{ "count" : 36233, "data" : [ { "id" : "6a2c751574d8ee00a09360f7", "title" : "Security Engineer, Detection and Response", "company" : "Serval", "industry" : "Engineering", "salary" : { "min" : 200000.0, "max" : 325000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "timestamp" : "2026-06-16T03:29:01.550", "fingerprint" : "a9b58b622fae2a5e015d888ceb1430e0f4c7af9bae19294b10f2e0362b229c6e", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/serval/5250c679-d490-407e-bd2e-b8b160c62aac/application", "externalId" : "5250c679-d490-407e-bd2e-b8b160c62aac", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "SIEM, Data lakes, EDR, Cloud telemetry, Logging", "professionalSkills" : [ "Detection engineering", "Incident response", "Security operations", "Instrumentation", "Observability", "Threat intelligence", "Program management", "Process improvement", "People management" ], "hardSkillsList" : [ "Security monitoring", "Incident investigation", "Incident containment", "Incident remediation", "Threat detection", "Response planning", "On-call management", "Escalation paths", "Tabletop exercises", "Telemetry analysis", "Adversary tradecraft" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Incident investigation", "level" : "intermediate" }, { "name" : "Incident containment", "level" : "intermediate" }, { "name" : "Incident remediation", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Response planning", "level" : "intermediate" }, { "name" : "On-call management", "level" : "intermediate" }, { "name" : "Escalation paths", "level" : "intermediate" }, { "name" : "Tabletop exercises", "level" : "intermediate" }, { "name" : "Telemetry analysis", "level" : "intermediate" }, { "name" : "Adversary tradecraft", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Detection engineering, Incident response, Security operations, Team leadership", "majorSkillsList" : [ "Detection engineering", "Incident response", "Security operations", "Team leadership" ], "coreResponsibilities" : "Design detection and response operations, Implement detection and response operations, Operate detection and response operations, Monitor security events, Triage security events, Investigate security events, Contain security events, Remediate security events, Build a team, Lead a team, Mentor a team, Hire for functions, Scale functions, Ensure operational rigor, Ensure operational readiness, Improve detection quality, Improve detection coverage, Ensure critical telemetry is available, Ensure critical telemetry is reliable, Ensure critical telemetry is actionable, Embed detection and response by design, Build a security program, Use Serval's agents for security problems, Use Serval's agents for security-operations problems", "teamCollaboration" : "Partner with Engineering; Partner with Product; Partner with Infrastructure; Work with stakeholders", "domainKnowledge" : "Modern observability stacks; Modern adversary tradecraft; Cloud environments; Corporate environments; Production environments; AI-native automation", "domainList" : [ "modern-observability-stacks", "modern-adversary-tradecraft", "cloud-environments", "corporate-environments", "production-environments", "ai-native-automation" ], "domainSpecificKnowledge" : [ "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments", "AI-native automation" ], "communicationSkills" : "Written communication; Verbal communication; Incident communication", "innovationCreativity" : "Solve frontier security problems; Solve frontier security-operations problems", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Scale detection and response operations; Improve response quality; Improve response speed", "qualificationsBasic" : "10+ years in cybersecurity, Deep expertise in detection engineering, Deep expertise in incident response, Deep expertise in security operations, Deep experience building detection and response teams, Deep experience building instrumentation/observability teams, Deep experience building threat intelligence teams, Stellar leadership skills, Demonstrated history of driving improvements, Exceptional written communication skills, Exceptional verbal communication skills, Remain calm under pressure, Effectively run command of security incidents, Deep expertise in modern observability stacks, Deep expertise in SIEM, Deep expertise in data lakes, Deep expertise in EDR, Deep expertise in cloud telemetry, Deep expertise in logging, Deep expertise in detection primitives, Understand modern adversary tradecraft (TTPs), Demonstrated experience translating TTPs into detection strategies, Demonstrated experience translating TTPs into response actions, Mission-oriented, Unimpeachable integrity, Passionate about detecting and responding to adversaries", "rawDescription" : "WHO WE ARE Serval http://serval.com is an AI-native automation platform transforming how enterprises operate. We build intelligent agents that understand real-world workflows and execute them end-to-end — replacing manual processes and rigid legacy systems with adaptive, learning software. Founded in early 2024, Serval is already trusted by companies like Fox, Notion, Perplexity, Vercel, and Brex to automate high-volume, high-friction operational work across their organizations. At the core of Serval is an agentic AI platform that turns natural language into production-grade workflows. Our agents don’t just respond to requests — they reason, take action across systems, and continuously improve with usage. What began with operational use cases has quickly evolved into a horizontal AI automation layer used across IT, HR, Finance, Security, Legal, and Engineering. Our mission is to eliminate repetitive, manual work across the enterprise and give teams leverage through intelligent automation. Long term, we’re building the universal AI operations layer — a system of agents that sits across business functions and runs the workflows that keep modern companies moving. We’re backed by leading investors including Sequoia Capital, Redpoint Ventures, Meritech, First Round, General Catalyst, Elad Gil, and others. ROLE OVERVIEW As Detection and Response Lead, you'll build and scale the foundations of Serval's cybersecurity detection and response operations. You will set the strategy and drive execution for security monitoring, incident response, recovery, and post-incident improvement across our infrastructure and the systems our customers trust us to operate in. You'll be a hands-on leader with deep technical credibility and strong operational instincts. You will build and mentor a team, partner closely with Engineering and Product, and ensure that detection and response capabilities are embedded by design into the systems that power Serval. WHAT YOU'LL DO - Design, implement, and operate detection and response operations, including continuous monitoring, triage, investigation, containment, and remediation of security events across a diverse set of networks and infrastructure. - Build, lead, and directly mentor a team spanning observability, detection and response, and threat intelligence, hiring and scaling these functions deliberately and proportionately as Serval's platform and customer footprint grow. - Ensure world-class operational rigor and readiness through incident playbooks, on-call and escalation paths, tabletop exercises, and continuous improvement of response quality and speed. - Improve detection quality and coverage by partnering with engineering teams to ensure critical telemetry is available, reliable, and actionable across cloud, corporate, and production environments. - Partner deeply across Engineering, Product, and Infrastructure to embed detection and response into Serval's systems by design rather than as an afterthought. - Build a security program capable of withstanding sophisticated adversaries, including by using Serval's own agents to solve frontier security and security-operations problems. WHAT YOU'LL NEED - Have 10+ years in cybersecurity with deep expertise in detection engineering, incident response, and security operations. - Have deep experience building and leading detection and response, instrumentation/observability, and threat intelligence teams. - Have stellar leadership skills and a demonstrated history of driving durable, continuous improvements to programs, processes, and people. - Have exceptional written and verbal communication skills, can remain calm under pressure, and can effectively run command of security incidents involving numerous stakeholders across a diverse gamut of teams, expertise, and seniority. - Have deep expertise in modern observability stacks (e.g., SIEM, data lakes, EDR, cloud telemetry, logging) and detection primitives. - Understand modern adversary tradecraft (TTPs) and have demonstrated experience translating it into practical detection strategies and response actions. - Are mission-oriented, have unimpeachable integrity, and are passionate about detecting and responding to adversaries in a highly complex, fast-paced environment. WHAT WE OFFER - Impact: Be a key player in shaping the success of our product and company. - Growth: Build a fundamentally new AI product offering with the support of our experienced team and investors. Grow rapidly with the company. - Culture: Join a culture that values innovation, ownership, accountability, and fun.", "summaryDescription" : "Security Engineer, Detection and Response at Serval. Skills: Detection engineering, Incident response, Security operations, Team leadership. Design detection and response operations. Implement detection and response operations", "createdAt" : "2026-06-14T19:27:55.217", "lastUpdated" : "2026-06-16T03:29:01.550", "ingestTimestamp" : "2026-06-14T19:27:55.217", "mongoId" : "6a2c751574d8ee00a09360f7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 200000, "salaryAnnualMax" : 325000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Security monitoring", "Incident investigation", "Incident containment", "Incident remediation", "Threat detection", "Response planning", "On-call management", "Escalation paths", "Tabletop exercises", "Telemetry analysis", "Adversary tradecraft", "Leadership", "Mentoring", "Detection engineering", "Incident response", "Security operations", "Team leadership", "Instrumentation", "Observability", "Threat intelligence", "Program management", "Process improvement", "People management", "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments", "AI-native automation" ], "skillCount" : 29, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb0c074d8ee00a09daf1c", "title" : "Security Engineer, Detection and Response", "company" : "Serval", "industry" : "Engineering", "salary" : { "min" : 200000.0, "max" : 325000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "timestamp" : "2026-06-15T09:19:56.220", "fingerprint" : "14803e741daf8986e22ba67efd869ed1db5cb9f7c1f099fcc2a20c6ed18f6f72", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/Serval/5250c679-d490-407e-bd2e-b8b160c62aac/application", "externalId" : "5250c679-d490-407e-bd2e-b8b160c62aac", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "Cloud telemetry, Logging", "professionalSkills" : [ "Detection engineering", "Incident response", "Security operations", "Threat intelligence", "Observability", "Program management" ], "hardSkillsList" : [ "Adversary tradecraft", "Detection strategies", "Response actions" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Adversary tradecraft", "level" : "intermediate" }, { "name" : "Detection strategies", "level" : "intermediate" }, { "name" : "Response actions", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Detection engineering, Incident response, Security operations, Team leadership", "majorSkillsList" : [ "Detection engineering", "Incident response", "Security operations", "Team leadership" ], "coreResponsibilities" : "Design detection and response operations, Implement detection and response operations, Operate detection and response operations, Monitor security events, Triage security events, Investigate security events, Contain security events, Remediate security events, Build a team, Lead a team, Mentor a team, Hire functions, Scale functions, Ensure operational rigor, Ensure operational readiness, Improve detection quality, Improve detection coverage, Partner with engineering teams, Ensure telemetry availability, Ensure telemetry reliability, Ensure telemetry actionability, Embed detection and response, Build security program", "teamCollaboration" : "Partner with Engineering; Partner with Product; Partner with Infrastructure", "domainKnowledge" : "Modern observability stacks; Modern adversary tradecraft; Cloud environments; Corporate environments; Production environments", "domainList" : [ "modern-observability-stacks", "modern-adversary-tradecraft", "cloud-environments", "corporate-environments", "production-environments" ], "domainSpecificKnowledge" : [ "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments" ], "communicationSkills" : "Written communication; Verbal communication", "innovationCreativity" : "Use Serval's agents", "qualificationsBasic" : "10+ years cybersecurity, Deep expertise detection engineering, Deep expertise incident response, Deep expertise security operations, Deep experience building teams, Deep experience leading teams, Stellar leadership skills, Demonstrated history driving improvements, Exceptional written communication, Exceptional verbal communication, Remain calm under pressure, Effectively run incidents, Deep expertise observability stacks, Deep expertise detection primitives, Understand modern adversary tradecraft, Experience translating TTPs, Experience into detection strategies, Experience into response actions", "qualificationsPreferred" : "Experience with SIEM, Experience with data lakes, Experience with EDR, Experience with cloud telemetry, Experience with logging", "rawDescription" : "WHO WE ARE Serval http://serval.com is an AI-native automation platform transforming how enterprises operate. We build intelligent agents that understand real-world workflows and execute them end-to-end — replacing manual processes and rigid legacy systems with adaptive, learning software. Founded in early 2024, Serval is already trusted by companies like Fox, Notion, Perplexity, Vercel, and Brex to automate high-volume, high-friction operational work across their organizations. At the core of Serval is an agentic AI platform that turns natural language into production-grade workflows. Our agents don’t just respond to requests — they reason, take action across systems, and continuously improve with usage. What began with operational use cases has quickly evolved into a horizontal AI automation layer used across IT, HR, Finance, Security, Legal, and Engineering. Our mission is to eliminate repetitive, manual work across the enterprise and give teams leverage through intelligent automation. Long term, we’re building the universal AI operations layer — a system of agents that sits across business functions and runs the workflows that keep modern companies moving. We’re backed by leading investors including Sequoia Capital, Redpoint Ventures, Meritech, First Round, General Catalyst, Elad Gil, and others. ROLE OVERVIEW As Detection and Response Lead, you'll build and scale the foundations of Serval's cybersecurity detection and response operations. You will set the strategy and drive execution for security monitoring, incident response, recovery, and post-incident improvement across our infrastructure and the systems our customers trust us to operate in. You'll be a hands-on leader with deep technical credibility and strong operational instincts. You will build and mentor a team, partner closely with Engineering and Product, and ensure that detection and response capabilities are embedded by design into the systems that power Serval. WHAT YOU'LL DO - Design, implement, and operate detection and response operations, including continuous monitoring, triage, investigation, containment, and remediation of security events across a diverse set of networks and infrastructure. - Build, lead, and directly mentor a team spanning observability, detection and response, and threat intelligence, hiring and scaling these functions deliberately and proportionately as Serval's platform and customer footprint grow. - Ensure world-class operational rigor and readiness through incident playbooks, on-call and escalation paths, tabletop exercises, and continuous improvement of response quality and speed. - Improve detection quality and coverage by partnering with engineering teams to ensure critical telemetry is available, reliable, and actionable across cloud, corporate, and production environments. - Partner deeply across Engineering, Product, and Infrastructure to embed detection and response into Serval's systems by design rather than as an afterthought. - Build a security program capable of withstanding sophisticated adversaries, including by using Serval's own agents to solve frontier security and security-operations problems. WHAT YOU'LL NEED - Have 10+ years in cybersecurity with deep expertise in detection engineering, incident response, and security operations. - Have deep experience building and leading detection and response, instrumentation/observability, and threat intelligence teams. - Have stellar leadership skills and a demonstrated history of driving durable, continuous improvements to programs, processes, and people. - Have exceptional written and verbal communication skills, can remain calm under pressure, and can effectively run command of security incidents involving numerous stakeholders across a diverse gamut of teams, expertise, and seniority. - Have deep expertise in modern observability stacks (e.g., SIEM, data lakes, EDR, cloud telemetry, logging) and detection primitives. - Understand modern adversary tradecraft (TTPs) and have demonstrated experience translating it into practical detection strategies and response actions. - Are mission-oriented, have unimpeachable integrity, and are passionate about detecting and responding to adversaries in a highly complex, fast-paced environment. WHAT WE OFFER - Impact: Be a key player in shaping the success of our product and company. - Growth: Build a fundamentally new AI product offering with the support of our experienced team and investors. Grow rapidly with the company. - Culture: Join a culture that values innovation, ownership, accountability, and fun.", "summaryDescription" : "Security Engineer, Detection and Response at Serval. Skills: Detection engineering, Incident response, Security operations, Team leadership. Design detection and response operations. Implement detection and response operations", "createdAt" : "2026-06-14T03:16:25.185", "lastUpdated" : "2026-06-15T09:19:56.220", "ingestTimestamp" : "2026-06-14T03:16:25.185", "mongoId" : "6a2cb0c074d8ee00a09daf1c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 200000, "salaryAnnualMax" : 325000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Adversary tradecraft", "Detection strategies", "Response actions", "Leadership", "Mentoring", "Detection engineering", "Incident response", "Security operations", "Team leadership", "Threat intelligence", "Observability", "Program management", "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments" ], "skillCount" : 17, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a306fd5f292fd229cfed7df", "title" : "Security Incident Response Manager", "company" : "Stripe", "industry" : "FinTech", "salary" : { "min" : 110000.0, "max" : 150000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Manager-level Security Incident Response Manager in the FinTech industry in Ireland, adjusted for seniority and company size." }, "location" : "Ireland Locations", "locations" : [ "Ireland Locations" ], "timestamp" : "2026-06-16T11:17:32.753", "fingerprint" : "5f1795380bd689254fa4ec13a24c81721330e837ac870f097537d3dd799086da", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://stripe.com/jobs/search?gh_jid=8007205", "externalId" : "8007205", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Ireland", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Ireland", "experienceMinYears" : 5, "experienceLevel" : "Manager", "technicalSkills" : "Python, SQL, MacOS, Linux, Windows", "professionalSkills" : [ "Security management", "Data analytics", "Network security", "Digital forensics", "Incident response", "Threat intelligence", "Data processing", "Data analysis" ], "hardSkillsList" : [ "Incident response", "Threat analysis", "Forensic investigation", "Data analysis", "Network security", "System administration" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "System administration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident Response Management, Security Operations, Team Leadership, Threat Analysis", "majorSkillsList" : [ "Incident Response Management", "Security Operations", "Team Leadership", "Threat Analysis" ], "coreResponsibilities" : "Leverage security management experience, Improve incident response capabilities, Manage team of security analysts, Manage investigators, Manage responders, Hire team members, Train team members, Evaluate team performance, Provide technical guidance, Develop response procedures, Ensure timely resolution of casework, Collaborate with internal stakeholders, Make continuous improvements to incident response function, Lead team of security analysts, Support team of security analysts, Triage threats, Assess threats, Respond to threats, Provide technical guidance to team, Influence organizational mission, Influence organizational vision, Ensure prioritization of project work, Ensure delivery of project work, Align project work with security roadmaps, Strengthen KPIs for response operations, Strengthen metrics for response operations, Provide clear reporting to stakeholders, Provide consistent reporting to stakeholders, Work cross-functionally with security engineering teams, Gather requirements for analyzing security events data, Gather requirements for responding to security events data, Protect Stripe networks, Protect Stripe systems, Protect Stripe data, Develop strategies for incident response, Document strategies for incident response, Implement strategies for incident response, Develop runbooks for incident response, Document runbooks for incident response, Implement runbooks for incident response, Develop capabilities for incident response, Document capabilities for incident response, Implement capabilities for incident response, Continuously improve security processes, Continuously improve response capabilities, Collaborate with security engineers, Collaborate with security analysts, Coach individual contributors, Mentor individual contributors, Enable career development, Champion quality standards within team", "teamCollaboration" : "Cross-functional teams; Security Analytics teams; Detection teams; Security engineering teams", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Threat actor tactics; Threat actor techniques; Threat actor procedures; Security incident response; Network security; Digital forensics; Data analytics", "domainList" : [ "threat-actor-tactics", "threat-actor-techniques", "threat-actor-procedures", "security-incident-response", "network-security", "digital-forensics", "data-analytics" ], "domainSpecificKnowledge" : [ "Threat actor tactics", "Threat actor techniques", "Threat actor procedures", "Security incident response", "Network security", "Digital forensics", "Data analytics" ], "toolProficiency" : [ "Chronicle", "Tines", "Osquery", "Splunk" ], "communicationSkills" : "Operational reporting; Incident reporting", "documentationSkills" : "Response procedures; Runbooks", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Ensure timely and effective resolution of casework", "qualificationsBasic" : "5+ years leading Security Operations or Incident Response teams, Hands-on, technical management experience, B.S. or M.S. Computer Science or related field, Equivalent experience in Security, Experience recruiting, growing, and leading technical teams, Performance management experience, Excellent written and verbal communication skills, Ability to develop and deliver operational or incident-related information to leadership, Advanced knowledge of data analytics, Advanced knowledge of network security, Advanced knowledge of digital forensics, Advanced knowledge of incident response investigations, Experience with Python, Experience with SQL, Familiarity with macOS, Familiarity with Linux, Familiarity with Windows, Understanding of threat actor TTPs", "qualificationsPreferred" : "Broad knowledge across information security domain, Familiarity with endpoint security, Familiarity with email security, Familiarity with network security, Familiarity with identity management, Familiarity with cloud security, Familiarity with vulnerability management, Familiarity with incident response, Familiarity with threat intelligence, Experience with engineering, Experience with data processing and analysis tools, Familiarity with network observability, Familiarity with security software, Familiarity with data engineering solutions, Familiarity with Chronicle, Familiarity with Tines, Familiarity with osquery, Familiarity with Splunk", "remoteFriendly" : true, "rawDescription" : "Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Security Incident Response team is responsible for triaging and assessing the severity of incoming security alerts, responding with initial containment measures and escalating as needed to incident responders for further investigation and resolution. They analyze a variety of data sources to identify potential threats, collect requirements for operational enhancements to detection and response systems, and generally scale security processes. From external attacks to insider threats, our goal is to respond with speed and precision, remediate, and support the incident postmortem process. The team is distributed globally and regularly coordinates with stakeholders in North America, Europe, and Asia. What you’ll do You will leverage your security management experience to improve incident response capabilities at Stripe. You will manage a team of security analysts, investigators, and responders on the front lines of the incident response process, hiring, training, and evaluating their performance, providing technical guidance where needed, developing clear and consistent response procedures, and ensuring timely and effective resolution of casework. You will also collaborate with various internal stakeholders, including the Security Analytics and Detection teams, and make continuous improvements to Stripe’s security incident response function. Responsibilities Lead and support a team of security analysts, investigators, and responders who triage, assess, and respond to threats Provide technical guidance to the team, as a subject matter expert Influence the organizational mission and vision by ensuring prioritization and delivery of project work that is aligned with relevant security roadmaps Strengthen KPIs and metrics for measuring response operations effectiveness, for clear and consistent reporting to internal stakeholders Work cross-functionally with security engineering teams to gather requirements for analyzing and responding to security events data at scale while protecting Stripe networks, systems, and data from threats Develop, document, and implement strategies, runbooks, and capabilities to support the incident response process Continuously improve security processes and response capabilities by collaborating with security engineers and analysts Coach and mentor individual contributors, enabling career development and championing quality standards within the team Who you are We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement. Minimum requirements 5+ years experience leading Security Operations or Incident Response teams, including hands-on, technical management experience of security analysts or engineers B. S. or M. S. Computer Science or related field, or equivalent experience in Security Experience recruiting, growing, and leading technical teams, including performance management Excellent written and verbal communication skills, including the ability to develop and deliver operational or incident-related information to leadership Advanced knowledge of data analytics (e. g. logs for first or third party applications, system / data access events), network security, digital forensics, and incident response investigations Experience with Python and SQL, and/or familiarity with other programming languages Familiarity with operating systems, file systems, and memory on macOS, Linux, or Windows Strong understanding of threat actor tactics, techniques, and procedures (TTPs) Preferred qualifications Broad knowledge and experience across the information security domain, including familiarity with endpoint, email, network, identity management, cloud security, vulnerability management, incident response, and threat intelligence. Experience with engineering, data processing and analysis tools Familiarity with network observability, security software, or data engineering solutions (Chronicle, Tines, osquery, Splunk, etc.)", "summaryDescription" : "Security Incident Response Manager at Stripe. Skills: Incident Response Management, Security Operations, Team Leadership, Threat Analysis. Leverage security management experience. Improve incident response capabilities", "postedDate" : "2026-06-16T01:16:18.624", "createdAt" : "2026-06-16T01:16:18.624", "lastUpdated" : "2026-06-16T11:17:32.753", "ingestTimestamp" : "2026-06-16T01:16:18.624", "mongoId" : "6a306fd5f292fd229cfed7df", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Incident response", "Threat analysis", "Forensic investigation", "Data analysis", "Network security", "System administration", "Leadership", "Incident Response Management", "Security Operations", "Team Leadership", "Threat Analysis", "Security management", "Data analytics", "Digital forensics", "Threat intelligence", "Data processing", "Roadmap planning", "Threat actor tactics", "Threat actor techniques", "Threat actor procedures", "Security incident response", "Chronicle", "Tines", "Osquery", "Splunk" ], "skillCount" : 25, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c8c8374d8ee00a0975b3c", "title" : "Security Detection Engineer", "company" : "WHOOP", "industry" : "Information Security", "salary" : { "min" : 130000.0, "max" : 170000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Boston, MA", "locations" : [ "Boston, MA" ], "timestamp" : "2026-06-15T09:30:31.941", "fingerprint" : "7f688e9b7c449c32eb3e186a1d2a0ed0a868c5c7a11f597c0eda04f763bd2c41", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/whoop/d14ac01e-5274-43da-b41d-19fe6ac0f588/application", "externalId" : "d14ac01e-5274-43da-b41d-19fe6ac0f588", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Boston", "state" : "Massachusetts", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "42.3588336,-71.0578303" } ], "locationText" : "Boston, Massachusetts, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Go, PowerShell, YARA, SIGMA, Suricata", "professionalSkills" : [ "Detection engineering strategy", "Threat intelligence translation", "Adversary emulation", "Automated enrichment", "Automated triage", "Detection KPIs", "Root cause analysis", "Automation development", "Visibility gap identification", "Advanced analytics application", "Machine learning application", "Emerging attack research" ], "hardSkillsList" : [ "Detection logic development", "Behavioral detection building", "Alert tuning", "False positive reduction", "Detection KPI tracking", "Threat modeling", "Scripting" ], "softSkillsList" : [ "Effective communicator" ], "hardSkills" : [ { "name" : "Detection logic development", "level" : "intermediate" }, { "name" : "Behavioral detection building", "level" : "intermediate" }, { "name" : "Alert tuning", "level" : "intermediate" }, { "name" : "False positive reduction", "level" : "intermediate" }, { "name" : "Detection KPI tracking", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Effective communicator" } ], "majorSkills" : "Detection engineering, Threat detection, Security operations, Cloud security", "majorSkillsList" : [ "Detection engineering", "Threat detection", "Security operations", "Cloud security" ], "coreResponsibilities" : "Design high-signal detections, Build high-signal detections, Scale high-signal detections, Develop detection logic, Maintain detection logic, Translate threat intelligence, Validate detection effectiveness, Build behavioral detections, Improve detection quality, Tune alerts, Reduce false positives, Implement automated enrichment, Implement automated triage, Define detection KPIs, Track detection KPIs, Implement measurement processes, Improve detection health, Support incident investigations, Lead incident investigations, Contribute to on-call rotation, Reduce operational overhead, Partner with Engineering, Partner with IT, Partner with Infrastructure, Partner with Product, Partner with GRC, Ensure monitoring coverage, Ensure detection coverage, Map detections to threat models, Identify visibility gaps, Improve coverage, Explore advanced analytics, Apply advanced analytics, Improve detection fidelity, Reduce detection noise, Enhance triage workflows, Enhance investigation workflows, Research emerging attacks, Incorporate learnings into strategy", "teamCollaboration" : "Partner with Engineering; Partner with IT; Partner with Infrastructure; Partner with Product; Partner with GRC; Collaborate with engineers; Collaborate with stakeholders", "domainKnowledge" : "Cloud environments; Identity environments; Endpoint environments; Application environments; Attacker tradecraft; MITRE ATT&CK; Account takeover; Credential abuse; API misuse; Automation attacks; Privilege escalation; Data exfiltration; Identity compromise; Cloud abuse; Lateral movement; Consumer-facing platforms", "domainList" : [ "cloud-environments", "identity-environments", "endpoint-environments", "application-environments", "attacker-tradecraft", "mitre-att-ck", "account-takeover", "credential-abuse", "api-misuse", "automation-attacks", "privilege-escalation", "data-exfiltration", "identity-compromise", "cloud-abuse", "lateral-movement", "consumer-facing-platforms" ], "domainSpecificKnowledge" : [ "Cloud environments", "Identity environments", "Endpoint environments", "Application environments", "Attacker tradecraft", "MITRE ATT&CK", "Account takeover", "Credential abuse", "API misuse", "Automation attacks", "Privilege escalation", "Data exfiltration", "Identity compromise", "Cloud abuse", "Lateral movement", "Consumer-facing platforms" ], "toolProficiency" : [ "YARA", "SIGMA", "Suricata" ], "communicationSkills" : "Explain detection strategy", "continuousLearning" : "Research emerging attacks", "problemSolvingSkills" : "Root cause analysis; Reducing noise; Increasing signal fidelity", "specialRequirements" : "On-call rotation", "outcomesObjectives" : "Protect member data; Ensure depth of coverage; Ensure signal precision; Ensure resilience; Reduce false positives; Improve detection health; Reduce operational overhead; Improve coverage as environment scales; Reduce noise; Enhance triage workflows; Enhance investigation workflows", "qualificationsBasic" : "4+ years Information Security, Detection engineering experience, Threat detection experience, Security operations experience, Writing detection logic, Tuning detection logic, Cloud telemetry analysis, SaaS telemetry analysis, Authentication events analysis, API activity analysis, System logs analysis, Python scripting skills, Go scripting skills, PowerShell scripting skills, Fast-paced environment, Analytical mindset, Systems-thinking approach, Incident response support, On-call rotations experience", "qualificationsPreferred" : "Experience building detective controls, Detecting authentication abuse at scale, Detecting API abuse at scale, Applying data analysis techniques, Applying machine learning techniques, Bachelor's degree, Relevant security certifications", "rawDescription" : "At WHOOP, we’re on a mission to unlock human performance. WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives. WHOOP is seeking a Security Detection Engineer to serve as a key technical contributor within our Information Security team, reporting to the Information Security Manager. In this role, you will drive the design and evolution of high-fidelity, scalable detection capabilities that protect millions of members’ biometric and health data. You will help define our detection engineering strategy across cloud, identity, endpoint, and application environments, ensuring depth of coverage, signal precision, and resilience against modern attacker tradecraft. This is an opportunity to shape a growing detection program within a rapidly evolving Information Security team. RESPONSIBILITIES: - As a member of the team, you will: - Design, build, and scale high-signal detections across cloud, identity, endpoint, network, and application layers using Detection-as-Code principles. - Develop and maintain detection logic aligned to real-world attacker behavior and frameworks such as MITRE ATT&CK across modern security platforms. - Translate threat intelligence into actionable detections and validate effectiveness through adversary emulation and testing. - Build behavioral detections to protect against threats such as account takeover, credential abuse, API misuse, automation attacks, privilege escalation, and data exfiltration. - Continuously improve detection quality by tuning alerts, reducing false positives, and implementing automated enrichment and triage. - Define and track detection KPIs (e.g., precision, recall, false positive rate, MTTD) and implement processes to measure and improve detection health. - Support and lead incident investigations, including containment, root cause analysis, and post-incident detection improvements. - Contribute to the on-call rotation while proactively reducing operational overhead through automation. - Partner with Engineering, IT, Infrastructure, Product, and GRC to ensure systems launch with strong monitoring and detection coverage. - Map detections to threat models, identify visibility gaps, and continuously improve coverage as the environment scales. - Explore and apply advanced analytics and machine learning techniques to improve detection fidelity, reduce noise, and enhance triage and investigation workflows. - Stay ahead of evolving threats by researching emerging attack techniques and incorporating learnings into detection strategy. QUALIFICATIONS: - - 4+ years of hands-on experience in Information Security, with a focus on detection engineering, threat detection, or security operations. - Demonstrated experience writing and tuning detections across cloud, identity, endpoint, or application environments. - Familiarity with detection frameworks and tooling such as YARA, SIGMA, Suricata, or similar rule-based detection methodologies. - Strong understanding of attacker techniques across identity compromise, cloud abuse, lateral movement, and data exfiltration. - Expertise analyzing and building detections on cloud and SaaS telemetry, including authentication events, API activity, and system logs. - Strong scripting skills in a scripting language such as Python, Go, or PowerShell for automation and tool development. - Ability to operate effectively in a fast-paced, high-growth environment. - Strong analytical mindset with a systems-thinking approach to reducing noise and increasing signal fidelity. - Experience supporting incident response investigations and participating in on-call rotations. - Experience building detective controls for consumer-facing platforms or detecting authentication and API abuse at scale is a strong plus. - Effective communicator who can collaborate with engineers and explain detection strategy clearly to both technical and non-technical stakeholders. - Familiarity with applying data analysis or machine learning techniques to security detection or alert triage is a plus. - Bachelor’s degree in Computer Science, Information Security, or a related technical field, and/or relevant security certifications are a plus. Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply. WHOOP is an Equal Opportunity Employer and participates in E-verify to determine employment eligibility. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values. At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success. The U.S. base salary range for this full-time position is $130,000 - $170,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training. In addition to the base salary, the successful candidate will also receive benefits and a generous equity package. These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.", "summaryDescription" : "Security Detection Engineer at WHOOP. Skills: Detection engineering, Threat detection, Security operations, Cloud security. Design high-signal detections. Build high-signal detections", "createdAt" : "2026-06-14T06:37:12.610", "lastUpdated" : "2026-06-15T09:30:31.941", "ingestTimestamp" : "2026-06-14T06:37:12.610", "mongoId" : "6a2c8c8374d8ee00a0975b3c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 130000, "salaryAnnualMax" : 170000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Detection logic development", "Behavioral detection building", "Alert tuning", "False positive reduction", "Detection KPI tracking", "Threat modeling", "Scripting", "Effective communicator", "Detection engineering", "Threat detection", "Security operations", "Cloud security", "Detection engineering strategy", "Threat intelligence translation", "Adversary emulation", "Automated enrichment", "Automated triage", "Detection KPIs", "Root cause analysis", "Automation development", "Visibility gap identification", "Advanced analytics application", "Machine learning application", "Emerging attack research", "Cloud environments", "Identity environments", "Endpoint environments", "Application environments", "Attacker tradecraft", "MITRE ATT&CK", "Account takeover", "Credential abuse", "API misuse", "Automation attacks", "Privilege escalation", "Data exfiltration", "Identity compromise", "Cloud abuse", "Lateral movement", "Consumer-facing platforms", "YARA", "SIGMA", "Suricata" ], "skillCount" : 43, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305653f292fd229cf27dba", "title" : "Security Engineer II, Security Incident Response Team (SIRT)", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 159000.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-16T08:11:33.016", "fingerprint" : "0987fca027bd6689942ce9706e1f89c85b280b67309ecc2a54aad3db41923465", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10443978/apply", "externalId" : "c8d18061-5e73-4845-8dc5-690328d5af3a", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Cloud security, Network security, Endpoint security, Vulnerability management, Incident response, SIEM, Forensics, Scripting languages, AWS, Azure, GCP", "professionalSkills" : [ "Problem solving", "Analytical thinking", "Decision making" ], "hardSkillsList" : [ "Incident analysis", "Malware analysis", "Digital forensics", "Network traffic analysis", "Log analysis" ], "hardSkills" : [ { "name" : "Incident analysis", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Digital forensics", "level" : "intermediate" }, { "name" : "Network traffic analysis", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" } ], "majorSkills" : "Security Incident Response, Cloud Security, Threat Detection", "majorSkillsList" : [ "Security Incident Response", "Cloud Security", "Threat Detection" ], "coreResponsibilities" : "Respond to security incidents, Investigate security breaches, Analyze security alerts, Perform digital forensics, Develop incident response playbooks, Collaborate with engineering teams, Improve security posture, Stay current with threats", "teamCollaboration" : "Cross-functional teams; Engineering teams", "domainKnowledge" : "Cloud computing; Network protocols; Operating systems; Cyber threats", "domainList" : [ "cloud-computing", "network-protocols", "operating-systems", "cyber-threats" ], "domainSpecificKnowledge" : [ "Cloud computing", "Network protocols", "Operating systems", "Cyber threats" ], "toolProficiency" : [ "SIEM tools", "Forensic tools", "Threat intelligence platforms" ], "communicationSkills" : "Incident reporting; Technical briefings", "documentationSkills" : "Incident reports; Post-incident reviews", "continuousLearning" : "Stay current with threats", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Minimize impact of incidents; Reduce incident response time; Enhance security defenses", "qualificationsBasic" : "Bachelor's degree or equivalent practical experience, 5+ years of experience in security engineering, Experience with security incident response, Experience with cloud security", "qualificationsPreferred" : "Master's degree in Computer Science or related field, Experience with scripting languages, Experience with SIEM tools, Experience with threat intelligence platforms, Experience with digital forensics", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon is seeking qualified Security Engineers to join our innovative, high energy Information Security team. In this role you will work within the Amazon Security Incident Response Team (SIRT). SIRT Security Engineers respond to security events, conduct analysis of threats such as malware and intrusion attempts, and provide security services to safeguard highly sensitive data. They work hands-on with detection systems and vulnerability analysis tools to respond to potential threats to Amazon systems. SIRT Security Engineers are unique individuals prepared to relentlessly resolve security issues by gathering and analyzing event data and conducting root-cause analysis. With your technical expertise, you will be solving security challenges at scale, working to protect the applications powering the most sophisticated e-commerce platform ever built. We value broad and deep technical knowledge, specifically in the fields of forensics, malware analysis, network security, application security, threat hunting, and threat intelligence. Key job responsibilities - Responding to security incidents, and coordinating a cohesive response involving multiple teams across Amazon. - Providing security engineering solutions and support during customer-facing incidents, proactively considering the prevention of similar incidents from occurring in the future. - Assisting in the development of pragmatic solutions that achieve business requirements while maintaining an acceptable level of risk. - Identifying and recommending solutions that improve or expand Amazon’s incident response capabilities, leveraging AI approaches where suitable. - Working alongside and mentoring Information Security engineers to improve security, reduce and quickly address risk. - Evaluating the impact of current security trends, advisories, publications, and academic research to Amazon, coordinating response as necessary across affected teams. - Keeping your knowledge and skills current with the rapidly changing threat landscape. - Participating in a follow-the-sun on-call rotation. A day in the life You will be part of an operational team, which owns and drives outcomes for security issues reported through a variety of mechanisms. When not \"on deck\" for those operational duties, you will be identifying and developing solutions to consistently and efficiently handle issues. You will also work with partner security teams across Amazon to raise our security bar and delight customers. There are also training and travel opportunities due to SIRT being a global team with presence in multiple countries. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Basic Qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience - 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience - Bachelor's degree in computer science or equivalent - Knowledge of networking protocols such as HTTP, DNS and TCP/IP - Knowledge of industry-based security vulnerabilities and remediation techniques Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks - Experience with AWS products and services - Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "Security Engineer II, Security Incident Response Team (SIRT) at Amazon.com Services LLC. Skills: Security Incident Response, Cloud Security, Threat Detection. Respond to security incidents. Investigate security breaches", "postedDate" : "2026-06-15T22:01:16.090", "createdAt" : "2026-06-15T22:01:16.090", "lastUpdated" : "2026-06-16T08:11:33.016", "ingestTimestamp" : "2026-06-15T22:01:16.090", "mongoId" : "6a305653f292fd229cf27dba", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10443978/apply", "salaryAnnualMin" : 159000, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Incident analysis", "Malware analysis", "Digital forensics", "Network traffic analysis", "Log analysis", "Security Incident Response", "Cloud Security", "Threat Detection", "Problem solving", "Analytical thinking", "Decision making", "Cloud computing", "Network protocols", "Operating systems", "Cyber threats", "SIEM tools", "Forensic tools", "Threat intelligence platforms" ], "skillCount" : 18, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2a8fed74d8ee00a068a6ea", "title" : "Security Engineer, Detection and Response", "company" : "Notion", "industry" : "Security", "salary" : { "min" : 175000.0, "max" : 245000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Security Engineer, Detection and Response in San Francisco, United States, adjusted for the technology industry and company size." }, "location" : "San Francisco, California", "locations" : [ "San Francisco, California", "New York, New York" ], "timestamp" : "2026-06-14T21:02:11.995", "fingerprint" : "68123271e667af6455e06d6a16d67b6a4b26130b3c39028ed40750c0f70c56eb", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/notion/c0fcf37b-e00f-4aae-a2e0-b008f9939a7e/application", "externalId" : "c0fcf37b-e00f-4aae-a2e0-b008f9939a7e", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Cloud security, AWS, GCP, Azure, Identity-focused attack detection, SIEM, EDR, SOAR, LLM, Kubernetes, Container detection", "professionalSkills" : [ "Detection engineering", "Security operations", "Incident response", "Threat hunting", "Rule lifecycle management", "Tuning", "Measurement", "Rollout safety", "Triage", "Enrichment", "Investigation", "Detection authoring", "Threat intelligence", "Adversary TTPs", "Telemetry requirements", "Response improvements", "Postmortems", "Security improvements", "Investment decisions", "On-call rotation" ], "hardSkillsList" : [ "Detection engineering", "Security operations", "Incident response", "Threat hunting", "Cloud security", "Malware analysis", "Digital forensics" ], "hardSkills" : [ { "name" : "Detection engineering", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Cloud security", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Digital forensics", "level" : "intermediate" } ], "majorSkills" : "Detection engineering, Incident response, Cloud security, Threat intelligence", "majorSkillsList" : [ "Detection engineering", "Incident response", "Cloud security", "Threat intelligence" ], "coreResponsibilities" : "Design high-signal detections, Maintain high-signal detections, Build detection platform, Improve detection platform, Develop tooling, Develop automation, Accelerate triage, Accelerate enrichment, Accelerate investigation, Accelerate detection authoring, Translate threat intelligence, Translate adversary TTPs, Participate in investigations, Participate in incident response, Participate in postmortems, Define key metrics, Track key metrics, Participate in on-call rotation", "teamCollaboration" : "Work closely with Engineering; Work closely with Corporate Security; Work closely with Infrastructure", "projectManagementSkills" : [ "Drive projects independently" ], "domainKnowledge" : "Cloud-native environment; AI-enabled systems; Container detection", "domainList" : [ "cloud-native-environment", "ai-enabled-systems", "container-detection" ], "domainSpecificKnowledge" : [ "Cloud-native environment", "AI-enabled systems", "Container detection" ], "toolProficiency" : [ "SIEM", "EDR", "SOAR", "Sigma", "KQL", "SPL", "YARA-L", "EQL", "Panther" ], "communicationSkills" : "Communicate clearly; Design docs; Runbooks; Incident reports", "documentationSkills" : "Design docs; Runbooks; Incident reports", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "On-call rotation", "outcomesObjectives" : "Ship high-signal detections; Improve detection platform; Shape detection and response engineering; Identify gaps; Prioritize investments; Build what's needed next; Accelerate triage; Accelerate enrichment; Accelerate investigation; Accelerate detection authoring; Drive long-term security improvements; Guide investment decisions", "qualificationsBasic" : "6+ years experience in detection engineering, 6+ years experience in security operations, 6+ years experience in incident response, 6+ years experience in threat hunting, Built and operated production detections, Fluent in Sigma, Fluent in KQL, Fluent in SPL, Fluent in YARA-L, Fluent in EQL, Fluent in Panther, Offensive security mindset, Cloud security experience in AWS, Cloud security experience in GCP, Cloud security experience in Azure, Hands-on with SIEM, Hands-on with EDR, Hands-on with SOAR platforms", "qualificationsPreferred" : "Experience applying LLMs to security workflows, Experience applying agent-style tooling to security workflows, Experience securing AI-enabled systems, Experience securing endpoint tooling, Kubernetes or container detection experience, Background in threat intelligence, Background in malware analysis, Background in digital forensics, Contributions to detection engineering community", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT THE ROLE Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build. We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion. You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next. We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters WHAT YOU'LL ACHIEVE - Design and maintain high-signal detections across cloud, identity, endpoints, and SaaS environments. - Build and improve the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety. - Develop tooling and automation that accelerate triage, enrichment, investigation, and detection authoring, including LLM-based workflows where useful. - Translate threat intelligence and adversary TTPs into durable detections, telemetry requirements, and response improvements. - Participate in investigations, incident response, and postmortems that drive long-term security improvements. - Define and track key metrics such as coverage, MTTD, and alert quality to guide investment decisions. - Participate in a shared on-call rotation for incident response. SKILLS YOU'LL NEED TO BRING - Have 6+ years of experience in detection engineering, security operations, incident response, or threat hunting. - Have built and operated production detections with strong signal quality and sustainable tuning processes. - Are fluent in one or more detection languages such as Sigma, KQL, SPL, YARA-L, EQL, or Panther. - Have an offensive security mindset and have led purple team, blue team, or adversary emulation exercises that improved detections and telemetry. - Have strong cloud security experience in AWS, GCP, or Azure, including identity-focused attack detection. - Are hands-on with SIEM, EDR, and SOAR platforms in large-scale environments. - Communicate clearly through design docs, runbooks, and incident reports, and can drive projects independently. NICE TO HAVE - Experience applying LLMs or agent-style tooling to security workflows. - Experience securing AI-enabled systems or endpoint tooling. - Kubernetes or container detection experience. - Background in threat intelligence, malware analysis, or digital forensics. - Contributions to the detection engineering community through research, tooling, or talks. - Experience at a high-growth startup or AI company Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco or New York City, the estimated base salary range for this role is $230,000 - $260,000 per year. By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550?pvs=74 and NYLL 144 https://notion.notion.site/Ashby-AI-Bias-Audit-2b0efdeead05803bbbfae159ec86c528. #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.", "summaryDescription" : "Security Engineer, Detection and Response at Notion. Skills: Detection engineering, Incident response, Cloud security, Threat intelligence. Design high-signal detections. Maintain high-signal detections", "postedDate" : "2026-06-11T16:54:03.566", "createdAt" : "2026-06-11T16:54:03.566", "lastUpdated" : "2026-06-14T21:02:11.995", "ingestTimestamp" : "2026-06-11T16:54:03.566", "mongoId" : "6a2a8fed74d8ee00a068a6ea", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 175000, "salaryAnnualMax" : 245000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Detection engineering", "Security operations", "Incident response", "Threat hunting", "Cloud security", "Malware analysis", "Digital forensics", "Threat intelligence", "Rule lifecycle management", "Tuning", "Measurement", "Rollout safety", "Triage", "Enrichment", "Investigation", "Detection authoring", "Adversary TTPs", "Telemetry requirements", "Response improvements", "Postmortems", "Security improvements", "Investment decisions", "On-call rotation", "Drive projects independently", "Cloud-native environment", "AI-enabled systems", "Container detection", "SIEM", "EDR", "SOAR", "Sigma", "KQL", "SPL", "YARA-L", "EQL", "Panther" ], "skillCount" : 36, "jobCategory" : "other", "jobSubcategory" : "security", "dataQualityScore" : 0.8888889, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2a459274d8ee00a05d298f", "title" : "Senior Security Engineer, Detection and Response", "company" : "Crusoe", "industry" : "IT, Compliance, and Security", "salary" : { "min" : 85000.0, "max" : 125000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Security Engineer in Dublin, Ireland, adjusted for the technology industry and company size." }, "location" : "Dublin - IE", "locations" : [ "Dublin - IE" ], "timestamp" : "2026-06-14T07:03:49.445", "fingerprint" : "0dec510b7199bd323ca28a77a913bcc59631e3c97761bc604cbeb9752353e715", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/crusoe/fba363d0-4f6f-40a8-8ea4-ceaea637b42a/application", "externalId" : "fba363d0-4f6f-40a8-8ea4-ceaea637b42a", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Dublin", "country" : "Ireland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "53.3493795,-6.2605593" } ], "locationText" : "Dublin, Ireland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "GCP, Python, Terraform, Docker, Kubernetes, Ansible, AI", "professionalSkills" : [ "Security operations strategy", "Security compliance", "Audit programs", "Certification programs" ], "hardSkillsList" : [ "Detection engineering", "Incident response", "Forensic investigation", "Automation scripting", "SOAR capabilities", "Threat intelligence integration" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Detection engineering", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" }, { "name" : "Automation scripting", "level" : "intermediate" }, { "name" : "SOAR capabilities", "level" : "intermediate" }, { "name" : "Threat intelligence integration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Detection engineering, Incident response, Automation", "majorSkillsList" : [ "Detection engineering", "Incident response", "Automation" ], "coreResponsibilities" : "Develop security operations strategy, Evaluate security technologies, Implement security methodologies, Partner with stakeholders, Adapt in security landscape, Design detection mechanisms, Implement detection mechanisms, Fine-tune detection mechanisms, Tune alerting rules, Perform forensics, Lead response efforts, Triage security alerts, Take mitigation steps, Engage internal stakeholders, Drive detection advancement, Drive automation initiatives, Manage security event monitoring, Manage security event management, Manage security response workflows, Improve security operations, Develop measurement capabilities, Track performance, Communicate performance, Author runbooks, Write automation scripts, Build SOAR capabilities, Reduce manual intervention, Improve response times, Create automated playbooks, Maintain automated playbooks, Manage automated playbooks, Develop standard operating procedures, Enforce service quality, Enforce service consistency, Support security compliance, Support audit programs, Support certification programs", "teamCollaboration" : "Partner with stakeholders; Cross-functional teams; Engineering collaboration; Product collaboration; SRE collaboration; IT collaboration; Legal collaboration", "domainKnowledge" : "Cyber threat landscape; On-premise computing; Cloud computing; Network security; Detection as Code; Incident handling; Forensic investigation; AI response workflows; Threat intelligence integration; Security observability; Unix/Linux environments; Windows endpoints; Mac endpoints", "domainList" : [ "cyber-threat-landscape", "on-premise-computing", "cloud-computing", "network-security", "detection-as-code", "incident-handling", "forensic-investigation", "ai-response-workflows", "threat-intelligence-integration", "security-observability", "unix-linux-environments", "windows-endpoints", "mac-endpoints" ], "domainSpecificKnowledge" : [ "Cyber threat landscape", "On-premise computing", "Cloud computing", "Network security", "Detection as Code", "Incident handling", "Forensic investigation", "AI response workflows", "Threat intelligence integration", "Security observability", "Unix/Linux environments", "Windows endpoints", "Mac endpoints" ], "toolProficiency" : [ "SOAR" ], "communicationSkills" : "Engage with partners; Engage with stakeholders", "documentationSkills" : "Author runbooks; Develop procedures", "problemSolvingSkills" : "Problem-solving", "specialRequirements" : "Pass background check", "qualificationsBasic" : "6+ years in cybersecurity, Detection, response and automation focus, Protection of on-premise computing environments, Experience with network security at scale, Experience with Detection as Code workflows, Incident handling expertise, Forensic investigation expertise, Python scripting expertise, Automation expertise, Unix/Linux environments experience, Respond to incidents on Windows, Respond to incidents on Mac endpoints", "qualificationsPreferred" : "Proficiency with GCP, AI integration into response workflows, Threat intel integration into automated response, Mentoring peers in security engineering, Familiarity with Terraform, Familiarity with Docker, Familiarity with Kubernetes, Familiarity with Ansible, Experience building open source security observability solutions", "remoteFriendly" : false, "rawDescription" : "Crusoe is on a mission to accelerate the abundance of energy and intelligence. As the only vertically integrated AI infrastructure company built from the ground up, we own and operate each layer of the stack — from electrons to tokens — to power the world's most ambitious AI workloads. When you join Crusoe, you join a team that is building the future, faster. We're in the midst of the greatest industrial revolution of our time. The demand for AI compute is boundless, and power is a bottleneck. We're solving that — with an energy-first approach that makes AI infrastructure better for the world and faster for the people innovating with AI. We're looking for problem-solving, opportunity-finding teammates with a sense of urgency, who believe in the scale of our ambition and thrive on a path not fully paved — people who want to grow their careers alongside a team of experts across energy, manufacturing, data center construction, and cloud services. If you want to do the most meaningful work of your career, help our customers and partners advance their AI strategies, and be part of a high-performing team that believes in each other, come build with us at Crusoe. About This Role: Crusoe Security & Compliance is hiring a Senior Detection Engineer to play a critical role in safeguarding Crusoe, our customers, and ensuring our security posture remains robust against emerging threats. This role involves influencing the detection strategy, creation, tuning, validation, and correlation to maintain effective detections against an ever-changing threat landscape. The role is hands-on, encompassing the development of detection technologies and incident response. What You'll Be Working On: - Leadership & Strategy: - Develop and execute a comprehensive security operations strategy that aligns with organizational goals, ensuring robust protection against current and future cyber threats. - Evaluate and implement emerging security technologies and methodologies to continuously enhance our security posture and operational efficiency. - Partner with stakeholders and cross-functional teams (Engineering, Product, SRE, IT, Legal) to adapt in a dynamic security landscape. - Detection and Incident Response: - Design, implement, and fine-tune advanced detection mechanisms to proactively identify potential security threats and vulnerabilities. - Continuously tune alerting rules to reduce false positives and enhance our signal-to-noise ratio. - Perform forensics and lead response efforts during security incidents, including triaging security alerts, taking relevant mitigation steps, and engaging with internal stakeholders to ensure swift resolution. - Operational Security: - Drive the advancement and growth of detection and automation initiatives. - Manage security event monitoring, management, response workflows, and tasks. - Improve security operations by developing measurement capabilities and metrics to track and communicate performance, coverage, and risk. - Automation and Improvement: - Author comprehensive runbooks, write automation scripts, and build SOAR (Security Orchestration, Automation, and Response) capabilities to reduce manual intervention and improve response times. - Create, maintain, and manage a library of automated playbooks to address new threats and tactics employed by attackers. - Documentation and Compliance: - Develop standard operating procedures and other appropriate documentation to enforce quality and consistency of services being delivered. - Support ongoing security compliance, audit, and certification programs (e.g., HIPAA, SOC 2). What You'll Bring to the Team: - You have 6+ years in cybersecurity, with a focus on detection, response and automation. - Technical proficiency with protection of on-premise computing environments and proficiency with one or more major cloud computing environments (GCP a plus). - Experience with network security at scale. - Experience working with and implementing Detection as Code workflows. - Strong expertise in incident handling and forensic investigation. - Strong knowledge of the modern cyber threat landscape. - Automation-first mindset, including experience integrating AI into response workflows. - Experience integrating threat intel into automated response workflows - Demonstrated expertise in mentoring and training peers in security engineering. - Expertise in python scripting and automation. - Exceptional collaboration and communication skills, with the ability to engage with partners and stakeholders from various perspectives and technical understanding. - Familiarity with modern infrastructure tools, such as Terraform, Docker, Kubernetes, and Ansible. - Experience building and scaling open source security observability solutions. - Experience with Unix/Linux environments. - Experience responding to incidents on Windows and Mac endpoints. - Self-motivated, with good communication and writing skills. - Must be able to pass a background check - Embody the Company values https://www.crusoeenergy.com/about BENEFITS: Crusoe also offers a competitive benefits package designed to support financial security, health, and overall well-being, including pension contributions, private health and dental insurance, income protection, life assurance and more. COMPENSATION: Compensation will be paid as salary or hourly. Compensation to be determined by the applicant’s education, experience, knowledge, skills, and abilities, as well as internal equity and alignment with market data. Crusoe is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation.", "summaryDescription" : "Senior Security Engineer, Detection and Response at Crusoe. Skills: Detection engineering, Incident response, Automation. Develop security operations strategy. Evaluate security technologies", "postedDate" : "2026-06-11T22:43:05.381", "createdAt" : "2026-06-11T22:43:05.381", "lastUpdated" : "2026-06-14T07:03:49.445", "ingestTimestamp" : "2026-06-11T22:43:05.381", "mongoId" : "6a2a459274d8ee00a05d298f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Detection engineering", "Incident response", "Forensic investigation", "Automation scripting", "SOAR capabilities", "Threat intelligence integration", "Leadership", "Mentoring", "Automation", "Security operations strategy", "Security compliance", "Audit programs", "Certification programs", "Cyber threat landscape", "On-premise computing", "Cloud computing", "Network security", "Detection as Code", "Incident handling", "AI response workflows", "Security observability", "Unix/Linux environments", "Windows endpoints", "Mac endpoints", "SOAR" ], "skillCount" : 25, "jobCategory" : "other", "jobSubcategory" : "security-engineering", "dataQualityScore" : 1.0, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a307f42f292fd229c0571b0", "title" : "Security Engineer III, Enterprise SaaS Security", "industry" : "SaaS", "salary" : { "min" : 125000.0, "max" : 185000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Engineer III in Singapore, adjusted for the SaaS industry and enterprise focus." }, "location" : "[Singapore, [Singapore], null, null, null, SG]", "locations" : [ "[Singapore, [Singapore], null, null, null, SG]" ], "timestamp" : "2026-06-16T10:30:44.919", "fingerprint" : "3aaaf4cb7dea5c39bd783aca9509037cae62bd7b24b95cfc5ab572ee531d51cf", "source" : "google", "language" : "en", "externalId" : "119561766337159878", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "summaryDescription" : "Security Engineer III, Enterprise SaaS Security", "postedDate" : "2026-06-16T01:51:13.112", "createdAt" : "2026-06-16T01:51:13.112", "lastUpdated" : "2026-06-16T10:30:44.919", "ingestTimestamp" : "2026-06-16T01:51:13.112", "mongoId" : "6a307f42f292fd229c0571b0", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.5555556, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307f62f292fd229c058aad", "title" : "Staff Security Engineer, Enterprise Security AI", "industry" : "Cybersecurity", "salary" : { "min" : 200000.0, "max" : 300000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Staff Security Engineer, Enterprise Security AI in Singapore, adjusted for lead seniority and the technology industry." }, "location" : "[Singapore, [Singapore], null, null, null, SG]", "locations" : [ "[Singapore, [Singapore], null, null, null, SG]" ], "timestamp" : "2026-06-16T13:04:08.890", "fingerprint" : "3a523c194edcb63339033810ab6168d9773dd78cc6879d3fc2bb74316493c9e6", "source" : "google", "language" : "en", "externalId" : "95862231287112390", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Staff", "remoteFriendly" : false, "summaryDescription" : "Staff Security Engineer, Enterprise Security AI", "postedDate" : "2026-06-16T01:51:06.105", "createdAt" : "2026-06-16T01:51:06.105", "lastUpdated" : "2026-06-16T13:04:08.890", "ingestTimestamp" : "2026-06-16T01:51:06.105", "mongoId" : "6a307f62f292fd229c058aad", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.5555556, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2a71bf74d8ee00a064a4f4", "title" : "Senior Security Engineer, Detection and Response", "company" : "Crusoe", "industry" : "IT, Compliance, and Security", "salary" : { "min" : 85000.0, "max" : 125000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Security Engineer in Dublin, Ireland, adjusted for the technology industry and company size." }, "location" : "Dublin - IE", "locations" : [ "Dublin - IE" ], "timestamp" : "2026-06-14T21:20:29.393", "fingerprint" : "500e0321258e8085d8d3fed6f02db2836575807b7149d6d0d88f52e2c7e9479b", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/Crusoe/fba363d0-4f6f-40a8-8ea4-ceaea637b42a/application", "externalId" : "fba363d0-4f6f-40a8-8ea4-ceaea637b42a", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Dublin", "country" : "Ireland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "53.3493795,-6.2605593" } ], "locationText" : "Dublin, Ireland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "GCP, Python, Terraform, Docker, Kubernetes, Ansible", "professionalSkills" : [ "Security operations strategy", "Threat landscape analysis", "Incident response management", "Security compliance", "Audit programs", "Certification programs" ], "hardSkillsList" : [ "Detection engineering", "Incident handling", "Forensic investigation", "Automation scripting", "SOAR capabilities", "Threat intelligence integration" ], "softSkillsList" : [ "Leadership", "Mentoring", "Problem-solving", "Opportunity-finding" ], "hardSkills" : [ { "name" : "Detection engineering", "level" : "intermediate" }, { "name" : "Incident handling", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" }, { "name" : "Automation scripting", "level" : "intermediate" }, { "name" : "SOAR capabilities", "level" : "intermediate" }, { "name" : "Threat intelligence integration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" }, { "name" : "Problem-solving" }, { "name" : "Opportunity-finding" } ], "majorSkills" : "Detection engineering, Incident response, Automation", "majorSkillsList" : [ "Detection engineering", "Incident response", "Automation" ], "coreResponsibilities" : "Develop security operations strategy, Execute security operations strategy, Evaluate security technologies, Implement security technologies, Enhance security posture, Enhance operational efficiency, Partner with stakeholders, Adapt in dynamic security landscape, Design detection mechanisms, Implement detection mechanisms, Fine-tune detection mechanisms, Identify security threats, Identify vulnerabilities, Tune alerting rules, Reduce false positives, Enhance signal-to-noise ratio, Perform forensics, Lead response efforts, Triage security alerts, Take mitigation steps, Engage with internal stakeholders, Drive advancement of detection initiatives, Drive advancement of automation initiatives, Manage security event monitoring, Manage security event management, Manage response workflows, Manage response tasks, Improve security operations, Develop measurement capabilities, Develop metrics, Track performance, Communicate performance, Track coverage, Communicate coverage, Track risk, Communicate risk, Author runbooks, Write automation scripts, Build SOAR capabilities, Reduce manual intervention, Improve response times, Create automated playbooks, Maintain automated playbooks, Manage automated playbooks, Address new threats, Address attacker tactics, Develop standard operating procedures, Enforce quality of services, Enforce consistency of services, Support security compliance, Support audit programs, Support certification programs", "teamCollaboration" : "Partner with Engineering; Partner with Product; Partner with SRE; Partner with IT; Partner with Legal; Engage with partners; Engage with stakeholders", "domainKnowledge" : "Cyber threat landscape; On-premise computing; Cloud computing; Network security; Detection as Code; Incident handling; Forensic investigation; AI response workflows; Threat intelligence integration", "domainList" : [ "cyber-threat-landscape", "on-premise-computing", "cloud-computing", "network-security", "detection-as-code", "incident-handling", "forensic-investigation", "ai-response-workflows", "threat-intelligence-integration" ], "domainSpecificKnowledge" : [ "Cyber threat landscape", "On-premise computing", "Cloud computing", "Network security", "Detection as Code", "Incident handling", "Forensic investigation", "AI response workflows", "Threat intelligence integration" ], "toolProficiency" : [ "SOAR" ], "communicationSkills" : "Technical communication; Stakeholder engagement", "documentationSkills" : "Runbook authoring; Standard operating procedures", "problemSolvingSkills" : "Problem-solving", "specialRequirements" : "Pass background check", "qualificationsBasic" : "6+ years in cybersecurity, Detection, response and automation focus, Protection of on-premise computing environments, Experience with network security at scale, Experience with Detection as Code workflows, Incident handling expertise, Forensic investigation expertise, Knowledge of modern cyber threat landscape, Python scripting expertise, Automation expertise, Experience integrating threat intel, Experience responding to incidents on Windows, Experience responding to incidents on Mac endpoints, Experience with Unix/Linux environments", "qualificationsPreferred" : "Proficiency with one or more major cloud environments, GCP a plus, AI integration into response workflows experience, Mentoring peers in security engineering, Training peers in security engineering, Familiarity with Terraform, Familiarity with Docker, Familiarity with Kubernetes, Familiarity with Ansible, Experience building open source security observability solutions, Experience scaling open source security observability solutions", "remoteFriendly" : false, "rawDescription" : "Crusoe is on a mission to accelerate the abundance of energy and intelligence. As the only vertically integrated AI infrastructure company built from the ground up, we own and operate each layer of the stack — from electrons to tokens — to power the world's most ambitious AI workloads. When you join Crusoe, you join a team that is building the future, faster. We're in the midst of the greatest industrial revolution of our time. The demand for AI compute is boundless, and power is a bottleneck. We're solving that — with an energy-first approach that makes AI infrastructure better for the world and faster for the people innovating with AI. We're looking for problem-solving, opportunity-finding teammates with a sense of urgency, who believe in the scale of our ambition and thrive on a path not fully paved — people who want to grow their careers alongside a team of experts across energy, manufacturing, data center construction, and cloud services. If you want to do the most meaningful work of your career, help our customers and partners advance their AI strategies, and be part of a high-performing team that believes in each other, come build with us at Crusoe. About This Role: Crusoe Security & Compliance is hiring a Senior Detection Engineer to play a critical role in safeguarding Crusoe, our customers, and ensuring our security posture remains robust against emerging threats. This role involves influencing the detection strategy, creation, tuning, validation, and correlation to maintain effective detections against an ever-changing threat landscape. The role is hands-on, encompassing the development of detection technologies and incident response. What You'll Be Working On: - Leadership & Strategy: - Develop and execute a comprehensive security operations strategy that aligns with organizational goals, ensuring robust protection against current and future cyber threats. - Evaluate and implement emerging security technologies and methodologies to continuously enhance our security posture and operational efficiency. - Partner with stakeholders and cross-functional teams (Engineering, Product, SRE, IT, Legal) to adapt in a dynamic security landscape. - Detection and Incident Response: - Design, implement, and fine-tune advanced detection mechanisms to proactively identify potential security threats and vulnerabilities. - Continuously tune alerting rules to reduce false positives and enhance our signal-to-noise ratio. - Perform forensics and lead response efforts during security incidents, including triaging security alerts, taking relevant mitigation steps, and engaging with internal stakeholders to ensure swift resolution. - Operational Security: - Drive the advancement and growth of detection and automation initiatives. - Manage security event monitoring, management, response workflows, and tasks. - Improve security operations by developing measurement capabilities and metrics to track and communicate performance, coverage, and risk. - Automation and Improvement: - Author comprehensive runbooks, write automation scripts, and build SOAR (Security Orchestration, Automation, and Response) capabilities to reduce manual intervention and improve response times. - Create, maintain, and manage a library of automated playbooks to address new threats and tactics employed by attackers. - Documentation and Compliance: - Develop standard operating procedures and other appropriate documentation to enforce quality and consistency of services being delivered. - Support ongoing security compliance, audit, and certification programs (e.g., HIPAA, SOC 2). What You'll Bring to the Team: - You have 6+ years in cybersecurity, with a focus on detection, response and automation. - Technical proficiency with protection of on-premise computing environments and proficiency with one or more major cloud computing environments (GCP a plus). - Experience with network security at scale. - Experience working with and implementing Detection as Code workflows. - Strong expertise in incident handling and forensic investigation. - Strong knowledge of the modern cyber threat landscape. - Automation-first mindset, including experience integrating AI into response workflows. - Experience integrating threat intel into automated response workflows - Demonstrated expertise in mentoring and training peers in security engineering. - Expertise in python scripting and automation. - Exceptional collaboration and communication skills, with the ability to engage with partners and stakeholders from various perspectives and technical understanding. - Familiarity with modern infrastructure tools, such as Terraform, Docker, Kubernetes, and Ansible. - Experience building and scaling open source security observability solutions. - Experience with Unix/Linux environments. - Experience responding to incidents on Windows and Mac endpoints. - Self-motivated, with good communication and writing skills. - Must be able to pass a background check - Embody the Company values https://www.crusoeenergy.com/about BENEFITS: Crusoe also offers a competitive benefits package designed to support financial security, health, and overall well-being, including pension contributions, private health and dental insurance, income protection, life assurance and more. COMPENSATION: Compensation will be paid as salary or hourly. Compensation to be determined by the applicant’s education, experience, knowledge, skills, and abilities, as well as internal equity and alignment with market data. Crusoe is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation.", "summaryDescription" : "Senior Security Engineer, Detection and Response at Crusoe. Skills: Detection engineering, Incident response, Automation. Develop security operations strategy. Execute security operations strategy", "postedDate" : "2026-06-11T18:34:05.348", "createdAt" : "2026-06-11T18:34:05.348", "lastUpdated" : "2026-06-14T21:20:29.393", "ingestTimestamp" : "2026-06-11T18:34:05.348", "mongoId" : "6a2a71bf74d8ee00a064a4f4", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Detection engineering", "Incident handling", "Forensic investigation", "Automation scripting", "SOAR capabilities", "Threat intelligence integration", "Leadership", "Mentoring", "Problem-solving", "Opportunity-finding", "Incident response", "Automation", "Security operations strategy", "Threat landscape analysis", "Incident response management", "Security compliance", "Audit programs", "Certification programs", "Cyber threat landscape", "On-premise computing", "Cloud computing", "Network security", "Detection as Code", "AI response workflows", "SOAR" ], "skillCount" : 25, "jobCategory" : "other", "jobSubcategory" : "security-engineering", "dataQualityScore" : 1.0, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true }, { "id" : "694ae6ce70f0b99d589b2804", "title" : "Security Operations and Incident Response Manager", "company" : "Hyundai Capital America", "industry" : "FinTech", "salary" : { "min" : 155000.0, "max" : 210000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager in Security Operations and Incident Response in Irvine, United States, adjusted for the FinTech industry and company size." }, "location" : "United States-California-Irvine", "locations" : [ "United States-California-Irvine", "
Headquarters 1 (HCA_HQ1)
3161 Michelson Dr. Ste 1900
Irvine, 92612

