{ "count" : 47964, "data" : [ { "id" : "6a2c751574d8ee00a09360f7", "title" : "Security Engineer, Detection and Response", "company" : "Serval", "industry" : "Engineering", "salary" : { "min" : 200000.0, "max" : 325000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "timestamp" : "2026-06-16T03:29:01.550", "fingerprint" : "a9b58b622fae2a5e015d888ceb1430e0f4c7af9bae19294b10f2e0362b229c6e", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/serval/5250c679-d490-407e-bd2e-b8b160c62aac/application", "externalId" : "5250c679-d490-407e-bd2e-b8b160c62aac", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "SIEM, Data lakes, EDR, Cloud telemetry, Logging", "professionalSkills" : [ "Detection engineering", "Incident response", "Security operations", "Instrumentation", "Observability", "Threat intelligence", "Program management", "Process improvement", "People management" ], "hardSkillsList" : [ "Security monitoring", "Incident investigation", "Incident containment", "Incident remediation", "Threat detection", "Response planning", "On-call management", "Escalation paths", "Tabletop exercises", "Telemetry analysis", "Adversary tradecraft" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Incident investigation", "level" : "intermediate" }, { "name" : "Incident containment", "level" : "intermediate" }, { "name" : "Incident remediation", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Response planning", "level" : "intermediate" }, { "name" : "On-call management", "level" : "intermediate" }, { "name" : "Escalation paths", "level" : "intermediate" }, { "name" : "Tabletop exercises", "level" : "intermediate" }, { "name" : "Telemetry analysis", "level" : "intermediate" }, { "name" : "Adversary tradecraft", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Detection engineering, Incident response, Security operations, Team leadership", "majorSkillsList" : [ "Detection engineering", "Incident response", "Security operations", "Team leadership" ], "coreResponsibilities" : "Design detection and response operations, Implement detection and response operations, Operate detection and response operations, Monitor security events, Triage security events, Investigate security events, Contain security events, Remediate security events, Build a team, Lead a team, Mentor a team, Hire for functions, Scale functions, Ensure operational rigor, Ensure operational readiness, Improve detection quality, Improve detection coverage, Ensure critical telemetry is available, Ensure critical telemetry is reliable, Ensure critical telemetry is actionable, Embed detection and response by design, Build a security program, Use Serval's agents for security problems, Use Serval's agents for security-operations problems", "teamCollaboration" : "Partner with Engineering; Partner with Product; Partner with Infrastructure; Work with stakeholders", "domainKnowledge" : "Modern observability stacks; Modern adversary tradecraft; Cloud environments; Corporate environments; Production environments; AI-native automation", "domainList" : [ "modern-observability-stacks", "modern-adversary-tradecraft", "cloud-environments", "corporate-environments", "production-environments", "ai-native-automation" ], "domainSpecificKnowledge" : [ "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments", "AI-native automation" ], "communicationSkills" : "Written communication; Verbal communication; Incident communication", "innovationCreativity" : "Solve frontier security problems; Solve frontier security-operations problems", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Scale detection and response operations; Improve response quality; Improve response speed", "qualificationsBasic" : "10+ years in cybersecurity, Deep expertise in detection engineering, Deep expertise in incident response, Deep expertise in security operations, Deep experience building detection and response teams, Deep experience building instrumentation/observability teams, Deep experience building threat intelligence teams, Stellar leadership skills, Demonstrated history of driving improvements, Exceptional written communication skills, Exceptional verbal communication skills, Remain calm under pressure, Effectively run command of security incidents, Deep expertise in modern observability stacks, Deep expertise in SIEM, Deep expertise in data lakes, Deep expertise in EDR, Deep expertise in cloud telemetry, Deep expertise in logging, Deep expertise in detection primitives, Understand modern adversary tradecraft (TTPs), Demonstrated experience translating TTPs into detection strategies, Demonstrated experience translating TTPs into response actions, Mission-oriented, Unimpeachable integrity, Passionate about detecting and responding to adversaries", "rawDescription" : "WHO WE ARE Serval http://serval.com is an AI-native automation platform transforming how enterprises operate. We build intelligent agents that understand real-world workflows and execute them end-to-end — replacing manual processes and rigid legacy systems with adaptive, learning software. Founded in early 2024, Serval is already trusted by companies like Fox, Notion, Perplexity, Vercel, and Brex to automate high-volume, high-friction operational work across their organizations. At the core of Serval is an agentic AI platform that turns natural language into production-grade workflows. Our agents don’t just respond to requests — they reason, take action across systems, and continuously improve with usage. What began with operational use cases has quickly evolved into a horizontal AI automation layer used across IT, HR, Finance, Security, Legal, and Engineering. Our mission is to eliminate repetitive, manual work across the enterprise and give teams leverage through intelligent automation. Long term, we’re building the universal AI operations layer — a system of agents that sits across business functions and runs the workflows that keep modern companies moving. We’re backed by leading investors including Sequoia Capital, Redpoint Ventures, Meritech, First Round, General Catalyst, Elad Gil, and others. ROLE OVERVIEW As Detection and Response Lead, you'll build and scale the foundations of Serval's cybersecurity detection and response operations. You will set the strategy and drive execution for security monitoring, incident response, recovery, and post-incident improvement across our infrastructure and the systems our customers trust us to operate in. You'll be a hands-on leader with deep technical credibility and strong operational instincts. You will build and mentor a team, partner closely with Engineering and Product, and ensure that detection and response capabilities are embedded by design into the systems that power Serval. WHAT YOU'LL DO - Design, implement, and operate detection and response operations, including continuous monitoring, triage, investigation, containment, and remediation of security events across a diverse set of networks and infrastructure. - Build, lead, and directly mentor a team spanning observability, detection and response, and threat intelligence, hiring and scaling these functions deliberately and proportionately as Serval's platform and customer footprint grow. - Ensure world-class operational rigor and readiness through incident playbooks, on-call and escalation paths, tabletop exercises, and continuous improvement of response quality and speed. - Improve detection quality and coverage by partnering with engineering teams to ensure critical telemetry is available, reliable, and actionable across cloud, corporate, and production environments. - Partner deeply across Engineering, Product, and Infrastructure to embed detection and response into Serval's systems by design rather than as an afterthought. - Build a security program capable of withstanding sophisticated adversaries, including by using Serval's own agents to solve frontier security and security-operations problems. WHAT YOU'LL NEED - Have 10+ years in cybersecurity with deep expertise in detection engineering, incident response, and security operations. - Have deep experience building and leading detection and response, instrumentation/observability, and threat intelligence teams. - Have stellar leadership skills and a demonstrated history of driving durable, continuous improvements to programs, processes, and people. - Have exceptional written and verbal communication skills, can remain calm under pressure, and can effectively run command of security incidents involving numerous stakeholders across a diverse gamut of teams, expertise, and seniority. - Have deep expertise in modern observability stacks (e.g., SIEM, data lakes, EDR, cloud telemetry, logging) and detection primitives. - Understand modern adversary tradecraft (TTPs) and have demonstrated experience translating it into practical detection strategies and response actions. - Are mission-oriented, have unimpeachable integrity, and are passionate about detecting and responding to adversaries in a highly complex, fast-paced environment. WHAT WE OFFER - Impact: Be a key player in shaping the success of our product and company. - Growth: Build a fundamentally new AI product offering with the support of our experienced team and investors. Grow rapidly with the company. - Culture: Join a culture that values innovation, ownership, accountability, and fun.", "summaryDescription" : "Security Engineer, Detection and Response at Serval. Skills: Detection engineering, Incident response, Security operations, Team leadership. Design detection and response operations. Implement detection and response operations", "createdAt" : "2026-06-14T19:27:55.217", "lastUpdated" : "2026-06-16T03:29:01.550", "ingestTimestamp" : "2026-06-14T19:27:55.217", "mongoId" : "6a2c751574d8ee00a09360f7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 200000, "salaryAnnualMax" : 325000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Security monitoring", "Incident investigation", "Incident containment", "Incident remediation", "Threat detection", "Response planning", "On-call management", "Escalation paths", "Tabletop exercises", "Telemetry analysis", "Adversary tradecraft", "Leadership", "Mentoring", "Detection engineering", "Incident response", "Security operations", "Team leadership", "Instrumentation", "Observability", "Threat intelligence", "Program management", "Process improvement", "People management", "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments", "AI-native automation" ], "skillCount" : 29, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a306fd5f292fd229cfed7df", "title" : "Security Incident Response Manager", "company" : "Stripe", "industry" : "FinTech", "salary" : { "min" : 110000.0, "max" : 150000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Manager-level Security Incident Response Manager in the FinTech industry in Ireland, adjusted for seniority and company size." }, "location" : "Ireland Locations", "locations" : [ "Ireland Locations" ], "timestamp" : "2026-06-16T11:17:32.753", "fingerprint" : "5f1795380bd689254fa4ec13a24c81721330e837ac870f097537d3dd799086da", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://stripe.com/jobs/search?gh_jid=8007205", "externalId" : "8007205", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Ireland", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Ireland", "experienceMinYears" : 5, "experienceLevel" : "Manager", "technicalSkills" : "Python, SQL, MacOS, Linux, Windows", "professionalSkills" : [ "Security management", "Data analytics", "Network security", "Digital forensics", "Incident response", "Threat intelligence", "Data processing", "Data analysis" ], "hardSkillsList" : [ "Incident response", "Threat analysis", "Forensic investigation", "Data analysis", "Network security", "System administration" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "System administration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident Response Management, Security Operations, Team Leadership, Threat Analysis", "majorSkillsList" : [ "Incident Response Management", "Security Operations", "Team Leadership", "Threat Analysis" ], "coreResponsibilities" : "Leverage security management experience, Improve incident response capabilities, Manage team of security analysts, Manage investigators, Manage responders, Hire team members, Train team members, Evaluate team performance, Provide technical guidance, Develop response procedures, Ensure timely resolution of casework, Collaborate with internal stakeholders, Make continuous improvements to incident response function, Lead team of security analysts, Support team of security analysts, Triage threats, Assess threats, Respond to threats, Provide technical guidance to team, Influence organizational mission, Influence organizational vision, Ensure prioritization of project work, Ensure delivery of project work, Align project work with security roadmaps, Strengthen KPIs for response operations, Strengthen metrics for response operations, Provide clear reporting to stakeholders, Provide consistent reporting to stakeholders, Work cross-functionally with security engineering teams, Gather requirements for analyzing security events data, Gather requirements for responding to security events data, Protect Stripe networks, Protect Stripe systems, Protect Stripe data, Develop strategies for incident response, Document strategies for incident response, Implement strategies for incident response, Develop runbooks for incident response, Document runbooks for incident response, Implement runbooks for incident response, Develop capabilities for incident response, Document capabilities for incident response, Implement capabilities for incident response, Continuously improve security processes, Continuously improve response capabilities, Collaborate with security engineers, Collaborate with security analysts, Coach individual contributors, Mentor individual contributors, Enable career development, Champion quality standards within team", "teamCollaboration" : "Cross-functional teams; Security Analytics teams; Detection teams; Security engineering teams", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Threat actor tactics; Threat actor techniques; Threat actor procedures; Security incident response; Network security; Digital forensics; Data analytics", "domainList" : [ "threat-actor-tactics", "threat-actor-techniques", "threat-actor-procedures", "security-incident-response", "network-security", "digital-forensics", "data-analytics" ], "domainSpecificKnowledge" : [ "Threat actor tactics", "Threat actor techniques", "Threat actor procedures", "Security incident response", "Network security", "Digital forensics", "Data analytics" ], "toolProficiency" : [ "Chronicle", "Tines", "Osquery", "Splunk" ], "communicationSkills" : "Operational reporting; Incident reporting", "documentationSkills" : "Response procedures; Runbooks", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Ensure timely and effective resolution of casework", "qualificationsBasic" : "5+ years leading Security Operations or Incident Response teams, Hands-on, technical management experience, B.S. or M.S. Computer Science or related field, Equivalent experience in Security, Experience recruiting, growing, and leading technical teams, Performance management experience, Excellent written and verbal communication skills, Ability to develop and deliver operational or incident-related information to leadership, Advanced knowledge of data analytics, Advanced knowledge of network security, Advanced knowledge of digital forensics, Advanced knowledge of incident response investigations, Experience with Python, Experience with SQL, Familiarity with macOS, Familiarity with Linux, Familiarity with Windows, Understanding of threat actor TTPs", "qualificationsPreferred" : "Broad knowledge across information security domain, Familiarity with endpoint security, Familiarity with email security, Familiarity with network security, Familiarity with identity management, Familiarity with cloud security, Familiarity with vulnerability management, Familiarity with incident response, Familiarity with threat intelligence, Experience with engineering, Experience with data processing and analysis tools, Familiarity with network observability, Familiarity with security software, Familiarity with data engineering solutions, Familiarity with Chronicle, Familiarity with Tines, Familiarity with osquery, Familiarity with Splunk", "remoteFriendly" : true, "rawDescription" : "Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Security Incident Response team is responsible for triaging and assessing the severity of incoming security alerts, responding with initial containment measures and escalating as needed to incident responders for further investigation and resolution. They analyze a variety of data sources to identify potential threats, collect requirements for operational enhancements to detection and response systems, and generally scale security processes. From external attacks to insider threats, our goal is to respond with speed and precision, remediate, and support the incident postmortem process. The team is distributed globally and regularly coordinates with stakeholders in North America, Europe, and Asia. What you’ll do You will leverage your security management experience to improve incident response capabilities at Stripe. You will manage a team of security analysts, investigators, and responders on the front lines of the incident response process, hiring, training, and evaluating their performance, providing technical guidance where needed, developing clear and consistent response procedures, and ensuring timely and effective resolution of casework. You will also collaborate with various internal stakeholders, including the Security Analytics and Detection teams, and make continuous improvements to Stripe’s security incident response function. Responsibilities Lead and support a team of security analysts, investigators, and responders who triage, assess, and respond to threats Provide technical guidance to the team, as a subject matter expert Influence the organizational mission and vision by ensuring prioritization and delivery of project work that is aligned with relevant security roadmaps Strengthen KPIs and metrics for measuring response operations effectiveness, for clear and consistent reporting to internal stakeholders Work cross-functionally with security engineering teams to gather requirements for analyzing and responding to security events data at scale while protecting Stripe networks, systems, and data from threats Develop, document, and implement strategies, runbooks, and capabilities to support the incident response process Continuously improve security processes and response capabilities by collaborating with security engineers and analysts Coach and mentor individual contributors, enabling career development and championing quality standards within the team Who you are We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement. Minimum requirements 5+ years experience leading Security Operations or Incident Response teams, including hands-on, technical management experience of security analysts or engineers B. S. or M. S. Computer Science or related field, or equivalent experience in Security Experience recruiting, growing, and leading technical teams, including performance management Excellent written and verbal communication skills, including the ability to develop and deliver operational or incident-related information to leadership Advanced knowledge of data analytics (e. g. logs for first or third party applications, system / data access events), network security, digital forensics, and incident response investigations Experience with Python and SQL, and/or familiarity with other programming languages Familiarity with operating systems, file systems, and memory on macOS, Linux, or Windows Strong understanding of threat actor tactics, techniques, and procedures (TTPs) Preferred qualifications Broad knowledge and experience across the information security domain, including familiarity with endpoint, email, network, identity management, cloud security, vulnerability management, incident response, and threat intelligence. Experience with engineering, data processing and analysis tools Familiarity with network observability, security software, or data engineering solutions (Chronicle, Tines, osquery, Splunk, etc.)", "summaryDescription" : "Security Incident Response Manager at Stripe. Skills: Incident Response Management, Security Operations, Team Leadership, Threat Analysis. Leverage security management experience. Improve incident response capabilities", "postedDate" : "2026-06-16T01:16:18.624", "createdAt" : "2026-06-16T01:16:18.624", "lastUpdated" : "2026-06-16T11:17:32.753", "ingestTimestamp" : "2026-06-16T01:16:18.624", "mongoId" : "6a306fd5f292fd229cfed7df", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Incident response", "Threat analysis", "Forensic investigation", "Data analysis", "Network security", "System administration", "Leadership", "Incident Response Management", "Security Operations", "Team Leadership", "Threat Analysis", "Security management", "Data analytics", "Digital forensics", "Threat intelligence", "Data processing", "Roadmap planning", "Threat actor tactics", "Threat actor techniques", "Threat actor procedures", "Security incident response", "Chronicle", "Tines", "Osquery", "Splunk" ], "skillCount" : 25, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb0c074d8ee00a09daf1c", "title" : "Security Engineer, Detection and Response", "company" : "Serval", "industry" : "Engineering", "salary" : { "min" : 200000.0, "max" : 325000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "timestamp" : "2026-06-15T09:19:56.220", "fingerprint" : "14803e741daf8986e22ba67efd869ed1db5cb9f7c1f099fcc2a20c6ed18f6f72", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/Serval/5250c679-d490-407e-bd2e-b8b160c62aac/application", "externalId" : "5250c679-d490-407e-bd2e-b8b160c62aac", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "Cloud telemetry, Logging", "professionalSkills" : [ "Detection engineering", "Incident response", "Security operations", "Threat intelligence", "Observability", "Program management" ], "hardSkillsList" : [ "Adversary tradecraft", "Detection strategies", "Response actions" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Adversary tradecraft", "level" : "intermediate" }, { "name" : "Detection strategies", "level" : "intermediate" }, { "name" : "Response actions", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Detection engineering, Incident response, Security operations, Team leadership", "majorSkillsList" : [ "Detection engineering", "Incident response", "Security operations", "Team leadership" ], "coreResponsibilities" : "Design detection and response operations, Implement detection and response operations, Operate detection and response operations, Monitor security events, Triage security events, Investigate security events, Contain security events, Remediate security events, Build a team, Lead a team, Mentor a team, Hire functions, Scale functions, Ensure operational rigor, Ensure operational readiness, Improve detection quality, Improve detection coverage, Partner with engineering teams, Ensure telemetry availability, Ensure telemetry reliability, Ensure telemetry actionability, Embed detection and response, Build security program", "teamCollaboration" : "Partner with Engineering; Partner with Product; Partner with Infrastructure", "domainKnowledge" : "Modern observability stacks; Modern adversary tradecraft; Cloud environments; Corporate environments; Production environments", "domainList" : [ "modern-observability-stacks", "modern-adversary-tradecraft", "cloud-environments", "corporate-environments", "production-environments" ], "domainSpecificKnowledge" : [ "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments" ], "communicationSkills" : "Written communication; Verbal communication", "innovationCreativity" : "Use Serval's agents", "qualificationsBasic" : "10+ years cybersecurity, Deep