct threat modeling exercises for new features and infrastructure changes to identify vulnerabilities before code hits production. Requirements: Cybersecurity Expertise (2+ Years) Hands-on experience implementing Shift-Left-On-Security frameworks within the SDLC. Practical knowledge of application security testing methodologies, specifically SAST, DAST, SCA, and OSS management. Experience conducting Threat Modeling exercises and performing secure code reviews. Awareness of penetration testing (blackbox, whitebox) methods Plus: Knowledge of compliance and auditing standards (ISO 27001/27002, NIST 800-53, PCI DSS, CIS Controls) or active SecOps experience. DevOps & Cloud Infrastructure (1+ Years) Proven experience in DevOps practices utilizing Cloud Technologies (AWS preferred, Azure, GCP) Good understanding of the Software Development Lifecycle (SDLC), its phases and how to embed Security in each of them Experience in Version Control tools and CI/CD (Git/GitLab), including branching, and pipeline development. Knowledge of containerization and orchestration using Docker and Kubernetes. Linux system administration skills, including networking, access management, and basic troubleshooting skills. Expertise in a scripting language (e.g., Python, Bash). Plus: Exposure toInfrastructure as Code (IaC), specifically Terraform. Soft Skills Demonstrated effective communication and collaboration across Engineering, Security, SRE, and cross-functional teams to support delivery and operational objectives Experience managing priorities, handling operational pressure, and escalating risks or blockers when needed. Identifies and supports continuous improvement initiatives. Demonstrated analytical thinking and problem-solving skills to troubleshoot operational, infrastructure, and security-related issues in a structured manner Strong attention to detail and a security-first mindset when working with CICD pipelines, infrastructure, automation, and cloud environments Continuous learning mindset with willingness to share knowledge, contribute to documentation, and support team growth What we offer: A role in shaping the future of protecting the most critical applications that run the world's business and a career that grows as the company grows. A unique culture of high achievement and teamwork. Supportive and humble colleagues are the space's top problem solvers and innovators. Financial security through competitive compensation and incentives. Employment: Please note that this is a full-time employee role. No B2B or SRLs will be accommodated. Location: Onapsis has established a new development center in Bucharest. This is a hybrid role (2 days per week from the office), so candidates must be commutable to Bucharest. About Onapsis: Onapsis protects the business applications that run the global economy. The Onapsis Platform delivers vulnerability management, change assurance, and continuous compliance for business applications from leading vendors such as SAP, Oracle, and others. The Onapsis Platform is powered by the Onapsis Research Labs, the team responsible for the discovery and mitigation of more than 1,000 zero-day vulnerabilities in business applications. Onapsis is headquartered in Boston, MA, with offices in Dallas, TX, Heidelberg, Germany, Bucharest, Romania, and Buenos Aires, Argentina, and proudly serves hundreds of the world’s leading brands, including close to 30% of the Forbes Global 100, six of the top 10 automotive companies, five of the top 10 chemical companies, four of the top 10 technology companies, and three of the top 10 oil and gas companies. Onapsis only invites candidates to apply directly through reputable job boards or the Onapsis careers page on our website. Job offers are extended only after a face-to-face video interview with an Onapsis HR representative. Please disregard any outreach from Onapsis via forums, social networks, or other platforms, as these are fraudulent. For more information, connect with Onapsis on LinkedIn or visit https://www.onapsis.com. #LI-AC1 #Hybrid", "summaryDescription" : "DevOps Engineer (security) at Onapsis. Skills: DevSecOps, Cybersecurity, Cloud Infrastructure, CI/CD. Embed automated security testing. Maintain automated security testing", "postedDate" : "2026-06-11T21:23:35.209", "createdAt" : "2026-06-11T21:23:35.209", "lastUpdated" : "2026-06-14T21:02:59.501", "ingestTimestamp" : "2026-06-11T21:23:35.209", "mongoId" : "6a2a67ec74d8ee00a0631fcf", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "SAST", "DAST", "SCA", "OSS management", "Linux system administration", "Networking", "Access management", "Troubleshooting", "Attention to detail", "Security-first mindset", "Continuous learning mindset", "DevSecOps", "Cybersecurity", "Cloud Infrastructure", "CI/CD", "Shift-Left-On-Security", "Application security", "SDLC", "Threat modeling", "Risk mitigation", "Vulnerability management", "Compliance automation", "Penetration testing", "Incident response", "Secure coding", "CI/CD pipelines", "Business applications", "SAP", "Oracle", "Cloud-native architecture", "ISO 27001/27002", "NIST 800-53", "PCI DSS", "CIS Controls", "SecOps", "GitLab", "Docker", "Kubernetes", "Grafana", "New Relic", "OpenTelemetry", "Terraform" ], "skillCount" : 42, "jobCategory" : "engineering", "jobSubcategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 812.9635, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "69fafb014c40e2acd187ecb5", "title" : "CENSUS Cybersecurity Engineering Internship Program: Learn. Hack. Secure!", "company" : "CENSUS SA", "industry" : "Cybersecurity", "salary" : { "min" : 20000.0, "max" : 30000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an entry-level cybersecurity internship in the United Kingdom, adjusted for remote work and the specific industry." }, "location" : "London, GB", "locations" : [ "London", "GB" ], "timestamp" : "2026-06-15T08:35:40.757", "fingerprint" : "ed613e56d05274fecaa8a64051b221dd717e457f333d605e4235c152aaa1c98c", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://census.breezy.hr/p/4a97b4e52a7f01-census-cybersecurity-engineering-internship-program-learn-hack--secure-united-kingdom-remote", "externalId" : "4a97b4e52a7f01", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United Kingdom", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 0, "experienceMaxYears" : 2, "experienceLevel" : "Entry", "coreResponsibilities" : "Learn cybersecurity engineering, Hack ethically, Secure systems", "domainKnowledge" : "Cybersecurity engineering", "domainList" : [ "cybersecurity-engineering" ], "domainSpecificKnowledge" : [ "Cybersecurity engineering" ], "continuousLearning" : "Learn cybersecurity engineering", "innovationCreativity" : "Hack ethically", "qualificationsBasic" : "Right to work in UK", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "The internship is expected to start in July 2026 and will run for 6 months, with a full-time schedule (8 hours per day). You must have the right to work in the UK to apply for this role. \uD83D\uDD0E Are you a tech enthusiast who loves breaking things (ethically, of course!) to understand how they work? Do", "summaryDescription" : "CENSUS Cybersecurity Engineering Internship Program: Learn. Hack. Secure! at CENSUS SA. Learn cybersecurity engineering. Hack ethically", "createdAt" : "2026-06-14T00:54:39.487", "lastUpdated" : "2026-06-15T08:35:40.757", "ingestTimestamp" : "2026-06-14T00:54:39.487", "mongoId" : "69fafb014c40e2acd187ecb5", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Cybersecurity engineering" ], "skillCount" : 1, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Entry", "dataQualityScore" : 0.8888889, "_score" : 810.04504, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.95 }, { "id" : "6a25e74674d8ee00a01e2292", "title" : "Cybersecurity Intern, Security Operations", "company" : "BD", "industry" : "Medical Technology", "salary" : { "min" : 26.0, "max" : 33.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "United States of America", "locations" : [ "United States of America" ], "timestamp" : "2026-06-11T20:08:20.366", "fingerprint" : "b657463d2f285f835f916fd1adc3dea626d0d2ec05dff43a0f7cb90bf3b7a1b5", "source" : "workday", "language" : "en", "applyUrl" : "https://bdx.wd1.myworkdayjobs.com/EXTERNAL_CAREER_SITE_USA/job/USA-NJ---Franklin-Lakes/Cybersecurity-Intern--Security-Operations---SkillBridge-Eligible_R-547194-1", "externalId" : "R-547194", "industryFunction" : { }, "locationPoint" : "51.43667,5.97917", "structuredLocations" : [ { "city" : "Franklin Lakes", "state" : "New Jersey", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "41.0167639,-74.2057012" } ], "locationText" : "Franklin Lakes, New Jersey, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 0, "experienceMaxYears" : 2, "experienceLevel" : "Entry", "coreResponsibilities" : "Monitor security events, Analyze security events, Monitor security incidents, Analyze security incidents, Hunt for threats, Identify potential security threats, Support incident response efforts, Investigate incidents, Contain incidents, Remediate incidents, Research emerging threats, Research emerging vulnerabilities, Develop security operations policies, Implement security operations policies, Develop security operations procedures, Implement security operations procedures, Collaborate with team members, Improve security posture, Improve incident response capabilities", "teamCollaboration" : "Team-based incident response; Improve security posture", "domainKnowledge" : "Cybersecurity operations", "domainList" : [ "cybersecurity-operations" ], "domainSpecificKnowledge" : [ "Cybersecurity operations" ], "qualificationsBasic" : "High School Diploma or GED, Analyze security data, Conduct basic threat hunting, Research emerging vulnerabilities, Collaboration skills, Communication skills, Support incident response, Contribute to security policies", "qualificationsPreferred" : "Foundational understanding of cybersecurity operations, Security event monitoring, Threat detection, Incident response processes", "remoteFriendly" : true, "workSiteFlexibility" : "Onsite", "rawDescription" : "## **We are the people who give possibilities purpose** BD is one of the largest global medical technology companies in the world. Advancing the world of health™ is our Purpose, and it’s no small feat. It takes the imagination and passion of all of us—from design and engineering to the manufacturing and marketing of our billions of MedTech products per year—to look at the impossible and find transformative solutions that turn dreams into possibilities. # Job Description This **role is considering all qualified candidates, including transitioning service members**. The**BD SkillBridge Fellowship Program** provides opportunities for transitioning service members to gain valuable civilian work experience through individual Fellowships during their last 6 months of service, for up to 180 days. **SkillBridge** participants are not eligible for compensation or benefits from BD, as they continue to receive military compensation and benefits as active-duty service members. After successful completion of the program, there may be an opportunity to be considered for a full-time position, depending on business needs. **SkillBridge Requirement:** * Must meet all Department of Defense SkillBridge Eligibility requirements and be approved to participate in the SkillBridge program with your military installation command. **Location requirements:** This is an in-office role based in Franklin Lakes, NJ. SkillBridge participants may work remotely during the fellowship, with the expectation that they can transition to an in-office schedule in Franklin Lakes, NJ if hired full-time. We are seeking a motivated and enthusiastic Cybersecurity Intern to join our Cyber Fusion Center (CFC) team. The intern will assist in threat hunting, incident response (IR), and other cybersecurity activities. This is an excellent opportunity for someone looking to gain hands-on experience in the field of cybersecurity. This role is considering all qualified candidates, including transitioning service members. **Responsibilities** : * Assist in monitoring and analyzing security events and incidents. * Participate in threat hunting activities to identify potential security threats. * Support incident response efforts, including investigation, containment, and remediation. * Conduct research on emerging cybersecurity threats and vulnerabilities. * Assist in the development and implementation of security operations policies and procedures. * Collaborate with other team members to improve security posture and incident response capabilities. **Required Qualification(s):** * High School Diploma or GED * Ability to analyze security data and conduct basic threat hunting and research on emerging vulnerabilities * Strong collaboration and communication skills to support team-based incident response and contribute to security policies and procedures **Preferred Skills/Experience:** * Foundational understanding of cybersecurity operations, including security event monitoring, threat detection, and incident response processes, preferred At BD, we prioritize on-site collaboration because we believe it fosters creativity, innovation, and effective problem-solving, which are essential in the fast-paced healthcare industry. For most roles, we require a minimum of 4 days of in-office presence per week to maintain our culture of excellence and ensure smooth operations, while also recognizing the importance of flexibility and work-life balance. Remote or field-based positions will have different workplace arrangements which will be indicated in the job posting. For certain roles at BD, employment is contingent upon the Company’s receipt of sufficient proof that you are fully vaccinated against COVID-19. In some locations, testing for COVID-19 may be available and/or required. Consistent with BD’s Workplace Accommodations Policy, requests for accommodation will be considered pursuant to applicable law. #earlycareer # Why Join Us? To find purpose in the possibilities, we need people who can see the bigger picture, who understand the human story that underpins everything we do. We welcome people with the imagination and drive to help us reinvent the future of healthcare. At BD, you’ll discover a culture in which you can learn, grow and thrive. We believe that when people connect in person, we learn faster, collaborate more deeply, and build a stronger culture. Join us and enjoy a culture where face-to-face collaboration supports your learning, your progress, and your success. **To learn more about BD visit**[ _https://bd.com/careers_](https://bd.com/careers). Becton, Dickinson, and Company is an Equal Opportunity Employer. We evaluate applicants without regard to race, color, religion, age, sex, creed, national origin, ancestry, citizenship status, marital or domestic or civil union status, familial status, affectional or sexual orientation, gender identity or expression, genetics, disability, military eligibility or veteran status, and other legally protected characteristics. Required Skills Optional Skills . # Primary Work Location USA NJ - Franklin Lakes # Additional Locations USA NC - Durham - Roche Drive # Work Shift At BD, we reward, support and develop our associates through our comprehensive Total Rewards program. We are committed to attracting and retaining high quality talent by providing reward and recognition opportunities that promote a performance-based culture, as well as a competitive package of compensation and benefits programs. You can learn more on our career site under \"[_Our Commitment to You_](https://jobs.bd.com/en/your-career-at-BD).\" Our salary or hourly rate ranges reward associates fairly and competitively. We regularly review these ranges and factors, such as location, contribute to the range displayed. Our pay is based on the role and the necessary skills and education to perform it successfully. The salary or hourly rate offered is determined by the role's specific requirements, including any applicable step rate pay system at the work location. Salary or hourly pay ranges are influenced by labor laws and Collective Bargaining Agreement (CBA) requirements applicable to the work location which may also affect the workplace arrangement of the role. **Salary Range Information** $26.00 - $33.00 USD Hourly", "summaryDescription" : "Cybersecurity Intern, Security Operations at BD. Monitor security events. Analyze security events", "postedDate" : "2026-06-09T10:01:54.763", "createdAt" : "2026-06-11T10:01:54.608", "lastUpdated" : "2026-06-11T20:08:20.366", "ingestTimestamp" : "2026-06-11T10:01:54.608", "mongoId" : "6a25e74674d8ee00a01e2292", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://bdx.wd1.myworkdayjobs.com/EXTERNAL_CAREER_SITE_USA/job/USA-NJ---Franklin-Lakes/Cybersecurity-Intern--Security-Operations---SkillBridge-Eligible_R-547194-1", "salaryAnnualMin" : 54080, "salaryAnnualMax" : 68640, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "Cybersecurity operations" ], "skillCount" : 1, "jobCategory" : "engineering", "seniorityLevel" : "junior", "dataQualityScore" : 1.0, "_score" : 809.98816, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Medical Technology" }, { "id" : "6a2a8a7474d8ee00a0681f4d", "title" : "Product Security Engineer", "company" : "Tapestry Solutions", "industry" : "Defense", "salary" : { "min" : 106000.0, "max" : 135900.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "USA - Hazelwood, MO", "locations" : [ "USA - Hazelwood, MO", "United States of America" ], "timestamp" : "2026-06-13T08:16:37.707", "fingerprint" : "24185149a9c72c8036325e7d28aeab67158c0428e4a8869d74e7f2049cd80c0d", "source" : "workday", "language" : "en", "applyUrl" : "https://boeing.wd1.myworkdayjobs.com/EXTERNAL_CAREERS/job/USA---Hazelwood-MO/Product-Security-Engineer_JR2026511463-1", "externalId" : "JR2026511463", "industryFunction" : { }, "locationPoint" : "35.46871,-83.00403", "structuredLocations" : [ { "city" : "Hazelwood", "state" : "Missouri", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.7761446,-90.3715909" } ], "locationText" : "Hazelwood, Missouri, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid-Tier", "technicalSkills" : "PowerShell, Batch, Bash, RedHat Enterprise Linux", "professionalSkills" : [ "Product security", "Information security", "Data protection", "Regulatory compliance", "Cybersecurity controls" ], "hardSkillsList" : [ "System administration", "Scripting", "Cybersecurity implementation" ], "hardSkills" : [ { "name" : "System administration", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Cybersecurity implementation", "level" : "intermediate" } ], "majorSkills" : "Product security, Cybersecurity, Regulatory compliance", "majorSkillsList" : [ "Product security", "Cybersecurity", "Regulatory compliance" ], "coreResponsibilities" : "Lead development of product security, Lead implementation of product security, Lead sustainment of product security, Lead development of system requirements, Lead enhancement of system requirements, Ensure security of facilities, Ensure security of equipment, Ensure security of tools, Ensure security of data, Ensure security of networks, Ensure security of resources, Lead definition of supplier requirements, Lead identification of supplier requirements, Lead coordination with governments, Lead coordination with customers, Lead coordination with suppliers, Lead coordination with industry, Lead research and development, Lead development of innovative solutions, Advise customers on product security, Advise customers on certification, Advise on security consequences of modifying products", "domainKnowledge" : "Product security; Information security; Data protection; Cybersecurity; DoD 8140", "domainList" : [ "product-security", "information-security", "data-protection", "cybersecurity", "dod-8140" ], "domainSpecificKnowledge" : [ "Product security", "Information security", "Data protection", "Cybersecurity", "DoD 8140" ], "innovationCreativity" : "Innovative solutions", "problemSolvingSkills" : "Investigating security incidents; Resolving security incidents; Assessing configurations; Implementing security controls", "specialRequirements" : "Active U. S. Secret Clearance, Ability to travel up to 30%, Ability to obtain TS/SCI", "qualificationsBasic" : "Bachelor's Degree, Active U. S. Secret Clearance, Ability to travel up to 30%, Meet DoD 8140 Program Foundational qualifications, Experience with Microsoft Windows operating systems, Working knowledge of PowerShell, Working knowledge of Batch scripting, Working knowledge of Bash scripting, Experience in cybersecurity controls, Experience in cybersecurity processes, Experience in cybersecurity procedures", "qualificationsPreferred" : "5+ years of related work experience, 9+ years of directly related work experience, 13+ years of related, relevant experience, Experience with RedHat Enterprise Linux, Working knowledge of virtualization clusters, Working knowledge of Storage Area Networks (SAN), Experience with DoD STIG review process", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Product Security Engineer **Company:** Tapestry - G0G Tapestry Solutions, A Boeing Company, brings over 30 years of industry experience designing, implementing, training, and supporting high-quality, cost-effective information technology and business intelligence solutions. With a dedicated team of approximately 500 professionals, we proudly serve 75 defense, commercial, and government clients across more than 50 U.S. locations and 9 countries worldwide. As a trusted partner, our employees embody our core values by consistently delivering excellence, taking full ownership, and developing innovative solutions that enable critical missions and ensure the safety of our global customers and team members. Joining Tapestry Solutions means enjoying the best of both worlds: access to the vast resources of Boeing combined with the agility and people-focused, family-oriented culture of a small business where your contributions truly matter. Tapestry Solutions, a part of Boeing Global Services (BGS), is seeking a **Product Security Engineer** in **Hazelwood, MO** for the Department of Navy Tomahawk Land-Attack Missile program. The Tomahawk program continues to grow and expand as a relevant deterrent against adversaries across the globe and is employed by multiple military organizations. This program is expected to remain in active service for the foreseeable future. The successful candidate for the role of Mid-Tier Product Security Engineer will play a crucial role in supporting the development, deployment, and maintenance of computing and information security requirements for the Tomahawk program, while adhering to strict government regulations. You will have the opportunity to shape and guide compliance, information security, and data protection requirements, ensuring the highest level of protection. Your expertise will be instrumental in assessing the acceptability of unique configurations and implementing robust security controls. Additionally, you will be responsible for investigating and resolving security incidents, actively participating in security policy assessments and audits, and effectively managing regulatory compliance in the dynamic field of cybersecurity. **Position Responsibilities:** * Leads development, implementation, and sustainment of product security and resiliency throughout the requirements, design, build, test, production, operations, and support lifecycle. * Leads the development and enhancement of system requirements and architectures for product security to meet all applicable certification and customer requirements. * Ensures security of facilities, equipment, tools, data, networks, and resources used for product: design, development, build, test, storage, delivery, operations, and support. * Leads the definition and identification of product security requirements for suppliers of components and subsystems for integration into complex Boeing products and services. * Leads coordination with governments, customers, suppliers, and industry to identify risks and improve industry and regulatory security standards and requirements for programs and interfacing systems. * Leads research and development activities resulting in innovative solutions. * Leads the advisement of customers on maintaining product security and certification, including security consequences of modifying products and services. **Basic Qualifications (Required Skills/Experience):** * Bachelor’s Degree * Active U.S. Secret Clearance with the ability to obtain TS/SCI * Ability to travel up to 30% of the time to support customers at domestic and international locations * Ability to meet DoD 8140 Program Foundational qualifications * Experience with the installation, configuration, maintenance, and administration of Microsoft Windows operating systems * Working knowledge of PowerShell, Batch, and Bash scripting * Experience in all aspects of design and implementation of cybersecurity controls, processes, and procedures **Preferred Qualifications (Desired Skills/Experience):** * Bachelor of Science degree from an accredited course of study in engineering, engineering technology (includes manufacturing engineering technology), chemistry, physics, mathematics, data science, or computer science and 5+ years of related work experience OR Bachelor’s Degree and 9+ years of directly related work experience OR 13+ years of related, relevant experience * Experience with the installation, configuration, and maintenance of RedHat Enterprise Linux * Working knowledge of highly available virtualization clusters and Storage Area Networks (SAN) * Experience with the DoD Security Technical Implementation Guide (STIG) review process **Drug Free Workplace:** We are a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies. **Pay & Benefits:** We strive to deliver a total rewards package that will attract, engage and retain the top talent. Elements of this package include competitive base pay and variable compensation opportunities. We also provide eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location and date of hire. Pay is based upon candidate experience and qualifications, as well as market and business considerations. Summary base pay $106,000 - $135,900 **Language Requirements:** Not Applicable **Education:** Bachelor's Degree or Equivalent **Relocation:** Relocation assistance is not a negotiable benefit for this position. **Export Control Requirement:** This is not an Export Control position. **Safety Sensitive:** This is not a Safety Sensitive Position. **Security Clearance:** This position requires an active U.S. Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active) **Visa Sponsorship:** Employer will not sponsor applicants for employment visa status. **Contingent Upon Award Program** This position is not contingent upon program award **Shift:** Shift 1 (United States of America) **Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud** \\- [Recruitment Fraud Warning](http://www.boeing.com/careers/recruitment-fraud-warning.page) Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law. [EEO is the law](http://www.boeing.com/resources/boeingdotcom/careers/footer/EEOIsTheLawPoster.pdf) [Boeing EEO Policy](https://tbcdn.talentbrew.com/company/185/v1_0/img/2018_Policy_Statement.pdf) [Request an Accommodation](http://www.boeing.com/careers/request-accommodation.page) [Applicant Privacy](http://www.boeing.com/careers/privacy-statement.page) **Boeing Participates in E – Verify** * [E-Verify (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterEnglish.pdf) * [E-Verify (Spanish) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterSpanish.pdf) **Right to Work Statement** * [Right to Work (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWEnglishversion.pdf) * [Right to Work (Spanish)](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWSpanishversion.pdf)", "summaryDescription" : "Product Security Engineer at Tapestry Solutions. Skills: Product security, Cybersecurity, Regulatory compliance. Lead development of product security. Lead implementation of product security", "postedDate" : "2026-06-11T16:12:04.283", "createdAt" : "2026-06-11T16:12:04.244", "lastUpdated" : "2026-06-13T08:16:37.707", "ingestTimestamp" : "2026-06-11T16:12:04.244", "mongoId" : "6a2a8a7474d8ee00a0681f4d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://boeing.wd1.myworkdayjobs.com/EXTERNAL_CAREERS/job/USA---Hazelwood-MO/Product-Security-Engineer_JR2026511463-1", "salaryAnnualMin" : 106000, "salaryAnnualMax" : 135900, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "System administration", "Scripting", "Cybersecurity implementation", "Product security", "Cybersecurity", "Regulatory compliance", "Information security", "Data protection", "Cybersecurity controls", "DoD 8140" ], "skillCount" : 10, "jobCategory" : "engineering", "seniorityLevel" : "mid", "dataQualityScore" : 1.0, "_score" : 809.03674, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Defense" }, { "id" : "6a2c7aa874d8ee00a0946467", "title" : "Cybersecurity Researcher", "company" : "Two Six Technologies", "industry" : "Cybersecurity", "salary" : { "min" : 115000.0, "max" : 165000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Researcher in Herndon, United States, adjusted for industry and company size." }, "location" : "13865 Sunrise Valley Dr Herndon, VA", "locations" : [ "13865 Sunrise Valley Dr Herndon", "VA" ], "timestamp" : "2026-06-15T07:47:09.850", "fingerprint" : "63adf0c832c2254fc9ca8494e1cb9602f4f2fad1cad24d03ae6e85bfeb1aa252", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/twosixtechnologies/jobs/6018909004", "externalId" : "6018909004", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" } ], "locationText" : "Herndon, Virginia, United States", "minimumEducation" : "Bachelor's", "technicalSkills" : "C/C++, Python, Linux, ARM, MIPS, PowerPC, RTOS, QEMU, SDR", "professionalSkills" : [ "Vulnerability research", "Firmware analysis", "Exploit development", "Binary obfuscation", "Anti-analysis techniques", "Wireless protocols", "Radio signal analysis", "File system forensics", "Fault injection" ], "hardSkillsList" : [ "Embedded systems", "Wireless security", "Firmware analysis", "Vulnerability research", "Exploit development", "Radio signal analysis", "Digital signal processing", "RF signal processing", "Side-channel analysis" ], "hardSkills" : [ { "name" : "Embedded systems", "level" : "intermediate" }, { "name" : "Wireless security", "level" : "intermediate" }, { "name" : "Firmware analysis", "level" : "intermediate" }, { "name" : "Vulnerability research", "level" : "intermediate" }, { "name" : "Exploit development", "level" : "intermediate" }, { "name" : "Radio signal analysis", "level" : "intermediate" }, { "name" : "Digital signal processing", "level" : "intermediate" }, { "name" : "RF signal processing", "level" : "intermediate" }, { "name" : "Side-channel analysis", "level" : "intermediate" } ], "majorSkills" : "Reverse engineering, Embedded systems, Vulnerability research, Firmware analysis", "majorSkillsList" : [ "Reverse engineering", "Embedded systems", "Vulnerability research", "Firmware analysis" ], "coreResponsibilities" : "Reverse engineer wireless systems, Reverse engineer embedded systems, Identify vulnerabilities, Assess security impact, Develop proof-of-concept exploits, Analyze firmware, Analyze software protections, Analyze wireless protocols, Uncover security flaws, Utilize custom tools, Develop custom tools, Analyze binaries, Manipulate binaries, Collaborate with CNO developers, Collaborate with vulnerability researchers, Collaborate with hardware engineers, Solve complex technical challenges", "teamCollaboration" : "Fast-paced small-team environment; CNO developers; Vulnerability researchers; Hardware engineers", "projectManagementSkills" : [ "DevOps best practices" ], "domainKnowledge" : "Embedded systems; Wireless security; Firmware analysis; RTOS; Secure boot mechanisms; Digital signal processing; RF signal processing; Side-channel analysis", "domainList" : [ "embedded-systems", "wireless-security", "firmware-analysis", "rtos", "secure-boot-mechanisms", "digital-signal-processing", "rf-signal-processing", "side-channel-analysis" ], "domainSpecificKnowledge" : [ "Embedded systems", "Wireless security", "Firmware analysis", "RTOS", "Secure boot mechanisms", "Digital signal processing", "RF signal processing", "Side-channel analysis" ], "toolProficiency" : [ "IDA Pro", "Binary Ninja", "Ghidra", "QEMU", "JTAG/SWD" ], "continuousLearning" : "Professional development", "innovationCreativity" : "Innovative proof-of-concept exploits", "problemSolvingSkills" : "Solve complex technical challenges", "specialRequirements" : "Active TS/SCI, TS/SCI security clearance, Active Top Secret Clearance, E-Verify", "qualificationsBasic" : "Bachelor's degree in Computer Science, Equivalent practical experience, Proficient with C/C++, Proficient with Python, Proficient with Linux command-line, Experience with reverse engineering, Experience with vulnerability research", "qualificationsPreferred" : "Scripting with Binary Ninja API, Scripting with Ghidra, Embedded software development, Experience with C/C++ for RTOS, Experience with C/C++ for Linux, Client-facing experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "At Two Six Technologies, we build, deploy, and implement innovative products that solve the world’s most complex challenges today. Through unrivaled collaboration and unwavering