" ], "timestamp" : "2026-06-15T08:40:47.148", "fingerprint" : "d5f865261d9c50964a8d89f96af400da1cdb2f3eecdc20e0391203f2e5cc71a5", "source" : "taleo", "language" : "en", "applyUrl" : "https://hyundaicapital.taleo.net/careersection/ex/jobdetail.ftl?job=105024", "externalId" : "105024", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "experienceLevel" : "Manager", "technicalSkills" : "SIEM, EDR, Threat intelligence, Ransomware, Phishing, Account takeover, Forensic analysis, Automation, Cloud security, AWS, Azure, Google Cloud, Oracle Cloud, Python, PowerShell", "professionalSkills" : [ "Incident response", "Threat hunting", "Tool administration", "Rule tuning", "Vulnerability management", "IAM", "DLP", "Application security", "Risk assessment", "Operational performance" ], "hardSkillsList" : [ "Security monitoring", "Threat detection", "Alert triage", "Incident handling", "Forensic investigation", "Playbook development", "Post-incident review", "Tool configuration", "Detection rule tuning", "Automation scripting", "Cloud monitoring", "Vulnerability scanning" ], "softSkillsList" : [ "Analytical mindset", "Leadership" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Alert triage", "level" : "intermediate" }, { "name" : "Incident handling", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" }, { "name" : "Playbook development", "level" : "intermediate" }, { "name" : "Post-incident review", "level" : "intermediate" }, { "name" : "Tool configuration", "level" : "intermediate" }, { "name" : "Detection rule tuning", "level" : "intermediate" }, { "name" : "Automation scripting", "level" : "intermediate" }, { "name" : "Cloud monitoring", "level" : "intermediate" }, { "name" : "Vulnerability scanning", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Analytical mindset" }, { "name" : "Leadership" } ], "majorSkills" : "Incident response, Security operations, Threat detection, SIEM management", "majorSkillsList" : [ "Incident response", "Security operations", "Threat detection", "SIEM management" ], "coreResponsibilities" : "Monitor security events, Analyze security events, Detect threats, Respond to threats, Tune SIEM rules, Optimize SIEM ingestion, Leverage threat intelligence, Analyze financial threats, Develop detection strategies, Triage security alerts, Correlate data, Escalate critical incidents, Lead incident response, Support incident response, Perform forensic investigations, Document findings, Create incident response playbooks, Maintain incident response playbooks, Conduct post-incident reviews, Recommend improvements, Update security controls, Coordinate with MSSP partners, Validate escalations, Provide tuning feedback, Manage security tools, Configure security tools, Ensure tool performance, Ensure tool coverage, Develop detection rules, Tune detection rules, Develop alerts, Tune alerts, Implement automation responses, Streamline tasks, Monitor cloud environments, Secure cloud environments, Protect financial data, Protect workloads, Integrate security tools, Partner with vulnerability management, Partner with IAM teams, Collaborate with IT Infrastructure, Collaborate with IT Application Teams, Collaborate with DevOps, Collaborate with IAM, Collaborate with DLP, Collaborate with Application Security, Integrate security operations, Conduct vulnerability scans", "teamCollaboration" : "Cross-functional collaboration; Collaborate with IT Infrastructure; Collaborate with IT Application Teams; Collaborate with DevOps; Collaborate with IAM; Collaborate with DLP; Collaborate with Application Security; Collaborate with threat intelligence; Collaborate with vulnerability management; Collaborate with engineering teams; Collaborate with cybersecurity architecture; Collaborate with cybersecurity engineering", "domainKnowledge" : "Financial systems; Cybersecurity; Cloud environments; MITRE framework", "domainList" : [ "financial-systems", "cybersecurity", "cloud-environments", "mitre-framework" ], "domainSpecificKnowledge" : [ "Financial systems", "Cybersecurity", "Cloud environments", "MITRE framework" ], "toolProficiency" : [ "Splunk", "NGSIEM", "EDR", "SIEM", "Firewalls", "Vulnerability scanners" ], "communicationSkills" : "Communicate risk; Communicate operational performance; Documentation skills", "documentationSkills" : "Document findings", "continuousLearning" : "Continuous learning; Staying ahead of threats; Tuition reimbursement", "problemSolvingSkills" : "Analytical mindset; Root cause analysis", "specialRequirements" : "Work at home, Office environment", "outcomesObjectives" : "Reduce false positives; Improve detection fidelity; Enhance detection strategies; Prevent recurrence", "qualificationsBasic" : "5+ years experience, Experience with SIEM platforms, Experience with EDR, Experience with threat intelligence platforms, Experience with incident response lifecycle, Experience with cybersecurity metrics, Experience with KPIs, Experience communicating risk, Experience communicating operational performance, Experience with cloud environments, Experience with automation scripts, Experience with vulnerability scanners, Experience with firewalls", "qualificationsPreferred" : "Experience with Splunk, Experience with NGSIEM, Experience with AWS, Experience with Azure, Experience with Google Cloud, Experience with Oracle Cloud, Experience with Python, Experience with PowerShell", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Who We Are Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 2 million consumers and businesses. Embodying our commitment to grow, innovate, and diversify, we strive to reimagine the customer and dealer experience and launch innovative new products that broaden our market reach. We believe that success comes from within and are proud to support our team members through skill development and career advancement. Hyundai Capital America is an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce. We are a values-driven company dedicated to supporting both internal and external communities through volunteering, philanthropy, and the empowerment of our Employee Resource Groups. Together, we strive to be the leader in financing freedom of movement. We Take Care of Our People Along with competitive pay, as an employee of HCA, you are eligible for the following benefits: ·          Medical, Dental and Vision plans that include no-cost and low-cost plan options ·          Immediate 401(k) matching and vesting ·          Vehicle purchase and lease discounts plus monthly vehicle allowances ·          Paid Volunteer Time Off with company donation to a charity of your choice ·          Tuition reimbursement What to Expect The Security Operations & Incident Response (SOIR) Manager is responsible for the enterprise-wide incident response function within the Security Operations Center (SOC), ensuring rapid detection, containment, and remediation of cybersecurity threats. This role is pivotal in maintaining the integrity, confidentiality, and availability of Hyundai Capital America’s digital assets and infrastructure. This role will oversee 3 rd party vendor of incident responders and collaborate with threat intelligence, vulnerability management, and engineering teams to drive continuous improvement in detection and response capabilities. In addition, this role will create and maintain incident response playbooks and establish processes for proactive threat hunting, as well as be responsible for administration and day-to-day support of HCA EDR, SIEM, and HCA Monitoring, Threat detection, and remediation tools. What You Will Do 1.      Security Monitoring & Threat Detection : ·          Monitor and analyze security events in real-time using SIEM platforms (e.g., Splunk, NGSIEM etc.) to detect and respond to threats targeting financial systems, such as ransomware, phishing, or account takeover. ·          Tune and optimize SIEM correlation rules and ingestion pipelines to reduce false positives and improve detection fidelity. ·          Leverage threat intelligence platforms to analyze emerging financial-specific threats, correlate intelligence with internal data, and develop actionable insights to enhance detection and prevention strategies. 2.      Incident Response & Remediation : ·          Alert Triage: Investigate and triage security alerts, correlating data from endpoints, networks, and cloud environments to identify true positives and escalate critical incidents. ·          Incident Handling: Lead and support incident response activities, including containment, eradication, and recovery, for security incidents spanning the MITRE framework. ·          Forensic Analysis: Perform forensic investigations to determine the root cause of incidents, and document findings for audits and legal purposes. ·          Playbook Development: Create and maintain incident response playbooks, ensuring rapid and consistent response processes. ·          Post-Incident Review: Conduct post-Incident reviews to identify lessons learned, recommend improvements, and update security controls to prevent recurrence. ·          Coordinate with MSSP partners in a co-managed SIEM/SOC model to validate escalations and provide tuning feedback. 3.      Tool Administration and Management of SOC Solutions : ·          Tool Administration: Manage and configure security tools, including SIEM, EDR, firewalls, and vulnerability scanners, to ensure optimal performance and coverage. ·          Rule Tuning: Develop and tune detection rules, signatures, and alerts to reduce false positives and improve detection accuracy in financial environments. ·          Automation: Implement automation responses (e.g. SOUR) scripts (e.g., Python, PowerShell) to streamline tasks like alert enrichment, incident triage, or vulnerability scans. ·          Cloud Security Monitoring: Monitor and secure cloud environments (e.g., AWS, Azure, Google Cloud, Oracle Cloud) using native security tools and third-party integrations, protecting financial data and workloads. ·          Collaborate with cybersecurity architecture & engineering team to ensure proper integration of security tools across cloud, network, and endpoint environments. ·          Partner with vulnerability management and IAM teams to ensure holistic security coverage. 4.      Collaboration, Automation, and Innovation Activities : ·          Cross-Functional Collaboration: Partner with IT Infrastructure and IT Application Teams, DevOps, IAM, DLP, and Application Security teams to integrate security operations with broader cybersecurity initiatives, such as cloud migrations or fintech development. ·          Vulnerability Management: Collaborate with Vulnerability Management team to conduct regular vulnerability scans across networks, systems, and applications to identify weaknesses, such as unpatched software or misconfigurations and support the patching management and/or adequate remediation plan. 5.      Documentation, Reporting, and Compliance Activities : ·          Incident Documentation: Document security incidents, investigations, and remediation actions in detail to support audits, compliance, and lessons learned. ·          Vulnerability and Penetration Test Reports: Produce comprehensive reports on vulnerability scans and penetration tests, including risk assessments, remediation plans, and validation results. ·          Metrics and Reporting: Develop and report on SOC metrics (e.g., Mean Time to Detect, Mean Time to Respond, vulnerability remediation rates, penetration test coverage) to demonstrate operational effectiveness. ·          Runbooks and Procedures: Maintain and update SOC runbooks, standard operating procedures (SOPs), and knowledge bases for incident response, vulnerability management, and penetration testing. What You Will Bring ·         Minimum 5-7 years progressive experience in cybersecurity with proven knowledge in Security Operations Center practices and incident response processes; including 3+ years of experience in financial services, with a strong understanding of financial threats (e.g., fraud, data breaches) and regulations (e.g., PCI DSS, Korean SOX, GDPR) ·       Hands-on experience with SIEM platforms, EDR solutions, and other Monitoring and Vulnerability management tools (e.g., Splunk, Crowdstrike, Rapid 7) ·          Strong understanding of cyber threat landscapes, attack vectors, MITRE ATT&CK framework, and adversary tactics, techniques, and procedures ·          Bachelor’s degree in Computer Science, Information Security, or related field ·          Master’s degree preferred ·          Certification in one of the following: CISSP, CCSP, CISM, TOGAF or equivalent ·          Demonstrated ability to manage major incident investigations, including root cause analysis, executive reporting, and coordination with legal, compliance, and law enforcement when necessary ·          Familiarity with regulatory and compliance frameworks such as HIPAA, PCI-DSS, NIST, ISO 27001, and GDPR. ·          Proven ability to develop and maintain incident response playbooks, escalation procedures, and SOC standard operating procedures (SOPs) ·          Experience with cybersecurity metrics and KPIs, and the ability to communicate risk and operational performance to executive leadership ·          Demonstrated expertise in incident response lifecycle, including detection, triage, containment, eradication, recovery, and post-incident review ·          Analytical mindset with attention to detail ·          Excellent communication and documentation skills ·          Ability to work under pressure and manage multiple incidents simultaneously ·          Passion for continuous learning and staying ahead of emerging threats Work Environment Employees in this class are subject to extended periods of sitting, standing, and walking, vision to monitor and moderate noise levels. Work is performed in an at home and office environment. The posted salary range for this job takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; geographic location, and other business and organizational needs. Successful candidates may be hired anywhere in the salary range based on these factors. It is uncommon to hire candidates at or near the top of the range. California Privacy Notice This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here . This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used, and whether that information is sold or shared, so that you can exercise meaningful control over our use of your personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (“CCPA”). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at Privacy2@hcs.com . United States-California-Irvine", "summaryDescription" : "Security Operations and Incident Response Manager at Hyundai Capital America. Skills: Incident response, Security operations, Threat detection, SIEM management. Monitor security events. Analyze security events", "createdAt" : "2026-06-14T08:13:57.992", "lastUpdated" : "2026-06-15T08:40:47.148", "ingestTimestamp" : "2026-06-14T08:13:57.992", "mongoId" : "694ae6ce70f0b99d589b2804", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 155000, "salaryAnnualMax" : 210000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Security monitoring", "Threat detection", "Alert triage", "Incident handling", "Forensic investigation", "Playbook development", "Post-incident review", "Tool configuration", "Detection rule tuning", "Automation scripting", "Cloud monitoring", "Vulnerability scanning", "Analytical mindset", "Leadership", "Incident response", "Security operations", "SIEM management", "Threat hunting", "Tool administration", "Rule tuning", "Vulnerability management", "IAM", "DLP", "Application security", "Risk assessment", "Operational performance", "Financial systems", "Cybersecurity", "Cloud environments", "MITRE framework", "Splunk", "NGSIEM", "EDR", "SIEM", "Firewalls", "Vulnerability scanners" ], "skillCount" : 36, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.7777778, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3050cef292fd229cef58cb", "title" : "Sr. Cloud Security Architect", "company" : "AnaVation", "industry" : "Federal Law Enforcement", "salary" : { "min" : 175000.0, "max" : 235000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cloud Security Architect in Washington, United States, adjusted for seniority and industry." }, "location" : "Washington, DC", "locations" : [ "Washington, DC" ], "timestamp" : "2026-06-16T11:12:56.646", "fingerprint" : "e2e62050e85c1cce7ca8e864a07bbfe67a9f550511f00c5efc33719388bde47d", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/anavationllc/ea9333a3-4698-4514-83f2-cd4d8682c498/apply", "externalId" : "ea9333a3-4698-4514-83f2-cd4d8682c498", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Washington", "state" : "District of Columbia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8950982,-77.0363849" } ], "locationText" : "Washington, District of Columbia, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "rawDescription" : "## Description Be Challenged and Make a Difference In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture. Description of Task to be Performed: AnaVation is seeking a Sr. Security Architect with a Cloud focus for our mission critical customer in Washington, DC. You will be a valuable member of an exceptional team providing security expertise on high priority projects. Daily duties include, but are not limited to: Develop, design, and implement cloud security strategies, policies, and best practices. Identify security risks, areas of weakness, and specify/plan for the security tools needed to respond to security threats and breaches. Establish strategic security architecture direction for cloud service adoption that are aligned with overall business strategy. Evaluate the existing enterprise architecture with the progress of cloud integration. Create and build solutions, processes and best practices for identity and access management, encryption keying (PKI, SSH), auditing and logging, continuous monitoring, network connectivity and other focused areas of cloud security architecture. Perform Analysis of Alternatives (AoA) researching product and strategy options and presenting recommendations and analysis to government leadership. Develop solutions to a variety of moderate to complex security problems. Promote a collective awareness of present and emerging security threats and risks and openly communicate that with client leadership. - Identify and assess attack vectors and create solutions to mitigate those threats and risks. Identify and develop new cloud architecture standards for secure cloud adoption. Work with key client stakeholders to gain approval. Develop architecture roadmaps for delivering new capabilities for multiple managed dependencies. Provide guidance on critical initiatives, encompassing areas such as Zero Trust, control automation, authentication enhancements, and log management, among others. Review and/or create documentation, processes, and technical procedures to identify and recommend opportunities for improvement. Work alongside cross-functional teams to design diverse security controls and facilitate their translation into engineering implementation. Maintain awareness of new technologies and trends and bring solutions to the client. Able to work independently with minimal guidance. Other related duties assigned by the program manager and government leadership. This position is on-site in Washington, DC. ## Required Qualifications 8+ years of experience with designing, testing, and deploying complex Cybersecurity solutions in an enterprise environment. 8+ years of experience in networking and endpoint security architecture. Security Architect experience with a focus in IT cloud solutions. Possess advanced technical proficiency. FedRAMP and Cloud experience (e.g., Azure, AWS, Oracle (OCI)) Ability to evaluate agency environments for security improvements. Knowledgeable on various security-related NIST publications (e.g., SP 800-53r5, SP 800-18r1, etc.) Knowledge of zero-trust security architecture. Clearance: Active Secret Clearance with ability to obtain and maintain a Top Secret (TS) clearance is required. Certifications: CISSP required. ## Preferred Qualifications Knowledge of Splunk. FISMA/FedRAMP responsibilities of cloud systems. Implement security controls (NIST 800-53) for cloud-based systems (SaaS, PaaS, IaaS), perform self-assessments, create and gather supporting artifacts, and prepare Authority to Operate (ATO) packages for client approval. Bachelor’s degree preferred. Desirable certifications: CISSP-ISSAP, Azure Solutions Architect, AWS Certified Solutions Architect, SANS, other cloud certifications. ## Additional Information Benefits         Generous cost sharing for medical insurance for the employee and dependents         100% company paid dental insurance for employees and dependents         100% company paid long-term and short-term disability insurance         100% company paid vision insurance for employees and dependents         401k plan with generous match and 100% immediate vesting         Competitive Pay         Generous paid leave and holiday package         Tuition and training reimbursement         Life and AD&D Insurance About AnaVation AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team. If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you! AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.", "summaryDescription" : "Sr. Cloud Security Architect at AnaVation", "postedDate" : "2026-06-15T18:44:30.135", "createdAt" : "2026-06-15T18:44:30.135", "lastUpdated" : "2026-06-16T11:12:56.646", "ingestTimestamp" : "2026-06-16T03:19:59.328", "mongoId" : "6a3050cef292fd229cef58cb", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 175000, "salaryAnnualMax" : 235000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a30569ff292fd229cf2bd14", "title" : "Client Security Expert/Architect", "company" : "OKX", "industry" : "Cybersecurity", "salary" : { "min" : 600000.0, "max" : 1200000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Client Security Expert/Architect in China Mainland, adjusted for the technology industry and company size." }, "location" : "China Mainland_INTERNAL", "locations" : [ "China Mainland_INTERNAL" ], "timestamp" : "2026-06-16T07:37:09.887", "fingerprint" : "4784bb4c25350667ac327c944aa8f57f0ce8cdb3fb82b7cd8aa5f977634e9847", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/okx/jobs/7773152003", "externalId" : "7773152003", "industryFunction" : { }, "structuredLocations" : [ { "country" : "China", "continent" : "as", "workMode" : "onsite" } ], "locationText" : "China", "minimumEducation" : "Bachelor's", "technicalSkills" : "Android, IOS, AI Agents, Backend development", "professionalSkills" : [ "Architecture design", "System design", "Data pipeline design", "Security strategy" ], "hardSkillsList" : [ "Reverse engineering", "Vulnerability discovery", "Attack reconstruction", "Log analysis", "Data analysis", "Device fingerprinting", "Environment detection", "Behavioral risk control", "Endpoint data processing" ], "hardSkills" : [ { "name" : "Reverse engineering", "level" : "intermediate" }, { "name" : "Vulnerability discovery", "level" : "intermediate" }, { "name" : "Attack reconstruction", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Device fingerprinting", "level" : "intermediate" }, { "name" : "Environment detection", "level" : "intermediate" }, { "name" : "Behavioral risk control", "level" : "intermediate" }, { "name" : "Endpoint data processing", "level" : "intermediate" } ], "majorSkills" : "Client-side security, AI Agent integration, Backend architecture, Security data pipeline", "majorSkillsList" : [ "Client-side security", "AI Agent integration", "Backend architecture", "Security data pipeline" ], "coreResponsibilities" : "Identify client-side security risks, Propose security solutions, Drive security implementation, Lead offensive exercises, Lead defensive exercises, Drive remediation of risk issues, Analyze attack techniques, Reconstruct attack mechanisms, Produce countermeasure plans, Design defense solutions, Build defense solutions, Own architecture design, Design backend data pipeline, Optimize data pipeline, Design intelligent security strategy, Design automated countermeasure architecture", "domainKnowledge" : "Client security; Android system; iOS system; Cheating techniques; Fraud techniques; Web3; Blockchain; Browser-side security; Distributed system design; High-concurrency system; High-availability system; Endpoint data; AI Agent principles; Risk control system; Security data platform; Threat intelligence system", "domainList" : [ "client-security", "android-system", "ios-system", "cheating-techniques", "fraud-techniques", "web3", "blockchain", "browser-side-security", "distributed-system-design", "high-concurrency-system", "high-availability-system", "endpoint-data", "ai-agent-principles", "risk-control-system", "security-data-platform", "threat-intelligence-system" ], "domainSpecificKnowledge" : [ "Client security", "Android system", "iOS system", "Cheating techniques", "Fraud techniques", "Web3", "Blockchain", "Browser-side security", "Distributed system design", "High-concurrency system", "High-availability system", "Endpoint data", "AI Agent principles", "Risk control system", "Security data platform", "Threat intelligence system" ], "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Improve defensive effectiveness; Improve mitigation efficiency; Improve strategy iteration speed; Improve incident response speed", "qualificationsBasic" : "Bachelor's degree or above, 3+ years of experience in backend development or architecture design, Familiar with low-level Android and iOS system architecture, Familiar with security mechanisms, Familiar with reverse engineering, Familiar with typical cheating/fraud techniques, Proficient in leveraging AI Agents for security workflows, Hands-on experience integrating AI tools, Backend architecture skills, Expertise in high-concurrency, high-availability distributed system design, Familiarity with the client security domain, Ability to understand endpoint-collected data, Familiar with AI Agent technical principles, Familiar with AI Agent application paradigms, Practical experience integrating AI capabilities", "qualificationsPreferred" : "Client security experience in Web3/blockchain scenarios, Familiarity with browser-side security, Risk control system architecture, Security backend experience in Web3/blockchain scenarios, Architecture experience in security data platforms or threat intelligence systems", "workSiteFlexibility" : "Onsite", "rawDescription" : "Client Security Expert Job Description: Identify client-side security risks, propose solutions, and drive their implementation. Lead offensive and defensive exercises on mobile clients, and drive remediation of business-related risk issues. Analyze attack techniques used by black/gray-market actors, reconstruct attack mechanisms and details, and produce countermeasure plans. Design and build systematic client-side defense solutions to improve defensive effectiveness and mitigation efficiency. Requirements: Bachelor's degree or above in Computer Science or a related field. Familiar with low-level Android and iOS system architecture, security mechanisms, and reverse engineering. Familiar with typical cheating/fraud techniques used by black/gray-market actors. Proficient in leveraging AI Agents for security workflows, including reverse engineering, vulnerability discovery, attack reconstruction, and log/data analysis, with hands-on experience integrating AI tools into daily security operations. Candidates with the following experience will be preferred: Client security experience in Web3/blockchain scenarios. Familiarity with browser-side security. Client Security Architect Job Description: Own the overall architecture design for client-side security, ensuring high availability, high performance, and scalability of the system. Design and optimize the backend data pipeline for security data collection, processing, and analysis, supporting various business scenarios. Incorporate AI Agent capabilities to design intelligent security strategy operations and automated countermeasure architecture, improving strategy iteration speed and incident response speed. Requirements: Bachelor's degree or above in Computer Science or a related field; 3+ years of experience in backend development or architecture design. Strong backend architecture skills, with expertise in high-concurrency, high-availability distributed system design. Familiarity with the client security domain (e.g., device fingerprinting, environment detection, behavioral risk control), with the ability to understand endpoint-collected data and design corresponding backend processing solutions. Familiar with AI Agent technical principles and application paradigms, with practical experience integrating AI capabilities into security architecture design. Candidates with the following experience will be preferred: Risk control system architecture (e.g., rule engines). Security backend experience in Web3/blockchain scenarios. Architecture experience in security data platforms or threat intelligence systems. Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX's Candidate Privacy Notice.", "summaryDescription" : "Client Security Expert/Architect at OKX. Skills: Client-side security, AI Agent integration, Backend architecture, Security data pipeline. Identify client-side security risks. Propose security solutions", "postedDate" : "2026-06-15T23:18:59.154", "createdAt" : "2026-06-15T23:18:59.154", "lastUpdated" : "2026-06-16T07:37:09.887", "ingestTimestamp" : "2026-06-15T23:18:59.154", "mongoId" : "6a30569ff292fd229cf2bd14", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Reverse engineering", "Vulnerability discovery", "Attack reconstruction", "Log analysis", "Data analysis", "Device fingerprinting", "Environment detection", "Behavioral risk control", "Endpoint data processing", "Client-side security", "AI Agent integration", "Backend architecture", "Security data pipeline", "Architecture design", "System design", "Data pipeline design", "Security strategy", "Client security", "Android system", "iOS system", "Cheating techniques", "Fraud techniques", "Web3", "Blockchain", "Browser-side security", "Distributed system design", "High-concurrency system", "High-availability system", "Endpoint data", "AI Agent principles", "Risk control system", "Security data platform", "Threat intelligence system" ], "skillCount" : 33, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a30512af292fd229cefb6a7", "title" : "Client Security Expert/Architect", "company" : "OKX", "industry" : "Cybersecurity", "salary" : { "min" : 550000.0, "max" : 950000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Client Security Expert/Architect in China Mainland, adjusted for the technology industry and company size." }, "location" : "China Mainland_INTERNAL", "locations" : [ "China Mainland_INTERNAL" ], "timestamp" : "2026-06-16T10:38:28.960", "fingerprint" : "c510b08434bcaf2665e6914c60855a8e2522bf81bde6f2d7cc11af3d444035ac", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/okx/jobs/7773152003", "externalId" : "7773152003", "industryFunction" : { }, "structuredLocations" : [ { "country" : "China", "continent" : "as", "workMode" : "onsite" } ], "locationText" : "China", "minimumEducation" : "Bachelor's", "technicalSkills" : "Android, IOS, AI Agents, Backend development", "professionalSkills" : [ "Architecture design", "System design", "Risk control" ], "hardSkillsList" : [ "Reverse engineering", "Vulnerability discovery", "Attack reconstruction", "Log analysis", "Data analysis", "Device fingerprinting", "Environment detection", "Behavioral risk control" ], "hardSkills" : [ { "name" : "Reverse engineering", "level" : "intermediate" }, { "name" : "Vulnerability discovery", "level" : "intermediate" }, { "name" : "Attack reconstruction", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Device fingerprinting", "level" : "intermediate" }, { "name" : "Environment detection", "level" : "intermediate" }, { "name" : "Behavioral risk control", "level" : "intermediate" } ], "majorSkills" : "Client-side security, AI Agent integration, Backend architecture", "majorSkillsList" : [ "Client-side security", "AI Agent integration", "Backend architecture" ], "coreResponsibilities" : "Identify client-side security risks, Propose security solutions, Drive security implementation, Lead offensive exercises, Lead defensive exercises, Drive remediation of risk issues, Analyze attack techniques, Reconstruct attack mechanisms, Produce countermeasure plans, Design defense solutions, Build defense solutions, Own architecture design, Design backend data pipeline, Optimize data pipeline, Incorporate AI Agent capabilities, Design intelligent security strategy, Automate countermeasure architecture", "domainKnowledge" : "Client security; Web3; Blockchain; Browser-side security; High-concurrency systems; High-availability systems; Distributed systems; AI Agent principles; Security data platforms; Threat intelligence systems", "domainList" : [ "client-security", "web3", "blockchain", "browser-side-security", "high-concurrency-systems", "high-availability-systems", "distributed-systems", "ai-agent-principles", "security-data-platforms", "threat-intelligence-systems" ], "domainSpecificKnowledge" : [ "Client security", "Web3", "Blockchain", "Browser-side security", "High-concurrency systems", "High-availability systems", "Distributed systems", "AI Agent principles", "Security data platforms", "Threat intelligence systems" ], "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Improve defensive effectiveness; Improve mitigation efficiency; Improve strategy iteration speed; Improve incident response speed", "qualificationsBasic" : "3+ years backend development, 3+ years architecture design", "qualificationsPreferred" : "Client security experience, Web3lockchain scenarios, Browser-side security familiarity, Risk control system architecture, Security backend experience, Web3lockchain scenarios, Architecture experience, Security data platforms, Threat intelligence systems", "workSiteFlexibility" : "Onsite", "rawDescription" : "Client Security Expert Job Description: Identify client-side security risks, propose solutions, and drive their implementation. Lead offensive and defensive exercises on mobile clients, and drive remediation of business-related risk issues. Analyze attack techniques used by black/gray-market actors, reconstruct attack mechanisms and details, and produce countermeasure plans. Design and build systematic client-side defense solutions to improve defensive effectiveness and mitigation efficiency. Requirements: Bachelor's degree or above in Computer Science or a related field. Familiar with low-level Android and iOS system architecture, security mechanisms, and reverse engineering. Familiar with typical cheating/fraud techniques used by black/gray-market actors. Proficient in leveraging AI Agents for security workflows, including reverse engineering, vulnerability discovery, attack reconstruction, and log/data analysis, with hands-on experience integrating AI tools into daily security operations. Candidates with the following experience will be preferred: Client security experience in Web3/blockchain scenarios. Familiarity with browser-side security. Client Security Architect Job Description: Own the overall architecture design for client-side security, ensuring high availability, high performance, and scalability of the system. Design and optimize the backend data pipeline for security data collection, processing, and analysis, supporting various business scenarios. Incorporate AI Agent capabilities to design intelligent security strategy operations and automated countermeasure architecture, improving strategy iteration speed and incident response speed. Requirements: Bachelor's degree or above in Computer Science or a related field; 3+ years of experience in backend development or architecture design. Strong backend architecture skills, with expertise in high-concurrency, high-availability distributed system design. Familiarity with the client security domain (e.g., device fingerprinting, environment detection, behavioral risk control), with the ability to understand endpoint-collected data and design corresponding backend processing solutions. Familiar with AI Agent technical principles and application paradigms, with practical experience integrating AI capabilities into security architecture design. Candidates with the following experience will be preferred: Risk control system architecture (e.g., rule engines). Security backend experience in Web3/blockchain scenarios. Architecture experience in security data platforms or threat intelligence systems. Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX's Candidate Privacy Notice.", "summaryDescription" : "Client Security Expert/Architect at OKX. Skills: Client-side security, AI Agent integration, Backend architecture. Identify client-side security risks. Propose security solutions", "postedDate" : "2026-06-15T23:15:51.835", "createdAt" : "2026-06-15T23:15:51.835", "lastUpdated" : "2026-06-16T10:38:28.960", "ingestTimestamp" : "2026-06-15T23:15:51.835", "mongoId" : "6a30512af292fd229cefb6a7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Reverse engineering", "Vulnerability discovery", "Attack reconstruction", "Log analysis", "Data analysis", "Device fingerprinting", "Environment detection", "Behavioral risk control", "Client-side security", "AI Agent integration", "Backend architecture", "Architecture design", "System design", "Risk control", "Client security", "Web3", "Blockchain", "Browser-side security", "High-concurrency systems", "High-availability systems", "Distributed systems", "AI Agent principles", "Security data platforms", "Threat intelligence systems" ], "skillCount" : 24, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "69e1043e2beec4dd3def22c4", "title" : "Security Engineer, Threat Detection", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 136000.0, "max" : 184000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Austin, Texas, USA", "locations" : [ "Austin, Texas, USA" ], "timestamp" : "2026-06-15T05:56:25.245", "fingerprint" : "a8b40c05e8f767a119133411d3113acef06ec84c0d3232e4f4db89466c033473", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10386284/apply", "externalId" : "2d5dbcca-e213-40fa-ac43-ad810c00422a", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Perl, Bash, PowerShell, Linux, Unix, Cloud Computing, Machine Learning, Generative AI", "professionalSkills" : [ "Threat modeling", "Secure coding", "Identity management", "Authentication", "Network security", "Detection engineering", "Risk-based alerting" ], "hardSkillsList" : [ "Threat intelligence analysis", "Security research", "Data correlation", "Alert enrichment", "Automated remediation", "Automated response" ], "hardSkills" : [ { "name" : "Threat intelligence analysis", "level" : "intermediate" }, { "name" : "Security research", "level" : "intermediate" }, { "name" : "Data correlation", "level" : "intermediate" }, { "name" : "Alert enrichment", "level" : "intermediate" }, { "name" : "Automated remediation", "level" : "intermediate" }, { "name" : "Automated response", "level" : "intermediate" } ], "majorSkills" : "Threat detection, Security engineering, Machine learning, Data analysis", "majorSkillsList" : [ "Threat detection", "Security engineering", "Machine learning", "Data analysis" ], "coreResponsibilities" : "Identify critical threats, Deliver high-fidelity detections, Enhance detection engineering processes, Improve detection scoping, Improve detection prioritization, Improve detection development, Improve detection testing, Improve detection maintenance, Develop platform requirements, Enrich alerts with data, Reduce false positives, Automate remediation actions, Automate response actions, Research detection capabilities, Develop detection capabilities, Advance detection capabilities, Build tooling, Streamline operational workflows", "teamCollaboration" : "Incident Response; Threat Hunting; Threat Intelligence; Red Team; Security teams", "domainKnowledge" : "Attacker tactics; Techniques and procedures; Cloud computing concepts; Log data analysis", "domainList" : [ "attacker-tactics", "techniques-and-procedures", "cloud-computing-concepts", "log-data-analysis" ], "domainSpecificKnowledge" : [ "Attacker tactics", "Techniques and procedures", "Cloud computing concepts", "Log data analysis" ], "continuousLearning" : "Ongoing DEI events; Learning experiences", "innovationCreativity" : "Develop innovative methods; Prototyping new approaches", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "Experience triaging security alerts, Experience developing security alerts, Experience with response automation, Front-line analysis experience, Escalation support experience, Scripting with Python, Scripting with Perl, Scripting with Bash, Scripting with PowerShell, Knowledge of web protocols, Knowledge of common attacks, Knowledge of Linux tools, Knowledge of Unix tools, Knowledge of Linux architecture, Knowledge of Unix architecture, Knowledge of cloud computing, Knowledge of cloud design, 1+ years threat modeling, 1+ years secure coding, 1+ years identity management, 1+ years authentication, 1+ years software development, 1+ years cryptography, 1+ years system administration, 1+ years network security", "qualificationsPreferred" : "Machine Learning fundamentals experience, Large Language Model fundamentals experience, ML architecture experience, ML training lifecycle experience, ML inference lifecycle experience, ML model execution optimization experience, Experience leading teams, Experience influencing organizations", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Are you excited about advancing the state of threat detection at scale to mitigate risk from an ever-evolving threat landscape impacting a diverse range of businesses? Amazon Stores Security's Threat Detection team is looking for a highly motivated Security Engineer to join our team. In this role, you will research emerging threats to develop new detection ideas and build high-confidence detections that proactively identify malicious activity across large-scale log data. You will work closely with Incident Response, Threat Hunting, Threat Intelligence, and Red Team to understand threat models and deliver detections that enable rapid response. You will also develop innovative methods utilizing the latest techniques to detect threats at scale. Your expertise will help defend the data of Amazon's millions of customers against the most critical threats. Key job responsibilities - Identify critical threats targeting Amazon's network by leveraging threat intelligence and security research, then deliver high-fidelity threat detections aligned to attacker tactics, techniques, and procedures (TTPs). - Enhance detection engineering processes by improving how detections are scoped, prioritized, developed, tested, and maintained throughout their lifecycle. - Develop platform requirements to enrich alerts with contextual data, reduce false positives, and automate remediation and response actions in coordination with incident response teams. - Research and develop mechanisms to advance detection capabilities through machine learning, advanced data correlation, risk-based alerting, or generative AI. - Automate your way through challenges using Python or other scripting languages to build tooling, validate detections, and streamline operational workflows at scale. A day in the life Most days you'll be heads-down building and tuning detections, digging into log data to figure out what malicious activity looks like and how to catch it reliably. You'll spend time reading up on the latest threats and turning that research into something actionable. You'll also work on advancing how we detect threats, whether that's prototyping new approaches using machine learning or generative AI, improving enrichment pipelines, or finding ways to scale what we do. It's a mix of deep technical work and close collaboration with security teams across the organization. About the team Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Basic Qualifications: - Experience triaging and developing security alerts and response automation, conducting front-line analysis, and providing escalation support - Experience scripting with Python, Perl, Bash or PowerShell - Knowledge of web protocols, common attacks, and Linux/Unix tools and architecture - Knowledge of cloud computing concepts and design considerations - 1+ years of non academic experience in any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience Preferred Qualifications: - Experience with Machine Learning and Large Language Model fundamentals, including architecture, training/inference lifecycles, and optimization of model execution, or experience leading and influencing your team or organization Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, TX, Austin - 136,000.00 - 184,000.00 USD annually", "summaryDescription" : "Security Engineer, Threat Detection at Amazon.com Services LLC. Skills: Threat detection, Security engineering, Machine learning, Data analysis. Identify critical threats. Deliver high-fidelity detections", "postedDate" : "2026-06-13T17:22:10.697", "createdAt" : "2026-06-13T17:22:10.697", "lastUpdated" : "2026-06-15T05:56:25.245", "ingestTimestamp" : "2026-06-13T17:22:10.697", "mongoId" : "69e1043e2beec4dd3def22c4", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10386284/apply", "salaryAnnualMin" : 136000, "salaryAnnualMax" : 184000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Threat intelligence analysis", "Security research", "Data correlation", "Alert enrichment", "Automated remediation", "Automated response", "Threat detection", "Security engineering", "Machine learning", "Data analysis", "Threat modeling", "Secure coding", "Identity management", "Authentication", "Network security", "Detection engineering", "Risk-based alerting", "Attacker tactics", "Techniques and procedures", "Cloud computing concepts", "Log data analysis" ], "skillCount" : 21, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2a678074d8ee00a06304c9", "title" : "Sr Security Operations Engineer, Detection and Response", "company" : "Fortis Games", "salary" : { "min" : 75000.0, "max" : 110000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Operations Engineer in the UK technology industry, adjusted for remote work and senior experience level." }, "location" : "Remote - United Kingdom", "locations" : [ "Remote - United Kingdom" ], "certifications" : [ "CISSP", "CISM", "GCIA", "GCIH", "GCFA", "GNFA", "GCTI", "OSCP" ], "timestamp" : "2026-06-14T19:55:47.586", "fingerprint" : "099f566d6415cb50d24530d957f361c7c2bbd4190eea851709a55000e2c5ab55", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.fortisgames.com/careers/?gh_jid=4704045005", "externalId" : "4704045005", "structuredLocations" : [ { "country" : "United Kingdom", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "United Kingdom", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, IAM, CloudTrail, GuardDuty, VPC flow logs, S3, Python, Bash, PowerShell, SQL", "professionalSkills" : [ "Detection engineering", "Incident response", "Security operations", "SOC requirements", "Operational risk", "Audit readiness", "Control evidence", "Third-party reviews", "Policy documentation", "Governance activities", "Security judgment" ], "hardSkillsList" : [ "Detection logic", "SIEM workflows", "EDR workflows", "Detection-as-code", "Deception techniques", "Log ingestion", "Log parsing", "Log enrichment", "Correlation logic", "Alert routing", "Case management", "Canary tokens", "Decoy accounts", "Honey assets", "Tripwires", "Severity triage", "Containment", "Remediation", "Post-incident findings", "Security visibility", "Response readiness" ], "hardSkills" : [ { "name" : "Detection logic", "level" : "intermediate" }, { "name" : "SIEM workflows", "level" : "intermediate" }, { "name" : "EDR workflows", "level" : "intermediate" }, { "name" : "Detection-as-code", "level" : "intermediate" }, { "name" : "Deception techniques", "level" : "intermediate" }, { "name" : "Log ingestion", "level" : "intermediate" }, { "name" : "Log parsing", "level" : "intermediate" }, { "name" : "Log enrichment", "level" : "intermediate" }, { "name" : "Correlation logic", "level" : "intermediate" }, { "name" : "Alert routing", "level" : "intermediate" }, { "name" : "Case management", "level" : "intermediate" }, { "name" : "Canary tokens", "level" : "intermediate" }, { "name" : "Decoy accounts", "level" : "intermediate" }, { "name" : "Honey assets", "level" : "intermediate" }, { "name" : "Tripwires", "level" : "intermediate" }, { "name" : "Severity triage", "level" : "intermediate" }, { "name" : "Containment", "level" : "intermediate" }, { "name" : "Remediation", "level" : "intermediate" }, { "name" : "Post-incident findings", "level" : "intermediate" }, { "name" : "Security visibility", "level" : "intermediate" }, { "name" : "Response readiness", "level" : "intermediate" } ], "majorSkills" : "Detection engineering, Incident response, Security operations", "majorSkillsList" : [ "Detection engineering", "Incident response", "Security operations" ], "coreResponsibilities" : "Build security operations capability, Mature security operations capability, Turn attacker behavior into detections, Turn telemetry into detections, Turn operational risk into detections, Turn attacker behavior into response workflows, Turn telemetry into response workflows, Turn operational risk into response workflows, Turn attacker behavior into measurable security improvements, Turn telemetry into measurable security improvements, Turn operational risk into measurable security improvements, Own detection systems, Improve detection systems, Own investigation systems, Improve investigation systems, Own response systems, Improve response systems, Build detection logic, Maintain detection logic, Improve SIEM workflows, Improve EDR workflows, Develop detection-as-code practices, Use deception techniques, Create high-signal visibility, Design detections, Implement detections, Test detections, Tune detections, Build detection-as-code practices, Improve security telemetry pipelines, Design deception capabilities, Operate deception capabilities, Lead incident response investigations, Support incident response investigations, Perform severity triage, Coordinate containment, Coordinate remediation, Produce post-incident findings, Improve security visibility, Improve response readiness, Support GRC activities, Collect audit evidence, Document technical controls, Provide third-party risk input, Document policy, Document SOPs", "teamCollaboration" : "Work closely with IT; Work closely with infrastructure; Work closely with engineering; Work closely with game development teams", "projectManagementSkills" : [ "Version control", "Peer review", "Repeatable deployment" ], "domainKnowledge" : "Cloud-native security; Identity security; Endpoint security; Network security; Application security; SaaS security", "domainList" : [ "cloud-native-security", "identity-security", "endpoint-security", "network-security", "application-security", "saas-security" ], "domainSpecificKnowledge" : [ "Cloud-native security", "Identity security", "Endpoint security", "Network security", "Application security", "SaaS security" ], "toolProficiency" : [ "CrowdStrike Falcon" ], "communicationSkills" : "Direct communication; Thoughtful communication; Clear findings", "documentationSkills" : "Policy documentation; Control documentation; SOP documentation", "innovationCreativity" : "Builder mindset", "problemSolvingSkills" : "Tackling difficult problems", "specialRequirements" : "Weekend-inclusive schedule", "outcomesObjectives" : "Measurable security improvements", "qualificationsBasic" : "6+ years experience in security operations, Experience writing, tuning, validating, and maintaining detections, Hands-on experience with SIEM platforms, Hands-on experience with EDR tools, Practical AWS security knowledge, Ability to script or automate security workflows, Working knowledge of audit evidence, Working knowledge of control documentation, Working knowledge of third-party reviews, Working knowledge of policies, Working knowledge of standards, Working knowledge of security frameworks, Ability to work a weekend-inclusive schedule", "qualificationsPreferred" : "Experience in gaming, Experience in entertainment, Experience in SaaS, Experience in lean cloud-native security teams, Experience with threat hunting, Experience with adversary emulation, Experience with SOAR, Experience with workflow automation, Experience with deception technologies, Experience with security data engineering, Experience with security metrics", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Who we are At Fortis Games we aspire to make great games that bring people together while redefining how game companies work. We believe in building a sense of belonging through our games, their communities, and how we operate and treat each other. Through our game communities, we will create powerful connections and lasting memories. We will foster a culture of diversity, equity and belonging where together our diverse skills, experiences and backgrounds impact the games we make. We are an early but mighty organization with a leadership team of game industry veterans. There are many opportunities for you to have a big impact on the products we'll be making as well as the overall direction of the company. If you're passionate about tackling difficult problems with direct and thoughtful communication and team first mentality, we may be the right place for you. About the Role Fortis Games is looking for a Senior Security Operations Engineer, Detection and Response to help build and mature our security operations capability. This is a senior, hands-on role for someone who understands SOC requirements at a high engineering level and can turn attacker behavior, telemetry, and operational risk into reliable detections, response workflows, and measurable security improvements. You will own and improve the systems we use to detect, investigate, and respond to threats across our corporate, cloud, identity, endpoint, and game development environments. You will build and maintain detection logic, improve SIEM and EDR workflows, develop detection-as-code practices, and use deception techniques to create high-signal visibility into suspicious activity. This role is ideal for someone who has a builder mindset, enjoys startup-style ownership, and wants to create practical security capability in a fast-moving environment. This is not primarily a GRC role; however, you should be comfortable spending approximately 20% of your time supporting audit readiness, control evidence, third-party reviews, policy documentation, and related governance activities where technical security judgment is required. This role requires participation in a weekend-inclusive schedule to support continuous security operations coverage across time zones. What You'll Achieve Design, implement, test, and tune detections across endpoint, identity, cloud, SaaS, network, and application telemetry. Build detection-as-code practices using version control, testing, peer review, documentation, and repeatable deployment methods. Improve SIEM and security telemetry pipelines, including log ingestion, parsing, enrichment, correlation logic, alert routing, and case management workflows. Design and operate practical deception capabilities such as canary tokens, decoy accounts, honey assets, and other high-signal tripwires. Lead and support incident response investigations — perform severity triage, coordinate containment and remediation, and produce clear post-incident findings. Work closely with IT, infrastructure, engineering, and game development teams to improve security visibility and response readiness across the environment. Support selected GRC activities including audit evidence collection, technical control documentation, third-party risk input, and policy or SOP documentation (approximately 20% of time). What You'll Need to Be Successful 6+ years of experience in security operations, detection engineering, incident response, or a similar hands-on technical security role. Strong experience writing, tuning, validating, and maintaining detections in SIEM, EDR, cloud, identity, or SaaS environments. Hands-on experience with SIEM platforms and EDR tools such as CrowdStrike Falcon or comparable technology. Practical AWS security knowledge including IAM, CloudTrail, GuardDuty, VPC flow logs, S3, and cloud-native detection opportunities. Ability to script or automate security workflows using Python, Bash, PowerShell, SQL, or similar tools. Working knowledge of audit evidence, control documentation, third-party reviews, policies, standards, and security frameworks. Ability to work a weekend-inclusive schedule to support continuous security operations coverage. Experience in gaming, entertainment, SaaS, or lean cloud-native security teams strongly preferred. BONUS! Experience with threat hunting, adversary emulation, SOAR or workflow automation, deception technologies, security data engineering, or security metrics would be valuable. Certifications such as CISSP, CISM, GCIA, GCIH, GCFA, GNFA, GCTI, or OSCP are welcome, but are not a replacement forhands-on technical judgmet. Why join us There are many reasons to join us, but here are a few: We strongly believe we are changing how games studios operate and at the core of what we do is making great games that create a connected community We're not just about making Games Where You Belong. We're also about building communities where our people belong. That's why Fortis is a thriving environment that celebrates diversity, embraces inclusivity, and fosters growth. Build and grow with a seasoned team of accomplished talent who have left an impactful mark in their disciplines, both in and out of gaming Fortis is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, protected veteran status, or any other basis protected by applicable law, and will not be discriminated against on the basis of disability.", "summaryDescription" : "Sr Security Operations Engineer, Detection and Response at Fortis Games. Skills: Detection engineering, Incident response, Security operations. Build security operations capability. Mature security operations capability", "postedDate" : "2026-06-11T18:47:09.970", "createdAt" : "2026-06-11T18:47:09.970", "lastUpdated" : "2026-06-14T19:55:47.586", "ingestTimestamp" : "2026-06-11T18:47:09.970", "mongoId" : "6a2a678074d8ee00a06304c9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Detection logic", "SIEM workflows", "EDR workflows", "Detection-as-code", "Deception techniques", "Log ingestion", "Log parsing", "Log enrichment", "Correlation logic", "Alert routing", "Case management", "Canary tokens", "Decoy accounts", "Honey assets", "Tripwires", "Severity triage", "Containment", "Remediation", "Post-incident findings", "Security visibility", "Response readiness", "Detection engineering", "Incident response", "Security operations", "SOC requirements", "Operational risk", "Audit readiness", "Control evidence", "Third-party reviews", "Policy documentation", "Governance activities", "Security judgment", "Version control", "Peer review", "Repeatable deployment", "Cloud-native security", "Identity security", "Endpoint security", "Network security", "Application security", "SaaS security", "CISSP", "CISM", "GCIA", "GCIH", "GCFA", "GNFA", "GCTI", "OSCP", "CrowdStrike Falcon" ], "skillCount" : 50, "jobCategory" : "other", "jobSubcategory" : "security", "dataQualityScore" : 0.8888889, "daysOld" : 3, "hasLocation" : true, "hasGeo" : false }, { "id" : "6a25145474d8ee00a00bb3b2", "title" : "Senior Security Engineer, AWS Security Incident Response", "company" : "Amazon Web Services Japan GK", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 1.2E7, "max" : 1.8E7, "currency" : "JPY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Security Engineer in Tokyo, Japan, adjusted for AWS's size and the technology industry." }, "location" : "Tokyo, JPN", "locations" : [ "Tokyo, JPN" ], "certifications" : [ "GCIH", "GSEC", "GREM", "GCFA", "CISSP" ], "timestamp" : "2026-06-15T08:24:56.602", "fingerprint" : "a57d3db022abec12088d7bb9660b2ed2ff73f018f6b5050988fd19a160c05a1a", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10441597/apply", "externalId" : "79b6888c-343c-4289-bbab-a95d6a41e1f2", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tokyo", "country" : "Japan", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "35.6768601,139.7638947" } ], "locationText" : "Tokyo, Japan", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Python, Java, C++, AWS, Amazon GuardDuty, AWS CloudTrail, AWS Security Hub, AWS IAM", "professionalSkills" : [ "Malware analysis", "Forensic analysis", "Attribution skills", "System design", "Automation development", "Detection engineering", "Incident response", "Threat monitoring", "Security operations" ], "hardSkillsList" : [ "Scripting", "Programming", "Code review", "Log analysis", "Automation", "Command line tools", "Security issue identification", "Risk assessment", "Mitigation planning", "Vulnerability identification", "Attack pattern analysis", "Remediation" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Programming", "level" : "intermediate" }, { "name" : "Code review", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" }, { "name" : "Command line tools", "level" : "intermediate" }, { "name" : "Security issue identification", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Mitigation planning", "level" : "intermediate" }, { "name" : "Vulnerability identification", "level" : "intermediate" }, { "name" : "Attack pattern analysis", "level" : "intermediate" }, { "name" : "Remediation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Security Incident Response, Automation, AI Feedback Loops, Detection Engineering", "majorSkillsList" : [ "Security Incident Response", "Automation", "AI Feedback Loops", "Detection Engineering" ], "coreResponsibilities" : "Build automation mechanisms, Investigate complex security incidents, Build frameworks for scalable detection, Build frameworks for auto-remediation, Architect AI feedback loops, Respond to threats, Build detection enhancements, Build auto-remediation playbooks, Build AI training pipelines, Lead incident response for customers, Scope blast radius, Coordinate containment, Guide remediation, Walk customers through compromises, Build pipelines to capture investigation patterns, Translate patterns into detection rules, Translate patterns into auto-remediation, Measure impact on investigation volume, Measure impact on investigation accuracy, Build mechanisms for engineer contribution, Build AI feedback loops, Improve autonomous investigation accuracy, Define and track metrics, Measure automation effectiveness, Reduce false positives, Increase auto-resolution coverage, Track engineer contribution rates, Mentor junior engineers, Structure artifacts as reusable automation inputs, Participate in on-call rotations, Review automation dashboard metrics, Investigate new attack patterns, Analyze malware behavior, Extract indicators, Build detection rules, Step into high-severity incidents, Analyze logs, Correlate indicators across accounts, Codify attack chains, Improve AI agent performance, Review and approve detection rule contributions", "teamCollaboration" : "Cross-functional teams; Leadership collaboration", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Attack patterns; Supply chain attacks; Cryptomining; Cloud-native architecture; Security operations", "domainList" : [ "attack-patterns", "supply-chain-attacks", "cryptomining", "cloud-native-architecture", "security-operations" ], "domainSpecificKnowledge" : [ "Attack patterns", "Supply chain attacks", "Cryptomining", "Cloud-native architecture", "Security operations" ], "toolProficiency" : [ "AWS" ], "communicationSkills" : "Customer calls; Executive presentations", "continuousLearning" : "One-on-one coaching", "innovationCreativity" : "Prototype development", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Data-driven decision making", "specialRequirements" : "On-call rotation, 24/7 follow-the-sun operating model", "outcomesObjectives" : "Reduce false positives; Increase auto-resolution coverage; Improve autonomous investigation accuracy", "qualificationsBasic" : "5+ years scripting, programming, or security code review, Bachelor's degree or above in Computer Science, Computer Engineering, Cybersecurity, or other related discipline, Speak, write, and read fluently in Japanese, 5+ years troubleshooting systems issues, analyzing logs, automating complex tasks using command line tools, and identifying security issues, risks, and developing mitigation plans, Experience in industry-based security vulnerabilities identification, attack patterns, and remediation, Experience as a mentor, tech lead, or leading an engineering team", "qualificationsPreferred" : "Master's degree in Computer Science, Information Security, or a related field, Experience in automation or monitoring frameworks, deployment or development, Information security professional certification (GCIH, GSEC, GREM, GCFA, CISSP, or equivalent), Experience with AWS services in a security operations context", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Security Incident Response is looking for a Senior Security Engineer who builds the automation mechanisms that scale security response. You will investigate complex security incidents hands-on, build the frameworks that turn investigation expertise into scalable detection and auto-remediation, and architect the AI feedback loops that make the service smarter with every investigation. The AWS Security Incident Response team provides 24/7 security response through a follow-the-sun operating model. The service combines automated triage workflows, AI-powered investigation agents, and human security analysts to respond to threats across customer AWS environments at massive scale. Our AI systems autonomously resolve over 90% of routine investigations within minutes. The next challenge is building the mechanisms that accelerate this further — enabling every engineer on the team to contribute to detection and automation quality from their investigation work. Your deep understanding of how attacks work — from initial exploitation through lateral movement to data exfiltration — is what makes your automation effective. You will build detection enhancements, auto-remediation playbooks, and AI training pipelines that catch real threats, not just generate noise. We treat every investigation as a confirmed security incident until the data proves otherwise. Native Japanese language skills and fluent English language skills in speaking, reading, and writing. Key job responsibilities - Investigate and respond to complex security incidents hands-on — applying malware analysis, forensic analysis, or attribution skills to credential compromise, data exfiltration, supply chain attacks, and cryptomining - Lead incident response for customers during high-severity events: scope blast radius, coordinate containment, guide remediation, and get on calls with customers to walk them through what was compromised and the specific steps to contain the threat - Own the response-to-automation flywheel: build pipelines that capture investigation patterns (including Trust & Safety abuse cases), translate them into detection rules and auto-remediation, and measure impact on investigation volume and accuracy - Build mechanisms that enable every engineer on the team to contribute detection rules, automation playbooks, and AI training data — and build the AI feedback loops that ensure human corrections systematically improve autonomous investigation accuracy - Define and track metrics that measure automation effectiveness: false positive reduction, auto-resolution coverage, and engineer contribution rates to the pipeline - Mentor junior engineers on investigation methodology and structuring artifacts as reusable automation inputs - Participate in on-call rotations as part of the 24/7 follow-the-sun operating model, including weekends A day in the life - Review automation dashboard metrics: AI agent resolution rates, false positive trends, and engineer-submitted detection rules going live - Investigate new attack patterns the AI is struggling with — analyze malware behavior, extract indicators, and build detection rules that catch the pattern without generating false positives - Step into high-severity incidents directly — analyzing logs, correlating indicators across accounts, scoping blast radius, and getting on a call with the customer to guide containment - Codify attack chains from investigations into detection rules and AI agent improvements so the system catches the pattern autonomously next time - Review and approve detection rule contributions from junior engineers using your contribution framework About the team The AWS Security Incident Response team provides 24/7 threat monitoring, investigation, and response for customer AWS environments. The team is driving a strategic transformation — raising operational standards, building AI-powered investigation capabilities, and expanding coverage. We respond to customer requests within minutes. Zero queue tolerance is the operating standard. We value engineers who solve root causes over those who close tickets. Senior engineers enjoy close collaboration with leadership, one-on-one coaching, and the opportunity to shape the future of security operations at AWS scale. Basic Qualifications: - 5+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience - Bachelor's degree or above in Computer Science, Computer Engineering, Cybersecurity, or other related discipline - Speak, write, and read fluently in Japanese - 5+ years of non-internship experience in troubleshooting systems issues, analyzing logs, automating complex tasks using command line tools, and identifying security issues, risks, and developing mitigation plans - Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques; including experience as a mentor, tech lead, or leading an engineering team Preferred Qualifications: - Master's degree in