expertise detection engineering, Deep expertise incident response, Deep expertise security operations, Deep experience building teams, Deep experience leading teams, Stellar leadership skills, Demonstrated history driving improvements, Exceptional written communication, Exceptional verbal communication, Remain calm under pressure, Effectively run incidents, Deep expertise observability stacks, Deep expertise detection primitives, Understand modern adversary tradecraft, Experience translating TTPs, Experience into detection strategies, Experience into response actions", "qualificationsPreferred" : "Experience with SIEM, Experience with data lakes, Experience with EDR, Experience with cloud telemetry, Experience with logging", "rawDescription" : "WHO WE ARE Serval http://serval.com is an AI-native automation platform transforming how enterprises operate. We build intelligent agents that understand real-world workflows and execute them end-to-end — replacing manual processes and rigid legacy systems with adaptive, learning software. Founded in early 2024, Serval is already trusted by companies like Fox, Notion, Perplexity, Vercel, and Brex to automate high-volume, high-friction operational work across their organizations. At the core of Serval is an agentic AI platform that turns natural language into production-grade workflows. Our agents don’t just respond to requests — they reason, take action across systems, and continuously improve with usage. What began with operational use cases has quickly evolved into a horizontal AI automation layer used across IT, HR, Finance, Security, Legal, and Engineering. Our mission is to eliminate repetitive, manual work across the enterprise and give teams leverage through intelligent automation. Long term, we’re building the universal AI operations layer — a system of agents that sits across business functions and runs the workflows that keep modern companies moving. We’re backed by leading investors including Sequoia Capital, Redpoint Ventures, Meritech, First Round, General Catalyst, Elad Gil, and others. ROLE OVERVIEW As Detection and Response Lead, you'll build and scale the foundations of Serval's cybersecurity detection and response operations. You will set the strategy and drive execution for security monitoring, incident response, recovery, and post-incident improvement across our infrastructure and the systems our customers trust us to operate in. You'll be a hands-on leader with deep technical credibility and strong operational instincts. You will build and mentor a team, partner closely with Engineering and Product, and ensure that detection and response capabilities are embedded by design into the systems that power Serval. WHAT YOU'LL DO - Design, implement, and operate detection and response operations, including continuous monitoring, triage, investigation, containment, and remediation of security events across a diverse set of networks and infrastructure. - Build, lead, and directly mentor a team spanning observability, detection and response, and threat intelligence, hiring and scaling these functions deliberately and proportionately as Serval's platform and customer footprint grow. - Ensure world-class operational rigor and readiness through incident playbooks, on-call and escalation paths, tabletop exercises, and continuous improvement of response quality and speed. - Improve detection quality and coverage by partnering with engineering teams to ensure critical telemetry is available, reliable, and actionable across cloud, corporate, and production environments. - Partner deeply across Engineering, Product, and Infrastructure to embed detection and response into Serval's systems by design rather than as an afterthought. - Build a security program capable of withstanding sophisticated adversaries, including by using Serval's own agents to solve frontier security and security-operations problems. WHAT YOU'LL NEED - Have 10+ years in cybersecurity with deep expertise in detection engineering, incident response, and security operations. - Have deep experience building and leading detection and response, instrumentation/observability, and threat intelligence teams. - Have stellar leadership skills and a demonstrated history of driving durable, continuous improvements to programs, processes, and people. - Have exceptional written and verbal communication skills, can remain calm under pressure, and can effectively run command of security incidents involving numerous stakeholders across a diverse gamut of teams, expertise, and seniority. - Have deep expertise in modern observability stacks (e.g., SIEM, data lakes, EDR, cloud telemetry, logging) and detection primitives. - Understand modern adversary tradecraft (TTPs) and have demonstrated experience translating it into practical detection strategies and response actions. - Are mission-oriented, have unimpeachable integrity, and are passionate about detecting and responding to adversaries in a highly complex, fast-paced environment. WHAT WE OFFER - Impact: Be a key player in shaping the success of our product and company. - Growth: Build a fundamentally new AI product offering with the support of our experienced team and investors. Grow rapidly with the company. - Culture: Join a culture that values innovation, ownership, accountability, and fun.", "summaryDescription" : "Security Engineer, Detection and Response at Serval. Skills: Detection engineering, Incident response, Security operations, Team leadership. Design detection and response operations. Implement detection and response operations", "createdAt" : "2026-06-14T03:16:25.185", "lastUpdated" : "2026-06-15T09:19:56.220", "ingestTimestamp" : "2026-06-14T03:16:25.185", "mongoId" : "6a2cb0c074d8ee00a09daf1c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 200000, "salaryAnnualMax" : 325000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Adversary tradecraft", "Detection strategies", "Response actions", "Leadership", "Mentoring", "Detection engineering", "Incident response", "Security operations", "Team leadership", "Threat intelligence", "Observability", "Program management", "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments" ], "skillCount" : 17, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "694ae6ce70f0b99d589b2804", "title" : "Security Operations and Incident Response Manager", "company" : "Hyundai Capital America", "industry" : "FinTech", "salary" : { "min" : 155000.0, "max" : 210000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager in Security Operations and Incident Response in Irvine, United States, adjusted for the FinTech industry and company size." }, "location" : "United States-California-Irvine", "locations" : [ "United States-California-Irvine", "
Headquarters 1 (HCA_HQ1)
3161 Michelson Dr. Ste 1900
Irvine, 92612

" ], "timestamp" : "2026-06-15T08:40:47.148", "fingerprint" : "d5f865261d9c50964a8d89f96af400da1cdb2f3eecdc20e0391203f2e5cc71a5", "source" : "taleo", "language" : "en", "applyUrl" : "https://hyundaicapital.taleo.net/careersection/ex/jobdetail.ftl?job=105024", "externalId" : "105024", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "experienceLevel" : "Manager", "technicalSkills" : "SIEM, EDR, Threat intelligence, Ransomware, Phishing, Account takeover, Forensic analysis, Automation, Cloud security, AWS, Azure, Google Cloud, Oracle Cloud, Python, PowerShell", "professionalSkills" : [ "Incident response", "Threat hunting", "Tool administration", "Rule tuning", "Vulnerability management", "IAM", "DLP", "Application security", "Risk assessment", "Operational performance" ], "hardSkillsList" : [ "Security monitoring", "Threat detection", "Alert triage", "Incident handling", "Forensic investigation", "Playbook development", "Post-incident review", "Tool configuration", "Detection rule tuning", "Automation scripting", "Cloud monitoring", "Vulnerability scanning" ], "softSkillsList" : [ "Analytical mindset", "Leadership" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Alert triage", "level" : "intermediate" }, { "name" : "Incident handling", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" }, { "name" : "Playbook development", "level" : "intermediate" }, { "name" : "Post-incident review", "level" : "intermediate" }, { "name" : "Tool configuration", "level" : "intermediate" }, { "name" : "Detection rule tuning", "level" : "intermediate" }, { "name" : "Automation scripting", "level" : "intermediate" }, { "name" : "Cloud monitoring", "level" : "intermediate" }, { "name" : "Vulnerability scanning", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Analytical mindset" }, { "name" : "Leadership" } ], "majorSkills" : "Incident response, Security operations, Threat detection, SIEM management", "majorSkillsList" : [ "Incident response", "Security operations", "Threat detection", "SIEM management" ], "coreResponsibilities" : "Monitor security events, Analyze security events, Detect threats, Respond to threats, Tune SIEM rules, Optimize SIEM ingestion, Leverage threat intelligence, Analyze financial threats, Develop detection strategies, Triage security alerts, Correlate data, Escalate critical incidents, Lead incident response, Support incident response, Perform forensic investigations, Document findings, Create incident response playbooks, Maintain incident response playbooks, Conduct post-incident reviews, Recommend improvements, Update security controls, Coordinate with MSSP partners, Validate escalations, Provide tuning feedback, Manage security tools, Configure security tools, Ensure tool performance, Ensure tool coverage, Develop detection rules, Tune detection rules, Develop alerts, Tune alerts, Implement automation responses, Streamline tasks, Monitor cloud environments, Secure cloud environments, Protect financial data, Protect workloads, Integrate security tools, Partner with vulnerability management, Partner with IAM teams, Collaborate with IT Infrastructure, Collaborate with IT Application Teams, Collaborate with DevOps, Collaborate with IAM, Collaborate with DLP, Collaborate with Application Security, Integrate security operations, Conduct vulnerability scans", "teamCollaboration" : "Cross-functional collaboration; Collaborate with IT Infrastructure; Collaborate with IT Application Teams; Collaborate with DevOps; Collaborate with IAM; Collaborate with DLP; Collaborate with Application Security; Collaborate with threat intelligence; Collaborate with vulnerability management; Collaborate with engineering teams; Collaborate with cybersecurity architecture; Collaborate with cybersecurity engineering", "domainKnowledge" : "Financial systems; Cybersecurity; Cloud environments; MITRE framework", "domainList" : [ "financial-systems", "cybersecurity", "cloud-environments", "mitre-framework" ], "domainSpecificKnowledge" : [ "Financial systems", "Cybersecurity", "Cloud environments", "MITRE framework" ], "toolProficiency" : [ "Splunk", "NGSIEM", "EDR", "SIEM", "Firewalls", "Vulnerability scanners" ], "communicationSkills" : "Communicate risk; Communicate operational performance; Documentation skills", "documentationSkills" : "Document findings", "continuousLearning" : "Continuous learning; Staying ahead of threats; Tuition reimbursement", "problemSolvingSkills" : "Analytical mindset; Root cause analysis", "specialRequirements" : "Work at home, Office environment", "outcomesObjectives" : "Reduce false positives; Improve detection fidelity; Enhance detection strategies; Prevent recurrence", "qualificationsBasic" : "5+ years experience, Experience with SIEM platforms, Experience with EDR, Experience with threat intelligence platforms, Experience with incident response lifecycle, Experience with cybersecurity metrics, Experience with KPIs, Experience communicating risk, Experience communicating operational performance, Experience with cloud environments, Experience with automation scripts, Experience with vulnerability scanners, Experience with firewalls", "qualificationsPreferred" : "Experience with Splunk, Experience with NGSIEM, Experience with AWS, Experience with Azure, Experience with Google Cloud, Experience with Oracle Cloud, Experience with Python, Experience with PowerShell", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Who We Are Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 2 million consumers and businesses. Embodying our commitment to grow, innovate, and diversify, we strive to reimagine the customer and dealer experience and launch innovative new products that broaden our market reach. We believe that success comes from within and are proud to support our team members through skill development and career advancement. Hyundai Capital America is an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce. We are a values-driven company dedicated to supporting both internal and external communities through volunteering, philanthropy, and the empowerment of our Employee Resource Groups. Together, we strive to be the leader in financing freedom of movement. We Take Care of Our People Along with competitive pay, as an employee of HCA, you are eligible for the following benefits: · Medical, Dental and Vision plans that include no-cost and low-cost plan options · Immediate 401(k) matching and vesting · Vehicle purchase and lease discounts plus monthly vehicle allowances · Paid Volunteer Time Off with company donation to a charity of your choice · Tuition reimbursement What to Expect The Security Operations & Incident Response (SOIR) Manager is responsible for the enterprise-wide incident response function within the Security Operations Center (SOC), ensuring rapid detection, containment, and remediation of cybersecurity threats. This role is pivotal in maintaining the integrity, confidentiality, and availability of Hyundai Capital America’s digital assets and infrastructure. This role will oversee 3 rd party vendor of incident responders and collaborate with threat intelligence, vulnerability management, and engineering teams to drive continuous improvement in detection and response capabilities. In addition, this role will create and maintain incident response playbooks and establish processes for proactive threat hunting, as well as be responsible for administration and day-to-day support of HCA EDR, SIEM, and HCA Monitoring, Threat detection, and remediation tools. What You Will Do 1. Security Monitoring & Threat Detection : · Monitor and analyze security events in real-time using SIEM platforms (e.g., Splunk, NGSIEM etc.) to detect and respond to threats targeting financial systems, such as ransomware, phishing, or account takeover. · Tune and optimize SIEM correlation rules and ingestion pipelines to reduce false positives and improve detection fidelity. · Leverage threat intelligence platforms to analyze emerging financial-specific threats, correlate intelligence with internal data, and develop actionable insights to enhance detection and prevention strategies. 2. Incident Response & Remediation : · Alert Triage: Investigate and triage security alerts, correlating data from endpoints, networks, and cloud environments to identify true positives and escalate critical incidents. · Incident Handling: Lead and support incident response activities, including containment, eradication, and recovery, for security incidents spanning the MITRE framework. · Forensic Analysis: Perform forensic investigations to determine the root cause of incidents, and document findings for audits and legal purposes. · Playbook Development: Create and maintain incident response playbooks, ensuring rapid and consistent response processes. · Post-Incident Review: Conduct post-Incident reviews to identify lessons learned, recommend improvements, and update security controls to prevent recurrence. · Coordinate with MSSP partners in a co-managed SIEM/SOC model to validate escalations and provide tuning feedback. 3. Tool Administration and Management of SOC Solutions : · Tool Administration: Manage and configure security tools, including SIEM, EDR, firewalls, and vulnerability scanners, to ensure optimal performance and coverage. · Rule Tuning: Develop and tune detection rules, signatures, and alerts to reduce false positives and improve detection accuracy in financial environments. · Automation: Implement automation responses (e.g. SOUR) scripts (e.g., Python, PowerShell) to streamline tasks like alert enrichment, incident triage, or vulnerability scans. · Cloud Security Monitoring: Monitor and secure cloud environments (e.g., AWS, Azure, Google Cloud, Oracle Cloud) using native security tools and third-party integrations, protecting financial data and workloads. · Collaborate with cybersecurity architecture & engineering team to ensure proper integration of security tools across cloud, network, and endpoint environments. · Partner with vulnerability management and IAM teams to ensure holistic security coverage. 4. Collaboration, Automation, and Innovation Activities : · Cross-Functional Collaboration: Partner with IT Infrastructure and IT Application Teams, DevOps, IAM, DLP, and Application Security teams to integrate security operations with broader cybersecurity initiatives, such as cloud migrations or fintech development. · Vulnerability Management: Collaborate with Vulnerability Management team to conduct regular vulnerability scans across networks, systems, and applications to identify weaknesses, such as unpatched software or misconfigurations and support the patching management and/or adequate remediation plan. 5. Documentation, Reporting, and Compliance Activities : · Incident Documentation: Document security incidents, investigations, and remediation actions in detail to support audits, compliance, and lessons learned. · Vulnerability and Penetration Test Reports: Produce comprehensive reports on vulnerability scans and penetration tests, including risk assessments, remediation plans, and validation results. · Metrics and Reporting: Develop and report on SOC metrics (e.g., Mean Time to Detect, Mean Time to Respond, vulnerability remediation rates, penetration test coverage) to demonstrate operational effectiveness. · Runbooks and Procedures: Maintain and update SOC runbooks, standard operating procedures (SOPs), and knowledge bases for incident response, vulnerability management, and penetration testing. What You Will Bring · Minimum 5-7 years progressive experience in cybersecurity with proven knowledge in Security Operations Center practices and incident response processes; including 3+ years of experience in financial services, with a strong understanding of financial threats (e.g., fraud, data breaches) and regulations (e.g., PCI DSS, Korean SOX, GDPR) · Hands-on experience with SIEM platforms, EDR solutions, and other Monitoring and Vulnerability management tools (e.g., Splunk, Crowdstrike, Rapid 7) · Strong understanding of cyber threat landscapes, attack vectors, MITRE ATT&CK framework, and adversary tactics, techniques, and procedures · Bachelor’s degree in Computer Science, Information Security, or related field · Master’s degree preferred · Certification in one of the following: CISSP, CCSP, CISM, TOGAF or equivalent · Demonstrated ability to manage major incident investigations, including root cause analysis, executive reporting, and coordination with legal, compliance, and law enforcement when necessary · Familiarity with regulatory and compliance frameworks such as HIPAA, PCI-DSS, NIST, ISO 27001, and GDPR. · Proven ability to develop and maintain incident response playbooks, escalation procedures, and SOC standard operating procedures (SOPs) · Experience with cybersecurity metrics and KPIs, and the ability to communicate risk and operational performance to executive leadership · Demonstrated expertise in incident response lifecycle, including detection, triage, containment, eradication, recovery, and post-incident review · Analytical mindset with attention to detail · Excellent communication and documentation skills · Ability to work under pressure and manage multiple incidents simultaneously · Passion for continuous learning and staying ahead of emerging threats Work Environment Employees in this class are subject to extended periods of sitting, standing, and walking, vision to monitor and moderate noise levels. Work is performed in an at home and office environment. The posted salary range for this job takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; geographic location, and other business and organizational needs. Successful candidates may be hired anywhere in the salary range based on these factors. It is uncommon to hire candidates at or near the top of the range. California Privacy Notice This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here . This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used, and whether that information is sold or shared, so that you can exercise meaningful control over our use of your personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (“CCPA”). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at Privacy2@hcs.com . United States-California-Irvine", "summaryDescription" : "Security Operations and Incident Response Manager at Hyundai Capital America. Skills: Incident response, Security operations, Threat detection, SIEM management. Monitor security events. Analyze security events", "createdAt" : "2026-06-14T08:13:57.992", "lastUpdated" : "2026-06-15T08:40:47.148", "ingestTimestamp" : "2026-06-14T08:13:57.992", "mongoId" : "694ae6ce70f0b99d589b2804", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 155000, "salaryAnnualMax" : 210000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Security monitoring", "Threat detection", "Alert triage", "Incident handling", "Forensic investigation", "Playbook development", "Post-incident review", "Tool configuration", "Detection rule tuning", "Automation scripting", "Cloud monitoring", "Vulnerability scanning", "Analytical mindset", "Leadership", "Incident response", "Security operations", "SIEM management", "Threat hunting", "Tool administration", "Rule tuning", "Vulnerability management", "IAM", "DLP", "Application security", "Risk assessment", "Operational performance", "Financial systems", "Cybersecurity", "Cloud environments", "MITRE framework", "Splunk", "NGSIEM", "EDR", "SIEM", "Firewalls", "Vulnerability scanners" ], "skillCount" : 36, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.7777778, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305653f292fd229cf27dba", "title" : "Security Engineer II, Security Incident Response Team (SIRT)", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 159000.