trust, we push the boundaries of what’s possible to empower our team and support our customers in building a safer global future. Overview of Opportunity Join the Trusted Electronics & Effects team at Two Six Technologies in Herndon, Virginia, where we push the boundaries of software and firmware reverse engineering to uncover vulnerabilities in wireless and embedded systems. As part of our elite team of security researchers, you’ll work alongside CNO developers and hardware engineers, conducting cutting-edge vulnerability research on complex, real-world targets. Our government customers rely on us to deliver mission-critical security solutions, and we’re looking for a Software Reverse Engineer who thrives on reverse engineering embedded systems, discovering security weaknesses, and developing innovative proof-of-concept exploits. If you’re passionate about wireless security, embedded firmware analysis, and making an impact on national security, we want you on our team. What you will do: Reverse engineer wireless and embedded systems, identifying vulnerabilities and assessing their security impact. Develop proof-of-concept exploits for discovered vulnerabilities following DevOps best practices for keeping code bases organized and maintainable. Analyze firmware, software protections, and wireless protocols to uncover security flaws. Utilize and develop custom tools to analyze and manipulate software/firmware binaries. Collaborate closely with CNO developers, vulnerability researchers, and hardware engineers in a fast-paced, small-team environment. Solve complex technical challenges with no predefined solutions. What You’ll Need (Basic Qualifications): Bachelor’s (or higher) degree in Computer Science, Computer/Electrical Engineering, or a related field (or equivalent practical experience). Proficient with programming/scripting languages such as C/C++, Python, and Linux command-line environments. Experience with reverse engineering and vulnerability research, using tools such as IDA Pro, Binary Ninja, or Ghidra. Expertise in one or more of the following: Firmware analysis (ARM, MIPS, PowerPC, RTOS). Firmware rehosting using emulation tools such as QEMU Fuzzing and exploit development. Binary obfuscation and anti-analysis techniques. Wireless protocols and radio signal analysis. File system forensics and fault injection frameworks. Nice to Have (Preferred): Experience scripting with Binary Ninja API or Ghidra. Experience in embedded software development using C/C++ for RTOS or Linux environments. Knowledge of cryptographic security and secure boot mechanisms. Hands-on experience working with hardware debugging tools, JTAG/SWD, or software-defined radio (SDR) frameworks. Familiarity with digital signal processing, wireless security protocols, RF signal processing, and side-channel analysis. Client-facing experience in technical roles. Active TS/SCI with Polygraph preferred. Security Clearance: Active Top Secret Clearance is required with the ability to obtain and maintain a TS/SCI security clearance Two Six Technologies is committed to providing competitive and comprehensive compensation packages that reflect the value we place on our employees and their contributions. We believe in rewarding skills, experience, and performance. Our offerings include but are not limited to, medical, dental, and vision insurance, life and disability insurance, retirement benefits, paid leave, tuition assistance and professional development. The projected salary range listed for this position is annualized. This is a general guideline and not a guarantee of salary. Salary is one component of our total compensation package and the specific salary offered is determined by various factors, including, but not limited to education, experience, knowledge, skills, geographic location, as well as contract specific affordability and organizational requirements. Salary Range $113,936—$163,473 USD Looking for other great opportunities? Check out Two Six Technologies Opportunities for all our Company’s current openings! Ready to make the first move towards growing your career? If so, check out the Two Six Technologies Candidate Journey! This will give you step-by-step directions on applying, what to expect during the application process, information about our rich benefits and perks along with our most frequently asked questions. If you are undecided and would like to learn more about us and how we are contributing to essential missions, check out our Two Six Technologies News page! We share information about the tech world around us and how we are making an impact! Still have questions, no worries! You can reach us at Contact Two Six Technologies. We are happy to connect and cover the information needed to assist you in reaching your next career milestone. Two Six Technologies is an Equal Opportunity Employer and does not discriminate in employment opportunities or practices based on race (including traits historically associated with race, such as hair texture, hair type and protective hair styles (e.g., braids, twists, locs and twists)), color, religion, national origin, sex (including pregnancy, childbirth or related medical conditions and lactation), sexual orientation, gender identity or expression, age (40 and over), marital status, disability, genetic information, and protected veteran status or any other characteristic protected by applicable federal, state, or local law. For more information review the Two Six Technologies Equal Employment Opportunity and Affirmative Action Policy and the EEO Poster. If you are an individual with a disability and would like to request reasonable workplace accommodation for any part of our employment process, please send an email to accommodations@twosixtech.com. Information provided will be kept confidential and used only to the extent required to provide needed reasonable accommodations. Additionally, please be advised that this business uses E-Verify in its hiring practices. By submitting the following application, I hereby certify that to the best of my knowledge, the information provided is true and accurate.", "summaryDescription" : "Cybersecurity Researcher at Two Six Technologies. Skills: Reverse engineering, Embedded systems, Vulnerability research, Firmware analysis. Reverse engineer wireless systems. Reverse engineer embedded systems", "postedDate" : "2026-06-13T21:09:30.237", "createdAt" : "2026-06-13T21:09:30.237", "lastUpdated" : "2026-06-15T07:47:09.850", "ingestTimestamp" : "2026-06-13T21:09:30.237", "mongoId" : "6a2c7aa874d8ee00a0946467", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115000, "salaryAnnualMax" : 165000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Embedded systems", "Wireless security", "Firmware analysis", "Vulnerability research", "Exploit development", "Radio signal analysis", "Digital signal processing", "RF signal processing", "Side-channel analysis", "Reverse engineering", "Binary obfuscation", "Anti-analysis techniques", "Wireless protocols", "File system forensics", "Fault injection", "DevOps best practices", "RTOS", "Secure boot mechanisms", "IDA Pro", "Binary Ninja", "Ghidra", "QEMU", "JTAG/SWD" ], "skillCount" : 23, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 808.3411, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2abe2074d8ee00a06ecab9", "title" : "Cybersecurity – Information System Security Officer (ISSO)", "company" : "Boeing", "salary" : { "min" : 113050.0, "max" : 152950.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "USA - Ridley Park, PA", "locations" : [ "USA - Ridley Park, PA", "United States of America" ], "certifications" : [ "IAM Level 1 DoD 8140.03 compliant certification", "Security+ CE", "CAP", "CISSP", "CASP", "CISM", "GSLC" ], "timestamp" : "2026-06-14T23:23:29.448", "fingerprint" : "77dadf646bf5e5086279704fec6ecb64603c4397f40af0cd98e333b949f616cc", "source" : "workday", "language" : "en", "applyUrl" : "https://boeing.wd1.myworkdayjobs.com/external_subsidiary/job/USA---Ridley-Park-PA/Cybersecurity---Information-System-Security-Officer--ISSO-_JR2026496226", "externalId" : "JR2026496226", "locationPoint" : "39.88122,-75.3238", "structuredLocations" : [ { "city" : "Ridley Park", "state" : "Pennsylvania", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.8812236,-75.3237993" } ], "locationText" : "Ridley Park, Pennsylvania, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Cybersecurity, Information Assurance, Risk Management Framework, NIST SP 800", "professionalSkills" : [ "Information System Security", "Security Analysis", "Risk Assessment", "Incident Response", "Configuration Management", "Compliance" ], "hardSkillsList" : [ "Security policy implementation", "System authorization", "Continuous monitoring", "Hardware/software inventory" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Security policy implementation", "level" : "intermediate" }, { "name" : "System authorization", "level" : "intermediate" }, { "name" : "Continuous monitoring", "level" : "intermediate" }, { "name" : "Hardware/software inventory", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Information System Security, Risk Management Framework, Cybersecurity", "majorSkillsList" : [ "Information System Security", "Risk Management Framework", "Cybersecurity" ], "coreResponsibilities" : "Perform security analysis, Assess compliance with standards, Lead Assessment and Authorization (A&A) processes, Implement RMF for information systems, Facilitate MOUs, Facilitate ISAs, Facilitate RALs, Support Continuous Monitoring (CONMON), Oversee configuration management, Ensure security posture integrity, Lead staff with assessments, Document state of compliance, Conduct risk assessments, Conduct investigations, Execute risk mitigations, Oversee incident response, Conduct periodic inventory assessments, Serve as spokesperson, Advise management on technical research, Interface with government customers, Interface with suppliers, Implement protective mechanisms, Ensure understanding of cybersecurity requirements, Oversee development of program information security, Deploy program information security, Meet program and enterprise requirements, Manage security compliance monitoring, Perform security compliance monitoring, Oversee security assessments, Participate in security audits, Prepare technical reports, Review technical reports, Present technical reports, Prepare technical briefings, Review technical briefings, Present technical briefings, Identify root causes, Prioritize threats, Recommend corrective action, Implement corrective action, Explore industry knowledge, Explore industry methods", "teamCollaboration" : "Interface with government customers; Interface with suppliers; Interface with company personnel", "projectManagementSkills" : [ "Risk Management Framework", "Assessment and Authorization" ], "domainKnowledge" : "Classified computing domains; Information System Security; Risk Management Framework; DAAG; CNSSI 1253; ICD-503; JSIG; NIST SP 800; DFARs compliance", "domainList" : [ "classified-computing-domains", "information-system-security", "risk-management-framework", "daag", "cnssi-1253", "icd-503", "jsig", "nist-sp-800", "dfars-compliance" ], "domainSpecificKnowledge" : [ "Classified computing domains", "Information System Security", "Risk Management Framework", "DAAG", "CNSSI 1253", "ICD-503", "JSIG", "NIST SP 800", "DFARs compliance" ], "toolProficiency" : [ "NESSUS", "ACAS", "DISA STIGs", "SCAP", "HBSS" ], "communicationSkills" : "Technical reports; Technical briefings", "documentationSkills" : "Memorandums of Understanding; Interconnection Security Agreements; Risk Acknowledgement Letters; Technical reports", "problemSolvingSkills" : "Root cause analysis; Risk assessment; Threat prioritization", "specialRequirements" : "Active U.S. Secret Security Clearance, U.S. Citizenship Required", "qualificationsBasic" : "IAM Level 1 DoD 8140.03 compliant certification, 3+ years cybersecurity, IT, or related experience, 3+ years RMF, cybersecurity policies, RMF implementation experience", "qualificationsPreferred" : "3+ years ISSO/ISSM experience, 3+ years experience with security tools for RMF, 3+ years assessing and documenting test data, 3+ years DFARs compliance experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Cybersecurity – Information System Security Officer (ISSO) **Company:** The Boeing Company Boeing Classified Cybersecurity is currently seeking a highly motivated **Cybersecurity – Information System Security Officer (ISSO)** to join their team in **Ridley Park, PA**. The selected candidate will rely on Cybersecurity and Information Assurance (IA) background to be a technical leader and support Enterprise activities and Boeing customers throughout multiple classified computing domains. The ISSO is responsible for maintaining and implementing all Information System Security policies, standards, and directives to ensure assessment and authorization of information systems processing classified information. **Position Responsibilities:** * Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards * Lead and implement the Assessment and Authorization (A&A) processes under the Risk Management Framework (RMF) for new and existing information systems * Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acknowledgement Letters (RAL) and support Continuous Monitoring (CONMON) * Oversee configuration management of assigned systems; auditing systems to ensure security posture integrity * Lead staff with assessments and test/analysis data to document state of compliance with security requirements * Conduct risk assessments and investigations, execute appropriate risk mitigations, and oversee incident response activities * Conduct periodic hardware/software inventory assessments * Serve as organization spokesperson on advanced projects and programs * Act as advisor to management and customers on advanced technical research studies * Interface with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements **Additional Responsibilities:** * Oversee the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures * Manage and perform security compliance continuous monitoring * Oversee and participate in security assessments and audits * Prepare, review, and present technical reports and briefings * Identify root causes, prioritizes threats and recommends and/or implements corrective action * Explore the enterprise and industry for evolving state of industry knowledge and methods regarding information security best practices **Basic Qualifications (Required Skills/Experience):** * IAM Level 1 DoD 8140.03 (previously 8570.01) compliant certification (i.e. , Security+ CE, CAP, CISSP, CASP, CISM, GSLC) * 3+ years of combined experience and/or education in cybersecurity, IT, or a related field * 3+ years of experience with the Risk Management Framework (RMF), cybersecurity policies, and RMF implementation (e.g., DAAG, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series) **Preferred Qualifications (Desired Skills/Experience):** * 3+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs * 3+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS * 3+ years of experience assessing and documenting test or analysis data to show cyber security compliance * 3+ years of experience with DFARs compliance **Conflict of Interest:** Successful candidates for this job must satisfy the Company’s Conflict of Interest (COI) assessment process. **Drug Free Workplace:** Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies _._ **Pay & Benefits:** At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities. The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements. Pay is based upon candidate experience and qualifications, as well as market and business considerations. Summary pay range: $113,050 – $152,950 **Language Requirements:** Not Applicable **Education:** Not Applicable **Relocation:** Relocation assistance is not a negotiable benefit for this position. **Export Control Requirement:** This is not an Export Control position. **Safety Sensitive:** This is not a Safety Sensitive Position. **Security Clearance:** This position requires an active U.S. Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active) **Visa Sponsorship:** Employer will not sponsor applicants for employment visa status. **Contingent Upon Award Program** This position is not contingent upon program award **Shift:** Shift 1 (United States of America) **Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud** \\- [Recruitment Fraud Warning](http://www.boeing.com/careers/recruitment-fraud-warning.page) Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law. [EEO is the law](http://www.boeing.com/resources/boeingdotcom/careers/footer/EEOIsTheLawPoster.pdf) [Boeing EEO Policy](https://tbcdn.talentbrew.com/company/185/v1_0/img/2018_Policy_Statement.pdf) [Request an Accommodation](http://www.boeing.com/careers/request-accommodation.page) [Applicant Privacy](http://www.boeing.com/careers/privacy-statement.page) **Boeing Participates in E – Verify** * [E-Verify (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterEnglish.pdf) * [E-Verify (Spanish) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterSpanish.pdf) **Right to Work Statement** * [Right to Work (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWEnglishversion.pdf) * [Right to Work (Spanish)](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWSpanishversion.pdf)", "summaryDescription" : "Cybersecurity – Information System Security Officer (ISSO) at Boeing. Skills: Information System Security, Risk Management Framework, Cybersecurity. Perform security analysis. Assess compliance with standards", "postedDate" : "2026-06-11T04:12:40.068", "createdAt" : "2026-06-12T04:12:39.973", "lastUpdated" : "2026-06-14T23:23:29.448", "ingestTimestamp" : "2026-06-12T04:12:39.973", "mongoId" : "6a2abe2074d8ee00a06ecab9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://boeing.wd1.myworkdayjobs.com/external_subsidiary/job/USA---Ridley-Park-PA/Cybersecurity---Information-System-Security-Officer--ISSO-_JR2026496226", "salaryAnnualMin" : 113050, "salaryAnnualMax" : 152950, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security policy implementation", "System authorization", "Continuous monitoring", "Hardware/software inventory", "Leadership", "Information System Security", "Risk Management Framework", "Cybersecurity", "Security Analysis", "Risk Assessment", "Incident Response", "Configuration Management", "Compliance", "Assessment and Authorization", "Classified computing domains", "DAAG", "CNSSI 1253", "ICD-503", "JSIG", "NIST SP 800", "DFARs compliance", "IAM Level 1 DoD 8140.03 compliant certification", "Security+ CE", "CAP", "CISSP", "CASP", "CISM", "GSLC", "NESSUS", "ACAS", "DISA STIGs", "SCAP", "HBSS" ], "skillCount" : 33, "jobCategory" : "engineering", "seniorityLevel" : "mid", "dataQualityScore" : 0.8888889, "_score" : 802.75586, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2617a374d8ee00a01f6f23", "title" : "Cybersecurity Engineer", "company" : "Workday", "industry" : "Technology", "salary" : { "min" : 130200.0, "max" : 130200.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "USA.VA.Reston", "locations" : [ "USA.VA.Reston", "United States of America" ], "certifications" : [ "DoD 8570/8140 compliant", "IAT Level II certification", "CompTIA CySA+", "GICSP", "CASP+" ], "timestamp" : "2026-06-12T20:16:13.955", "fingerprint" : "34a1a7415dab1bc86d7837426dfdb09f001497ee1b75836ca7a55fec36b2c4e8", "source" : "workday", "language" : "en", "applyUrl" : "https://workday.wd5.myworkdayjobs.com/Workday/job/USAVAReston/Cybersecurity-Engineer---US-Federal_JR-0107022", "externalId" : "JR-0107022", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Reston", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "38.9532820,-77.3464516" } ], "locationText" : "Reston, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "AWS, Kubernetes, Docker, Python, Terraform, CloudFormation, CDK, AI tools, LLMs", "professionalSkills" : [ "Program leader", "Stakeholder alignment", "Risk anticipation", "Problem breakdown", "Ownership driven", "Results focused", "Intellectual agility" ], "hardSkillsList" : [ "Vulnerability Management", "SIEM", "SOAR", "Containerized environments", "Infrastructure as Code", "Data synthesis", "Visual insights" ], "softSkillsList" : [ "Curiosity", "Courage", "Optimism", "Drive", "Empathy" ], "hardSkills" : [ { "name" : "Vulnerability Management", "level" : "intermediate" }, { "name" : "SIEM", "level" : "intermediate" }, { "name" : "SOAR", "level" : "intermediate" }, { "name" : "Containerized environments", "level" : "intermediate" }, { "name" : "Infrastructure as Code", "level" : "intermediate" }, { "name" : "Data synthesis", "level" : "intermediate" }, { "name" : "Visual insights", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Curiosity" }, { "name" : "Courage" }, { "name" : "Optimism" }, { "name" : "Drive" }, { "name" : "Empathy" } ], "majorSkills" : "Platform Security Engineering, AWS, Kubernetes, Python", "majorSkillsList" : [ "Platform Security Engineering", "AWS", "Kubernetes", "Python" ], "coreResponsibilities" : "Design security stack lifecycle, Maintain security stack lifecycle, Secure Kubernetes clusters, Manage Kubernetes clusters, Monitor Kubernetes clusters, Scale tooling with infrastructure, Deploy security infrastructure, Manage security infrastructure, Integrate security tooling, Transform telemetry, Build dashboards", "teamCollaboration" : "Engineering partner to SOC; Work with partners; Empower organizational partners", "projectManagementSkills" : [ "Program management" ], "domainKnowledge" : "Cloud-native architecture; SaaS products; AWS security services; Containerized workloads", "domainList" : [ "cloud-native-architecture", "saas-products", "aws-security-services", "containerized-workloads" ], "domainSpecificKnowledge" : [ "Cloud-native architecture", "SaaS products", "AWS security services", "Containerized workloads" ], "toolProficiency" : [ "Terraform", "CloudFormation", "CDK", "Kubernetes", "Docker", "GitLab CI", "GitHub Actions", "Jenkins", "Amazon EKS" ], "communicationSkills" : "Present visually", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; First principles research", "specialRequirements" : "United States citizen, Security clearance, TS/SCI w/CI Poly, On site at client locations", "outcomesObjectives" : "Accelerate development; Optimize code; Automate repetitive tasks; Show partners where gaps remain", "qualificationsBasic" : "Deep experience engineering within AWS, Hands-on experience with Kubernetes, Advanced skills in Python, Comfortable and proficient in using AI tools, Ability to synthesize data and present it visually", "qualificationsPreferred" : "Active TS/SCI w/CI Poly is preferred, DoD 8570/8140 compliant, IAT Level II certification, Computing Environment (CE) credential, CompTIA CySA+ certification, GICSP certification, CASP+ certification, Experience building GitLab CI, Experience building GitHub Actions, Experience building Jenkins pipelines, Specific experience with Amazon EKS, Experience securing SaaS products", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "**Your work days are brighter here.** We’re obsessed with making hard work pay off, for our people, our customers, and the world around us. As a Fortune 500 company and a leading AI platform for managing people, money, and agents, we’re shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join, you’ll feel it. Not just in the products we build, but in how we show up for each other. Our culture is rooted in integrity, empathy, and shared enthusiasm. We’re in this together, tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun-drenched optimism and drive. Whether you're building smarter solutions, supporting customers, or creating a space where everyone belongs, you’ll do meaningful work with Workmates who’ve got your back. In return, we’ll give you the trust to take risks, the tools to grow, the skills to develop and the support of a company invested in you for the long haul. So, if you want to inspire a brighter work day for everyone, including yourself, you’ve found a match in Workday, and we hope to be a match for you too. **About the Team** We aren’t looking for someone to monitor dashboards or hunt for alerts—we need the engineer who builds the \"observatory\" itself. As a member of our Platform Security Engineering team, you will be responsible for the architecture, engineering, and maintenance of the systems that protect the Workday product. Operating entirely within AWS, you will treat \"Security as Code,\" ensuring our Vulnerability Management, SIEM, and SOAR tools are robust, scalable, and automated. You are the primary engineering partner to our SOC, building the high-fidelity tools they rely on to keep our customers safe. **About the Role** **This role will support one or more direct or indirect contracts with the U.S. Federal Government which, due to federal government security requirements, mandates that all Workday personnel working on the contracts be United States citizens (naturalized or native).** ### What You’ll Do * Design and maintain the lifecycle of our core security stack (Vulnerability Management, SIEM, and SOAR) in a native AWS environment. * Secure, manage, and monitor Kubernetes clusters and containerized workloads. You’ll ensure our tooling scales alongside our containerized infrastructure. * Use tools like Terraform, CloudFormation, or CDK to deploy and manage security infrastructure, ensuring our environments are version-controlled and immutable. * Leverage Python to bridge the gaps between commercial tools. When a tool hits its limit, you build the integration or custom logic to fix it. * Actively use AI tools and LLMs as a \"force multiplier\" to accelerate development, optimize code, and automate repetitive tasks. * Transform complex security telemetry into actionable, visual insights. You’ll build dashboards that show our partners exactly where we stand and where the gaps remain. * Work to integrate security tooling into the developer workflow, ensuring our engineering is as agile as the product it protects. **About You** **This role may require a security clearance at the TS/SCI w/CI Poly level. Applicants must have the ability to obtain and maintain a U.S. government issued security clearance. An active TS/SCI w/CI Poly is preferred.** **You are a highly organized, technically fluent program leader who thrives in complex, fast-paced environments, managing ambiguity, aligning stakeholders, and driving execution. You balance technical understanding with program management expertise to anticipate risks and maintain momentum. You break down complex problems into actionable plans and possess a proactive, ownership-driven, and results-focused mindset.** **May be required to be on site at client locations in the DC, MD, and VA (DMV) area** * You don’t over-engineer for the sake of complexity. You choose the most reliable, scalable path to get the job done and hate manual repetition. * You don’t wait for a ticket to fix a glaring gap. You see a problem, research it from first principles, and propose the solution. * You excel in the \"gray area.\" If you’re dropped into a problem set you’ve never seen before. Whether it's a new K8s vulnerability or a custom API, you have the intellectual agility to figure it out and deliver. * You treat the organizational partners as your customer. Your success is defined by how well your tools empower them. You take the time to understand their goals so you can better serve them. ### **Basic Requirements** * Deep experience engineering within AWS (Compute, Storage, Networking, and Security services). * Strong hands-on experience with Kubernetes (K8s) and Docker. You understand how to secure containerized environments and manage their lifecycle. * Advanced skills in Python. We believe if you can master Python, you can handle any Bash or scripting requirements that come your way. * Proven experience with Infrastructure as Code (IaC) (e.g., Terraform). * You must be comfortable and proficient in using AI tools to complement your daily functions. * Ability to synthesize data and present it visually to stakeholders. ### **Other Requirements** * Preferred **DoD 8570/8140 compliant** with at least **IAT Level II** certification, including a current **Computing Environment (CE)** credential and one approved specialty certification (e.g., CompTIA CySA+, GICSP, CASP+) * Experience building or maintaining GitLab CI, GitHub Actions, or Jenkins pipelines. * Specific experience with Amazon Elastic Kubernetes Service (EKS). * Experience securing large-scale, customer-facing SaaS products. **Workday Pay Transparency Statement** The annualized base salary ranges for the primary location and any additional locations are listed below. Workday pay ranges vary based on work location. As a part of the total compensation package, this role may be eligible for the Workday Bonus Plan or a role-specific commission/bonus, as well as annual refresh stock grants. Recruiters can share more detail during the hiring process. Each candidate’s compensation offer will be based on multiple factors including, but not limited to, geography, experience, skills, job duties, and business need, among other things. For more information regarding Workday’s comprehensive benefits, please [click here](http://workdaybenefits.com/us/welcome-to-workday-benefits/prospective-workmates). Primary Location: USA.VA.Reston Primary Location Base Pay Range: $130,200 USD - $195,400 USD Additional US Location(s) Base Pay Range: $117,800 USD - $210,000 USD **Our Approach to Flexible Work** With Flex Work, we’re combining the best of both worlds: in-person time and remote. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. We know that flexibility can take shape in many ways, so rather than a number of required days in-office each week, we simply **spend at least half (50%) of our time each quarter in the office or in the field** with our customers, prospects, and partners (depending on role). This means you'll have the freedom to create a flexible schedule that caters to your business, team, and personal needs, while being intentional to make the most of time spent together. Those in our remote \"home office\" roles also have the opportunity to come together in our offices for important moments that matter. Pursuant to applicable Fair Chance law, Workday will consider for employment qualified applicants with arrest and conviction records. Workday is an Equal Opportunity Employer including individuals with disabilities and protected veterans. At Workday, we are committed to providing an accessible and inclusive hiring experience where all candidates can fully demonstrate their skills. If you require assistance or an accommodation at any point, please email [_accommodations @workday.com_](mailto:accommodations@workday.com). **Are you being referred to one of our roles? If so, ask your connection at Workday about our Employee Referral process!** At Workday, we value our candidates’ privacy and data security. Workday will never ask candidates to apply to jobs through websites that are not Workday Careers. Please be aware of sites that may ask for you to input your data in connection with a job posting that appears to be from Workday but is not. In addition, Workday will never ask candidates to pay a recruiting fee, or pay for consulting or coaching services, in order to apply for a job at Workday.", "summaryDescription" : "Cybersecurity Engineer at Workday. Skills: Platform Security Engineering, AWS, Kubernetes, Python. Design security stack lifecycle. Maintain security stack lifecycle", "postedDate" : "2026-06-08T14:25:48.065", "createdAt" : "2026-06-11T14:25:47.985", "lastUpdated" : "2026-06-12T20:16:13.955", "ingestTimestamp" : "2026-06-11T14:25:47.985", "mongoId" : "6a2617a374d8ee00a01f6f23", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://workday.wd5.myworkdayjobs.com/Workday/job/USAVAReston/Cybersecurity-Engineer---US-Federal_JR-0107022", "salaryAnnualMin" : 130200, "salaryAnnualMax" : 130200, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Vulnerability Management", "SIEM", "SOAR", "Containerized environments", "Infrastructure as Code", "Data synthesis", "Visual insights", "Curiosity", "Courage", "Optimism", "Drive", "Empathy", "Platform Security Engineering", "AWS", "Kubernetes", "Python", "Program leader", "Stakeholder alignment", "Risk anticipation", "Problem breakdown", "Ownership driven", "Results focused", "Intellectual agility", "Program management", "Cloud-native architecture", "SaaS products", "AWS security services", "Containerized workloads", "DoD 8570/8140 compliant", "IAT Level II certification", "CompTIA CySA+", "GICSP", "CASP+", "Terraform", "CloudFormation", "CDK", "Docker", "GitLab CI", "GitHub Actions", "Jenkins", "Amazon EKS" ], "skillCount" : 41, "jobCategory" : "engineering", "seniorityLevel" : "mid", "dataQualityScore" : 0.8888889, "_score" : 796.41144, "daysOld" : 4, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2abe1f74d8ee00a06eca48", "title" : "Product Security Engineer", "company" : "Tapestry Solutions", "industry" : "Aerospace", "salary" : { "min" : 106000.0, "max" : 135900.