Computer Science, Information Security, or a related field - Experience in automation or monitoring frameworks, deployment or development - Knowledge of compliance and security standards across the enterprise IT landscape - * Information security professional certification (GCIH, GSEC, GREM, GCFA, CISSP, or equivalent) - * Experience with AWS services in a security operations context (Amazon GuardDuty, AWS CloudTrail, AWS Security Hub, AWS IAM) Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Senior Security Engineer, AWS Security Incident Response at Amazon Web Services Japan GK. Skills: Security Incident Response, Automation, AI Feedback Loops, Detection Engineering. Build automation mechanisms. Investigate complex security incidents", "postedDate" : "2026-06-13T18:41:50.371", "createdAt" : "2026-06-13T18:41:50.371", "lastUpdated" : "2026-06-15T08:24:56.602", "ingestTimestamp" : "2026-06-13T18:41:50.371", "mongoId" : "6a25145474d8ee00a00bb3b2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10441597/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Scripting", "Programming", "Code review", "Log analysis", "Automation", "Command line tools", "Security issue identification", "Risk assessment", "Mitigation planning", "Vulnerability identification", "Attack pattern analysis", "Remediation", "Mentoring", "Security Incident Response", "AI Feedback Loops", "Detection Engineering", "Malware analysis", "Forensic analysis", "Attribution skills", "System design", "Automation development", "Detection engineering", "Incident response", "Threat monitoring", "Security operations", "Roadmap planning", "Attack patterns", "Supply chain attacks", "Cryptomining", "Cloud-native architecture", "GCIH", "GSEC", "GREM", "GCFA", "CISSP", "AWS" ], "skillCount" : 36, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a30564af292fd229cf26e0e", "title" : "Security Assurance Solutions Architect", "company" : "AWS EMEA SARL (Abu Dhabi Branch)", "industry" : "Solutions Architect, Solution Architect, Cloud Computing", "salary" : { "min" : 450000.0, "max" : 650000.0, "currency" : "AED", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Security Assurance Solutions Architect in Dubai, UAE, adjusted for industry and company size." }, "location" : "Dubai, ARE", "locations" : [ "Dubai, ARE" ], "certifications" : [ "CPA", "CMA", "CISA", "CIA", "CISSP", "CISM", "GCIH", "GSEC", "Security+" ], "timestamp" : "2026-06-16T05:10:43.788", "fingerprint" : "0e35373dcbd8894c14e79e92d612fcd87a00dd112dd6688d8c5f84b71ebc0f5a", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10448998/apply", "externalId" : "2945b3fa-e947-460d-9e06-a10c76ffe6a6", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Dubai", "country" : "United Arab Emirates", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "25.0742823,55.1885387" } ], "locationText" : "Dubai, United Arab Emirates", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, NIST 800-53, GDPR", "professionalSkills" : [ "Risk management", "Internal audit", "Enterprise risk management", "Security assurance", "Compliance programs", "Risk management approaches", "Strategic presentations", "Security assessments", "Information system audits" ], "hardSkillsList" : [ "Risk assessments", "Control design", "Control frameworks", "Risk prioritization", "IT security", "Compliance", "Risk management", "Data privacy", "Security controls", "Customer advising", "Architecture design", "Industry standards", "Regulations" ], "hardSkills" : [ { "name" : "Risk assessments", "level" : "intermediate" }, { "name" : "Control design", "level" : "intermediate" }, { "name" : "Control frameworks", "level" : "intermediate" }, { "name" : "Risk prioritization", "level" : "intermediate" }, { "name" : "IT security", "level" : "intermediate" }, { "name" : "Compliance", "level" : "intermediate" }, { "name" : "Risk management", "level" : "intermediate" }, { "name" : "Data privacy", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Customer advising", "level" : "intermediate" }, { "name" : "Architecture design", "level" : "intermediate" }, { "name" : "Industry standards", "level" : "intermediate" }, { "name" : "Regulations", "level" : "intermediate" } ], "majorSkills" : "Security Assurance, Risk Management, Compliance, Cloud Security", "majorSkillsList" : [ "Security Assurance", "Risk Management", "Compliance", "Cloud Security" ], "coreResponsibilities" : "Deliver in teams, Enhance security assurance and compliance programs, Define compliance and risk management approaches, Help customers move sensitive workloads onto the cloud, Resolve security assurance questions, Manage risk and achieve compliance, Convey partner and customer feedback, Input to AWS technology roadmaps", "teamCollaboration" : "Amazonians, partners, and customers; AWS engineering, support and business teams", "projectManagementSkills" : [ "Agile methodologies", "DevOps practices" ], "domainKnowledge" : "Shared responsibility model; Cloud computing; Cyber security; Compliance objectives; Risk requirements; Regulatory requirements; PCI-QSAC; HITRUST", "domainList" : [ "shared-responsibility-model", "cloud-computing", "cyber-security", "compliance-objectives", "risk-requirements", "regulatory-requirements", "pci-qsac", "hitrust" ], "domainSpecificKnowledge" : [ "Shared responsibility model", "Cloud computing", "Cyber security", "Compliance objectives", "Risk requirements", "Regulatory requirements", "PCI-QSAC", "HITRUST" ], "communicationSkills" : "Strategic presentations; Hands on demonstrations", "problemSolvingSkills" : "Address challenges; Handle wide range of compliance requirements; Dive in to details; Translate requirements into scalable solutions; Communicate at all levels", "specialRequirements" : "Travel to customer sites", "outcomesObjectives" : "Establish scalable security solutions; Drive business outcomes; Secure world’s workloads; Build brighter future; Deliver bar raising security outcomes; Invest in security mechanisms and automation; Operationalize shared responsibility model; Help enable customers move workloads and regulated data", "qualificationsBasic" : "Experience in risk management and internal audit, Performing risk assessments and audits, Designing controls, Managing enterprise control frameworks, Prioritizing risk, Bachelor's degree or equivalent, 5+ years experience in IT security, compliance and risk management, data privacy, or security controls, 2+ years experience advising customers on architectures meeting industry standards and regulations", "qualificationsPreferred" : "CPA, CMA, CISA, CIA or equivalent risk, audit, or compliance credentials, Experience in Agile methodologies and DevOps practices, CISSP, CISA, CISM or other security certification, GCIH or GSEC or Security+, Experience in performing security assessments and information system audits, Auditing IT processes", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The AWS Security Assurance Services team, a part of Amazon Web Services, leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world’s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers. The AWS Security Assurance Services team works with our largest enterprise customers to operationalize the shared responsibility model as they migrate to the cloud. Are you a Governance, Risk, and Compliance professional who can address the challenges of migrating systems and workloads to the cloud? Are you skilled at helping executives address their enterprise risk management requirements using highly scalable computing architectures? The AWS Security Assurance Service team, within AWS Support, is seeking a talented Security Assurance Solutions Architect to help the expansion of the Security Assurance practice and educate our customers on how our product-led, people-powered services helps operate their business securely on AWS while also demonstrating assurance that compliance objectives can be achieved. This is an exciting opportunity to contribute at the intersection of cloud, cyber security, and compliance. You will have the opportunity to work with multiple lines of business, and learn from (and contribute to) a variety of security and compliance use cases. This is a customer facing role where success is measured by helping enable our customers in moving their workloads and regulated data into the cloud by addressing specific risk, regulatory, and compliance requirements. We are looking for an innovative security/compliance professional who has the ability to handle a wide range of compliance requirements, is willing to dive in to the details, can translate those requirements into scalable solutions, and is able to communicate at all levels within an organization. Key job responsibilities Expertise – Delivers in teams that include Amazonians, partners, and customers to enhance security assurance and compliance programs. Solutions - Work with a team to define innovative compliance and risk management approaches to customers that help the customer understand how to move sensitive workloads onto the cloud faster. Delivery – Engagements will require working to resolve security assurance questions and to understand how to manage risk and achieve compliance while operating in the AWS Cloud through deep dive discussions, strategic presentations/recommendations, and hands on demonstrations of automating compliance in the AWS environment. Insights - Work with AWS engineering, support and business teams to convey partner and customer feedback as input to AWS technology roadmaps. Ability to travel to customer sites as needed. About the team AWS Security Assurance Services LLC, a PCI-QSAC (Payment Card Industry-Qualified Security Assessor company) and HITRUST External Assessor Firm, is a team of industry certified assessors, helping our customers achieve, maintain, and automate compliance in the cloud by tying together applicable audit standards to AWS service specific features and functionality. Diverse Experiences Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Inclusive Team Culture Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences inspire us to never stop embracing our uniqueness. Mentorship and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Basic Qualifications: - Experience in risk management and internal audit including: performing risk assessments and audits, designing controls, managing enterprise control frameworks, and prioritizing risk - Bachelor's degree or equivalent in Computer Science, Engineering, Information Systems Management, Information Security or other related fields - 5+ years experience in IT security, compliance and risk management, data privacy, or security controls. - 2+ years experience advising customers on architectures meeting industry standards and regulations such as NIST 800-53 and GDPR. Preferred Qualifications: - CPA, CMA, CISA, CIA or equivalent risk, audit, or compliance credentials - Experience in Agile methodologies and DevOps practices - CISSP, CISA, CISM or other security certification, or GCIH (GIAC Certified Incident Handler) or GSEC (GIAC Security Essentials) or Security+ - Experience in performing security assessments and information system audits of network, operating systems, application security, as well as auditing IT processes. - Demonstrated ability to think strategically about business, product, and technical challenges. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security Assurance Solutions Architect at AWS EMEA SARL (Abu Dhabi Branch). Skills: Security Assurance, Risk Management, Compliance, Cloud Security. Deliver in teams. Enhance security assurance and compliance programs", "postedDate" : "2026-06-15T00:00:00.000", "createdAt" : "2026-06-15T22:01:28.956", "lastUpdated" : "2026-06-16T05:10:43.788", "ingestTimestamp" : "2026-06-15T22:01:28.956", "mongoId" : "6a30564af292fd229cf26e0e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10448998/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Risk assessments", "Control design", "Control frameworks", "Risk prioritization", "IT security", "Compliance", "Risk management", "Data privacy", "Security controls", "Customer advising", "Architecture design", "Industry standards", "Regulations", "Security Assurance", "Risk Management", "Cloud Security", "Internal audit", "Enterprise risk management", "Security assurance", "Compliance programs", "Risk management approaches", "Strategic presentations", "Security assessments", "Information system audits", "Agile methodologies", "DevOps practices", "Shared responsibility model", "Cloud computing", "Cyber security", "Compliance objectives", "Risk requirements", "Regulatory requirements", "PCI-QSAC", "HITRUST", "CPA", "CMA", "CISA", "CIA", "CISSP", "CISM", "GCIH", "GSEC", "Security+" ], "skillCount" : 43, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c5f4074d8ee00a08ea5be", "title" : "Staff Security Engineer - Security Data, Detection and Automation", "company" : "Nscale", "industry" : "AI Infrastructure", "salary" : { "min" : 180000.0, "max" : 230000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "AMER", "locations" : [ "AMER" ], "timestamp" : "2026-06-14T22:37:01.020", "fingerprint" : "553428408bb44220e076b8f370ad237ad23b028a226083db8fc7389f64bfaece", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/nscaleoperationsukltd/jobs/4868481101", "externalId" : "4868481101", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" }, { "country" : "Canada", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States; Canada", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Python, AWS, SIEM, Security analytics, Log management, Detection platforms, SOAR, GitOps, CI/CD", "professionalSkills" : [ "Detection engineering", "Security data engineering", "Security operations", "Threat modeling", "Case management", "Risk reduction" ], "hardSkillsList" : [ "Telemetry architecture", "Data quality standards", "Detection logic", "Runbook development", "Attack simulation", "Automation workflows", "Data pipelines", "Enrichment flows", "Case quality metrics", "Executive reporting" ], "hardSkills" : [ { "name" : "Telemetry architecture", "level" : "intermediate" }, { "name" : "Data quality standards", "level" : "intermediate" }, { "name" : "Detection logic", "level" : "intermediate" }, { "name" : "Runbook development", "level" : "intermediate" }, { "name" : "Attack simulation", "level" : "intermediate" }, { "name" : "Automation workflows", "level" : "intermediate" }, { "name" : "Data pipelines", "level" : "intermediate" }, { "name" : "Enrichment flows", "level" : "intermediate" }, { "name" : "Case quality metrics", "level" : "intermediate" }, { "name" : "Executive reporting", "level" : "intermediate" } ], "majorSkills" : "Security Data, Detection Engineering, Automation", "majorSkillsList" : [ "Security Data", "Detection Engineering", "Automation" ], "coreResponsibilities" : "Design security telemetry architecture, Build telemetry source map, Establish data quality standards, Establish parser quality standards, Establish ingestion health standards, Establish field normalization standards, Establish source ownership standards, Create daily source-health reporting, Create daily scoring for data quality, Own detection engineering lifecycle, Define high-value detection use cases, Develop detections, Apply TTP-led threat modeling, Validate detection coverage, Build SOAR workflows, Build automation workflows, Design scalable data pipelines, Design enrichment flows, Design automations, Implement detection-as-code, Use automation to improve outcomes, Measure MDR/SOC performance, Create case-quality review loop, Produce security dashboards, Produce executive reporting, Improve alert explainability, Partner with security leadership, Collaborate with Identity hires, Collaborate with Vulnerability Management hires, Connect engineering stakeholders, Connect operational stakeholders", "teamCollaboration" : "Cross-functional partnership; Adjacent teams; Security leadership; Identity management; Vulnerability management", "projectManagementSkills" : [ "Detection-as-code", "GitOps", "CI/CD" ], "domainKnowledge" : "Endpoint security; Security analytics; Identity platforms; SaaS systems; Cloud platforms; Vulnerability tools; Production access; MITRE ATT&CK; Identity attacks; Cloud attacks; Insider threat; AI agent risk", "domainList" : [ "endpoint-security", "security-analytics", "identity-platforms", "saas-systems", "cloud-platforms", "vulnerability-tools", "production-access", "mitre-att-ck", "identity-attacks", "cloud-attacks", "insider-threat", "ai-agent-risk" ], "domainSpecificKnowledge" : [ "Endpoint security", "Security analytics", "Identity platforms", "SaaS systems", "Cloud platforms", "Vulnerability tools", "Production access", "MITRE ATT&CK", "Identity attacks", "Cloud attacks", "Insider threat", "AI agent risk" ], "toolProficiency" : [ "SIEM", "SOAR", "Git" ], "communicationSkills" : "Executive reporting; Alert explainability", "documentationSkills" : "Documented test logic; Documented runbooks; Documented data dependencies; Documented case-quality criteria", "innovationCreativity" : "Relentless innovation", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Root cause analysis", "outcomesObjectives" : "Turn raw telemetry into outcomes; Strengthen internal ownership; Improve operational quality; Improve consistency of outcomes; Improve explainability of outcomes; Improve actionability of outcomes; Connect security operations to risk reduction", "qualificationsBasic" : "8+ years in detection engineering, 8+ years in security data engineering, 8+ years in SIEM engineering, 8+ years in security automation, 8+ years in incident response engineering, Hands-on SIEM experience, Hands-on security analytics experience, Hands-on log management experience, Hands-on detection platforms experience, Ability in coding, Ability in scripting, Ability in querying, Ability in detection-content development, Experience building detection logic, Experience with detection testing, Experience with threat hunting, Experience with incident response, Experience with alert tuning, Experience with runbook development, Ability to design scalable data pipelines, Ability to design enrichment flows, Ability to design automations, Understanding of attacker TTPs, Understanding of MITRE ATT&CK, Understanding of identity attacks, Understanding of cloud attacks, Understanding of endpoint telemetry, Understanding of insider-threat indicators", "qualificationsPreferred" : "SOAR experience preferred, Case management experience preferred, Detection-as-code experience preferred, GitOps experience preferred, CI/CD experience preferred, Automated detection testing experience preferred, Experience measuring MDR performance preferred, Experience measuring SOC performance preferred, Experience measuring managed detection provider performance preferred, Experience using AI preferred, Experience using agentic workflows preferred", "remoteFriendly" : true, "rawDescription" : "About Nscale Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility. We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future. About the Role We are hiring a Senior Staff Engineer - Security Data, Detection and Automation to build the telemetry, detection, response automation, case-quality metrics, and reporting foundation for an increasingly Nscale-owned SOC capability. This role sits at the intersection of security engineering, data engineering, detection engineering, and security operations. You will work across endpoint, identity, SaaS, cloud, network, vulnerability, and production access domains, partnering closely with security leadership as well as adjacent teams shaping identity and vulnerability management requirements. Your impact will be strategic and measurable. The focus is not to create more alerts, but to turn raw telemetry into reliable, explainable, high-signal security outcomes that strengthen internal ownership of detection logic, containment decisions, runbooks, executive metrics, case quality, and automation. What you'll be doing Security Telemetry and Data Foundations Design security telemetry architecture across endpoint security, security analytics, identity platforms, SaaS systems, cloud platforms, vulnerability tools, endpoint inventory, and production access systems. Build a telemetry source map covering ownership, data quality, retention, coverage, priority use cases, and known gaps. Establish data quality, parser quality, ingestion health, field normalization, and source ownership standards. Create daily source-health reporting and scoring for SIEM or security analytics data quality. Detection Engineering and Threat Coverage Own the detection engineering lifecycle from hypothesis and data source selection through logic, testing, tuning, ownership, runbook, expiry, and metrics. Define high-value detection use cases across identity, endpoint, SaaS, cloud, and production access. Develop detections with documented test logic, runbooks, data dependencies, and case-quality criteria. Apply TTP-led threat modeling across corporate, cloud, production, identity, SaaS, endpoint, insider, and AI-agent risk scenarios. Validate detection coverage through attack simulation or other coverage-testing approaches. Automation and Operational Improvement Build SOAR and automation workflows that enrich alerts, suppress low-value noise, route cases, and improve analyst decision-making. Design scalable data pipelines, enrichment flows, and automations that improve operational quality. Implement detection-as-code or version-controlled detection content where practical. Use automation to improve the consistency, explainability, and actionability of security outcomes. SOC Performance and Reporting Measure MDR/SOC performance using case-quality metrics such as false positive rate, time to triage, time to containment, evidence completeness, and escalation quality. Create a MDR/SOC case-quality review loop for internal and external stakeholders. Produce security dashboards and executive reporting that connect security operations to measurable risk reduction. Improve alert explainability so analysts and leaders can understand why detections fired and what actions matter most. Cross-Functional Partnership Partner with security leadership to strengthen internal ownership of detection logic, containment decisions, runbooks, executive metrics, and automation. Collaborate with Identity and Vulnerability Management hires to define production-access, privileged-access, and exposure-driven detection requirements. Connect engineering and operational stakeholders around shared standards for telemetry quality, response workflows, and detection effectiveness. KPIs False positive rate Time to triage Time to containment Evidence completeness and escalation quality About You 8+ years in detection engineering, security data engineering, SIEM engineering, security automation, incident response engineering, or similar roles. Strong hands-on experience with SIEM, security analytics, log management, or detection platforms. Strong ability in coding, scripting, querying, or detection-content development. Experience building detection logic from host, identity, cloud, SaaS, network, DNS, proxy, EDR, vulnerability, or application telemetry. Experience with detection testing, threat hunting, incident response, alert tuning, and runbook development. Ability to design scalable data pipelines, enrichment flows, or automations. Strong understanding of attacker TTPs, MITRE ATT&CK, identity attacks, cloud attacks, endpoint telemetry, and insider-threat indicators. Experience with SOAR, case management, detection-as-code, GitOps, CI/CD, or automated detection testing is preferred. Experience measuring MDR, SOC, or managed detection provider performance is preferred. Experience using AI or agentic workflows to improve triage, enrichment, investigation, or detection validation with guardrails is preferred. What we can offer you At Nscale, you'll find a collaborative, supportive, and innovative environment where your contributions spark real impact. We're building something extraordinary, and we want you at the core. Highly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months. \uD83D\uDE80 Join one of the fastest-growing AI infrastructure companies — your chance to directly shape how global AI capacity is planned and deployed. ✨ Expect a dynamic progression plan tailored to your ambitions. Grow by leading critical cross-functional initiatives and shaping capital strategy — always with our full support. Human-First Flexibility: We treat you as humans first. \uD83E\uDEF6\uD83C\uDFFD Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments. Equal Opportunities Statement We strongly encourage applications from people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds. If there’s anything we can do to accommodate your specific situation, please let us know. The responsibilities outlined in this job description are not exhaustive and are intended to provide a general overview of the position. The employee may be required to perform additional duties, tasks, and responsibilities as assigned by management, consistent with the skills and qualifications required for the role. For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here. Salary Range The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation. The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation. Salary Range $180,000—$230,000 USD For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.", "summaryDescription" : "Staff Security Engineer - Security Data, Detection and Automation at Nscale. Skills: Security Data, Detection Engineering, Automation. Design security telemetry architecture. Build telemetry source map", "postedDate" : "2026-06-12T22:30:13.629", "createdAt" : "2026-06-12T22:30:13.629", "lastUpdated" : "2026-06-14T22:37:01.020", "ingestTimestamp" : "2026-06-12T22:30:13.629", "mongoId" : "6a2c5f4074d8ee00a08ea5be", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 180000, "salaryAnnualMax" : 230000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Telemetry architecture", "Data quality standards", "Detection logic", "Runbook development", "Attack simulation", "Automation workflows", "Data pipelines", "Enrichment flows", "Case quality metrics", "Executive reporting", "Security Data", "Detection Engineering", "Automation", "Detection engineering", "Security data engineering", "Security operations", "Threat modeling", "Case management", "Risk reduction", "Detection-as-code", "GitOps", "CI/CD", "Endpoint security", "Security analytics", "Identity platforms", "SaaS systems", "Cloud platforms", "Vulnerability tools", "Production access", "MITRE ATT&CK", "Identity attacks", "Cloud attacks", "Insider threat", "AI agent risk", "SIEM", "SOAR", "Git" ], "skillCount" : 37, "jobCategory" : "other", "jobSubcategory" : "security", "dataQualityScore" : 0.8888889, "daysOld" : 2, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "AI Infrastructure" }, { "id" : "69e104402beec4dd3def2577", "title" : "Security Engineer, AWS Security Incident Response", "company" : "Amazon Web Services", "industry" : "Solutions Architect, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 135000.0, "max" : 195000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Security Engineer in Singapore, adjusted for the technology industry and a large company size." }, "location" : "SGP", "locations" : [ "SGP" ], "certifications" : [ "GCIH", "GSEC", "Security+" ], "timestamp" : "2026-06-15T02:22:21.224", "fingerprint" : "40bb89751ca82072e1830c381dd327c4aca04b10b3800fda172ae2e11fc89203", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10386227/apply", "externalId" : "bf3e3eb2-1460-4e11-bafb-1fe3f4b46363", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "technicalSkills" : "AWS, Amazon GuardDuty, CrowdStrike Falcon, Wiz Defend", "professionalSkills" : [ "Security response", "Threat detection", "Incident response", "Security automation", "Security posture improvement", "Risk assessment", "Vulnerability assessment", "Remediation proposal" ], "hardSkillsList" : [ "Threat analysis", "Security monitoring", "Incident documentation", "Incident reporting", "Auto-remediation capabilities" ], "softSkillsList" : [ "Learning new concepts" ], "hardSkills" : [ { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Incident documentation", "level" : "intermediate" }, { "name" : "Incident reporting", "level" : "intermediate" }, { "name" : "Auto-remediation capabilities", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Learning new concepts" } ], "majorSkills" : "Incident response, Threat detection, Security automation", "majorSkillsList" : [ "Incident response", "Threat detection", "Security automation" ], "coreResponsibilities" : "Respond to threat findings, Identify security threats, Evaluate security threats, Communicate security threats, Propose remediation for security issues, Contribute to security automation development, Contribute to security posture improvements, Track effectiveness of detective controls, Report effectiveness of detective controls, Develop processes for response effectiveness, Develop policies for response effectiveness, Monitor networks for potential threats, Monitor systems for potential threats, Perform triage for security alerts, Document suspicious activity, Report security issues, Perform threat detection, Perform incident response, Detect cyber threats, Mitigate cyber threats, Protect AWS Customers, Learn new technologies, Learn new procedures", "teamCollaboration" : "Work alongside security engineers; Work with partner teams", "domainKnowledge" : "AWS Security; Incident response; Threat monitoring; Detective controls; Protective controls; Attack techniques; Cyber threats", "domainList" : [ "aws-security", "incident-response", "threat-monitoring", "detective-controls", "protective-controls", "attack-techniques", "cyber-threats" ], "domainSpecificKnowledge" : [ "AWS Security", "Incident response", "Threat monitoring", "Detective controls", "Protective controls", "Attack techniques", "Cyber threats" ], "toolProficiency" : [ "CrowdStrike Falcon", "Wiz Defend" ], "communicationSkills" : "Explain technical concepts", "documentationSkills" : "Document suspicious activity", "continuousLearning" : "Learning new concepts; Learning new technologies; Learning new procedures", "problemSolvingSkills" : "Work through ambiguity; Identify suspicious activity", "specialRequirements" : "On-call support, Periodic on-call responsibilities, On-call responsibilities including weekends", "outcomesObjectives" : "Keep customers secure; Increase security response effectiveness; Minimize disruption to customer workloads", "qualificationsBasic" : "Bachelor's degree in Engineering, Experience with web protocols, Experience with common security attacks, Experience with remediation, Knowledge of system, Knowledge of network, Knowledge of OS, Experience solving problems by writing code, Experience solving problems with scripts", "qualificationsPreferred" : "Experience with AWS services, Experience with other cloud offerings, Experience triaging security alerts, Front-line analysis experience, Escalation experience, GCIH certification, GSEC certification, Security+ certification", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Security Incident Response is looking for technical Security Engineers that are passionate about learning new concepts and work well within a team environment to keep customers secure. We value engineers that can work through ambiguity to identify suspicious activity, lead security response, and can explain technical security concepts to non-technical audiences. Key job responsibilities * Respond to threat findings that indicate unauthorized activity has occurred * Identify, evaluate and communicate security threats, risks and vulnerabilities, and propose recommended remediation for security issues. * Contribute to the development of security automation and security posture improvements. * Track and report on the effectiveness of AWS detective controls such as Amazon GuardDuty and partner products such as CrowdStrike Falcon or Wiz Defend * Develop processes and policies to increase security response effectiveness. * On-call support: This role requires periodic on-call responsibilities including weekends. A day in the life As a Security Engineer in AWS Security Incident Response, your responsibilities include monitoring networks and systems for potential threats, performing triage for security alerts, documenting suspicious activity, and reporting issues so they can be adequately handled. You will work alongside our security engineers and partner teams to perform daily threat detection and incident response, using the full capability of AWS technologies and services to detect and mitigate cyber threats at a massive scale and help protect AWS Customers. You should also enjoy learning about the most up-to-date new technologies and procedures to protect information systems and data. About the team AWS Security Incident Response provides 24/7 threat monitoring, investigation, and response across for customer’s AWS environments. The service enhances existing security capabilities by providing security monitoring for all native AWS services and supports vendor agnostic detective and protective controls to provide holistic security controls for customers. This is done by leveraging data on common attack techniques to enhance detective controls and incident response, then building auto-remediation capabilities to minimize disruption to customer workloads. When a security event does happen, you will be there provide guidance. Basic Qualifications: - Bachelor's degree in Engineering, Computer Science, or a related field - Experience with web protocols, common security attacks, and remediation (non-internship) - Knowledge of system, network and OS - Experience solving basic problems by writing code or scripts with some assistance Preferred Qualifications: - Experience with AWS services or other cloud offerings - Experience triaging security alerts, front-line analysis, and escalation - GCIH (GIAC Certified Incident Handler) or GSEC (GIAC Security Essentials) or Security+ Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security Engineer, AWS Security Incident Response at Amazon Web Services. Skills: Incident response, Threat detection, Security automation. Respond to threat findings. Identify security threats", "postedDate" : "2026-06-13T04:14:17.343", "createdAt" : "2026-06-13T04:14:17.343", "lastUpdated" : "2026-06-15T02:22:21.224", "ingestTimestamp" : "2026-06-13T04:14:17.343", "mongoId" : "69e104402beec4dd3def2577", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10386227/apply", "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Threat analysis", "Security monitoring", "Incident documentation", "Incident reporting", "Auto-remediation capabilities", "Learning new concepts", "Incident response", "Threat detection", "Security automation", "Security response", "Security posture improvement", "Risk assessment", "Vulnerability assessment", "Remediation proposal", "AWS Security", "Threat monitoring", "Detective controls", "Protective controls", "Attack techniques", "Cyber threats", "GCIH", "GSEC", "Security+", "CrowdStrike Falcon", "Wiz Defend" ], "skillCount" : 25, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "69e104422beec4dd3def28c0", "title" : "Security Solution Architect", "company" : "Amazon Web Services", "industry" : "Solutions Architect, Solution Architect, Cloud Computing", "salary" : { "min" : 3500000.0, "max" : 5500000.0, "currency" : "PHP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Security Solution Architect in Technology at Amazon Web Services in Taguig City, Philippines, adjusted for seniority and company size." }, "location" : "Taguig City, National Capital Region, PHL", "locations" : [ "Taguig City, National Capital Region, PHL" ], "timestamp" : "2026-06-15T07:51:59.578", "fingerprint" : "288ad5fb6341137690c0f54ade26e8c3d5540bdc399ecdf2e7a5995760a98083", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10385898/apply", "externalId" : "8bc62c08-b3e5-48cc-8de7-eb200db06f12", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Taguig City", "state" : "National Capital Region", "country" : "Philippines", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "14.5270538,121.0744942" } ], "locationText" : "Taguig City, National Capital Region, Philippines", "employmentType" : "FULL_TIME", "experienceMinYears" : 3, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, Cloud computing, Security services", "professionalSkills" : [ "Architecture guidance", "Consulting", "Leadership", "Risk mitigation", "Business strategy", "Product strategy", "Technology strategy", "Cost benefit analysis" ], "hardSkillsList" : [ "Security compliance", "IT systems engineering", "Network engineering", "Infrastructure security", "Application security" ], "softSkillsList" : [ "Public speaking" ], "hardSkills" : [ { "name" : "Security compliance", "level" : "intermediate" }, { "name" : "IT systems engineering", "level" : "intermediate" }, { "name" : "Network engineering", "level" : "intermediate" }, { "name" : "Infrastructure security", "level" : "intermediate" }, { "name" : "Application security", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Public speaking" } ], "majorSkills" : "Security architecture, Cloud security, Compliance", "majorSkillsList" : [ "Security architecture", "Cloud security", "Compliance" ], "coreResponsibilities" : "Deliver architecture guidance, Lead proof-of-concept projects, Conduct customer workshops, Drive collaboration with customers, Drive collaboration with partners, Address security challenges, Address compliance challenges, Own technical engagement, Ensure project success, Facilitate AWS platform use, Facilitate AWS platform adoption, Develop AWS security expertise, Develop application security know-how, Develop service security know-how, Represent AWS in customer environments, Drive discussions on trade-offs, Drive discussions on best practices, Drive discussions on risk mitigation, Educate customers on cloud, Train customers on cloud, Design cloud computing systems, Build cloud computing systems, Keep technical skills current, Develop new technical skills, Contribute to architecture discussions, Create security solutions", "teamCollaboration" : "Cross-organizationally; Customer environments; Partner environments", "domainKnowledge" : "Enterprise risk management; Cloud computing; Large scale cloud; Application security; Service security; Infrastructure security; SAP systems; SAP architecture; SAP infrastructure; SAP S/4HANA; SAP Cloud Platform; SAP Cloud ERP; Cloud ERP Private; SAP clean core design", "domainList" : [ "enterprise-risk-management", "cloud-computing", "large-scale-cloud", "application-security", "service-security", "infrastructure-security", "sap-systems", "sap-architecture", "sap-infrastructure", "sap-s-4hana", "sap-cloud-platform", "sap-cloud-erp", "cloud-erp-private", "sap-clean-core-design" ], "domainSpecificKnowledge" : [ "Enterprise risk management", "Cloud computing", "Large scale cloud", "Application security", "Service security", "Infrastructure security", "SAP systems", "SAP architecture", "SAP infrastructure", "SAP S/4HANA", "SAP Cloud Platform", "SAP Cloud ERP", "Cloud ERP Private", "SAP clean core design" ], "communicationSkills" : "Presentations; White boarding; Large group speaking; Small group speaking", "continuousLearning" : "Developing new skills", "innovationCreativity" : "Creative", "problemSolvingSkills" : "Strategic thinking", "qualificationsBasic" : "8+ years technology domain experience, 3+ years design/implementation/consulting experience, 10+ years IT development/implementation/consulting experience", "qualificationsPreferred" : "5+ years infrastructure architecture experience, 5+ years database architecture experience, 5+ years networking experience, Knowledge of SAP systems, Experience working with end user communities, Experience working with developer communities, Experience managing SAP customers, Experience managing SAP partners, Experience in SAP S/4HANA, Experience in SAP Cloud Platform, Experience in SAP Cloud ERP, Experience in Cloud ERP Private, Experience in SAP clean core design, Experience using non-SAP technologies, Experience in Generative AI, Experience in Agentic AI, Experience in data & analytics", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Do you have the passion for helping customers and partners design and create robust security architectures to address their enterprise risk management requirements using cloud computing? Do you enjoy helping customers become more secure across their workloads and assisting them meet compliance accreditation? Would you like to do this using the world’s most advanced cloud computing technologies? Are you one of those rare technologists with the communication, consulting, and leadership skills to help guide major projects to success? The AWS Solutions Architecture team is hiring! Come join the team as a Security Solutions Architect within Amazon Web Services (AWS) ASEAN team. In this role, you will deliver architecture guidance, lead proof-of-concept projects and conduct customer workshops. You will also drive collaboration with customers and partners to address security as well as compliance challenges. Your broad responsibilities will include: owning the technical engagement and ultimate success around specific implementation projects, working cross-organizationally to facilitate widespread use and adoption of the AWS platform, and developing a deep expertise in the AWS security technologies as well as broad know-how around how applications and services are securely constructed using the AWS platform. The ideal candidate will possess customer facing skills that will allow them to represent AWS well within the customer’s environment and drive discussions with senior personnel regarding trade-offs, best practices, and risk mitigation. They should also have a demonstrated ability to think strategically about business, product, and technology challenges. The ideal candidate will look like this… Be great fun to work with. Our company credo is “Work hard. Have fun. Make history”. As the right candidate, you will love what you do, and instinctively know how to make work fun. You will be dynamic and creative, and willing to take on any challenge. Enjoy working with customers of all shapes and sizes. You will have a passion for educating, training, designing, and building cloud computing systems for a diverse and challenging set of customers. Have a strong understanding of large scale cloud computing solutions. The ideal candidate will have past experience working as a security systems engineer or security architect. You will enjoy keeping your existing technical skills and developing new ones, so that you can make strong contributions to deep architecture discussions around securing systems and applications in the cloud. You regularly take part in deep-dive education and design exercises along with technical deep dive drive technical discussions to create world class security solutions for AWS. Sales, Marketing and Global Services (SMGS) AWS Sales, Marketing, and Global Services (SMGS) is responsible for driving revenue, adoption, and growth from the largest and fastest growing small- and mid-market accounts to enterprise-level customers including public sector. The AWS Global Support team interacts with leading companies and believes that world-class support is critical to customer success. AWS Support also partners with a global list of customers that are building mission-critical applications on top of AWS services. Key job responsibilities Candidates should have experience in most of the following areas: - Security Compliance experience – must have strong experience and understanding of customer security/compliance requirements. - Speaking and presentation skills – Presentations, white boarding, large and small group speaking. - Technical – broad and deep knowledge of fundamental security principles and technologies, Security services development/deployment experience, and IT systems and network engineering experience. - Operational Security – should have experience in operationalizing both infrastructure and application security controls - Economic and business – RFP/Acquisition support; market analysis; cost benefit analysis, etc. - Experience in engaging enterprise class environment and complex architecture designs. About the team Diverse Experiences Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Inclusive Team Culture Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness. Mentorship and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Basic Qualifications: - 8+ years of specific technology domain areas (e.g. software development, cloud computing, systems engineering, infrastructure, security, networking, data & analytics) experience - 3+ years of design, implementation, or consulting in applications and infrastructures experience - 10+ years of IT development or implementation/consulting in the software or Internet industries experience Preferred Qualifications: - 5+ years of infrastructure architecture, database architecture and networking experience - Knowledge of SAP systems (like SAP Business Suite, S/4HANA, SAP Business Warehouse, SAP HANA, SAP Business Objects, etc.) and their architecture and infrastructure needs - Experience working with end user or developer communities - Experience managing relationships with SAP customers and partners - Experience in SAP S/4HANA, SAP Cloud Platform, SAP Cloud ERP and Cloud ERP Private - Experience in SAP clean core design concepts, including design and build using non-SAP technologies in domains such as Generative / Agentic AI, and data & analytics Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security Solution Architect at Amazon Web Services. Skills: Security architecture, Cloud security, Compliance. Deliver architecture guidance. Lead proof-of-concept projects", "postedDate" : "2026-06-13T18:59:48.509", "createdAt" : "2026-06-13T18:59:48.509", "lastUpdated" : "2026-06-15T07:51:59.578", "ingestTimestamp" : "2026-06-13T18:59:48.509", "mongoId" : "69e104422beec4dd3def28c0", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10385898/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Security compliance", "IT systems engineering", "Network engineering", "Infrastructure security", "Application security", "Public speaking", "Security architecture", "Cloud security", "Compliance", "Architecture guidance", "Consulting", "Leadership", "Risk mitigation", "Business strategy", "Product strategy", "Technology strategy", "Cost benefit analysis", "Enterprise risk management", "Cloud computing", "Large scale cloud", "Service security", "SAP systems", "SAP architecture", "SAP infrastructure", "SAP S/4HANA", "SAP Cloud Platform", "SAP Cloud ERP", "Cloud ERP Private", "SAP clean core design" ], "skillCount" : 29, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c68fa74d8ee00a0905806", "title" : "Senior Incident Response Specialist, Cyber Security", "industry" : "Cygnify", "salary" : { "min" : 120000.0, "max" : 180000.0, "currency" : "MYR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Incident Response Specialist in Kuala Lumpur, Malaysia, adjusted for the cybersecurity industry and senior experience level." }, "location" : "Kuala Lumpur, Malaysia", "locations" : [ "Kuala Lumpur, Malaysia" ], "timestamp" : "2026-06-16T02:39:21.304", "fingerprint" : "d361c038e80e7ee25f06c2708e696babafce6881749e9a55b1eb9bfeb96da610", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/cygnify/f8691c89-168e-4178-9678-8a9d39b9914d/application", "externalId" : "f8691c89-168e-4178-9678-8a9d39b9914d", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Kuala Lumpur", "country" : "Malaysia", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "3.1516964,101.6942371" } ], "locationText" : "Kuala Lumpur, Malaysia", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Elastic Stack, SIEM, Cloud", "professionalSkills" : [ "Incident triage", "Log analysis", "Root cause analysis", "Use case improvements", "Detection quality", "Incident handling", "Evidence collection", "Detection workflows", "Readiness enhancement", "Log source onboarding" ], "hardSkillsList" : [ "Security alerts", "Security events", "Malware investigation", "Phishing investigation", "Insider threats", "Cloud breaches", "Detection rule creation", "Threat hunting", "Compliance reporting", "Audit support", "Simulation exercises", "Tabletop exercises" ], "hardSkills" : [ { "name" : "Security alerts", "level" : "intermediate" }, { "name" : "Security events", "level" : "intermediate" }, { "name" : "Malware investigation", "level" : "intermediate" }, { "name" : "Phishing investigation", "level" : "intermediate" }, { "name" : "Insider threats", "level" : "intermediate" }, { "name" : "Cloud breaches", "level" : "intermediate" }, { "name" : "Detection rule creation", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Compliance reporting", "level" : "intermediate" }, { "name" : "Audit support", "level" : "intermediate" }, { "name" : "Simulation exercises", "level" : "intermediate" }, { "name" : "Tabletop exercises", "level" : "intermediate" } ], "majorSkills" : "Incident Response, Cyber Security, SIEM platform", "majorSkillsList" : [ "Incident Response", "Cyber Security", "SIEM platform" ], "coreResponsibilities" : "Monitor security alerts, Investigate security alerts, Analyze security incidents, Contain security incidents, Escalate security incidents, Tune SIEM rules, Suggest new detections, Analyze logs, Correlate logs, Create incident documentation, Maintain incident documentation, Create incident reports, Maintain incident reports, Create lessons learned, Maintain lessons learned, Support playbook execution, Remediate incidents, Perform root cause analysis, Provide use case insights, Validate use cases, Test use cases, Escalate confirmed incidents, Participate in reviews, Improve processes, Improve detections, Validate security events, Identify legitimate threats, Investigate malware incidents, Investigate phishing incidents, Investigate insider threats, Investigate cloud breaches, Assist in rule creation, Assist in rule tuning, Map MITRE ATT&CK, Improve detection quality, Hunt threats, Handle incidents, Collect evidence, Document incidents, Support compliance, Support audits, Contribute to automation, Participate in training, Participate in simulations, Participate in exercises, Onboard log sources, Manage log availability", "teamCollaboration" : "Collaborate with IT; Collaborate with network; Collaborate with application teams; Collaborate with MSSP; Collaborate with CSIRT; Collaborate with IT infrastructure", "domainKnowledge" : "Cyber resilience; MITRE ATT&CK; Cloud breaches; Insider threats; Malware; Phishing", "domainList" : [ "cyber-resilience", "mitre-att-ck", "cloud-breaches", "insider-threats", "malware", "phishing" ], "domainSpecificKnowledge" : [ "Cyber resilience", "MITRE ATT&CK", "Cloud breaches", "Insider threats", "Malware", "Phishing" ], "toolProficiency" : [ "Elastic Stack", "SIEM" ], "documentationSkills" : "Incident documentation; Incident reports; Lessons learned; Evidence collection; Compliance documentation; Audit documentation", "continuousLearning" : "Training sessions; Simulations; Tabletop exercises", "innovationCreativity" : "Automation opportunities", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Ensure timely response; Maintain cyber resilience; Align with MTTD goals; Align with MTTR goals", "qualificationsBasic" : "Perform deep-dive investigations, Conduct threat hunting, Support incident response reporting, Manage continuous logs availability", "qualificationsPreferred" : "MITRE ATT&CK mapping, Automation opportunities", "rawDescription" : "Role Mission The Senior Analyst - Cyber Security Incident Response is responsible for monitoring, detecting, and analyzing cybersecurity incidents through the Security Operations Centre (SOC) platform. The role supports the end-to-end incident lifecycle — including triage, investigation, containment, and closure — ensuring timely response to security events and maintaining cyber resilience. This role acts as the Level 2 (L2) Incident Responder, bridging SOC analysts and Incident Response management by performing deep technical analysis and coordinating with internal teams for resolution. Accountabilities: - Perform end-to-end incident triage and investigation of security alerts escalated from L1 SOC analysts. - Ensure timely incident analysis, containment, and escalation aligned with MTTD and MTTR goals. - Support the SIEM platform (Elastic Stack) by fine-tuning existing rules and suggesting new detections. - Conduct log analysis and correlation across multiple data sources (network, endpoint, and cloud). - Create and maintain incident documentation, reports, and lessons learned. - Support incident response playbook execution during containment and recovery phases. - Collaborate with IT, network, and application teams for incident remediation and root cause analysis. - Provide insights for use case improvements and participate in use case validation and testing. - Escalate confirmed incidents to CSIRT / Assistant Manager - Incident Response for further action. - Participate in post-incident reviews, contributing to process and detection improvements. - Monitor alerts generated from the SOC/SIEM and perform initial to intermediate-level investigations. - Review and validate security events from multiple log sources and identify legitimate threats. - Perform deep-dive investigations for incidents involving malware, phishing, insider threats, and cloud breaches. - Assist in detection rule creation and tuning under the guidance of senior incident responders. - Use frameworks like MITRE ATT&CK for mapping and improving detection quality. - Conduct threat hunting using Elastic Stack and related tools. - Collaborate with MSSP, CSIRT, and IT infrastructure teams to ensure timely incident handling. - Support incident response reporting, evidence collection, and documentation for compliance and audit. - Contribute to automation opportunities in detection and response workflows. - Participate in training sessions, simulations, and tabletop exercises to enhance readiness. - Responsible for the log source onboarding and managing the continuous logs availability on the SIEM platform. Requirements - Monitor alerts generated from the SOC/SIEM and perform initial to intermediate-level investigations. - Review and validate security events from multiple log sources and identify legitimate threats. - Perform deep-dive investigations for incidents involving malware, phishing, insider threats, and cloud breaches. - Assist in detection rule creation and tuning under the guidance of senior incident responders. - Use frameworks like MITRE ATT&CK for mapping and improving detection quality. - Conduct threat hunting using Elastic Stack and related tools. - Collaborate with MSSP, CSIRT, and IT infrastructure teams to ensure timely incident handling. - Support incident response reporting, evidence collection, and documentation for compliance and audit. - Contribute to automation opportunities in detection and response workflows. - Participate in training sessions, simulations, and tabletop exercises to enhance readiness. - Responsible for the log source onboarding and managing the continuous logs availability on the SIEM platform. #LI-JE1", "summaryDescription" : "Senior Incident Response Specialist, Cyber Security. Skills: Incident Response, Cyber Security, SIEM platform. Monitor security alerts. Investigate security alerts", "createdAt" : "2026-06-14T19:11:17.518", "lastUpdated" : "2026-06-16T02:39:21.304", "ingestTimestamp" : "2026-06-14T19:11:17.518", "mongoId" : "6a2c68fa74d8ee00a0905806", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Security alerts", "Security events", "Malware investigation", "Phishing investigation", "Insider threats", "Cloud breaches", "Detection rule creation", "Threat hunting", "Compliance reporting", "Audit support", "Simulation exercises", "Tabletop exercises", "Incident Response", "Cyber Security", "SIEM platform", "Incident triage", "Log analysis", "Root cause analysis", "Use case improvements", "Detection quality", "Incident handling", "Evidence collection", "Detection workflows", "Readiness enhancement", "Log source onboarding", "Cyber resilience", "MITRE ATT&CK", "Malware", "Phishing", "Elastic Stack", "SIEM" ], "skillCount" : 31, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "68b706967fc9a711f0f6f0fc", "title" : "Sr. Security Engineer, AWS Cloud Security Response", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 143300.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T02:44:36.234", "fingerprint" : "8a7a3fd9386f46352c27b51d967635462826361466b369c04fe4a00251d6e89c", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3051891/apply", "externalId" : "2298684c-4600-4216-9042-5f7f5e39f8c6", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, Bash scripting, PowerShell scripting, Python scripting, Linux, Unix", "professionalSkills" : [ "Risk assessment", "Information security", "Network security", "Operating system security", "Cryptography", "Software security", "Security operations", "Incident response", "Security intelligence", "Troubleshooting", "System design", "Virtualization technologies" ], "hardSkillsList" : [ "Scripting", "Coding", "Network security", "Operating system security", "Cryptography", "Software security", "Security operations", "Incident response", "Security intelligence", "Troubleshooting", "System design", "Virtualization technologies" ], "softSkillsList" : [ "Leadership", "Mentoring", "Critical thinking" ], "hardSkills" : [ { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Coding", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Operating system security", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" }, { "name" : "Software security", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security intelligence", "level" : "intermediate" }, { "name" : "Troubleshooting", "level" : "intermediate" }, { "name" : "System design", "level" : "intermediate" }, { "name" : "Virtualization technologies", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" }, { "name" : "Critical thinking" } ], "majorSkills" : "Cloud Security, Incident Response, Security Engineering, AWS", "majorSkillsList" : [ "Cloud Security", "Incident Response", "Security Engineering", "AWS" ], "coreResponsibilities" : "Manage security and availability of AWS Cloud services, Operate on the ‘AWS’ side of the Shared, Protect customers, Work tactically with internal and external stakeholders, Solve security challenges at massive scale, Think strategically to develop and implement changes, Drive automation, Drive scalability, Drive continuous progress, Assess technical vs. business risks, Drive internal engineering teams to take the right, Mitigate risks, Triage/assess security issues, Engage with internal service teams, Ensure prompt remediation of issues, Escalate internally as necessary, Ensure the right level of urgency and engagement, Participate in efforts to promote security throughout the, Build good working relationships within the team, Build good working relationships with others across Amazon, Develop pragmatic solutions that achieve business requirements, Keep an acceptable level of risk, Help with recruiting activities, Help with administrative work, Mentoring of junior staff, Proactive knowledge sharing within the team, Proactive knowledge sharing across the company, Fulfill regular on-call responsibilities, Supply oversight of in-flight security issues, Triage new incoming issues, Determine the level of risk, Prioritize remediation, Communicate the state of these issues to various, Escalate issues to senior AWS leadership, Explore building and improving our tooling, Share tooling benefits with all our engineers globally, Take handover from the previous site, Be delegated ownership of various security issues, Learn on the go, Engage various stakeholders, Triage new issues, Determine impact level, Work towards resolving them, Document all issues you are tracking", "teamCollaboration" : "Internal stakeholders; External stakeholders; Internal service teams; Senior leadership; Partner teams; Other AWS teams", "projectManagementSkills" : [ "Prioritize multiple tasks", "Manage projects" ], "domainKnowledge" : "AWS Cloud Security; Shared Responsibility Model; Cloud computing; Network security; Operating system security; Cryptography; Software security; Security operations; Incident response; Security intelligence; Web protocols; Linux architecture; Unix architecture", "domainList" : [ "aws-cloud-security", "shared-responsibility-model", "cloud-computing", "network-security", "operating-system-security", "cryptography", "software-security", "security-operations", "incident-response", "security-intelligence", "web-protocols", "linux-architecture", "unix-architecture" ], "domainSpecificKnowledge" : [ "AWS Cloud Security", "Shared Responsibility Model", "Cloud computing", "Network security", "Operating system security", "Cryptography", "Software security", "Security operations", "Incident response", "Security intelligence", "Web protocols", "Linux architecture", "Unix architecture" ], "toolProficiency" : [ "AWS", "Linux tools", "Unix tools" ], "communicationSkills" : "Oral communication; Written communication; Communicate to leadership", "continuousLearning" : "Learn on the go", "innovationCreativity" : "Develop pragmatic solutions; Explore building and improving tooling", "problemSolvingSkills" : "Troubleshooting; Critical thinking; Creative thinking; Root cause analysis", "specialRequirements" : "On-call responsibilities", "outcomesObjectives" : "Ensure security of the Cloud; Mitigate risks; Drive automation; Drive scalability; Drive continuous progress; Ensure prompt remediation of issues; Achieve business requirements; Keep acceptable level of risk; Ensure customers are put first", "qualificationsBasic" : "BS degree in Computer Science, Computer Engineering, Electrical Engineering, or 3+ years’ equivalent technology experience, 3+ years or more of proven experience with a focus in areas such as systems, network, and/or application security", "qualificationsPreferred" : "2+ years of scripting/coding experience in any language, Previous experience in Python scripting would be ideal, Understanding and experience with implementation of best practices across multiple security disciplines/domains, Strong, proven knowledge of virtualization technologies (AWS preferred), Demonstrated ability to collaborate/develop partnerships with partner teams, work autonomously with a Bias for Action, employ critical and creative thinking, Maturity, judgment, negotiation/influence skills, analytical skills, and leadership skills, Ability to prioritize multiple tasks and projects in a dynamic environment", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The AWS Cloud Security Response team manages the security and availability of AWS Cloud services. We operate on the ‘AWS’ side of the Shared Responsibility Model to ensure “Security of the Cloud” and to protect our customers. This role requires engineers to work tactically with both internal and external stakeholders to solve security challenges at massive scale, and to think strategically to develop and implement changes to drive automation, scalability and continuous progress for the organization. We’re looking for talented software and systems professionals with a passion for security who thrive in high energy environments to help us continue to raise the security bar for cloud computing. Successful candidates should: - be able to assess technical vs. business risks and consistently drive internal engineering teams to take the right actions in the appropriate time frames to mitigate risks. - have a good mix of broad and deep technical knowledge and a demonstrated background in information security. - be technically proficient in the fields of network and operating system security, cryptography, software security, security operations, incident response, and emergent security intelligence. - possess a combination of troubleshooting, technical, and communication skills, as well as the ability to manage a mix of disparate tasks which may include small-project and software development work. - be comfortable challenging and escalating to senior leadership to always ensure the best outcome for customers. An ideal candidate should be able to conduct most of the following: - Triage/assess security issues and engage with internal service teams to ensure prompt remediation of issues, escalating internally as necessary to ensure the right level of urgency and engagement. - Participate in efforts to promote security throughout the Company and build good working relationships within the team and with others across Amazon. - Demonstrate high ability and tolerance for frequent context switching and interruptions while staying productive and effective. - Develop pragmatic solutions that achieve business requirements while keeping an acceptable level of risk. - Help with recruiting activities and administrative work. - Mentoring of junior staff and proactive knowledge sharing within the team and across the company. - Fulfill regular on-call responsibilities. #SecOps Key job responsibilities - Supply oversight of in-flight security issues. - Triage new incoming issues to determine the level of risk they present to AWS, and then accordingly prioritize its remediation in conjunction with the impacted service team. - Communicate the state of these issues to various audiences, both technical and non-technical, at various levels of seniority (up to and including AWS’ Chief Information Security Officer). - Escalate issues to senior AWS leadership if you feel your issues are not being treated at the correct pace due to their impact to ensure that we are putting customers first. - Explore building and improving our tooling to make your own life easier, and at the same time, sharing that benefit with all our engineers globally. A day in the life In the morning you will take handover from the previous site and be delegated ownership of various security issues presently in-flight. The issues could relate to any of our many products, so you will often need to learn on the go. You will engage various stakeholders, such as the internal service team who actually needs to fix the issue, along with AWS Security Leadership, Legal, and the leadership from the impacted service team. As the day progresses, new issues will be automatically assigned to you based on your workload and you will be responsible for triaging them, determining their level of impact, and work towards resolving them at the appropriate pace. We staff a \"follow the sun\" on-call model from multiple geographic locations. At the end of the day, you will document all the issues you are tracking so they can be taken over by the next shift. About the team Cloud Response is a team inside AWS Security Operations. This team is broadly responsible for the 'AWS' side of the Shared Responsibility Model, and provides oversight of security issues from their identification through to resolution. Cloud Response operates follow-the-sun with teams based around four different geographical locations. We work with other AWS teams, to ensure security issues are resolved with the right level of urgency, whilst ensuring that our stakeholders are kept into the loop. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - BS degree in Computer Science, Computer Engineering, Electrical Engineering, or 3+ years’ equivalent technology experience. - 3+ years or more of proven experience with a focus in areas such as systems, network, and/or application security. Preferred Qualifications: - 2+ years of scripting/coding experience in any language (including Bash/PowerShell scripting). Previous experience in Python scripting would be ideal. - Understanding and experience with implementation of best practices across multiple security disciplines/domains. - Strong, proven knowledge of virtualization technologies (AWS preferred), web protocols, common attacks, and Linux/Unix tools and architecture. - Demonstrated ability to collaborate/develop partnerships with partner teams, work autonomously with a Bias for Action, and employ critical and creative thinking. - Maturity, judgment, negotiation/influence skills, analytical skills, and leadership skills. - Ability to prioritize multiple tasks and projects in a dynamic environment. - Effective written and oral communication with multiple levels of leadership involving both business and technical sides of the business. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Sr. Security Engineer, AWS Cloud Security Response at Amazon.com Services LLC. Skills: Cloud Security, Incident Response, Security Engineering, AWS. Manage security and availability of AWS Cloud services. Operate on the ‘AWS’ side of the Shared", "postedDate" : "2026-06-13T05:32:27.074", "createdAt" : "2026-06-13T05:32:27.074", "lastUpdated" : "2026-06-15T02:44:36.234", "ingestTimestamp" : "2026-06-13T05:32:27.074", "mongoId" : "68b706967fc9a711f0f6f0fc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3051891/apply", "salaryAnnualMin" : 143300, "salaryAnnualMax" : 247600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Scripting", "Coding", "Network security", "Operating system security", "Cryptography", "Software security", "Security operations", "Incident response", "Security intelligence", "Troubleshooting", "System design", "Virtualization technologies", "Leadership", "Mentoring", "Critical thinking", "Cloud Security", "Incident Response", "Security Engineering", "AWS", "Risk assessment", "Information security", "Prioritize multiple tasks", "Manage projects", "AWS Cloud Security", "Shared Responsibility Model", "Cloud computing", "Web protocols", "Linux architecture", "Unix architecture", "Linux tools", "Unix tools" ], "skillCount" : 31, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "694ae6ce70f0b99d589b27dd", "title" : "Sr. Cloud Security Architect", "company" : "Hyundai Capital America", "location" : "United States-Texas-Plano", "locations" : [ "United States-Texas-Plano", "
Dallas, TX (HCA_DallasTX)
6100 W. Plano Parkway, Suite 2000
Suite 2000
Plano, 75093