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-16T08:11:33.016", "fingerprint" : "0987fca027bd6689942ce9706e1f89c85b280b67309ecc2a54aad3db41923465", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10443978/apply", "externalId" : "c8d18061-5e73-4845-8dc5-690328d5af3a", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Cloud security, Network security, Endpoint security, Vulnerability management, Incident response, SIEM, Forensics, Scripting languages, AWS, Azure, GCP", "professionalSkills" : [ "Problem solving", "Analytical thinking", "Decision making" ], "hardSkillsList" : [ "Incident analysis", "Malware analysis", "Digital forensics", "Network traffic analysis", "Log analysis" ], "hardSkills" : [ { "name" : "Incident analysis", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Digital forensics", "level" : "intermediate" }, { "name" : "Network traffic analysis", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" } ], "majorSkills" : "Security Incident Response, Cloud Security, Threat Detection", "majorSkillsList" : [ "Security Incident Response", "Cloud Security", "Threat Detection" ], "coreResponsibilities" : "Respond to security incidents, Investigate security breaches, Analyze security alerts, Perform digital forensics, Develop incident response playbooks, Collaborate with engineering teams, Improve security posture, Stay current with threats", "teamCollaboration" : "Cross-functional teams; Engineering teams", "domainKnowledge" : "Cloud computing; Network protocols; Operating systems; Cyber threats", "domainList" : [ "cloud-computing", "network-protocols", "operating-systems", "cyber-threats" ], "domainSpecificKnowledge" : [ "Cloud computing", "Network protocols", "Operating systems", "Cyber threats" ], "toolProficiency" : [ "SIEM tools", "Forensic tools", "Threat intelligence platforms" ], "communicationSkills" : "Incident reporting; Technical briefings", "documentationSkills" : "Incident reports; Post-incident reviews", "continuousLearning" : "Stay current with threats", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Minimize impact of incidents; Reduce incident response time; Enhance security defenses", "qualificationsBasic" : "Bachelor's degree or equivalent practical experience, 5+ years of experience in security engineering, Experience with security incident response, Experience with cloud security", "qualificationsPreferred" : "Master's degree in Computer Science or related field, Experience with scripting languages, Experience with SIEM tools, Experience with threat intelligence platforms, Experience with digital forensics", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon is seeking qualified Security Engineers to join our innovative, high energy Information Security team. In this role you will work within the Amazon Security Incident Response Team (SIRT). SIRT Security Engineers respond to security events, conduct analysis of threats such as malware and intrusion attempts, and provide security services to safeguard highly sensitive data. They work hands-on with detection systems and vulnerability analysis tools to respond to potential threats to Amazon systems. SIRT Security Engineers are unique individuals prepared to relentlessly resolve security issues by gathering and analyzing event data and conducting root-cause analysis. With your technical expertise, you will be solving security challenges at scale, working to protect the applications powering the most sophisticated e-commerce platform ever built. We value broad and deep technical knowledge, specifically in the fields of forensics, malware analysis, network security, application security, threat hunting, and threat intelligence. Key job responsibilities - Responding to security incidents, and coordinating a cohesive response involving multiple teams across Amazon. - Providing security engineering solutions and support during customer-facing incidents, proactively considering the prevention of similar incidents from occurring in the future. - Assisting in the development of pragmatic solutions that achieve business requirements while maintaining an acceptable level of risk. - Identifying and recommending solutions that improve or expand Amazon’s incident response capabilities, leveraging AI approaches where suitable. - Working alongside and mentoring Information Security engineers to improve security, reduce and quickly address risk. - Evaluating the impact of current security trends, advisories, publications, and academic research to Amazon, coordinating response as necessary across affected teams. - Keeping your knowledge and skills current with the rapidly changing threat landscape. - Participating in a follow-the-sun on-call rotation. A day in the life You will be part of an operational team, which owns and drives outcomes for security issues reported through a variety of mechanisms. When not \"on deck\" for those operational duties, you will be identifying and developing solutions to consistently and efficiently handle issues. You will also work with partner security teams across Amazon to raise our security bar and delight customers. There are also training and travel opportunities due to SIRT being a global team with presence in multiple countries. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Basic Qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience - 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience - Bachelor's degree in computer science or equivalent - Knowledge of networking protocols such as HTTP, DNS and TCP/IP - Knowledge of industry-based security vulnerabilities and remediation techniques Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks - Experience with AWS products and services - Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "Security Engineer II, Security Incident Response Team (SIRT) at Amazon.com Services LLC. Skills: Security Incident Response, Cloud Security, Threat Detection. Respond to security incidents. Investigate security breaches", "postedDate" : "2026-06-15T22:01:16.090", "createdAt" : "2026-06-15T22:01:16.090", "lastUpdated" : "2026-06-16T08:11:33.016", "ingestTimestamp" : "2026-06-15T22:01:16.090", "mongoId" : "6a305653f292fd229cf27dba", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10443978/apply", "salaryAnnualMin" : 159000, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Incident analysis", "Malware analysis", "Digital forensics", "Network traffic analysis", "Log analysis", "Security Incident Response", "Cloud Security", "Threat Detection", "Problem solving", "Analytical thinking", "Decision making", "Cloud computing", "Network protocols", "Operating systems", "Cyber threats", "SIEM tools", "Forensic tools", "Threat intelligence platforms" ], "skillCount" : 18, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a25145474d8ee00a00bb3b2", "title" : "Senior Security Engineer, AWS Security Incident Response", "company" : "Amazon Web Services Japan GK", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 1.2E7, "max" : 1.8E7, "currency" : "JPY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Security Engineer in Tokyo, Japan, adjusted for AWS's size and the technology industry." }, "location" : "Tokyo, JPN", "locations" : [ "Tokyo, JPN" ], "certifications" : [ "GCIH", "GSEC", "GREM", "GCFA", "CISSP" ], "timestamp" : "2026-06-15T08:24:56.602", "fingerprint" : "a57d3db022abec12088d7bb9660b2ed2ff73f018f6b5050988fd19a160c05a1a", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10441597/apply", "externalId" : "79b6888c-343c-4289-bbab-a95d6a41e1f2", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tokyo", "country" : "Japan", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "35.6768601,139.7638947" } ], "locationText" : "Tokyo, Japan", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Python, Java, C++, AWS, Amazon GuardDuty, AWS CloudTrail, AWS Security Hub, AWS IAM", "professionalSkills" : [ "Malware analysis", "Forensic analysis", "Attribution skills", "System design", "Automation development", "Detection engineering", "Incident response", "Threat monitoring", "Security operations" ], "hardSkillsList" : [ "Scripting", "Programming", "Code review", "Log analysis", "Automation", "Command line tools", "Security issue identification", "Risk assessment", "Mitigation planning", "Vulnerability identification", "Attack pattern analysis", "Remediation" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Programming", "level" : "intermediate" }, { "name" : "Code review", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" }, { "name" : "Command line tools", "level" : "intermediate" }, { "name" : "Security issue identification", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Mitigation planning", "level" : "intermediate" }, { "name" : "Vulnerability identification", "level" : "intermediate" }, { "name" : "Attack pattern analysis", "level" : "intermediate" }, { "name" : "Remediation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Security Incident Response, Automation, AI Feedback Loops, Detection Engineering", "majorSkillsList" : [ "Security Incident Response", "Automation", "AI Feedback Loops", "Detection Engineering" ], "coreResponsibilities" : "Build automation mechanisms, Investigate complex security incidents, Build frameworks for scalable detection, Build frameworks for auto-remediation, Architect AI feedback loops, Respond to threats, Build detection enhancements, Build auto-remediation playbooks, Build AI training pipelines, Lead incident response for customers, Scope blast radius, Coordinate containment, Guide remediation, Walk customers through compromises, Build pipelines to capture investigation patterns, Translate patterns into detection rules, Translate patterns into auto-remediation, Measure impact on investigation volume, Measure impact on investigation accuracy, Build mechanisms for engineer contribution, Build AI feedback loops, Improve autonomous investigation accuracy, Define and track metrics, Measure automation effectiveness, Reduce false positives, Increase auto-resolution coverage, Track engineer contribution rates, Mentor junior engineers, Structure artifacts as reusable automation inputs, Participate in on-call rotations, Review automation dashboard metrics, Investigate new attack patterns, Analyze malware behavior, Extract indicators, Build detection rules, Step into high-severity incidents, Analyze logs, Correlate indicators across accounts, Codify attack chains, Improve AI agent performance, Review and approve detection rule contributions", "teamCollaboration" : "Cross-functional teams; Leadership collaboration", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Attack patterns; Supply chain attacks; Cryptomining; Cloud-native architecture; Security operations", "domainList" : [ "attack-patterns", "supply-chain-attacks", "cryptomining", "cloud-native-architecture", "security-operations" ], "domainSpecificKnowledge" : [ "Attack patterns", "Supply chain attacks", "Cryptomining", "Cloud-native architecture", "Security operations" ], "toolProficiency" : [ "AWS" ], "communicationSkills" : "Customer calls; Executive presentations", "continuousLearning" : "One-on-one coaching", "innovationCreativity" : "Prototype development", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Data-driven decision making", "specialRequirements" : "On-call rotation, 24/7 follow-the-sun operating model", "outcomesObjectives" : "Reduce false positives; Increase auto-resolution coverage; Improve autonomous investigation accuracy", "qualificationsBasic" : "5+ years scripting, programming, or security code review, Bachelor's degree or above in Computer Science, Computer Engineering, Cybersecurity, or other related discipline, Speak, write, and read fluently in Japanese, 5+ years troubleshooting systems issues, analyzing logs, automating complex tasks using command line tools, and identifying security issues, risks, and developing mitigation plans, Experience in industry-based security vulnerabilities identification, attack patterns, and remediation, Experience as a mentor, tech lead, or leading an engineering team", "qualificationsPreferred" : "Master's degree in Computer Science, Information Security, or a related field, Experience in automation or monitoring frameworks, deployment or development, Information security professional certification (GCIH, GSEC, GREM, GCFA, CISSP, or equivalent), Experience with AWS services in a security operations context", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Security Incident Response is looking for a Senior Security Engineer who builds the automation mechanisms that scale security response. You will investigate complex security incidents hands-on, build the frameworks that turn investigation expertise into scalable detection and auto-remediation, and architect the AI feedback loops that make the service smarter with every investigation. The AWS Security Incident Response team provides 24/7 security response through a follow-the-sun operating model. The service combines automated triage workflows, AI-powered investigation agents, and human security analysts to respond to threats across customer AWS environments at massive scale. Our AI systems autonomously resolve over 90% of routine investigations within minutes. The next challenge is building the mechanisms that accelerate this further — enabling every engineer on the team to contribute to detection and automation quality from their investigation work. Your deep understanding of how attacks work — from initial exploitation through lateral movement to data exfiltration — is what makes your automation effective. You will build detection enhancements, auto-remediation playbooks, and AI training pipelines that catch real threats, not just generate noise. We treat every investigation as a confirmed security incident until the data proves otherwise. Native Japanese language skills and fluent English language skills in speaking, reading, and writing. Key job responsibilities - Investigate and respond to complex security incidents hands-on — applying malware analysis, forensic analysis, or attribution skills to credential compromise, data exfiltration, supply chain attacks, and cryptomining - Lead incident response for customers during high-severity events: scope blast radius, coordinate containment, guide remediation, and get on calls with customers to walk them through what was compromised and the specific steps to contain the threat - Own the response-to-automation flywheel: build pipelines that capture investigation patterns (including Trust & Safety abuse cases), translate them into detection rules and auto-remediation, and measure impact on investigation volume and accuracy - Build mechanisms that enable every engineer on the team to contribute detection rules, automation playbooks, and AI training data — and build the AI feedback loops that ensure human corrections systematically improve autonomous investigation accuracy - Define and track metrics that measure automation effectiveness: false positive reduction, auto-resolution coverage, and engineer contribution rates to the pipeline - Mentor junior engineers on investigation methodology and structuring artifacts as reusable automation inputs - Participate in on-call rotations as part of the 24/7 follow-the-sun operating model, including weekends A day in the life - Review automation dashboard metrics: AI agent resolution rates, false positive trends, and engineer-submitted detection rules going live - Investigate new attack patterns the AI is struggling with — analyze malware behavior, extract indicators, and build detection rules that catch the pattern without generating false positives - Step into high-severity incidents directly — analyzing logs, correlating indicators across accounts, scoping blast radius, and getting on a call with the customer to guide containment - Codify attack chains from investigations into detection rules and AI agent improvements so the system catches the pattern autonomously next time - Review and approve detection rule contributions from junior engineers using your contribution framework About the team The AWS Security Incident Response team provides 24/7 threat monitoring, investigation, and response for customer AWS environments. The team is driving a strategic transformation — raising operational standards, building AI-powered investigation capabilities, and expanding coverage. We respond to customer requests within minutes. Zero queue tolerance is the operating standard. We value engineers who solve root causes over those who close tickets. Senior engineers enjoy close collaboration with leadership, one-on-one coaching, and the opportunity to shape the future of security operations at AWS scale. Basic Qualifications: - 5+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience - Bachelor's degree or above in Computer Science, Computer Engineering, Cybersecurity, or other related discipline - Speak, write, and read fluently in Japanese - 5+ years of non-internship experience in troubleshooting systems issues, analyzing logs, automating complex tasks using command line tools, and identifying security issues, risks, and developing mitigation plans - Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques; including experience as a mentor, tech lead, or leading an engineering team Preferred Qualifications: - Master's degree in Computer Science, Information Security, or a related field - Experience in automation or monitoring frameworks, deployment or development - Knowledge of compliance and security standards across the enterprise IT landscape - * Information security professional certification (GCIH, GSEC, GREM, GCFA, CISSP, or equivalent) - * Experience with AWS services in a security operations context (Amazon GuardDuty, AWS CloudTrail, AWS Security Hub, AWS IAM) Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Senior Security Engineer, AWS Security Incident Response at Amazon Web Services Japan GK. Skills: Security Incident Response, Automation, AI Feedback Loops, Detection Engineering. Build automation mechanisms. Investigate complex security incidents", "postedDate" : "2026-06-13T18:41:50.371", "createdAt" : "2026-06-13T18:41:50.371", "lastUpdated" : "2026-06-15T08:24:56.602", "ingestTimestamp" : "2026-06-13T18:41:50.371", "mongoId" : "6a25145474d8ee00a00bb3b2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10441597/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Scripting", "Programming", "Code review", "Log analysis", "Automation", "Command line tools", "Security issue identification", "Risk assessment", "Mitigation planning", "Vulnerability identification", "Attack pattern analysis", "Remediation", "Mentoring", "Security Incident Response", "AI Feedback Loops", "Detection Engineering", "Malware analysis", "Forensic analysis", "Attribution skills", "System design", "Automation development", "Detection engineering", "Incident response", "Threat monitoring", "Security operations", "Roadmap planning", "Attack patterns", "Supply chain attacks", "Cryptomining", "Cloud-native architecture", "GCIH", "GSEC", "GREM", "GCFA", "CISSP", "AWS" ], "skillCount" : 36, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "68e0a7e2ce260f92cbf8e942", "title" : "Security Engineer II, Vulnerability Management and Response - Strategic Enablement", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 136000.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Austin, Texas, USA", "locations" : [ "Austin, Texas, USA" ], "timestamp" : "2026-06-15T09:15:18.623", "fingerprint" : "117e801c7a4133b8bc6ed1074831ce8206fd82569a5f38752ff077c79d551b72", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3100997/apply", "externalId" : "580f56ff-1bb7-4c9f-b419-8c79a924b032", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Python, Ruby, Go, Swift, Java, Net, C++, HTTP, DNS, TCP/IP, SQL, Lambda", "professionalSkills" : [ "Technical specifications", "User acceptance testing", "Security research", "Data analysis" ], "hardSkillsList" : [ "Vulnerability management", "Remediation automation", "Vulnerability detection", "Data analysis", "Security research" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Remediation automation", "level" : "intermediate" }, { "name" : "Vulnerability detection", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Security research", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Vulnerability Management, Automation, Data Analysis", "majorSkillsList" : [ "Vulnerability Management", "Automation", "Data Analysis" ], "coreResponsibilities" : "Develop security automation workflows, Optimize security automation workflows, Integrate security tools, Design proof-of-concepts, Script proof-of-concepts, Implement proof-of-concepts, Collaborate with TPMs, Collaborate with SDE teams, Translate requirements, Ensure seamless integration, Conduct user acceptance testing, Build queries, Analyze data, Conduct security research, Analyze emergent vulnerabilities, Identify emerging threats, Identify detection opportunities, Enhance detection capabilities, Mentor junior engineers, Contribute to technical growth, Share knowledge", "teamCollaboration" : "Security operations; Development teams; TPMs and SDE teams; VMR Operations; Security engineers; TPMs", "projectManagementSkills" : [ "Program requirements" ], "domainKnowledge" : "Vulnerability management; Host environments; Container environments; Network security; Cloud-native architecture", "domainList" : [ "vulnerability-management", "host-environments", "container-environments", "network-security", "cloud-native-architecture" ], "domainSpecificKnowledge" : [ "Vulnerability management", "Host environments", "Container environments", "Network security", "Cloud-native architecture" ], "toolProficiency" : [ "AWS" ], "communicationSkills" : "Leadership review", "continuousLearning" : "Knowledge sharing", "innovationCreativity" : "Prototyping; Rapid prototyping", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Measurable impact; Security outcomes", "qualificationsBasic" : "3+ years programming Python, Bachelor's degree computer science, Knowledge networking protocols", "qualificationsPreferred" : "2+ years threat modeling, 2+ years secure coding, 2+ years identity management, 2+ years software development, 2+ years cryptography, 2+ years system administration, 2+ years network security, Experience AWS products, Experience programming language", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Security's Vulnerability Management and Response - Strategic Enablement team is looking for a Security Engineer II. This team is revolutionizing vulnerability management through advanced remediation automation, innovative vulnerability detection solutions, data-driven insights, and more. Be part of a dynamic group that bridges security operations and development, creating measurable impact across Amazon's vast ecosystem. Key job responsibilities -Develop and optimize security automation workflows to operationalize new capabilities, including integration with existing security tools and platforms across Amazon's infrastructure -Design, script, and implement quick proof-of-concepts for vulnerability detection, assessment, and remediation across host and container environments, enabling rapid validation of new solutions and approaches -Collaborate with TPMs and SDE teams to translate program requirements into technical specifications, ensure seamless integration with existing systems, and conduct user acceptance testing for new security capabilities -Build queries and analyze data to extract actionable insights on vulnerability management effectiveness, supporting data-driven decision making and informed program improvements -Conduct security research and analysis on emergent vulnerabilities to identify emerging threats, new detection opportunities, and methods to enhance existing vulnerability detection capabilities -Mentor junior engineers and contribute to the technical growth and knowledge sharing within the team A day in the life Start your morning reviewing last night's vulnerability scan data and building SQL queries to analyze patterns across thousands of Amazon hosts. Collaborate with VMR Operations on technical specifications for a new container vulnerability detection pattern, then code Lambda scripts to integrate new capabilities with the workflow management platform. Mid-day brings a design review with SDE teams, ensuring custom detection logic scales seamlessly. Mentor a junior engineer on API integration techniques, then end the day testing your automation workflow and preparing actionable insights for tomorrow's leadership review. About the team The VMR Strategic Enablement team bridges security operations and development, transforming vulnerability data into measurable security outcomes. We embrace a \"Think Fast, Learn Faster\" culture where rapid prototyping validates new solutions and data drives every decision. Our diverse team of security engineers and TPMs collaborates across the full vulnerability lifecycle, building custom detection capabilities, operationalizing security programs, and creating metrics that demonstrate real impact across Amazon's infrastructure. Basic Qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - Bachelor's degree in computer science or equivalent - Knowledge of networking protocols such as HTTP, DNS and TCP/IP Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Experience with AWS products and services - Experience with programming languages such as Python, Java, C++ - Knowledge of data engineering pipelines, cloud solutions, ETL