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "USA - Hazelwood, MO", "locations" : [ "USA - Hazelwood, MO", "United States of America" ], "timestamp" : "2026-06-15T01:14:24.516", "fingerprint" : "33ea91a58a6785c3ba3f3a0004786fe595119da4aa22a58308eb7b090790f6be", "source" : "workday", "language" : "en", "applyUrl" : "https://boeing.wd1.myworkdayjobs.com/external_subsidiary/job/USA---Hazelwood-MO/Product-Security-Engineer_JR2026511463", "externalId" : "JR2026511463", "industryFunction" : { }, "locationPoint" : "35.46871,-83.00403", "structuredLocations" : [ { "city" : "Hazelwood", "state" : "Missouri", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.7761446,-90.3715909" } ], "locationText" : "Hazelwood, Missouri, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid-Tier", "technicalSkills" : "PowerShell, Batch, Bash, RedHat Enterprise Linux", "professionalSkills" : [ "Product security", "Information security", "Data protection", "Regulatory compliance", "Cybersecurity" ], "hardSkillsList" : [ "System administration", "Scripting" ], "hardSkills" : [ { "name" : "System administration", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" } ], "majorSkills" : "Product security, Cybersecurity, System requirements, Security controls", "majorSkillsList" : [ "Product security", "Cybersecurity", "System requirements", "Security controls" ], "coreResponsibilities" : "Lead development of product security, Lead implementation of product security, Lead sustainment of product security, Lead development of system requirements, Lead enhancement of system requirements, Ensure security of facilities, Ensure security of equipment, Ensure security of tools, Ensure security of data, Ensure security of networks, Ensure security of resources, Lead definition of supplier requirements, Lead identification of supplier requirements, Lead coordination with governments, Lead coordination with customers, Lead coordination with suppliers, Lead coordination with industry, Lead research and development, Lead advisement on product security, Lead advisement on certification", "domainKnowledge" : "Product security; Information security; Data protection; Cybersecurity; DoD regulations", "domainList" : [ "product-security", "information-security", "data-protection", "cybersecurity", "dod-regulations" ], "domainSpecificKnowledge" : [ "Product security", "Information security", "Data protection", "Cybersecurity", "DoD regulations" ], "innovationCreativity" : "Innovative solutions; Research and development", "problemSolvingSkills" : "Investigating security incidents; Resolving security incidents; Assessing configurations; Implementing security controls", "specialRequirements" : "Active U. S. Secret Clearance, Ability to travel up to 30%, Meet DoD 8140 Program Foundational qualifications, U. S. Citizenship Required", "qualificationsBasic" : "Bachelor's Degree, Active U. S. Secret Clearance, Ability to travel up to 30%, Meet DoD 8140 Program Foundational qualifications, Experience with Microsoft Windows operating systems, Working knowledge of PowerShell, Working knowledge of Batch scripting, Working knowledge of Bash scripting, Experience in cybersecurity controls, Experience in cybersecurity processes, Experience in cybersecurity procedures", "qualificationsPreferred" : "5+ years of related work experience, 9+ years of directly related work experience, 13+ years of related, relevant experience, Experience with RedHat Enterprise Linux, Working knowledge of virtualization clusters, Working knowledge of Storage Area Networks (SAN), Experience with DoD STIG review process", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Product Security Engineer **Company:** Tapestry - G0G Tapestry Solutions, A Boeing Company, brings over 30 years of industry experience designing, implementing, training, and supporting high-quality, cost-effective information technology and business intelligence solutions. With a dedicated team of approximately 500 professionals, we proudly serve 75 defense, commercial, and government clients across more than 50 U.S. locations and 9 countries worldwide. As a trusted partner, our employees embody our core values by consistently delivering excellence, taking full ownership, and developing innovative solutions that enable critical missions and ensure the safety of our global customers and team members. Joining Tapestry Solutions means enjoying the best of both worlds: access to the vast resources of Boeing combined with the agility and people-focused, family-oriented culture of a small business where your contributions truly matter. Tapestry Solutions, a part of Boeing Global Services (BGS), is seeking a **Product Security Engineer** in **Hazelwood, MO** for the Department of Navy Tomahawk Land-Attack Missile program. The Tomahawk program continues to grow and expand as a relevant deterrent against adversaries across the globe and is employed by multiple military organizations. This program is expected to remain in active service for the foreseeable future. The successful candidate for the role of Mid-Tier Product Security Engineer will play a crucial role in supporting the development, deployment, and maintenance of computing and information security requirements for the Tomahawk program, while adhering to strict government regulations. You will have the opportunity to shape and guide compliance, information security, and data protection requirements, ensuring the highest level of protection. Your expertise will be instrumental in assessing the acceptability of unique configurations and implementing robust security controls. Additionally, you will be responsible for investigating and resolving security incidents, actively participating in security policy assessments and audits, and effectively managing regulatory compliance in the dynamic field of cybersecurity. **Position Responsibilities:** * Leads development, implementation, and sustainment of product security and resiliency throughout the requirements, design, build, test, production, operations, and support lifecycle. * Leads the development and enhancement of system requirements and architectures for product security to meet all applicable certification and customer requirements. * Ensures security of facilities, equipment, tools, data, networks, and resources used for product: design, development, build, test, storage, delivery, operations, and support. * Leads the definition and identification of product security requirements for suppliers of components and subsystems for integration into complex Boeing products and services. * Leads coordination with governments, customers, suppliers, and industry to identify risks and improve industry and regulatory security standards and requirements for programs and interfacing systems. * Leads research and development activities resulting in innovative solutions. * Leads the advisement of customers on maintaining product security and certification, including security consequences of modifying products and services. **Basic Qualifications (Required Skills/Experience):** * Bachelor’s Degree * Active U.S. Secret Clearance with the ability to obtain TS/SCI * Ability to travel up to 30% of the time to support customers at domestic and international locations * Ability to meet DoD 8140 Program Foundational qualifications * Experience with the installation, configuration, maintenance, and administration of Microsoft Windows operating systems * Working knowledge of PowerShell, Batch, and Bash scripting * Experience in all aspects of design and implementation of cybersecurity controls, processes, and procedures **Preferred Qualifications (Desired Skills/Experience):** * Bachelor of Science degree from an accredited course of study in engineering, engineering technology (includes manufacturing engineering technology), chemistry, physics, mathematics, data science, or computer science and 5+ years of related work experience OR Bachelor’s Degree and 9+ years of directly related work experience OR 13+ years of related, relevant experience * Experience with the installation, configuration, and maintenance of RedHat Enterprise Linux * Working knowledge of highly available virtualization clusters and Storage Area Networks (SAN) * Experience with the DoD Security Technical Implementation Guide (STIG) review process **Drug Free Workplace:** We are a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies. **Pay & Benefits:** We strive to deliver a total rewards package that will attract, engage and retain the top talent. Elements of this package include competitive base pay and variable compensation opportunities. We also provide eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location and date of hire. Pay is based upon candidate experience and qualifications, as well as market and business considerations. Summary base pay $106,000 - $135,900 **Language Requirements:** Not Applicable **Education:** Bachelor's Degree or Equivalent **Relocation:** Relocation assistance is not a negotiable benefit for this position. **Export Control Requirement:** This is not an Export Control position. **Safety Sensitive:** This is not a Safety Sensitive Position. **Security Clearance:** This position requires an active U.S. Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active) **Visa Sponsorship:** Employer will not sponsor applicants for employment visa status. **Contingent Upon Award Program** This position is not contingent upon program award **Shift:** Shift 1 (United States of America) **Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud** \\- [Recruitment Fraud Warning](http://www.boeing.com/careers/recruitment-fraud-warning.page) Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law. [EEO is the law](http://www.boeing.com/resources/boeingdotcom/careers/footer/EEOIsTheLawPoster.pdf) [Boeing EEO Policy](https://tbcdn.talentbrew.com/company/185/v1_0/img/2018_Policy_Statement.pdf) [Request an Accommodation](http://www.boeing.com/careers/request-accommodation.page) [Applicant Privacy](http://www.boeing.com/careers/privacy-statement.page) **Boeing Participates in E – Verify** * [E-Verify (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterEnglish.pdf) * [E-Verify (Spanish) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterSpanish.pdf) **Right to Work Statement** * [Right to Work (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWEnglishversion.pdf) * [Right to Work (Spanish)](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWSpanishversion.pdf)", "summaryDescription" : "Product Security Engineer at Tapestry Solutions. Skills: Product security, Cybersecurity, System requirements, Security controls. Lead development of product security. Lead implementation of product security", "postedDate" : "2026-06-11T03:55:02.941", "createdAt" : "2026-06-12T03:55:02.799", "lastUpdated" : "2026-06-15T01:14:24.516", "ingestTimestamp" : "2026-06-12T03:55:02.799", "mongoId" : "6a2abe1f74d8ee00a06eca48", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://boeing.wd1.myworkdayjobs.com/external_subsidiary/job/USA---Hazelwood-MO/Product-Security-Engineer_JR2026511463", "salaryAnnualMin" : 106000, "salaryAnnualMax" : 135900, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "System administration", "Scripting", "Product security", "Cybersecurity", "System requirements", "Security controls", "Information security", "Data protection", "Regulatory compliance", "DoD regulations" ], "skillCount" : 10, "jobCategory" : "engineering", "seniorityLevel" : "mid", "dataQualityScore" : 1.0, "_score" : 792.4923, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Aerospace" }, { "id" : "6a2c956474d8ee00a098cfed", "title" : "Security Engineer", "company" : "Hark", "industry" : "Technology", "salary" : { "min" : 150000.0, "max" : 300000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "San Jose, California, United States", "locations" : [ "San Jose", "California", "United States" ], "timestamp" : "2026-06-15T07:47:47.700", "fingerprint" : "362c4542969992d28b2b54de1741dd642fe69c768615807e9d31adcd46242a90", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/hark/jobs/4277903009", "externalId" : "4277903009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Jose", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.3361663,-121.8905910" } ], "locationText" : "San Jose, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 4, "experienceMaxYears" : 8, "experienceLevel" : "Mid", "technicalSkills" : "AWS, GCP, IAM, Kubernetes, Pulumi, Terraform, LLM security, Agent security", "professionalSkills" : [ "Threat modeling", "Incident response", "Detection engineering" ], "hardSkillsList" : [ "Cloud security", "Network hardening", "IaC review" ], "hardSkills" : [ { "name" : "Cloud security", "level" : "intermediate" }, { "name" : "Network hardening", "level" : "intermediate" }, { "name" : "IaC review", "level" : "intermediate" } ], "majorSkills" : "Security engineering, Cloud security, LLM security", "majorSkillsList" : [ "Security engineering", "Cloud security", "LLM security" ], "coreResponsibilities" : "Threat-model infrastructure, Threat-model product, Threat-model agent/LLM attack surfaces, Harden cloud infrastructure, Review IaC for misconfigurations, Review IaC for vulnerabilities, Build detection capabilities, Maintain detection capabilities, Lead triage during incidents, Lead containment during incidents, Partner with engineering, Embed security into development, Define security posture, Evolve security posture", "teamCollaboration" : "Partner with engineering", "domainKnowledge" : "AI agents; LLM security; Agent security", "domainList" : [ "ai-agents", "llm-security", "agent-security" ], "domainSpecificKnowledge" : [ "AI agents", "LLM security", "Agent security" ], "qualificationsBasic" : "4–8 years hands-on security engineering experience, Deep fluency in cloud security, Experience with detection engineering, Experience with incident response, Ability to review IaC", "qualificationsPreferred" : "Experience at cloud security company, Experience at security-forward startup, Familiarity with zero-trust networking, Prior exposure to AI/agent security threat modeling", "workSiteFlexibility" : "Onsite", "rawDescription" : "About Hark Hark is an artificial intelligence company building advanced, personalized intelligence. One that is proactive, multimodal, and capable of interacting with the world through speech, text, vision, and persistent memory. We're pairing that intelligence with next-generation hardware to create a universal interface between humans and machines. While today's AI largely operates through chat boxes and decade-old devices, Hark is focused on what comes next: agentic systems that interact naturally with people and the real world. To get there, we're developing multimodal models and next-generation AI hardware together - designed from the ground up as a single, unified interface for a new era of intelligent systems. About the Role We're hiring a Member of Technical Staff (Security Engineer) to own security engineering at Hark. You'll threat-model our systems, harden our cloud and product infrastructure, build detection capabilities, and lead incident response when things go wrong. As AI agents become a core part of our product, you'll also be on the frontier of LLM and agent security — a space with very few established playbooks. This role is hands-on; you'll be building and operating, not managing or auditing. Responsibilities Threat-model Hark's infrastructure, product, and agent/LLM attack surfaces. Harden cloud infrastructure (EKS, IAM, network access paths) and review IaC for misconfigurations and vulnerabilities. Build and maintain detection and alerting pipelines; lead triage and containment during incidents. Partner with engineering to embed security into the development lifecycle. Define and evolve Hark's security posture as the product and team scale. Requirements 4–8 years of hands-on security engineering experience. Deep fluency in cloud security (AWS/GCP, IAM, Kubernetes, network hardening). Experience with detection engineering and incident response — you've triaged real alerts and contained real incidents. Ability to read and review infrastructure-as-code (Pulumi, Terraform, or similar) for security issues. Genuine curiosity about LLM and agent security — this is new territory and we want someone excited to figure it out. Bonus Qualifications Experience at a cloud security company (Wiz, Orca, Datadog, Snyk) or a security-forward startup (Stripe, Figma, Ramp, Netflix). Familiarity with zero-trust networking (Tailscale, Cloudflare, HashiCorp Vault). Prior exposure to AI/agent security threat modeling. Compensation The US base salary range for this full-time position is between $150,000 - $300,000 annually. The pay offered for this position may vary based on several individual factors, including job-related knowledge, skills, and experience. The total compensation package may also include additional", "summaryDescription" : "Security Engineer at Hark. Skills: Security engineering, Cloud security, LLM security. Threat-model infrastructure. Threat-model product", "postedDate" : "2026-06-13T21:00:42.789", "createdAt" : "2026-06-13T21:00:42.789", "lastUpdated" : "2026-06-15T07:47:47.700", "ingestTimestamp" : "2026-06-13T21:00:42.789", "mongoId" : "6a2c956474d8ee00a098cfed", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 150000, "salaryAnnualMax" : 300000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Cloud security", "Network hardening", "IaC review", "Security engineering", "LLM security", "Threat modeling", "Incident response", "Detection engineering", "AI agents", "Agent security" ], "skillCount" : 10, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 789.4725, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2617a274d8ee00a01f6ec9", "title" : "Senior Cybersecurity Engineer", "company" : "Workday", "salary" : { "min" : 159600.0, "max" : 159600.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "USA.VA.Reston", "locations" : [ "USA.VA.Reston", "United States of America" ], "certifications" : [ "DoD 8570/8140 compliant", "IAT Level II", "CompTIA CySA+", "GICSP", "CASP+" ], "timestamp" : "2026-06-12T07:47:59.288", "fingerprint" : "edd66a2518744f00daddb7132495111990cdbd22ef58b9e66595d3f7258dc720", "source" : "workday", "language" : "en", "applyUrl" : "https://workday.wd5.myworkdayjobs.com/Workday/job/USAVAReston/Senior-Cybersecurity-Engineer_JR-0104087", "externalId" : "JR-0104087", "structuredLocations" : [ { "city" : "Reston", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "38.9532820,-77.3464516" } ], "locationText" : "Reston, Virginia, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Kubernetes, Terraform, Argo CD, AWS, Python, Ruby, Go, Rust, C#", "professionalSkills" : [ "Infrastructure automation", "Configuration management", "Application deployments", "Security standards", "Technical controls", "Security auditing", "Compliance frameworks" ], "hardSkillsList" : [ "Infrastructure provisioning", "Security tooling", "Encryption functions", "Authorization schemas", "Threat analysis" ], "softSkillsList" : [ "Growth mindset", "Courageous collaborators" ], "hardSkills" : [ { "name" : "Infrastructure provisioning", "level" : "intermediate" }, { "name" : "Security tooling", "level" : "intermediate" }, { "name" : "Encryption functions", "level" : "intermediate" }, { "name" : "Authorization schemas", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Growth mindset" }, { "name" : "Courageous collaborators" } ], "majorSkills" : "Kubernetes platform, Infrastructure engineering, Security engineering", "majorSkillsList" : [ "Kubernetes platform", "Infrastructure engineering", "Security engineering" ], "coreResponsibilities" : "Build Kubernetes platform solutions, Develop infrastructure automation, Implement CI/CD pipelines, Deploy observability tools, Deploy security tools, Build core platform components, Maintain core platform components, Automate infrastructure provisioning, Automate configuration management, Automate application deployments, Provide platform support, Solve platform-related issues, Implement security standards, Maintain security standards, Build platform documentation, Maintain platform documentation, Share knowledge within team, Collaborate with other engineers, Collaborate with development teams, Stay up-to-date with technologies", "teamCollaboration" : "Cross-functional teams; Multiple locations; Diverse locations", "domainKnowledge" : "Cloud infrastructure; DevOps; Platform engineering; Network security; Application security; Platform security; Encryption; Authorization; Security threats; Attack techniques", "domainList" : [ "cloud-infrastructure", "devops", "platform-engineering", "network-security", "application-security", "platform-security", "encryption", "authorization", "security-threats", "attack-techniques" ], "domainSpecificKnowledge" : [ "Cloud infrastructure", "DevOps", "Platform engineering", "Network security", "Application security", "Platform security", "Encryption", "Authorization", "Security threats", "Attack techniques" ], "toolProficiency" : [ "Terraform", "Argo CD" ], "communicationSkills" : "Communicate optimally; Building relationships", "documentationSkills" : "Build documentation; Maintain documentation", "continuousLearning" : "Tools to grow; Skills to develop", "problemSolvingSkills" : "Analytical skills; Problem-solving skills", "specialRequirements" : "On site at client locations, United States citizens, Security clearance, TS/SCI w/CI Poly level", "qualificationsBasic" : "5 years of hands-on experience, Bachelor's degree in computer related field or equivalent work experience", "qualificationsPreferred" : "Active TS/SCI w/CI Poly, DoD 8570/8140 compliant, IAT Level II certification, current Computing Environment (CE) credential, one approved specialty certification", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "**Your work days are brighter here.** We’re obsessed with making hard work pay off, for our people, our customers, and the world around us. As a Fortune 500 company and a leading AI platform for managing people, money, and agents, we’re shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join, you’ll feel it. Not just in the products we build, but in how we show up for each other. Our culture is rooted in integrity, empathy, and shared enthusiasm. We’re in this together, tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun-drenched optimism and drive. Whether you're building smarter solutions, supporting customers, or creating a space where everyone belongs, you’ll do meaningful work with Workmates who’ve got your back. In return, we’ll give you the trust to take risks, the tools to grow, the skills to develop and the support of a company invested in you for the long haul. So, if you want to inspire a brighter work day for everyone, including yourself, you’ve found a match in Workday, and we hope to be a match for you too. **About the Team** We are looking for a highly motivated and Senior Engineer to join our growing Infrastructure and Platform Engineering team. You will play a critical role in building, scaling, observing and maintaining our Kubernetes-based platform and enabling our engineering organization to deliver capabilities and incremental products quickly and reliably. You will have the opportunity to work with cutting-edge technologies, solve complicated problems, and contribute to the foundation of our infrastructure. This role requires a strong technical background, a passion for automation, and a collaborative mindset. As a Security Engineer, you will be responsible for building, deploying/operating security tooling, developing security standards and implementing technical controls in support of the platforms and infrastructure used in Workday. This role involves collaborating with teams across multiple locations and time zones. You will need to be adept at communicating optimally and building positive relationships with colleagues in diverse locations. **About the Role** **May be required to be on site at client locations in the DC, MD, and VA (DMV) area.** You have a growth mindset and will be part of a team promoting a diverse and inclusive environment where you and your workmates are happy, energized and engaged, and who are excited to come to work every day. **Responsibilities:** * Design and implement: Build, develop, and implement solutions for our Kubernetes platform, including infrastructure automation, CI/CD pipelines, and observability and security tools. * Build and maintain: Build and maintain core platform components, ensuring high availability, scalability, and security. * Automate and optimize: Automate infrastructure provisioning, configuration management, and application deployments using tools like Terraform and Argo CD. * Troubleshooting and support: Provide support and solving for platform-related issues, working closely with peer development teams to resolve problems. * Security and compliance: Implement and maintain security standard methodologies for the platform, ensuring compliance with industry standards. * Documentation and knowledge sharing: Build and maintain comprehensive documentation for platform components and processes. Actively participate in knowledge sharing within the team. * Collaborate effectively with other engineers and development teams across multiple locations and time zones. * Stay up-to-date with the latest technologies and trends in the platform engineering space. **This role will support one or more direct or indirect contracts with the U.S. Federal Government which, due to federal government security requirements, mandates that all Workday personnel working on the contracts be United States citizens (naturalized or native).** **About You** **This role may require a security clearance at the TS/SCI w/CI Poly level. Applicants must have the ability to obtain and maintain a U.S. government issued security clearance. An active TS/SCI w/CI Poly is preferred.** **Basic Qualifications:** * A minimum of 5 years of hands-on experience working with large scale cloud infrastructure, DevOps, Security, and software development engineering skills. * Bachelor's degree in a computer related field or equivalent work experience **Other Qualifications:** * Infrastructure as code: Proficiency in infrastructure automation tools like Terraform. * CI/CD: Experience with building, maintaining, and consuming CI/CD pipelines and tools like Argo CD. * Experience securing infrastructure hosted on cloud service providers like AWS in a production environment. * Knowledge of network, application and platform security tools and concepts. * Knowledge of common encryption functions and authorization schemas. * Experience with security auditing and compliance frameworks. * Understanding of application, system, and security threats, attack techniques and mitigating controls. * Programming skills: Proficiency in at least one programming language * Problem-solving: Strong analytical and problem-solving skills. * Communication: Excellent communication and collaboration skills. **Preferred:** * Strong understanding of Kubernetes and containerization * C#, Python, Ruby, Rust, or Go programming language proficiency * Experience working in air gapped cloud regions * Preferred **DoD 8570/8140 compliant** with at least **IAT Level II** certification, including a current **Computing Environment (CE)** credential and one approved specialty certification (e.g., CompTIA CySA+, GICSP, CASP+) **Workday Pay Transparency Statement** The annualized base salary ranges for the primary location and any additional locations are listed below. Workday pay ranges vary based on work location. As a part of the total compensation package, this role may be eligible for the Workday Bonus Plan or a role-specific commission/bonus, as well as annual refresh stock grants. Recruiters can share more detail during the hiring process. Each candidate’s compensation offer will be based on multiple factors including, but not limited to, geography, experience, skills, job duties, and business need, among other things. For more information regarding Workday’s comprehensive benefits, please [click here](http://workdaybenefits.com/us/welcome-to-workday-benefits/prospective-workmates). Primary Location: USA.VA.Reston Primary Location Base Pay Range: $159,600 USD - $239,400 USD Additional US Location(s) Base Pay Range: $144,400 USD - $258,000 USD **Our Approach to Flexible Work** With Flex Work, we’re combining the best of both worlds: in-person time and remote. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. We know that flexibility can take shape in many ways, so rather than a number of required days in-office each week, we simply **spend at least half (50%) of our time each quarter in the office or in the field** with our customers, prospects, and partners (depending on role). This means you'll have the freedom to create a flexible schedule that caters to your business, team, and personal needs, while being intentional to make the most of time spent together. Those in our remote \"home office\" roles also have the opportunity to come together in our offices for important moments that matter. Pursuant to applicable Fair Chance law, Workday will consider for employment qualified applicants with arrest and conviction records. Workday is an Equal Opportunity Employer including individuals with disabilities and protected veterans. At Workday, we are committed to providing an accessible and inclusive hiring experience where all candidates can fully demonstrate their skills. If you require assistance or an accommodation at any point, please email [_accommodations @workday.com_](mailto:accommodations@workday.com). **Are you being referred to one of our roles? If so, ask your connection at Workday about our Employee Referral process!