" ], "timestamp" : "2026-06-15T06:59:07.829", "fingerprint" : "0ee2df7efadcb13fe21cf01235418393eb1d72cc119588ed2bdf8d18d1e04e72", "source" : "taleo", "applyUrl" : "https://hyundaicapital.taleo.net/careersection/ex/jobdetail.ftl?job=107963", "externalId" : "107963", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Plano", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite" } ], "locationText" : "Plano, Texas, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor", "experienceMinYears" : 8, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, OCI, GCP, M365, Salesforce, AI/ML, generative AI, IAM, encryption, PCI DSS, GDPR, Korean SOX, FFIEC, NYDFS", "professionalSkills" : [ "Experience in financial services with an understanding of financial threats (e.g., fraud, data breaches) and regulations (e.g., PCI DSS, Korean SOX, GDPR). Expertise in cloud security architecture or engineering roles designing secure cloud-native systems." ], "hardSkillsList" : [ "CISSP", "CCSP", "CISM", "TOGAF", "Microsoft Azure Security Engineer", "Microsoft 365 Security" ], "softSkillsList" : [ "strategic technical leader, subject matter expert" ], "hardSkills" : [ { "name" : "CISSP", "level" : "intermediate" }, { "name" : "CCSP", "level" : "intermediate" }, { "name" : "CISM", "level" : "intermediate" }, { "name" : "TOGAF", "level" : "intermediate" }, { "name" : "Microsoft Azure Security Engineer", "level" : "intermediate" }, { "name" : "Microsoft 365 Security", "level" : "intermediate" } ], "softSkills" : [ { "name" : "strategic technical leader, subject matter expert" } ], "majorSkills" : "Cloud Security Architecture, Zero Trust, Risk Assessment", "majorSkillsList" : [ "Cloud Security Architecture, Zero Trust, Risk Assessment" ], "coreResponsibilities" : "The Sr. Cloud Security Architect designs and implements secure cloud architecture across AWS, OCI, GCP, and other platforms, ensuring IaaS, PaaS, and SaaS solutions align with cybersecurity standards and Zero Trust principles. This role involves assessing and securing cloud environments, leading threat modeling, and providing guidance for security operations and incident response. The architect also collaborates with cross-functional teams to integrate security into digital transformation initiatives and ensures compliance with financial regulations.", "teamCollaboration" : "Partners with IT Infrastructure and IT Application teams, DevOps, IAM, DLP, Security Operations, Information Protection Governance, and business units to integrate security into digital transformation initiatives. Mentors junior architects and engineers, sharing best practices and fostering a culture of security awareness.", "toolProficiency" : [ "Microsoft 365, CSPM, CWPP, CIEM, SIEM, SOAR, Splunk SOAR, Palo Alto Cortex" ], "communicationSkills" : "executive communication; Knowledge Sharing", "documentationSkills" : "architecture diagrams; design documents; standards; runbooks", "continuousLearning" : "Researches and evaluates emerging cybersecurity technologies (e.g., AI-driven threat detection, PasswordLess authentication) to enhance architectural resilience and efficiency. Mentors junior architects and engineers, sharing best practices.", "innovationCreativity" : "Drives automation and infrastructure-as-code (IaC) practices. Designs automated security workflows using tools like SOAR platforms. Influences strategic decisions around cloud adoption, migration, and modernization with a security-first mindset.", "problemSolvingSkills" : "root cause analysis; risk assessments", "specialRequirements" : "Must be authorized to work in the US. Location: United States-Texas-Plano.", "outcomesObjectives" : "Ensures enterprise cloud environments are resilient, compliant, and aligned with cybersecurity standards. Integrates security into digital transformation initiatives. Develops metrics to validate architectural effectiveness and drive continuous improvement.", "qualificationsBasic" : "Minimum 8 years of progressive experience in cybersecurity with proven knowledge in cloud security architecture or engineering role designing secure cloud native systems. 3+ years of experience in financial services. Bachelor’s degree in computer science, Information Security, or related field. Hands-on experience architecting secure network, cloud, and SaaS environments in complex, regulated industries. Hands-on security testing experience in cloud platforms, especially AWS and M365.", "qualificationsPreferred" : "Master’s degree preferred. At least one of the following: CISSP, CCSP, CISM, TOGAF, or equivalent. Cloud security certifications such as: AWS Certified Security - Specialty, Microsoft Azure Security Engineer, Microsoft 365 Security, Google Professional Cloud Security Engineer, or other comparable certifications.", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Who We Are Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 2 million consumers and businesses. Embodying our commitment to grow, innovate, and diversify, we strive to reimagine the customer and dealer experience and launch innovative new products that broaden our market reach. We believe that success comes from within and are proud to support our team members through skill development and career advancement. Hyundai Capital America is an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce. We are a values-driven company dedicated to supporting both internal and external communities through volunteering, philanthropy, and the empowerment of our Employee Resource Groups. Together, we strive to be the leader in financing freedom of movement. We Take Care of Our People Along with competitive pay, as an employee of HCA, you are eligible for the following benefits: ·         Medical, Dental and Vision plans that include no-cost and low-cost plan options ·         Immediate 401(k) matching and vesting ·         Vehicle purchase and lease discounts plus monthly vehicle allowances ·         Paid Volunteer Time Off with company donation to a charity of your choice ·         Tuition reimbursement What to Expect The Sr. Cloud Security Architect is a strategic technical leader responsible for designing and implementing secure cloud architecture across multiple platforms and service models. This role ensures that enterprise cloud environments—including SaaS, PaaS, and IaaS—are resilient, compliant, and aligned with cybersecurity standards. The architect will work closely with the IT Infrastructure Platform team to integrate security into infrastructure services and cloud-native platforms, including securing the Microsoft 365 (M365) ecosystem. This role will champion the adoption of Zero Trust principles and industry best practices, working cross-functionally to elevate the organization’s cloud security posture. What You Will Do 1.       Cloud Security Architecture & Design: ·         Design Secure Cloud Infrastructure Environments: design and implement secure cloud architecture across AWS, OCI, GCP and other platforms. ·         Assess and Secure IaaS, PaaS, SaaS solutions: Identify cybersecurity risk and remediation activities to ensure our SaaS solutions such a Salesforce, M365, and other solutions are aligned with industry’s best practices to ensure the security of our data stored and processed within these services. ·         Secure AI Utilization : design and implement security controls for AI/ML workloads in cloud environments, including securing model training pipelines, protecting sensitive data, and mitigating risks associated with adversarial AI, model drift, and generative AI misuse. ·         Develop reference architectures and security patterns that align with Zero Trust principles. ·         Lead threat modeling and risk assessments for cloud and hybrid workloads. 2.       Cloud Security Engineering, Implementation and Operations Support: ·         Cloud Security Solution Management: manage and monitor our cloud native security solutions and monitoring tools to ensure optimal performance and visibility. ·         Provide Support and Guidance for Security Operations: Provide technical leadership and guidance to our Security ops teams and lead incident responses related to Cloud security events. ·         Review, monitor and Optimize: review current Cloud solution implementations, optimize cloud security utilization and improve efficiency and integration when possible. Create continuous monitoring of Cloud Security Compliance. ·         Collaborate with infrastructure and DevOps teams to implement security controls including IAM, encryption, segmentation, and monitoring. ·         Integrate cloud security tools (CSPM, CWPP, CIEM) into CI/CD pipelines and runtime environments. ·         Drive automation and infrastructure-as-code (IaC) practices using tools. ·         Define cloud security monitoring requirements and integrate with SIEM and SOAR platforms. ·         Support incident response and forensic investigations related to cloud and hybrid environments. ·         Conduct root cause analysis and recommend architectural improvements to prevent recurrence. 3.       Collaboration and Innovation: ·         Cross-Functional Collaboration: Partner with IT Infrastructure and IT Application teams, DevOps, IAM, DLP, Security Operations, Information Protection Governance and business units to integrate security into digital transformation initiatives, such as cloud migrations, fintech innovations, and core banking systems. ·         Technology Evaluation: Research and evaluate emerging cybersecurity technologies (e.g., AI-driven threat detection, PasswordLess authentication) to enhance architectural resilience and efficiency. ·         Automation and Orchestration: Design automated security workflows using tools like SOAR platforms (e.g., Splunk SOAR, Palo Alto Cortex) to improve incident response and operational efficiency. ·         Knowledge Sharing: Mentor junior architects and engineers, sharing best practices and fostering a culture of security awareness across the organization . ·         Act as a subject matter expert (SME) for cloud and hybrid security across the enterprise. ·         Influence strategic decisions around cloud adoption, migration, and modernization with a security-first mindset. 4.       Compliance and Regulatory Alignment: ·         Regulatory Compliance: Ensure cloud security architecture meets financial regulations (e.g., PCI DSS, GDPR, Korean SOX, FFIEC, NYDFS) through secure design, documentation, and audit-ready configurations. ·         Policy Development: Contribute to the development of cybersecurity policies and standards, ensuring architectural designs align with regulatory and organizational requirements. ·         Vendor Evaluation: Assess third-party vendors and Managed Security Service Providers (MSSPs) for compatibility with architectural designs and compliance needs ·         Promote and enforce industry best practices for cloud security architecture, operations, and governance. 5.       Documentation and Reporting: ·         Architecture Documentation: Create and maintain detailed architectural diagrams, design documents, standards and runbooks to support implementation, audits, and incident response. ·         Executive Communication: Present architectural designs, risk assessments, and recommendations to the Director of Cybersecurity, CISO, and senior leadership, articulating business impacts. ·         Metrics and Validation: Develop metrics to validate architectural effectiveness (e.g., threat detection coverage, compliance adherence) and drive continuous improvement. What You Will Bring ·         Minimum 8 years progressive experience in cybersecurity with proven knowledge in cloud security architecture or engineering role designing secure cloud native systems. ·         3+ years of experience in financial services, with a strong understanding of financial threats (e.g., fraud, data breaches) and regulations (e.g., PCI DSS, Korean SOX, GDPR). ·         Hands-on experience architecting secure network, cloud, and SaaS environments in complex, regulated industries. ·         Bachelor’s degree in computer science, Information Security, or related field; Master’s degree preferred ·         At least one of the following: CISSP, CCSP, CISM, TOGAF, or equivalent. ·         Hands-on security testing experience in cloud platforms, especially AWS and M365. ·         Cloud security certifications such as: o    AWS Certified Security - Specialty o    Microsoft Azure Security Engineer o    Microsoft 365 Security o    Google Professional Cloud Security Engineer o    Other comparable certifications. Technical Skills : ·         Technical expert with deep experience in financial services, a strategic mindset, and the ability to align cybersecurity architecture with business objectives. ·         Expertise in network security (e.g., NGFW, IDS/IPS, VPNs) and cloud security (AWS, Azure, Google Cloud, Oracle Cloud) ·         Proficiency in Microsoft 365 Security Tools : Microsoft Defender, Intune, Azure AD (Entra), ADFS ·         Knowledge of security frameworks such as NIST, ISO 27001, and COBIT. ·         Strong knowledge of Cloud Native Security solutions and monitoring technology – (AWS CloudTrail, SecurityHub, GuardDuty) ·         Experience with secure software development lifecycles (SDLC) and DevSecOps practices. ·         Familiarity with automation and scripting (e.g., Python, PowerShell, Terraform) for infrastructure-as-code and security orchestration. ·         Hands-on experience with cloud security posture management (CSPM) and workload protection platforms. ·         Proficiency in IAM frameworks (RBAC, MFA, PAM) and DLP technologies (data classification, policy enforcement). ·         Strong knowledge of SIEM (e.g., Splunk), SOAR, and threat intelligence platforms for architectural integration. ·         Deep experience in the design and implementation of robust security architectures for SaaS platforms, ensuring secure integration, data protection, and compliance with industry standards such as SOC 2, ISO 27001, and others. ·         Experience designing and implementing security controls for AI/ML workloads in cloud environments. ·         Knowledge of financial systems (e.g., core banking platforms, payment gateways) and their security requirements. Soft Skills : ·         Strong problem-solving skills to address complex architectural challenges. ·         Excellent communication skills to articulate technical concepts to technical and non-technical stakeholders. ·         Strategic thinker with the ability to align cybersecurity architectures with business and regulatory goals. Preferred ·         Experience with AI-driven cybersecurity tools (e.g., ReliaQuest GreyMatter, Rapid7, etc.) for threat detection and response. ·         Familiarity with zero-trust architectures and emerging technologies, such as SASE or decentralized identity. ·         Knowledge of data encryption, tokenization, and secure API design for financial applications. ·         Experience working with MSSPs to integrate external security services. ·         Understanding of threat modeling frameworks. Work Environment Employees in this class are subject to extended periods of sitting, standing, and walking, vision to monitor and moderate noise levels. Work is performed in an at home and office environment. The posted salary range for this job takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; geographic location, and other business and organizational needs. Successful candidates may be hired anywhere in the salary range based on these factors. It is uncommon to hire candidates at or near the top of the range. California Privacy Notice This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here . This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used, and whether that information is sold or shared, so that you can exercise meaningful control over our use of your personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (“CCPA”). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at Privacy2@hcs.com . United States-Texas-Plano", "summaryDescription" : "Sr. Cloud Security Architect at Hyundai Capital America. Skills: Cloud Security Architecture, Zero Trust, Risk Assessment. The Sr. Cloud Security Architect designs and implements secure cloud architecture across AWS, OCI, GCP, and other platforms, ensuring IaaS, PaaS, and SaaS solutions align with cybersecurity standards and Zero Trust principles. This role involves assessing and securing cloud environments, leading threat modeling, and providing guidance for security operations and incident res", "createdAt" : "2026-06-14T18:49:07.143", "lastUpdated" : "2026-06-15T06:59:07.829", "ingestTimestamp" : "2026-06-14T18:49:07.143", "mongoId" : "694ae6ce70f0b99d589b27dd", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "hasSalary" : false, "allSkills" : [ "CISSP", "CCSP", "CISM", "TOGAF", "Microsoft Azure Security Engineer", "Microsoft 365 Security", "strategic technical leader, subject matter expert", "Cloud Security Architecture, Zero Trust, Risk Assessment", "Experience in financial services with an understanding of financial threats (e.g., fraud, data breaches) and regulations (e.g., PCI DSS, Korean SOX, GDPR). Expertise in cloud security architecture or engineering roles designing secure cloud-native systems.", "Microsoft 365, CSPM, CWPP, CIEM, SIEM, SOAR, Splunk SOAR, Palo Alto Cortex" ], "skillCount" : 10, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "69fe94fe4c40e2acd1121916", "title" : "Security Solution Architect", "company" : "Amazon Web Services Korea LLC", "industry" : "Solutions Architect, Solution Architect, Cloud Computing", "salary" : { "min" : 1.05E8, "max" : 1.55E8, "currency" : "KRW", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Security Solution Architect in Seoul, South Korea, adjusted for AWS's size and industry." }, "location" : "Seoul, KOR", "locations" : [ "Seoul, KOR" ], "timestamp" : "2026-06-15T02:17:21.524", "fingerprint" : "d36ab19adaa9717ae34ee13e0e1f9d0e9e8025afa0c531062fd84d4261fc2001", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10414554/apply", "externalId" : "13b7f494-8642-4208-b04d-cdfa781a1409", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seoul", "country" : "South Korea", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "37.5666791,126.9782914" } ], "locationText" : "Seoul, South Korea", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Cloud computing, Systems engineering, Infrastructure, Security, Networking, Data analytics, AWS", "professionalSkills" : [ "Architecture guidance", "Proof-of-concept projects", "Customer workshops", "Risk management", "Compliance accreditation", "Enterprise risk management", "Business challenges", "Product challenges", "Technology challenges", "Cloud computing systems", "Large scale solutions", "Security systems engineering", "Security architecture", "Systems and applications", "Security solutions", "Technical engagement", "Implementation projects", "AWS platform", "AWS security technologies", "Application security controls", "Infrastructure security controls", "Security principles", "Security technologies", "IT systems engineering", "Network engineering", "Operational security", "Cost benefit analysis", "Complex architecture designs" ], "hardSkillsList" : [ "Security Compliance", "Speaking", "Presentation", "White boarding", "Group speaking", "Technical knowledge", "Security services development", "Security services deployment", "Operationalizing controls", "Economic analysis", "Business analysis", "RFP analysis", "Acquisition analysis" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Security Compliance", "level" : "intermediate" }, { "name" : "Speaking", "level" : "intermediate" }, { "name" : "Presentation", "level" : "intermediate" }, { "name" : "White boarding", "level" : "intermediate" }, { "name" : "Group speaking", "level" : "intermediate" }, { "name" : "Technical knowledge", "level" : "intermediate" }, { "name" : "Security services development", "level" : "intermediate" }, { "name" : "Security services deployment", "level" : "intermediate" }, { "name" : "Operationalizing controls", "level" : "intermediate" }, { "name" : "Economic analysis", "level" : "intermediate" }, { "name" : "Business analysis", "level" : "intermediate" }, { "name" : "RFP analysis", "level" : "intermediate" }, { "name" : "Acquisition analysis", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Security Architecture, Cloud Computing, Risk Management, Compliance", "majorSkillsList" : [ "Security Architecture", "Cloud Computing", "Risk Management", "Compliance" ], "coreResponsibilities" : "Deliver architecture guidance, Lead proof-of-concept projects, Conduct customer workshops, Drive collaboration with customers, Drive collaboration with partners, Address security challenges, Address compliance challenges, Own technical engagement, Ensure success of projects, Facilitate use of AWS platform, Facilitate adoption of AWS platform, Develop expertise in AWS security technologies, Develop know-how for secure applications, Develop know-how for secure services, Represent AWS in customer environment, Drive discussions on trade-offs, Drive discussions on best practices, Drive discussions on risk mitigation, Think strategically about business, Think strategically about product, Think strategically about technology, Educate customers on cloud computing, Train customers on cloud computing, Design cloud computing systems, Build cloud computing systems, Keep technical skills current, Develop new technical skills, Contribute to architecture discussions, Secure systems in cloud, Secure applications in cloud, Take part in design exercises, Drive technical discussions, Create security solutions for AWS, Drive revenue for AWS, Drive adoption for AWS, Drive growth for AWS, Engage enterprise class environments, Design complex architectures", "teamCollaboration" : "Cross-organizationally; With customers; With partners", "domainKnowledge" : "Cloud computing; Security principles; Security technologies; IT systems; Network engineering; Operational security; Enterprise architecture", "domainList" : [ "cloud-computing", "security-principles", "security-technologies", "it-systems", "network-engineering", "operational-security", "enterprise-architecture" ], "domainSpecificKnowledge" : [ "Cloud computing", "Security principles", "Security technologies", "IT systems", "Network engineering", "Operational security", "Enterprise architecture" ], "communicationSkills" : "Speaking; Presentation; White boarding; Customer facing skills; Consulting skills", "continuousLearning" : "Developing new skills", "innovationCreativity" : "Creative", "problemSolvingSkills" : "Risk mitigation; Technology challenges", "outcomesObjectives" : "Deliver robust security architectures; Meet compliance accreditation; Create world class security solutions", "qualificationsBasic" : "8+ years technology domain experience, 3+ years design/implementation/consulting, 10+ years IT development/implementation/consulting", "qualificationsPreferred" : "5+ years infrastructure architecture experience, 5+ years database architecture experience, 5+ years networking experience, Experience with end user communities, Experience with developer communities, 5+ years technology domain experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Do you have the passion for helping customers and partners design and create robust security architectures to address their enterprise risk management requirements using cloud computing? Do you enjoy helping customers become more secure across their workloads and assisting them meet compliance accreditation? Would you like to do this using the world’s most advanced cloud computing technologies? Are you one of those rare technologists with the communication, consulting, and leadership skills to help guide major projects to success? The AWS Solutions Architecture team is hiring! Come join the team as a Security Solutions Architect within Amazon Web Services (AWS) APJ team. In this role, you will deliver architecture guidance, lead proof-of-concept projects and conduct customer workshops. You will also drive collaboration with customers and partners to address security as well as compliance challenges. Your broad responsibilities will include: owning the technical engagement and ultimate success around specific implementation projects, working cross-organizationally to facilitate widespread use and adoption of the AWS platform, and developing a deep expertise in the AWS security technologies as well as broad know-how around how applications and services are securely constructed using the AWS platform. The ideal candidate will possess customer facing skills that will allow them to represent AWS well within the customer’s environment and drive discussions with senior personnel regarding trade-offs, best practices, and risk mitigation. They should also have a demonstrated ability to think strategically about business, product, and technology challenges. The ideal candidate will look like this… Be great fun to work with. Our company credo is “Work hard. Have fun. Make history”. As the right candidate, you will love what you do, and instinctively know how to make work fun. You will be dynamic and creative, and willing to take on any challenge. Enjoy working with customers of all shapes and sizes. You will have a passion for educating, training, designing, and building cloud computing systems for a diverse and challenging set of customers. Have a strong understanding of large scale cloud computing solutions. The ideal candidate will have past experience working as a security systems engineer or security architect. You will enjoy keeping your existing technical skills and developing new ones, so that you can make strong contributions to deep architecture discussions around securing systems and applications in the cloud. You regularly take part in deep-dive education and design exercises along with technical deep dive drive technical discussions to create world class security solutions for AWS. AWS Global Sales (AGS) is responsible for driving revenue, adoption, and growth from the largest and fastest growing small- and mid-market accounts to enterprise-level customers including public sector. Key job responsibilities Candidates should have experience in most of the following areas: - Security Compliance experience – must have strong experience and understanding of customer security/compliance requirements. - Speaking and presentation skills – Presentations, white boarding, large and small group speaking. - Technical – broad and deep knowledge of fundamental security principles and technologies, Security services development/deployment experience, and IT systems and network engineering experience. - Operational Security – should have experience in operationalizing both infrastructure and application security controls - Economic and business – RFP/Acquisition support; market analysis; cost benefit analysis, etc. - Experience in engaging enterprise class environment and complex architecture designs. About the team Diverse Experiences Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Inclusive Team Culture Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness. Mentorship and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Basic Qualifications: - 8+ years of specific technology domain areas (e.g. software development, cloud computing, systems engineering, infrastructure, security, networking, data & analytics) experience - 3+ years of design, implementation, or consulting in applications and infrastructures experience - 10+ years of IT development or implementation/consulting in the software or Internet industries experience Preferred Qualifications: - 5+ years of infrastructure architecture, database architecture and networking experience - Experience working with end user or developer communities - 5+ years of specific technology domain areas (e.g. software development, cloud computing, systems engineering, infrastructure, security, networking, data & analytics) experience Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security Solution Architect at Amazon Web Services Korea LLC. Skills: Security Architecture, Cloud Computing, Risk Management, Compliance. Deliver architecture guidance. Lead proof-of-concept projects", "postedDate" : "2026-06-13T12:15:17.911", "createdAt" : "2026-06-13T12:15:17.911", "lastUpdated" : "2026-06-15T02:17:21.524", "ingestTimestamp" : "2026-06-13T12:15:17.911", "mongoId" : "69fe94fe4c40e2acd1121916", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10414554/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Security Compliance", "Speaking", "Presentation", "White boarding", "Group speaking", "Technical knowledge", "Security services development", "Security services deployment", "Operationalizing controls", "Economic analysis", "Business analysis", "RFP analysis", "Acquisition analysis", "Leadership", "Mentoring", "Security Architecture", "Cloud Computing", "Risk Management", "Compliance", "Architecture guidance", "Proof-of-concept projects", "Customer workshops", "Risk management", "Compliance accreditation", "Enterprise risk management", "Business challenges", "Product challenges", "Technology challenges", "Cloud computing systems", "Large scale solutions", "Security systems engineering", "Security architecture", "Systems and applications", "Security solutions", "Technical engagement", "Implementation projects", "AWS platform", "AWS security technologies", "Application security controls", "Infrastructure security controls", "Security principles", "Security technologies", "IT systems engineering", "Network engineering", "Operational security", "Cost benefit analysis", "Complex architecture designs", "Cloud computing", "IT systems", "Enterprise architecture" ], "skillCount" : 50, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "694ae6ce70f0b99d589b27e2", "title" : "Sr. Cloud Security Architect", "company" : "Hyundai Capital America", "salary" : { "min" : 175000.0, "max" : 245000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Sr. Cloud Security Architect in Irvine, United States, adjusted for FinTech industry and company size." }, "location" : "United States-California-Irvine", "locations" : [ "United States-California-Irvine", "
Headquarters 1 (HCA_HQ1)
3161 Michelson Dr. Ste 1900
Irvine, 92612