management, databases, visualizations and analytical platforms - Experience with data engineering concepts including data pipelines, ETL processes, and working with large-scale security datasets Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $136,000/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Engineer II, Vulnerability Management and Response - Strategic Enablement at Amazon.com Services LLC. Skills: Vulnerability Management, Automation, Data Analysis. Develop security automation workflows. Optimize security automation workflows", "postedDate" : "2026-06-14T02:20:34.538", "createdAt" : "2026-06-14T02:20:34.538", "lastUpdated" : "2026-06-15T09:15:18.623", "ingestTimestamp" : "2026-06-14T02:20:34.538", "mongoId" : "68e0a7e2ce260f92cbf8e942", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3100997/apply", "salaryAnnualMin" : 136000, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Vulnerability management", "Remediation automation", "Vulnerability detection", "Data analysis", "Security research", "Mentoring", "Vulnerability Management", "Automation", "Data Analysis", "Technical specifications", "User acceptance testing", "Program requirements", "Host environments", "Container environments", "Network security", "Cloud-native architecture", "AWS" ], "skillCount" : 17, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c68fa74d8ee00a0905806", "title" : "Senior Incident Response Specialist, Cyber Security", "industry" : "Cygnify", "salary" : { "min" : 120000.0, "max" : 180000.0, "currency" : "MYR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Incident Response Specialist in Kuala Lumpur, Malaysia, adjusted for the cybersecurity industry and senior experience level." }, "location" : "Kuala Lumpur, Malaysia", "locations" : [ "Kuala Lumpur, Malaysia" ], "timestamp" : "2026-06-16T02:39:21.304", "fingerprint" : "d361c038e80e7ee25f06c2708e696babafce6881749e9a55b1eb9bfeb96da610", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/cygnify/f8691c89-168e-4178-9678-8a9d39b9914d/application", "externalId" : "f8691c89-168e-4178-9678-8a9d39b9914d", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Kuala Lumpur", "country" : "Malaysia", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "3.1516964,101.6942371" } ], "locationText" : "Kuala Lumpur, Malaysia", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Elastic Stack, SIEM, Cloud", "professionalSkills" : [ "Incident triage", "Log analysis", "Root cause analysis", "Use case improvements", "Detection quality", "Incident handling", "Evidence collection", "Detection workflows", "Readiness enhancement", "Log source onboarding" ], "hardSkillsList" : [ "Security alerts", "Security events", "Malware investigation", "Phishing investigation", "Insider threats", "Cloud breaches", "Detection rule creation", "Threat hunting", "Compliance reporting", "Audit support", "Simulation exercises", "Tabletop exercises" ], "hardSkills" : [ { "name" : "Security alerts", "level" : "intermediate" }, { "name" : "Security events", "level" : "intermediate" }, { "name" : "Malware investigation", "level" : "intermediate" }, { "name" : "Phishing investigation", "level" : "intermediate" }, { "name" : "Insider threats", "level" : "intermediate" }, { "name" : "Cloud breaches", "level" : "intermediate" }, { "name" : "Detection rule creation", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Compliance reporting", "level" : "intermediate" }, { "name" : "Audit support", "level" : "intermediate" }, { "name" : "Simulation exercises", "level" : "intermediate" }, { "name" : "Tabletop exercises", "level" : "intermediate" } ], "majorSkills" : "Incident Response, Cyber Security, SIEM platform", "majorSkillsList" : [ "Incident Response", "Cyber Security", "SIEM platform" ], "coreResponsibilities" : "Monitor security alerts, Investigate security alerts, Analyze security incidents, Contain security incidents, Escalate security incidents, Tune SIEM rules, Suggest new detections, Analyze logs, Correlate logs, Create incident documentation, Maintain incident documentation, Create incident reports, Maintain incident reports, Create lessons learned, Maintain lessons learned, Support playbook execution, Remediate incidents, Perform root cause analysis, Provide use case insights, Validate use cases, Test use cases, Escalate confirmed incidents, Participate in reviews, Improve processes, Improve detections, Validate security events, Identify legitimate threats, Investigate malware incidents, Investigate phishing incidents, Investigate insider threats, Investigate cloud breaches, Assist in rule creation, Assist in rule tuning, Map MITRE ATT&CK, Improve detection quality, Hunt threats, Handle incidents, Collect evidence, Document incidents, Support compliance, Support audits, Contribute to automation, Participate in training, Participate in simulations, Participate in exercises, Onboard log sources, Manage log availability", "teamCollaboration" : "Collaborate with IT; Collaborate with network; Collaborate with application teams; Collaborate with MSSP; Collaborate with CSIRT; Collaborate with IT infrastructure", "domainKnowledge" : "Cyber resilience; MITRE ATT&CK; Cloud breaches; Insider threats; Malware; Phishing", "domainList" : [ "cyber-resilience", "mitre-att-ck", "cloud-breaches", "insider-threats", "malware", "phishing" ], "domainSpecificKnowledge" : [ "Cyber resilience", "MITRE ATT&CK", "Cloud breaches", "Insider threats", "Malware", "Phishing" ], "toolProficiency" : [ "Elastic Stack", "SIEM" ], "documentationSkills" : "Incident documentation; Incident reports; Lessons learned; Evidence collection; Compliance documentation; Audit documentation", "continuousLearning" : "Training sessions; Simulations; Tabletop exercises", "innovationCreativity" : "Automation opportunities", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Ensure timely response; Maintain cyber resilience; Align with MTTD goals; Align with MTTR goals", "qualificationsBasic" : "Perform deep-dive investigations, Conduct threat hunting, Support incident response reporting, Manage continuous logs availability", "qualificationsPreferred" : "MITRE ATT&CK mapping, Automation opportunities", "rawDescription" : "Role Mission The Senior Analyst - Cyber Security Incident Response is responsible for monitoring, detecting, and analyzing cybersecurity incidents through the Security Operations Centre (SOC) platform. The role supports the end-to-end incident lifecycle — including triage, investigation, containment, and closure — ensuring timely response to security events and maintaining cyber resilience. This role acts as the Level 2 (L2) Incident Responder, bridging SOC analysts and Incident Response management by performing deep technical analysis and coordinating with internal teams for resolution. Accountabilities: - Perform end-to-end incident triage and investigation of security alerts escalated from L1 SOC analysts. - Ensure timely incident analysis, containment, and escalation aligned with MTTD and MTTR goals. - Support the SIEM platform (Elastic Stack) by fine-tuning existing rules and suggesting new detections. - Conduct log analysis and correlation across multiple data sources (network, endpoint, and cloud). - Create and maintain incident documentation, reports, and lessons learned. - Support incident response playbook execution during containment and recovery phases. - Collaborate with IT, network, and application teams for incident remediation and root cause analysis. - Provide insights for use case improvements and participate in use case validation and testing. - Escalate confirmed incidents to CSIRT / Assistant Manager - Incident Response for further action. - Participate in post-incident reviews, contributing to process and detection improvements. - Monitor alerts generated from the SOC/SIEM and perform initial to intermediate-level investigations. - Review and validate security events from multiple log sources and identify legitimate threats. - Perform deep-dive investigations for incidents involving malware, phishing, insider threats, and cloud breaches. - Assist in detection rule creation and tuning under the guidance of senior incident responders. - Use frameworks like MITRE ATT&CK for mapping and improving detection quality. - Conduct threat hunting using Elastic Stack and related tools. - Collaborate with MSSP, CSIRT, and IT infrastructure teams to ensure timely incident handling. - Support incident response reporting, evidence collection, and documentation for compliance and audit. - Contribute to automation opportunities in detection and response workflows. - Participate in training sessions, simulations, and tabletop exercises to enhance readiness. - Responsible for the log source onboarding and managing the continuous logs availability on the SIEM platform. Requirements - Monitor alerts generated from the SOC/SIEM and perform initial to intermediate-level investigations. - Review and validate security events from multiple log sources and identify legitimate threats. - Perform deep-dive investigations for incidents involving malware, phishing, insider threats, and cloud breaches. - Assist in detection rule creation and tuning under the guidance of senior incident responders. - Use frameworks like MITRE ATT&CK for mapping and improving detection quality. - Conduct threat hunting using Elastic Stack and related tools. - Collaborate with MSSP, CSIRT, and IT infrastructure teams to ensure timely incident handling. - Support incident response reporting, evidence collection, and documentation for compliance and audit. - Contribute to automation opportunities in detection and response workflows. - Participate in training sessions, simulations, and tabletop exercises to enhance readiness. - Responsible for the log source onboarding and managing the continuous logs availability on the SIEM platform. #LI-JE1", "summaryDescription" : "Senior Incident Response Specialist, Cyber Security. Skills: Incident Response, Cyber Security, SIEM platform. Monitor security alerts. Investigate security alerts", "createdAt" : "2026-06-14T19:11:17.518", "lastUpdated" : "2026-06-16T02:39:21.304", "ingestTimestamp" : "2026-06-14T19:11:17.518", "mongoId" : "6a2c68fa74d8ee00a0905806", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Security alerts", "Security events", "Malware investigation", "Phishing investigation", "Insider threats", "Cloud breaches", "Detection rule creation", "Threat hunting", "Compliance reporting", "Audit support", "Simulation exercises", "Tabletop exercises", "Incident Response", "Cyber Security", "SIEM platform", "Incident triage", "Log analysis", "Root cause analysis", "Use case improvements", "Detection quality", "Incident handling", "Evidence collection", "Detection workflows", "Readiness enhancement", "Log source onboarding", "Cyber resilience", "MITRE ATT&CK", "Malware", "Phishing", "Elastic Stack", "SIEM" ], "skillCount" : 31, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "69e104402beec4dd3def2577", "title" : "Security Engineer, AWS Security Incident Response", "company" : "Amazon Web Services", "industry" : "Solutions Architect, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 135000.0, "max" : 195000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Security Engineer in Singapore, adjusted for the technology industry and a large company size." }, "location" : "SGP", "locations" : [ "SGP" ], "certifications" : [ "GCIH", "GSEC", "Security+" ], "timestamp" : "2026-06-15T02:22:21.224", "fingerprint" : "40bb89751ca82072e1830c381dd327c4aca04b10b3800fda172ae2e11fc89203", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10386227/apply", "externalId" : "bf3e3eb2-1460-4e11-bafb-1fe3f4b46363", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "technicalSkills" : "AWS, Amazon GuardDuty, CrowdStrike Falcon, Wiz Defend", "professionalSkills" : [ "Security response", "Threat detection", "Incident response", "Security automation", "Security posture improvement", "Risk assessment", "Vulnerability assessment", "Remediation proposal" ], "hardSkillsList" : [ "Threat analysis", "Security monitoring", "Incident documentation", "Incident reporting", "Auto-remediation capabilities" ], "softSkillsList" : [ "Learning new concepts" ], "hardSkills" : [ { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Incident documentation", "level" : "intermediate" }, { "name" : "Incident reporting", "level" : "intermediate" }, { "name" : "Auto-remediation capabilities", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Learning new concepts" } ], "majorSkills" : "Incident response, Threat detection, Security automation", "majorSkillsList" : [ "Incident response", "Threat detection", "Security automation" ], "coreResponsibilities" : "Respond to threat findings, Identify security threats, Evaluate security threats, Communicate security threats, Propose remediation for security issues, Contribute to security automation development, Contribute to security posture improvements, Track effectiveness of detective controls, Report effectiveness of detective controls, Develop processes for response effectiveness, Develop policies for response effectiveness, Monitor networks for potential threats, Monitor systems for potential threats, Perform triage for security alerts, Document suspicious activity, Report security issues, Perform threat detection, Perform incident response, Detect cyber threats, Mitigate cyber threats, Protect AWS Customers, Learn new technologies, Learn new procedures", "teamCollaboration" : "Work alongside security engineers; Work with partner teams", "domainKnowledge" : "AWS Security; Incident response; Threat monitoring; Detective controls; Protective controls; Attack techniques; Cyber threats", "domainList" : [ "aws-security", "incident-response", "threat-monitoring", "detective-controls", "protective-controls", "attack-techniques", "cyber-threats" ], "domainSpecificKnowledge" : [ "AWS Security", "Incident response", "Threat monitoring", "Detective controls", "Protective controls", "Attack techniques", "Cyber threats" ], "toolProficiency" : [ "CrowdStrike Falcon", "Wiz Defend" ], "communicationSkills" : "Explain technical concepts", "documentationSkills" : "Document suspicious activity", "continuousLearning" : "Learning new concepts; Learning new technologies; Learning new procedures", "problemSolvingSkills" : "Work through ambiguity; Identify suspicious activity", "specialRequirements" : "On-call support, Periodic on-call responsibilities, On-call responsibilities including weekends", "outcomesObjectives" : "Keep customers secure; Increase security response effectiveness; Minimize disruption to customer workloads", "qualificationsBasic" : "Bachelor's degree in Engineering, Experience with web protocols, Experience with common security attacks, Experience with remediation, Knowledge of system, Knowledge of network, Knowledge of OS, Experience solving problems by writing code, Experience solving problems with scripts", "qualificationsPreferred" : "Experience with AWS services, Experience with other cloud offerings, Experience triaging security alerts, Front-line analysis experience, Escalation experience, GCIH certification, GSEC certification, Security+ certification", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Security Incident Response is looking for technical Security Engineers that are passionate about learning new concepts and work well within a team environment to keep customers secure. We value engineers that can work through ambiguity to identify suspicious activity, lead security response, and can explain technical security concepts to non-technical audiences. Key job responsibilities * Respond to threat findings that indicate unauthorized activity has occurred * Identify, evaluate and communicate security threats, risks and vulnerabilities, and propose recommended remediation for security issues. * Contribute to the development of security automation and security posture improvements. * Track and report on the effectiveness of AWS detective controls such as Amazon GuardDuty and partner products such as CrowdStrike Falcon or Wiz Defend * Develop processes and policies to increase security response effectiveness. * On-call support: This role requires periodic on-call responsibilities including weekends. A day in the life As a Security Engineer in AWS Security Incident Response, your responsibilities include monitoring networks and systems for potential threats, performing triage for security alerts, documenting suspicious activity, and reporting issues so they can be adequately handled. You will work alongside our security engineers and partner teams to perform daily threat detection and incident response, using the full capability of AWS technologies and services to detect and mitigate cyber threats at a massive scale and help protect AWS Customers. You should also enjoy learning about the most up-to-date new technologies and procedures to protect information systems and data. About the team AWS Security Incident Response provides 24/7 threat monitoring, investigation, and response across for customer’s AWS environments. The service enhances existing security capabilities by providing security monitoring for all native AWS services and supports vendor agnostic detective and protective controls to provide holistic security controls for customers. This is done by leveraging data on common attack techniques to enhance detective controls and incident response, then building auto-remediation capabilities to minimize disruption to customer workloads. When a security event does happen, you will be there provide guidance. Basic Qualifications: - Bachelor's degree in Engineering, Computer Science, or a related field - Experience with web protocols, common security attacks, and remediation (non-internship) - Knowledge of system, network and OS - Experience solving basic problems by writing code or scripts with some assistance Preferred Qualifications: - Experience with AWS services or other cloud offerings - Experience triaging security alerts, front-line analysis, and escalation - GCIH (GIAC Certified Incident Handler) or GSEC (GIAC Security Essentials) or Security+ Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security Engineer, AWS Security Incident Response at Amazon Web Services. Skills: Incident response, Threat detection, Security automation. Respond to threat findings. Identify security threats", "postedDate" : "2026-06-13T04:14:17.343", "createdAt" : "2026-06-13T04:14:17.343", "lastUpdated" : "2026-06-15T02:22:21.224", "ingestTimestamp" : "2026-06-13T04:14:17.343", "mongoId" : "69e104402beec4dd3def2577", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10386227/apply", "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Threat analysis", "Security monitoring", "Incident documentation", "Incident reporting", "Auto-remediation capabilities", "Learning new concepts", "Incident response", "Threat detection", "Security automation", "Security response", "Security posture improvement", "Risk assessment", "Vulnerability assessment", "Remediation proposal", "AWS Security", "Threat monitoring", "Detective controls", "Protective controls", "Attack techniques", "Cyber threats", "GCIH", "GSEC", "Security+", "CrowdStrike Falcon", "Wiz Defend" ], "skillCount" : 25, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2c5f4074d8ee00a08ea55f", "title" : "Security Incident Response Lead", "company" : "Nscale", "industry" : "AI Infrastructure", "salary" : { "min" : 150000.0, "max" : 225000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "AMER", "locations" : [ "AMER" ], "timestamp" : "2026-06-15T02:45:24.541", "fingerprint" : "97da22b2e3f980604e8d6395c438f3f52604ff35672fecd27a2405a86ad0765f", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/nscaleoperationsukltd/jobs/4824321101", "externalId" : "4824321101", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" }, { "country" : "Canada", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States; Canada", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "Cloud infrastructure, SIEM, EDR/XDR, Automation", "professionalSkills" : [ "Incident leadership", "Incident coordination", "Technical leadership", "Root cause analysis", "Threat hunting", "Detection engineering" ], "hardSkillsList" : [ "Digital forensics", "Incident response", "Security operations", "Forensics techniques", "Investigation techniques", "Threat intelligence", "Incident lifecycles" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Digital forensics", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Forensics techniques", "level" : "intermediate" }, { "name" : "Investigation techniques", "level" : "intermediate" }, { "name" : "Threat intelligence", "level" : "intermediate" }, { "name" : "Incident lifecycles", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Digital forensics, Cloud security", "majorSkillsList" : [ "Incident response", "Digital forensics", "Cloud security" ], "coreResponsibilities" : "Lead end-to-end security incident response, Act as incident commander, Coordinate cross-functional response efforts, Conduct investigations, Oversee investigations, Apply digital forensics techniques, Drive containment efforts, Drive eradication efforts, Drive recovery efforts, Contribute to threat hunting, Contribute to proactive investigations, Develop incident response playbooks, Maintain incident response playbooks, Develop escalation frameworks, Establish escalation frameworks, Lead post-incident reviews, Lead root cause analysis, Drive long-term remediation actions, Partner to improve alerting, Partner to improve triage, Partner to improve response workflows, Build incident response tooling, Scale incident response tooling, Enhance case management systems", "teamCollaboration" : "Cross-functional response efforts; Partner with Detection & Response; Coordinate with Infrastructure; Coordinate with IT; Coordinate with Legal; Coordinate with Compliance", "domainKnowledge" : "AI infrastructure; High-performance computing; Large-scale distributed systems; Attack techniques; Threat actors; Incident lifecycles; Cloud environments; Production environments", "domainList" : [ "ai-infrastructure", "high-performance-computing", "large-scale-distributed-systems", "attack-techniques", "threat-actors", "incident-lifecycles", "cloud-environments", "production-environments" ], "domainSpecificKnowledge" : [ "AI infrastructure", "High-performance computing", "Large-scale distributed systems", "Attack techniques", "Threat actors", "Incident lifecycles", "Cloud environments", "Production environments" ], "toolProficiency" : [ "SIEM", "EDR/XDR", "Detection tooling", "Case management systems" ], "communicationSkills" : "Brief leadership; Coordinate across teams", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "End-to-end IR effectiveness; High-severity incident coordination; Post-incident review completion; Remediation completion; IR tooling maturity; Automation maturity; Workflow maturity", "qualificationsBasic" : "8-12+ years incident response experience, 8-12+ years security operations experience, 8-12+ years digital forensics experience, Proven experience leading high-severity investigations, Hands-on experience with SIEM, Hands-on experience with EDR/XDR, Hands-on experience with detection tooling, Operate as technical leader, Make decisions under pressure, Brief leadership, Coordinate across teams", "qualificationsPreferred" : "Experience in AI infrastructure, Experience in high-performance computing, Experience in large-scale distributed systems, Familiarity with detection engineering, Familiarity with threat hunting, Familiarity with building automation for IR", "remoteFriendly" : true, "rawDescription" : "About Nscale Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility. We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future. About the Role We’re hiring a Security Incident Response Lead to own and evolve Nscale’s incident response capability in a high-scale, AI-native environment. This is a hands-on leadership role focused on leading investigations across infrastructure, enterprise