** At Workday, we value our candidates’ privacy and data security. Workday will never ask candidates to apply to jobs through websites that are not Workday Careers. Please be aware of sites that may ask for you to input your data in connection with a job posting that appears to be from Workday but is not. In addition, Workday will never ask candidates to pay a recruiting fee, or pay for consulting or coaching services, in order to apply for a job at Workday.", "summaryDescription" : "Senior Cybersecurity Engineer at Workday. Skills: Kubernetes platform, Infrastructure engineering, Security engineering. Build Kubernetes platform solutions. Develop infrastructure automation", "postedDate" : "2026-06-09T13:23:56.882", "createdAt" : "2026-06-11T13:23:56.851", "lastUpdated" : "2026-06-12T07:47:59.288", "ingestTimestamp" : "2026-06-11T13:23:56.851", "mongoId" : "6a2617a274d8ee00a01f6ec9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://workday.wd5.myworkdayjobs.com/Workday/job/USAVAReston/Senior-Cybersecurity-Engineer_JR-0104087", "salaryAnnualMin" : 159600, "salaryAnnualMax" : 159600, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Infrastructure provisioning", "Security tooling", "Encryption functions", "Authorization schemas", "Threat analysis", "Growth mindset", "Courageous collaborators", "Kubernetes platform", "Infrastructure engineering", "Security engineering", "Infrastructure automation", "Configuration management", "Application deployments", "Security standards", "Technical controls", "Security auditing", "Compliance frameworks", "Cloud infrastructure", "DevOps", "Platform engineering", "Network security", "Application security", "Platform security", "Encryption", "Authorization", "Security threats", "Attack techniques", "DoD 8570/8140 compliant", "IAT Level II", "CompTIA CySA+", "GICSP", "CASP+", "Terraform", "Argo CD" ], "skillCount" : 34, "jobCategory" : "engineering", "seniorityLevel" : "senior", "dataQualityScore" : 1.0, "_score" : 788.31085, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2a7ffb74d8ee00a066c5ac", "title" : "Cybersecurity Manager (Incident Response & Security Operations)", "company" : "Match Group", "industry" : "Security", "salary" : { "min" : 170000.0, "max" : 190000.0, "currency" : "CAD", "frequency" : "yearly" }, "location" : "Vancouver, British Columbia", "locations" : [ "Vancouver, British Columbia" ], "certifications" : [ "GCIH", "GCFA", "GCIA", "GSOM", "CISSP" ], "timestamp" : "2026-06-15T00:05:27.519", "fingerprint" : "6dcc57fb7b8160bc9400f872d1609fde7a4e6117091effb646a4513f2120db6b", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/matchgroup/70690017-f01c-446e-93e5-eca0e8d8aba3/apply", "externalId" : "70690017-f01c-446e-93e5-eca0e8d8aba3", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Vancouver", "state" : "British Columbia", "country" : "Canada", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "49.2608724,-123.1139520" } ], "locationText" : "Vancouver, British Columbia, Canada", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "AWS, GCP, Kubernetes, CrowdStrike, Okta, Python", "professionalSkills" : [ "Detection engineering", "Security operations", "Incident response", "Threat hunting", "Team leadership", "Management", "AI-driven triage", "Automated triage", "Intelligent alert enrichment", "Threat intelligence integration", "Adversary simulation", "Assumed-compromise testing" ], "hardSkillsList" : [ "Detection engineering framework", "Detections-as-code", "GitOps", "CI/CD pipelines", "SIEM platform", "Log source integration", "SOC metrics", "SLAs", "Tabletop exercises", "Endpoint forensics", "Network forensics", "Threat hunting techniques", "Cloud security monitoring", "Datacenter security", "Container orchestration security", "Access security monitoring", "Threat intelligence workflows" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Detection engineering framework", "level" : "intermediate" }, { "name" : "Detections-as-code", "level" : "intermediate" }, { "name" : "GitOps", "level" : "intermediate" }, { "name" : "CI/CD pipelines", "level" : "intermediate" }, { "name" : "SIEM platform", "level" : "intermediate" }, { "name" : "Log source integration", "level" : "intermediate" }, { "name" : "SOC metrics", "level" : "intermediate" }, { "name" : "SLAs", "level" : "intermediate" }, { "name" : "Tabletop exercises", "level" : "intermediate" }, { "name" : "Endpoint forensics", "level" : "intermediate" }, { "name" : "Network forensics", "level" : "intermediate" }, { "name" : "Threat hunting techniques", "level" : "intermediate" }, { "name" : "Cloud security monitoring", "level" : "intermediate" }, { "name" : "Datacenter security", "level" : "intermediate" }, { "name" : "Container orchestration security", "level" : "intermediate" }, { "name" : "Access security monitoring", "level" : "intermediate" }, { "name" : "Threat intelligence workflows", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident Response, Security Operations, Detection Engineering, AI-augmented SOC", "majorSkillsList" : [ "Incident Response", "Security Operations", "Detection Engineering", "AI-augmented SOC" ], "coreResponsibilities" : "Lead integrated team, Drive strategic vision, Maximize threat response capabilities, Integrate core functions, Leverage AI innovation, Own detection lifecycle, Build AI-augmented SOC model, Develop high-performing team, Operate across time zones, Provide 24/7 coverage, Develop detection engineering framework, Contribute to detections-as-code, Drive AI Agentic SOC adoption, Evaluate AI tooling, Select AI tooling, Implement AI tooling, Manage full incident lifecycle, Partner with Legal, Partner with Communications, Partner with Privacy, Partner with Engineering, Build detection content, Integrate log sources, Establish SOC metrics, Track SOC metrics, Establish SOC SLAs, Track SOC SLAs, Create dashboards, Visualize performance, Visualize alert fidelity, Visualize response effectiveness, Coordinate IR tabletop exercises, Execute IR tabletop exercises, Validate readiness, Improve playbooks, Partner with Red Team, Validate detection capabilities, Collaborate with Platform Security, Collaborate with InfraSec, Collaborate with AppSec, Identify detection gaps, Close detection gaps, Integrate threat intelligence, Anticipate emerging threats, Proactively defend threats, Use automation, Improve detection times, Improve response times, Mitigate incident impact", "teamCollaboration" : "Cross-functional stakeholders; External incident response teams; Law enforcement; Platform Security teams; InfraSec teams; AppSec teams; Legal teams; Communications teams; Privacy teams; Engineering teams; Red Team", "projectManagementSkills" : [ "Detections-as-code", "GitOps", "CI/CD pipelines" ], "domainKnowledge" : "Attacker TTPs; MITRE ATT&CK; Cloud-native environments; Hybrid environments; Datacenter infrastructure; Endpoint security; Network security; Identity and access security; SaaS security; Application security; Threat intelligence", "domainList" : [ "attacker-ttps", "mitre-att-ck", "cloud-native-environments", "hybrid-environments", "datacenter-infrastructure", "endpoint-security", "network-security", "identity-and-access-security", "saas-security", "application-security", "threat-intelligence" ], "domainSpecificKnowledge" : [ "Attacker TTPs", "MITRE ATT&CK", "Cloud-native environments", "Hybrid environments", "Datacenter infrastructure", "Endpoint security", "Network security", "Identity and access security", "SaaS security", "Application security", "Threat intelligence" ], "toolProficiency" : [ "SIEM", "SOAR", "Git", "GitOps", "CI/CD", "CrowdStrike", "Okta", "Cloudflare", "Obsidian" ], "communicationSkills" : "Verbal communication; Written communication; Post-incident reports", "continuousLearning" : "Annual training allowance", "innovationCreativity" : "AI-driven innovation; AI-augmented SOC model; AI Agentic SOC adoption", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Alert tuning; Investigation; Incident resolution", "specialRequirements" : "24/7 coverage", "outcomesObjectives" : "Maximize rapid threat response; Maximize accurate threat response; Reduce noise; Accelerate response; Scale across portfolio; Reduce false positives; Accelerate initial response speed; Validate detection capabilities; Improve playbooks; Close detection gaps; Improve detection times; Improve response times; Mitigate incident impact", "qualificationsBasic" : "5+ years security operations, 5+ years incident response, 5+ years detection engineering, 5+ years threat hunting, 2+ years team leadership, 2+ years management role, Build and operate modern SOC, Experience with SIEM platforms, Experience with SOAR tools, Understanding AI/ML applications, Manage full incident lifecycle, Experience with cloud security monitoring, Experience with datacenter security, Experience with container orchestration security, Familiarity with identity access security monitoring, Experience coordinating external IR teams, Experience coordinating with law enforcement, Experience coordinating with cross-functional stakeholders, Polished verbal communication skills, Polished written communication skills", "qualificationsPreferred" : "Python-based detections experience, Log analysis experience, Background consumer internet industry, Background dating industry, Background high-scale B2C platforms, Cloudflare experience, CrowdStrike experience, SaaS security monitoring experience, Obsidian experience, Experience building Blue Team program, Experience leading Blue Team program, Experience building cross-functional security team, Experience leading cross-functional security team", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## About the Role As the Manager, IR / SOC, you will lead the integrated team responsible for Detection Engineering, Security Operations Center (SOC), and Incident Response (IR) across Match Group. Reporting to the Sr. Director of Security Engineering, you will drive the strategic vision of maximizing rapid and accurate threat response capabilities by integrating these three core functions and leveraging AI-driven innovation. You will own the detection lifecycle end-to-end — from signal engineering and alert tuning through triage, investigation, and incident resolution — while building toward an AI-augmented SOC model that reduces noise, accelerates response, and scales across a global portfolio. ## What You'll Do Lead and develop a high-performing team of SOC analysts, detection engineers, and incident responders operating across multiple time zones with 24/7 coverage Play a key role in developing the detection engineering framework, contributing to detections-as-code (DaC) via GitOps/CI/CD pipelines for consistency and automated deployment Drive AI Agentic SOC adoption — evaluate, select, and implement AI-driven triage and investigation tooling to maximize SOC efficiency, reduce false positives, and accelerate initial response speed Manage the full incident lifecycle — from detection through containment, eradication, recovery, and lessons learned — partnering with Legal, Communications, Privacy, and Engineering teams Build and refine detection content across the SIEM platform, integrating log sources across all MG brands (Tinder, Hinge, Match, E&E, HPCNT, Eureka, and New Bets) Establish and track SOC metrics and SLAs, creating dashboards to visualize performance, alert fidelity, and response effectiveness Coordinate and execute IR tabletop exercises (technical and management-level) across brands to validate readiness and improve playbooks Partner with the Red Team to validate detection capabilities through adversary simulation and assumed-compromise testing Collaborate with Platform Security, InfraSec, and AppSec teams to identify and close detection gaps across cloud-native and hybrid environments (AWS, GCP), datacenter infrastructure, endpoints (CrowdStrike), identity (Okta), SaaS, and application layers Integrate threat intelligence into detection and response workflows to anticipate and proactively defend against emerging threats Use automation to improve detection and response times and mitigate incident impact ## What You'll Bring 5+ years of experience in security operations, incident response, detection engineering, or threat hunting, with 2+ years in a team leadership or management role Proven experience building and operating a modern SOC in cloud-native and hybrid environments (AWS, GCP) and datacenter infrastructure Hands-on experience with SIEM platforms and SOAR tools — including detection-as-code methodologies Strong understanding of AI/ML applications in security operations — agentic SOC, automated triage, and intelligent alert enrichment Experience managing the full incident lifecycle across complex, multi-brand or multi-tenant environments Deep knowledge of attacker TTPs (MITRE ATT&CK), endpoint and network forensics, and threat hunting techniques Experience with cloud security monitoring (AWS CloudTrail, GuardDuty, Security Hub, CloudWatch; GCP Security Command Center), datacenter security, and container orchestration security (Kubernetes) Familiarity with identity and access security monitoring (Okta, SSO, MFA events) Experience coordinating with external incident response teams, law enforcement, and cross-functional stakeholders during security events Polished verbal and written communication skills — ability to communicate clearly during high-pressure incidents and deliver thorough post-incident reports to technical and executive audiences Relevant certifications are a plus: GCIH, GCFA, GCIA, GSOM, CISSP, or equivalent ## Nice to Have Experience with Python-based detections and log analysis in modern cloud-native SIEM platforms Background in the consumer internet/dating industry or other high-scale B2C platforms Familiarity with Cloudflare (WAF, Bot Management), CrowdStrike, and SaaS security monitoring (Obsidian or similar) Experience building or leading a Blue Team volunteer program or cross-functional security response team ## Additional Information Why Match Group? Our mission is simple – to help people find love and happiness! We love our employees too and understand the importance of all life's milestones. Here are some of the benefits we are proud to offer: Mind & Body – Medical, mental health, and wellness benefits to support your overall health and well-being Financial Wellness – Competitive compensation, 100% employer match on 401k contributions up to 10% (cap at $10,000), as well as an employee stock purchase program to help you feel supported in your financial security Unplug – Generous PTO and 14 paid holidays so you can unplug Career – Annual training allowance for professional development and ERG membership opportunities and events so you feel connected and empowered in your work Family – Families come in all shapes and sizes so we offer 20 weeks of 100% paid parental leave, fertility, adoption, and child care resources, as well as pet insurance and discounts   Company Gatherings – We host company events where our employees get to know each other and build a sense of connection and belonging! We are proud to be an equal opportunity employer and we value the rich dynamics that diversity brings to our company. We do not discriminate on the basis of race, religion, color, creed, national origin, ancestry, disability, marital status, age, sexual orientation, sex (including pregnancy and sexual harassment), gender identity or expression, uniformed service or veteran status, genetic information, or any other legally protected characteristic. Period. If you require a reasonable accommodation to participate in the hiring process — such as during pre-employment testing or interviews — please indicate this by selecting “Yes” in the accommodation request field. We’ll reach out to discuss your needs if you're selected for the interview stage. #MG", "summaryDescription" : "Cybersecurity Manager (Incident Response & Security Operations) at Match Group. Skills: Incident Response, Security Operations, Detection Engineering, AI-augmented SOC. Lead integrated team. Drive strategic vision", "postedDate" : "2026-06-10T16:28:32.723", "createdAt" : "2026-06-10T16:28:32.723", "lastUpdated" : "2026-06-15T00:05:27.519", "ingestTimestamp" : "2026-06-12T07:31:26.388", "mongoId" : "6a2a7ffb74d8ee00a066c5ac", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ "Detection engineering framework", "Detections-as-code", "GitOps", "CI/CD pipelines", "SIEM platform", "Log source integration", "SOC metrics", "SLAs", "Tabletop exercises", "Endpoint forensics", "Network forensics", "Threat hunting techniques", "Cloud security monitoring", "Datacenter security", "Container orchestration security", "Access security monitoring", "Threat intelligence workflows", "Leadership", "Incident Response", "Security Operations", "Detection Engineering", "AI-augmented SOC", "Detection engineering", "Security operations", "Incident response", "Threat hunting", "Team leadership", "Management", "AI-driven triage", "Automated triage", "Intelligent alert enrichment", "Threat intelligence integration", "Adversary simulation", "Assumed-compromise testing", "Attacker TTPs", "MITRE ATT&CK", "Cloud-native environments", "Hybrid environments", "Datacenter infrastructure", "Endpoint security", "Network security", "Identity and access security", "SaaS security", "Application security", "Threat intelligence", "GCIH", "GCFA", "GCIA", "GSOM", "CISSP", "SIEM", "SOAR", "Git", "CI/CD", "CrowdStrike", "Okta", "Cloudflare", "Obsidian" ], "skillCount" : 58, "jobCategory" : "other", "dataQualityScore" : 1.0, "_score" : 786.0491, "daysOld" : 4, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2a5f7d74d8ee00a061e147", "title" : "Engineer II, Cybersecurity", "company" : "CarMax", "industry" : "Automotive Retail", "salary" : { "min" : 85000.0, "max" : 125000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Junior Cybersecurity Engineer in Richmond, VA, adjusted for the retail industry and CarMax's company size." }, "location" : "United States of America", "locations" : [ "United States of America" ], "certifications" : [ "CISSP", "CISA", "Security+" ], "timestamp" : "2026-06-14T04:56:37.530", "fingerprint" : "d3a7f5852db853c71bf82ade49040055a625790cbca6cb344caccfe2de54de0c", "source" : "workday", "language" : "en", "applyUrl" : "https://carmax.wd1.myworkdayjobs.com/External/job/Corporate---Richmond/Engineer-II--Cybersecurity_JR-179013", "externalId" : "JR-179013", "industryFunction" : { }, "locationPoint" : "51.43667,5.97917", "structuredLocations" : [ { "city" : "Richmond", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "37.5385087,-77.4342800" } ], "locationText" : "Richmond, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Java, PowerShell, Python, TypeScript, LDAP, SAML, WS-Federation, OAuth, SCIM, SaaS, IaaS, PaaS", "professionalSkills" : [ "Information security", "Identity Management", "Access Management", "Access Governance", "Access Recertification", "Single Sign-On", "Multi-Factor Authentication", "Privilege Access Management", "Authorization policies", "Authentication policies" ], "hardSkillsList" : [ "Troubleshooting", "Problem-solving", "Organization", "Time management", "Project management" ], "hardSkills" : [ { "name" : "Troubleshooting", "level" : "intermediate" }, { "name" : "Problem-solving", "level" : "intermediate" }, { "name" : "Organization", "level" : "intermediate" }, { "name" : "Time management", "level" : "intermediate" }, { "name" : "Project management", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity", "majorSkillsList" : [ "Cybersecurity" ], "coreResponsibilities" : "Implement, develop, operate, and improve Identity Management solutions, Provide functional and technical expertise on projects, Evaluate authorization and authentication policies, Perform evaluation and governance of IAM platforms, Gather information to develop security-related processes, Assist in driving tasks and projects to completion, Triage support problems, Respond with appropriate urgency, Participate in 24x7 on-call rotation, Perform after hours support", "teamCollaboration" : "Application teams; Infrastructure teams; Network operations teams", "projectManagementSkills" : [ "Project management" ], "domainKnowledge" : "Identity security; Information security technology", "domainList" : [ "identity-security", "information-security-technology" ], "domainSpecificKnowledge" : [ "Identity security", "Information security technology" ], "communicationSkills" : "Verbal communication; Written communication; Group discussions", "continuousLearning" : "Keep up with current technology", "problemSolvingSkills" : "Analytical skills; Troubleshooting skills; Problem-solving skills", "specialRequirements" : "24x7 on-call rotation, After hours support", "outcomesObjectives" : "Improve security posture; Drive program maturity", "qualificationsBasic" : "Functional proficiency with coding or scripting language, User administration, authentication methods, groups, domain concepts, Industry protocol standards, User provisioning, Access Management, Access Governance/Access Recertification, Single Sign-On, Multi-Factor Authentication, Privilege Access Management, Windows server and Red Hat Enterprise Linux Operating Systems, Cloud technology (SaaS, IaaS, PaaS), 1-5 years of experience in information security, Bachelor’s Degree in Computer Science, Engineering, Cybersecurity, or related field or equivalent", "qualificationsPreferred" : "CISSP, CISA, or Security+ preferred", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "8901 - Corp Office West Crk - 12800 Tuckahoe Creek Parkway, Richmond, Virginia, 23238 CarMax, the way your career should be! **About this job** This position will be the subject matter expert on all platforms that fall into category of CarMax’s® assets to ensure the protection, integrity and confidentiality of customer, vendor, employee, and business information in compliance with organization policies and standards utilizing current information security technology disciplines and industry standards. This is a unique opportunity at a Fortune 200 company and national brand to expand and develop skills beyond current IAM focus to a broader skill and toolset in the security program. This opportunity provides the ability to both lead implementation and improvements while also providing the opportunity for hands-on operation across the full suite of Identity security capabilities. The Cybersecurity Identity and Access Management (IAM) Engineer performs all activities necessary to ensure we provide the right people and systems, the right access to the right systems for the right reasons. This role interfaces with application, infrastructure, and network operations teams and develops the necessary procedures to maintain security and educates the user community. The Cybersecurity Engineer also provides metrics, status reports, and audit results for key stakeholders while driving improvements and program maturity. **Essential Responsibilities:** * Desire to keep up with current technology and client industry * Implement, develop, operate, and improve Identity Management solutions * Provide functional and technical expertise on projects that require IAM services * Evaluate authorization and authentication policies * Perform evaluation and governance of IAM platforms and processes * Gather information from the business and IT department to develop security-related processes and procedures to continuously improve the security posture of CarMax * Assist in driving tasks and projects to successful completion through effective project management, customer interaction, and IT coordination * Effectively triage support problems and respond with the appropriate level of urgency * Participate in a 24x7 on-call rotation as scheduled, and the ability to perform after hours support as needed **Qualifications** To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. **Technical Qualifications:** * Functional proficiency with at least one coding or scripting language: Java, PowerShell, Python, TypeScript * User administration, authentication methods, groups, and domain concepts * Industry protocol standards such as: LDAP, SAML, WS-Federation, OAuth, SCIM * Experience with user provisioning, Access Management, Access Governance/Access Recertification (IGA), Single Sign-On (SSO), Multi-Factor Authentication (MFA), Privilege Access Management (PAM) * Excellent analytical, troubleshooting, and problem-solving skills and performs well in high pressure or stressful situations * Excellent organization and time management skills * Excellent communication skills to include, but not limited to, verbal and written communication; delivering organized presentations; able to tailor message to the audience; and facilitate group discussions with diplomacy and seek diverse opinions * Ability to effectively estimate the efforts of others and the impact required to accomplish requested tasks/projects * Windows server and Red Hat Enterprise Linux Operating Systems * Cloud technology (SaaS, IaaS, PaaS) **Education and/or Experience:** * 1-5 years of experience in information security or related field. * Bachelor’s Degree in Computer Science, Engineering, Cybersecurity, or a related field or equivalent alternative education, skills, and/or practical experience is required. * Certifications: CISSP, CISA, or Security+ preferred _Work Location and Arrangement:_ West Creek: This role will be based out of the CarMax Home Office (Richmond, VA) and associates will work onsite 4 days per week. _Work Authorization:_ Applicants must be currently authorized to work in the United States on a full-time basis. Sponsorship will **not** be considered for this specific role. **About CarMax** CarMax disrupted the auto industry by delivering the honest, transparent and high-integrity experience customers want and deserve. This innovative thinking around the way cars are bought and sold has helped us become the nation’s largest retailer of used cars, with over 250 locations nationwide. Our amazing team of more than 25,000 associates work together to deliver iconic customer experiences. Along the way, we help every associate grow their career and achieve their best, at work and in their community. We are recognized for our commitment to training and diversity and are one of the FORTUNE 100 Best Companies to Work For®. _Our Commitment to Diversity and Inclusion:_ CarMax is committed to bringing together people from different backgrounds and perspectives, providing employees with a safe, welcoming, and inclusive work environment. CarMax is an equal opportunity employer, and all qualified candidates will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, protected veteran status, disability status, or any other characteristic protected by law. Upon an applicant's request, CarMax will consider reasonable accommodation to complete the CarMax Job Application. Upon an applicant's request, CarMax will consider reasonable accommodation to complete the CarMax Job Application.", "summaryDescription" : "Engineer II, Cybersecurity at CarMax. Skills: Cybersecurity. Implement, develop, operate, and improve Identity Management solutions. Provide functional and technical expertise on projects", "postedDate" : "2026-06-10T16:36:23.847", "createdAt" : "2026-06-11T16:36:23.768", "lastUpdated" : "2026-06-14T04:56:37.530", "ingestTimestamp" : "2026-06-11T16:36:23.768", "mongoId" : "6a2a5f7d74d8ee00a061e147", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://carmax.wd1.myworkdayjobs.com/External/job/Corporate---Richmond/Engineer-II--Cybersecurity_JR-179013", "salaryAnnualMin" : 85000, "salaryAnnualMax" : 125000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Troubleshooting", "Problem-solving", "Organization", "Time management", "Project management", "Cybersecurity", "Information security", "Identity Management", "Access Management", "Access Governance", "Access Recertification", "Single Sign-On", "Multi-Factor Authentication", "Privilege Access Management", "Authorization policies", "Authentication policies", "Identity security", "Information security technology", "CISSP", "CISA", "Security+" ], "skillCount" : 21, "jobCategory" : "engineering", "seniorityLevel" : "mid", "dataQualityScore" : 0.8888889, "_score" : 784.6584, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Automotive Retail" }, { "id" : "69fe47284c40e2acd1f59711", "title" : "Security Engineer", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 159300.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Redmond, Washington, USA", "locations" : [ "Redmond, Washington, USA" ], "timestamp" : "2026-06-15T07:06:20.920", "fingerprint" : "f9d0abef106d061aabca58f52965ee732effd2a8c35632d1c296088b4a2b7702", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10415279/apply", "externalId" : "acf9936c-4b5d-4b84-8ff5-2558ab6710d8", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Redmond", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6694141,-122.1238767" } ], "locationText" : "Redmond, Washington, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Ruby, Go, Swift, Java, .Net, C++, AWS", "professionalSkills" : [ "Security design", "Threat modeling", "Security priorities", "Security decisions", "Security execution", "Security vision", "Security culture", "Security advocates", "Security engineers", "Security testing", "Security issue investigation", "Security operations", "Security linting", "Static analysis" ], "hardSkillsList" : [ "Programming", "Scripting", "Code review", "Troubleshooting systems", "Log analysis", "Task automation", "Penetration tests" ], "hardSkills" : [ { "name" : "Programming", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Code review", "level" : "intermediate" }, { "name" : "Troubleshooting systems", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Task automation", "level" : "intermediate" }, { "name" : "Penetration tests", "level" : "intermediate" } ], "majorSkills" : "Satellite security, Broadband security, Security engineering, Product security", "majorSkillsList" : [ "Satellite security", "Broadband security", "Security engineering", "Product security" ], "coreResponsibilities" : "Establish product-specific security bar, Establish threat models, Establish security priorities, Identify design defects, Identify implementation defects, Provide consultation on security decisions, Collaborate to define security priorities, Act as trusted advisor, Provide direction for security, Measure org's security execution, Guide teams towards secure products, Assess technical debt, Assess risk, Provide strategic direction, Address vulnerabilities, Fortify products, Lead burn down of risk, Guide teams towards secure solutions, Invent secure-by-default solutions, Propose secure-by-default solutions, Leverage automation support, Advocate for new testing tools, Advocate for detection mechanisms, Enable builder teams, Understand build processes, Ensure use of security linting, Ensure use of static analysis tools, Help find security solutions, Reduce security costs, Instill security culture, Mentor builders, Assist Red Teams, Assist in scoping penetration tests, Deep-dive on engagements, Investigate emerging security issues, Root cause security issues, Devise prevention mechanisms, Propose security vision, Deliver security protecting customers, Hack bleeding edge tech, Evaluate org performance, Identify architectural defects, Propose new security initiatives", "teamCollaboration" : "Builder teams; Automation teams; Red Teams", "domainKnowledge" : "Satellite broadband; Telecom service; Low Earth Orbit; Network connectivity; Customer data protection; Security systems; Security mechanisms; Authentication tokens; Service to service communications; Confidential new products; Incident analysis; Architectural defects", "domainList" : [ "satellite-broadband", "telecom-service", "low-earth-orbit", "network-connectivity", "customer-data-protection", "security-systems", "security-mechanisms", "authentication-tokens", "service-to-service-communications", "confidential-new-products", "incident-analysis", "architectural-defects" ], "domainSpecificKnowledge" : [ "Satellite broadband", "Telecom service", "Low Earth Orbit", "Network connectivity", "Customer data protection", "Security systems", "Security mechanisms", "Authentication tokens", "Service to service communications", "Confidential new products", "Incident analysis", "Architectural defects" ], "toolProficiency" : [ "Command line tools", "Static analysis tools" ], "innovationCreativity" : "Invent & propose solutions; Hack bleeding edge tech", "problemSolvingSkills" : "Troubleshooting systems issues; Analyzing logs; Root cause analysis; Security problem solving", "specialRequirements" : "U. S. citizen or national, U. S. permanent resident, Lawfully admitted refugee, Granted asylum", "qualificationsBasic" : "3+ years programming in Python, Ruby, Go, Swift, Java, .Net, C++, 2+ years scripting, programming, security code review, 2+ years troubleshooting systems issues, analyzing logs, automating tasks, Bachelor's degree in STEM or IT Security experience, Knowledge of security vulnerabilities and remediation", "qualificationsPreferred" : "2+ years threat modeling, secure coding, identity management, cryptography, system administration, network security, Experience with AWS products and services, Experience performing security activities across SDLC phases", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Project Leo is an initiative to launch a constellation of Low Earth Orbit satellites that will provide low-latency, high-speed broadband network connectivity to unserved and underserved communities around the world. Have you wanted an opportunity to secure an advanced satellite based broadband telecom service? The Leo Security team owns the security of product and operations of Project Leo end-to-end. We provide the necessary infrastructure and mechanisms to ensure the security of our satellite constellation and to protect the integrity and confidentiality of our customer data. Our team drives the research & development, deployment and operation of several mission-critical security systems and mechanisms. You will work in a start-up like environment, backed by Amazon’s infrastructure to bootstrap security mechanisms, and help instill the security culture in the organization. Export Control Requirement Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum. Key job responsibilities You will be responsible for establishing product-specific security bar, threat models, and security priorities. These will aide builders in ensuring consistent security execution across the business. You’ll identify design & implementation defects. You'll support product development processes by providing consultation services on difficult security decisions. You will collaborate with business leaders to define security priorities. You will support product leaders by acting as a trusted advisor. You will support leaders by providing them with direction that makes security easy. You will help leaders measure their org's security execution. You'll guide teams towards outcomes that produce products that safely handle customer data. You will collaborate with builder teams to assess technical debt and risk. You will provide strategic direction that addresses vulnerabilities and fortifies our products. You will be a resource that leads the burn down of long-term risk. You will guide teams towards solutions that are secure by default. If secure-by-default solutions don’t exist, you will invent & propose them. You will leverage support from automation teams that find discoverable vulnerabilities. You will advocate for the creation & deployment of new testing tools, and detection mechanisms. You will enable builder teams to become proactive & self-sufficient on security. You will work with builder teams to understand their build processes. You'll ensure that they use appropriate security linting & static analysis tools. You'll help our builders find security solutions that reduce security operations costs over time. You will instill a security culture in builder teams. You will mentor builders who aspire to become security advocates & security engineers via 1-1 sessions & office hours. You will assist Red Teams in identifying security testing priorities. You will assist in scoping penetration tests and help deep-dive on these engagements. You will investigate emerging security issue, root cause them, and devise mechanisms to prevent them. You will propose a security vision for the business that delivers security that protects our customers. And last of all, you will hack some really cool bleeding edge tech! A day in the life In this highly dynamic role, you'll be accountable for deciding where your time investments provide the most value. You will have a blend of proactive and reactive work. Teams will reach out for ideas on how to handle a wide variety of security problems. You can anticipate implementation questions like \"What's the right way to handle authentication tokens in service to service communications?\" \"We need to define security requirements for a confidential new product launch.\" \"We've experienced an incident and need to perform 5 why's analysis to identify and correct the problem that produced the incident.\" When you're not working on responding to the questions of your builder teams, you will be evaluating overall org performance to identify architectural defects and proposing new security initiatives to correct problems in the org. You will help Amazon maintain a high bar for customer security. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience - 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience - Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or experience in IT Security - Knowledge of industry-based security vulnerabilities and remediation techniques Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Experience with AWS products and services - Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Redmond - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "Security Engineer at Amazon.com Services LLC. Skills: Satellite security, Broadband security, Security engineering, Product security. Establish product-specific security bar. Establish threat models", "postedDate" : "2026-06-13T17:37:35.072", "createdAt" : "2026-06-13T17:37:35.072", "lastUpdated" : "2026-06-15T07:06:20.920", "ingestTimestamp" : "2026-06-13T17:37:35.072", "mongoId" : "69fe47284c40e2acd1f59711", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10415279/apply", "salaryAnnualMin" : 159300, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Programming", "Scripting", "Code review", "Troubleshooting systems", "Log analysis", "Task automation", "Penetration tests", "Satellite security", "Broadband security", "Security engineering", "Product security", "Security design", "Threat modeling", "Security priorities", "Security decisions", "Security execution", "Security vision", "Security culture", "Security advocates", "Security engineers", "Security testing", "Security issue investigation", "Security operations", "Security linting", "Static analysis", "Satellite broadband", "Telecom service", "Low Earth Orbit", "Network connectivity", "Customer data protection", "Security systems", "Security mechanisms", "Authentication tokens", "Service to service communications", "Confidential new products", "Incident analysis", "Architectural defects", "Command line tools", "Static analysis tools" ], "skillCount" : 39, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 777.78815, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2a48e474d8ee00a05e251c", "title" : "Contract Special Security Officer (CSSO)", "company" : "Accenture Federal Services", "salary" : { "min" : 115000.0, "max" : 155000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Contract Special Security Officer in Chantilly, United States, adjusted for Accenture Federal Services' size and the government industry." }, "location" : "Chantilly, Virginia, United States", "locations" : [ "Chantilly", "Virginia", "United States" ], "timestamp" : "2026-06-14T06:45:37.278", "fingerprint" : "224db01d68e1224e7bd57ac6de2ecd2321a7f3b25c3fb3f26b7ea25f5744dced", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://boards.greenhouse.io/accenturefederalservices/jobs/4688175006?gh_jid=4688175006", "externalId" : "4688175006", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Chantilly", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8852190,-77.4486772" } ], "locationText" : "Chantilly, Virginia, United States", "employmentType" : "CONTRACT", "professionalSkills" : [ "Industrial Security" ], "hardSkillsList" : [ "Personnel clearance processing", "Visit certifications", "Document control", "Physical security", "COMSEC management", "Crypto gear safeguarding", "SCIF accreditation", "SCIF integrity", "SCIF monitoring", "SCIF response", "Proposal response write-up", "Program security records", "Incident reports", "Investigation findings" ], "hardSkills" : [ { "name" : "Personnel clearance processing", "level" : "intermediate" }, { "name" : "Visit certifications", "level" : "intermediate" }, { "name" : "Document control", "level" : "intermediate" }, { "name" : "Physical security", "level" : "intermediate" }, { "name" : "COMSEC management", "level" : "intermediate" }, { "name" : "Crypto gear safeguarding", "level" : "intermediate" }, { "name" : "SCIF accreditation", "level" : "intermediate" }, { "name" : "SCIF integrity", "level" : "intermediate" }, { "name" : "SCIF monitoring", "level" : "intermediate" }, { "name" : "SCIF response", "level" : "intermediate" }, { "name" : "Proposal response write-up", "level" : "intermediate" }, { "name" : "Program security records", "level" : "intermediate" }, { "name" : "Incident reports", "level" : "intermediate" }, { "name" : "Investigation findings", "level" : "intermediate" } ], "majorSkills" : "Industrial Security, SCIF management, COMSEC management", "majorSkillsList" : [ "Industrial Security", "SCIF management", "COMSEC management" ], "coreResponsibilities" : "Manage industrial security programs, Administer industrial security programs, Support personnel clearance processing, Support visit certifications, Support document control, Support physical security, Support proposals, Respond to alarms, Conduct self-inspections, Manage security inspections, Manage security audits, Represent security inspections, Represent security audits, Interact with customers, Assist in onboarding processes, Assist in offboarding processes, Provide on-site security assistance, Manage COMSEC crypto gear, Safeguard COMSEC crypto gear, Act as classified system POC, Maintain access with system administrators, Coordinate with system administrators, Serve as POCs for guards, Ensure secure space alarm monitoring, Maintain PERSEC templates, Maintain PERSEC instructions, Coordinate SCIF conference room use, Maintain SCIF accreditation, Maintain SCIF integrity, Monitor SCIF requirements, Respond to SCIF requirements, Integrate with ISSM, Install client systems, Accredit client systems, Provide SCIF construction guidance, Oversee SCIF construction, Direct SCIF construction, Provide proposal response write-up, Provide proposal response guidance, Provide full-service IC support, Maintain Industrial Security compliance, Manage program engagement, Manage program collaboration, Manage program integration, Manage program reporting, Draft program security records, Maintain program security records, Update program security records, Draft incident reports, Maintain incident reports, Draft investigation findings, Maintain investigation findings, Maintain required clearance level, Maintain access to client IT networks", "teamCollaboration" : "Cross-functional coordination", "domainKnowledge" : "ICD policies; Government security directives; Adjudicative standards; COMSEC; SCIF operations; Intelligence Community", "domainList" : [ "icd-policies", "government-security-directives", "adjudicative-standards", "comsec", "scif-operations", "intelligence-community" ], "domainSpecificKnowledge" : [ "ICD policies", "Government security directives", "Adjudicative standards", "COMSEC", "SCIF operations", "Intelligence Community" ], "documentationSkills" : "Program security records; Incident reports; Investigation findings", "continuousLearning" : "Certifications; Industry training", "specialRequirements" : "Active TS/SCI with Polygraph", "qualificationsBasic" : "U. S. Citizen, 6 years Industrial Security experience, Knowledge of ICD policies, Knowledge of government security directives, Hands-on SCIF management, Hands-on SCIF operations, Working knowledge of 13 adjudicative standards, Working knowledge of related reporting requirements, Active TS/SCI with Polygraph", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. Our 13,000+ people are united in a shared purpose to pursue the limitless potential of technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations. Join Accenture Federal Services, a technology company within global Accenture. Recognized as a Glassdoor Top 100 Best Place to Work, we offer a collaborative and caring community where you feel like you belong and are empowered to grow, learn and thrive through hands-on experience, certifications, industry training and more. Join us to drive positive, lasting change that moves missions and the government forward! The work: Manage and administer all aspects of industrial security programs for multiple programs in compliance with the ICD’s and other applicable government security directives Support personnel clearance processing, visit certifications, document control, physical security, proposals, including alarm responses Conduct self-inspections; manage preparations for and representation of security inspections and audits by government security personnel Routinely interact with both internal and external customers in support of program-related activities Assist in the onboarding and offboarding processes as needed or requested by PERSEC CSSO Provide on-site security assistance Responsible for managing and safeguarding COMSEC (Communications Security) crypto gear Act as classified system Point of Contact (POC) and maintain access and coordination with system administrators Serve as Points of Contact (POCs) for guards regarding secure spaces Ensure secure space alarm monitoring is accurate and up to date with their names and contact details Maintain and manage all PERSEC templates and instructions on the high side Coordinate the use of SCIF conference rooms Manage a shared calendar to facilitate scheduling and usage of these spaces Maintain SCIF accreditation, integrity and all associated requirements for monitoring and response Responsible for integration with ISSM for installation and accreditation of client systems Provide guidance, oversee, and direct SCIF construction Provide proposal response write-up and guidance Active on-site employee, responsible for full-service IC support and Industrial Security compliance for related AFS programs, customers, contracts and clients Responsible for program engagement, collaboration, integration and reporting across the Corporate Security Directorate Responsible for drafting, maintaining and updating all program security records, required updates, incident reports, investigations and findings Maintaining required clearance level and access to client IT related networks for performance of duties Here's what you need: Must be a U. S. Citizen 6 years of Industrial Security experience with the Intelligence Community Knowledge of ICD policies (e. g. ICD 705, ICD 704) and regulations. Hands-on experience with SCIF management and operations Working knowledge of 13 adjudicative standards and related reporting requirements Security Clearance: Active TS/SCI with Polygraph As required by local law, Accenture Federal Services provides reasonable ranges of compensation for hired roles based on labor costs in the states of California, Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, New Jersey, New York, Washington, Vermont, the District of Columbia, and the city of Cleveland. The base pay range for this position in these locations is shown below. Compensation for roles at Accenture Federal Services varies depending on a wide array of factors, including but not limited to office location, role, skill set, and level of experience. Accenture Federal Services offers a wide variety of benefits. You can find more information on benefits here. We accept applications on an on-going basis and there is no fixed deadline to apply. The pay range for the states of California, Colorado, Hawaii, Illinois, Maryland, Massachusetts, Minnesota, New Jersey, New York, Washington, Vermont, the District of Columbia, and the city of Cleveland is: $108,400—$203,400 USD What We Believe As a company wholly dedicated to serving the US federal government, we bring together the best talent to help reinvent how federal agencies operate and deliver greater value for their mission and the American people. We have an unwavering commitment to creating a culture in which all our people are respected, feel a sense of belonging, and have equal opportunity. As a business imperative, every person at Accenture Federal Services has the responsibility to create and sustain a culture where everyone feels welcomed and included. This is grounded in our core values and our experience that hiring and developing great people who reflect different perspectives, experiences, and backgrounds is key to driving innovation and delivering the results that our clients and the country count on. Equal Employment Opportunity Statement We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities. For details, view a copy of the Accenture Federal Services Equal Opportunity Policy Statement. Accenture Federal Services is an Equal Employment Opportunity employer. Additionally, as an Affirmative Action Employer for Veterans and Individuals with Disabilities, Accenture Federal Services is committed to providing veteran employment opportunities to our service men and women. Requesting An Accommodation Accenture Federal Services is committed to providing equal employment opportunities for persons with disabilities or religious observances, including reasonable accommodation when needed. If you are hired by Accenture Federal Services and require accommodation to perform the essential functions of your role, you will be asked to participate in our reasonable accommodation process. Accommodations made to facilitate the recruiting process are not a guarantee of future or continued accommodations once hired. If you are being considered for employment opportunities with Accenture Federal Services and need an accommodation for a disability or religious observance during the interview process or for the job you are interviewing for, please speak with your recruiter. Other Employment Statements Applicants for employment in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States. Candidates who are currently employed by a client of Accenture Federal Services or an affiliated Accenture business may not be eligible for consideration. Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process. The Company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. Additionally, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the Company's legal duty to furnish information. California requires additional notifications for applicants and employees. If you are a California resident, live in or plan to work from Los Angeles County upon being hired for this position, please click here for additional important information.", "summaryDescription" : "Contract Special Security Officer (CSSO) at Accenture Federal Services. Skills: Industrial Security, SCIF management, COMSEC management. Manage industrial security programs. Administer industrial security programs", "postedDate" : "2026-06-11T18:40:50.272", "createdAt" : "2026-06-11T18:40:50.272", "lastUpdated" : "2026-06-14T06:45:37.278", "ingestTimestamp" : "2026-06-11T18:40:50.272", "mongoId" : "6a2a48e474d8ee00a05e251c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115000, "salaryAnnualMax" : 155000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Personnel clearance processing", "Visit certifications", "Document control", "Physical security", "COMSEC management", "Crypto gear safeguarding", "SCIF accreditation", "SCIF integrity", "SCIF monitoring", "SCIF response", "Proposal response write-up", "Program security records", "Incident reports", "Investigation findings", "Industrial Security", "SCIF management", "ICD policies", "Government security directives", "Adjudicative standards", "COMSEC", "SCIF operations", "Intelligence Community" ], "skillCount" : 22, "jobCategory" : "operations", "jobSubcategory" : "60035512---afs-security-facility-operations", "dataQualityScore" : 0.8888889, "_score" : 775.91656, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2c8d6f74d8ee00a0978f68", "title" : "Security Engineer", "company" : "Ibotta", "industry" : "Shared Services Job Group", "salary" : { "min" : 115000.0, "max" : 130000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Hybrid - Denver", "locations" : [ "Hybrid - Denver" ], "certifications" : [ "CompTIA SecAI+", "ECPPT", "EWPT", "GWAPT", "OSCP" ], "timestamp" : "2026-06-15T08:54:30.234", "fingerprint" : "e028ab89d1b279c5ec43f86420d61ef258621a0a0f480084179ac34701d6f1e3", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/ibotta/34f9ed92-5608-4faf-9d83-de9df3b33005/application", "externalId" : "34f9ed92-5608-4faf-9d83-de9df3b33005", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Denver", "state" : "Colorado", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "39.7392364,-104.9848620" } ], "locationText" : "Denver, Colorado, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 4, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Application Security, Vulnerability Management, Cloud Infrastructure, Python, Go, Docker, Kubernetes, SAST, DAST, SCA, CI/CD, AWS, GCP, Infrastructure as Code, IaC scanning, IAM policies, Terraform, Web API security, Authentication protocols, OWASP Top 10", "professionalSkills" : [ "Application security assessments", "Code reviews", "Penetration testing", "Bug bounty program", "Threat modeling", "Secure coding practices", "Runtime security controls", "Container security controls", "Infrastructure security checks", "AI-generated code evaluation", "Model-serving endpoint security", "Incident response", "Custom security tooling", "Automation scripting" ], "hardSkillsList" : [ "Manual code reviews", "Penetration testing", "Threat modeling", "Secure coding", "Runtime security", "Container security", "Infrastructure scanning", "AI code evaluation", "Prompt injection", "Data poisoning", "Model inversion" ], "hardSkills" : [ { "name" : "Manual code reviews", "level" : "intermediate" }, { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Secure coding", "level" : "intermediate" }, { "name" : "Runtime security", "level" : "intermediate" }, { "name" : "Container security", "level" : "intermediate" }, { "name" : "Infrastructure scanning", "level" : "intermediate" }, { "name" : "AI code evaluation", "level" : "intermediate" }, { "name" : "Prompt injection", "level" : "intermediate" }, { "name" : "Data poisoning", "level" : "intermediate" }, { "name" : "Model inversion", "level" : "intermediate" } ], "majorSkills" : "Application Security, Vulnerability Management, Cloud Infrastructure, Secure AI Coding", "majorSkillsList" : [ "Application Security", "Vulnerability Management", "Cloud Infrastructure", "Secure AI Coding" ], "coreResponsibilities" : "Perform application security assessments, Perform manual code reviews, Perform penetration testing, Mature bug bounty program, Analyze application architecture, Identify weaknesses, Develop opportunities for improvement, Integrate SAST tools, Manage SAST tools, Integrate DAST tools, Manage DAST tools, Integrate SCA tools, Manage SCA tools, Integrate tools within CI/CD, Manage tools within CI/CD, Lead threat modeling, Develop secure coding practices, Provide training to developers, Design runtime security controls, Implement runtime security controls, Design container security controls, Implement container security controls, Automate infrastructure security checks, Evaluate security of AI-generated code, Implement guardrails for model-serving endpoints, Stay ahead of AI-specific threats, Participate in on-call rotation, Participate in incident response, Handle data securely, Identify phishing attempts, Report security incidents", "teamCollaboration" : "Key stakeholders; Mobile team; Platform team; Infrastructure team; AI enablement team; Engineering team; Technical team members; Non-technical team members", "projectManagementSkills" : [ "CI/CD" ], "domainKnowledge" : "Application Security; Cloud-native environments; AI technologies; Secure AI coding; AI/ML workloads; Web API security; Modern authentication protocols; Prompt injection; Data poisoning; Model inversion", "domainList" : [ "application-security", "cloud-native-environments", "ai-technologies", "secure-ai-coding", "ai-ml-workloads", "web-api-security", "modern-authentication-protocols", "prompt-injection", "data-poisoning", "model-inversion" ], "domainSpecificKnowledge" : [ "Application Security", "Cloud-native environments", "AI technologies", "Secure AI coding", "AI/ML workloads", "Web API security", "Modern authentication protocols", "Prompt injection", "Data poisoning", "Model inversion" ], "toolProficiency" : [ "SAST tools", "DAST tools", "SCA tools", "IaC scanning tools", "Terraform" ], "communicationSkills" : "Oral communication; Written communication", "problemSolvingSkills" : "Problem-solving skills", "specialRequirements" : "24/7 on-call rotation, Relocation bonus", "qualificationsBasic" : "4+ years security engineering, 4+ years application development, 4+ years application security, Proficiency in Python, Proficiency in Go, Experience with Docker, Experience with Kubernetes, Understanding of CI/CD, Understanding of Web API security, Understanding of authentication protocols, Familiarity with OWASP Top 10, Working knowledge of web application testing tools, Ability to work effectively across organization, Collaborate effectively with technical teams, Collaborate effectively with non-technical teams, Excellent oral communication skills, Excellent written communication skills, Effective problem-solving skills, Experience building custom security tooling, Experience building automation scripts", "qualificationsPreferred" : "Basic knowledge of networking security, Knowledge of AWS security services, Knowledge of IaC, Experience writing secure IAM policies, Experience writing Terraform configurations, CompTIA SecAI+ certification, ECPPT certification, EWPT certification, GWAPT certification, OSCP certification, Similar certification", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Ibotta is seeking a Security Engineer with a deep expertise in Application Security, Vulnerability Management, and Cloud Infrastructure to join our innovative team and contribute to our mission to Make Every Purchase Rewarding. In this role, you will be ensuring the security of our software development lifecycle (SDLC) and our cloud-native environments. A key focus of this position will be addressing the emerging security challenges posed by Artificial Intelligence (AI) technologies, specifically around secure AI coding practices and the infrastructure that supports AI/ML workloads. This position is located in Denver, Colorado as a hybrid position requiring 3 days in office (Tuesday, Wednesday, and Thursday). Candidates must live in the United States. Not based in Denver? We will offer a relocation bonus to help make your move to the Mile High City a smooth one. WHAT YOU WILL BE DOING: - Perform application security assessments, including manual code reviews and penetration testing. - Mature Ibotta’s bug bounty program to scale with AI generated submissions and attack surface. - Analyze Ibotta's application architecture to identify weaknesses and develop opportunities for improvement. - Integrate and manage SAST, DAST, and SCA tools within the CI/CD pipeline. - Lead threat modeling for new application features with key stakeholders across mobile, platform, infrastructure and AI enablement. - Develop and maintain secure coding practices, provide training to developers. - Work with Ibotta’s engineering team to design, implement, and monitor runtime and container security controls across cloud platforms (AWS/GCP). - Automate infrastructure security checks using Infrastructure as Code (IaC) scanning tools. - Evaluate the security of AI-generated code and implement guardrails for model-serving endpoints in the development process. - Stay ahead of the curve on AI-specific threats such as prompt injection, data poisoning, and model inversion. - Participate in a 24/7 on-call rotation and incident response. - Embrace and uphold Ibotta’s Core Values: Integrity, Boldness, Ownership, Teamwork, Transparency & A Good Idea Can Come from Anywhere WHAT WE ARE LOOKING FOR: - 4+ years in security engineering, application development, or application security. - Proficiency in languages like Python, Go, or Java; experience with Docker/Kubernetes. - Basic knowledge of networking security is a plus. - Strong knowledge of AWS security services and IaC (Terraform). Experience writing secure IAM policies and other configurations in Terraform a plus. - Understanding of Continuous Integrations/Testing/Delivery - Strong understanding of Web API security patterns and modern authentication protocols. - Familiarity with OWASP Top 10 and implementing technical controls to address vulnerabilities. - Working knowledge of web application testing tools. - One or some combination of the following are a plus but not required: CompTIA SecAI+, eCPPT, eWPT, GWAPT, OSCP, or similar. - Must have the ability to work effectively across the organization/collaborate effectively with both technical and non-technical team members, possess excellent oral & written communications skills, and demonstrate effective problem-solving skills. - Experience building custom security tooling or automation scripts. About Ibotta (\"I bought a...\") Ibotta (NYSE: IBTA) is a leading performance marketing platform allowing brands to deliver digital promotions to over 200 million consumers through a network of publishers called the Ibotta Performance Network (IPN). The IPN allows marketers to influence what people buy, and where and how often they shop – all while paying only when their campaigns directly result in a sale. American shoppers have earned over $2.6 billion through the IPN since 2012. The largest tech IPO in history to come out of Colorado, Ibotta is headquartered in Denver, and is continually listed as a top place to work by The Denver Post and Inc. Magazine. To learn more about what our Tech teams are doing day to day, visit Building Ibotta on https://medium.com/building-ibottaMedium.com http://Medium.com. Additional Details: - This position is located in Denver, CO and includes competitive pay, flexible time off, benefits package (including medical, dental, vision), Employee Stock Purchase Program, and 401k match. Denver office perks include paid parking, snacks, and occasional meals. - Base compensation range: $115,000 - $130,000. Equity is included in overall compensation package. This compensation range is specific to the United States labor market and may be adjusted based on actual experience. - Ibotta is an Equal Opportunity Employer. Ibotta’s employment decisions are made without regard of race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, sexual orientation, or any other legally protected status. - Applicants must be currently authorized to work in the United States on a full-time basis. - Applicants are accepted until the position is filled. - For the security of our employees and the business, all employees are responsible for the secure handling of data in accordance with our security policies, identifying and reporting phishing attempts, as well as reporting security incidents to the proper channels. Recruiting Agency Notice Ibotta does not accept agency resumes and is not responsible for any fees related to unsolicited resumes. Please do not forward resumes to any Ibotta employees. #LI-Hybrid #BI-Hybrid", "summaryDescription" : "Security Engineer at Ibotta. Skills: Application Security, Vulnerability Management, Cloud Infrastructure, Secure AI Coding. Perform application security assessments. Perform manual code reviews", "createdAt" : "2026-06-14T04:29:33.893", "lastUpdated" : "2026-06-15T08:54:30.234", "ingestTimestamp" : "2026-06-14T04:29:33.893", "mongoId" : "6a2c8d6f74d8ee00a0978f68", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115000, "salaryAnnualMax" : 130000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Manual code reviews", "Penetration testing", "Threat modeling", "Secure coding", "Runtime security", "Container security", "Infrastructure scanning", "AI code evaluation", "Prompt injection", "Data poisoning", "Model inversion", "Application Security", "Vulnerability Management", "Cloud Infrastructure", "Secure AI Coding", "Application security assessments", "Code reviews", "Bug bounty program", "Secure coding practices", "Runtime security controls", "Container security controls", "Infrastructure security checks", "AI-generated code evaluation", "Model-serving endpoint security", "Incident response", "Custom security tooling", "Automation scripting", "CI/CD", "Cloud-native environments", "AI technologies", "Secure AI coding", "AI/ML workloads", "Web API security", "Modern authentication protocols", "CompTIA SecAI+", "ECPPT", "EWPT", "GWAPT", "OSCP", "SAST tools", "DAST tools", "SCA tools", "IaC scanning tools", "Terraform" ], "skillCount" : 44, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 775.82837, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c7c3974d8ee00a094cd47", "title" : "Security Engineer", "company" : "Toss", "industry" : "FinTech", "salary" : { "min" : 6.5E7, "max" : 9.5E7, "currency" : "KRW", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Security Engineer in Seoul, South Korea, adjusted for the FinTech industry and company size." }, "location" : "Seoul, Seoul, South Korea", "locations" : [ "Seoul", "Seoul", "South Korea" ], "timestamp" : "2026-06-15T07:31:00.071", "fingerprint" : "dc3c90c65e1bd360a7ecbf6c4a3ee335b2989fce90bf59cebe9f216bcf80a63e", "source" : "greenhouse", "language" : "ko", "applyUrl" : "https://toss.im/career/job-detail?gh_jid=6255610003", "externalId" : "6255610003", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seoul", "state" : "Seoul", "country" : "South Korea", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "37.5534363,126.9697994" } ], "locationText" : "Seoul, Seoul, South Korea", "employmentType" : "FULL_TIME", "technicalSkills" : "UTM, Proxy, SASE, ZTNA, WAF, IPS, DDoS, AWS, Azure, Openstack, Google Workspace, M365, SAC, DAC", "professionalSkills" : [ "Information security solutions", "Security infrastructure architecture", "Access control", "Information leakage response", "Security system construction", "Security management", "Security visibility", "Security management system", "Compliance" ], "hardSkillsList" : [ "Network security", "Cloud security", "Access control design", "Security system operation", "Security compliance" ], "hardSkills" : [ { "name" : "Network security", "level" : "intermediate" }, { "name" : "Cloud security", "level" : "intermediate" }, { "name" : "Access control design", "level" : "intermediate" }, { "name" : "Security system operation", "level" : "intermediate" }, { "name" : "Security compliance", "level" : "intermediate" } ], "majorSkills" : "Network security systems, Cloud infrastructure security, Access control models", "majorSkillsList" : [ "Network security systems", "Cloud infrastructure security", "Access control models" ], "coreResponsibilities" : "Build and operate information security solutions, Protect Toss Income services and employee environment, Establish access control measures for information systems, Construct and operate security solutions, Manage security solutions, Establish information leakage response system, Build security systems for financial compliance, Operate security systems for financial compliance, Manage security systems for financial compliance, Secure security visibility, Improve security management and access systems, Research security management and access systems", "teamCollaboration" : "Security Green Team", "domainKnowledge" : "Financial compliance; Network segmentation; Information security frameworks; Zero Trust security", "domainList" : [ "financial-compliance", "network-segmentation", "information-security-frameworks", "zero-trust-security" ], "domainSpecificKnowledge" : [ "Financial compliance", "Network segmentation", "Information security frameworks", "Zero Trust security" ], "qualificationsBasic" : "Network security systems experience, Cloud infrastructure and service experience, Server and database access control experience", "qualificationsPreferred" : "ISO27001, ISO27701, PCI-DSS, ISMS-P experience, Zero Trust architecture experience, Security system construction and operation management experience", "rawDescription" : "토스인컴을 소개해 드려요 - 토스인컴은 금융이 시작되는 시점인 ‘소득’과 관련된 서비스를 제공하기 위해 토스커뮤니티의 새로운 계열사로 가장 최근에 출범했어요. - 토스인컴은 특히 세무 영역에 집중하고 있어요. 세무는 고객이 매일 써야 하는 금융 서비스는 아니지만 금융 생활에서 반드시 마주치게 되는 영역인 만큼, 개인이 스스로 해결하기 어려운 세무 영역의 불편함을 해소하기 위해 노력해요. - 토스가 모든 사람들이 보다 쉽고 편리한 금융 생활을 할 수 있도록 혁신적인 금융 서비스를 선보여 온 것처럼, 토스인컴은 ‘숨은 환급액 찾기'와 같은 서비스를 통해 새로운 가치를 전달하고 있어요. - 토스커뮤니티의 가장 신생 계열사인만큼, 초기 멤버가 되어 함께 팀을 꾸려갈 수 있어요. 합류하면 함께 할 업무예요 - 토스인컴의 서비스와 임직원의 업무환경을 보호하기 위한 정보보안 솔루션을 구축하고 운영하는 업무를 수행해요. - 토스인컴의 정보시스템(DB, Server, Network 등)을 보호하기 위한 접근 통제 방안을 마련하여, 보안 솔루션의 구축 및 운영, 관리 업무를 수행해요. - 금융 컴플라이언스에 따른 망분리 환경 및 정보 유출 대응 체계 구축에 필요한 보안 시스템의 구축 및 운영 관리 업무를 수행해요. - 안전한 업무 환경 구성을 위한 보안 가시성 확보 및 보안 관리 및 접근 체계를 개선하고 연구하는 업무를 수행해요. 이런 분과 함께하고 싶어요 - 방화벽(UTM), Proxy, SASE / ZTNA, WAF, IPS, DDoS와 같은 네트워크 보안 시스템 구축, 운영 및 보안 인프라 아키텍처 설계 경험이 필요해요. - Cloud (IaaS - AWS, Azure, Openstack 등 / SaaS - Google Workspace, M365 등) 기반의 인프라 및 서비스 구축과 운영, 보안 관리 경험이 필요해요. - ISO27001, ISO27701, PCI-DSS, ISMS-P 등 국내외 보안인증 및 금융 규제와 관련한 인허가 및 심사 대응 경험과 이에 대한 정보보호체계 및 컴플라이언스에 대한 이해가 있으면 더욱 좋아요. - Zero Trust 기반의 보안 아키텍처 구축 및 운영 경험이 있으면 더욱 좋아요. - 서버 접근제어(SAC), 디비 접근제어(DAC)를 통한 서버 및 데이터 베이스 접근제어 모델 설계 및 구축, 운영 경험이 있으면 더욱 좋아요. 이력서는 이렇게 작성하시는 걸 추천해요 - 수행하신 업무에 대해 구체적인 사례를 중심으로 작성해 주세요. 특히, 프로젝트에서 맡으셨던 역할, 사용하셨던 기술 스택, 그리고 프로젝트 전후의 개선 사항 등을 상세하게 설명해 주시면 좋아요. - 문제를 해결하는 과정에서 겪었던 어려움이 있다면, 어떻게 고민하고 해결해 나가셨는지 구체적으로 설명해 주시면 좋아요. 토스로의 합류여정 - 서류접수 > 직무 인터뷰 > 문화적합성 인터뷰 > 레퍼런스 체크 > 처우 협의 > 최종 합격 및 입사 함께할 동료를 위한 한마디 > \"혁신적인 기술이 적용되는 환경에서 Security Engineer로서 즐겁게 일하며, 함께 성장할 수 있습니다!\" - Security Green Team은 자산의 보안 위협을 찾아내고, 위험을 줄이며 위협 수준에 맞는 통제 구조를 설계하고 있어요. 이 과정에서 보안과 생산성의 균형을 맞춰가고 있고요. 기술을 활용해 통제를 구현하면서도 합리적인 결정을 내리고 있답니다. - Security Green Team에는 어려운 문제를 함께 고민하고 해결책을 찾는 동료들이 가득해요. 시행착오를 겪으면서도 서로의 노력을 인정하고 응원하는 분위기가 정말 좋고요. 