" ], "timestamp" : "2026-06-16T02:26:31.882", "fingerprint" : "cc52ba78c2d2ef27dd41cf454027decfa81b1e1ba2e81cc1ae3f8407d8cf5446", "source" : "taleo", "language" : "en", "applyUrl" : "https://hyundaicapital.taleo.net/careersection/ex/jobdetail.ftl?job=107943", "externalId" : "107943", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "rawDescription" : "Who We Are Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 2 million consumers and businesses. Embodying our commitment to grow, innovate, and diversify, we strive to reimagine the customer and dealer experience and launch innovative new products that broaden our market reach. We believe that success comes from within and are proud to support our team members through skill development and career advancement. Hyundai Capital America is an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce. We are a values-driven company dedicated to supporting both internal and external communities through volunteering, philanthropy, and the empowerment of our Employee Resource Groups. Together, we strive to be the leader in financing freedom of movement. We Take Care of Our People Along with competitive pay, as an employee of HCA, you are eligible for the following benefits: ·         Medical, Dental and Vision plans that include no-cost and low-cost plan options ·         Immediate 401(k) matching and vesting ·         Vehicle purchase and lease discounts plus monthly vehicle allowances ·         Paid Volunteer Time Off with company donation to a charity of your choice ·         Tuition reimbursement What to Expect The Sr. Cloud Security Architect is a strategic technical leader responsible for designing and implementing secure cloud architecture across multiple platforms and service models. This role ensures that enterprise cloud environments—including SaaS, PaaS, and IaaS—are resilient, compliant, and aligned with cybersecurity standards. The architect will work closely with the IT Infrastructure Platform team to integrate security into infrastructure services and cloud-native platforms, including securing the Microsoft 365 (M365) ecosystem. This role will champion the adoption of Zero Trust principles and industry best practices, working cross-functionally to elevate the organization’s cloud security posture. What You Will Do 1.       Cloud Security Architecture & Design: ·         Design Secure Cloud Infrastructure Environments: design and implement secure cloud architecture across AWS, OCI, GCP and other platforms. ·         Assess and Secure IaaS, PaaS, SaaS solutions: Identify cybersecurity risk and remediation activities to ensure our SaaS solutions such a Salesforce, M365, and other solutions are aligned with industry’s best practices to ensure the security of our data stored and processed within these services. ·         Secure AI Utilization : design and implement security controls for AI/ML workloads in cloud environments, including securing model training pipelines, protecting sensitive data, and mitigating risks associated with adversarial AI, model drift, and generative AI misuse. ·         Develop reference architectures and security patterns that align with Zero Trust principles. ·         Lead threat modeling and risk assessments for cloud and hybrid workloads. 2.       Cloud Security Engineering, Implementation and Operations Support: ·         Cloud Security Solution Management: manage and monitor our cloud native security solutions and monitoring tools to ensure optimal performance and visibility. ·         Provide Support and Guidance for Security Operations: Provide technical leadership and guidance to our Security ops teams and lead incident responses related to Cloud security events. ·         Review, monitor and Optimize: review current Cloud solution implementations, optimize cloud security utilization and improve efficiency and integration when possible. Create continuous monitoring of Cloud Security Compliance. ·         Collaborate with infrastructure and DevOps teams to implement security controls including IAM, encryption, segmentation, and monitoring. ·         Integrate cloud security tools (CSPM, CWPP, CIEM) into CI/CD pipelines and runtime environments. ·         Drive automation and infrastructure-as-code (IaC) practices using tools. ·         Define cloud security monitoring requirements and integrate with SIEM and SOAR platforms. ·         Support incident response and forensic investigations related to cloud and hybrid environments. ·         Conduct root cause analysis and recommend architectural improvements to prevent recurrence. 3.       Collaboration and Innovation: ·         Cross-Functional Collaboration: Partner with IT Infrastructure and IT Application teams, DevOps, IAM, DLP, Security Operations, Information Protection Governance and business units to integrate security into digital transformation initiatives, such as cloud migrations, fintech innovations, and core banking systems. ·         Technology Evaluation: Research and evaluate emerging cybersecurity technologies (e.g., AI-driven threat detection, PasswordLess authentication) to enhance architectural resilience and efficiency. ·         Automation and Orchestration: Design automated security workflows using tools like SOAR platforms (e.g., Splunk SOAR, Palo Alto Cortex) to improve incident response and operational efficiency. ·         Knowledge Sharing: Mentor junior architects and engineers, sharing best practices and fostering a culture of security awareness across the organization . ·         Act as a subject matter expert (SME) for cloud and hybrid security across the enterprise. ·         Influence strategic decisions around cloud adoption, migration, and modernization with a security-first mindset. 4.       Compliance and Regulatory Alignment: ·         Regulatory Compliance: Ensure cloud security architecture meets financial regulations (e.g., PCI DSS, GDPR, Korean SOX, FFIEC, NYDFS) through secure design, documentation, and audit-ready configurations. ·         Policy Development: Contribute to the development of cybersecurity policies and standards, ensuring architectural designs align with regulatory and organizational requirements. ·         Vendor Evaluation: Assess third-party vendors and Managed Security Service Providers (MSSPs) for compatibility with architectural designs and compliance needs ·         Promote and enforce industry best practices for cloud security architecture, operations, and governance. 5.       Documentation and Reporting: ·         Architecture Documentation: Create and maintain detailed architectural diagrams, design documents, standards and runbooks to support implementation, audits, and incident response. ·         Executive Communication: Present architectural designs, risk assessments, and recommendations to the Director of Cybersecurity, CISO, and senior leadership, articulating business impacts. ·         Metrics and Validation: Develop metrics to validate architectural effectiveness (e.g., threat detection coverage, compliance adherence) and drive continuous improvement. What You Will Bring ·         Minimum 8 years progressive experience in cybersecurity with proven knowledge in cloud security architecture or engineering role designing secure cloud native systems. ·         3+ years of experience in financial services, with a strong understanding of financial threats (e.g., fraud, data breaches) and regulations (e.g., PCI DSS, Korean SOX, GDPR). ·         Hands-on experience architecting secure network, cloud, and SaaS environments in complex, regulated industries. ·         Bachelor’s degree in computer science, Information Security, or related field; Master’s degree preferred ·         At least one of the following: CISSP, CCSP, CISM, TOGAF, or equivalent. ·         Hands-on security testing experience in cloud platforms, especially AWS and M365. ·         Cloud security certifications such as: o    AWS Certified Security - Specialty o    Microsoft Azure Security Engineer o    Microsoft 365 Security o    Google Professional Cloud Security Engineer o    Other comparable certifications. Technical Skills : ·         Technical expert with deep experience in financial services, a strategic mindset, and the ability to align cybersecurity architecture with business objectives. ·         Expertise in network security (e.g., NGFW, IDS/IPS, VPNs) and cloud security (AWS, Azure, Google Cloud, Oracle Cloud) ·         Proficiency in Microsoft 365 Security Tools : Microsoft Defender, Intune, Azure AD (Entra), ADFS ·         Knowledge of security frameworks such as NIST, ISO 27001, and COBIT. ·         Strong knowledge of Cloud Native Security solutions and monitoring technology – (AWS CloudTrail, SecurityHub, GuardDuty) ·         Experience with secure software development lifecycles (SDLC) and DevSecOps practices. ·         Familiarity with automation and scripting (e.g., Python, PowerShell, Terraform) for infrastructure-as-code and security orchestration. ·         Hands-on experience with cloud security posture management (CSPM) and workload protection platforms. ·         Proficiency in IAM frameworks (RBAC, MFA, PAM) and DLP technologies (data classification, policy enforcement). ·         Strong knowledge of SIEM (e.g., Splunk), SOAR, and threat intelligence platforms for architectural integration. ·         Deep experience in the design and implementation of robust security architectures for SaaS platforms, ensuring secure integration, data protection, and compliance with industry standards such as SOC 2, ISO 27001, and others. ·         Experience designing and implementing security controls for AI/ML workloads in cloud environments. ·         Knowledge of financial systems (e.g., core banking platforms, payment gateways) and their security requirements. Soft Skills : ·         Strong problem-solving skills to address complex architectural challenges. ·         Excellent communication skills to articulate technical concepts to technical and non-technical stakeholders. ·         Strategic thinker with the ability to align cybersecurity architectures with business and regulatory goals. Preferred ·         Experience with AI-driven cybersecurity tools (e.g., ReliaQuest GreyMatter, Rapid7, etc.) for threat detection and response. ·         Familiarity with zero-trust architectures and emerging technologies, such as SASE or decentralized identity. ·         Knowledge of data encryption, tokenization, and secure API design for financial applications. ·         Experience working with MSSPs to integrate external security services. ·         Understanding of threat modeling frameworks. Work Environment Employees in this class are subject to extended periods of sitting, standing, and walking, vision to monitor and moderate noise levels. Work is performed in an at home and office environment. The posted salary range for this job takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; geographic location, and other business and organizational needs. Successful candidates may be hired anywhere in the salary range based on these factors. It is uncommon to hire candidates at or near the top of the range. California Privacy Notice This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here . This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used, and whether that information is sold or shared, so that you can exercise meaningful control over our use of your personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (“CCPA”). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at Privacy2@hcs.com . United States-California-Irvine", "summaryDescription" : "Sr. Cloud Security Architect at Hyundai Capital America", "createdAt" : "2026-06-14T19:46:25.345", "lastUpdated" : "2026-06-16T02:26:31.882", "ingestTimestamp" : "2026-06-14T19:46:25.345", "mongoId" : "694ae6ce70f0b99d589b27e2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 175000, "salaryAnnualMax" : 245000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.6666667, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c5f4074d8ee00a08ea55f", "title" : "Security Incident Response Lead", "company" : "Nscale", "industry" : "AI Infrastructure", "salary" : { "min" : 150000.0, "max" : 225000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "AMER", "locations" : [ "AMER" ], "timestamp" : "2026-06-15T02:45:24.541", "fingerprint" : "97da22b2e3f980604e8d6395c438f3f52604ff35672fecd27a2405a86ad0765f", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/nscaleoperationsukltd/jobs/4824321101", "externalId" : "4824321101", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" }, { "country" : "Canada", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States; Canada", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "Cloud infrastructure, SIEM, EDR/XDR, Automation", "professionalSkills" : [ "Incident leadership", "Incident coordination", "Technical leadership", "Root cause analysis", "Threat hunting", "Detection engineering" ], "hardSkillsList" : [ "Digital forensics", "Incident response", "Security operations", "Forensics techniques", "Investigation techniques", "Threat intelligence", "Incident lifecycles" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Digital forensics", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Forensics techniques", "level" : "intermediate" }, { "name" : "Investigation techniques", "level" : "intermediate" }, { "name" : "Threat intelligence", "level" : "intermediate" }, { "name" : "Incident lifecycles", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Digital forensics, Cloud security", "majorSkillsList" : [ "Incident response", "Digital forensics", "Cloud security" ], "coreResponsibilities" : "Lead end-to-end security incident response, Act as incident commander, Coordinate cross-functional response efforts, Conduct investigations, Oversee investigations, Apply digital forensics techniques, Drive containment efforts, Drive eradication efforts, Drive recovery efforts, Contribute to threat hunting, Contribute to proactive investigations, Develop incident response playbooks, Maintain incident response playbooks, Develop escalation frameworks, Establish escalation frameworks, Lead post-incident reviews, Lead root cause analysis, Drive long-term remediation actions, Partner to improve alerting, Partner to improve triage, Partner to improve response workflows, Build incident response tooling, Scale incident response tooling, Enhance case management systems", "teamCollaboration" : "Cross-functional response efforts; Partner with Detection & Response; Coordinate with Infrastructure; Coordinate with IT; Coordinate with Legal; Coordinate with Compliance", "domainKnowledge" : "AI infrastructure; High-performance computing; Large-scale distributed systems; Attack techniques; Threat actors; Incident lifecycles; Cloud environments; Production environments", "domainList" : [ "ai-infrastructure", "high-performance-computing", "large-scale-distributed-systems", "attack-techniques", "threat-actors", "incident-lifecycles", "cloud-environments", "production-environments" ], "domainSpecificKnowledge" : [ "AI infrastructure", "High-performance computing", "Large-scale distributed systems", "Attack techniques", "Threat actors", "Incident lifecycles", "Cloud environments", "Production environments" ], "toolProficiency" : [ "SIEM", "EDR/XDR", "Detection tooling", "Case management systems" ], "communicationSkills" : "Brief leadership; Coordinate across teams", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "End-to-end IR effectiveness; High-severity incident coordination; Post-incident review completion; Remediation completion; IR tooling maturity; Automation maturity; Workflow maturity", "qualificationsBasic" : "8-12+ years incident response experience, 8-12+ years security operations experience, 8-12+ years digital forensics experience, Proven experience leading high-severity investigations, Hands-on experience with SIEM, Hands-on experience with EDR/XDR, Hands-on experience with detection tooling, Operate as technical leader, Make decisions under pressure, Brief leadership, Coordinate across teams", "qualificationsPreferred" : "Experience in AI infrastructure, Experience in high-performance computing, Experience in large-scale distributed systems, Familiarity with detection engineering, Familiarity with threat hunting, Familiarity with building automation for IR", "remoteFriendly" : true, "rawDescription" : "About Nscale Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility. We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future. About the Role We’re hiring a Security Incident Response Lead to own and evolve Nscale’s incident response capability in a high-scale, AI-native environment. This is a hands-on leadership role focused on leading investigations across infrastructure, enterprise systems, and security events, while driving effective containment, eradication, and recovery. The role operates at the center of incident coordination and partners closely with Detection & Response as well as cross-functional stakeholders including Infrastructure, IT, Legal, and Compliance. You will help shape how Nscale detects and responds to threats by building the processes, tooling, and operational rigor behind the incident response function. This role is critical to strengthening the organization’s security posture and ensuring high-severity events are managed with speed, clarity, and technical depth. This role will be part of the global CISO organization. What you'll be doing Incident Leadership & Coordination Lead end-to-end security incident response across the organization Act as the incident commander for high-severity events Coordinate cross-functional response efforts with Infrastructure, IT, Legal, and Compliance Participate in and help design on-call and escalation rotations Investigations & Forensics Conduct and oversee investigations across endpoints, cloud, and infrastructure systems Apply digital forensics techniques across logs, endpoints, and cloud environments Drive containment, eradication, and recovery efforts for active security incidents Contribute to threat hunting and proactive investigations Process, Playbooks & Operational Rigor Develop and maintain incident response playbooks and runbooks Establish escalation frameworks to support effective incident handling Lead post-incident reviews and root cause analysis efforts Drive long-term remediation actions following incidents Tooling & Response Improvement Partner with Detection & Response teams to improve alerting, triage, and response workflows Build and scale incident response tooling and automation Enhance case management systems that support investigation and response operations KPIs End-to-end security incident response effectiveness High-severity incident coordination and command Post-incident review and remediation completion Incident response tooling, automation, and workflow maturity About You 8–12+ years of experience in incident response, security operations, or digital forensics Proven experience leading complex, high-severity incident investigations in cloud or distributed environments Strong expertise in forensics and investigation techniques across endpoints, cloud, and logs Hands-on experience with SIEM, EDR/XDR, and detection tooling Familiarity with cloud infrastructure and modern production environments Deep understanding of attack techniques, threat actors, and incident lifecycles Ability to operate as a technical leader during incidents and make decisions under pressure Strong communication skills with the ability to brief leadership and coordinate across teams Experience in AI infrastructure, high-performance computing, or large-scale distributed systems is a plus Familiarity with detection engineering, threat hunting, or building automation for incident response workflows is beneficial What we can offer you At Nscale, you'll find a collaborative, supportive, and innovative environment where your contributions spark real impact. We're building something extraordinary, and we want you at the core. Highly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months. \uD83D\uDE80 Join one of the fastest-growing AI infrastructure companies — your chance to directly shape how global AI capacity is planned and deployed. ✨ Expect a dynamic progression plan tailored to your ambitions. Grow by leading critical cross-functional initiatives and shaping capital strategy — always with our full support. Human-First Flexibility: We treat you as humans first. \uD83E\uDEF6\uD83C\uDFFD Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments. Equal Opportunities Statement We strongly encourage applications from people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds. If there’s anything we can do to accommodate your specific situation, please let us know. The responsibilities outlined in this job description are not exhaustive and are intended to provide a general overview of the position. The employee may be required to perform additional duties, tasks, and responsibilities as assigned by management, consistent with the skills and qualifications required for the role. For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here. Salary Range The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation. The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation. Salary Range $150,000—$225,000 USD For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.", "summaryDescription" : "Security Incident Response Lead at Nscale. Skills: Incident response, Digital forensics, Cloud security. Lead end-to-end security incident response. Act as incident commander", "postedDate" : "2026-06-12T22:26:36.876", "createdAt" : "2026-06-12T22:26:36.876", "lastUpdated" : "2026-06-15T02:45:24.541", "ingestTimestamp" : "2026-06-12T22:26:36.876", "mongoId" : "6a2c5f4074d8ee00a08ea55f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 150000, "salaryAnnualMax" : 225000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Digital forensics", "Incident response", "Security operations", "Forensics techniques", "Investigation techniques", "Threat intelligence", "Incident lifecycles", "Leadership", "Cloud security", "Incident leadership", "Incident coordination", "Technical leadership", "Root cause analysis", "Threat hunting", "Detection engineering", "AI infrastructure", "High-performance computing", "Large-scale distributed systems", "Attack techniques", "Threat actors", "Cloud environments", "Production environments", "SIEM", "EDR/XDR", "Detection tooling", "Case management systems" ], "skillCount" : 26, "jobCategory" : "other", "jobSubcategory" : "security", "dataQualityScore" : 0.8888889, "daysOld" : 2, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "AI Infrastructure" }, { "id" : "6a30766ff292fd229c019a39", "title" : "Security Engineering Manager (Cloud Security)", "company" : "Nubank", "industry" : "FinTech", "salary" : { "min" : 250000.0, "max" : 400000.0, "currency" : "BRL", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager level Security Engineering role in FinTech, adjusted for Belo Horizonte, Brazil, and company size." }, "location" : "Belo Horizonte", "locations" : [ "Belo Horizonte", "Campinas", "Rio de Janeiro", "São Paulo" ], "timestamp" : "2026-06-16T12:04:20.122", "fingerprint" : "36c982f5d44ccf85a52e1c2e1524bb8ada0bb2ac04d4713ea94af1f3033def16", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/nubank/jobs/8007428", "externalId" : "8007428", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Belo Horizonte", "country" : "Brazil", "continent" : "sa", "source" : "llm", "workMode" : "hybrid", "geo" : "-19.9227318,-43.9450948" } ], "locationText" : "Belo Horizonte, Brazil", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "Golang, Clojure, Python, Shell scripting, IaC, Terraform, Pulumi, CloudFormation, AWS, GCP, Kubernetes, Kafka, CSPM/CNAPP platforms, AI/ML infrastructure", "professionalSkills" : [ "Technical leadership", "Strategy execution", "Architecture design", "Root cause analysis", "Roadmap planning", "Financial management", "Risk management" ], "hardSkillsList" : [ "Cloud security controls", "Configuration baselines", "Posture detection", "Preventive controls", "Remediation pipelines", "AI enablement" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Cloud security controls", "level" : "intermediate" }, { "name" : "Configuration baselines", "level" : "intermediate" }, { "name" : "Posture detection", "level" : "intermediate" }, { "name" : "Preventive controls", "level" : "intermediate" }, { "name" : "Remediation pipelines", "level" : "intermediate" }, { "name" : "AI enablement", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Cloud Security, Engineering Management, AWS, IaC", "majorSkillsList" : [ "Cloud Security", "Engineering Management", "AWS", "IaC" ], "coreResponsibilities" : "Lead the squad, Set clear expectations, Give frequent feedback, Run career conversations, Hire and onboard talent, Plan team composition and skills, Drive technical decisions, Enable technical decisions on architecture, Be accountable for technical health, Set team's quality, Oversee root cause analysis, Lead phased rollouts, Sponsor architectural decisions, Communicate trade-offs to stakeholders, Translate strategy into execution, Cascade strategy into roadmap, Balance regulatory commitments, Manage initiatives, Own squad's contribution to OKRs, Operate with accountability, Hold accountability for financials, Operate in compliance with policies, Lead and mentor others, Contribute to hiring panels", "teamCollaboration" : "Infrastructure peers; Infrastructure teams; Product engineering; Compliance; GRC; Procurement; Foundation Security; ITSec", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Multi-cloud patterns; Cloud configuration risk; International banking regulators; AI safety; PCI; ISO 27001; Banking regulators; Runtime security; Event-streaming platforms; Data pipelines; AI/ML infrastructure", "domainList" : [ "multi-cloud-patterns", "cloud-configuration-risk", "international-banking-regulators", "ai-safety", "pci", "iso-27001", "banking-regulators", "runtime-security", "event-streaming-platforms", "data-pipelines", "ai-ml-infrastructure" ], "domainSpecificKnowledge" : [ "Multi-cloud patterns", "Cloud configuration risk", "International banking regulators", "AI safety", "PCI", "ISO 27001", "Banking regulators", "Runtime security", "Event-streaming platforms", "Data pipelines", "AI/ML infrastructure" ], "toolProficiency" : [ "Terraform", "Pulumi", "CloudFormation", "Kubernetes", "Kafka", "CSPM/CNAPP platforms", "Jira", "LookerigQuery", "Cursor", "Claude Code", "GitHub Copilot" ], "communicationSkills" : "Written communication; Spoken communication", "continuousLearning" : "Nucleo learning platform", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Reduce blast radius", "qualificationsBasic" : "Engineering Manager experience, Hands-on software engineering background, Working knowledge of AWS at scale, Comfort designing and governing preventive controls, Track record of hiring, onboarding, and developing, Experience running performance and career conversations, Ability to make complex trade-offs clear", "qualificationsPreferred" : "Familiarity with GCP, Prior experience building and shipping software products, Prior exposure to CSPM/CNAPP platforms, Experience supporting regulatory or compliance workstreams, Familiarity with Kubernetes runtime security, Familiarity with event-streaming platforms, Familiarity with large-scale data pipelines, Experience embedding security into AI/ML infrastructure, Hands-on use of AI coding assistants", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "About Us Nu is one of the largest digital financial platforms in the world, with more than 122 million customers across Brazil, Mexico, and Colombia. Guided by our mission to fight complexity and empower people, we are redefining financial services in Latin America and this is still just the beginning of the purple future we're building. Listed on the New York Stock Exchange (NYSE: NU), we combine proprietary technology, data intelligence, and an efficient operating model to deliver financial products that are simple, accessible, and human. Our impact has been recognized by global rankings such as Time 100 Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Bank. Visit our institutional page https://international.nubank.com.br/careers/ About the Team Cloud Security defines and operates the cloud security controls that underpin Nubank's growth globally and across multiple cloud providers. The team owns the preventive guardrails, configuration baselines, and posture-detection mechanisms that allow Nubank to launch in new markets, sustain regulatory commitments with international banking regulators, and adopt AI safely at the cloud layer. About the Role We are looking for an Engineering Manager II to lead a highly senior team of software engineers, translate Foundation Security's strategy into structured execution, and provide the close technical leadership of this squad's seniority and scope demand. This is a dedicated leadership seat — your full focus is one squad and its outcomes. What You’ll Be Responsible For Lead the squad Set clear expectations, give frequent feedback, and run career conversations with senior ICs. Hire and onboard talent, partnering with P plan the team's composition and skills against Nubank's objectives. Drive technical decisions and engineering excellence Lead and enable technical decisions on the squad's architecture, with a strong understanding of multi-cloud patterns and trade-offs (AWS, GCP, IaC, Kubernetes, event-driven controls). Be accountable for the technical health of the squad's products: code quality, test coverage, observability, and technical-debt management. Set the team's quality bar; oversee root cause analysis for complex incidents and lead phased rollouts that reduce blast radius. Sponsor architectural decisions for squad-level projects and communicate trade-offs to non-technical stakeholders. Translate strategy into execution Cascade Foundation Security and ITSec strategy into the squad's roadmap, balancing regulatory commitments across international markets, AI enablement, and ongoing reduction of cloud configuration risk. Manage small-to-moderate initiatives that span multiple stakeholders (Infrastructure peers, infrastructure teams, product engineering, compliance, GRC, procurement). Own the squad's contribution to OKRs, monthly business reviews, and the Area business board. Operate with accountability Hold accountability for the squad's financials within ITSec's guidelines (tooling renewals, headcount, contracts). Operate in compliance with corporate policies and risk-management processes. Lead and mentor others within the squad; contribute to hiring panels across Foundation Security. We Are Looking for a Person Who Has Must-have Engineering Manager experience leading a software/security squad, or strong tech-lead/staff-level background with clear intent and readiness to move into people management. Solid hands-on software engineering background — comfortable reading and reviewing code in at least one of Golang, Clojure, or Python, writing Shell/Python scripts for automation, and reviewing IaC (Terraform, Pulumi). Working knowledge of AWS at scale (multi-account, Organizations, IAM, networking, Security Hub, Config). Familiarity with GCP is a strong plus. Comfort designing and governing preventive controls (SCPs, Organization Policies, admission controllers) and remediation pipelines. Track record of hiring, onboarding, and developing engineers; experience (or strong appetite) for running performance and career conversations. Strong written and spoken communication in English; ability to make complex trade-offs clear to non-technical stakeholders. Nice-to-have Prior experience building and shipping software products (not only operating off-the-shelf security tools) — internal platforms, services, CLIs, integrations, APIs. Prior exposure to CSPM/CNAPP platforms (any major vendor). Experience supporting regulatory or compliance workstreams (PCI, ISO 27001, banking regulators). Familiarity with Kubernetes runtime security, event-streaming platforms, and large-scale data pipelines. Experience embedding security into AI/ML infrastructure. Hands-on use of AI coding assistants (Cursor, Claude Code, GitHub Copilot, or similar) to accelerate engineering work and team productivity. Tech stack you'll be exposed to AWS, GCP, Terraform, Pulumi, CloudFormation, Kubernetes, Kafka, Golang, Clojure, Python, shell scripting, CSPM/CNAPP platforms, internal data pipelines, Looker/BigQuery, Jira. AI coding assistants are part of our daily engineering workflow. What we offer A dedicated leadership seat in a squad with very high seniority and very high strategic relevance. Direct line of sight to Nubank's regulatory and international expansion programs. A squad that builds its own products in-house — you'll lead software engineers shipping real software, not coordinating ticket queues. A peer group of EMs across Foundation Security (Runtime, Infrastructure, Data) and a senior management layer that operates with full financial and strategic accountability. Exposure to multi-country, multi-cloud problems at the scale of Latin America's largest digital bank. Our Benefits Chance of earning equity at Nubank Food/ Meal Card (Vale-Refeição and/or Vale Alimentação) Public Transportation Commuting Benefit (Vale-Transporte) NuCare – Psychological, Financial and Legal Assistance Program Life Insurance Medical Plan Dental Plan NuLanguage – Language Course Program Nucleo - Our learning platform of courses Extended Parental Leave Daycare Allowance Parental Consultancy Work-from-home Allowance Gym Partnerships 30 days of paid vacation Work Model for this Role Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/", "summaryDescription" : "Security Engineering Manager (Cloud Security) at Nubank. Skills: Cloud Security, Engineering Management, AWS, IaC. Lead the squad. Set clear expectations", "postedDate" : "2026-06-16T01:18:02.139", "createdAt" : "2026-06-16T01:18:02.139", "lastUpdated" : "2026-06-16T12:04:20.122", "ingestTimestamp" : "2026-06-16T01:18:02.139", "mongoId" : "6a30766ff292fd229c019a39", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Cloud security controls", "Configuration baselines", "Posture detection", "Preventive controls", "Remediation pipelines", "AI enablement", "Leadership", "Mentoring", "Cloud Security", "Engineering Management", "AWS", "IaC", "Technical leadership", "Strategy execution", "Architecture design", "Root cause analysis", "Roadmap planning", "Financial management", "Risk management", "Multi-cloud patterns", "Cloud configuration risk", "International banking regulators", "AI safety", "PCI", "ISO 27001", "Banking regulators", "Runtime security", "Event-streaming platforms", "Data pipelines", "AI/ML infrastructure", "Terraform", "Pulumi", "CloudFormation", "Kubernetes", "Kafka", "CSPM/CNAPP platforms", "Jira", "LookerigQuery", "Cursor", "Claude Code", "GitHub Copilot" ], "skillCount" : 41, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.97 }, { "id" : "68b706967fc9a711f0f6f106", "title" : "Senior Security Incident Response Engineer", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 143300.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T03:15:22.523", "fingerprint" : "557fc71c43f8425ad3ede7e1896c755a137ec1863b4d9868b798c7018c19161b", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3054814/apply", "externalId" : "9b21d22c-d0c3-4bd6-9b1b-3f576fbb97c6", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Operating system security, Network security, Cryptography, Software security, Malware analysis, Forensics, Security operations, Incident response, Security automation, Cloud computing, AWS", "professionalSkills" : [ "Security engineering", "Threat landscape", "Security automation tooling" ], "hardSkillsList" : [ "Incident response lifecycle", "Security monitoring", "Programmatic automation", "Security issue prevention" ], "softSkillsList" : [ "Creative problem solving", "Critical thinking" ], "hardSkills" : [ { "name" : "Incident response lifecycle", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Programmatic automation", "level" : "intermediate" }, { "name" : "Security issue prevention", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Creative problem solving" }, { "name" : "Critical thinking" } ], "majorSkills" : "Incident response, Security automation, Cloud security", "majorSkillsList" : [ "Incident response", "Security automation", "Cloud security" ], "coreResponsibilities" : "Lead response to security issues, Conduct security monitoring, Conduct response activities, Design and build tooling, Enable programmatic automation, Lead security engineer, Provide security guidance, Provide technical guidance, Influence process and priorities, Improve security outcomes, Provide strategic guidance, Bar raise security issues, Escalate security issues, Identify prevention opportunities, Mentor junior engineers, Develop junior engineers", "teamCollaboration" : "Global team environment; Multiple security teams; Cross-functional teams", "domainKnowledge" : "Operating system security; Network security; Cryptography; Software security; Malware analysis; Forensics; Security operations; Incident response; Security intelligence; Cloud provider security", "domainList" : [ "operating-system-security", "network-security", "cryptography", "software-security", "malware-analysis", "forensics", "security-operations", "incident-response", "security-intelligence", "cloud-provider-security" ], "domainSpecificKnowledge" : [ "Operating system security", "Network security", "Cryptography", "Software security", "Malware analysis", "Forensics", "Security operations", "Incident response", "Security intelligence", "Cloud provider security" ], "toolProficiency" : [ "SOAR platforms", "SIEM platforms" ], "communicationSkills" : "Oral communication; Written communication", "continuousLearning" : "Learning about security domains", "innovationCreativity" : "Creative problem solving", "problemSolvingSkills" : "Creative problem solving; Critical problem solving", "outcomesObjectives" : "Improve security outcomes", "qualificationsBasic" : "BS degree in Computer Science or equivalent, 7+ years systems/network/application security, 5+ years on Security team, 1 year programming/scripting language, Experience leading junior engineers", "qualificationsPreferred" : "Excellent written/verbal communication, 7+ years security response/automation/threat intelligence, Malware analysis experience, Forensics experience, SOAR platforms experience, SIEM platforms experience, Experience with MS Windows, Linux, MacOS, Experience with Amazon Web Services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Amazon Web Services team is looking for a passionate Senior Security Incident Response Engineer who can lead the response to security issues across the largest cloud provider in the world. You must thrive in dynamic/ambiguous situations, and think like both an attacker and defender, while working through the entire incident response lifecycle. You’ll be working in a global team environment where clear and accurate communication and collaboration on security issues is critical. In this role you’ll be conducting security monitoring and response activities for the Amazon internal network. We value broad and deep technical knowledge, specifically in the fields of operating system security, network security, cryptography, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. We don’t expect you to be an expert in all of the domains mentioned above, but we do expect you to be excited to learn about them! You’ll apply your creative and critical problem solving skills to quickly design and build tooling that enables programmatic automation at a massive scale. You must have a passion for engineering solutions to complex security challenges, and recognize and fill gaps in capabilities. Above all, you should be passionate about information security, the threat landscape and security automation and tooling. Key job responsibilities - Work across multiple security teams as a lead security engineer providing security and technical guidance. - Influence your team’s and partners’ process, priorities, and choices by using data to improve security outcomes - Provide technical and strategic guidance to senior leaders and stakeholders through effective oral and written communications - Bar raise security issues and escalate appropriately - Identify opportunities to prevent security issues at scale - Mentor and develop teammates both technically and professionally About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - BS degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent related field. - 7+ years of demonstrated experience with a focus in areas such as systems, network, and/or application security. - 5+ years experience on a Security team, especially experience coordinating responses to security incidents. - 1 year proficiency with one high-level programming or scripting language. - Experience leading and coaching junior security engineers to improve their skills and effectiveness Preferred Qualifications: - Excellent written and verbal communication skills with the ability to adapt messaging to executive, technical, and non-technical audiences. - 7+ years experience working in security response, security automation tooling, or threat intelligence. - Experience with malware analysis, forensics, SOAR, SIEM platforms, and a variety of Operating Systems (MS Windows, Linux, MacOS) - Experience with Amazon Web Services. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Senior Security Incident Response Engineer at Amazon.com Services LLC. Skills: Incident response, Security automation, Cloud security. Lead response to security issues. Conduct security monitoring", "postedDate" : "2026-06-13T10:52:46.897", "createdAt" : "2026-06-13T10:52:46.897", "lastUpdated" : "2026-06-15T03:15:22.523", "ingestTimestamp" : "2026-06-13T10:52:46.897", "mongoId" : "68b706967fc9a711f0f6f106", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3054814/apply", "salaryAnnualMin" : 143300, "salaryAnnualMax" : 247600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Incident response lifecycle", "Security monitoring", "Programmatic automation", "Security issue prevention", "Creative problem solving", "Critical thinking", "Incident response", "Security automation", "Cloud security", "Security engineering", "Threat landscape", "Security automation tooling", "Operating system security", "Network security", "Cryptography", "Software security", "Malware analysis", "Forensics", "Security operations", "Security intelligence", "Cloud provider security", "SOAR platforms", "SIEM platforms" ], "skillCount" : 23, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Computing" }, { "id" : "6a3056c3f292fd229cf2e4e2", "title" : "Senior Security Architect (m/f/d)", "company" : "Isar Aerospace SE", "industry" : "Technology", "salary" : { "min" : 950000.0, "max" : 1350000.0, "currency" : "NOK", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for Senior Security Architect in Andenes, Norway, adjusted for senior experience level and the aerospace industry." }, "location" : "Andenes, Nordland, Norway", "locations" : [ "Andenes", "Nordland", "Norway" ], "certifications" : [ "CISSP", "CISM", "OSCP" ], "timestamp" : "2026-06-16T08:01:17.028", "fingerprint" : "d4afaa4d4930740801d776a2213f0ec123b825e62f7fee8b28ff2ba1da3c8cde", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/isaraerospace/jobs/4897729101", "externalId" : "4897729101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Andenes", "state" : "Nordland", "country" : "Norway", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "69.3122989,16.1057085" } ], "locationText" : "Andenes, Nordland, Norway", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Security architecture, Network security, Application security, Cloud security, Identity management, Endpoint security, Adversary emulation, Attack path analysis, Detection engineering, Incident response, Vulnerability management, Threat intelligence, ISO 27001, NIST", "professionalSkills" : [ "Security posture", "Risk assessment", "Vulnerability assessment", "Threat analysis", "Use case development", "Service reviews", "Incident handling", "Risk prioritization", "Gap closure", "Threat tracking", "Control validation", "Documentation production", "Standards execution" ], "hardSkillsList" : [ "Penetration testing", "Security design", "Security operations", "Incident command" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Security design", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Incident command", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Security architecture, Offensive security, Detection engineering, Incident response", "majorSkillsList" : [ "Security architecture", "Offensive security", "Detection engineering", "Incident response" ], "coreResponsibilities" : "Design security architecture, Implement security architecture, Build resilience, Run adversary emulation, Run attack path analysis, Prove controls fire, Prove detections fire, Convert findings into fixes, Convert findings into detections, Convert findings into hardened designs, Develop detection capability, Operationalize detection capability, Tune monitoring, Keep coverage honest, Own technical relationship, Set detection backlog, Set use-case backlog, Hold MSSP to standards, Run MSSP service reviews, Develop incident response plans, Maintain incident response plans, Lead incident handling, Run risk assessments, Run vulnerability assessments, Prioritize gaps, Close gaps, Track emerging threats, Track emerging tactics, Use threat intelligence, Anticipate adversary targeting, Harden systems, Partner with IT teams, Partner with engineering teams, Implement controls, Validate controls, Produce clear documentation, Produce clear standards", "teamCollaboration" : "Cross-functional teams; IT teams; Engineering teams", "projectManagementSkills" : [ "Detection backlog management", "Use-case backlog management", "Incident response planning" ], "domainKnowledge" : "New Space; Space business; Rocket systems; Satellite launch; Low Earth Orbit", "domainList" : [ "new-space", "space-business", "rocket-systems", "satellite-launch", "low-earth-orbit" ], "domainSpecificKnowledge" : [ "New Space", "Space business", "Rocket systems", "Satellite launch", "Low Earth Orbit" ], "toolProficiency" : [ "Azure", "AWS", "CIS Benchmarks" ], "communicationSkills" : "Translate technical risk", "documentationSkills" : "Clear documentation", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Security clearance requirements", "qualificationsBasic" : "10+ years information security, Hands-on depth defending systems, Hands-on depth attacking systems, Build secure architecture, Break secure architecture, Operate across full security stack, Switch context fast, Go deep where problem demands, Design security architecture, Implement security architecture, Detection capability, Incident response capability, Vulnerability management capability, In-depth networking protocols knowledge, In-depth systems architecture knowledge, In-depth core security principles knowledge, In-depth best practices knowledge, High autonomy operation, Take full ownership, Guide others, Excellent communication skills, Excellent collaboration skills, Translate technical risk, Bachelor's degree or equivalent experience, Master's degree or equivalent experience", "qualificationsPreferred" : "Aerospace experience, Defense experience, Regulated environments experience, Safety-critical environments experience, Defensive certifications, Architecture certifications, Offensive certifications, Cloud security depth, Azure security services depth, AWS security services depth, Hardening standards familiarity", "workSiteFlexibility" : "Onsite", "rawDescription" : "Mission Brief You are the guardian and the challenger of our security posture. At Isar Aerospace, the systems that build our rockets are mission critical, and protecting them takes more than good design. It takes someone who will attack their own work to be sure it holds. We are looking for a deeply hands-on Senior Security Architect. You will be in the environment, building and testing our defenses yourself, not directing from the sidelines. You wear two hats: the Defender who designs and operates the controls that keep us safe, and the Adversary who continuously attacks those controls the way a real threat would. You own your work end to end and turn what you find under attack into stronger defenses, sharper detection, and faster response. This is a senior role with one of the broadest mandates on the team. You are the kind of expert who can pick up almost anything we throw at you, from architecture to incident response to offensive testing, and go deep where it matters. A versatile generalist with real depth, not a narrow specialist, and a technical anchor others lean on. Your Role in Our Space Mission: Design the Defense: Lead the design and implementation of security architecture across our systems, networks, and applications, building in resilience from the start. Attack What We Build: Run realistic adversary emulation and attack-path analysis against our own environment, prove whether our controls and detections actually fire, and convert every finding into a fix, a new detection, or a hardened design. Own the Detection: Develop and operationalize our detection and response capability, tune monitoring to separate signal from noise, and keep our coverage honest against how attackers actually operate. Direct the MSSP: Own the technical relationship with our managed security provider. Set the detection and use-case backlog, hold them to escalation and response-quality standards, run service reviews, and make sure we get the protection we pay for. Lead the Response: Develop and maintain incident response plans, and lead the handling of incidents from day-to-day alerts through to high-profile events. Hunt and Reduce Risk: Run risk and vulnerability assessments across business-critical infrastructure, then work with stakeholders to prioritize and close the gaps that matter most. Stay Ahead of the Threat: Track emerging threats and tactics, and use threat intelligence to anticipate how an adversary would target us and harden accordingly. Embed Security with Engineering: Partner with IT and engineering teams to implement and validate controls, and produce clear documentation and standards others can execute against. Qualification Checklist Experience: 10+ years in information security, with hands-on depth across both defending and attacking systems. Dual Mindset: You can both build secure architecture and break it under controlled, agreed scope, and you know how to feed one into the other. Versatile Range: Comfortable operating across the full security stack and switching context fast, from design to detection to active testing, while still going deep where the problem demands it. Security Architecture: Proven experience designing and implementing security architecture across networks, cloud, identity, and endpoints. Operational Depth: Strong capability in detection, incident response, and vulnerability management, not just advisory or paper work. Foundations: In-depth knowledge of networking protocols, systems architecture, and core security principles and best practices. Frameworks: Familiarity with industry standards such as ISO 27001 and NIST. Autonomy: Operates with very high autonomy as an internal expert, taking full ownership of their work and guiding others. Communication: Excellent communication and collaboration skills, able to translate technical risk for a range of audiences. Education: Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field, or the equivalent through relevant certifications and hands-on experience. Bonus Skills Experience in aerospace, defense, or other regulated, safety-critical environments. Relevant certifications: defensive or architecture (e.g., CISSP, CISM) and offensive (e.g., OSCP or equivalent) are both valued. Cloud security depth in a major platform (Azure or AWS) and its native security services. Familiarity with hardening standards (e.g., CIS Benchmarks) applied in production. Benefits Employee Participation Program: Share in our success through our virtual company share program 6 weeks of vacation: Enjoy the days off to relax and recharge Subsidised lunch: Stay energised with delicious, subsidised lunches every day Relocation support: Benefit from our relocation bonus with deductible expenses up to an agreed amount Wellness allowance: Stay healthy and fit with our yearly allowance for wellness activities (e.g., Gym, Massages) Individual learning allowance: Grow your skills with an individual learning budget granted after the probation period Physical and mental well-being: Access via OpenUp the online support from certified psychologists and lifestyle experts at no cost to you and your family And Much More! Discover additional perks and benefits when you join our team. Who we are We are Isar Aerospace and we are at the forefront of New Space building a modern space business to enable faster, better and cheaper access to space. Our mission is to help democratise space and use it for good in order to improve life on Earth now and for the future generations. We are a fast-growing company aiming to provide sustainable and environmentally friendly launch solutions for small and medium-sized satellites and constellations into Low Earth Orbit. The company is privately funded by world-leading technology investors with strong commitment and support and our team is made of driven and talented people with a real passion for space innovation. We're making rockets in a way that hasn't been done before disrupting a traditional industry. If you are up for the challenge, want to work on cutting-edge projects and be part of a team changing the world for better, come, join us and launch your career! Want to find out more about us? Visit www.isaraerospace.com Data Protection We process your personal data for the purpose of managing the recruitment process and assessing your application. For detailed information on how your data is processed, including your rights, please refer to our Privacy Policy. Disclaimer Isar Aerospace SE is an equal-opportunity employer committed to fairness and inclusivity. We do not prioritize any specific religion, gender, nationality, or background. Due to security clearance requirements, affiliations with countries listed under § 13 para. 1 no. 17 SÜG may affect the application process. All qualified applicants are encouraged to apply. We use Metaview to record interview audio so our team can review it later and stay focused during the conversation. We will record interviews only if you opt in. Please note that we will request your consent separately during the interview process. Participation is completely voluntary and will not affect your application in any way. For more information on how we process your personal data, please see our Privacy Policy.", "summaryDescription" : "Senior Security Architect (m/f/d) at Isar Aerospace SE. Skills: Security architecture, Offensive security, Detection engineering, Incident response. Design security architecture. Implement security architecture", "postedDate" : "2026-06-15T23:17:35.898", "createdAt" : "2026-06-15T23:17:35.898", "lastUpdated" : "2026-06-16T08:01:17.028", "ingestTimestamp" : "2026-06-15T23:17:35.898", "mongoId" : "6a3056c3f292fd229cf2e4e2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Penetration testing", "Security design", "Security operations", "Incident command", "Leadership", "Security architecture", "Offensive security", "Detection engineering", "Incident response", "Security posture", "Risk assessment", "Vulnerability assessment", "Threat analysis", "Use case development", "Service reviews", "Incident handling", "Risk prioritization", "Gap closure", "Threat tracking", "Control validation", "Documentation production", "Standards execution", "Detection backlog management", "Use-case backlog management", "Incident response planning", "New Space", "Space business", "Rocket systems", "Satellite launch", "Low Earth Orbit", "CISSP", "CISM", "OSCP", "Azure", "AWS", "CIS Benchmarks" ], "skillCount" : 36, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Aerospace", "llmIndustryConfidence" : 0.98 }, { "id" : "6a307964f292fd229c031f80", "title" : "Security Engineering Manager (Cloud Security)", "company" : "Nu", "industry" : "Engineer", "salary" : { "min" : 360000.0, "max" : 540000.0, "currency" : "BRL", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager-level Security Engineering Manager in FinTech in São Paulo, Brazil, adjusted for company size and industry." }, "location" : "São Paulo", "locations" : [ "São Paulo" ], "timestamp" : "2026-06-16T11:54:09.967", "fingerprint" : "94ee3a1086fbeb3b5e19be92d123c62122fa0b3e537c17b1bc08be929b5d0378", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/nubank/2a53d60e-88cd-4ef7-a217-270b31bb6f3a/application", "externalId" : "2a53d60e-88cd-4ef7-a217-270b31bb6f3a", "industryFunction" : { }, "structuredLocations" : [ { "city" : "São Paulo", "country" : "Brazil", "continent" : "sa", "source" : "llm", "workMode" : "hybrid", "geo" : "-23.5506507,-46.6333824" } ], "locationText" : "São Paulo, Brazil", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "Golang, Clojure, Python, Shell scripting, AWS, GCP, Terraform, Pulumi, CloudFormation, Kubernetes, Kafka, CSPM, CNAPP", "professionalSkills" : [ "Technical leadership", "People management", "Career conversations", "Hiring talent", "Conflict mediation", "Performance management", "Team engagement", "Technical decisions", "Engineering excellence", "Code quality", "Test coverage", "Observability", "Technical-debt management", "Root cause analysis", "Phased rollouts", "Architectural decisions", "Stakeholder communication", "Strategy translation", "Roadmap management", "Risk management", "Financial accountability", "Process compliance" ], "hardSkillsList" : [ "Multi-cloud patterns", "Event-driven controls" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Multi-cloud patterns", "level" : "intermediate" }, { "name" : "Event-driven controls", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Cloud Security, Engineering Management, Software Engineering, IaC", "majorSkillsList" : [ "Cloud Security", "Engineering Management", "Software Engineering", "IaC" ], "coreResponsibilities" : "Lead the squad, Set clear expectations, Give frequent feedback, Run career conversations, Hire and onboard talent, Partner with P&C, Mediate conflicts, Address low performance, Create safe space, Manage team engagement, Plan team composition, Drive technical decisions, Enable technical decisions, Understand multi-cloud patterns, Understand trade-offs, Be accountable for technical health, Manage code quality, Manage test coverage, Manage observability, Manage technical-debt, Set team quality standards, Oversee root cause analysis, Lead phased rollouts, Sponsor architectural decisions, Communicate trade-offs, Translate strategy into execution, Cascade strategy into roadmap, Balance regulatory commitments, Enable AI safely, Reduce cloud configuration risk, Manage initiatives, Own squad contribution to OKRs, Own monthly business reviews, Own Area business board, Hold accountability for financials, Operate in compliance, Lead others, Mentor others, Contribute to hiring panels", "teamCollaboration" : "Cross-functional teams; Infrastructure peers; Infrastructure teams; Product engineering; Compliance; GRC; Procurement", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Cloud security; Multi-cloud patterns; AWS; GCP; IaC; Kubernetes; Event-driven controls; International banking regulators; AI enablement; Cloud configuration risk", "domainList" : [ "cloud-security", "multi-cloud-patterns", "aws", "gcp", "iac", "kubernetes", "event-driven-controls", "international-banking-regulators", "ai-enablement", "cloud-configuration-risk" ], "domainSpecificKnowledge" : [ "Cloud security", "Multi-cloud patterns", "AWS", "GCP", "IaC", "Kubernetes", "Event-driven controls", "International banking regulators", "AI enablement", "Cloud configuration risk" ], "toolProficiency" : [ "Terraform", "Pulumi", "CloudFormation", "Kubernetes", "Kafka", "Jira", "GitHub Copilot" ], "communicationSkills" : "Stakeholder communication", "continuousLearning" : "Learning platform", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "Engineering Manager experience, Tech-lead/staff-level background, Hands-on software engineering background, Comfortable reading code, Comfortable reviewing code, Writing Shell/Python scripts, Reviewing IaC, Working knowledge of AWS at scale", "qualificationsPreferred" : "Experience with AI coding assistants", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "ABOUT NU Nu is one of the largest digital financial services platforms in the world, serving 135 million customers across Brazil, Mexico, and Colombia. The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services. Guided by its mission to fight complexity and empower people, Nu caters to customers’ complete financial journey, promoting financial access and advancement with responsible lending and transparency. The company is powered by an efficient and scalable business model that combines low cost to serve with growing returns. Nu’s impact has been recognized in multiple awards, including Time 100 Most Influential Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Banks. Visit our institutional page: https://www.nu.com/2026-en ABOUT US Nu is one of the largest digital financial platforms in the world, with more than 122 million customers across Brazil, Mexico, and Colombia. Guided by our mission to fight complexity and empower people, we are redefining financial services in Latin America and this is still just the beginning of the purple future we're building. Listed on the New York Stock Exchange (NYSE: NU), we combine proprietary technology, data intelligence, and an efficient operating model to deliver financial products that are simple, accessible, and human. Our impact has been recognized by global rankings such as Time 100 Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Bank. Visit our institutional page https://international.nubank.com.br/careers/ About the Team Cloud Security defines and operates the cloud security controls that underpin Nubank's growth globally and across multiple cloud providers. The team owns the preventive guardrails, configuration baselines, and posture-detection mechanisms that allow Nubank to launch in new markets, sustain regulatory commitments with international banking regulators, and adopt AI safely at the cloud layer. ABOUT THE ROLE We are looking for an Engineering Manager II to lead a highly senior team of software engineers, translate Foundation Security's strategy into structured execution, and provide the close technical leadership of this squad's seniority and scope demand. This is a dedicated leadership seat — your full focus is one squad and its outcomes. WHAT YOU’LL BE RESPONSIBLE FOR   Lead the squad - Set clear expectations, give frequent feedback, and run career conversations with senior ICs. - Hire and onboard talent, partnering with P&C and the Foundation Security hiring pipeline. - Mediate conflicts, address low performance promptly and impartially, and create a safe space for difficult conversations. - Manage team engagement with data; plan the team's composition and skills against Nubank's objectives.   