systems, and security events, while driving effective containment, eradication, and recovery. The role operates at the center of incident coordination and partners closely with Detection & Response as well as cross-functional stakeholders including Infrastructure, IT, Legal, and Compliance. You will help shape how Nscale detects and responds to threats by building the processes, tooling, and operational rigor behind the incident response function. This role is critical to strengthening the organization’s security posture and ensuring high-severity events are managed with speed, clarity, and technical depth. This role will be part of the global CISO organization. What you'll be doing Incident Leadership & Coordination Lead end-to-end security incident response across the organization Act as the incident commander for high-severity events Coordinate cross-functional response efforts with Infrastructure, IT, Legal, and Compliance Participate in and help design on-call and escalation rotations Investigations & Forensics Conduct and oversee investigations across endpoints, cloud, and infrastructure systems Apply digital forensics techniques across logs, endpoints, and cloud environments Drive containment, eradication, and recovery efforts for active security incidents Contribute to threat hunting and proactive investigations Process, Playbooks & Operational Rigor Develop and maintain incident response playbooks and runbooks Establish escalation frameworks to support effective incident handling Lead post-incident reviews and root cause analysis efforts Drive long-term remediation actions following incidents Tooling & Response Improvement Partner with Detection & Response teams to improve alerting, triage, and response workflows Build and scale incident response tooling and automation Enhance case management systems that support investigation and response operations KPIs End-to-end security incident response effectiveness High-severity incident coordination and command Post-incident review and remediation completion Incident response tooling, automation, and workflow maturity About You 8–12+ years of experience in incident response, security operations, or digital forensics Proven experience leading complex, high-severity incident investigations in cloud or distributed environments Strong expertise in forensics and investigation techniques across endpoints, cloud, and logs Hands-on experience with SIEM, EDR/XDR, and detection tooling Familiarity with cloud infrastructure and modern production environments Deep understanding of attack techniques, threat actors, and incident lifecycles Ability to operate as a technical leader during incidents and make decisions under pressure Strong communication skills with the ability to brief leadership and coordinate across teams Experience in AI infrastructure, high-performance computing, or large-scale distributed systems is a plus Familiarity with detection engineering, threat hunting, or building automation for incident response workflows is beneficial What we can offer you At Nscale, you'll find a collaborative, supportive, and innovative environment where your contributions spark real impact. We're building something extraordinary, and we want you at the core. Highly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months. \uD83D\uDE80 Join one of the fastest-growing AI infrastructure companies — your chance to directly shape how global AI capacity is planned and deployed. ✨ Expect a dynamic progression plan tailored to your ambitions. Grow by leading critical cross-functional initiatives and shaping capital strategy — always with our full support. Human-First Flexibility: We treat you as humans first. \uD83E\uDEF6\uD83C\uDFFD Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments. Equal Opportunities Statement We strongly encourage applications from people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds. If there’s anything we can do to accommodate your specific situation, please let us know. The responsibilities outlined in this job description are not exhaustive and are intended to provide a general overview of the position. The employee may be required to perform additional duties, tasks, and responsibilities as assigned by management, consistent with the skills and qualifications required for the role. For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here. Salary Range The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation. The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation. Salary Range $150,000—$225,000 USD For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.", "summaryDescription" : "Security Incident Response Lead at Nscale. Skills: Incident response, Digital forensics, Cloud security. Lead end-to-end security incident response. Act as incident commander", "postedDate" : "2026-06-12T22:26:36.876", "createdAt" : "2026-06-12T22:26:36.876", "lastUpdated" : "2026-06-15T02:45:24.541", "ingestTimestamp" : "2026-06-12T22:26:36.876", "mongoId" : "6a2c5f4074d8ee00a08ea55f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 150000, "salaryAnnualMax" : 225000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Digital forensics", "Incident response", "Security operations", "Forensics techniques", "Investigation techniques", "Threat intelligence", "Incident lifecycles", "Leadership", "Cloud security", "Incident leadership", "Incident coordination", "Technical leadership", "Root cause analysis", "Threat hunting", "Detection engineering", "AI infrastructure", "High-performance computing", "Large-scale distributed systems", "Attack techniques", "Threat actors", "Cloud environments", "Production environments", "SIEM", "EDR/XDR", "Detection tooling", "Case management systems" ], "skillCount" : 26, "jobCategory" : "other", "jobSubcategory" : "security", "dataQualityScore" : 0.8888889, "daysOld" : 2, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "AI Infrastructure" }, { "id" : "6a2a8fed74d8ee00a068a6ea", "title" : "Security Engineer, Detection and Response", "company" : "Notion", "industry" : "Security", "salary" : { "min" : 175000.0, "max" : 245000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Security Engineer, Detection and Response in San Francisco, United States, adjusted for the technology industry and company size." }, "location" : "San Francisco, California", "locations" : [ "San Francisco, California", "New York, New York" ], "timestamp" : "2026-06-14T21:02:11.995", "fingerprint" : "68123271e667af6455e06d6a16d67b6a4b26130b3c39028ed40750c0f70c56eb", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/notion/c0fcf37b-e00f-4aae-a2e0-b008f9939a7e/application", "externalId" : "c0fcf37b-e00f-4aae-a2e0-b008f9939a7e", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Cloud security, AWS, GCP, Azure, Identity-focused attack detection, SIEM, EDR, SOAR, LLM, Kubernetes, Container detection", "professionalSkills" : [ "Detection engineering", "Security operations", "Incident response", "Threat hunting", "Rule lifecycle management", "Tuning", "Measurement", "Rollout safety", "Triage", "Enrichment", "Investigation", "Detection authoring", "Threat intelligence", "Adversary TTPs", "Telemetry requirements", "Response improvements", "Postmortems", "Security improvements", "Investment decisions", "On-call rotation" ], "hardSkillsList" : [ "Detection engineering", "Security operations", "Incident response", "Threat hunting", "Cloud security", "Malware analysis", "Digital forensics" ], "hardSkills" : [ { "name" : "Detection engineering", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Cloud security", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Digital forensics", "level" : "intermediate" } ], "majorSkills" : "Detection engineering, Incident response, Cloud security, Threat intelligence", "majorSkillsList" : [ "Detection engineering", "Incident response", "Cloud security", "Threat intelligence" ], "coreResponsibilities" : "Design high-signal detections, Maintain high-signal detections, Build detection platform, Improve detection platform, Develop tooling, Develop automation, Accelerate triage, Accelerate enrichment, Accelerate investigation, Accelerate detection authoring, Translate threat intelligence, Translate adversary TTPs, Participate in investigations, Participate in incident response, Participate in postmortems, Define key metrics, Track key metrics, Participate in on-call rotation", "teamCollaboration" : "Work closely with Engineering; Work closely with Corporate Security; Work closely with Infrastructure", "projectManagementSkills" : [ "Drive projects independently" ], "domainKnowledge" : "Cloud-native environment; AI-enabled systems; Container detection", "domainList" : [ "cloud-native-environment", "ai-enabled-systems", "container-detection" ], "domainSpecificKnowledge" : [ "Cloud-native environment", "AI-enabled systems", "Container detection" ], "toolProficiency" : [ "SIEM", "EDR", "SOAR", "Sigma", "KQL", "SPL", "YARA-L", "EQL", "Panther" ], "communicationSkills" : "Communicate clearly; Design docs; Runbooks; Incident reports", "documentationSkills" : "Design docs; Runbooks; Incident reports", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "On-call rotation", "outcomesObjectives" : "Ship high-signal detections; Improve detection platform; Shape detection and response engineering; Identify gaps; Prioritize investments; Build what's needed next; Accelerate triage; Accelerate enrichment; Accelerate investigation; Accelerate detection authoring; Drive long-term security improvements; Guide investment decisions", "qualificationsBasic" : "6+ years experience in detection engineering, 6+ years experience in security operations, 6+ years experience in incident response, 6+ years experience in threat hunting, Built and operated production detections, Fluent in Sigma, Fluent in KQL, Fluent in SPL, Fluent in YARA-L, Fluent in EQL, Fluent in Panther, Offensive security mindset, Cloud security experience in AWS, Cloud security experience in GCP, Cloud security experience in Azure, Hands-on with SIEM, Hands-on with EDR, Hands-on with SOAR platforms", "qualificationsPreferred" : "Experience applying LLMs to security workflows, Experience applying agent-style tooling to security workflows, Experience securing AI-enabled systems, Experience securing endpoint tooling, Kubernetes or container detection experience, Background in threat intelligence, Background in malware analysis, Background in digital forensics, Contributions to detection engineering community", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT THE ROLE Millions of people rely on Notion to do their most important work, and protecting that trust is foundational to everything we build. We’re looking for a hands-on Detection Engineer to build and operate the systems and workflows we use to detect and respond to attacks across Notion’s cloud-native environment. You’ll ship high-signal detections, improve the platform that powers them, participate in incident response, and help shape how detection and response engineering scales at Notion. You’ll work closely with Engineering, Corporate Security, and Infrastructure, with broad latitude to identify gaps, prioritize investments, and build what’s needed next. We view detection and response as a software engineering discipline: detections are code, platforms are products, and measurement matters WHAT YOU'LL ACHIEVE - Design and maintain high-signal detections across cloud, identity, endpoints, and SaaS environments. - Build and improve the detection platform, including rule lifecycle management, tuning, measurement, and rollout safety. - Develop tooling and automation that accelerate triage, enrichment, investigation, and detection authoring, including LLM-based workflows where useful. - Translate threat intelligence and adversary TTPs into durable detections, telemetry requirements, and response improvements. - Participate in investigations, incident response, and postmortems that drive long-term security improvements. - Define and track key metrics such as coverage, MTTD, and alert quality to guide investment decisions. - Participate in a shared on-call rotation for incident response. SKILLS YOU'LL NEED TO BRING - Have 6+ years of experience in detection engineering, security operations, incident response, or threat hunting. - Have built and operated production detections with strong signal quality and sustainable tuning processes. - Are fluent in one or more detection languages such as Sigma, KQL, SPL, YARA-L, EQL, or Panther. - Have an offensive security mindset and have led purple team, blue team, or adversary emulation exercises that improved detections and telemetry. - Have strong cloud security experience in AWS, GCP, or Azure, including identity-focused attack detection. - Are hands-on with SIEM, EDR, and SOAR platforms in large-scale environments. - Communicate clearly through design docs, runbooks, and incident reports, and can drive projects independently. NICE TO HAVE - Experience applying LLMs or agent-style tooling to security workflows. - Experience securing AI-enabled systems or endpoint tooling. - Kubernetes or container detection experience. - Background in threat intelligence, malware analysis, or digital forensics. - Contributions to the detection engineering community through research, tooling, or talks. - Experience at a high-growth startup or AI company Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco or New York City, the estimated base salary range for this role is $230,000 - $260,000 per year. By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550?pvs=74 and NYLL 144 https://notion.notion.site/Ashby-AI-Bias-Audit-2b0efdeead05803bbbfae159ec86c528. #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.", "summaryDescription" : "Security Engineer, Detection and Response at Notion. Skills: Detection engineering, Incident response, Cloud security, Threat intelligence. Design high-signal detections. Maintain high-signal detections", "postedDate" : "2026-06-11T16:54:03.566", "createdAt" : "2026-06-11T16:54:03.566", "lastUpdated" : "2026-06-14T21:02:11.995", "ingestTimestamp" : "2026-06-11T16:54:03.566", "mongoId" : "6a2a8fed74d8ee00a068a6ea", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 175000, "salaryAnnualMax" : 245000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Detection engineering", "Security operations", "Incident response", "Threat hunting", "Cloud security", "Malware analysis", "Digital forensics", "Threat intelligence", "Rule lifecycle management", "Tuning", "Measurement", "Rollout safety", "Triage", "Enrichment", "Investigation", "Detection authoring", "Adversary TTPs", "Telemetry requirements", "Response improvements", "Postmortems", "Security improvements", "Investment decisions", "On-call rotation", "Drive projects independently", "Cloud-native environment", "AI-enabled systems", "Container detection", "SIEM", "EDR", "SOAR", "Sigma", "KQL", "SPL", "YARA-L", "EQL", "Panther" ], "skillCount" : 36, "jobCategory" : "other", "jobSubcategory" : "security", "dataQualityScore" : 0.8888889, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "68b706967fc9a711f0f6f106", "title" : "Senior Security Incident Response Engineer", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 143300.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T03:15:22.523", "fingerprint" : "557fc71c43f8425ad3ede7e1896c755a137ec1863b4d9868b798c7018c19161b", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3054814/apply", "externalId" : "9b21d22c-d0c3-4bd6-9b1b-3f576fbb97c6", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Operating system security, Network security, Cryptography, Software security, Malware analysis, Forensics, Security operations, Incident response, Security automation, Cloud computing, AWS", "professionalSkills" : [ "Security engineering", "Threat landscape", "Security automation tooling" ], "hardSkillsList" : [ "Incident response lifecycle", "Security monitoring", "Programmatic automation", "Security issue prevention" ], "softSkillsList" : [ "Creative problem solving", "Critical thinking" ], "hardSkills" : [ { "name" : "Incident response lifecycle", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Programmatic automation", "level" : "intermediate" }, { "name" : "Security issue prevention", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Creative problem solving" }, { "name" : "Critical thinking" } ], "majorSkills" : "Incident response, Security automation, Cloud security", "majorSkillsList" : [ "Incident response", "Security automation", "Cloud security" ], "coreResponsibilities" : "Lead response to security issues, Conduct security monitoring, Conduct response activities, Design and build tooling, Enable programmatic automation, Lead security engineer, Provide security guidance, Provide technical guidance, Influence process and priorities, Improve security outcomes, Provide strategic guidance, Bar raise security issues, Escalate security issues, Identify prevention opportunities, Mentor junior engineers, Develop junior engineers", "teamCollaboration" : "Global team environment; Multiple security teams; Cross-functional teams", "domainKnowledge" : "Operating system security; Network security; Cryptography; Software security; Malware analysis; Forensics; Security operations; Incident response; Security intelligence; Cloud provider security", "domainList" : [ "operating-system-security", "network-security", "cryptography", "software-security", "malware-analysis", "forensics", "security-operations", "incident-response", "security-intelligence", "cloud-provider-security" ], "domainSpecificKnowledge" : [ "Operating system security", "Network security", "Cryptography", "Software security", "Malware analysis", "Forensics", "Security operations", "Incident response", "Security intelligence", "Cloud provider security" ], "toolProficiency" : [ "SOAR platforms", "SIEM platforms" ], "communicationSkills" : "Oral communication; Written communication", "continuousLearning" : "Learning about security domains", "innovationCreativity" : "Creative problem solving", "problemSolvingSkills" : "Creative problem solving; Critical problem solving", "outcomesObjectives" : "Improve security outcomes", "qualificationsBasic" : "BS degree in Computer Science or equivalent, 7+ years systems/network/application security, 5+ years on Security team, 1 year programming/scripting language, Experience leading junior engineers", "qualificationsPreferred" : "Excellent written/verbal communication, 7+ years security response/automation/threat intelligence, Malware analysis experience, Forensics experience, SOAR platforms experience, SIEM platforms experience, Experience with MS Windows, Linux, MacOS, Experience with Amazon Web Services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Amazon Web Services team is looking for a passionate Senior Security Incident Response Engineer who can lead the response to security issues across the largest cloud provider in the world. You must thrive in dynamic/ambiguous situations, and think like both an attacker and defender, while working through the entire incident response lifecycle. You’ll be working in a global team environment where clear and accurate communication and collaboration on security issues is critical. In this role you’ll be conducting security monitoring and response activities for the Amazon internal network. We value broad and deep technical knowledge, specifically in the fields of operating system security, network security, cryptography, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. We don’t expect you to be an expert in all of the domains mentioned above, but we do expect you to be excited to learn about them! You’ll apply your creative and critical problem solving skills to quickly design and build tooling that enables programmatic automation at a massive scale. You must have a passion for engineering solutions to complex security challenges, and recognize and fill gaps in capabilities. Above all, you should be passionate about information security, the threat landscape and security automation and tooling. Key job responsibilities - Work across multiple security teams as a lead security engineer providing security and technical guidance. - Influence your team’s and partners’ process, priorities, and choices by using data to improve security outcomes - Provide technical and strategic guidance to senior leaders and stakeholders through effective oral and written communications - Bar raise security issues and escalate appropriately - Identify opportunities to prevent security issues at scale - Mentor and develop teammates both technically and professionally About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - BS degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent related field. - 7+ years of demonstrated experience with a focus in areas such as systems, network, and/or application security. - 5+ years experience on a Security team, especially experience coordinating responses to security incidents. - 1 year proficiency with one high-level programming or scripting language. - Experience leading and coaching junior security engineers to improve their skills and effectiveness Preferred Qualifications: - Excellent written and verbal communication skills with the ability to adapt messaging to executive, technical, and non-technical audiences. - 7+ years experience working in security response, security automation tooling, or threat intelligence. - Experience with malware analysis, forensics, SOAR, SIEM platforms, and a variety of Operating Systems (MS Windows, Linux, MacOS) - Experience with Amazon Web Services. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Senior Security Incident Response Engineer at Amazon.com Services LLC. Skills: Incident response, Security automation, Cloud security. Lead response to security issues. Conduct security monitoring", "postedDate" : "2026-06-13T10:52:46.897", "createdAt" : "2026-06-13T10:52:46.897", "lastUpdated" : "2026-06-15T03:15:22.523", "ingestTimestamp" : "2026-06-13T10:52:46.897", "mongoId" : "68b706967fc9a711f0f6f106", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3054814/apply", "salaryAnnualMin" : 143300, "salaryAnnualMax" : 247600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Incident response lifecycle", "Security monitoring", "Programmatic automation", "Security issue prevention", "Creative problem solving", "Critical thinking", "Incident response", "Security automation", "Cloud security", "Security engineering", "Threat landscape", "Security automation tooling", "Operating system security", "Network security", "Cryptography", "Software security", "Malware analysis", "Forensics", "Security operations", "Security intelligence", "Cloud provider security", "SOAR platforms", "SIEM platforms" ], "skillCount" : 23, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Computing" }, { "id" : "68c2e42ff8b1b0376634c73d", "title" : "Security Engineer II, Vulnerability Management and Response - Strategic Enablement", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 136000.