저희 팀에 합류하신다면, 서로 도우며 더 나은 보안 솔루션을 만들어 나갈 수 있을거라 자부해요!", "summaryDescription" : "Security Engineer at Toss. Skills: Network security systems, Cloud infrastructure security, Access control models. Build and operate information security solutions. Protect Toss Income services and employee environment", "postedDate" : "2026-06-13T21:06:22.285", "createdAt" : "2026-06-13T21:06:22.285", "lastUpdated" : "2026-06-15T07:31:00.071", "ingestTimestamp" : "2026-06-13T21:06:22.285", "mongoId" : "6a2c7c3974d8ee00a094cd47", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Network security", "Cloud security", "Access control design", "Security system operation", "Security compliance", "Network security systems", "Cloud infrastructure security", "Access control models", "Information security solutions", "Security infrastructure architecture", "Access control", "Information leakage response", "Security system construction", "Security management", "Security visibility", "Security management system", "Compliance", "Financial compliance", "Network segmentation", "Information security frameworks", "Zero Trust security" ], "skillCount" : 21, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 773.8679, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "69d5e4952beec4dd3d931852", "title" : "Security Engineer", "company" : "Amazon Corporate Services Pty Ltd", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 135000.0, "max" : 195000.0, "currency" : "AUD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Security Engineer in Melbourne, Australia, adjusted for the technology industry and company size." }, "location" : "Melbourne, Victoria, AUS", "locations" : [ "Melbourne, Victoria, AUS" ], "timestamp" : "2026-06-15T04:19:18.986", "fingerprint" : "dab9db3012eef4edafb4c8629222dceda575403ca777c09ae42111e3f91df9de", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10385605/apply", "externalId" : "84707739-f0cd-402e-872d-51f4bfd5a98f", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Melbourne", "state" : "Victoria", "country" : "Australia", "continent" : "oc", "source" : "llm", "workMode" : "onsite", "geo" : "-37.8142454,144.9631732" } ], "locationText" : "Melbourne, Victoria, Australia", "employmentType" : "FULL_TIME", "technicalSkills" : "AWS, HTTP, DNS, TCP/IP, Cryptography, Application Security", "professionalSkills" : [ "Security operations", "Threat hunting", "Incident management", "Security monitoring", "Threat analysis", "Security data", "Security measures", "Security controls" ], "hardSkillsList" : [ "SIEM tuning", "Detection development", "Threat intelligence analysis", "Security automation", "Vulnerability remediation", "System hardening" ], "softSkillsList" : [ "Bias for Action", "Earn Trust" ], "hardSkills" : [ { "name" : "SIEM tuning", "level" : "intermediate" }, { "name" : "Detection development", "level" : "intermediate" }, { "name" : "Threat intelligence analysis", "level" : "intermediate" }, { "name" : "Security automation", "level" : "intermediate" }, { "name" : "Vulnerability remediation", "level" : "intermediate" }, { "name" : "System hardening", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Bias for Action" }, { "name" : "Earn Trust" } ], "majorSkills" : "Security Engineering, Incident Response, Threat Detection, SIEM", "majorSkillsList" : [ "Security Engineering", "Incident Response", "Threat Detection", "SIEM" ], "coreResponsibilities" : "Perform security event monitoring, Perform incident management, Perform incident response, Develop SIEM detections, Tune SIEM detections, Maintain SIEM detections, Develop SIEM dashboards, Tune SIEM dashboards, Maintain SIEM dashboards, Develop SIEM correlation rules, Tune SIEM correlation rules, Maintain SIEM correlation rules, Conduct proactive threat hunting, Conduct threat analysis, Identify suspicious behaviour, Investigate security alerts, Respond to security alerts, Escalate security alerts, Investigate security incidents, Respond to security incidents, Escalate security incidents, Support SIEM integration, Optimize SIEM integration, Support security data integration, Optimize security data integration, Contribute to SOC process improvement, Contribute to SOC automation initiatives, Author SOC SOPs, Author SOC runbooks, Apply MITRE ATT&CK, Apply NIST frameworks, Apply ISM, Apply PSPF, Perform on-call duties", "teamCollaboration" : "Work with security team; Collaborate with IT teams; Collaborate with network teams; Collaborate with application teams", "projectManagementSkills" : [ "Continuous improvement" ], "domainKnowledge" : "Australian Government security requirements; Protective Security Policy Framework; Information Security Manual; MITRE ATT&CK; NIST", "domainList" : [ "australian-government-security-requirements", "protective-security-policy-framework", "information-security-manual", "mitre-att-ck", "nist" ], "domainSpecificKnowledge" : [ "Australian Government security requirements", "Protective Security Policy Framework", "Information Security Manual", "MITRE ATT&CK", "NIST" ], "toolProficiency" : [ "Splunk", "Microsoft Sentinel", "Sumo Logic" ], "communicationSkills" : "Generate metrics; Generate dashboards; Executive reports", "documentationSkills" : "Authoring runbooks; Authoring SOPs", "innovationCreativity" : "Creative problem solving", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Data analysis", "specialRequirements" : "Australian citizens, Hold or eligible for security clearance, Complete Organisational Suitability Assessment, On-call duties", "outcomesObjectives" : "Ensure security and integrity; Implement robust security measures; Remediate identified vulnerabilities; Coordinate security patches; Coordinate system hardening; Provide security guidance; Ensure proper implementation of controls; Create security performance indicators; Build real-time dashboards", "qualificationsBasic" : "Australian citizens, Hold or eligible for security clearance, 3+ years SOC Analyst experience, 3+ years Defensive Cyber Role experience, Experience with SIEM tools, Experience with incident response, Experience with threat detection, Experience with security monitoring", "qualificationsPreferred" : "Working knowledge of foundational systems, Working knowledge of key security domains", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Applicants must be Australian citizens and hold or be eligible to obtain an Australian Government Security Clearance, with the ability to successfully complete an Organisational Suitability Assessment. For more information regarding security clearances please visit (https://www.agsva.gov.au/) Amazon Web Services (AWS) is the leading cloud service provider, providing virtualised infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises to large government customers, run their operations and applications on AWS’ highly secure infrastructure. AWS Security is looking for a Security Systems Engineer to play a pivotal role in ensuring the security and integrity of our systems and infrastructure. You will work closely with our security team to implement and maintain robust security measures that adhere to Australian Government security requirements, including the Protective Security Policy Framework (PSPF) and the Information Security Manual (ISM). Key job responsibilities Key responsibilities may include: • Performing security event monitoring, incident management and response. • Develop, tune, and maintain SIEM detections, dashboards, and correlation rules • Conduct proactive threat hunting and analysis to identify suspicious behaviour • Investigate, respond and be the escalation point for security alerts and incidents • Support the integration and optimisation of security data sources within SIEM platforms • Contribute to continuous improvement of SOC processes and automation initiatives including authoring SOC SOP’s and runbooks. • Apply frameworks such as MITRE ATT&CK and NIST in concert with the ISM and PSPF to guide security operations. • Perform on-call duties as required, out of business hours. Applicants must be Australian citizens and hold or be eligible to obtain an Australian Government Security Clearance with the ability to successfully complete an Organisational Suitability Assessment. More information regarding security clearances can be found at https://www.agsva.gov.au/ A day in the life A typical day for a Security Engineer may involve Responding to new detections: Monitor security alerts in real-time, investigate suspicious activities by analysing logs and network traffic, determine if incidents are legitimate threats or false positives, and coordinate immediate response actions including containment and remediation when threats are confirmed. Write security detections: Develop and implement custom detection rules based on emerging threat intelligence, tune existing security signatures to reduce false positives while maintaining coverage, and create automated alerts for specific attack patterns or indicators of compromise relevant to the organization's environment. Threat hunt: Proactively search through network logs, endpoint data, and system activities for signs of advanced persistent threats that may have evaded automated detection systems, using threat intelligence feeds and behavioural analysis to identify potential security breaches before they cause significant damage. Work with service teams on security issues: Collaborate with IT, network, and application teams to remediate identified vulnerabilities, coordinate security patches and system hardening efforts, provide security guidance during incident response, and ensure proper implementation of security controls across all infrastructure components. Generate metrics and dashboards: Create and maintain security performance indicators including incident response times, threat detection rates, and system availability metrics, develop executive-level reports summarizing security posture and trends, and build real-time dashboards for continuous monitoring of security operations effectiveness. About the team Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. The team is comprised of security professionals with a cross section of national security and private sector experience, providing a range of perspectives required for creative problem solving. We value diversity of thought, creativity, and a strong Bias for Action and Earn Trust. We believe that there are no \"perfect\" security solutions and we develop and iterate using a continuous improvement process. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Basic Qualifications: - 3+ years experience as a SOC Analyst or Defensive Cyber Role. - Experience with SIEM tools (e.g., Splunk, Microsoft Sentinel, Sumo Logic, or similar). - Demonstrated experience and application of incident response, threat detection, and security monitoring high security environments. Preferred Qualifications: - Good working knowledge of foundational systems and protocols e.g HTTP, DNS, TCP/IP. - Strong technical working knowledge of key security domains, e.g Cryptography, Identity & Access Management and Application Security. Acknowledgement of country: In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today. IDE statement: Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security Engineer at Amazon Corporate Services Pty Ltd. Skills: Security Engineering, Incident Response, Threat Detection, SIEM. Perform security event monitoring. Perform incident management", "postedDate" : "2026-06-13T12:59:33.903", "createdAt" : "2026-06-13T12:59:33.903", "lastUpdated" : "2026-06-15T04:19:18.986", "ingestTimestamp" : "2026-06-13T12:59:33.903", "mongoId" : "69d5e4952beec4dd3d931852", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10385605/apply", "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "SIEM tuning", "Detection development", "Threat intelligence analysis", "Security automation", "Vulnerability remediation", "System hardening", "Bias for Action", "Earn Trust", "Security Engineering", "Incident Response", "Threat Detection", "SIEM", "Security operations", "Threat hunting", "Incident management", "Security monitoring", "Threat analysis", "Security data", "Security measures", "Security controls", "Continuous improvement", "Australian Government security requirements", "Protective Security Policy Framework", "Information Security Manual", "MITRE ATT&CK", "NIST", "Splunk", "Microsoft Sentinel", "Sumo Logic" ], "skillCount" : 29, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 768.6674, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "69fc49a74c40e2acd1a8342e", "title" : "Cybersecurity Incident Responder", "company" : "Hyundai Capital America", "industry" : "Cybersecurity", "salary" : { "min" : 135000.0, "max" : 195000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Incident Responder in Irvine, United States, adjusted for the financial services industry and company size." }, "location" : "United States-California-Irvine", "locations" : [ "United States-California-Irvine", "
Headquarters 1 (HCA_HQ1)
3161 Michelson Dr. Ste 1900
Irvine, 92612

" ], "timestamp" : "2026-06-15T09:24:24.152", "fingerprint" : "7c883f724c7aebffb309e18fda9f927b1ceb1e3f904e382d522fc02772c83323", "source" : "taleo", "language" : "en", "applyUrl" : "https://hyundaicapital.taleo.net/careersection/ex/jobdetail.ftl?job=112985", "externalId" : "112985", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "technicalSkills" : "SIEM, EDR, Monitoring, Vulnerability management, Cloud environments, Endpoint data, Log data, Cloud data, Threat intelligence, Detection rules, Response automation", "professionalSkills" : [ "Incident response", "Threat detection", "Security monitoring", "Forensic analysis", "Detection engineering", "Risk communication", "Performance communication" ], "hardSkillsList" : [ "Incident lifecycle management", "Root cause analysis", "Alert triage", "Threat analysis", "SIEM tuning", "Detection tuning", "AI tuning", "Signal quality improvement", "False positive reduction", "Detection rule development", "Signature development", "Alert logic development", "Automation implementation", "Enrichment implementation", "Log visibility", "Telemetry coverage" ], "softSkillsList" : [ "Continuous learning" ], "hardSkills" : [ { "name" : "Incident lifecycle management", "level" : "intermediate" }, { "name" : "Root cause analysis", "level" : "intermediate" }, { "name" : "Alert triage", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "SIEM tuning", "level" : "intermediate" }, { "name" : "Detection tuning", "level" : "intermediate" }, { "name" : "AI tuning", "level" : "intermediate" }, { "name" : "Signal quality improvement", "level" : "intermediate" }, { "name" : "False positive reduction", "level" : "intermediate" }, { "name" : "Detection rule development", "level" : "intermediate" }, { "name" : "Signature development", "level" : "intermediate" }, { "name" : "Alert logic development", "level" : "intermediate" }, { "name" : "Automation implementation", "level" : "intermediate" }, { "name" : "Enrichment implementation", "level" : "intermediate" }, { "name" : "Log visibility", "level" : "intermediate" }, { "name" : "Telemetry coverage", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Continuous learning" } ], "majorSkills" : "Incident response, Threat detection, Security monitoring, SIEM platforms", "majorSkillsList" : [ "Incident response", "Threat detection", "Security monitoring", "SIEM platforms" ], "coreResponsibilities" : "Serve as lead responder for cybersecurity incidents, Correlate data from endpoints, Correlate data from networks, Correlate data from cloud environments, Identify true positives, Escalate critical incidents, Own incident lifecycle, Perform forensic analysis, Develop incident response playbooks, Maintain incident response playbooks, Execute incident response playbooks, Coordinate MSSP responders, Direct MSSP responders, Validate escalation, Ensure response quality, Maintain accurate incident records, Maintain investigation notes, Maintain remediation documentation, Produce incident metrics, Produce SOC KPIs, Maintain incident response documentation, Maintain SOC procedures, Lead post incident reviews, Document lessons learned, Drive measurable improvements, Actively monitor security alerts, Investigate security alerts, Validate security alerts, Perform advanced alert triage, Perform advanced threat analysis, Correlate telemetry, Distinguish threats from noise, Tune SIEM detections, Optimize SIEM detections, Tune SIEM analytics, Optimize SIEM analytics, Tune SIEM alerting logic, Optimize SIEM alerting logic, Tune SIEM AI, Optimize SIEM AI, Leverage threat intelligence platforms, Identify emerging financial sector threats, Translate intelligence into detection use cases, Refine detection rules, Refine signatures, Refine alert logic, Align logic to threat activity, Implement response automation, Implement enrichment, Accelerate triage, Accelerate containment, Partner with architecture teams, Partner with engineering teams, Ensure log visibility, Ensure telemetry coverage, Collaborate with IT Infrastructure, Collaborate with IAM, Collaborate with DLP, Collaborate with Application Security, Collaborate with Cloud teams, Support vulnerability management activities, Provide incident driven security input, Provide input into cloud migrations, Provide input into application launches, Provide input into infrastructure changes", "teamCollaboration" : "Co-managed SOC model; Cross functional response; Security integration; IT Infrastructure collaboration; IAM collaboration; DLP collaboration; Application Security collaboration; Cloud teams collaboration", "domainKnowledge" : "Financial services; MITRE ATT&CK framework; Adversary tactics; Adversary techniques; Financial sector threats; HIPAA; PCI-DSS; NIST; ISO 27001; GDPR", "domainList" : [ "financial-services", "mitre-att-ck-framework", "adversary-tactics", "adversary-techniques", "financial-sector-threats", "hipaa", "pci-dss", "nist", "iso-27001", "gdpr" ], "domainSpecificKnowledge" : [ "Financial services", "MITRE ATT&CK framework", "Adversary tactics", "Adversary techniques", "Financial sector threats", "HIPAA", "PCI-DSS", "NIST", "ISO 27001", "GDPR" ], "toolProficiency" : [ "Splunk", "Crowdstrike", "Rapid 7" ], "communicationSkills" : "Documentation skills", "documentationSkills" : "Incident records; Investigation notes; Remediation documentation; Incident response documentation; Playbooks; SOC procedures; Lessons learned", "continuousLearning" : "Passion for continuous learning; Staying ahead of emerging threats", "problemSolvingSkills" : "Analytical mindset; Root cause analysis", "specialRequirements" : "Extended periods of sitting, Extended periods of standing, Extended periods of walking", "outcomesObjectives" : "Reduce false positives; Improve signal quality; Accelerate triage; Accelerate containment; Drive measurable improvements", "qualificationsBasic" : "5-7 years progressive experience in cybersecurity, Proven knowledge in SOC practices, Proven knowledge in incident response processes, Hands-on experience with SIEM platforms, Hands-on experience with EDR solutions, Hands-on experience with Monitoring tools, Hands-on experience with Vulnerability management tools, Understanding of cyber threat landscapes, Understanding of attack vectors, Understanding of MITRE ATT&CK framework, Understanding of adversary tactics, Understanding of techniques, Proven ability to develop incident response playbooks, Proven ability to maintain incident response playbooks, Proven ability to develop escalation procedures, Proven ability to maintain escalation procedures, Proven ability to develop SOC SOPs, Proven ability to maintain SOC SOPs, Experience with cybersecurity metrics, Experience with SOC KPIs, Ability to communicate risk, Ability to communicate operational performance, Analytical mindset, Ability to work under pressure, Ability to manage multiple incidents", "qualificationsPreferred" : "Experience in financial services a plus", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Who We Are Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 3 million consumers and businesses. Embodying our commitment to grow, innovate, and diversify, we strive to reimagine the customer and dealer experience and launch innovative new products that broaden our market reach. We believe that success comes from within and are proud to support our team members through skill development and career advancement. Hyundai Capital America is an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce. We are a values-driven company dedicated to supporting both internal and external communities through volunteering, philanthropy, and the empowerment of our Employee Resource Groups. Together, we strive to be the leader in financing freedom of movement. We Take Care of Our People Along with competitive pay, as an employee of HCA, you are eligible for: ·         Medical, dental, and vision plans with no-cost and low-cost options ·         Annual employer HSA contribution ·         401(k) matching and immediate vesting ·         Vehicle purchase and lease discounts, plus monthly vehicle allowances by job level: o    Associate / Sr. Associate: $350 o    Manager / Sr. Manager: $600 o    Director: $800 o    Executive Director: $900 o    VP or Above: $1,000 ·         100% employer-paid life and disability insurance ·         No-cost health and wellbeing programs, including a gym benefit ·         Six weeks of paid parental leave ·         Paid Volunteer Time Off, plus a company donation to a charity of your choice What to Expect The Cybersecurity Incident Responder is a hand-on, technical role responsible for the enterprise-wide incident monitoring, threat detection and incident response function within the Security Operations Center (SOC). This position is primarily focused on incident response and active security monitoring, serving as the escalation point for security alerts triage, investigation, containment and remediation activities while ensuring integrity, confidentiality, and availability of Hyundai Capital America’s digital assets and infrastructure. This role operates in a co-managed SOC model, overseeing and directing third party vendors of incident response resources, driving detection turning and maintaining incident response playbooks and procedures. What You Will Do Incident Response & Remediation: ·         Serve as a lead responder for cybersecurity incidents, correlating data from endpoints, networks, and cloud environments to identify true positives and escalate critical incidents. ·         Own the end to end incident lifecycle: identification, containment, eradication, recovery and post incident analysis. ·         Perform forensic analysis on endpoint, log and cloud data to determine root cause, scope and impact. ·         Develop, maintain an execute incident response playbooks and runbooks to ensure consistent and repeatable response. ·         Coordinate and direct MSSP and third party incident responders, validating escalation and ensuring response quality. ·         Maintain accurate incident records, investigation notes, and remediation documentation. ·         Produce incident metrics and SOC KPI’s (MTTD, MTTR, alert volume, escalation quality) ·         Maintain incident response documentation, playbooks, and SOC procedures to support audits and regulatory requirements. ·         Lead post incident reviews, documenting lessons learned and driving measurable improvements in detection and response. Security Monitoring & Threat Detection: ·         Actively monitor, investigate and validate security alerts across SIEM, EDR, E-Mail, identity, network and cloud platforms. ·         Perform advanced alert triage and threat analysis, correlating telemetry across multiple data sources to distinguish true threats from noise. ·         Tune and optimize SIEM detections, analytics and alerting logic and AI, to improve signal quality and reduce false positives. ·         Leverage threat intelligence platforms to identify emerging financial sector threats, and translate intelligence into actionable detection use cases. SOC Tooling & Detection Enablement: ·         Develop and refine detection rules, signatures, and alert logic aligned to current threat activity. ·         Implement response automation and enrichment to accelerate triage and containment. ·         Partner with architecture and engineering teams to ensure log visibility and telemetry coverage. Cross Functional Response & Security Integration: ·         Collaborate with IT Infrastructure, IAM, DLP, Application Security and Cloud teams during active incidents. ·         Support vulnerability management activities related to active incidents, threat exposure and detection gaps. ·         Provide incident driven security input into cloud migrations, application launches and infrastructure changes. What You Will Bring · Minimum 5-7 years progressive experience in cybersecurity with proven knowledge in Security Operations Center practices and incident response processes. ·      Experience in financial services a plus. ·      Hands-on experience with SIEM platforms, EDR solutions, and other Monitoring and Vulnerability management tools (e.g., Splunk, Crowdstrike, Rapid 7) ·     Strong understanding of cyber threat landscapes, attack vectors, MITRE ATT&CK framework, and adversary tactics, techniques, and procedures ·         Bachelor’s degree in Computer Science, Information Security, or related field; or equivalent work experience. ·      Certification in one of the following: CySA+, GCIH, CompTIA Security +, GIAC GSOC, GCFA, MS SC-200, CCSP, CISM, Splunk Core Certified User, or equivalent. ·     Demonstrated hands-on experience in incident response lifecycle, including detection, triage, containment, eradication, recovery, and post-incident review. ·    Demonstrated ability to manage major incident investigations, including root cause analysis, executive reporting, and coordination with legal, compliance, and law enforcement when necessary. ·      Familiarity with regulatory and compliance frameworks such as HIPAA, PCI-DSS, NIST, ISO 27001, and GDPR. ·       Proven ability to develop and maintain incident response playbooks, escalation procedures, and SOC standard operating procedures (SOPs). · Experience with cybersecurity metrics and KPIs, and the ability to communicate risk and operational performance to executive leadership. ·         Analytical mindset with attention to detail. ·         Excellent communication and documentation skills. ·         Ability to work under pressure and manage multiple incidents simultaneously. ·         Passion for continuous learning and staying ahead of emerging threats. Work Environment Employees in this class are subject to extended periods of sitting, standing, and walking, vision to monitor and moderate noise levels. Work is performed in an at home and office environment. The posted salary range for this job takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; geographic location, and other business and organizational needs. Successful candidates may be hired anywhere in the salary range based on these factors. It is uncommon to hire candidates at or near the top of the range. California Privacy Notice This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here . This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used, and whether that information is sold or shared, so that you can exercise meaningful control over our use of your personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (“CCPA”). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at Privacy2@hcs.com . United States-California-Irvine", "summaryDescription" : "Cybersecurity Incident Responder at Hyundai Capital America. Skills: Incident response, Threat detection, Security monitoring, SIEM platforms. Serve as lead responder for cybersecurity incidents. Correlate data from endpoints", "createdAt" : "2026-06-14T06:55:41.268", "lastUpdated" : "2026-06-15T09:24:24.152", "ingestTimestamp" : "2026-06-14T06:55:41.268", "mongoId" : "69fc49a74c40e2acd1a8342e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 135000, "salaryAnnualMax" : 195000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Incident lifecycle management", "Root cause analysis", "Alert triage", "Threat analysis", "SIEM tuning", "Detection tuning", "AI tuning", "Signal quality improvement", "False positive reduction", "Detection rule development", "Signature development", "Alert logic development", "Automation implementation", "Enrichment implementation", "Log visibility", "Telemetry coverage", "Continuous learning", "Incident response", "Threat detection", "Security monitoring", "SIEM platforms", "Forensic analysis", "Detection engineering", "Risk communication", "Performance communication", "Financial services", "MITRE ATT&CK framework", "Adversary tactics", "Adversary techniques", "Financial sector threats", "HIPAA", "PCI-DSS", "NIST", "ISO 27001", "GDPR", "Splunk", "Crowdstrike", "Rapid 7" ], "skillCount" : 38, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.6666667, "_score" : 768.3076, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.98 }, { "id" : "6a26487674d8ee00a0217523", "title" : "Junior Cybersecurity Software Engineer", "company" : "Airbus Defence and Space SAU", "industry" : "aerospace", "salary" : { "min" : 32000.0, "max" : 45000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Junior Cybersecurity Software Engineer in Getafe, Spain, adjusted for the aerospace industry and company size." }, "location" : "Spain", "locations" : [ "Spain" ], "certifications" : [ "CISSP", "GIAC", "DO178B/C" ], "timestamp" : "2026-06-12T18:39:09.440", "fingerprint" : "368b611563b7c5e939684c2f60bc7dec59d89dbe70d423a6dd0519c279091956", "source" : "workday", "language" : "en", "applyUrl" : "https://ag.wd3.myworkdayjobs.com/Airbus/job/Getafe-Area/Junior-Cybersecurity-Software-Engineer_JR10418222-1", "externalId" : "JR10418222", "industryFunction" : { }, "locationPoint" : "40.4637,-3.7492", "structuredLocations" : [ { "city" : "Getafe", "state" : "Madrid", "country" : "Spain", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "40.3070639,-3.7331808" } ], "locationText" : "Getafe, Madrid, Spain", "employmentType" : "FULL_TIME", "experienceMinYears" : 0, "experienceMaxYears" : 2, "experienceLevel" : "Entry", "technicalSkills" : "C/C++/C#, JAVA, Visual Studio, SW repositories, Network security architecture, Application security architecture, Operating systems", "professionalSkills" : [ "Cyber security consultancy", "Product security", "Security architectures", "Secure SW development", "Requirements specification", "Risk assessments", "Security compliance", "Security evaluation", "Certification processes", "Accreditation processes" ], "hardSkillsList" : [ "Software design", "Software integration", "Software verification", "Software validation", "SW designing skills", "UML diagrams", "Class diagrams", "Pseudocode definition", "Static code analysis", "Dynamic code analysis", "Unit tests", "Coverage test", "Integration tests", "Functional tests", "Threat assessment", "Vulnerability assessment", "Security risk assessments", "Security requirements definition", "Security architecture design", "Secure SW architecture", "Secure SW design", "Security compliance", "Cybersecurity advisory", "Security-by-design approach", "Formal compliance processes" ], "hardSkills" : [ { "name" : "Software design", "level" : "intermediate" }, { "name" : "Software integration", "level" : "intermediate" }, { "name" : "Software verification", "level" : "intermediate" }, { "name" : "Software validation", "level" : "intermediate" }, { "name" : "SW designing skills", "level" : "intermediate" }, { "name" : "UML diagrams", "level" : "intermediate" }, { "name" : "Class diagrams", "level" : "intermediate" }, { "name" : "Pseudocode definition", "level" : "intermediate" }, { "name" : "Static code analysis", "level" : "intermediate" }, { "name" : "Dynamic code analysis", "level" : "intermediate" }, { "name" : "Unit tests", "level" : "intermediate" }, { "name" : "Coverage test", "level" : "intermediate" }, { "name" : "Integration tests", "level" : "intermediate" }, { "name" : "Functional tests", "level" : "intermediate" }, { "name" : "Threat assessment", "level" : "intermediate" }, { "name" : "Vulnerability assessment", "level" : "intermediate" }, { "name" : "Security risk assessments", "level" : "intermediate" }, { "name" : "Security requirements definition", "level" : "intermediate" }, { "name" : "Security architecture design", "level" : "intermediate" }, { "name" : "Secure SW architecture", "level" : "intermediate" }, { "name" : "Secure SW design", "level" : "intermediate" }, { "name" : "Security compliance", "level" : "intermediate" }, { "name" : "Cybersecurity advisory", "level" : "intermediate" }, { "name" : "Security-by-design approach", "level" : "intermediate" }, { "name" : "Formal compliance processes", "level" : "intermediate" } ], "majorSkills" : "Cyber Security, Software Engineering, Security Architectures, Secure SW Development", "majorSkillsList" : [ "Cyber Security", "Software Engineering", "Security Architectures", "Secure SW Development" ], "coreResponsibilities" : "Contribute to secure product design, Fulfill security requirements, Participate in product security architectures, Participate in security design, Specify security controls, Participate in security architecture trade-offs, Provide cybersecurity consultancy, Provide guidance to business projects, Ensure fulfilment of contractual requirements, Ensure fulfilment of