Drive technical decisions and engineering excellence - Lead and enable technical decisions on the squad's architecture, with a strong understanding of multi-cloud patterns and trade-offs (AWS, GCP, IaC, Kubernetes, event-driven controls). - Be accountable for the technical health of the squad's products: code quality, test coverage, observability, and technical-debt management. - Set the team's quality bar; oversee root cause analysis for complex incidents and lead phased rollouts that reduce blast radius. - Sponsor architectural decisions for squad-level projects and communicate trade-offs to non-technical stakeholders.   Translate strategy into execution - Cascade Foundation Security and ITSec strategy into the squad's roadmap, balancing regulatory commitments across international markets, AI enablement, and ongoing reduction of cloud configuration risk. - Manage small-to-moderate initiatives that span multiple stakeholders (Infrastructure peers, infrastructure teams, product engineering, compliance, GRC, procurement). - Own the squad's contribution to OKRs, monthly business reviews, and the Area business board.   Operate with accountability - Hold accountability for the squad's financials within ITSec's guidelines (tooling renewals, headcount, contracts). - Operate in compliance with corporate policies and risk-management processes. - Lead and mentor others within the squad; contribute to hiring panels across Foundation Security. WE ARE LOOKING FOR A PERSON WHO HAS   Must-have - Engineering Manager experience leading a software/security squad, or strong tech-lead/staff-level background with clear intent and readiness to move into people management. - Solid hands-on software engineering background — comfortable reading and reviewing code in at least one of Golang, Clojure, or Python, writing Shell/Python scripts for automation, and reviewing IaC (Terraform, Pulumi). - Working knowledge of AWS at scale (multi-account, Organizations, IAM, networking, Security Hub, Config). Familiarity with GCP is a strong plus. - Comfort designing and governing preventive controls (SCPs, Organization Policies, admission controllers) and remediation pipelines. - Track record of hiring, onboarding, and developing engineers; experience (or strong appetite) for running performance and career conversations. - Strong written and spoken communication in English; ability to make complex trade-offs clear to non-technical stakeholders. Nice-to-have - Prior experience building and shipping software products (not only operating off-the-shelf security tools) — internal platforms, services, CLIs, integrations, APIs. - Prior exposure to CSPM/CNAPP platforms (any major vendor). - Experience supporting regulatory or compliance workstreams (PCI, ISO 27001, banking regulators). - Familiarity with Kubernetes runtime security, event-streaming platforms, and large-scale data pipelines. - Experience embedding security into AI/ML infrastructure. - Hands-on use of AI coding assistants (Cursor, Claude Code, GitHub Copilot, or similar) to accelerate engineering work and team productivity. Tech stack you'll be exposed to - AWS, GCP, Terraform, Pulumi, CloudFormation, Kubernetes, Kafka, Golang, Clojure, Python, shell scripting, CSPM/CNAPP platforms, internal data pipelines, Looker/BigQuery, Jira. AI coding assistants are part of our daily engineering workflow. What we offer - A dedicated leadership seat in a squad with very high seniority and very high strategic relevance. - Direct line of sight to Nubank's regulatory and international expansion programs. - A squad that builds its own products in-house — you'll lead software engineers shipping real software, not coordinating ticket queues. - A peer group of EMs across Foundation Security (Runtime, Infrastructure, Data) and a senior management layer that operates with full financial and strategic accountability. - Exposure to multi-country, multi-cloud problems at the scale of Latin America's largest digital bank. OUR BENEFITS - Chance of earning equity at Nubank - Food/ Meal Card (Vale-Refeição and/or Vale Alimentação) - Public Transportation Commuting Benefit (Vale-Transporte) - NuCare – Psychological, Financial and Legal Assistance Program - Life Insurance - Medical Plan - Dental Plan - NuLanguage – Language Course Program - Nucleo - Our learning platform of courses - Extended Parental Leave - Daycare Allowance - Parental Consultancy - Work-from-home Allowance - Gym Partnerships - 30 days of paid vacation WORK MODEL FOR THIS ROLE Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/ By submitting an application, I acknowledge that I have read and understand the Nubank Candidate Privacy Notice. Nubank Candidate Privacy Notice (English https://building.nubank.com/privacy-notice-for-candidates// Portuguese https://building.nubank.com/pt-br/aviso-de-privacidade-para-candidatos/ / Spanish). https://nu.com.mx/aviso-de-privacidad-candidatos/", "summaryDescription" : "Security Engineering Manager (Cloud Security) at Nu. Skills: Cloud Security, Engineering Management, Software Engineering, IaC. Lead the squad. Set clear expectations", "createdAt" : "2026-06-16T01:59:31.753", "lastUpdated" : "2026-06-16T11:54:09.967", "ingestTimestamp" : "2026-06-16T01:59:31.753", "mongoId" : "6a307964f292fd229c031f80", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Multi-cloud patterns", "Event-driven controls", "Leadership", "Cloud Security", "Engineering Management", "Software Engineering", "IaC", "Technical leadership", "People management", "Career conversations", "Hiring talent", "Conflict mediation", "Performance management", "Team engagement", "Technical decisions", "Engineering excellence", "Code quality", "Test coverage", "Observability", "Technical-debt management", "Root cause analysis", "Phased rollouts", "Architectural decisions", "Stakeholder communication", "Strategy translation", "Roadmap management", "Risk management", "Financial accountability", "Process compliance", "Roadmap planning", "Cloud security", "AWS", "GCP", "Kubernetes", "International banking regulators", "AI enablement", "Cloud configuration risk", "Terraform", "Pulumi", "CloudFormation", "Kafka", "Jira", "GitHub Copilot" ], "skillCount" : 43, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c7eca74d8ee00a0953a6c", "title" : "Senior Software Security Architect", "company" : "Commvault", "industry" : "Technology", "salary" : { "min" : 3500000.0, "max" : 5500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Software Security Architect in Bangalore, India, adjusted for seniority, technology industry, and company size." }, "location" : "Bangalore, India", "locations" : [ "Bangalore", "India" ], "certifications" : [ "CSSLP", "CISSP", "SABSA", "TOGAF", "GICSP" ], "timestamp" : "2026-06-15T11:35:30.719", "fingerprint" : "3fb393e2d316c9b8b3e06681338966f529d212c6ce6e3e42c408a816b2092dff", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/commvault/jobs/5253729008", "externalId" : "5253729008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bangalore", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "12.9767936,77.5900820" } ], "locationText" : "Bangalore, India", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Software security, Cloud security, On-premises security, Hybrid security, GenAI solutions", "professionalSkills" : [ "Architecture review", "Threat modeling", "System design", "Security controls design", "Security patterns design" ], "hardSkillsList" : [ "Threat modeling methodologies", "Secure coding practices", "SDLC", "DevSecOps integration" ], "hardSkills" : [ { "name" : "Threat modeling methodologies", "level" : "intermediate" }, { "name" : "Secure coding practices", "level" : "intermediate" }, { "name" : "SDLC", "level" : "intermediate" }, { "name" : "DevSecOps integration", "level" : "intermediate" } ], "majorSkills" : "Software security architecture, Threat modeling, Security architecture review", "majorSkillsList" : [ "Software security architecture", "Threat modeling", "Security architecture review" ], "coreResponsibilities" : "Conduct security architecture reviews, Perform threat modeling, Identify security risks, Define mitigation strategies, Design secure systems, Guide secure software design, Evaluate automated tools, Implement automated tools, Support architecture reviews, Support security assessments, Create security architecture documentation, Maintain security architecture documentation, Provide expert guidance, Contribute to security standards, Contribute to security frameworks, Contribute to security processes, Stay current on threats, Stay current on vulnerabilities, Stay current on regulatory requirements", "teamCollaboration" : "Development teams; DevOps teams; Product owners; Technical stakeholders; Non-technical stakeholders", "domainKnowledge" : "Modern software development; Security best practices; Cloud platforms; Cyber resilience; Data protection; Data security; Data intelligence; Data recovery", "domainList" : [ "modern-software-development", "security-best-practices", "cloud-platforms", "cyber-resilience", "data-protection", "data-security", "data-intelligence", "data-recovery" ], "domainSpecificKnowledge" : [ "Modern software development", "Security best practices", "Cloud platforms", "Cyber resilience", "Data protection", "Data security", "Data intelligence", "Data recovery" ], "toolProficiency" : [ "IriusRisk", "ThreatModeler" ], "communicationSkills" : "Technical communication; Non-technical communication", "documentationSkills" : "Security architecture documentation", "qualificationsBasic" : "5+ years application security architecture, 5+ years software security architecture, Knowledge of threat modeling methodologies, Hands-on security architecture reviews, Familiarity with automated security tools, Experience reviewing GenAI solutions, Understanding of secure coding practices, Understanding of SDLC, Understanding of DevSecOps integration, Excellent communication skills", "qualificationsPreferred" : "CSSLP certification, CISSP certification, SABSA certification, TOGAF certification, GICSP certification, Experience in regulated environments, Familiarity with AWS, Familiarity with Azure, Familiarity with GCP, Experience in Agile environments, Experience in CI/CD environments", "rawDescription" : "Recruitment Fraud Alert We’ve learned that scammers are impersonating Commvault team members—including HR and leadership—via email or text. These bad actors may conduct fake interviews and ask for personal information, such as your social security number. What to know: Commvault does not conduct interviews by email or text. We will never ask you to submit sensitive documents (including banking information, SSN, etc) before your first day. If you suspect a recruiting scam, please contact us at wwrecruitingteam@commvault.com About Commvault Commvault (NASDAQ: CVLT) is the gold standard in cyber resilience. The company empowers customers to uncover, take action, and rapidly recover from cyberattacks – keeping data safe and businesses resilient. The company’s unique AI-powered platform combines best-in-class data protection, exceptional data security, advanced data intelligence, and lightning-fast recovery across any workload or cloud at the lowest TCO. For over 25 years, more than 100,000 organizations and a vast partner ecosystem have relied on Commvault to reduce risks, improve governance, and do more with data. Senior Software Security Architect The Opportunity: We are seeking a highly skilled Senior Software Security Architect to lead the design and evaluation of secure software architectures across a diverse range of systems and applications. The ideal candidate will have deep expertise in security architecture review and threat modeling, with a strong understanding of modern software development practices and security best practices. Experience with automated tools for security architecture analysis and relevant security certifications is strongly preferred. What you’ll do… Conduct in-depth security architecture reviews across cloud, on-premises, and hybrid environments. Perform threat modeling to identify potential security risks and define mitigation strategies early in the development of lifecycle. Work closely with development teams, DevOps, and product owners to design secure systems and guide secure software design decisions. Evaluate and implement automated tools to support architecture reviews and continuous security assessments. Create and maintain security architecture documentation and reusable patterns. Provide expert guidance on security controls, design patterns, and industry best practices. Contribute to the development and improvement of internal security standards, frameworks, and processes. Stay current on emerging threats, vulnerabilities, and regulatory requirements Who you are? 5+ years of experience in application or software security architecture. Strong knowledge of threat modeling methodologies (e.g., STRIDE, PASTA, OCTAVE). Hands-on experience conducting security architecture reviews for complex systems. Familiarity with automated security architecture tools (e.g., IriusRisk, ThreatModeler, Microsoft Threat Modeling Tool, or similar). Experience in reviewing architecture GenAI solutions Strong understanding of secure coding practices, software development lifecycle (SDLC), and DevSecOps integration. Excellent communication skills to collaborate with both technical and non-technical stakeholders. Preferred Qualifications: Relevant certifications such as CSSLP, CISSP, SABSA, TOGAF, or GICSP. Experience in regulated environments (e.g., finance, healthcare, or critical infrastructure). Familiarity with cloud platforms (AWS, Azure, GCP) and associated security architectures. Experience working in Agile or CI/CD environments. You’ll love working here because... Continuous professional development, product training, and career pathing Annual health check-ups, Tuition Reimbursement An inclusive company culture, an opportunity to join our Community Guilds Personal accident cover and Term life cover Ready to #makeyourmark at Commvault? Apply now! #LI-RK1 Commvault is an equal opportunity workplace and is an affirmative action employer. We are always committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status and we will not discriminate against on the basis of such characteristics or any other status protected by the laws or regulations in the locations where we work. Commvault’s goal is to make interviewing inclusive and accessible to all candidates and employees. If you have a disability or special need that requires accommodation to participate in the interview process or apply for a position at Commvault, please email accommodations@commvault.com For any inquiries not related to an accommodation please reach out to wwrecruitingteam@commvault.com. Commvault's Privacy Policy", "summaryDescription" : "Senior Software Security Architect at Commvault. Skills: Software security architecture, Threat modeling, Security architecture review. Conduct security architecture reviews. Perform threat modeling", "postedDate" : "2026-06-14T04:37:20.057", "createdAt" : "2026-06-14T04:37:20.057", "lastUpdated" : "2026-06-15T11:35:30.719", "ingestTimestamp" : "2026-06-14T04:37:20.057", "mongoId" : "6a2c7eca74d8ee00a0953a6c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Threat modeling methodologies", "Secure coding practices", "SDLC", "DevSecOps integration", "Software security architecture", "Threat modeling", "Security architecture review", "Architecture review", "System design", "Security controls design", "Security patterns design", "Modern software development", "Security best practices", "Cloud platforms", "Cyber resilience", "Data protection", "Data security", "Data intelligence", "Data recovery", "CSSLP", "CISSP", "SABSA", "TOGAF", "GICSP", "IriusRisk", "ThreatModeler" ], "skillCount" : 26, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "68c2e418f8b1b0376634c36a", "title" : "Security Engineer, Incident Response, CorpSec", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 125500.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T02:14:41.009", "fingerprint" : "1d73ed9116d8a3da3a8809fe15ae6abbeb90fed1911a7e130db33978905c1cf9", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3079013/apply", "externalId" : "6e9703e8-c44e-4f5b-9f27-1aa702f0786e", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Operating system security, Network security, Cryptography, Software security, Threat hunting, Detection engineering, Malware analysis, Forensics, Security operations, Incident response, Security intelligence, Programming language, Scripting language, Amazon Web Services", "professionalSkills" : [ "Security monitoring", "Response activities" ], "hardSkillsList" : [ "Incident response lifecycle", "Security monitoring", "Response activities", "Threat hunting", "Detection engineering", "Malware analysis", "Forensics", "Security operations", "Security intelligence" ], "softSkillsList" : [ "Leadership", "Curiosity", "Critical thinking" ], "hardSkills" : [ { "name" : "Incident response lifecycle", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Response activities", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Detection engineering", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Forensics", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Security intelligence", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Curiosity" }, { "name" : "Critical thinking" } ], "majorSkills" : "Incident response, Security engineering, Threat intelligence", "majorSkillsList" : [ "Incident response", "Security engineering", "Threat intelligence" ], "coreResponsibilities" : "Lead response to security issues, Conduct security monitoring, Conduct response activities", "teamCollaboration" : "Global team environment; Security issues", "domainKnowledge" : "Operating system security; Network security; Cryptography; Software security; Threat hunting; Detection engineering; Malware analysis; Forensics; Security operations; Incident response; Security intelligence; Cloud provider", "domainList" : [ "operating-system-security", "network-security", "cryptography", "software-security", "threat-hunting", "detection-engineering", "malware-analysis", "forensics", "security-operations", "incident-response", "security-intelligence", "cloud-provider" ], "domainSpecificKnowledge" : [ "Operating system security", "Network security", "Cryptography", "Software security", "Threat hunting", "Detection engineering", "Malware analysis", "Forensics", "Security operations", "Incident response", "Security intelligence", "Cloud provider" ], "toolProficiency" : [ "SOAR", "SIEM platforms" ], "communicationSkills" : "Clear communication; Accurate communication", "continuousLearning" : "Learn about security domains", "problemSolvingSkills" : "Think like attacker; Think like defender", "qualificationsBasic" : "BS degree in Computer Science or equivalent, 3 years systems, network, or application security experience, 3 years experience on Security team, Coordinating security incident responses, Proficiency with one high-level programming or scripting language", "qualificationsPreferred" : "Experience in security operations or incident response, Experience in security automation tooling, Experience in threat intelligence, Familiarity with threat hunting, Familiarity with detection engineering, Familiarity with malware analysis, Familiarity with forensics, Familiarity with SOAR, Familiarity with SIEM platforms, Familiarity with variety of Operating Systems, Experience with Amazon Web Services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS is looking for a passionate Security Engineer, Incident Response who can lead the response to security issues across the largest cloud provider in the world. You must thrive in high-pressure situations, and think like both an attacker and defender, while working through the entire incident response lifecycle. You’ll be working in a global team environment where clear and accurate communication and collaboration on security issues is critical. In this role you’ll be conducting security monitoring and response activities for the Amazon internal network. We value broad and deep technical knowledge, specifically in the fields of operating system security, network security, cryptography, software security, threat hunting, detection engineering, malware analysis, forensics, security operations, incident response, and emergent security intelligence. We don’t expect you to be an expert in all of the domains mentioned above, but we do expect you to be excited to learn about them! About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - BS degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent related field. Or equivalent industry certification. - 3 years of demonstrated experience with a focus in areas such as systems, network, and/or application security. - 3 years experience on a Security team, especially experience coordinating responses to security incidents. Proficiency with one high-level programming or scripting language. Preferred Qualifications: - Experience working in security operations or incident response, security automation tooling, or threat intelligence. - Familiarity with threat hunting, detection engineering, malware analysis, forensics, SOAR, SIEM platforms, and a variety of Operating Systems (MS Windows, Linux, MacOS). - Experience with Amazon Web Services. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $125,500/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Engineer, Incident Response, CorpSec at Amazon.com Services LLC. Skills: Incident response, Security engineering, Threat intelligence. Lead response to security issues. Conduct security monitoring", "postedDate" : "2026-06-13T11:16:05.380", "createdAt" : "2026-06-13T11:16:05.380", "lastUpdated" : "2026-06-15T02:14:41.009", "ingestTimestamp" : "2026-06-13T11:16:05.380", "mongoId" : "68c2e418f8b1b0376634c36a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3079013/apply", "salaryAnnualMin" : 125500, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Incident response lifecycle", "Security monitoring", "Response activities", "Threat hunting", "Detection engineering", "Malware analysis", "Forensics", "Security operations", "Security intelligence", "Leadership", "Curiosity", "Critical thinking", "Incident response", "Security engineering", "Threat intelligence", "Operating system security", "Network security", "Cryptography", "Software security", "Cloud provider", "SOAR", "SIEM platforms" ], "skillCount" : 22, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Computing" }, { "id" : "693c2b8570f0b99d5843fa19", "title" : "SAP Security Architect", "company" : "ADCI HYD", "industry" : "Solutions Architect, Solution Architect, finance", "salary" : { "min" : 2200000.0, "max" : 3500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior SAP Security Architect in Hyderabad, India, adjusted for the FinTech industry and full-time employment." }, "location" : "Hyderabad, Telangana, IND", "locations" : [ "Hyderabad, Telangana, IND" ], "timestamp" : "2026-06-15T02:52:11.740", "fingerprint" : "0ae6a334c9843f984aa2c5d3d99e6694b34686439caded12f0135c42a04a5060", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3138851/apply", "externalId" : "7a1b2d50-6fef-4c83-8183-11dfe80e1e48", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Hyderabad", "state" : "Telangana", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "17.3605890,78.4740613" } ], "locationText" : "Hyderabad, Telangana, India", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SAP, ECC, S/4HANA, BW, GRC", "professionalSkills" : [ "Risk assessment", "Security policies", "Security audits" ], "hardSkillsList" : [ "User access management", "Authorization management", "Role configuration", "Profile configuration", "Security standards compliance", "Security breach monitoring", "Corrective actions" ], "hardSkills" : [ { "name" : "User access management", "level" : "intermediate" }, { "name" : "Authorization management", "level" : "intermediate" }, { "name" : "Role configuration", "level" : "intermediate" }, { "name" : "Profile configuration", "level" : "intermediate" }, { "name" : "Security standards compliance", "level" : "intermediate" }, { "name" : "Security breach monitoring", "level" : "intermediate" }, { "name" : "Corrective actions", "level" : "intermediate" } ], "majorSkills" : "SAP Security, SAP GRC, Security Architecture", "majorSkillsList" : [ "SAP Security", "SAP GRC", "Security Architecture" ], "coreResponsibilities" : "Manage user access, Manage authorizations, Configure security roles, Configure security profiles, Conduct risk assessments, Implement mitigation strategies, Ensure compliance, Lead SAP security projects, Develop security policies, Maintain security policies, Develop security procedures, Maintain security procedures, Develop security documentation, Maintain security documentation, Monitor SAP systems, Take corrective actions, Conduct security audits, Provide audit reports, Work with IT teams, Work with business teams, Provide end-user training, Support end-users", "teamCollaboration" : "Work with IT teams; Work with business teams", "projectManagementSkills" : [ "Project leadership" ], "domainKnowledge" : "SAP security; SAP modules; Security standards; Security regulations", "domainList" : [ "sap-security", "sap-modules", "security-standards", "security-regulations" ], "domainSpecificKnowledge" : [ "SAP security", "SAP modules", "Security standards", "Security regulations" ], "toolProficiency" : [ "SAP GRC" ], "documentationSkills" : "Security documentation", "problemSolvingSkills" : "Risk mitigation", "qualificationsBasic" : "5+ years technology domain experience, 5+ years design, implementation, consulting experience, Proven SAP security management experience, In-depth SAP security knowledge, Experience with SAP GRC", "qualificationsPreferred" : "Software development experience, Internet-related industries experience, Migrating legacy solutions to cloud, S/4HANA security features experience, SAP Fiori security experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We are seeking a highly experienced SAP Security architect to join our team. The ideal candidate will be responsible for ensuring the security and integrity of our SAP systems, implementing and maintaining security policies, and providing expert guidance on SAP security best practices. Key job responsibilities * Manage user access and authorizations in SAP systems. * Configure and maintain security roles and profiles in various SAP modules (ECC, S/4HANA, BW, GRC, etc.). * Conduct risk assessments and implement mitigation strategies. * Ensure compliance with internal and external security standards and regulations. * Lead SAP security projects, including implementations, upgrades, and enhancements. * Develop and maintain security policies, procedures, and documentation. * Monitor SAP systems for security breaches and take corrective actions as necessary. * Conduct regular security audits and provide detailed reports on findings and recommendations. * Work closely with other IT and business teams to ensure seamless integration of security measures. * Provide training and support to end-users on security-related issues. Basic Qualifications: - 5+ years of specific technology domain areas (e.g. software development, cloud computing, systems engineering, infrastructure, security, networking, data & analytics) experience - 5+ years of design, implementation, or consulting in applications and infrastructures experience - Proven track record in managing and implementing SAP security in large organizations. - In-depth knowledge of SAP security concepts, including roles, profiles, and authorizations. - Experience with SAP GRC (Governance, Risk, and Compliance) solutions. Preferred Qualifications: - Experience working within software development or Internet-related industries - Experience migrating or transforming legacy customer solutions to the cloud - Experience with S/4HANA security features - Experience with SAP Fiori security Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "SAP Security Architect at ADCI HYD. Skills: SAP Security, SAP GRC, Security Architecture. Manage user access. Manage authorizations", "postedDate" : "2026-06-13T05:01:28.110", "createdAt" : "2026-06-13T05:01:28.110", "lastUpdated" : "2026-06-15T02:52:11.740", "ingestTimestamp" : "2026-06-13T05:01:28.110", "mongoId" : "693c2b8570f0b99d5843fa19", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3138851/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "User access management", "Authorization management", "Role configuration", "Profile configuration", "Security standards compliance", "Security breach monitoring", "Corrective actions", "SAP Security", "SAP GRC", "Security Architecture", "Risk assessment", "Security policies", "Security audits", "Project leadership", "SAP security", "SAP modules", "Security standards", "Security regulations" ], "skillCount" : 18, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Fintech" }, { "id" : "6a09f21e1663d49372a845c6", "title" : "Security Software Dev Engineer II, AWS Security Corporate Response", "company" : "Amazon Web Services, Inc.", "industry" : "Software Development, amazon security", "salary" : { "min" : 143700.0, "max" : 194400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T06:06:55.041", "fingerprint" : "904f0aa67a81b6232f23b2103c3a0821861d5aeddf314d79f37eabe4d6677bc4", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10410517/apply", "externalId" : "7b963d63-e85c-488e-8ac7-ba83a3f3d74f", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS, Gen AI, Amazon Bedrock", "professionalSkills" : [ "Security response", "Software development", "Automation" ], "hardSkillsList" : [ "Software development", "System design", "Automation" ], "hardSkills" : [ { "name" : "Software development", "level" : "intermediate" }, { "name" : "System design", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" } ], "majorSkills" : "Security software, Automation, AWS services", "majorSkillsList" : [ "Security software", "Automation", "AWS services" ], "coreResponsibilities" : "Drive operational excellence, Design software processes, Implement software processes, Design intelligent automations, Implement intelligent automations, Streamline security response workflows, Build agentic automations, Empower security engineers, Collaborate with global teams, Identify automation opportunities, Identify tooling improvements, Leverage modern technologies, Leverage AWS services, Create scalable solutions, Enhance security operations, Deliver delightful software", "teamCollaboration" : "Global security teams", "domainKnowledge" : "AWS security; Corporate network security; Security response", "domainList" : [ "aws-security", "corporate-network-security", "security-response" ], "domainSpecificKnowledge" : [ "AWS security", "Corporate network security", "Security response" ], "innovationCreativity" : "Develop innovative automations", "problemSolvingSkills" : "Troubleshoot security issues", "outcomesObjectives" : "Strengthen security posture; Increase engineer productivity", "qualificationsBasic" : "3+ years software development experience, 2+ years system design experience, Experience programming one language, Experience programming Amazon Bedrock, Experience programming Gen AI platform", "qualificationsPreferred" : "3+ years full SDLC experience, Bachelor's in computer science", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Join us in developing and scaling security solutions that protect Amazon's global operations. As a Security Software Development Engineer, you'll create innovative automations and tools that transform how our security teams respond to threats and vulnerabilities. Your work will directly impact the productivity of security engineers worldwide and strengthen the security posture of AWS and for our customers. Key job responsibilities • Drive operational excellence by designing and implementing software processes, procedures, and intelligent automations that streamline security response workflows • Build agentic automations that empower security engineers to work more efficiently and effectively • Collaborate with global security teams to identify high-impact opportunities for automation and tooling improvements • Leverage modern technologies and AWS services to create scalable solutions that enhance security operations • Deliver software that delights users with measurable efficiency and productivity gains About the team AWS Security Corporate Response (CorpSec) protects the corporate network environment that enables all Amazon employees to innovate securely for our customers. We respond to security issues across the corporate network with speed and precision, ensuring the world's largest cloud provider maintains the highest security standards. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences with amazing outcomes, don’t let it stop you from applying. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 3+ years of non-internship professional software development experience - 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience programming with at least one software programming language - Experience programming with Amazon Bedrock or another Gen AI platform. Preferred Qualifications: - 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually", "summaryDescription" : "Security Software Dev Engineer II, AWS Security Corporate Response at Amazon Web Services, Inc.. Skills: Security software, Automation, AWS services. Drive operational excellence. Design software processes", "postedDate" : "2026-06-13T16:08:57.360", "createdAt" : "2026-06-13T16:08:57.360", "lastUpdated" : "2026-06-15T06:06:55.041", "ingestTimestamp" : "2026-06-13T16:08:57.360", "mongoId" : "6a09f21e1663d49372a845c6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10410517/apply", "salaryAnnualMin" : 143700, "salaryAnnualMax" : 194400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Software development", "System design", "Automation", "Security software", "AWS services", "Security response", "AWS security", "Corporate network security" ], "skillCount" : 8, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "68e0a7e2ce260f92cbf8e942", "title" : "Security Engineer II, Vulnerability Management and Response - Strategic Enablement", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 136000.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Austin, Texas, USA", "locations" : [ "Austin, Texas, USA" ], "timestamp" : "2026-06-15T09:15:18.623", "fingerprint" : "117e801c7a4133b8bc6ed1074831ce8206fd82569a5f38752ff077c79d551b72", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3100997/apply", "externalId" : "580f56ff-1bb7-4c9f-b419-8c79a924b032", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Python, Ruby, Go, Swift, Java, Net, C++, HTTP, DNS, TCP/IP, SQL, Lambda", "professionalSkills" : [ "Technical specifications", "User acceptance testing", "Security research", "Data analysis" ], "hardSkillsList" : [ "Vulnerability management", "Remediation automation", "Vulnerability detection", "Data analysis", "Security research" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Remediation automation", "level" : "intermediate" }, { "name" : "Vulnerability detection", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Security research", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Vulnerability Management, Automation, Data Analysis", "majorSkillsList" : [ "Vulnerability Management", "Automation", "Data Analysis" ], "coreResponsibilities" : "Develop security automation workflows, Optimize security automation workflows, Integrate security tools, Design proof-of-concepts, Script proof-of-concepts, Implement proof-of-concepts, Collaborate with TPMs, Collaborate with SDE teams, Translate requirements, Ensure seamless integration, Conduct user acceptance testing, Build queries, Analyze data, Conduct security research, Analyze emergent vulnerabilities, Identify emerging threats, Identify detection opportunities, Enhance detection capabilities, Mentor junior engineers, Contribute to technical growth, Share knowledge", "teamCollaboration" : "Security operations; Development teams; TPMs and SDE teams; VMR Operations; Security engineers; TPMs", "projectManagementSkills" : [ "Program requirements" ], "domainKnowledge" : "Vulnerability management; Host environments; Container environments; Network security; Cloud-native architecture", "domainList" : [ "vulnerability-management", "host-environments", "container-environments", "network-security", "cloud-native-architecture" ], "domainSpecificKnowledge" : [ "Vulnerability management", "Host environments", "Container environments", "Network security", "Cloud-native architecture" ], "toolProficiency" : [ "AWS" ], "communicationSkills" : "Leadership review", "continuousLearning" : "Knowledge sharing", "innovationCreativity" : "Prototyping; Rapid prototyping", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Measurable impact; Security outcomes", "qualificationsBasic" : "3+ years programming Python, Bachelor's degree computer science, Knowledge networking protocols", "qualificationsPreferred" : "2+ years threat modeling, 2+ years secure coding, 2+ years identity management, 2+ years software development, 2+ years cryptography, 2+ years system administration, 2+ years network security, Experience AWS products, Experience programming language", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Security's Vulnerability Management and Response - Strategic Enablement team is looking for a Security Engineer II. This team is revolutionizing vulnerability management through advanced remediation automation, innovative vulnerability detection solutions, data-driven insights, and more. Be part of a dynamic group that bridges security operations and development, creating measurable impact across Amazon's vast ecosystem. Key job responsibilities -Develop and optimize security automation workflows to operationalize new capabilities, including integration with existing security tools and platforms across Amazon's infrastructure -Design, script, and implement quick proof-of-concepts for vulnerability detection, assessment, and remediation across host and container environments, enabling rapid validation of new solutions and approaches -Collaborate with TPMs and SDE teams to translate program requirements into technical specifications, ensure seamless integration with existing systems, and conduct user acceptance testing for new security capabilities -Build queries and analyze data to extract actionable insights on vulnerability management effectiveness, supporting data-driven decision making and informed program improvements -Conduct security research and analysis on emergent vulnerabilities to identify emerging threats, new detection opportunities, and methods to enhance existing vulnerability detection capabilities -Mentor junior engineers and contribute to the technical growth and knowledge sharing within the team A day in the life Start your morning reviewing last night's vulnerability scan data and building SQL queries to analyze patterns across thousands of Amazon hosts. Collaborate with VMR Operations on technical specifications for a new container vulnerability detection pattern, then code Lambda scripts to integrate new capabilities with the workflow management platform. Mid-day brings a design review with SDE teams, ensuring custom detection logic scales seamlessly. Mentor a junior engineer on API integration techniques, then end the day testing your automation workflow and preparing actionable insights for tomorrow's leadership review. About the team The VMR Strategic Enablement team bridges security operations and development, transforming vulnerability data into measurable security outcomes. We embrace a \"Think Fast, Learn Faster\" culture where rapid prototyping validates new solutions and data drives every decision. Our diverse team of security engineers and TPMs collaborates across the full vulnerability lifecycle, building custom detection capabilities, operationalizing security programs, and creating metrics that demonstrate real impact across Amazon's infrastructure. Basic Qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - Bachelor's degree in computer science or equivalent - Knowledge of networking protocols such as HTTP, DNS and TCP/IP Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Experience with AWS products and services - Experience with programming languages such as Python, Java, C++ - Knowledge of data engineering pipelines, cloud solutions, ETL management, databases, visualizations and analytical platforms - Experience with data engineering concepts including data pipelines, ETL processes, and working with large-scale security datasets Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $136,000/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Engineer II, Vulnerability Management and Response - Strategic Enablement at Amazon.com Services LLC. Skills: Vulnerability Management, Automation, Data Analysis. Develop security automation workflows. Optimize security automation workflows", "postedDate" : "2026-06-14T02:20:34.538", "createdAt" : "2026-06-14T02:20:34.538", "lastUpdated" : "2026-06-15T09:15:18.623", "ingestTimestamp" : "2026-06-14T02:20:34.538", "mongoId" : "68e0a7e2ce260f92cbf8e942", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3100997/apply", "salaryAnnualMin" : 136000, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Vulnerability management", "Remediation automation", "Vulnerability detection", "Data analysis", "Security research", "Mentoring", "Vulnerability Management", "Automation", "Data Analysis", "Technical specifications", "User acceptance testing", "Program requirements", "Host environments", "Container environments", "Network security", "Cloud-native architecture", "AWS" ], "skillCount" : 17, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a306026f292fd229cf8681a", "title" : "Security Researcher", "company" : "Cato Networks", "industry" : "Cybersecurity", "salary" : { "min" : 280000.0, "max" : 420000.0, "currency" : "ILS", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Security Researcher in Tel Aviv, Israel, adjusted for the cybersecurity industry and company size." }, "location" : "Tel Aviv District, Israel", "locations" : [ "Tel Aviv District", "Israel", "Tel Aviv District", "Israel" ], "timestamp" : "2026-06-16T06:41:13.750", "fingerprint" : "b35b8aaa05f05ffc4cc8cad0400b93ea607adac52ff31aaec9bd9d838474c424", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.catonetworks.com/careers/careers-post/4864022101?gh_jid=4864022101", "externalId" : "4864022101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tel Aviv", "state" : "Tel Aviv District", "country" : "Israel", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "32.0852997,34.7818064" } ], "locationText" : "Tel Aviv, Tel Aviv District, Israel", "employmentType" : "FULL_TIME", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "SQL, AI tools, AI coding assistants, Agentic workflows, Python", "professionalSkills" : [ "Data analysis", "Threat research", "Automation" ], "hardSkillsList" : [ "Threat intelligence", "Adversarial TTPs", "Cybersecurity trends", "Attack techniques", "IOCs", "MITRE ATT&CK", "Threat actors", "Campaigns" ], "softSkillsList" : [ "Self-sufficient", "Disciplined" ], "hardSkills" : [ { "name" : "Threat intelligence", "level" : "intermediate" }, { "name" : "Adversarial TTPs", "level" : "intermediate" }, { "name" : "Cybersecurity trends", "level" : "intermediate" }, { "name" : "Attack techniques", "level" : "intermediate" }, { "name" : "IOCs", "level" : "intermediate" }, { "name" : "MITRE ATT&CK", "level" : "intermediate" }, { "name" : "Threat actors", "level" : "intermediate" }, { "name" : "Campaigns", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Self-sufficient" }, { "name" : "Disciplined" } ], "majorSkills" : "Threat intelligence, Data analysis, AI threats", "majorSkillsList" : [ "Threat intelligence", "Data analysis", "AI threats" ], "coreResponsibilities" : "Monitor cybersecurity threat landscape, Analyze cybersecurity threat landscape, Research threat actors, Research attack techniques, Research campaigns, Research emerging threats, Analyze internal data warehouse, Identify security trends, Identify attack patterns, Identify actionable insights, Use SQL for research, Use scripting for research, Use AI tools for research, Build internal tools, Build workflows, Build AI agents, Improve research efficiency, Improve data investigation, Produce threat research content, Write blogs, Write reports, Write customer-facing insights, Present research findings, Collaborate with SOC, Collaborate with product, Collaborate with research, Collaborate with data teams, Improve detections, Improve product intelligence, Manage research projects, Present research externally", "teamCollaboration" : "Internal security teams; SOC teams; Product teams; Research teams; Data teams; Underground intelligence teams", "projectManagementSkills" : [ "Manage research projects" ], "domainKnowledge" : "Cloud networking; Network security; SASE; Malware; Phishing; C&C; Exploitation; Attacker behavior; AI threats", "domainList" : [ "cloud-networking", "network-security", "sase", "malware", "phishing", "c-c", "exploitation", "attacker-behavior", "ai-threats" ], "domainSpecificKnowledge" : [ "Cloud networking", "Network security", "SASE", "Malware", "Phishing", "C&C", "Exploitation", "Attacker behavior", "AI threats" ], "toolProficiency" : [ "AI tools", "AI coding assistants", "Agentic workflows" ], "communicationSkills" : "Written communication; Verbal communication; Presentations; Blogs; Reports", "documentationSkills" : "Technical research; Blogs; Reports", "problemSolvingSkills" : "Data analysis; Automation", "qualificationsBasic" : "3+ years cybersecurity experience, 3+ years threat intelligence experience, 3+ years threat research experience, 3+ years security analysis experience, Understanding cybersecurity threat landscape, Practical knowledge threat intelligence concepts, SQL and data analysis skills, Ability to build scripts, Ability to build tools, Ability to build lightweight agents, Fluent English", "qualificationsPreferred" : "Experience publishing blogs, Experience publishing reports, Experience publishing whitepapers, Experience publishing conference talks, Experience with Python, Experience with BI tools, Experience with data warehouses, Experience with XDR, Experience with MDR, Experience with SIEM, Experience with EDR, Experience with NDR, Experience with SASE products", "workSiteFlexibility" : "Onsite", "rawDescription" : "Welcome to the future of cloud networking and security! Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by networking and security pioneer Shlomo Kramer (Check Point, Imperva) and early investor (Palo Alto Networks, Exabeam, Trusteer and more). Cato’s unique technology inspired a brand-new product category, later named “SASE” by Gartner and a market expected to reach $28.5 billion by 2028. This is your opportunity to get on the rocket ship and join a company that is building a cutting-edge enterprise network and secure cloud platform, and is on a fast track to becoming the worldwide market leader – don’t miss it! Cato Networks is looking for a network and Security Researcher. This key position within the threat intelligence group will be in charge of analyzing the vast amount of data that is managed by Cato Networks, develop threat intelligence on adversarial TTPs (tactics, techniques and procedures) and generate reports, presentations and blogs on anomalies and tools identified. This role goes beyond the analyst role, as a key member of the team the threat intelligence researcher will work with internal security teams, network data, underground intelligence teams and much more, performing cutting edge research followed by presenting the research externally via various mediums. Responsibilities Monitor and analyze the evolving cybersecurity threat landscape, with a focus on threat intelligence and AI-related security trends Research threat actors, attack techniques, campaigns, and emerging threats using external intelligence and internal data Analyze Cato’s internal data warehouse to identify security trends, attack patterns, and actionable insights Use SQL, scripting, and AI tools to support threat research, data analysis, and automation Build internal tools, workflows, or AI agents to improve research efficiency and data investigation Produce high-quality threat research content, including blogs, reports, and customer-facing insights Present research findings at conferences, webinars, company events, and internal sessions Collaborate with SOC, product, research, and data teams to improve detections and product intelligence Independently manage research projects from idea to analysis, publication, and presentation Requirements: Proven experience in cybersecurity, 3+ Years, threat intelligence, threat research, or security analysis Strong understanding of the cybersecurity threat landscape, including malware, phishing, C&C, exploitation, and attacker behavior Practical knowledge of threat intelligence concepts, including IOCs, TTPs, MITRE ATT&CK, threat actors, and campaigns Strong SQL and data analysis skills, with the ability to extract insights from large datasets Comfortable using AI tools, AI coding assistants, and agentic workflows for research and automation Ability to build scripts, tools, or lightweight agents to support security research Strong writing skills, with the ability to publish detailed and compelling technical research Strong presentation skills and ability to represent Cato at conferences and company events High curiosity around AI threats, threat actors, and emerging cybersecurity trends Self-sufficient, disciplined, and able to independently drive research initiatives Fluent English with excellent written and verbal communication skills Advantageous: Experience publishing blogs, reports, whitepapers, or conference talks Advantageous: Experience with Python, BI tools, data warehouses, XDR, MDR, SIEM, EDR, NDR, or SASE products", "summaryDescription" : "Security Researcher at Cato Networks. Skills: Threat intelligence, Data analysis, AI threats. Monitor cybersecurity threat landscape. Analyze cybersecurity threat landscape", "postedDate" : "2026-06-15T23:27:42.408", "createdAt" : "2026-06-15T23:27:42.408", "lastUpdated" : "2026-06-16T06:41:13.750", "ingestTimestamp" : "2026-06-15T23:27:42.408", "mongoId" : "6a306026f292fd229cf8681a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Threat intelligence", "Adversarial TTPs", "Cybersecurity trends", "Attack techniques", "IOCs", "MITRE ATT&CK", "Threat actors", "Campaigns", "Self-sufficient", "Disciplined", "Data analysis", "AI threats", "Threat research", "Automation", "Manage research projects", "Cloud networking", "Network security", "SASE", "Malware", "Phishing", "C&C", "Exploitation", "Attacker behavior", "AI tools", "AI coding assistants", "Agentic workflows" ], "skillCount" : 26, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.95 }, { "id" : "6a191e7758b93c861e39f695", "title" : "Senior SAP Cyber Security Architect", "company" : "Mercedes-Benz Canada", "industry" : "Technology", "salary" : { "min" : 103636.0, "max" : 142499.0, "currency" : "CAD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Canada-Ontario-Mississauga", "locations" : [ "Canada-Ontario-Mississauga", "2680 Matheson Blvd East, Suite 500, , Mississauga" ], "certifications" : [ "CISSP", "CISM", "SAP Security", "SAP GRC" ], "timestamp" : "2026-06-16T02:46:41.727", "fingerprint" : "3f29cecad54047252ac18226338897c7b4319136a9210e84528353d86950ae1f", "source" : "taleo", "language" : "en", "applyUrl" : "https://tas-daimler.taleo.net/careersection/ex/jobdetail.ftl?job=896858", "externalId" : "896858", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Mississauga", "state" : "Ontario", "country" : "Canada", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "43.5884727,-79.6436580" } ], "locationText" : "Mississauga, Ontario, Canada", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SAP Basis, SAP Cloud, SAP S/4HANA, Azure AD, Entra ID", "professionalSkills" : [ "System design", "Risk management", "Stakeholder communication" ], "hardSkillsList" : [ "SAP security concepts", "IT security principles", "Identity management" ], "softSkillsList" : [ "Honest", "Professional", "Bold", "Innovative" ], "hardSkills" : [ { "name" : "SAP security concepts", "level" : "intermediate" }, { "name" : "IT security principles", "level" : "intermediate" }, { "name" : "Identity management", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Honest" }, { "name" : "Professional" }, { "name" : "Bold" }, { "name" : "Innovative" } ], "teamCollaboration" : "Internal stakeholders; Global Cyber Security team; SAP Basis teams; SAP development teams; SAP business teams; CISO organization; Global cyber security", "domainKnowledge" : "SAP systems; SAP Cloud solutions; SAP SaaS; SAP RISE; Enterprise security strategy; Regulatory frameworks", "domainList" : [ "sap-systems", "sap-cloud-solutions", "sap-saas", "sap-rise", "enterprise-security-strategy", "regulatory-frameworks" ], "domainSpecificKnowledge" : [ "SAP systems", "SAP Cloud solutions", "SAP SaaS", "SAP RISE", "Enterprise security strategy", "Regulatory frameworks" ], "toolProficiency" : [ "SAP IAM" ], "communicationSkills" : "Stakeholder communication; Technical audiences; Non-technical audiences", "documentationSkills" : "Document SAP security standards; Document SAP security procedures", "innovationCreativity" : "Drive innovation", "problemSolvingSkills" : "Identify best course of action; Implement solutions", "qualificationsBasic" : "5+ years of hands-on SAP experience, Primary expertise in SAP technologies, Secondary focus on security, Experience in SAP security concepts, Experience in IT security principles, Fluent in English", "qualificationsPreferred" : "SAP Cloud experience, Relevant certifications, CISSP, CISM, SAP Security certification, SAP GRC certification, German language", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Senior SAP Cyber Security Architect Mercedes-Benz Canada needs stars like you! Mercedes-Benz is the world’s first automotive brand, and remains at the cutting-edge of sustainability, design, digitalization, connectivity, technology, fashion, and popular culture. The iconic three-pointed star is always looking for the best and brightest. We are seeking individuals who want to be in the driver’s seat of transformation, working alongside talented colleagues who represent the Mercedes-Benz values. Do you want to be part of writing the next chapter of the Mercedes-Benz story? How your role will add to the story: We are seeking an Senior SAP Cyber Security Architect to join our Global Cyber Security team. Working closely with internal stakeholders, this role bridges IT security and SAP operations to ensure compliance and protect data against evolving threats. If you have a proven track record in designing, implementing, and governing security controls for SAP systems and want to make a tangible impact within a global Fortune Global 500 company, we would like to hear from you. A day in the life Design secure SAP system architectures and continuously enhance existing landscapes, including SAP Basis, SAP Cloud, SAP Cloud solutions (BTP and SAP SaaS), and SAP IAM. Act as a trusted partner for global SAP transformations to SAP RISE and for the expansion of security controls. Define, document, and validate SAP security standards and procedures, including operating procedures, exception management, hardening measures, and additional security services such as secure defaults and the protection of RFC, API, and interface communications. Define and reshape the SAP Secure Operations Map and contribute to SAP security architecture, controls, and global services across a worldwide SAP landscape. Lead SAP integration within a landscape of global IAM services. Act as a trusted advisor to SAP Basis, development, and business teams by translating security requirements into practical SAP solutions. Align SAP security architecture with enterprise security strategy, risk management, and regulatory frameworks. Serve as a central communication and consulting partner for the SAP organization, CISO organization, global cyber security, SAP, and external parties. Integrate SAP cyber security seamlessly into global cyber security services. Provide advisory support for audits, assurance reviews, and control testing. Succeed in stakeholder communication and influence across technical and non-technical audiences. Vacancy Status: This posting reflects an approved, current vacancy within Mercedes-Benz Canada. Posting Range : $103,636 - $142,499 Mercedes-Benz Canada is committed to fostering an inclusive, equitable, and accessible environment where all employees and customers feel valued, respected, and supported. While we thank every applicant for their interest in joining our iconic brand, we will only contact applicants selected for an interview. If you require accommodation because of a disability, please reach out to mbcrecruitment@mercedes-benz.ca and we will work with you to meet your needs throughout the recruitment, assessment, and selection process as applicable. Testimonials from several Mercedes-Benz Canada stars, from an intern to an executive: “Mercedes-Benz is more than a car brand; it’s a futuristic, technological brand continuing to research and evolve its strategy as a digital and luxurious company, all while championing sustainable initiatives.” “This company grants its members the opportunity to professionally grow and discover the extent of the brand and its presence in all countries. You are granted the opportunity to drive innovation in several sectors, as this company allows you to take your career wherever you like with our very robust framework of opportunities, whether it’s rotations, international assignments, education programs and more.” “As an intern, I feel a great sense of responsibility and accountability at Mercedes-Benz. The high level of responsibility and contribution found in our internship programs is unlike my experience anywhere else.” “Most people, if not everyone, seek a great balance of life at work and outside of it. At Mercedes-Benz, not only does your work life grant you exciting opportunities, but you are also afforded great understanding of your time outside of work - including the right to disconnect.” “Working for Mercedes-Benz, it’s certainly the brand and the pillars - but at the end of the day, once you’re in, it’s about the people, the experience, diverse cultures and backgrounds, everyone’s experience driving in one direction.” Mercedes-Benz Star skills, requirements & traits: University or college degree in Computer Science, Information Technology, or a related field, or 5+ years of hands-on SAP experience Primary expertise in SAP technologies, including SAP Basis and SAP architecture; SAP Cloud experience is highly desirable. Secondary focus on security, with experience in SAP security concepts and IT security principles. Strong technical knowledge of SAP S/4HANA, SAP Governance, Risk, and Compliance (GRC), and identity and access management integrations, e.g. Azure AD / Entra ID. Relevant certifications such as CISSP, CISM, and/or SAP Security or SAP GRC are an advantage. Passion for viewing processes and procedures as opportunities for improvement, optimization, and further development. Self-motivated, with the ability to identify the best course of action and implement solutions that reduce manual effort and improve efficiency. Honest and professional, with a proactive mindset that supports a team culture of knowledge sharing, excellence, and collaboration. Fluent in English. German is a plus. Bold, innovative and enjoy challenging yourself Honest and professional, a strong team player Big picture thinker, go-getter, self-starter Being a Mercedes-Benz star has its benefits: Commitment to inclusion & diversity Engaging corporate culture Ever-evolving brand strategy granting opportunities to build business acumen Training development and career growth opportunities Benefits to support work-life balance/integration A strong portfolio of corporate social responsibility initiatives State-of-the-art working facilities Vehicle purchase and experience programs Comprehensive health, dental, and pension programs Recognition rewards and discount programs Mercedes-Benz Canada Inc.", "summaryDescription" : "Senior SAP Cyber Security Architect at Mercedes-Benz Canada", "createdAt" : "2026-06-14T20:49:56.686", "lastUpdated" : "2026-06-16T02:46:41.727", "ingestTimestamp" : "2026-06-14T20:49:56.686", "mongoId" : "6a191e7758b93c861e39f695", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "SAP security concepts", "IT security principles", "Identity management", "Honest", "Professional", "Bold", "Innovative", "System design", "Risk management", "Stakeholder communication", "SAP systems", "SAP Cloud solutions", "SAP SaaS", "SAP RISE", "Enterprise security strategy", "Regulatory frameworks", "CISSP", "CISM", "SAP Security", "SAP GRC", "SAP IAM" ], "skillCount" : 21, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Automotive", "llmIndustryConfidence" : 0.95 }, { "id" : "6a18111858b93c861e08d6cd", "title" : "Senior SAP Cyber Security Architect", "company" : "Mercedes-Benz Canada", "industry" : "Technology", "salary" : { "min" : 103636.0, "max" : 142499.0, "currency" : "CAD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Canada-Ontario-Mississauga", "locations" : [ "Canada-Ontario-Mississauga", "2680 Matheson Blvd East, Suite 500, , Mississauga" ], "certifications" : [ "CISSP", "CISM", "SAP Security", "SAP GRC" ], "timestamp" : "2026-06-16T02:06:50.893", "fingerprint" : "6d678e8a4faae6380cfa95585b5390b43b6b5399ddfd827672a7d876200bd6e3", "source" : "taleo", "language" : "en", "applyUrl" : "https://daimler.taleo.net/careersection/ex/jobdetail.ftl?job=896858", "externalId" : "896858", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Mississauga", "state" : "Ontario", "country" : "Canada", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "43.5884727,-79.6436580" } ], "locationText" : "Mississauga, Ontario, Canada", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SAP Basis, SAP Cloud, SAP S/4HANA, Azure AD, Entra ID", "professionalSkills" : [ "System design", "Risk management", "Stakeholder communication" ], "hardSkillsList" : [ "SAP security concepts", "IT security principles" ], "softSkillsList" : [ "Honest", "Professional", "Bold", "Innovative" ], "hardSkills" : [ { "name" : "SAP security concepts", "level" : "intermediate" }, { "name" : "IT security principles", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Honest" }, { "name" : "Professional" }, { "name" : "Bold" }, { "name" : "Innovative" } ], "teamCollaboration" : "Internal stakeholders; Global Cyber Security team; SAP Basis teams; SAP development teams; SAP business teams; CISO organization; Global cyber security; External parties", "domainKnowledge" : "SAP systems; SAP Cloud solutions; SAP SaaS; SAP IAM; SAP RISE; RFC communications; API communications; Interface communications; Global SAP landscape; Enterprise security strategy; Regulatory frameworks", "domainList" : [ "sap-systems", "sap-cloud-solutions", "sap-saas", "sap-iam", "sap-rise", "rfc-communications", "api-communications", "interface-communications", "global-sap-landscape", "enterprise-security-strategy", "regulatory-frameworks" ], "domainSpecificKnowledge" : [ "SAP systems", "SAP Cloud solutions", "SAP SaaS", "SAP