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Austin, Texas, USA", "locations" : [ "Austin, Texas, USA" ], "timestamp" : "2026-06-15T06:42:42.487", "fingerprint" : "6316b44f1be74bca2a07419ca8f235daf26bf2b552b0421a784ce7d25cf2155d", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3073140/apply", "externalId" : "57639def-33bc-4b64-bcc7-4d01ade3c4a1", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Python, Ruby, Go, Swift, Java, C++, AWS, HTTP, DNS, TCP/IP", "professionalSkills" : [ "Technical specifications", "User acceptance testing", "Data analysis", "Security research", "Technical growth", "Knowledge sharing" ], "hardSkillsList" : [ "Vulnerability management", "Remediation automation", "Vulnerability detection", "Data analysis", "Security research", "API integration" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Remediation automation", "level" : "intermediate" }, { "name" : "Vulnerability detection", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Security research", "level" : "intermediate" }, { "name" : "API integration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Vulnerability management, Automation, Data analysis, Security engineering", "majorSkillsList" : [ "Vulnerability management", "Automation", "Data analysis", "Security engineering" ], "coreResponsibilities" : "Develop security automation workflows, Optimize security automation workflows, Integrate security tools, Design proof-of-concepts, Script proof-of-concepts, Implement proof-of-concepts, Validate new solutions, Collaborate with TPMs, Collaborate with SDE teams, Translate program requirements, Ensure seamless integration, Conduct user acceptance testing, Build queries, Analyze data, Extract actionable insights, Conduct security research, Analyze emergent vulnerabilities, Identify emerging threats, Identify detection opportunities, Enhance detection capabilities, Mentor junior engineers, Contribute to technical growth, Share knowledge", "teamCollaboration" : "Cross-functional teams; Security operations; Development teams", "projectManagementSkills" : [ "Program requirements" ], "domainKnowledge" : "Vulnerability management; Remediation automation; Container environments; Network security; Cloud-native architecture", "domainList" : [ "vulnerability-management", "remediation-automation", "container-environments", "network-security", "cloud-native-architecture" ], "domainSpecificKnowledge" : [ "Vulnerability management", "Remediation automation", "Container environments", "Network security", "Cloud-native architecture" ], "toolProficiency" : [ "Lambda" ], "communicationSkills" : "Technical specifications; Actionable insights", "continuousLearning" : "Knowledge sharing", "innovationCreativity" : "Prototype development", "problemSolvingSkills" : "Data-driven decision making; Root cause analysis", "outcomesObjectives" : "Revolutionize vulnerability management; Create measurable impact; Support data-driven decision making; Enhance vulnerability detection", "qualificationsBasic" : "3+ years programming Python, Bachelor's degree computer science, Knowledge networking protocols", "qualificationsPreferred" : "2+ years threat modeling, 2+ years secure coding, 2+ years identity management, 2+ years software development, 2+ years cryptography, 2+ years system administration, 2+ years network security, Experience AWS products, Experience Python, Experience Java, Experience C++, Experience data engineering concepts, Experience large-scale security datasets", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Security's Vulnerability Management and Response - Strategic Enablement team is looking for a Security Engineer II. This team is revolutionizing vulnerability management through advanced remediation automation, innovative vulnerability detection solutions, data-driven insights, and more. Be part of a dynamic group that bridges security operations and development, creating measurable impact across Amazon's vast ecosystem. Key job responsibilities -Develop and optimize security automation workflows to operationalize new capabilities, including integration with existing security tools and platforms across Amazon's infrastructure -Design, script, and implement quick proof-of-concepts for vulnerability detection, assessment, and remediation across host and container environments, enabling rapid validation of new solutions and approaches -Collaborate with TPMs and SDE teams to translate program requirements into technical specifications, ensure seamless integration with existing systems, and conduct user acceptance testing for new security capabilities -Build queries and analyze data to extract actionable insights on vulnerability management effectiveness, supporting data-driven decision making and informed program improvements -Conduct security research and analysis on emergent vulnerabilities to identify emerging threats, new detection opportunities, and methods to enhance existing vulnerability detection capabilities -Mentor junior engineers and contribute to the technical growth and knowledge sharing within the team A day in the life Start your morning reviewing last night's vulnerability scan data and building SQL queries to analyze patterns across thousands of Amazon hosts. Collaborate with VMR Operations on technical specifications for a new container vulnerability detection pattern, then code Lambda scripts to integrate new capabilities with the workflow management platform. Mid-day brings a design review with SDE teams, ensuring custom detection logic scales seamlessly. Mentor a junior engineer on API integration techniques, then end the day testing your automation workflow and preparing actionable insights for tomorrow's leadership review. About the team The VMR Strategic Enablement team bridges security operations and development, transforming vulnerability data into measurable security outcomes. We embrace a \"Think Fast, Learn Faster\" culture where rapid prototyping validates new solutions and data drives every decision. Our diverse team of security engineers and TPMs collaborates across the full vulnerability lifecycle, building custom detection capabilities, operationalizing security programs, and creating metrics that demonstrate real impact across Amazon's infrastructure. Basic Qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - Bachelor's degree in computer science or equivalent - Knowledge of networking protocols such as HTTP, DNS and TCP/IP Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Experience with AWS products and services - Experience with programming languages such as Python, Java, C++ - Experience with data engineering concepts including data pipelines, ETL processes, and working with large-scale security datasets Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $136,000/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Engineer II, Vulnerability Management and Response - Strategic Enablement at Amazon.com Services LLC. Skills: Vulnerability management, Automation, Data analysis, Security engineering. Develop security automation workflows. Optimize security automation workflows", "postedDate" : "2026-06-13T19:36:22.858", "createdAt" : "2026-06-13T19:36:22.858", "lastUpdated" : "2026-06-15T06:42:42.487", "ingestTimestamp" : "2026-06-13T19:36:22.858", "mongoId" : "68c2e42ff8b1b0376634c73d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3073140/apply", "salaryAnnualMin" : 136000, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Vulnerability management", "Remediation automation", "Vulnerability detection", "Data analysis", "Security research", "API integration", "Mentoring", "Automation", "Security engineering", "Technical specifications", "User acceptance testing", "Technical growth", "Knowledge sharing", "Program requirements", "Container environments", "Network security", "Cloud-native architecture", "Lambda" ], "skillCount" : 18, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "68c2e418f8b1b0376634c36a", "title" : "Security Engineer, Incident Response, CorpSec", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 125500.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T02:14:41.009", "fingerprint" : "1d73ed9116d8a3da3a8809fe15ae6abbeb90fed1911a7e130db33978905c1cf9", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3079013/apply", "externalId" : "6e9703e8-c44e-4f5b-9f27-1aa702f0786e", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Operating system security, Network security, Cryptography, Software security, Threat hunting, Detection engineering, Malware analysis, Forensics, Security operations, Incident response, Security intelligence, Programming language, Scripting language, Amazon Web Services", "professionalSkills" : [ "Security monitoring", "Response activities" ], "hardSkillsList" : [ "Incident response lifecycle", "Security monitoring", "Response activities", "Threat hunting", "Detection engineering", "Malware analysis", "Forensics", "Security operations", "Security intelligence" ], "softSkillsList" : [ "Leadership", "Curiosity", "Critical thinking" ], "hardSkills" : [ { "name" : "Incident response lifecycle", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Response activities", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Detection engineering", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Forensics", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Security intelligence", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Curiosity" }, { "name" : "Critical thinking" } ], "majorSkills" : "Incident response, Security engineering, Threat intelligence", "majorSkillsList" : [ "Incident response", "Security engineering", "Threat intelligence" ], "coreResponsibilities" : "Lead response to security issues, Conduct security monitoring, Conduct response activities", "teamCollaboration" : "Global team environment; Security issues", "domainKnowledge" : "Operating system security; Network security; Cryptography; Software security; Threat hunting; Detection engineering; Malware analysis; Forensics; Security operations; Incident response; Security intelligence; Cloud provider", "domainList" : [ "operating-system-security", "network-security", "cryptography", "software-security", "threat-hunting", "detection-engineering", "malware-analysis", "forensics", "security-operations", "incident-response", "security-intelligence", "cloud-provider" ], "domainSpecificKnowledge" : [ "Operating system security", "Network security", "Cryptography", "Software security", "Threat hunting", "Detection engineering", "Malware analysis", "Forensics", "Security operations", "Incident response", "Security intelligence", "Cloud provider" ], "toolProficiency" : [ "SOAR", "SIEM platforms" ], "communicationSkills" : "Clear communication; Accurate communication", "continuousLearning" : "Learn about security domains", "problemSolvingSkills" : "Think like attacker; Think like defender", "qualificationsBasic" : "BS degree in Computer Science or equivalent, 3 years systems, network, or application security experience, 3 years experience on Security team, Coordinating security incident responses, Proficiency with one high-level programming or scripting language", "qualificationsPreferred" : "Experience in security operations or incident response, Experience in security automation tooling, Experience in threat intelligence, Familiarity with threat hunting, Familiarity with detection engineering, Familiarity with malware analysis, Familiarity with forensics, Familiarity with SOAR, Familiarity with SIEM platforms, Familiarity with variety of Operating Systems, Experience with Amazon Web Services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS is looking for a passionate Security Engineer, Incident Response who can lead the response to security issues across the largest cloud provider in the world. You must thrive in high-pressure situations, and think like both an attacker and defender, while working through the entire incident response lifecycle. You’ll be working in a global team environment where clear and accurate communication and collaboration on security issues is critical. In this role you’ll be conducting security monitoring and response activities for the Amazon internal network. We value broad and deep technical knowledge, specifically in the fields of operating system security, network security, cryptography, software security, threat hunting, detection engineering, malware analysis, forensics, security operations, incident response, and emergent security intelligence. We don’t expect you to be an expert in all of the domains mentioned above, but we do expect you to be excited to learn about them! About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - BS degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent related field. Or equivalent industry certification. - 3 years of demonstrated experience with a focus in areas such as systems, network, and/or application security. - 3 years experience on a Security team, especially experience coordinating responses to security incidents. Proficiency with one high-level programming or scripting language. Preferred Qualifications: - Experience working in security operations or incident response, security automation tooling, or threat intelligence. - Familiarity with threat hunting, detection engineering, malware analysis, forensics, SOAR, SIEM platforms, and a variety of Operating Systems (MS Windows, Linux, MacOS). - Experience with Amazon Web Services. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $125,500/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Engineer, Incident Response, CorpSec at Amazon.com Services LLC. Skills: Incident response, Security engineering, Threat intelligence. Lead response to security issues. Conduct security monitoring", "postedDate" : "2026-06-13T11:16:05.380", "createdAt" : "2026-06-13T11:16:05.380", "lastUpdated" : "2026-06-15T02:14:41.009", "ingestTimestamp" : "2026-06-13T11:16:05.380", "mongoId" : "68c2e418f8b1b0376634c36a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3079013/apply", "salaryAnnualMin" : 125500, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Incident response lifecycle", "Security monitoring", "Response activities", "Threat hunting", "Detection engineering", "Malware analysis", "Forensics", "Security operations", "Security intelligence", "Leadership", "Curiosity", "Critical thinking", "Incident response", "Security engineering", "Threat intelligence", "Operating system security", "Network security", "Cryptography", "Software security", "Cloud provider", "SOAR", "SIEM platforms" ], "skillCount" : 22, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Computing" }, { "id" : "6a2a459274d8ee00a05d298f", "title" : "Senior Security Engineer, Detection and Response", "company" : "Crusoe", "industry" : "IT, Compliance, and Security", "salary" : { "min" : 85000.0, "max" : 125000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Security Engineer in Dublin, Ireland, adjusted for the technology industry and company size." }, "location" : "Dublin - IE", "locations" : [ "Dublin - IE" ], "timestamp" : "2026-06-14T07:03:49.445", "fingerprint" : "0dec510b7199bd323ca28a77a913bcc59631e3c97761bc604cbeb9752353e715", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/crusoe/fba363d0-4f6f-40a8-8ea4-ceaea637b42a/application", "externalId" : "fba363d0-4f6f-40a8-8ea4-ceaea637b42a", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Dublin", "country" : "Ireland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "53.3493795,-6.2605593" } ], "locationText" : "Dublin, Ireland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "GCP, Python, Terraform, Docker, Kubernetes, Ansible, AI", "professionalSkills" : [ "Security operations strategy", "Security compliance", "Audit programs", "Certification programs" ], "hardSkillsList" : [ "Detection engineering", "Incident response", "Forensic investigation", "Automation scripting", "SOAR capabilities", "Threat intelligence integration" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Detection engineering", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" }, { "name" : "Automation scripting", "level" : "intermediate" }, { "name" : "SOAR capabilities", "level" : "intermediate" }, { "name" : "Threat intelligence integration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Detection engineering, Incident response, Automation", "majorSkillsList" : [ "Detection engineering", "Incident response", "Automation" ], "coreResponsibilities" : "Develop security operations strategy, Evaluate security technologies, Implement security methodologies, Partner with stakeholders, Adapt in security landscape, Design detection mechanisms, Implement detection mechanisms, Fine-tune detection mechanisms, Tune alerting rules, Perform forensics, Lead response efforts, Triage security alerts, Take mitigation steps, Engage internal stakeholders, Drive detection advancement, Drive automation initiatives, Manage security event monitoring, Manage security event management, Manage security response workflows, Improve security operations, Develop measurement capabilities, Track performance, Communicate performance, Author runbooks, Write automation scripts, Build SOAR capabilities, Reduce manual intervention, Improve response times, Create automated playbooks, Maintain automated playbooks, Manage automated playbooks, Develop standard operating procedures, Enforce service quality, Enforce service consistency, Support security compliance, Support audit programs, Support certification programs", "teamCollaboration" : "Partner with stakeholders; Cross-functional teams; Engineering collaboration; Product collaboration; SRE collaboration; IT collaboration; Legal collaboration", "domainKnowledge" : "Cyber threat landscape; On-premise computing; Cloud computing; Network security; Detection as Code; Incident handling; Forensic investigation; AI response workflows; Threat intelligence integration; Security observability; Unix/Linux environments; Windows endpoints; Mac endpoints", "domainList" : [ "cyber-threat-landscape", "on-premise-computing", "cloud-computing", "network-security", "detection-as-code", "incident-handling", "forensic-investigation", "ai-response-workflows", "threat-intelligence-integration", "security-observability", "unix-linux-environments", "windows-endpoints", "mac-endpoints" ], "domainSpecificKnowledge" : [ "Cyber threat landscape", "On-premise computing", "Cloud computing", "Network security", "Detection as Code", "Incident handling", "Forensic investigation", "AI response workflows", "Threat intelligence integration", "Security observability", "Unix/Linux environments", "Windows endpoints", "Mac endpoints" ], "toolProficiency" : [ "SOAR" ], "communicationSkills" : "Engage with partners; Engage with stakeholders", "documentationSkills" : "Author runbooks; Develop procedures", "problemSolvingSkills" : "Problem-solving", "specialRequirements" : "Pass background check", "qualificationsBasic" : "6+ years in cybersecurity, Detection, response and automation focus, Protection of on-premise computing environments, Experience with network security at scale, Experience with Detection as Code workflows, Incident handling expertise, Forensic investigation expertise, Python scripting expertise, Automation expertise, Unix/Linux environments experience, Respond to incidents on Windows, Respond to incidents on Mac endpoints", "qualificationsPreferred" : "Proficiency with GCP, AI integration into response workflows, Threat intel integration into automated response, Mentoring peers in security engineering, Familiarity with Terraform, Familiarity with Docker, Familiarity with Kubernetes, Familiarity with Ansible, Experience building open source security observability solutions", "remoteFriendly" : false, "rawDescription" : "Crusoe is on a mission to accelerate the abundance of energy and intelligence. As the only vertically integrated AI infrastructure company built from the ground up, we own and operate each layer of the stack — from electrons to tokens — to power the world's most ambitious AI workloads. When you join Crusoe, you join a team that is building the future, faster. We're in the midst of the greatest industrial revolution of our time. The demand for AI compute is boundless, and power is a bottleneck. We're solving that — with an energy-first approach that makes AI infrastructure better for the world and faster for the people innovating with AI. We're looking for problem-solving, opportunity-finding teammates with a sense of urgency, who believe in the scale of our ambition and thrive on a path not fully paved — people who want to grow their careers alongside a team of experts across energy, manufacturing, data center construction, and cloud services. If you want to do the most meaningful work of your career, help our customers and partners advance their AI strategies, and be part of a high-performing team that believes in each other, come build with us at Crusoe. About This Role: Crusoe Security & Compliance is hiring a Senior Detection Engineer to play a critical role in safeguarding Crusoe, our customers, and ensuring our security posture remains robust against emerging threats. This role involves influencing the detection strategy, creation, tuning, validation, and correlation to maintain effective detections against an ever-changing threat landscape. The role is hands-on, encompassing the development of detection technologies and incident response. What You'll Be Working On: - Leadership & Strategy: - Develop and execute a comprehensive security operations strategy that aligns with organizational goals, ensuring robust protection against current and future cyber threats. - Evaluate and implement emerging security technologies and methodologies to continuously enhance our security posture and operational efficiency. - Partner with stakeholders and cross-functional teams (Engineering, Product, SRE, IT, Legal) to adapt in a dynamic security landscape. - Detection and Incident Response: - Design, implement, and fine-tune advanced detection mechanisms to proactively identify potential security threats and vulnerabilities. - Continuously tune alerting rules to reduce false positives and enhance our signal-to-noise ratio. - Perform forensics and lead response efforts during security incidents, including triaging security alerts, taking relevant mitigation steps, and engaging with internal stakeholders to ensure swift resolution. - Operational Security: - Drive the advancement and growth of detection and automation initiatives. - Manage security event monitoring, management, response workflows, and tasks. - Improve security operations by developing measurement capabilities and metrics to track and communicate performance, coverage, and risk. - Automation and Improvement: - Author comprehensive runbooks, write automation scripts, and build SOAR (Security Orchestration, Automation, and Response) capabilities to reduce manual intervention and improve response times. - Create, maintain, and manage a library of automated playbooks to address new threats and tactics employed by attackers. - Documentation and Compliance: - Develop standard operating procedures and other appropriate documentation to enforce quality and consistency of services being delivered. - Support ongoing security compliance, audit, and certification programs (e.g., HIPAA, SOC 2). What You'll Bring to the Team: - You have 6+ years in cybersecurity, with a focus on detection, response and automation. - Technical proficiency with protection of on-premise computing environments and proficiency with one or more major cloud computing environments (GCP a plus). - Experience with network security at scale. - Experience working with and implementing Detection as Code workflows. - Strong expertise in incident handling and forensic investigation. - Strong knowledge of the modern cyber threat landscape. - Automation-first mindset, including experience integrating AI into response workflows. - Experience integrating threat intel into automated response workflows - Demonstrated expertise in mentoring and training peers in security engineering. - Expertise in python scripting and automation. - Exceptional collaboration and communication skills, with the ability to engage with partners and stakeholders from various perspectives and technical understanding. - Familiarity with modern infrastructure tools, such as Terraform, Docker, Kubernetes, and Ansible. - Experience building and scaling open source security observability solutions. - Experience with Unix/Linux environments. - Experience responding to incidents on Windows and Mac endpoints. - Self-motivated, with good communication and writing skills. - Must be able to pass a background check - Embody the Company values https://www.crusoeenergy.com/about BENEFITS: Crusoe also offers a competitive benefits package designed to support financial security, health, and overall well-being, including pension contributions, private health and dental insurance, income protection, life assurance and more. COMPENSATION: Compensation will be paid as salary or hourly. Compensation to be determined by the applicant’s education, experience, knowledge, skills, and abilities, as well as internal equity and alignment with market data. Crusoe is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation.", "summaryDescription" : "Senior Security Engineer, Detection and Response at Crusoe. Skills: Detection engineering, Incident response, Automation. Develop security operations strategy. Evaluate security technologies", "postedDate" : "2026-06-11T22:43:05.381", "createdAt" : "2026-06-11T22:43:05.381", "lastUpdated" : "2026-06-14T07:03:49.445", "ingestTimestamp" : "2026-06-11T22:43:05.381", "mongoId" : "6a2a459274d8ee00a05d298f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Detection engineering", "Incident response", "Forensic investigation", "Automation scripting", "SOAR capabilities", "Threat intelligence integration", "Leadership", "Mentoring", "Automation", "Security operations strategy", "Security compliance", "Audit programs", "Certification programs", "Cyber threat landscape", "On-premise computing", "Cloud computing", "Network security", "Detection as Code", "Incident handling", "AI response workflows", "Security observability", "Unix/Linux environments", "Windows endpoints", "Mac endpoints", "SOAR" ], "skillCount" : 25, "jobCategory" : "other", "jobSubcategory" : "security-engineering", "dataQualityScore" : 1.0, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true }, { "id" : "68b706967fc9a711f0f6f0fc", "title" : "Sr. Security Engineer, AWS Cloud Security Response", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 143300.