customer expectations, Participate in Software security requirement definition, Participate in Software design, Participate in Software integration, Participate in Software verification, Participate in Software validation, Analyze developer requirements, Analyze test engineer requirements, Derive technical implementation, Participate in Design processes, Participate in Optimize processes, Participate in Design tools, Participate in Optimize tools, Participate in Static code analysis, Participate in Dynamic code analysis, Conduct security risk assessments, Define security requirements, Design security architectures, Ensure security compliance, Provide cybersecurity advisory, Adopt security-by-design approach, Promote security-by-design approach, Help in formal compliance processes, Help in security evaluation processes, Help in certification processes, Help in accreditation processes", "teamCollaboration" : "Product Security team; Engineering organization; Projects stakeholders", "domainKnowledge" : "Cyber Security; Aerospace Engineering; Product Security; Security Architectures; Secure SW Development; National security regulations; International security regulations; Airworthiness Security Process; Critical safety systems; DO178B/C standards; Security Evaluation; Certification; Accreditation Processes; CC/CEM; ITSEC/ITSEM; CCN-STICs", "domainList" : [ "cyber-security", "aerospace-engineering", "product-security", "security-architectures", "secure-sw-development", "national-security-regulations", "international-security-regulations", "airworthiness-security-process", "critical-safety-systems", "do178b-c-standards", "security-evaluation", "certification", "accreditation-processes", "cc-cem", "itsec-itsem", "ccn-stics" ], "domainSpecificKnowledge" : [ "Cyber Security", "Aerospace Engineering", "Product Security", "Security Architectures", "Secure SW Development", "National security regulations", "International security regulations", "Airworthiness Security Process", "Critical safety systems", "DO178B/C standards", "Security Evaluation", "Certification", "Accreditation Processes", "CC/CEM", "ITSEC/ITSEM", "CCN-STICs" ], "toolProficiency" : [ "Visual Studio", "SW repositories", "DOORS" ], "communicationSkills" : "Security documentation", "documentationSkills" : "Security documentation", "continuousLearning" : "State-of-the-art training", "innovationCreativity" : "Innovating solutions; Simplifying solutions", "problemSolvingSkills" : "Risk assessment; Trade-offs", "specialRequirements" : "NATO/National security clearance, Occasional travel", "qualificationsBasic" : "Information security skills, Solid education in Cyber Security, Solid education in Information Technology, Solid education in Engineering, Advanced level of English, Able to write clear security documentation", "qualificationsPreferred" : "Knowledge of Secure Software Development Life Cycle, Knowledge in Aircraft Security, Knowledge of EUROCAE material, Knowledge of NATO/National security regulations, Experience with critical safety systems, Experience with DOORS, Knowledge of Security Evaluation Processes, Knowledge of Certification Processes, Knowledge of Accreditation Processes, IT Security Professional certification, Security Training Courses", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "****Job Description:**** _**SUMMARY**_ Are you a Cyber Security SW Engineer ready to take on new and exciting challenges?... Are you willing to work in a multi-cultural environment, on a worldwide aerospace leader company?... If you are a highly motivated Engineer starting to work in Cyber Security field that enjoys innovating, and simplifying solutions and is willing to grow in designing Security Architectures, strong infrastructure and/or secure SW development, and really passionate for Cyber Security, this position may be what you are looking for… Airbus gives you the opportunity to apply for it!. We are looking for a Cyber Security SW Engineer to join our Product Security team within engineering organization in Airbus Defence & Space in Getafe (Madrid). You will part of the team in charge of ensuring that the Airbus Defence and Space Products and supporting services are protected against cybersecurity threats throughout their entire lifecycle (i.e. from early R&T phases, definition, development, implementation, industrialization, operation, maintenance and support, through to end of life and disposal). You will work in a new and challenging international environment where cyber security is a key driver to be considered as part of all products designed and developed by Airbus Defence and Space. You will also have a supporting role in the Product Security activities on the Military Aircraft and UAS programs. The selected candidate will be eligible to receive state-of the-art **training on Cybersecurity and/or Aerospace Engineering**. _**TASKS & RESPONSIBILITIES**_ You will contribute to guarantee that the Airbus Defence and Space Products are inherently secure by design and they fulfil the security requirements in accordance to the applicable national/international security regulations. You will participate in the definition of product security architectures and design in accordance to their security requirements derived from the security risk assessments. You will help specifying what security controls are to be applied and where in the overall, associated product architecture. You will also participate in the trade-offs that influenced the decisions made in forming the security architecture You will enable Business by means of providing Cyber security consultancy, guidance to business projects/programs to ensure the fulfilment of the contractual requirements and the Customer expectations. As a Junior Cyber Security Software Engineer the main responsibilities will be: Software: \\- Participate in Software security requirement definition, design, integration, verification and validation. \\- SW designing skills (sequence diagrams, UML diagrams, Class diagrams, pseudocode definition, …). \\- Analyze the requirements of developers and test engineers and derive the technical implementation in the building process. \\- Participate in the Design and optimize processes and tools in the area of source code management, dependency management, continuous integration, testing and deployment. \\- Participate in Static and dynamic code analysis. Testing : Unit tests/coverage test. Integration tests. Functional tests. Architecture: \\- Participate in Conducting the security risk assessments on the Products (including threat and vulnerability assessment). \\- Help Defining the security requirements to mitigate the security risks. \\- Participate in the Design of the security architectures in accordance to the security. Ability to define secure SW architecture and design. \\- Ensure the security compliance of the Products in accordance to the national and international security regulations. \\- Provide cybersecurity consultancy and advisory to business projects. \\- Adopt and promote a security-by-design approach with the different projects stakeholders. \\- Help in formal compliance processes (security evaluation, certification and accreditation processes) in accordance to the applicable criteria and methodologies (CC/CEM, ITSEC/ITSEM, CCN-STICs...). **REQUIREMENTS** The position requires Information security skills and a solid education in Cyber Security and Information Technology or Engineering. We seek out curious minds. We value attention to detail, and we care deeply about outcomes. We're looking above all for passionate people, eager to learn, willing to share, customer-centric, establishing innovative ways of working and influencing culture change. The successful candidate will be subjected to a NATO/National security clearance in order to undertake related work in accordance with the business needs. This role will involve occasional travel for business and as such the successful candidate must be able to travel according to the business needs. **Technical Skills** Bachelors or Master in Telecommunication Engineer or Computer Science with an emphasis in Information Security. Masters degree in Cyber Security Knowledge of the Secure Software Development Life Cycle is highly desired. Experience in C/C++/C# and/or JAVA. Be familiar with Visual Studio and SW repositories. Knowledge of network and application security architecture and operating systems Advanced level of English. Able to write clear and consumable security documentation. **Nice to have (not mandatory):** Knowledge in Aircraft Security Knowledge of EUROCAE material focused on Airworthiness Security Process (ED-202A, ED-203A and ED-204). Knowledge of NATO/National security regulations. Experience with critical safety systems based on DO178B/C standards. Experience with DOORS for requirements specification and management. Knowledge of Security Evaluation, Certification and Accreditation Processes. IT Security Professional certification is highly desired (CISSP, SANS/GIAC or equivalent). Security Training Courses are highly desired (SANS Security Awareness Developer Training) **_WHICH BENEFITS WILL YOU HAVE AS AIRBUS EMPLOYEE?_** **At Airbus we are focused on our employees and their welfare. Take a look at some of our social benefits:** * **Vacation days and additional days-off along the year ( +35 working days off in total).** * **Attractive salary and compensation package.** * **Hybrid model of working when possible, promoting the work-life balance (40% remote work).** * **Collective transport service in some sites.** * **Benefits such as health insurance, employee stock options, retirement plan, or study grants.** * **On-site facilities (among others): free canteen, kindergarten, medical office.** * **Possibility to collaborate in different social and corporate social responsibility initiatives.** * **Excellent upskilling opportunities and great development prospects in a multicultural environment.** * **Special rates in products & benefits.** This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth. ********Company:******** Airbus Defence and Space SAU **Employment Type:** Permanent \\------- **Experience Level:** Professional **Job Family:** Cyber Security By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus. Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief. Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to [emsom@airbus.com](mailto:emsom@airbus.com). At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.", "summaryDescription" : "Junior Cybersecurity Software Engineer at Airbus Defence and Space SAU. Skills: Cyber Security, Software Engineering, Security Architectures, Secure SW Development. Contribute to secure product design. Fulfill security requirements", "postedDate" : "2026-06-09T15:16:16.183", "createdAt" : "2026-06-11T15:16:16.171", "lastUpdated" : "2026-06-12T18:39:09.440", "ingestTimestamp" : "2026-06-11T15:16:16.171", "mongoId" : "6a26487674d8ee00a0217523", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://ag.wd3.myworkdayjobs.com/Airbus/job/Getafe-Area/Junior-Cybersecurity-Software-Engineer_JR10418222-1", "salaryBand" : "30k-50k", "hasSalary" : false, "allSkills" : [ "Software design", "Software integration", "Software verification", "Software validation", "SW designing skills", "UML diagrams", "Class diagrams", "Pseudocode definition", "Static code analysis", "Dynamic code analysis", "Unit tests", "Coverage test", "Integration tests", "Functional tests", "Threat assessment", "Vulnerability assessment", "Security risk assessments", "Security requirements definition", "Security architecture design", "Secure SW architecture", "Secure SW design", "Security compliance", "Cybersecurity advisory", "Security-by-design approach", "Formal compliance processes", "Cyber Security", "Software Engineering", "Security Architectures", "Secure SW Development", "Cyber security consultancy", "Product security", "Security architectures", "Secure SW development", "Requirements specification", "Risk assessments", "Security evaluation", "Certification processes", "Accreditation processes", "Aerospace Engineering", "Product Security", "National security regulations", "International security regulations", "Airworthiness Security Process", "Critical safety systems", "DO178B/C standards", "Security Evaluation", "Certification", "Accreditation Processes", "CC/CEM", "ITSEC/ITSEM", "CCN-STICs", "CISSP", "GIAC", "DO178B/C", "Visual Studio", "SW repositories", "DOORS" ], "skillCount" : 57, "jobCategory" : "engineering", "seniorityLevel" : "junior", "dataQualityScore" : 1.0, "_score" : 766.64307, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "aerospace" }, { "id" : "69fc49a74c40e2acd1a8342c", "title" : "Cybersecurity Incident Responder", "company" : "Hyundai Capital America", "industry" : "FinTech", "salary" : { "min" : 105000.0, "max" : 155000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Incident Responder in Plano, United States, adjusted for the FinTech industry and company size." }, "location" : "United States-Texas-Plano", "locations" : [ "United States-Texas-Plano", "
Dallas, TX (HCA_DallasTX)
6100 W. Plano Parkway, Suite 2000
Suite 2000
Plano, 75093

" ], "timestamp" : "2026-06-15T05:14:30.811", "fingerprint" : "7fcffb731a6ed636f284a927012ffd15ceaa3c0f54aab8d152f57c85bc99c5b9", "source" : "taleo", "language" : "en", "applyUrl" : "https://hyundaicapital.taleo.net/careersection/ex/jobdetail.ftl?job=113023", "externalId" : "113023", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Plano", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.0136764,-96.6925096" } ], "locationText" : "Plano, Texas, United States", "technicalSkills" : "Cybersecurity, Incident Response, Security Operations, SIEM, EDR, Endpoint security, Network security, Cloud security, Log analysis, Forensic analysis, Threat intelligence, Detection rules, Automation, Vulnerability management", "professionalSkills" : [ "Incident lifecycle management", "Root cause analysis", "Threat analysis", "Detection enablement", "Cross functional response", "Security integration" ], "hardSkillsList" : [ "Endpoint forensics", "Log forensics", "Cloud forensics", "Incident metrics", "KPI reporting" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Endpoint forensics", "level" : "intermediate" }, { "name" : "Log forensics", "level" : "intermediate" }, { "name" : "Cloud forensics", "level" : "intermediate" }, { "name" : "Incident metrics", "level" : "intermediate" }, { "name" : "KPI reporting", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident Response, Security Monitoring, Threat Detection, SOC Tooling", "majorSkillsList" : [ "Incident Response", "Security Monitoring", "Threat Detection", "SOC Tooling" ], "coreResponsibilities" : "Monitor enterprise-wide incidents, Detect threats, Respond to incidents, Triage security alerts, Investigate security alerts, Contain security incidents, Remediate security incidents, Ensure integrity of digital assets, Ensure confidentiality of digital assets, Ensure availability of digital assets, Oversee third party vendors, Direct third party vendors, Drive detection turning, Maintain incident response playbooks, Maintain incident response procedures, Serve as lead responder, Correlate data from endpoints, Correlate data from networks, Correlate data from cloud environments, Identify true positives, Escalate critical incidents, Own incident lifecycle, Perform forensic analysis, Determine root cause, Determine scope, Determine impact, Develop incident response playbooks, Maintain incident response playbooks, Execute incident response playbooks, Develop runbooks, Maintain runbooks, Execute runbooks, Coordinate incident responders, Direct incident responders, Validate escalation, Ensure response quality, Maintain incident records, Maintain investigation notes, Maintain remediation documentation, Produce incident metrics, Produce SOC KPIs, Maintain incident response documentation, Maintain SOC procedures, Lead post incident reviews, Document lessons learned, Drive measurable improvements, Actively monitor security alerts, Investigate security alerts, Validate security alerts, Perform advanced alert triage, Perform advanced threat analysis, Correlate telemetry, Distinguish threats from noise, Tune SIEM detections, Optimize SIEM detections, Tune SIEM analytics, Optimize SIEM analytics, Tune SIEM alerting logic, Optimize SIEM alerting logic, Tune SIEM AI, Optimize SIEM AI, Leverage threat intelligence platforms, Identify emerging financial sector threats, Translate intelligence into detection use cases, Develop detection rules, Refine detection rules, Develop signatures, Refine signatures, Develop alert logic, Refine alert logic, Implement response automation, Implement enrichment, Accelerate triage, Accelerate containment, Partner with architecture teams, Partner with engineering teams, Ensure log visibility, Ensure telemetry coverage, Collaborate with IT Infrastructure, Collaborate with IAM, Collaborate with DLP, Collaborate with Application Security, Collaborate with Cloud teams, Support vulnerability management, Provide incident driven security input", "teamCollaboration" : "Co-managed SOC model; Cross functional teams; IT Infrastructure teams; IAM teams; DLP teams; Application Security teams; Cloud teams", "domainKnowledge" : "Financial services; MITRE ATT&CK framework; HIPAA; PCI-DSS; NIST; ISO 27001; GDPR", "domainList" : [ "financial-services", "mitre-att-ck-framework", "hipaa", "pci-dss", "nist", "iso-27001", "gdpr" ], "domainSpecificKnowledge" : [ "Financial services", "MITRE ATT&CK framework", "HIPAA", "PCI-DSS", "NIST", "ISO 27001", "GDPR" ], "toolProficiency" : [ "Splunk", "Crowdstrike", "Rapid 7" ], "communicationSkills" : "Incident documentation; Incident metrics; SOC KPIs; Risk communication; Operational performance communication", "documentationSkills" : "Incident records; Investigation notes; Remediation documentation; Incident response documentation; Playbooks; Runbooks; SOC procedures; Post incident reviews; Lessons learned", "continuousLearning" : "Continuous learning; Staying ahead of emerging threats", "problemSolvingSkills" : "Analytical mindset; Root cause analysis; Threat analysis", "outcomesObjectives" : "Improve signal quality; Reduce false positives; Accelerate triage; Accelerate containment; Drive measurable improvements", "qualificationsBasic" : "5-7 years progressive experience, Security Operations Center practices, Incident response processes, SIEM platforms experience, EDR solutions experience, Monitoring tools experience, Vulnerability management tools experience, Cyber threat landscapes understanding, Attack vectors understanding, MITRE ATT&CK framework understanding, Adversary tactics understanding, Adversary techniques understanding, Adversary procedures understanding, HIPAA compliance frameworks, PCI-DSS compliance frameworks, NIST compliance frameworks, ISO 27001 compliance frameworks, GDPR compliance frameworks, Develop incident response playbooks, Maintain incident response playbooks, Develop escalation procedures, Maintain escalation procedures, Develop SOC SOPs, Maintain SOC SOPs, Cybersecurity metrics experience, KPI experience, Communicate risk experience, Communicate operational performance experience, Analytical mindset, Attention to detail, Excellent communication skills, Excellent documentation skills, Work under pressure, Manage multiple incidents", "qualificationsPreferred" : "Financial services experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Who We Are Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 3 million consumers and businesses. Embodying our commitment to grow, innovate, and diversify, we strive to reimagine the customer and dealer experience and launch innovative new products that broaden our market reach. We believe that success comes from within and are proud to support our team members through skill development and career advancement. Hyundai Capital America is an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce. We are a values-driven company dedicated to supporting both internal and external communities through volunteering, philanthropy, and the empowerment of our Employee Resource Groups. Together, we strive to be the leader in financing freedom of movement. We Take Care of Our People Along with competitive pay, as an employee of HCA, you are eligible for: ·         Medical, dental, and vision plans with no-cost and low-cost options ·         Annual employer HSA contribution ·         401(k) matching and immediate vesting ·         Vehicle purchase and lease discounts, plus monthly vehicle allowances by job level: o    Associate / Sr. Associate: $350 o    Manager / Sr. Manager: $600 o    Director: $800 o    Executive Director: $900 o    VP or Above: $1,000 ·         100% employer-paid life and disability insurance ·         No-cost health and wellbeing programs, including a gym benefit ·         Six weeks of paid parental leave ·         Paid Volunteer Time Off, plus a company donation to a charity of your choice What to Expect The Cybersecurity Incident Responder is a hand-on, technical role responsible for the enterprise-wide incident monitoring, threat detection and incident response function within the Security Operations Center (SOC). This position is primarily focused on incident response and active security monitoring, serving as the escalation point for security alerts triage, investigation, containment and remediation activities while ensuring integrity, confidentiality, and availability of Hyundai Capital America’s digital assets and infrastructure. This role operates in a co-managed SOC model, overseeing and directing third party vendors of incident response resources, driving detection turning and maintaining incident response playbooks and procedures. What You Will Do Incident Response & Remediation: ·         Serve as a lead responder for cybersecurity incidents, correlating data from endpoints, networks, and cloud environments to identify true positives and escalate critical incidents. ·         Own the end to end incident lifecycle: identification, containment, eradication, recovery and post incident analysis. ·         Perform forensic analysis on endpoint, log and cloud data to determine root cause, scope and impact. ·         Develop, maintain an execute incident response playbooks and runbooks to ensure consistent and repeatable response. ·         Coordinate and direct MSSP and third party incident responders, validating escalation and ensuring response quality. ·         Maintain accurate incident records, investigation notes, and remediation documentation. ·         Produce incident metrics and SOC KPI’s (MTTD, MTTR, alert volume, escalation quality) ·         Maintain incident response documentation, playbooks, and SOC procedures to support audits and regulatory requirements. ·         Lead post incident reviews, documenting lessons learned and driving measurable improvements in detection and response. Security Monitoring & Threat Detection: ·         Actively monitor, investigate and validate security alerts across SIEM, EDR, E-Mail, identity, network and cloud platforms. ·         Perform advanced alert triage and threat analysis, correlating telemetry across multiple data sources to distinguish true threats from noise. ·         Tune and optimize SIEM detections, analytics and alerting logic and AI, to improve signal quality and reduce false positives. ·         Leverage threat intelligence platforms to identify emerging financial sector threats, and translate intelligence into actionable detection use cases. SOC Tooling & Detection Enablement: ·         Develop and refine detection rules, signatures, and alert logic aligned to current threat activity. ·         Implement response automation and enrichment to accelerate triage and containment. ·         Partner with architecture and engineering teams to ensure log visibility and telemetry coverage. Cross Functional Response & Security Integration: ·         Collaborate with IT Infrastructure, IAM, DLP, Application Security and Cloud teams during active incidents. ·         Support vulnerability management activities related to active incidents, threat exposure and detection gaps. ·         Provide incident driven security input into cloud migrations, application launches and infrastructure changes. What You Will Bring · Minimum 5-7 years progressive experience in cybersecurity with proven knowledge in Security Operations Center practices and incident response processes. ·      Experience in financial services a plus. ·      Hands-on experience with SIEM platforms, EDR solutions, and other Monitoring and Vulnerability management tools (e.g., Splunk, Crowdstrike, Rapid 7) ·     Strong understanding of cyber threat landscapes, attack vectors, MITRE ATT&CK framework, and adversary tactics, techniques, and procedures ·         Bachelor’s degree in Computer Science, Information Security, or related field; or equivalent work experience. ·      Certification in one of the following: CySA+, GCIH, CompTIA Security +, GIAC GSOC, GCFA, MS SC-200, CCSP, CISM, Splunk Core Certified User, or equivalent. ·     Demonstrated hands-on experience in incident response lifecycle, including detection, triage, containment, eradication, recovery, and post-incident review. ·    Demonstrated ability to manage major incident investigations, including root cause analysis, executive reporting, and coordination with legal, compliance, and law enforcement when necessary. ·      Familiarity with regulatory and compliance frameworks such as HIPAA, PCI-DSS, NIST, ISO 27001, and GDPR. ·       Proven ability to develop and maintain incident response playbooks, escalation procedures, and SOC standard operating procedures (SOPs). · Experience with cybersecurity metrics and KPIs, and the ability to communicate risk and operational performance to executive leadership. ·         Analytical mindset with attention to detail. ·         Excellent communication and documentation skills. ·         Ability to work under pressure and manage multiple incidents simultaneously. ·         Passion for continuous learning and staying ahead of emerging threats. Work Environment Employees in this class are subject to extended periods of sitting, standing, and walking, vision to monitor and moderate noise levels. Work is performed in an at home and office environment. The posted salary range for this job takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; geographic location, and other business and organizational needs. Successful candidates may be hired anywhere in the salary range based on these factors. It is uncommon to hire candidates at or near the top of the range. California Privacy Notice This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here . This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used, and whether that information is sold or shared, so that you can exercise meaningful control over our use of your personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (“CCPA”). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at Privacy2@hcs.com . United States-Texas-Plano", "summaryDescription" : "Cybersecurity Incident Responder at Hyundai Capital America. Skills: Incident Response, Security Monitoring, Threat Detection, SOC Tooling. Monitor enterprise-wide incidents. Detect threats", "createdAt" : "2026-06-14T02:01:21.884", "lastUpdated" : "2026-06-15T05:14:30.811", "ingestTimestamp" : "2026-06-14T02:01:21.884", "mongoId" : "69fc49a74c40e2acd1a8342c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 105000, "salaryAnnualMax" : 155000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Endpoint forensics", "Log forensics", "Cloud forensics", "Incident metrics", "KPI reporting", "Leadership", "Incident Response", "Security Monitoring", "Threat Detection", "SOC Tooling", "Incident lifecycle management", "Root cause analysis", "Threat analysis", "Detection enablement", "Cross functional response", "Security integration", "Financial services", "MITRE ATT&CK framework", "HIPAA", "PCI-DSS", "NIST", "ISO 27001", "GDPR", "Splunk", "Crowdstrike", "Rapid 7" ], "skillCount" : 26, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 761.67755, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "69d5e4952beec4dd3d93185c", "title" : "Security Engineer", "company" : "Amazon Corporate Services Pty Ltd", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 135000.0, "max" : 195000.0, "currency" : "AUD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Security Engineer in Melbourne, Australia, adjusted for the technology industry and company size." }, "location" : "Melbourne, Victoria, AUS", "locations" : [ "Melbourne, Victoria, AUS" ], "timestamp" : "2026-06-14T23:56:51.489", "fingerprint" : "aecd21aa13dd3214886ced5a87992bdb0d6ac559d612ac6ef867e550695c3040", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10385592/apply", "externalId" : "00382c40-3462-4455-a68b-a08a8d974511", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Melbourne", "state" : "Victoria", "country" : "Australia", "continent" : "oc", "source" : "llm", "workMode" : "onsite", "geo" : "-37.8142454,144.9631732" } ], "locationText" : "Melbourne, Victoria, Australia", "employmentType" : "FULL_TIME", "technicalSkills" : "AWS, SIEM", "professionalSkills" : [ "Security operations", "Threat hunting", "Incident response", "Security monitoring", "Threat analysis", "Security data", "Security controls", "Security guidance" ], "hardSkillsList" : [ "Security event monitoring", "Incident management", "Threat hunting analysis", "Security alert investigation", "Security alert response", "Security data integration", "Security process improvement", "Security automation initiatives", "Security SOP authoring", "Security runbook authoring", "MITRE ATT&CK application", "NIST application", "Log analysis", "Network traffic analysis", "Threat intelligence analysis", "Vulnerability remediation", "Security patch coordination", "System hardening", "Security control implementation", "Security metrics generation", "Security dashboard creation", "Security posture reporting", "Security operations monitoring" ], "softSkillsList" : [ "Bias for Action", "Earn Trust" ], "hardSkills" : [ { "name" : "Security event monitoring", "level" : "intermediate" }, { "name" : "Incident management", "level" : "intermediate" }, { "name" : "Threat hunting analysis", "level" : "intermediate" }, { "name" : "Security alert investigation", "level" : "intermediate" }, { "name" : "Security alert response", "level" : "intermediate" }, { "name" : "Security data integration", "level" : "intermediate" }, { "name" : "Security process improvement", "level" : "intermediate" }, { "name" : "Security automation initiatives", "level" : "intermediate" }, { "name" : "Security SOP authoring", "level" : "intermediate" }, { "name" : "Security runbook authoring", "level" : "intermediate" }, { "name" : "MITRE ATT&CK application", "level" : "intermediate" }, { "name" : "NIST application", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Network traffic analysis", "level" : "intermediate" }, { "name" : "Threat intelligence analysis", "level" : "intermediate" }, { "name" : "Vulnerability remediation", "level" : "intermediate" }, { "name" : "Security patch coordination", "level" : "intermediate" }, { "name" : "System hardening", "level" : "intermediate" }, { "name" : "Security control implementation", "level" : "intermediate" }, { "name" : "Security metrics generation", "level" : "intermediate" }, { "name" : "Security dashboard creation", "level" : "intermediate" }, { "name" : "Security posture reporting", "level" : "intermediate" }, { "name" : "Security operations monitoring", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Bias for Action" }, { "name" : "Earn Trust" } ], "majorSkills" : "Security Engineering, Incident Response, Threat Detection, SIEM Management", "majorSkillsList" : [ "Security Engineering", "Incident Response", "Threat Detection", "SIEM Management" ], "coreResponsibilities" : "Perform security event monitoring, Perform incident management, Perform incident response, Develop SIEM detections, Tune SIEM detections, Maintain SIEM detections, Develop SIEM dashboards, Tune SIEM dashboards, Maintain SIEM dashboards, Develop SIEM correlation rules, Tune SIEM correlation rules, Maintain SIEM correlation rules, Conduct proactive threat hunting, Conduct threat analysis, Identify suspicious behaviour, Investigate security alerts, Respond to security alerts, Be escalation point for alerts, Be escalation point for incidents, Support security data integration, Support security data optimisation, Contribute to SOC process improvement, Contribute to SOC automation initiatives, Author SOC SOPs, Author SOC runbooks, Apply MITRE ATT&CK framework, Apply NIST framework, Apply ISM framework, Apply PSPF framework, Perform on-call duties, Monitor security alerts, Investigate suspicious activities, Analyse logs, Analyse network traffic, Determine incident legitimacy, Coordinate immediate response actions, Contain threats, Remediate threats, Write security detections, Implement custom detection rules, Tune existing security signatures, Create automated alerts, Proactively search logs, Proactively search endpoint data, Proactively search system activities, Identify advanced persistent threats, Work with service teams, Remediate identified vulnerabilities, Coordinate security patches, Coordinate system hardening, Provide security guidance, Ensure security control implementation, Generate security metrics, Generate security