IAM", "SAP RISE", "RFC communications", "API communications", "Interface communications", "Global SAP landscape", "Enterprise security strategy", "Regulatory frameworks" ], "toolProficiency" : [ "SAP IAM" ], "communicationSkills" : "Stakeholder communication; Technical audiences; Non-technical audiences", "documentationSkills" : "Document standards; Document procedures", "continuousLearning" : "Education programs; Training development; Career growth opportunities", "innovationCreativity" : "Drive innovation", "problemSolvingSkills" : "Identify best course of action; Implement solutions", "qualificationsBasic" : "5+ years of hands-on SAP experience, Primary expertise in SAP technologies, Secondary focus on security, Experience in SAP security concepts, Experience in IT security principles, Fluent in English", "qualificationsPreferred" : "SAP Cloud experience, Relevant certifications, CISSP, CISM, SAP Security certification, SAP GRC certification, German language", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Senior SAP Cyber Security Architect Mercedes-Benz Canada needs stars like you! Mercedes-Benz is the world’s first automotive brand, and remains at the cutting-edge of sustainability, design, digitalization, connectivity, technology, fashion, and popular culture. The iconic three-pointed star is always looking for the best and brightest. We are seeking individuals who want to be in the driver’s seat of transformation, working alongside talented colleagues who represent the Mercedes-Benz values. Do you want to be part of writing the next chapter of the Mercedes-Benz story? How your role will add to the story: We are seeking an Senior SAP Cyber Security Architect to join our Global Cyber Security team. Working closely with internal stakeholders, this role bridges IT security and SAP operations to ensure compliance and protect data against evolving threats. If you have a proven track record in designing, implementing, and governing security controls for SAP systems and want to make a tangible impact within a global Fortune Global 500 company, we would like to hear from you. A day in the life Design secure SAP system architectures and continuously enhance existing landscapes, including SAP Basis, SAP Cloud, SAP Cloud solutions (BTP and SAP SaaS), and SAP IAM. Act as a trusted partner for global SAP transformations to SAP RISE and for the expansion of security controls. Define, document, and validate SAP security standards and procedures, including operating procedures, exception management, hardening measures, and additional security services such as secure defaults and the protection of RFC, API, and interface communications. Define and reshape the SAP Secure Operations Map and contribute to SAP security architecture, controls, and global services across a worldwide SAP landscape. Lead SAP integration within a landscape of global IAM services. Act as a trusted advisor to SAP Basis, development, and business teams by translating security requirements into practical SAP solutions. Align SAP security architecture with enterprise security strategy, risk management, and regulatory frameworks. Serve as a central communication and consulting partner for the SAP organization, CISO organization, global cyber security, SAP, and external parties. Integrate SAP cyber security seamlessly into global cyber security services. Provide advisory support for audits, assurance reviews, and control testing. Succeed in stakeholder communication and influence across technical and non-technical audiences. Vacancy Status: This posting reflects an approved, current vacancy within Mercedes-Benz Canada. Posting Range : $103,636 - $142,499 Mercedes-Benz Canada is committed to fostering an inclusive, equitable, and accessible environment where all employees and customers feel valued, respected, and supported. While we thank every applicant for their interest in joining our iconic brand, we will only contact applicants selected for an interview. If you require accommodation because of a disability, please reach out to mbcrecruitment@mercedes-benz.ca and we will work with you to meet your needs throughout the recruitment, assessment, and selection process as applicable. Testimonials from several Mercedes-Benz Canada stars, from an intern to an executive: “Mercedes-Benz is more than a car brand; it’s a futuristic, technological brand continuing to research and evolve its strategy as a digital and luxurious company, all while championing sustainable initiatives.” “This company grants its members the opportunity to professionally grow and discover the extent of the brand and its presence in all countries. You are granted the opportunity to drive innovation in several sectors, as this company allows you to take your career wherever you like with our very robust framework of opportunities, whether it’s rotations, international assignments, education programs and more.” “As an intern, I feel a great sense of responsibility and accountability at Mercedes-Benz. The high level of responsibility and contribution found in our internship programs is unlike my experience anywhere else.” “Most people, if not everyone, seek a great balance of life at work and outside of it. At Mercedes-Benz, not only does your work life grant you exciting opportunities, but you are also afforded great understanding of your time outside of work - including the right to disconnect.” “Working for Mercedes-Benz, it’s certainly the brand and the pillars - but at the end of the day, once you’re in, it’s about the people, the experience, diverse cultures and backgrounds, everyone’s experience driving in one direction.” Mercedes-Benz Star skills, requirements & traits: University or college degree in Computer Science, Information Technology, or a related field, or 5+ years of hands-on SAP experience Primary expertise in SAP technologies, including SAP Basis and SAP architecture; SAP Cloud experience is highly desirable. Secondary focus on security, with experience in SAP security concepts and IT security principles. Strong technical knowledge of SAP S/4HANA, SAP Governance, Risk, and Compliance (GRC), and identity and access management integrations, e.g. Azure AD / Entra ID. Relevant certifications such as CISSP, CISM, and/or SAP Security or SAP GRC are an advantage. Passion for viewing processes and procedures as opportunities for improvement, optimization, and further development. Self-motivated, with the ability to identify the best course of action and implement solutions that reduce manual effort and improve efficiency. Honest and professional, with a proactive mindset that supports a team culture of knowledge sharing, excellence, and collaboration. Fluent in English. German is a plus. Bold, innovative and enjoy challenging yourself Honest and professional, a strong team player Big picture thinker, go-getter, self-starter Being a Mercedes-Benz star has its benefits: Commitment to inclusion & diversity Engaging corporate culture Ever-evolving brand strategy granting opportunities to build business acumen Training development and career growth opportunities Benefits to support work-life balance/integration A strong portfolio of corporate social responsibility initiatives State-of-the-art working facilities Vehicle purchase and experience programs Comprehensive health, dental, and pension programs Recognition rewards and discount programs Mercedes-Benz Canada Inc.", "summaryDescription" : "Senior SAP Cyber Security Architect at Mercedes-Benz Canada", "createdAt" : "2026-06-14T20:49:53.924", "lastUpdated" : "2026-06-16T02:06:50.893", "ingestTimestamp" : "2026-06-14T20:49:53.924", "mongoId" : "6a18111858b93c861e08d6cd", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "SAP security concepts", "IT security principles", "Honest", "Professional", "Bold", "Innovative", "System design", "Risk management", "Stakeholder communication", "SAP systems", "SAP Cloud solutions", "SAP SaaS", "SAP IAM", "SAP RISE", "RFC communications", "API communications", "Interface communications", "Global SAP landscape", "Enterprise security strategy", "Regulatory frameworks", "CISSP", "CISM", "SAP Security", "SAP GRC" ], "skillCount" : 24, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Automotive", "llmIndustryConfidence" : 0.95 }, { "id" : "69cf3f062beec4dd3d934101", "title" : "SAP Security Architect", "company" : "ADCI HYD", "industry" : "Operations, IT, Support Engineering, Solution Architect, Cloud Computing", "salary" : { "min" : 2200000.0, "max" : 3500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior SAP Security Architect in Hyderabad, India, adjusted for the FinTech industry and company size." }, "location" : "Hyderabad, Telangana, IND", "locations" : [ "Hyderabad, Telangana, IND" ], "timestamp" : "2026-06-14T23:48:18.909", "fingerprint" : "412cd1521724f1d5b152b8e168383066d3df5463554d6b4ee14c06e0021fc2d5", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10382141/apply", "externalId" : "ab73f8f2-c9eb-478f-848a-be58c960ee7e", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Hyderabad", "state" : "Telangana", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "17.3605890,78.4740613" } ], "locationText" : "Hyderabad, Telangana, India", "employmentType" : "FULL_TIME", "experienceMinYears" : 6, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SAP, ECC, S/4HANA, BW, GRC, AWS", "professionalSkills" : [ "Risk assessment", "Security policies", "Security audits" ], "hardSkillsList" : [ "SAP security", "User access management", "Authorization management", "Role configuration", "Profile configuration", "Security standards", "Security regulations", "Security breaches", "Corrective actions", "Security audits", "End-user training" ], "hardSkills" : [ { "name" : "SAP security", "level" : "intermediate" }, { "name" : "User access management", "level" : "intermediate" }, { "name" : "Authorization management", "level" : "intermediate" }, { "name" : "Role configuration", "level" : "intermediate" }, { "name" : "Profile configuration", "level" : "intermediate" }, { "name" : "Security standards", "level" : "intermediate" }, { "name" : "Security regulations", "level" : "intermediate" }, { "name" : "Security breaches", "level" : "intermediate" }, { "name" : "Corrective actions", "level" : "intermediate" }, { "name" : "Security audits", "level" : "intermediate" }, { "name" : "End-user training", "level" : "intermediate" } ], "majorSkills" : "SAP Security, AWS, Risk assessment", "majorSkillsList" : [ "SAP Security", "AWS", "Risk assessment" ], "coreResponsibilities" : "Manage user access, Manage authorizations, Configure security roles, Maintain security roles, Configure security profiles, Maintain security profiles, Conduct risk assessments, Implement mitigation strategies, Ensure compliance, Lead SAP security projects, Develop security policies, Maintain security policies, Develop security procedures, Maintain security procedures, Develop security documentation, Maintain security documentation, Monitor SAP systems, Take corrective actions, Conduct security audits, Provide audit reports, Work with IT teams, Work with business teams, Provide training, Support end-users", "teamCollaboration" : "IT teams; Business teams", "projectManagementSkills" : [ "Project leadership" ], "domainKnowledge" : "SAP security best practices", "domainList" : [ "sap-security-best-practices" ], "domainSpecificKnowledge" : [ "SAP security best practices" ], "documentationSkills" : "Security documentation", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "6+ years technology domain experience, 6+ years design/implementation/consulting experience, 7+ years IT development/implementation/consulting experience", "qualificationsPreferred" : "Software development industry experience, Internet-related industries experience, Migrating legacy solutions to cloud, Transforming legacy solutions to cloud, AWS experience dev/ops perspective", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We are seeking a highly experienced SAP Security architect to join our team. The ideal candidate will be responsible for ensuring the security and integrity of our SAP systems, implementing and maintaining security policies, and providing expert guidance on SAP security best practices. Key job responsibilities * Manage user access and authorizations in SAP systems. * Configure and maintain security roles and profiles in various SAP modules (ECC, S/4HANA, BW, GRC, etc.). * Conduct risk assessments and implement mitigation strategies. * Ensure compliance with internal and external security standards and regulations. * Lead SAP security projects, including implementations, upgrades, and enhancements. * Develop and maintain security policies, procedures, and documentation. * Monitor SAP systems for security breaches and take corrective actions as necessary. * Conduct regular security audits and provide detailed reports on findings and recommendations. * Work closely with other IT and business teams to ensure seamless integration of security measures. * Provide training and support to end-users on security-related issues. Basic Qualifications: - 6+ years of specific technology domain areas (e.g. software development, cloud computing, systems engineering, infrastructure, security, networking, data & analytics) experience - 6+ years of design, implementation, or consulting in applications and infrastructures experience - 7+ years of IT development or implementation/consulting in the software or Internet industries experience Preferred Qualifications: - Experience working within software development or Internet-related industries - Experience migrating or transforming legacy customer solutions to the cloud - Experience working with AWS technologies from a dev/ops perspective Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "SAP Security Architect at ADCI HYD. Skills: SAP Security, AWS, Risk assessment. Manage user access. Manage authorizations", "postedDate" : "2026-06-13T02:09:59.491", "createdAt" : "2026-06-13T02:09:59.491", "lastUpdated" : "2026-06-14T23:48:18.909", "ingestTimestamp" : "2026-06-13T02:09:59.491", "mongoId" : "69cf3f062beec4dd3d934101", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10382141/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "SAP security", "User access management", "Authorization management", "Role configuration", "Profile configuration", "Security standards", "Security regulations", "Security breaches", "Corrective actions", "Security audits", "End-user training", "SAP Security", "AWS", "Risk assessment", "Security policies", "Project leadership", "SAP security best practices" ], "skillCount" : 17, "jobCategory" : "operations", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech" }, { "id" : "6a2c6a7074d8ee00a090bdab", "title" : "Lead AI Security Architect", "company" : "Aimpoint Digital", "industry" : "Consulting", "salary" : { "min" : 200000.0, "max" : 280000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Lead AI Security Architect in Atlanta, United States, adjusted for seniority and technology industry." }, "location" : "Atlanta, GA", "locations" : [ "Atlanta", "GA" ], "timestamp" : "2026-06-15T03:26:16.951", "fingerprint" : "9a36a67a07c9f0c4a17e44e2453aebe93bc715d35d9946e004a40a0f10c75cd3", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://aimpoint-digital.breezy.hr/p/86c221c3a8a3-lead-ai-security-architect-2026-us", "externalId" : "86c221c3a8a3", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Atlanta", "state" : "Georgia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.7544657,-84.3898151" } ], "locationText" : "Atlanta, Georgia, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "AI, Generative AI, LLM", "professionalSkills" : [ "Security architecture", "Risk governance" ], "hardSkillsList" : [ "Security engineering" ], "hardSkills" : [ { "name" : "Security engineering", "level" : "intermediate" } ], "majorSkills" : "AI Security, Risk management", "majorSkillsList" : [ "AI Security", "Risk management" ], "coreResponsibilities" : "Securely adopt enterprise AI, Modernize security architectures, Govern risks from generative AI", "domainKnowledge" : "Enterprise AI; Generative AI platforms; AI assistants; Coding copilots; LLM-enabled applications", "domainList" : [ "enterprise-ai", "generative-ai-platforms", "ai-assistants", "coding-copilots", "llm-enabled-applications" ], "domainSpecificKnowledge" : [ "Enterprise AI", "Generative AI platforms", "AI assistants", "Coding copilots", "LLM-enabled applications" ], "qualificationsBasic" : "5+ years security experience", "qualificationsPreferred" : "Strategic mindset", "remoteFriendly" : false, "rawDescription" : "Are you an experienced security engineer / architect looking to apply your strategic mindset to help customers securely adopt enterprise AI tools, modernize security architectures and govern the risks introduced by generative AI platforms, AI assistants, coding copilots and LLM-enabled applications", "summaryDescription" : "Lead AI Security Architect at Aimpoint Digital. Skills: AI Security, Risk management. Securely adopt enterprise AI. Modernize security architectures", "createdAt" : "2026-06-14T00:08:20.060", "lastUpdated" : "2026-06-15T03:26:16.951", "ingestTimestamp" : "2026-06-14T00:08:20.060", "mongoId" : "6a2c6a7074d8ee00a090bdab", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 200000, "salaryAnnualMax" : 280000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Security engineering", "AI Security", "Risk management", "Security architecture", "Risk governance", "Enterprise AI", "Generative AI platforms", "AI assistants", "Coding copilots", "LLM-enabled applications" ], "skillCount" : 10, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "69d140072beec4dd3ddbe417", "title" : "Security Software Dev Engineer II, AWS Security Corporate Response", "company" : "Amazon.com Services LLC", "industry" : "Software Development, amazon security", "salary" : { "min" : 143700.0, "max" : 194400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T06:05:22.074", "fingerprint" : "e2894a4e26f433c9bfa4feb2c29c9e1333a0d467b9baa905cfe0e71496e2c170", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10383075/apply", "externalId" : "6879b3a1-ef52-4a67-b131-e0bccf3540b2", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS, Gen AI", "professionalSkills" : [ "Security response", "Automation development", "Tooling improvements", "Security operations" ], "hardSkillsList" : [ "Software development", "System design", "Reliability", "Scaling" ], "hardSkills" : [ { "name" : "Software development", "level" : "intermediate" }, { "name" : "System design", "level" : "intermediate" }, { "name" : "Reliability", "level" : "intermediate" }, { "name" : "Scaling", "level" : "intermediate" } ], "majorSkills" : "Security software, Automation, AWS services", "majorSkillsList" : [ "Security software", "Automation", "AWS services" ], "coreResponsibilities" : "Drive operational excellence, Design software processes, Implement software procedures, Streamline security response workflows, Build agentic automations, Empower security engineers, Collaborate with security teams, Identify automation opportunities, Identify tooling improvement opportunities, Leverage modern technologies, Create scalable solutions, Enhance security operations, Deliver software", "teamCollaboration" : "Global security teams", "domainKnowledge" : "AWS Security; Corporate network", "domainList" : [ "aws-security", "corporate-network" ], "domainSpecificKnowledge" : [ "AWS Security", "Corporate network" ], "innovationCreativity" : "Develop innovative automations", "problemSolvingSkills" : "Respond to threats; Respond to vulnerabilities", "outcomesObjectives" : "Strengthen security posture; Increase engineer productivity; Deliver efficiency gains; Deliver productivity gains", "qualificationsBasic" : "3+ years software development experience, 2+ years system design experience, Experience programming one language, Experience programming Gen AI platform", "qualificationsPreferred" : "3+ years full SDLC experience, Bachelor's in computer science", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Join us in developing and scaling security solutions that protect Amazon's global operations. As a Security Software Development Engineer, you'll create innovative automations and tools that transform how our security teams respond to threats and vulnerabilities. Your work will directly impact the productivity of security engineers worldwide and strengthen the security posture of AWS and for our customers. Key job responsibilities • Drive operational excellence by designing and implementing software processes, procedures, and intelligent automations that streamline security response workflows • Build agentic automations that empower security engineers to work more efficiently and effectively • Collaborate with global security teams to identify high-impact opportunities for automation and tooling improvements • Leverage modern technologies and AWS services to create scalable solutions that enhance security operations • Deliver software that delights users with measurable efficiency and productivity gains About the team AWS Security Corporate Response (CorpSec) protects the corporate network environment that enables all Amazon employees to innovate securely for our customers. We respond to security issues across the corporate network with speed and precision, ensuring the world's largest cloud provider maintains the highest security standards. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences with amazing outcomes, don’t let it stop you from applying. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 3+ years of non-internship professional software development experience - 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience programming with at least one software programming language - Experience programming with Amazon Bedrock or another Gen AI platform. Preferred Qualifications: - 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually", "summaryDescription" : "Security Software Dev Engineer II, AWS Security Corporate Response at Amazon.com Services LLC. Skills: Security software, Automation, AWS services. Drive operational excellence. Design software processes", "postedDate" : "2026-06-13T13:03:49.850", "createdAt" : "2026-06-13T13:03:49.850", "lastUpdated" : "2026-06-15T06:05:22.074", "ingestTimestamp" : "2026-06-13T13:03:49.850", "mongoId" : "69d140072beec4dd3ddbe417", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10383075/apply", "salaryAnnualMin" : 143700, "salaryAnnualMax" : 194400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Software development", "System design", "Reliability", "Scaling", "Security software", "Automation", "AWS services", "Security response", "Automation development", "Tooling improvements", "Security operations", "AWS Security", "Corporate network" ], "skillCount" : 13, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a308892f292fd229c09104e", "title" : "Security/Valet", "company" : "Senior Resource Group, LLC", "industry" : "Hospital And Health Care", "salary" : { "min" : 22.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Los Angeles, CA, United States", "locations" : [ "Los Angeles", "CA", "United States" ], "timestamp" : "2026-06-16T12:40:46.405", "fingerprint" : "7ec4980824cd3dd90c0c9db54a182a05735fd2d3add14cb23ed17f416eb34b6e", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/SeniorResourceGroupLLC/744000132269479-security-valet-avocet-playa-vista", "externalId" : "744000132269479", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Los Angeles", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "34.0536909,-118.2427660" } ], "locationText" : "Los Angeles, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 0, "experienceMaxYears" : 2, "experienceLevel" : "entry", "coreResponsibilities" : "Greet vehicles, Assist residents and visitors, Tag vehicle keys, Park and retrieve cars, Drive manual and automatic vehicles, Assist with packages or luggage, Deliver packages, Patrol property areas, Verify visitors, Direct visitors, Ensure doors and windows are secure, Document vehicle incidents, Report vehicle incidents, Report security concerns, Report safety concerns, Report potential security issues, Monitor camera feeds, Conduct hazard inspections, Maintain resident information confidentiality, Assist during emergencies, Ensure policy compliance, Work early hours, nights, weekends, holidays, Travel to other communities", "domainKnowledge" : "Senior living communities", "domainList" : [ "senior-living-communities" ], "domainSpecificKnowledge" : [ "Senior living communities" ], "documentationSkills" : "Document vehicle incidents", "specialRequirements" : "Work in different weather conditions, Work with limited notice", "qualificationsBasic" : "Valid driver's license, No moving violations in 5 years, Submit DMV Driving Record Report", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The anticipated wage range is $22.00 hour For over 37 years, Senior Resource Group-SRG has been an innovator in the development and operation of senior living communities across the USA. Our experience and passion has helped us win many awards for innovative community design, excellent service and exceptional care. Essential Duties and Responsibilities: • Greet all vehicles entering the driveway and assist residents and visitors with opening/closing vehicle doors. • Tag vehicle keys with date & time, make/model, etc. • Able to effectively park and retrieve cars without causing damage to the vehicle. Ability to drive and operate manual and automatic transmission vehicles. • Assist residents or visitors with packages or luggage. Deliver packages received in the loading dock to corresponding units, areas, departments, or offices. • Patrol all areas of the property, including the perimeter and interior of the building. • Verify all visitors and direct them as appropriate. • Ensure all building doors and windows are closed and secure at the appropriate designated times. • Document and report all vehicle incidents such as damage, accidents, theft, missing articles, etc. • Responsible for reporting security or safety concerns, hazards, and potential security issues to their supervisor or the manager onsite. • Monitor camera feeds and conduct daily physical hazard inspections. • Maintain confidentiality of resident information. • Assist during emergencies. • Ensure compliance with company and client policies and procedures. • Document and report all vehicle incidents such as damage, accidents, theft, missing articles, etc. • Ability to work early hours, nights, weekends, holidays, or as needed with limited advanced notice. • Travel to other communities if needed. • Other duties as assigned. ## Qualifications Required Skills/Abilities: • Excellent interpersonal and customer service skills. • Excellent organizational skills and attention to detail. • Excellent time management skills with a proven ability to maintain consistent and regular attendance. • Must function independently and have flexibility, personal integrity, and the ability to work effectively with the residents, other team members, and support agencies. • Must be able to work safely in different weather conditions, including but not limited to extreme heat and cold. • Must hold a valid and applicable state driver’s license with no moving violations in the past five (5) years. Must submit a current copy (not older than three months) of the Department of Motor Vehicles Driving Record Report. From time to time, a new records request may be made. ## Additional Information * All your information will be kept confidential according to EEO guidelines. Senior Resource Group is an equal employment opportunity employer. We do not discriminate against any applicant or employee based on race, color, sex, sexual orientation, gender identity, religion, national origin, age (40 and over), disability, military status, genetic information or any other basis protected by applicable federal, state, or local laws, and we prohibit harassment of applicants or employees based on any of these protected categories. We comply with all applicable federal, state and local laws, including but not to limited, respecting consideration of unemployment status in making hiring decisions. Completing an application does not guarantee that you will be offered a position. Note to Applicants: Smoking is prohibited in all indoor areas of Senior Resource Group unless designated smoking areas have been established by a particular office in accordance with applicable state and local law.", "summaryDescription" : "Security/Valet at Senior Resource Group, LLC. Greet vehicles. Assist residents and visitors", "postedDate" : "2026-06-15T19:02:28.000", "createdAt" : "2026-06-16T01:45:54.544", "lastUpdated" : "2026-06-16T12:40:46.405", "ingestTimestamp" : "2026-06-16T01:45:54.544", "mongoId" : "6a308892f292fd229c09104e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 45760, "salaryBand" : "30k-50k", "hasSalary" : true, "allSkills" : [ "Senior living communities" ], "skillCount" : 1, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Entry", "dataQualityScore" : 1.0, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.95 }, { "id" : "6a309c10f292fd229c0f6b27", "title" : "Security Officer", "company" : "Walden Security", "salary" : { "min" : 18.0, "max" : 18.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Greenville", "locations" : [ "Greenville" ], "certifications" : [ "Valid Driver's License" ], "timestamp" : "2026-06-16T11:47:32.782", "fingerprint" : "eb0c1382b7234f0c162d0956dea929a38b6e180ec8df89a48c30b16532a6d820", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/waldensecurity/jobs/5164623007", "externalId" : "5164623007", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Mountville", "state" : "South Carolina", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "34.3620100,-81.9794942" } ], "locationText" : "Mountville, South Carolina, United States", "minimumEducation" : "High School", "coreResponsibilities" : "Patrol assigned areas, Observe and report suspicious activity, Respond to emergencies, Enforce rules and regulations, Provide assistance to visitors and employees, Maintain logs and records, Deter criminal activity, Protect property and personnel", "specialRequirements" : "Ability to pass a background check, Ability to pass a drug screening, Must be 21 years of age or older", "qualificationsBasic" : "High School diploma or GED, Valid Driver's License, Ability to pass a background check, Ability to pass a drug screening", "qualificationsPreferred" : "Previous security experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Available Schedule: Saturday 1800 - 0600, Sunday 1800 - 0600, Monday 1800 - 0600, Tuesday 1800 - 0000 42 hours a week (2 hours of billable overtime) What You Will Do Our Security Officers protect the Industrial or Commercial property of our clients against fire, vandalism and illegal entry. Our clients range from Class-A Office Buildings, Luxury Residential Properties, Distilleries, Fortune 500 Companies, Financial Institutions, Telecommunications, Manufacturing/Industrial Factories, Hospitals and many others. Requirements: High School diploma or General Education Degree (GED) Minimum of 21 years of age Ability to pass criminal background check and drug test Must be able to be a team player Please ensure a resume is attached. We will not be able to consider if bypassed. Same Day Offers: interview with the hiring team and receive an offer to join us the same day! Extensive Training: Our initial training paves the way for you to earn your Security Officer Certification. Walden Security has been recognized by Training Magazine as a Top 100 Award Winner which is awarded to companies with the most successful learning and development programs in the world! Unbelievable PERKS!: Save on phone, vacation, auto, retailers and more! Tuition Reimbursement: we believe in the professional development of our team members and provide annual reimbursement opportunities. Employee Family Scholarship: To date, Walden Security has awarded more than $300,000 in Employee Family Scholarships! Paid Time Off: offered to employees that average at least 32 hours per week Medical, Dental and Vision Insurance: multiple plan options for you and your dependents Health Savings Account: pay for health care more easily Voluntary Life Insurance: affordable plans available 401K: prepare for your retirement Employee Assistance Program: we offer free, confidential assistance for many of your life’s needs Employee Recognition Programs: we believe in celebrating the “wins” with our Walden Security team. We reward the hard work and dedication of our employees through Tenure Recognition, On-The-Spot Bonuses, Officer of the Month and Officer of the Year recognitions which include awards and bonuses Culture of Caring: Walden Security supports many charitable organizations Award Winning Company: Walden Security has earned significant recognition for our better working environment for our officers, better service to our customers and a dedication to quality performance standards. Promote From Within Philosophy: Walden Security offers growth opportunities for our team members who are Setting the Standard by Setting the Example® Flexible Schedules: We offer flexible scheduling with multiple shifts available including Second, Third and Weekend Shifts Competitive Pay! Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws. #SecurityOfficer Pay Rate $18.20—$18.20 USD We offer every employee — from executive managers to administrative support to security professionals — unique and generous benefits, as well as opportunities for career growth. So if you’re ready to embark on a meaningful career with one of the nation’s most dynamic and fastest growing security companies, apply with Walden Security today.", "summaryDescription" : "Security Officer at Walden Security. Patrol assigned areas. Observe and report suspicious activity", "postedDate" : "2026-06-16T03:16:42.636", "createdAt" : "2026-06-16T03:16:42.636", "lastUpdated" : "2026-06-16T11:47:32.782", "ingestTimestamp" : "2026-06-16T03:16:42.636", "mongoId" : "6a309c10f292fd229c0f6b27", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 37440, "salaryAnnualMax" : 37440, "salaryBand" : "30k-50k", "hasSalary" : true, "allSkills" : [ "Valid Driver's License" ], "skillCount" : 1, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Entry", "dataQualityScore" : 0.7777778, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Security", "llmIndustryConfidence" : 0.98 }, { "id" : "6a309c10f292fd229c0f6b1b", "title" : "Security Officer", "company" : "Walden Security", "salary" : { "min" : 16.0, "max" : 16.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Charleston", "locations" : [ "Charleston" ], "timestamp" : "2026-06-16T14:57:30.346", "fingerprint" : "9138db494387e2ddba4c8a079201aea4e32a43dc7c755e5b9aa9d9e8dee81fc4", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/waldensecurity/jobs/5164716007", "externalId" : "5164716007", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Charleston", "state" : "South Carolina", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "32.7884363,-79.9399309" } ], "locationText" : "Charleston, South Carolina, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "High School", "remoteFriendly" : false, "rawDescription" : "Full Time - What You Will Do Our Security Officers protect the Industrial or Commercial property of our clients against fire, vandalism and illegal entry. Our clients range from Class-A Office Buildings, Luxury Residential Properties, Distilleries, Fortune 500 Companies, Financial Institutions, Telecommunications, Manufacturing/Industrial Factories, Hospitals and many others. Requirements: High School diploma or General Education Degree (GED) Minimum of 18 years of age Ability to pass criminal background check and drug test Same Day Offers: interview with the hiring team and receive an offer to join us the same day! Extensive Training: Our initial training paves the way for you to earn your Security Officer Certification. Walden Security has been recognized by Training Magazine as a Top 100 Award Winner which is awarded to companies with the most successful learning and development programs in the world! Unbelievable PERKS!: Save on phone, vacation, auto, retailers and more! Tuition Reimbursement: we believe in the professional development of our team members and provide annual reimbursement opportunities. Employee Family Scholarship: To date, Walden Security has awarded more than $300,000 in Employee Family Scholarships! Paid Time Off: offered to employees that average at least 32 hours per week Medical, Dental and Vision Insurance: multiple plan options for you and your dependents Health Savings Account: pay for health care more easily Voluntary Life Insurance: affordable plans available 401K: prepare for your retirement Employee Assistance Program: we offer free, confidential assistance for many of your life’s needs Employee Recognition Programs: we believe in celebrating the “wins” with our Walden Security team. We reward the hard work and dedication of our employees through Tenure Recognition, On-The-Spot Bonuses, Officer of the Month and Officer of the Year recognitions which include awards and bonuses Culture of Caring: Walden Security supports many charitable organizations Award Winning Company: Walden Security has earned significant recognition for our better working environment for our officers, better service to our customers and a dedication to quality performance standards. Promote From Within Philosophy: Walden Security offers growth opportunities for our team members who are Setting the Standard by Setting the Example® Flexible Schedules: We offer flexible scheduling with multiple shifts available including First, Second, Third and Weekend Shifts Competitive Pay! Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws. #SecurityOfficer Pay Rate $16—$16 USD We offer every employee — from executive managers to administrative support to security professionals — unique and generous benefits, as well as opportunities for career growth. So if you’re ready to embark on a meaningful career with one of the nation’s most dynamic and fastest growing security companies, apply with Walden Security today.", "summaryDescription" : "Security Officer at Walden Security", "postedDate" : "2026-06-16T03:16:38.754", "createdAt" : "2026-06-16T03:16:38.754", "lastUpdated" : "2026-06-16T14:57:30.346", "ingestTimestamp" : "2026-06-16T03:16:38.754", "mongoId" : "6a309c10f292fd229c0f6b1b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 33280, "salaryAnnualMax" : 33280, "salaryBand" : "30k-50k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Entry", "dataQualityScore" : 0.7777778, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Security", "llmIndustryConfidence" : 0.95 }, { "id" : "6a210e2e74d8ee00a0af61de", "title" : "Global Practice Architect, Security, Google Cloud", "company" : "Google", "industry" : "Technology", "salary" : { "min" : 235000.0, "max" : 350000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Lead Global Practice Architect, Security in Atlanta, United States, adjusted for Google's size and the technology industry." }, "location" : "[Atlanta, GA, USA, [Atlanta, GA, USA], Atlanta, null, GA, US]", "locations" : [ "[Atlanta, GA, USA, [Atlanta, GA, USA], Atlanta, null, GA, US]", "[Austin, TX, USA, [Austin, TX, USA], Austin, null, TX, US]", "[Boulder, CO, USA, [Boulder, CO, USA], Boulder, null, CO, US]", "[Chicago, IL, USA, [Chicago, IL, USA], Chicago, null, IL, US]" ], "timestamp" : "2026-06-16T15:24:58.508", "fingerprint" : "c8defe69f88bd1ffcdfc8ed09a11af125e7f8ad1741a80bfaaebcc120298c403", "source" : "google", "language" : "en", "externalId" : "131023152753844934", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Atlanta", "state" : "Georgia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.7544657,-84.3898151" } ], "locationText" : "Atlanta, Georgia, United States", "summaryDescription" : "Global Practice Architect, Security, Google Cloud at Google", "postedDate" : "2026-06-16T01:48:09.117", "createdAt" : "2026-06-16T01:48:09.117", "lastUpdated" : "2026-06-16T15:24:58.508", "ingestTimestamp" : "2026-06-16T01:48:09.117", "mongoId" : "6a210e2e74d8ee00a0af61de", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 235000, "salaryAnnualMax" : 350000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.5555556, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.92 }, { "id" : "68c2e42ff8b1b0376634c73d", "title" : "Security Engineer II, Vulnerability Management and Response - Strategic Enablement", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 136000.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Austin, Texas, USA", "locations" : [ "Austin, Texas, USA" ], "timestamp" : "2026-06-15T06:42:42.487", "fingerprint" : "6316b44f1be74bca2a07419ca8f235daf26bf2b552b0421a784ce7d25cf2155d", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3073140/apply", "externalId" : "57639def-33bc-4b64-bcc7-4d01ade3c4a1", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Python, Ruby, Go, Swift, Java, C++, AWS, HTTP, DNS, TCP/IP", "professionalSkills" : [ "Technical specifications", "User acceptance testing", "Data analysis", "Security research", "Technical growth", "Knowledge sharing" ], "hardSkillsList" : [ "Vulnerability management", "Remediation automation", "Vulnerability detection", "Data analysis", "Security research", "API integration" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Remediation automation", "level" : "intermediate" }, { "name" : "Vulnerability detection", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Security research", "level" : "intermediate" }, { "name" : "API integration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Vulnerability management, Automation, Data analysis, Security engineering", "majorSkillsList" : [ "Vulnerability management", "Automation", "Data analysis", "Security engineering" ], "coreResponsibilities" : "Develop security automation workflows, Optimize security automation workflows, Integrate security tools, Design proof-of-concepts, Script proof-of-concepts, Implement proof-of-concepts, Validate new solutions, Collaborate with TPMs, Collaborate with SDE teams, Translate program requirements, Ensure seamless integration, Conduct user acceptance testing, Build queries, Analyze data, Extract actionable insights, Conduct security research, Analyze emergent vulnerabilities, Identify emerging threats, Identify detection opportunities, Enhance detection capabilities, Mentor junior engineers, Contribute to technical growth, Share knowledge", "teamCollaboration" : "Cross-functional teams; Security operations; Development teams", "projectManagementSkills" : [ "Program requirements" ], "domainKnowledge" : "Vulnerability management; Remediation automation; Container environments; Network security; Cloud-native architecture", "domainList" : [ "vulnerability-management", "remediation-automation", "container-environments", "network-security", "cloud-native-architecture" ], "domainSpecificKnowledge" : [ "Vulnerability management", "Remediation automation", "Container environments", "Network security", "Cloud-native architecture" ], "toolProficiency" : [ "Lambda" ], "communicationSkills" : "Technical specifications; Actionable insights", "continuousLearning" : "Knowledge sharing", "innovationCreativity" : "Prototype development", "problemSolvingSkills" : "Data-driven decision making; Root cause analysis", "outcomesObjectives" : "Revolutionize vulnerability management; Create measurable impact; Support data-driven decision making; Enhance vulnerability detection", "qualificationsBasic" : "3+ years programming Python, Bachelor's degree computer science, Knowledge networking protocols", "qualificationsPreferred" : "2+ years threat modeling, 2+ years secure coding, 2+ years identity management, 2+ years software development, 2+ years cryptography, 2+ years system administration, 2+ years network security, Experience AWS products, Experience Python, Experience Java, Experience C++, Experience data engineering concepts, Experience large-scale security datasets", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Security's Vulnerability Management and Response - Strategic Enablement team is looking for a Security Engineer II. This team is revolutionizing vulnerability management through advanced remediation automation, innovative vulnerability detection solutions, data-driven insights, and more. Be part of a dynamic group that bridges security operations and development, creating measurable impact across Amazon's vast ecosystem. Key job responsibilities -Develop and optimize security automation workflows to operationalize new capabilities, including integration with existing security tools and platforms across Amazon's infrastructure -Design, script, and implement quick proof-of-concepts for vulnerability detection, assessment, and remediation across host and container environments, enabling rapid validation of new solutions and approaches -Collaborate with TPMs and SDE teams to translate program requirements into technical specifications, ensure seamless integration with existing systems, and conduct user acceptance testing for new security capabilities -Build queries and analyze data to extract actionable insights on vulnerability management effectiveness, supporting data-driven decision making and informed program improvements -Conduct security research and analysis on emergent vulnerabilities to identify emerging threats, new detection opportunities, and methods to enhance existing vulnerability detection capabilities -Mentor junior engineers and contribute to the technical growth and knowledge sharing within the team A day in the life Start your morning reviewing last night's vulnerability scan data and building SQL queries to analyze patterns across thousands of Amazon hosts. Collaborate with VMR Operations on technical specifications for a new container vulnerability detection pattern, then code Lambda scripts to integrate new capabilities with the workflow management platform. Mid-day brings a design review with SDE teams, ensuring custom detection logic scales seamlessly. Mentor a junior engineer on API integration techniques, then end the day testing your automation workflow and preparing actionable insights for tomorrow's leadership review. About the team The VMR Strategic Enablement team bridges security operations and development, transforming vulnerability data into measurable security outcomes. We embrace a \"Think Fast, Learn Faster\" culture where rapid prototyping validates new solutions and data drives every decision. Our diverse team of security engineers and TPMs collaborates across the full vulnerability lifecycle, building custom detection capabilities, operationalizing security programs, and creating metrics that demonstrate real impact across Amazon's infrastructure. Basic Qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - Bachelor's degree in computer science or equivalent - Knowledge of networking protocols such as HTTP, DNS and TCP/IP Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Experience with AWS products and services - Experience with programming languages such as Python, Java, C++ - Experience with data engineering concepts including data pipelines, ETL processes, and working with large-scale security datasets Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $136,000/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Engineer II, Vulnerability Management and Response - Strategic Enablement at Amazon.com Services LLC. Skills: Vulnerability management, Automation, Data analysis, Security engineering. Develop security automation workflows. Optimize security automation workflows", "postedDate" : "2026-06-13T19:36:22.858", "createdAt" : "2026-06-13T19:36:22.858", "lastUpdated" : "2026-06-15T06:42:42.487", "ingestTimestamp" : "2026-06-13T19:36:22.858", "mongoId" : "68c2e42ff8b1b0376634c73d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3073140/apply", "salaryAnnualMin" : 136000, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Vulnerability management", "Remediation automation", "Vulnerability detection", "Data analysis", "Security research", "API integration", "Mentoring", "Automation", "Security engineering", "Technical specifications", "User acceptance testing", "Technical growth", "Knowledge sharing", "Program requirements", "Container environments", "Network security", "Cloud-native architecture", "Lambda" ], "skillCount" : 18, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a307f55f292fd229c0580b0", "title" : "Senior Security Engineer, National Security", "industry" : "Government", "salary" : { "min" : 145000.0, "max" : 195000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Engineer in Maryland, USA, adjusted for government industry and seniority." }, "location" : "[Maryland, USA, [Maryland, USA], null, null, MD, US]", "locations" : [ "[Maryland, USA, [Maryland, USA], null, null, MD, US]" ], "timestamp" : "2026-06-16T12:57:53.606", "fingerprint" : "d8f5f1719d4410d935e070fe2ed708ff762ca5f53f39fff5e444d4ab821a674e", "source" : "google", "language" : "en", "externalId" : "79083636602610374", "industryFunction" : { }, "structuredLocations" : [ { "state" : "Maryland", "country" : "United States", "continent" : "na", "workMode" : "onsite" } ], "locationText" : "Maryland, United States", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "summaryDescription" : "Senior Security Engineer, National Security", "postedDate" : "2026-06-16T01:51:37.761", "createdAt" : "2026-06-16T01:51:37.761", "lastUpdated" : "2026-06-16T12:57:53.606", "ingestTimestamp" : "2026-06-16T01:51:37.761", "mongoId" : "6a307f55f292fd229c0580b0", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 145000, "salaryAnnualMax" : 195000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.5555556, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305e44f292fd229cf6e458", "title" : "Security Officer", "company" : "Westgate Resorts", "industry" : "Hospitality", "salary" : { "min" : 18.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Branson, MO, United States", "locations" : [ "Branson", "MO", "United States" ], "timestamp" : "2026-06-16T10:28:25.531", "fingerprint" : "f49ad7659bcf78708c06cfa1d7764a6b82a598237eaab2a4a6f73425e95170ad", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/WestgateResorts/744000132254640-security-officer", "externalId" : "744000132254640", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Branson", "state" : "Missouri", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "36.6440772,-93.2169256" } ], "locationText" : "Branson, Missouri, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "mid", "coreResponsibilities" : "Monitor security systems, Patrol premises, Respond to alarms, Enforce rules and regulations, Report suspicious activity, Assist visitors and employees, Maintain logs and records, Conduct investigations", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Nestled on 145 beautiful, wooded acres in the heart of the Ozark Mountains, Westgate Branson Woods Resort is close to the action in Branson – \"The Live Entertainment Capital of the World!\" Help create remarkable guest experiences at our world-class resort, where guests can venture outside and take advantage of one of our many hiking trails to breathe in fresh air and admire the beautiful waterfalls, then relax in one of our spacious resort rooms. As one of the most beautiful Branson, Missouri, resorts, Westgate Branson Woods boasts the amenities travelers expect from a full-service resort hotel. As part of Westgate Resorts, recognized by U.S. News, as one of the Best Companies to Work For, you’ll be joining a team committed to excellence and creating unforgettable vacation experiences and supporting your career growth where you are or at 60+ resorts across the company. Pay Rate: $18/ hour - Use our Daily Pay benefit and get access to your pay as you need it. Must be able to work any shifts assigned, including evenings, overnights, weekends and holidays\". Must have valid driver's license with clean driving record\" As a Resort Security Office r, you help keep our resort safe, secure, and welcoming. This role blends security responsibilities with hospitality focused service, ensuring our guests, team members, and property are protected while creating a friendly and supportive environment. You maintain a visible presence, manage access points, respond to police, fire, or medical situations, and complete safety inspections and incident reports. By working closely with public safety partners and resort leadership, you help ensure everyone feels safe and cared for. You demonstrate Westgate’s core values of Passion, Integrity, and Work Ethic in every interaction. At Westgate Resorts, our team members are the heart of our success. When you join the team, you become part of a company that values hospitality, teamwork, and growth. What You’ll Do as a Resort Security Officer: * Serve as the first responder to police, fire, and medical incidents within the scope of Security Officer duties. * Maintain a visible, uniformed security presence across assigned resort areas * Control access at designated entry and exit points. * Monitor security systems, including surveillance cameras and fire alarm panels, in compliance with legal and company requirements. * Conduct routine safety and security inspections following established procedures. * Maintain accurate security records, logs, and checklists. * Prepare clear, timely, and detailed incident reports using computer systems and email. * Assist guests and team members with security related concerns and service requests. * Manage lost and found inventory, key control, and accountability. * Perform traffic control, parking enforcement, assist public safety officers, and complete other duties as assigned. ## Qualifications To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skills, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. What You Will Bring as a Resort Security Officer: * High school diploma or general education degree (GED). * Previous experience in security, law enforcement, military, or a related field is preferred (minimum of 1 year), but not required. * Certificates in First Aid, CPR and AED highly preferred but not required. * Prior hospitality or guest service experience strongly preferred. * Strong verbal and written communication skills. * Proficiency with basic computer systems used to complete reports, logs, and email communication. * Ability to remain calm and professional in high-pressure or emergency situations. * Excellent judgment, integrity, and attention to detail. Requirements: * Must be at least 18 years of age. * Must be able to lift 50lbs. * Flexibility to work nights, weekends, and holidays. * Required to pass a background check, drug test and motor vehicle record (MVR) check. * Required to provide proof of eligibility to work in the United States. * Requires physical stamina and the ability to work indoors and outdoors, remain on your feet for extended periods, climb stairs, and move quickly for short distances as needed. ## Additional Information Why Westgate? * Comprehensive Health Benefits – Medical, Dental, and Vision Coverage * Paid Time Off – Vacation, Sick, and Personal Time to Recharge * Paid Holidays * 401(k) with Generous Company Match to Support Your Future * Daily Pay – Access Your Earnings When You Need Them * Family-Focused Benefits – Pregnancy, Parental Leave, and Adoption Assistance * Wellness Programs to Support Your Well-Being * Flexible Spending Accounts (FSA) * Tuition Assistance to Help You Grow Your Career * Military Leave * Employee Assistance Program (EAP) – Support When You Need It Most * Life, Disability, Accident, Critical Illness, and Hospital Insurance * Pet Insurance for Your Furry Family Members * Loyalty Program – Exclusive Discounts on Hotels, Cruises, Resorts, Restaurants, Entertainment, and More * Low-Cost Gym Membership * NEW! David A. Siegel Legacy Scholarship – Up to $40,000 for Team Members’ Dependents * Career Growth and Advancement Opportunities * Community Involvement – Give Back and Make an Impact Westgate Resorts is an Equal Employment Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability status or any other protected status under federal, state or local law. If you have a disability and believe you need a reasonable accommodation in order to complete your application or any part of the recruiting process, please email [WGAccommodations@wgresorts.com](mailto:WGAccommodations@wgresorts.com) with the job title and the location of the position for which you are applying. This job posting is intended to provide a general overview of the position and may not include every responsibility, duty, or qualification required. Duties, responsibilities, and activities may change at any time with or without notice.", "summaryDescription" : "Security Officer at Westgate Resorts. Monitor security systems. Patrol premises", "postedDate" : "2026-06-15T17:52:28.000", "createdAt" : "2026-06-15T23:47:24.693", "lastUpdated" : "2026-06-16T10:28:25.531", "ingestTimestamp" : "2026-06-15T23:47:24.693", "mongoId" : "6a305e44f292fd229cf6e458", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 37440, "salaryBand" : "30k-50k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Entry", "dataQualityScore" : 0.8888889, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Hospitality", "llmIndustryConfidence" : 0.95 }, { "id" : "6a309c10f292fd229c0f6af8", "title" : "Security Officers", "company" : "Walden Security", "salary" : { "min" : 25000.0, "max" : 25000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Chattanooga", "locations" : [ "Chattanooga" ], "timestamp" : "2026-06-16T11:35:32.804", "fingerprint" : "b82d1c79621ab5afc206ac479003e987fde742d982aaa8c31cfbe3bf4c5606e7", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/waldensecurity/jobs/5165302007", "externalId" : "5165302007", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Murphy", "state" : "North Carolina", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "35.0878514,-84.0342238" } ], "locationText" : "Murphy, North Carolina, United States", "minimumEducation" : "High School", "coreResponsibilities" : "Patrol assigned areas, Observe and report activities, Prevent unauthorized access, Respond to emergencies, Enforce rules and regulations, Provide assistance to visitors, Write detailed incident reports, Maintain logs and records", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Walden Security - Job Fair Wednesday June 17, 2026, 10:00am - 2:00pm (EDT) Location: NC Works: 800 W. US Highway 64 Murphy, NC 38906 Hello there! We are seeking reliable and professional individuals to join our team as Security Officers. This position will provide coverage across multiple shifts to ensure the safety and security of personnel, property, and facilities during the assignment period. We will be hosting a Job Fair on Wednesday June 17, 2026, from 10:00 AM – 2:00 PM. Candidates interested in this position are encouraged to attend. This will be a great opportunity to learn more about the role, meet with our team, and complete the first steps of the hiring process. Positions and shifts we are hiring for: Security Officers - 1st, 2nd, and 3rd shifts for positions in the Marble, NC area. Please bring the following items to the job fair: Two forms of identification Proof of education Prepare to undergo a drug test Direct Deposit YOU MUST COME DRESSED IN BUSINESS CASUAL ATTIRE! Location: NC Works: 800 W. US Highway 64 Murphy, NC 38906 What You Will Do Our Security Officers protect the Industrial or Commercial property of our clients against fire, vandalism and illegal entry. Our clients range from Class-A Office Buildings, Luxury Residential Properties, Distilleries, Fortune 500 Companies, Financial Institutions, Telecommunications, Manufacturing/Industrial Factories, Hospitals and many others. Requirements: High School diploma or General Educational Degree (GED) Minimum of 18 years of age Ability to pass a criminal background check and drug test Valid driver's license Prior law enforcement or military highly preferred Same Day Offers: interview with the hiring team and receive an offer to join us the same day! Extensive Training: Our initial training paves the way for you to earn your Security Officer Certification. Walden Security has been recognized by Training Magazine as a Top 100 Award Winner which is awarded to companies with the most successful learning and development programs in the world! Unbelievable PERKS!: Save on phone, vacation, auto, retailers and more! Tuition Reimbursement: We believe in the professional development of our team members and provide annual reimbursement opportunities. Employee Family Scholarship: To date, Walden Security has awarded more than $140,000 in Employee Family Scholarships! Paid Time Off: offered to employees who average at least 32 hours per week Medical, Dental, and Vision Insurance: multiple plan options for you and your dependents Health Savings Account: pay for health care more easily Voluntary Life Insurance: affordable plans available 401K: Prepare for your retirement Employee Assistance Program: We offer free, confidential assistance for many of your life’s needs Employee Recognition Programs: We believe in celebrating the “wins” with our Walden Security team. We reward the hard work and dedication of our employees through Tenure Recognition, On-The-Spot Bonuses, Officer of the Month and Officer of the Year recognitions which include awards and bonuses Culture of Caring: Walden Security supports many charitable organizations Award Winning Company: Walden Security has earned significant recognition for our better working environment for our officers, better service to our customers, and a dedication to quality performance standards. Promote From Within Philosophy: Walden Security offers growth opportunities for our team members who are Setting the Standard by Setting the Example® Flexible Schedules: We offer flexible scheduling with multiple shifts available, including First, Second, Third and Weekend Shifts Competitive Pay! Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws. #SecurityOfficer Pay Rate $25—$25 USD We offer every employee — from executive managers to administrative support to security professionals — unique and generous benefits, as well as opportunities for career growth. So if you’re ready to embark on a meaningful career with one of the nation’s most dynamic and fastest growing security companies, apply with Walden Security today.", "summaryDescription" : "Security Officers at Walden Security. Patrol assigned areas. Observe and report activities", "postedDate" : "2026-06-16T03:17:19.226", "createdAt" : "2026-06-16T03:17:19.226", "lastUpdated" : "2026-06-16T11:35:32.804", "ingestTimestamp" : "2026-06-16T03:17:19.226", "mongoId" : "6a309c10f292fd229c0f6af8", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 25000, "salaryAnnualMax" : 25000, "salaryBand" : "<30k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "sales", "jobSubcategory" : "revenue", "seniorityLevel" : "Entry", "dataQualityScore" : 0.6666667, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Security", "llmIndustryConfidence" : 0.95 } ], "status" : 200, "message" : "enterprise security architect security detection and response jobs", "metadata" : { "title" : "enterprise security architect security detection and response" }, "pagination" : { "page" : 0, "limit" : 50, "totalCount" : 36233, "totalPages" : 725, "hasNext" : true, "hasPrevious" : false } }