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T02:44:36.234", "fingerprint" : "8a7a3fd9386f46352c27b51d967635462826361466b369c04fe4a00251d6e89c", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3051891/apply", "externalId" : "2298684c-4600-4216-9042-5f7f5e39f8c6", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, Bash scripting, PowerShell scripting, Python scripting, Linux, Unix", "professionalSkills" : [ "Risk assessment", "Information security", "Network security", "Operating system security", "Cryptography", "Software security", "Security operations", "Incident response", "Security intelligence", "Troubleshooting", "System design", "Virtualization technologies" ], "hardSkillsList" : [ "Scripting", "Coding", "Network security", "Operating system security", "Cryptography", "Software security", "Security operations", "Incident response", "Security intelligence", "Troubleshooting", "System design", "Virtualization technologies" ], "softSkillsList" : [ "Leadership", "Mentoring", "Critical thinking" ], "hardSkills" : [ { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Coding", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Operating system security", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" }, { "name" : "Software security", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security intelligence", "level" : "intermediate" }, { "name" : "Troubleshooting", "level" : "intermediate" }, { "name" : "System design", "level" : "intermediate" }, { "name" : "Virtualization technologies", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" }, { "name" : "Critical thinking" } ], "majorSkills" : "Cloud Security, Incident Response, Security Engineering, AWS", "majorSkillsList" : [ "Cloud Security", "Incident Response", "Security Engineering", "AWS" ], "coreResponsibilities" : "Manage security and availability of AWS Cloud services, Operate on the ‘AWS’ side of the Shared, Protect customers, Work tactically with internal and external stakeholders, Solve security challenges at massive scale, Think strategically to develop and implement changes, Drive automation, Drive scalability, Drive continuous progress, Assess technical vs. business risks, Drive internal engineering teams to take the right, Mitigate risks, Triage/assess security issues, Engage with internal service teams, Ensure prompt remediation of issues, Escalate internally as necessary, Ensure the right level of urgency and engagement, Participate in efforts to promote security throughout the, Build good working relationships within the team, Build good working relationships with others across Amazon, Develop pragmatic solutions that achieve business requirements, Keep an acceptable level of risk, Help with recruiting activities, Help with administrative work, Mentoring of junior staff, Proactive knowledge sharing within the team, Proactive knowledge sharing across the company, Fulfill regular on-call responsibilities, Supply oversight of in-flight security issues, Triage new incoming issues, Determine the level of risk, Prioritize remediation, Communicate the state of these issues to various, Escalate issues to senior AWS leadership, Explore building and improving our tooling, Share tooling benefits with all our engineers globally, Take handover from the previous site, Be delegated ownership of various security issues, Learn on the go, Engage various stakeholders, Triage new issues, Determine impact level, Work towards resolving them, Document all issues you are tracking", "teamCollaboration" : "Internal stakeholders; External stakeholders; Internal service teams; Senior leadership; Partner teams; Other AWS teams", "projectManagementSkills" : [ "Prioritize multiple tasks", "Manage projects" ], "domainKnowledge" : "AWS Cloud Security; Shared Responsibility Model; Cloud computing; Network security; Operating system security; Cryptography; Software security; Security operations; Incident response; Security intelligence; Web protocols; Linux architecture; Unix architecture", "domainList" : [ "aws-cloud-security", "shared-responsibility-model", "cloud-computing", "network-security", "operating-system-security", "cryptography", "software-security", "security-operations", "incident-response", "security-intelligence", "web-protocols", "linux-architecture", "unix-architecture" ], "domainSpecificKnowledge" : [ "AWS Cloud Security", "Shared Responsibility Model", "Cloud computing", "Network security", "Operating system security", "Cryptography", "Software security", "Security operations", "Incident response", "Security intelligence", "Web protocols", "Linux architecture", "Unix architecture" ], "toolProficiency" : [ "AWS", "Linux tools", "Unix tools" ], "communicationSkills" : "Oral communication; Written communication; Communicate to leadership", "continuousLearning" : "Learn on the go", "innovationCreativity" : "Develop pragmatic solutions; Explore building and improving tooling", "problemSolvingSkills" : "Troubleshooting; Critical thinking; Creative thinking; Root cause analysis", "specialRequirements" : "On-call responsibilities", "outcomesObjectives" : "Ensure security of the Cloud; Mitigate risks; Drive automation; Drive scalability; Drive continuous progress; Ensure prompt remediation of issues; Achieve business requirements; Keep acceptable level of risk; Ensure customers are put first", "qualificationsBasic" : "BS degree in Computer Science, Computer Engineering, Electrical Engineering, or 3+ years’ equivalent technology experience, 3+ years or more of proven experience with a focus in areas such as systems, network, and/or application security", "qualificationsPreferred" : "2+ years of scripting/coding experience in any language, Previous experience in Python scripting would be ideal, Understanding and experience with implementation of best practices across multiple security disciplines/domains, Strong, proven knowledge of virtualization technologies (AWS preferred), Demonstrated ability to collaborate/develop partnerships with partner teams, work autonomously with a Bias for Action, employ critical and creative thinking, Maturity, judgment, negotiation/influence skills, analytical skills, and leadership skills, Ability to prioritize multiple tasks and projects in a dynamic environment", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The AWS Cloud Security Response team manages the security and availability of AWS Cloud services. We operate on the ‘AWS’ side of the Shared Responsibility Model to ensure “Security of the Cloud” and to protect our customers. This role requires engineers to work tactically with both internal and external stakeholders to solve security challenges at massive scale, and to think strategically to develop and implement changes to drive automation, scalability and continuous progress for the organization. We’re looking for talented software and systems professionals with a passion for security who thrive in high energy environments to help us continue to raise the security bar for cloud computing. Successful candidates should: - be able to assess technical vs. business risks and consistently drive internal engineering teams to take the right actions in the appropriate time frames to mitigate risks. - have a good mix of broad and deep technical knowledge and a demonstrated background in information security. - be technically proficient in the fields of network and operating system security, cryptography, software security, security operations, incident response, and emergent security intelligence. - possess a combination of troubleshooting, technical, and communication skills, as well as the ability to manage a mix of disparate tasks which may include small-project and software development work. - be comfortable challenging and escalating to senior leadership to always ensure the best outcome for customers. An ideal candidate should be able to conduct most of the following: - Triage/assess security issues and engage with internal service teams to ensure prompt remediation of issues, escalating internally as necessary to ensure the right level of urgency and engagement. - Participate in efforts to promote security throughout the Company and build good working relationships within the team and with others across Amazon. - Demonstrate high ability and tolerance for frequent context switching and interruptions while staying productive and effective. - Develop pragmatic solutions that achieve business requirements while keeping an acceptable level of risk. - Help with recruiting activities and administrative work. - Mentoring of junior staff and proactive knowledge sharing within the team and across the company. - Fulfill regular on-call responsibilities. #SecOps Key job responsibilities - Supply oversight of in-flight security issues. - Triage new incoming issues to determine the level of risk they present to AWS, and then accordingly prioritize its remediation in conjunction with the impacted service team. - Communicate the state of these issues to various audiences, both technical and non-technical, at various levels of seniority (up to and including AWS’ Chief Information Security Officer). - Escalate issues to senior AWS leadership if you feel your issues are not being treated at the correct pace due to their impact to ensure that we are putting customers first. - Explore building and improving our tooling to make your own life easier, and at the same time, sharing that benefit with all our engineers globally. A day in the life In the morning you will take handover from the previous site and be delegated ownership of various security issues presently in-flight. The issues could relate to any of our many products, so you will often need to learn on the go. You will engage various stakeholders, such as the internal service team who actually needs to fix the issue, along with AWS Security Leadership, Legal, and the leadership from the impacted service team. As the day progresses, new issues will be automatically assigned to you based on your workload and you will be responsible for triaging them, determining their level of impact, and work towards resolving them at the appropriate pace. We staff a \"follow the sun\" on-call model from multiple geographic locations. At the end of the day, you will document all the issues you are tracking so they can be taken over by the next shift. About the team Cloud Response is a team inside AWS Security Operations. This team is broadly responsible for the 'AWS' side of the Shared Responsibility Model, and provides oversight of security issues from their identification through to resolution. Cloud Response operates follow-the-sun with teams based around four different geographical locations. We work with other AWS teams, to ensure security issues are resolved with the right level of urgency, whilst ensuring that our stakeholders are kept into the loop. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - BS degree in Computer Science, Computer Engineering, Electrical Engineering, or 3+ years’ equivalent technology experience. - 3+ years or more of proven experience with a focus in areas such as systems, network, and/or application security. Preferred Qualifications: - 2+ years of scripting/coding experience in any language (including Bash/PowerShell scripting). Previous experience in Python scripting would be ideal. - Understanding and experience with implementation of best practices across multiple security disciplines/domains. - Strong, proven knowledge of virtualization technologies (AWS preferred), web protocols, common attacks, and Linux/Unix tools and architecture. - Demonstrated ability to collaborate/develop partnerships with partner teams, work autonomously with a Bias for Action, and employ critical and creative thinking. - Maturity, judgment, negotiation/influence skills, analytical skills, and leadership skills. - Ability to prioritize multiple tasks and projects in a dynamic environment. - Effective written and oral communication with multiple levels of leadership involving both business and technical sides of the business. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Sr. Security Engineer, AWS Cloud Security Response at Amazon.com Services LLC. Skills: Cloud Security, Incident Response, Security Engineering, AWS. Manage security and availability of AWS Cloud services. Operate on the ‘AWS’ side of the Shared", "postedDate" : "2026-06-13T05:32:27.074", "createdAt" : "2026-06-13T05:32:27.074", "lastUpdated" : "2026-06-15T02:44:36.234", "ingestTimestamp" : "2026-06-13T05:32:27.074", "mongoId" : "68b706967fc9a711f0f6f0fc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3051891/apply", "salaryAnnualMin" : 143300, "salaryAnnualMax" : 247600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Scripting", "Coding", "Network security", "Operating system security", "Cryptography", "Software security", "Security operations", "Incident response", "Security intelligence", "Troubleshooting", "System design", "Virtualization technologies", "Leadership", "Mentoring", "Critical thinking", "Cloud Security", "Incident Response", "Security Engineering", "AWS", "Risk assessment", "Information security", "Prioritize multiple tasks", "Manage projects", "AWS Cloud Security", "Shared Responsibility Model", "Cloud computing", "Web protocols", "Linux architecture", "Unix architecture", "Linux tools", "Unix tools" ], "skillCount" : 31, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2a71bf74d8ee00a064a4f4", "title" : "Senior Security Engineer, Detection and Response", "company" : "Crusoe", "industry" : "IT, Compliance, and Security", "salary" : { "min" : 85000.0, "max" : 125000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Security Engineer in Dublin, Ireland, adjusted for the technology industry and company size." }, "location" : "Dublin - IE", "locations" : [ "Dublin - IE" ], "timestamp" : "2026-06-14T21:20:29.393", "fingerprint" : "500e0321258e8085d8d3fed6f02db2836575807b7149d6d0d88f52e2c7e9479b", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/Crusoe/fba363d0-4f6f-40a8-8ea4-ceaea637b42a/application", "externalId" : "fba363d0-4f6f-40a8-8ea4-ceaea637b42a", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Dublin", "country" : "Ireland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "53.3493795,-6.2605593" } ], "locationText" : "Dublin, Ireland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "GCP, Python, Terraform, Docker, Kubernetes, Ansible", "professionalSkills" : [ "Security operations strategy", "Threat landscape analysis", "Incident response management", "Security compliance", "Audit programs", "Certification programs" ], "hardSkillsList" : [ "Detection engineering", "Incident handling", "Forensic investigation", "Automation scripting", "SOAR capabilities", "Threat intelligence integration" ], "softSkillsList" : [ "Leadership", "Mentoring", "Problem-solving", "Opportunity-finding" ], "hardSkills" : [ { "name" : "Detection engineering", "level" : "intermediate" }, { "name" : "Incident handling", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" }, { "name" : "Automation scripting", "level" : "intermediate" }, { "name" : "SOAR capabilities", "level" : "intermediate" }, { "name" : "Threat intelligence integration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" }, { "name" : "Problem-solving" }, { "name" : "Opportunity-finding" } ], "majorSkills" : "Detection engineering, Incident response, Automation", "majorSkillsList" : [ "Detection engineering", "Incident response", "Automation" ], "coreResponsibilities" : "Develop security operations strategy, Execute security operations strategy, Evaluate security technologies, Implement security technologies, Enhance security posture, Enhance operational efficiency, Partner with stakeholders, Adapt in dynamic security landscape, Design detection mechanisms, Implement detection mechanisms, Fine-tune detection mechanisms, Identify security threats, Identify vulnerabilities, Tune alerting rules, Reduce false positives, Enhance signal-to-noise ratio, Perform forensics, Lead response efforts, Triage security alerts, Take mitigation steps, Engage with internal stakeholders, Drive advancement of detection initiatives, Drive advancement of automation initiatives, Manage security event monitoring, Manage security event management, Manage response workflows, Manage response tasks, Improve security operations, Develop measurement capabilities, Develop metrics, Track performance, Communicate performance, Track coverage, Communicate coverage, Track risk, Communicate risk, Author runbooks, Write automation scripts, Build SOAR capabilities, Reduce manual intervention, Improve response times, Create automated playbooks, Maintain automated playbooks, Manage automated playbooks, Address new threats, Address attacker tactics, Develop standard operating procedures, Enforce quality of services, Enforce consistency of services, Support security compliance, Support audit programs, Support certification programs", "teamCollaboration" : "Partner with Engineering; Partner with Product; Partner with SRE; Partner with IT; Partner with Legal; Engage with partners; Engage with stakeholders", "domainKnowledge" : "Cyber threat landscape; On-premise computing; Cloud computing; Network security; Detection as Code; Incident handling; Forensic investigation; AI response workflows; Threat intelligence integration", "domainList" : [ "cyber-threat-landscape", "on-premise-computing", "cloud-computing", "network-security", "detection-as-code", "incident-handling", "forensic-investigation", "ai-response-workflows", "threat-intelligence-integration" ], "domainSpecificKnowledge" : [ "Cyber threat landscape", "On-premise computing", "Cloud computing", "Network security", "Detection as Code", "Incident handling", "Forensic investigation", "AI response workflows", "Threat intelligence integration" ], "toolProficiency" : [ "SOAR" ], "communicationSkills" : "Technical communication; Stakeholder engagement", "documentationSkills" : "Runbook authoring; Standard operating procedures", "problemSolvingSkills" : "Problem-solving", "specialRequirements" : "Pass background check", "qualificationsBasic" : "6+ years in cybersecurity, Detection, response and automation focus, Protection of on-premise computing environments, Experience with network security at scale, Experience with Detection as Code workflows, Incident handling expertise, Forensic investigation expertise, Knowledge of modern cyber threat landscape, Python scripting expertise, Automation expertise, Experience integrating threat intel, Experience responding to incidents on Windows, Experience responding to incidents on Mac endpoints, Experience with Unix/Linux environments", "qualificationsPreferred" : "Proficiency with one or more major cloud environments, GCP a plus, AI integration into response workflows experience, Mentoring peers in security engineering, Training peers in security engineering, Familiarity with Terraform, Familiarity with Docker, Familiarity with Kubernetes, Familiarity with Ansible, Experience building open source security observability solutions, Experience scaling open source security observability solutions", "remoteFriendly" : false, "rawDescription" : "Crusoe is on a mission to accelerate the abundance of energy and intelligence. As the only vertically integrated AI infrastructure company built from the ground up, we own and operate each layer of the stack — from electrons to tokens — to power the world's most ambitious AI workloads. When you join Crusoe, you join a team that is building the future, faster. We're in the midst of the greatest industrial revolution of our time. The demand for AI compute is boundless, and power is a bottleneck. We're solving that — with an energy-first approach that makes AI infrastructure better for the world and faster for the people innovating with AI. We're looking for problem-solving, opportunity-finding teammates with a sense of urgency, who believe in the scale of our ambition and thrive on a path not fully paved — people who want to grow their careers alongside a team of experts across energy, manufacturing, data center construction, and cloud services. If you want to do the most meaningful work of your career, help our customers and partners advance their AI strategies, and be part of a high-performing team that believes in each other, come build with us at Crusoe. About This Role: Crusoe Security & Compliance is hiring a Senior Detection Engineer to play a critical role in safeguarding Crusoe, our customers, and ensuring our security posture remains robust against emerging threats. This role involves influencing the detection strategy, creation, tuning, validation, and correlation to maintain effective detections against an ever-changing threat landscape. The role is hands-on, encompassing the development of detection technologies and incident response. What You'll Be Working On: - Leadership & Strategy: - Develop and execute a comprehensive security operations strategy that aligns with organizational goals, ensuring robust protection against current and future cyber threats. - Evaluate and implement emerging security technologies and methodologies to continuously enhance our security posture and operational efficiency. - Partner with stakeholders and cross-functional teams (Engineering, Product, SRE, IT, Legal) to adapt in a dynamic security landscape. - Detection and Incident Response: - Design, implement, and fine-tune advanced detection mechanisms to proactively identify potential security threats and vulnerabilities. - Continuously tune alerting rules to reduce false positives and enhance our signal-to-noise ratio. - Perform forensics and lead response efforts during security incidents, including triaging security alerts, taking relevant mitigation steps, and engaging with internal stakeholders to ensure swift resolution. - Operational Security: - Drive the advancement and growth of detection and automation initiatives. - Manage security event monitoring, management, response workflows, and tasks. - Improve security operations by developing measurement capabilities and metrics to track and communicate performance, coverage, and risk. - Automation and Improvement: - Author comprehensive runbooks, write automation scripts, and build SOAR (Security Orchestration, Automation, and Response) capabilities to reduce manual intervention and improve response times. - Create, maintain, and manage a library of automated playbooks to address