dashboards, Develop executive reports, Build real-time dashboards", "teamCollaboration" : "Work closely with security team; Collaborate with IT teams; Collaborate with network teams; Collaborate with application teams; Cross-functional teams", "domainKnowledge" : "Australian Government security requirements; Protective Security Policy Framework; Information Security Manual; MITRE ATT&CK; NIST; Cloud security; Cyber security", "domainList" : [ "australian-government-security-requirements", "protective-security-policy-framework", "information-security-manual", "mitre-att-ck", "nist", "cloud-security", "cyber-security" ], "domainSpecificKnowledge" : [ "Australian Government security requirements", "Protective Security Policy Framework", "Information Security Manual", "MITRE ATT&CK", "NIST", "Cloud security", "Cyber security" ], "toolProficiency" : [ "Splunk", "Microsoft Sentinel", "Sumo Logic" ], "documentationSkills" : "Authoring SOC SOPs; Authoring SOC runbooks", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Data analysis", "specialRequirements" : "Australian Government Security Clearance, Organisational Suitability Assessment, On-call duties", "qualificationsBasic" : "3+ years SOC Analyst experience, 3+ years Defensive Cyber Role experience, Experience with SIEM tools, Demonstrated incident response experience, Demonstrated threat detection experience, Demonstrated security monitoring experience, Experience in high security environments, Australian citizen", "qualificationsPreferred" : "Working knowledge of foundational systems, Working knowledge of foundational protocols, Technical working knowledge of Cryptography, Technical working knowledge of Identity & Access Management, Technical working knowledge of Application Security", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Applicants must be Australian citizens and hold or be eligible to obtain an Australian Government Security Clearance, with the ability to successfully complete an Organisational Suitability Assessment. For more information regarding security clearances please visit (https://www.agsva.gov.au/) Amazon Web Services (AWS) is the leading cloud service provider, providing virtualised infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises to large government customers, run their operations and applications on AWS’ highly secure infrastructure. AWS Security is looking for a Security Systems Engineer to play a pivotal role in ensuring the security and integrity of our systems and infrastructure. You will work closely with our security team to implement and maintain robust security measures that adhere to Australian Government security requirements, including the Protective Security Policy Framework (PSPF) and the Information Security Manual (ISM). Key job responsibilities Key responsibilities may include: • Performing security event monitoring, incident management and response. • Develop, tune, and maintain SIEM detections, dashboards, and correlation rules • Conduct proactive threat hunting and analysis to identify suspicious behaviour • Investigate, respond and be the escalation point for security alerts and incidents • Support the integration and optimisation of security data sources within SIEM platforms • Contribute to continuous improvement of SOC processes and automation initiatives including authoring SOC SOP’s and runbooks. • Apply frameworks such as MITRE ATT&CK and NIST in concert with the ISM and PSPF to guide security operations. • Perform on-call duties as required, out of business hours. Hold or be able to attain an Australian Government Security Vetting Agency clearance (see https://www1.defence.gov.au/security/clearances) A day in the life A typical day for a Security Engineer may involve Responding to new detections: Monitor security alerts in real-time, investigate suspicious activities by analysing logs and network traffic, determine if incidents are legitimate threats or false positives, and coordinate immediate response actions including containment and remediation when threats are confirmed. Write security detections: Develop and implement custom detection rules based on emerging threat intelligence, tune existing security signatures to reduce false positives while maintaining coverage, and create automated alerts for specific attack patterns or indicators of compromise relevant to the organization's environment. Threat hunt: Proactively search through network logs, endpoint data, and system activities for signs of advanced persistent threats that may have evaded automated detection systems, using threat intelligence feeds and behavioural analysis to identify potential security breaches before they cause significant damage. Work with service teams on security issues: Collaborate with IT, network, and application teams to remediate identified vulnerabilities, coordinate security patches and system hardening efforts, provide security guidance during incident response, and ensure proper implementation of security controls across all infrastructure components. Generate metrics and dashboards: Create and maintain security performance indicators including incident response times, threat detection rates, and system availability metrics, develop executive-level reports summarizing security posture and trends, and build real-time dashboards for continuous monitoring of security operations effectiveness. About the team Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. The team is comprised of security professionals with a cross section of national security and private sector experience, providing a range of perspectives required for creative problem solving. We value diversity of thought, creativity, and a strong Bias for Action and Earn Trust. We believe that there are no \"perfect\" security solutions and we develop and iterate using a continuous improvement process. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Basic Qualifications: - 3+ years experience as a SOC Analyst or Defensive Cyber Role. - Experience with SIEM tools (e.g., Splunk, Microsoft Sentinel, Sumo Logic, or similar). - Demonstrated experience and application of incident response, threat detection, and security monitoring high security environments. Preferred Qualifications: - Good working knowledge of foundational systems and protocols e.g HTTP, DNS, TCP/IP. - Strong technical working knowledge of key security domains, e.g Cryptography, Identity & Access Management and Application Security. Acknowledgement of country: In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today. IDE statement: Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security Engineer at Amazon Corporate Services Pty Ltd. Skills: Security Engineering, Incident Response, Threat Detection, SIEM Management. Perform security event monitoring. Perform incident management", "postedDate" : "2026-06-13T04:51:20.367", "createdAt" : "2026-06-13T04:51:20.367", "lastUpdated" : "2026-06-14T23:56:51.489", "ingestTimestamp" : "2026-06-13T04:51:20.367", "mongoId" : "69d5e4952beec4dd3d93185c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10385592/apply", "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Security event monitoring", "Incident management", "Threat hunting analysis", "Security alert investigation", "Security alert response", "Security data integration", "Security process improvement", "Security automation initiatives", "Security SOP authoring", "Security runbook authoring", "MITRE ATT&CK application", "NIST application", "Log analysis", "Network traffic analysis", "Threat intelligence analysis", "Vulnerability remediation", "Security patch coordination", "System hardening", "Security control implementation", "Security metrics generation", "Security dashboard creation", "Security posture reporting", "Security operations monitoring", "Bias for Action", "Earn Trust", "Security Engineering", "Incident Response", "Threat Detection", "SIEM Management", "Security operations", "Threat hunting", "Incident response", "Security monitoring", "Threat analysis", "Security data", "Security controls", "Security guidance", "Australian Government security requirements", "Protective Security Policy Framework", "Information Security Manual", "MITRE ATT&CK", "NIST", "Cloud security", "Cyber security", "Splunk", "Microsoft Sentinel", "Sumo Logic" ], "skillCount" : 47, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 761.6258, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Services" }, { "id" : "6a2a496b74d8ee00a05e4f09", "title" : "Senior Vehicle Security Engineer", "company" : "MOIA GmbH", "industry" : "Autonomous Mobility", "salary" : { "min" : 85000.0, "max" : 115000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Vehicle Security Engineer in Berlin, Germany, adjusted for industry and company size." }, "location" : "Berlin, Germany", "locations" : [ "Berlin", "Germany", "Hamburg", "Germany", "Hannover", "Germany", "Munich", "Germany", "Wolfsburg", "Germany" ], "timestamp" : "2026-06-14T20:26:53.217", "fingerprint" : "77cf0013b84ac0a3c2645d7a1316cd26acd104f776af3499707ecef3d94e6e14", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/moia/jobs/4769020101", "externalId" : "4769020101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Berlin", "country" : "Germany", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "52.5173885,13.3951309" } ], "locationText" : "Berlin, Germany", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Embedded systems, Distributed architectures, Secure communications, Security technologies", "professionalSkills" : [ "Cybersecurity strategies", "Risk mitigation", "Security requirements", "Compliance-driven deliverables" ], "hardSkillsList" : [ "Threat modeling", "Risk assessments", "Security features design" ], "softSkillsList" : [ "Mentoring", "Leading" ], "hardSkills" : [ { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Risk assessments", "level" : "intermediate" }, { "name" : "Security features design", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" }, { "name" : "Leading" } ], "coreResponsibilities" : "Define cybersecurity concepts, Define system boundaries, Conduct threat analysis, Conduct risk assessments, Identify vulnerabilities, Evaluate attack feasibility, Translate TARA outcomes, Embed security into product lifecycle, Ensure ongoing compliance, Align cybersecurity requirements, Align safety requirements", "teamCollaboration" : "Cross-functional environments; Engineering teams; Safety teams; Functional safety experts", "domainKnowledge" : "Autonomous mobility; Embedded systems; Distributed architectures; ISO/SAE 21434; UNR 155; RBAC/ABAC; OPA", "domainList" : [ "autonomous-mobility", "embedded-systems", "distributed-architectures", "iso-sae-21434", "unr-155", "rbac-abac", "opa" ], "domainSpecificKnowledge" : [ "Autonomous mobility", "Embedded systems", "Distributed architectures", "ISO/SAE 21434", "UNR 155", "RBAC/ABAC", "OPA" ], "communicationSkills" : "Business-level English", "continuousLearning" : "Continuous learning days; Job rotation; Trainings; Workshops; Coaching; Conferences; Books; Language classes", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Remote work outside Germany (6 weeks/year)", "qualificationsBasic" : "Hands-on experience with threat modeling, Hands-on experience with risk assessments, Familiarity with security best practices, Experience working with regulated environments, Several years in cybersecurity role, Experience designing security features, Experience implementing security features", "qualificationsPreferred" : "Familiarity with ISO/SAE 21434, Familiarity with UNR 155 certification, Exposure to policy-driven security frameworks, Prior involvement in incident response, Prior involvement in SLO/SLI definition, Prior involvement in on-call rotations, Mentoring technical discussions, Leading technical discussions", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Join us as a Senior Vehicle Security Engineer (all genders) and help safeguard the future of autonomous mobility at MOIA! At MOIA, vehicle security is a cornerstone of trust in autonomous mobility. As a Senior Vehicle Security Engineer you’ll be part of a dedicated team that ensures our autonomous mobility platform is secure, resilient, and compliant with mobility industry standards. You’ll work across the full product lifecycle of our fully autonomous vehicles like the ID.Buzz AD—from concept to deployment and operations—designing and implementing cybersecurity strategies that protect our users, vehicles, and infrastructure. We’re looking for someone who thrives in cross-functional environments, understands the nuances of embedded systems and distributed architectures, and can translate complex threat models into actionable engineering requirements. What you will do Define cybersecurity concepts and system boundaries for autonomous mobility features, considering real-world operating environments. Conduct threat analysis and risk assessments (TARA) in alignment with ISO/SAE 21434, identifying vulnerabilities and evaluating attack feasibility. Translate TARA outcomes into security requirements and risk mitigation strategies. Collaborate with engineering and safety teams to embed security into every stage of the product lifecycle—from design and development to incident response. Ensure ongoing compliance with cybersecurity standards across multiple projects. Partner with functional safety experts to align cybersecurity and safety requirements. What will help you to fulfill your role A degree in Electrical Engineering, Computer Science, Automotive Engineering, Physics, or a related field. Hands-on experience with threat modeling and risk assessments for embedded or distributed systems. Familiarity with security best practices including secure communications, authentication protocols, and modern security technologies. Experience working with regulated environments and producing compliance-driven deliverables. Strong communication skills and the ability to collaborate across disciplines to define and negotiate security requirements. Several years in a cybersecurity or related engineering role, ideally in automotive or mobility domains. Experience designing and implementing security features in software or hardware systems. Familiarity with ISO/SAE 21434 and/or UNR 155 certification processes. Exposure to policy-driven security frameworks (e.g., RBAC/ABAC, OPA). Prior involvement in incident response, SLO/SLI definition, or on-call rotations. A passion for mentoring and leading technical discussions. Business-level fluency in English, both written and spoken We welcome applicants from diverse backgrounds — even if you don’t meet every requirement. If you’re excited about the role and MOIA’s mission, we’d love to hear from you! Our benefits in a nutshell Competitive salary (including bonus) Hybrid work setup: Work from home or one of our offices - you and your team decide how often to meet, blending flexibility with collaboration! Flexible working hours and the possibility of flexible work arrangements depending on your needs (parenting, care work, volunteering, etc.) Budget and monthly expense allowance for home office setup Possibility of remote work from outside Germany for up to 6 weeks per year from over 35 countries - learn more in our blog! Public transport ticket (fully subsidized \"Deutschlandticket\") for commuting and travelling throughout Germany and discount on MOIA rides Subsidized fitness club membership or bike leasing Learning environment with continuous learning days, job rotation, trainings and workshops, coaching, conferences, books, and language classes Mental health support, 1:1 sessions with external professionals and mental unload workshops 30 vacation days, sabbatical and unpaid leave option Relocation support with service provider (visa, administration, etc.) Dog-friendly offices For student & internship positions, we have an adjusted set of benefits. You can find them here. Be who you are! We are a member of Charta der Vielfalt and are dedicated to actively fostering a workplace that celebrates and promotes diversity in various aspects such as age, gender identity, race, sexual orientation, physical or cognitive ability, and ethnicity. At MOIA, we embrace a culture where people are accepted, respected, valued, appreciated, and included. In our commitment to promoting diversity and inclusivity, we regularly provide unconscious bias training to all our employees. Furthermore, we continuously strive to enhance our hiring process by ensuring a diverse hiring panel. How we work At MOIA, our teams are typically distributed across our office locations and collaborate in a hybrid setup. We work together both remotely and on site, choosing the mode of collaboration that fits the context, the work at hand, and each team’s rhythm. Spending time together in our offices is an important part of how we stay connected, build trust, and solve complex problems. At the same time, we value flexibility and give teams and individuals autonomy to shape their ways of working, with everyone having the freedom to organise their routines in a way that aligns with their work and their team’s needs. If you’d like to learn more about how we work, visit our blog for insights into our culture and hiring process, or follow us on Instagram for a look behind the scenes at MOIA. Who we are At MOIA we’re reimagining the future of mobility – safe, autonomous and tailored to the needs of cities and their people. As a tech company with more than 400 employees, we build mobility solutions that truly move cities forward. We launched our ridepooling service in Hamburg in 2019 and have been part of the city’s public transport system since 2023. Since launch, we have transported over 12 million passengers. Currently, MOIA is evolving from a mobility provider to a tech provider offering a scalable and safe turnkey solution for autonomous driving. With office locations in Berlin and Hamburg, our diverse and international team comprising more than 60 nationalities works together toward that shared mission. MOIA is more than a technology provider – we are a partner to cities and public transport operators committed to creating more livable spaces and delivering mobility solutions that are reliable, safe and comfortable. Your application to MOIA We value authenticity and personal insights in your application responses. While AI tools can be useful, we encourage you to answer the following questions based on your own experiences and understanding. This helps us keep a human touch and better evaluate your unique perspective and match for the role. To reinforce an unbiased screening process, we kindly ask you not to include your picture, age, address, or any other details unrelated to your qualifications and suitability for the role. Additionally, we anonymize applications during the initial review phase by removing personally identifiable information. This ensures that our evaluation focuses solely on your skills, experience, and potential – supporting a fair and inclusive hiring experience for all candidates.", "summaryDescription" : "Senior Vehicle Security Engineer at MOIA GmbH. Define cybersecurity concepts. Define system boundaries", "postedDate" : "2026-06-11T23:02:48.517", "createdAt" : "2026-06-11T23:02:48.517", "lastUpdated" : "2026-06-14T20:26:53.217", "ingestTimestamp" : "2026-06-11T23:02:48.517", "mongoId" : "6a2a496b74d8ee00a05e4f09", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Threat modeling", "Risk assessments", "Security features design", "Mentoring", "Leading", "Cybersecurity strategies", "Risk mitigation", "Security requirements", "Compliance-driven deliverables", "Autonomous mobility", "Embedded systems", "Distributed architectures", "ISO/SAE 21434", "UNR 155", "RBAC/ABAC", "OPA" ], "skillCount" : 16, "jobCategory" : "other", "jobSubcategory" : "autonomous-driving-&-vehicle-systems", "dataQualityScore" : 0.8888889, "_score" : 761.2099, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Autonomous Mobility" }, { "id" : "68c2e41ff8b1b0376634c46b", "title" : "Security Engineer", "company" : "Amazon Web Services", "industry" : "Operations, IT, Support Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 75000.0, "max" : 110000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Security Engineer in Dublin, Ireland, adjusted for the technology industry and a large company size." }, "location" : "Dublin, IRL", "locations" : [ "Dublin, IRL" ], "timestamp" : "2026-06-15T02:57:00.885", "fingerprint" : "a00aaea3b62a21894a78ed2eede02bcc5570b840886ec7c20c0f73fbef6e7338", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3078650/apply", "externalId" : "ca545256-4b93-49a4-8e76-6eb289030795", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Dublin", "country" : "Ireland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "53.3493795,-6.2605593" } ], "locationText" : "Dublin, Ireland", "employmentType" : "FULL_TIME", "technicalSkills" : "AWS, Python, Ruby, Go, Swift, Java, .Net, C++", "professionalSkills" : [ "Security Engineering", "Assurance methodologies", "Threat modeling", "Secure coding", "Identity management", "System administration", "Network security", "Information Security" ], "hardSkillsList" : [ "Secure coding", "Identity management", "Cryptography", "System administration", "Network security", "Incident response", "Automation" ], "softSkillsList" : [ "Innovation", "Ownership", "Troubleshooting", "Customer needs advocacy" ], "hardSkills" : [ { "name" : "Secure coding", "level" : "intermediate" }, { "name" : "Identity management", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" }, { "name" : "System administration", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Innovation" }, { "name" : "Ownership" }, { "name" : "Troubleshooting" }, { "name" : "Customer needs advocacy" } ], "majorSkills" : "Security Engineering, Incident Response, Automation", "majorSkillsList" : [ "Security Engineering", "Incident Response", "Automation" ], "coreResponsibilities" : "Triage new incoming issues, Prioritize remediation, Promote security throughout Company, Build working relationships, Handle context switching, Handle interruptions, Escalate issues to leadership, Build and improve tooling, Share tooling benefits, Assist with recruiting, Assist with administrative work, Lead triage of security incidents, Assess incident impact, Coordinate remediation strategies, Develop incident response playbooks, Maintain incident response procedures, Monitor security alerts, Monitor security logs, Detect threats, Detect anomalies, Conduct post-incident analyses, Contribute to lessons-learned documentation, Collaborate with security teams, Improve detection capabilities, Improve response capabilities, Design automation tools, Implement automation tools, Enhance incident response efficiency, Enhance incident response effectiveness, Improve security tooling, Improve security processes, Share innovations, Share best practices, Build automation, Enhance automation, Improve operational efficiency, Generate insights from data, Identify automation opportunities, Evaluate automation opportunities, Prioritize automation opportunities, Automate Partner Security mechanisms, Collaborate on security mechanisms, Improve consistency, Improve compliance, Contribute to security training, Contribute to best practices", "teamCollaboration" : "Working relationships within team; Working relationships across Amazon; Collaborate on security mechanisms; Collaborate with other security teams; Collaborate with business tools teams; Collaborate with systems teams; Collaborate with architectures teams", "projectManagementSkills" : [ "Technical program management" ], "domainKnowledge" : "Cloud security; Information Security; AWS services; Software security vulnerabilities; Partner Security mechanisms", "domainList" : [ "cloud-security", "information-security", "aws-services", "software-security-vulnerabilities", "partner-security-mechanisms" ], "domainSpecificKnowledge" : [ "Cloud security", "Information Security", "AWS services", "Software security vulnerabilities", "Partner Security mechanisms" ], "toolProficiency" : [ "AWS services" ], "communicationSkills" : "Verbal communication; Written communication", "documentationSkills" : "Lessons-learned documentation", "continuousLearning" : "Gain new security skills", "innovationCreativity" : "Innovative enhancements; Innovative ideas", "problemSolvingSkills" : "Troubleshooting; Root cause analysis", "specialRequirements" : "National of EU member state", "outcomesObjectives" : "Raise bar for employee interaction; Deliver bar raising security outcomes; Improve operational efficiency; Generate new insights; Improve consistency; Improve compliance", "qualificationsBasic" : "National of an EU member state, 3+ years threat modeling, secure coding, identity management, software development, cryptography, system administration, or network security, Knowledge of OWASP top 10, 2+ years programming in Python, Ruby, Go, Swift, Java, .Net, or C++", "qualificationsPreferred" : "Experience with AWS products, Experience with threat modelling, Experience with secure coding, Experience with identity management, Experience with authentication, Experience with software development, Experience with cryptography, Experience with system administration, Experience with network security, Experience with Security Engineering, Experience with Assurance methodologies, Experience with fuzzing, Experience with static code analysis, Experience with dynamic code analysis", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Global Services, Security (GSS) team, a part of Amazon Web Services, leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world’s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers. At Amazon Web Services (AWS), Security is our highest priority. The Security Escalations team in GSS is responsible for the security of services offered by Sales, Marketing and Global Services (SMGS). We are looking for a passionate, innovative, results oriented technical program manager. Security Escalations is responsible for driving innovative enhancements that raise the bar for how AWS employees interact with resources, systems, and data. You are someone who loves managing programs and is committed to formulating and implementing wide-ranging process improvements. You are passionate about the security of the cloud and you want to solve real business problems. We have a team culture that encourages innovation and we expect team members and management alike to take a high degree of ownership for their program vision and execution of ideas. You possess strong verbal and written communication skills, can operate independently, and have a consistent track record of delivery. You have an understanding of technical concepts, and possess a broad understanding of AWS services. You are organized, detail-oriented, and drive towards improved performance while advocating for customer needs. A Security Engineer must foster constructive dialogue and seek resolution when confronted with discordant views. Engineers in this role are expected to participate fully in the planning of the security team's work and constantly seek opportunities for process improvement. They should also have a deep understanding of at least one specialty for which they are a sought out resource (both within AWS and Partner Security, and by groups throughout Amazon), while having an understanding of the application of Information Security in a broad range of technical areas. You will have the combination of troubleshooting, technical, and communication skills, as well as the ability to handle a mix of disparate tasks which may include project and software development work. This role will provide career growth opportunities as you gain new security skills in the course of your duties. Key job responsibilities A successful candidate will need a combination of troubleshooting, technical, and communication skills, as well as the ability to handle a mix of disparate tasks which may include small-projects in addition to managing incident response activities. This role will provide career growth opportunities as you gain new security skills in the course of your duties. Triage new incoming issues to determine the level of risk they present to AWS, and then accordingly prioritise its remediation in conjunction with the impacted service team. Participate in efforts to promote security throughout the Company and build good working relationships within the team and with others across Amazon Demonstrate high capacity and tolerance for context switching and interruptions while remaining productive and effective Escalate issues to senior AWS leadership if you feel your issues are not progressing at the correct pace based on impact to ensure we are putting customers first. Explore building and improving our tooling to make your own life easier and share that benefit with all our engineers globally. Assistance with recruiting activities and administrative work Key job responsibilities • Lead the triage and response to security incidents, assessing their potential impact on AWS systems and customers. • Coordinate with service teams to implement rapid, effective remediation strategies. • Develop and maintain incident response playbooks and procedures. • Security Operations: • Monitor security alerts and logs to detect potential threats or anomalies. • Conduct thorough post-incident analyses and contribute to lessons-learned documentation. • Collaborate with other security teams to improve detection and response capabilities. • Automation and Tool Development: • Design and implement automation tools to enhance incident response efficiency and effectiveness. • Continuously improve existing security tooling and processes. • Share innovations and best practices with the global AWS security community. A day in the life AWS Global Services includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center. You’ll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud. About the team As a Security Engineer, you will build or enhance existing automation to improve operational efficiency or generate new insights from existing data. You will identify, evaluate, and prioritize opportunities for automating Partner Security mechanisms across a diverse landscape of business tools, systems, and architectures. You will meet with other teams across the Global Services organization to collaborate on security mechanisms, like partner onboarding and offboarding workflows, to improve consistency and compliance throughout the organization. You will contribute to security training programs, best practices documentation, and security policies tailored for internal teams engaging with subcontracted partners. You will implement scalable processes and tooling solutions to facilitate regular audits of partner security controls and compliance standards. Additionally, you will provide technical expertise and support for ongoing security assessments of Partners and subcontractors within the SMGS business units, ensuring adherence to AWS security standards Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS? Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - This role requires you to be a national of an EU member state - 3+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Knowledge of commonly found software security vulnerabilities (like OWASP top 10) and remediation techniques - 2+ years of programming in one of the following or similar: Python, Ruby, Go, Swift, Java, .Net, C++. Preferred Qualifications: - Experience with AWS products and services - Experience with any combination of the following: threat modelling, secure coding, identity management and authentication, software development, cryptography, system administration and network security - Experience with Security Engineering (building tools) and Assurance methodologies e.g. fuzzing, static and dynamic code analysis Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice ( https://www.amazon.jobs/en/privacy_page ) to know more about how we collect, use and transfer the personal data of our candidates. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security Engineer at Amazon Web Services. Skills: Security Engineering, Incident Response, Automation. Triage new incoming issues. Prioritize remediation", "postedDate" : "2026-06-13T04:57:34.861", "createdAt" : "2026-06-13T04:57:34.861", "lastUpdated" : "2026-06-15T02:57:00.885", "ingestTimestamp" : "2026-06-13T04:57:34.861", "mongoId" : "68c2e41ff8b1b0376634c46b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3078650/apply", "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Secure coding", "Identity management", "Cryptography", "System administration", "Network security", "Incident response", "Automation", "Innovation", "Ownership", "Troubleshooting", "Customer needs advocacy", "Security Engineering", "Incident Response", "Assurance methodologies", "Threat modeling", "Information Security", "Technical program management", "Cloud security", "AWS services", "Software security vulnerabilities", "Partner Security mechanisms" ], "skillCount" : 21, "jobCategory" : "operations", "dataQualityScore" : 0.8888889, "_score" : 760.96655, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" } ], "status" : 200, "message" : "OK", "pagination" : { "page" : 0, "limit" : 50, "totalCount" : 79619, "totalPages" : 1593, "hasNext" : true, "hasPrevious" : false } }

Cybersecurity Engineer Security Programmes Contract Jobs in Pune

Cybersecurity Engineer

Security Engineer (Contract)