Remote Enterprise Security Architect Security Detection And Response Jobs

Top Skills

Security Engineer, Detection and Response

Security Engineer, Detection and Response

Security Incident Response Manager

Security Detection Engineer

Security Engineer II, Security Incident Response Team (SIRT)

Security Engineer, Detection and Response

Senior Security Engineer, Detection and Response

Security Engineer III, Enterprise SaaS Security

Staff Security Engineer, Enterprise Security AI

Senior Security Engineer, Detection and Response

Security Operations and Incident Response Manager

Sr. Cloud Security Architect

Client Security Expert/Architect

Client Security Expert/Architect

Security Engineer, Threat Detection

Sr Security Operations Engineer, Detection and Response

Senior Security Engineer, AWS Security Incident Response

Security Assurance Solutions Architect

Staff Security Engineer - Security Data, Detection and Automation

Security Engineer, AWS Security Incident Response

Security Solution Architect

Senior Incident Response Specialist, Cyber Security

Sr. Security Engineer, AWS Cloud Security Response

Sr. Cloud Security Architect

Security Solution Architect

Sr. Cloud Security Architect

Security Incident Response Lead

Security Engineering Manager (Cloud Security)

Senior Security Incident Response Engineer

Senior Security Architect (m/f/d)

Security Engineering Manager (Cloud Security)

Senior Software Security Architect

Security Engineer, Incident Response, CorpSec

SAP Security Architect

Security Software Dev Engineer II, AWS Security Corporate Response

Security Engineer II, Vulnerability Management and Response - Strategic Enablement

Security Researcher

Senior SAP Cyber Security Architect

Senior SAP Cyber Security Architect

SAP Security Architect

Lead AI Security Architect

Security Software Dev Engineer II, AWS Security Corporate Response

Security/Valet

Security Officer

Security Officer

Global Practice Architect, Security, Google Cloud

Security Engineer II, Vulnerability Management and Response - Strategic Enablement

Senior Security Engineer, National Security

Security Officer

Security Officers

Related Searches

All Enterprise Security Architect Security Detection And Response Jobs by City

More Remote Jobs

Common Questions