new threats and tactics employed by attackers. - Documentation and Compliance: - Develop standard operating procedures and other appropriate documentation to enforce quality and consistency of services being delivered. - Support ongoing security compliance, audit, and certification programs (e.g., HIPAA, SOC 2). What You'll Bring to the Team: - You have 6+ years in cybersecurity, with a focus on detection, response and automation. - Technical proficiency with protection of on-premise computing environments and proficiency with one or more major cloud computing environments (GCP a plus). - Experience with network security at scale. - Experience working with and implementing Detection as Code workflows. - Strong expertise in incident handling and forensic investigation. - Strong knowledge of the modern cyber threat landscape. - Automation-first mindset, including experience integrating AI into response workflows. - Experience integrating threat intel into automated response workflows - Demonstrated expertise in mentoring and training peers in security engineering. - Expertise in python scripting and automation. - Exceptional collaboration and communication skills, with the ability to engage with partners and stakeholders from various perspectives and technical understanding. - Familiarity with modern infrastructure tools, such as Terraform, Docker, Kubernetes, and Ansible. - Experience building and scaling open source security observability solutions. - Experience with Unix/Linux environments. - Experience responding to incidents on Windows and Mac endpoints. - Self-motivated, with good communication and writing skills. - Must be able to pass a background check - Embody the Company values https://www.crusoeenergy.com/about BENEFITS: Crusoe also offers a competitive benefits package designed to support financial security, health, and overall well-being, including pension contributions, private health and dental insurance, income protection, life assurance and more. COMPENSATION: Compensation will be paid as salary or hourly. Compensation to be determined by the applicant’s education, experience, knowledge, skills, and abilities, as well as internal equity and alignment with market data. Crusoe is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation.", "summaryDescription" : "Senior Security Engineer, Detection and Response at Crusoe. Skills: Detection engineering, Incident response, Automation. Develop security operations strategy. Execute security operations strategy", "postedDate" : "2026-06-11T18:34:05.348", "createdAt" : "2026-06-11T18:34:05.348", "lastUpdated" : "2026-06-14T21:20:29.393", "ingestTimestamp" : "2026-06-11T18:34:05.348", "mongoId" : "6a2a71bf74d8ee00a064a4f4", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Detection engineering", "Incident handling", "Forensic investigation", "Automation scripting", "SOAR capabilities", "Threat intelligence integration", "Leadership", "Mentoring", "Problem-solving", "Opportunity-finding", "Incident response", "Automation", "Security operations strategy", "Threat landscape analysis", "Incident response management", "Security compliance", "Audit programs", "Certification programs", "Cyber threat landscape", "On-premise computing", "Cloud computing", "Network security", "Detection as Code", "AI response workflows", "SOAR" ], "skillCount" : 25, "jobCategory" : "other", "jobSubcategory" : "security-engineering", "dataQualityScore" : 1.0, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true }, { "id" : "68ed10a770f0b99d58e7b737", "title" : "Security Engineer III, Vulnerability Management and Response - Strategic Enablement", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 143300.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Austin, Texas, USA", "locations" : [ "Austin, Texas, USA" ], "timestamp" : "2026-06-15T02:24:34.759", "fingerprint" : "0944f4bea17760f3fb7749a26b0dda48e745b42bc0df5974a724e3d968bb7a90", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3104531/apply", "externalId" : "27150f93-db7c-4fd2-a629-a7ba1b955869", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SQL", "professionalSkills" : [ "Vulnerability management", "Remediation automation", "Vulnerability detection", "Data-driven insights", "Security strategy", "Technical leadership", "Risk identification", "Threat modeling" ], "hardSkillsList" : [ "Vulnerability analysis", "Log analysis", "Automation scripting", "Security risk assessment", "Mitigation planning", "Vulnerability identification", "Attack pattern analysis", "Remediation techniques" ], "softSkillsList" : [ "Mentoring", "Coaching" ], "hardSkills" : [ { "name" : "Vulnerability analysis", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Automation scripting", "level" : "intermediate" }, { "name" : "Security risk assessment", "level" : "intermediate" }, { "name" : "Mitigation planning", "level" : "intermediate" }, { "name" : "Vulnerability identification", "level" : "intermediate" }, { "name" : "Attack pattern analysis", "level" : "intermediate" }, { "name" : "Remediation techniques", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" }, { "name" : "Coaching" } ], "majorSkills" : "Vulnerability management, Security automation, Vulnerability detection, Risk mitigation", "majorSkillsList" : [ "Vulnerability management", "Security automation", "Vulnerability detection", "Risk mitigation" ], "coreResponsibilities" : "Define technical security strategy, Lead design and development, Delegate implementation details, Drive creation of proof-of-concepts, Create production-ready solutions, Partner with TPMs, Partner with SDEs, Partner with stakeholders, Translate requirements into designs, Perform research on vulnerabilities, Perform analysis on vulnerabilities, Evolve detection methods, Mentor security engineers, Coach security engineers, Develop security engineers, Serve as escalation point, Provide technical direction, Review vulnerability scan data, Build SQL queries, Analyze scan data patterns, Collaborate on technical specifications, Code Lambda scripts, Integrate new capabilities, Conduct design reviews, Ensure detection logic scales, Mentor junior engineer, Test automation workflow, Prepare actionable insights", "teamCollaboration" : "Cross-organizational stakeholders; VMR Operations; SDE teams", "projectManagementSkills" : [ "Program requirements" ], "domainKnowledge" : "Vulnerability management; Container vulnerability detection; Cloud-native architecture; Microservices architecture; Web services architecture", "domainList" : [ "vulnerability-management", "container-vulnerability-detection", "cloud-native-architecture", "microservices-architecture", "web-services-architecture" ], "domainSpecificKnowledge" : [ "Vulnerability management", "Container vulnerability detection", "Cloud-native architecture", "Microservices architecture", "Web services architecture" ], "toolProficiency" : [ "Lambda scripts" ], "communicationSkills" : "Actionable insights", "continuousLearning" : "Knowledge sharing; Training resources", "innovationCreativity" : "Prototype development; Rapid prototyping", "problemSolvingSkills" : "Troubleshooting systems issues; Analyzing logs; Complex problem solving; Root cause analysis", "outcomesObjectives" : "Measurable impact; Measurable security outcomes", "qualificationsBasic" : "4+ years troubleshooting systems issues, 4+ years analyzing logs, 4+ years automating tasks, 5+ years identifying security issues, 5+ years developing mitigation plans, Industry security vulnerabilities identification, Industry attack patterns identification, Industry remediation techniques identification, Experience as a mentor, Experience as a tech lead, Experience leading engineering team", "qualificationsPreferred" : "Threat modeling experience, Risk identification techniques experience, Security in microservices experience, Security in web services experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Security's Vulnerability Management and Response - Strategic Enablement team is looking for a Security Engineer II. This team is revolutionizing vulnerability management through advanced remediation automation, innovative vulnerability detection solutions, data-driven insights, and more. Be the technical leader of a dynamic group that bridges security operations and development, creating measurable impact across Amazon's vast ecosystem. Key job responsibilities - Define the technical security strategy for vulnerability management automation and a homegrown vulnerability detection platform, ensuring scalable and sustainable integration of new security capabilities into Amazon’s infrastructure. - Lead the design and development of advanced security automation, workflows, and tooling; delegate implementation details to other engineers while ensuring technical excellence and alignment with team objectives. - Drive the creation of proof-of-concepts and production-ready solutions for vulnerability detection, assessment, and remediation across diverse environments, setting best practices for approach and execution. - Partner with TPMs, SDEs, and cross-organizational stakeholders to translate ambiguous program requirements into robust technical designs that scale across Amazon; identify integration risks early and provide clear mitigation paths. - Perform deep research and analysis on emerging vulnerabilities, novel exploitation techniques, and industry trends; anticipate threats and proactively evolve detection methods to address future challenges. - Act as a technical multiplier by mentoring, coaching, and developing other security engineers, growing their ability to independently solve complex problems while instilling strong mental models for approaching security issues. - Serve as the escalation point for complex or ambiguous issues, unblocking engineers by providing clarity, context, and principled technical direction that balances security, scale, and business needs. A day in the life Start your morning reviewing last night's vulnerability scan data and building SQL queries to analyze patterns across thousands of Amazon hosts. Collaborate with VMR Operations on technical specifications for a new container vulnerability detection pattern, then code Lambda scripts to integrate new capabilities with the workflow management platform. Mid-day brings a design review with SDE teams, ensuring custom detection logic scales seamlessly. Mentor a junior engineer on API integration techniques, then end the day testing your automation workflow and preparing actionable insights for tomorrow's leadership review. About the team The VMR Strategic Enablement team bridges security operations and development, transforming vulnerability data into measurable security outcomes. We embrace a \"Think Fast, Learn Faster\" culture where rapid prototyping validates new solutions and data drives every decision. Our diverse team of security engineers and TPMs collaborates across the full vulnerability lifecycle, building custom detection capabilities, operationalizing security programs, and creating metrics that demonstrate real impact across Amazon's infrastructure. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. #JoinDefSec Basic Qualifications: - 4+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools experience - 5+ years of work in identifying security issues and risks, and developing mitigation plans experience - Experience working in identifying security issues and risks, and developing mitigation plans - Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques - Experience as a mentor, tech lead or leading an engineering team Preferred Qualifications: - Experience applying threat modeling or other risk identification techniques or equivalent - Experience with security in service-oriented architectures/microservices and web services Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Engineer III, Vulnerability Management and Response - Strategic Enablement at Amazon.com Services LLC. Skills: Vulnerability management, Security automation, Vulnerability detection, Risk mitigation. Define technical security strategy. Lead design and development", "postedDate" : "2026-06-13T09:02:54.701", "createdAt" : "2026-06-13T09:02:54.701", "lastUpdated" : "2026-06-15T02:24:34.759", "ingestTimestamp" : "2026-06-13T09:02:54.701", "mongoId" : "68ed10a770f0b99d58e7b737", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3104531/apply", "salaryAnnualMin" : 143300, "salaryAnnualMax" : 247600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Vulnerability analysis", "Log analysis", "Automation scripting", "Security risk assessment", "Mitigation planning", "Vulnerability identification", "Attack pattern analysis", "Remediation techniques", "Mentoring", "Coaching", "Vulnerability management", "Security automation", "Vulnerability detection", "Risk mitigation", "Remediation automation", "Data-driven insights", "Security strategy", "Technical leadership", "Risk identification", "Threat modeling", "Program requirements", "Container vulnerability detection", "Cloud-native architecture", "Microservices architecture", "Web services architecture", "Lambda scripts" ], "skillCount" : 26, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "68c2e43bf8b1b0376634c922", "title" : "Customer Incident Response Program Manager", "company" : "Amazon Information Service", "industry" : "Project/Program/Product Management--Non-Tech, Program Management, Cloud Computing", "salary" : { "min" : 450000.0, "max" : 750000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Manager in the Technology industry in Shanghai, China, adjusted for company size and specific role." }, "location" : "Shanghai, CHN", "locations" : [ "Shanghai, CHN" ], "certifications" : [ "Program or Project Management Professional Certification", "AWS certifications" ], "timestamp" : "2026-06-15T04:15:54.586", "fingerprint" : "0bc8f5195ef5bedf99b540884b8f2e95e0d85ed791a728e672725e3c046681c4", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3071459/apply", "externalId" : "1259a4c9-cf3d-4dad-ac7f-ee57866350a4", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Shanghai", "country" : "China", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "31.2312707,121.4700152" } ], "locationText" : "Shanghai, China", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceLevel" : "Manager", "technicalSkills" : "AWS, Generative AI", "professionalSkills" : [ "Security assessment", "Controls design" ], "hardSkillsList" : [ "Incident response", "Security operations" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Program management, Security", "majorSkillsList" : [ "Incident response", "Program management", "Security" ], "coreResponsibilities" : "Manage a portfolio of critical security offerings, Manage a portfolio of critical security services, Build training programs for users, Deploy training programs for users, Brief customers on AWS CIRT, Brief customers on AWS Security Incident Response service, Prioritize risk for service teams, Prioritize risk for security teams, Prioritize risk for executive leadership, Collaborate with business teams, Collaborate with service teams, Understand security assessment scope, Confirm security assessment scope, Understand controls design, Confirm controls design", "teamCollaboration" : "Cross-functional teams; Senior leadership; Security engineers; Service teams", "projectManagementSkills" : [ "Program management", "Project management", "Roadmap management", "Strategic planning" ], "domainKnowledge" : "Cloud security; Incident response; Security operations", "domainList" : [ "cloud-security", "incident-response", "security-operations" ], "domainSpecificKnowledge" : [ "Cloud security", "Incident response", "Security operations" ], "communicationSkills" : "Executive level communication", "innovationCreativity" : "Pioneer security solutions", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "8+ years program management experience, Experience using data and metrics, Experience owning program strategy, 5+ years Program or Project Management experience in Security domain, Experience managing enterprise-level projects, Experience managing continuous improvement programs", "qualificationsPreferred" : "2+ years driving process improvements, Master's degree or MBA, Experience owning cross-team security implementation programs, Experience driving operational security programs, Experience driving secure software development lifecycle programs, Experience working in security operations environment, Active project management certification, Agile management certification, AWS experience, AWS certifications", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Global Services includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center. You’ll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud. Do you want to work on planetary scale incident response solutions in the cloud? Are you excited to help customers respond to security incidents and automate security operations giving them unprecedented capability and agility? Do you enjoy working on fast-paced complex projects focused on game changing business outcomes for customers globally? As a member of the AWS Customer Incident Response Team (CIRT) in the AWS Global Service Security (GSS) you will have the opportunity to help customers respond to security incidents and pioneer technically superb security solutions to help customer operate securely in the cloud. Within this team, AWS CIRT is seeking a self-motivated leader with rich experience in customer service and interested in improving the way products are brought to market and distributed on a global scale to join us as a Program Manager for China. AWS CIRT is looking for a skilled and motivated senior Program Manager to expand the security program that responds to customer security incidents at scale. You will manage the roadmap and apply strong judgement that balances immediate security campaigns with longer-term, strategic planning. This role is inherently cross-functional, working closely with senior leadership, security engineers, and dozens of service teams. A successful candidate will have a good mix of deep technical security knowledge and a demonstrated track record of successful complex and large scale program/project deliveries. Key job responsibilities • A proven track record of implementing, delivering large projects and communicating effectively at executive level • Manage a portfolio of critical security offerings and services that are internal and external facing • Excellent program and project management skills, with the ability to work in a fast-paced environment • Effective prioritization of tasks, and seamless operation across organizational boundaries • Building and deploying training programs for all users in the Greater China Region • Brief customers on AWS CIRT and AWS Security Incident Response service • Continuously prioritize risk for service teams, security teams, and executive leadership • Collaborate with business/service teams to understand and confirm security assessment scope and controls design About the team This role will be to join the AWS Customer Incident Response Team (CIRT) aka Zipline - https://w.amazon.com/bin/view/AWS/Teams/GlobalServicesSecurity/TDIR/Zipline Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS? Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 8+ years of program or project management experience - Experience using data and metrics to determine and drive improvements - Experience owning program strategy, end to end delivery, and communicating results to senior leadership - 5+ years of Program or Project Management experience managing enterprise-level projects and continuous improvement programs in the Security domain. - Program or Project Management Professional Certification Preferred Qualifications: - 2+ years of driving process improvements experience - Master's degree, or MBA in business, operations, human resources, adult education, organizational development, instructional design or related field - Experience in owning cross-team security implementation programs inclusive of metrics, communications and prioritization. - Experience driving operational security and secure software development lifecycle programs. - Experience working in a security operations environment. - Have at least one active project or agile management certification. - AWS experience and/or relevant certifications. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Customer Incident Response Program Manager at Amazon Information Service. Skills: Incident response, Program management, Security. Manage a portfolio of critical security offerings. Manage a portfolio of critical security services", "postedDate" : "2026-06-13T10:08:25.455", "createdAt" : "2026-06-13T10:08:25.455", "lastUpdated" : "2026-06-15T04:15:54.586", "ingestTimestamp" : "2026-06-13T10:08:25.455", "mongoId" : "68c2e43bf8b1b0376634c922", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3071459/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Incident response", "Security operations", "Leadership", "Program management", "Security", "Security assessment", "Controls design", "Project management", "Roadmap management", "Strategic planning", "Cloud security", "Program or Project Management Professional Certification", "AWS certifications" ], "skillCount" : 13, "jobCategory" : "project-management", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Computing" }, { "id" : "69cf3f052beec4dd3d9340a4", "title" : "AWS Security Operations/Incident Response Engineer", "company" : "Amazon Web Services, Inc.", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 159000.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Herndon, Virginia, USA", "locations" : [ "Herndon, Virginia, USA" ], "certifications" : [ "CCSP", "Certified Cloud Security Professional", "CEH", "Certified Ethical Hacker", "CFR", "CyberSec First Responder", "Cloud+", "CySA+", "CompTIA Cybersecurity Analyst", "GCED", "GIAC Certified Enterprise Defender", "GICSP", "Global Industrial Cyber Security Professional", "PenTest+", "AWS certification", "AWS Solutions Architect" ], "timestamp" : "2026-06-15T08:10:44.516", "fingerprint" : "e7b6067f8d5e1ee3cf111fd915ee7bae8c724b95799fbd946bdb1b7400dc7409", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10382311/apply", "externalId" : "49079c29-efa4-48bb-96db-5c916f303463", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" } ], "locationText" : "Herndon, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Java, C++, HTTP(S), DNS, TCP/IP, Cryptography, Network security, Software security, Malware analysis, Forensics, Security operations, Incident response, Security intelligence, AWS", "professionalSkills" : [ "Risk assessment", "Security engineering" ], "hardSkillsList" : [ "Log analysis", "Incident response", "Forensics", "System tooling development", "Risk assessment", "Cryptography", "Network security", "Software security", "Malware analysis", "Security operations", "Security intelligence" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Forensics", "level" : "intermediate" }, { "name" : "System tooling development", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Software security", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Security intelligence", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Security operations, Cloud security", "majorSkillsList" : [ "Incident response", "Security operations", "Cloud security" ], "coreResponsibilities" : "Respond to security incidents, Prevent future incidents, Design cohesive responses, Coordinate responses across teams, Build security utilities, Build security tools, Communicate effectively", "teamCollaboration" : "Multiple teams across organization; Fellow Security Engineers", "domainKnowledge" : "Cloud security; National security; Cryptography; Network security; Software security; Malware analysis; Forensics; Security operations; Incident response; Security intelligence; AWS services", "domainList" : [ "cloud-security", "national-security", "cryptography", "network-security", "software-security", "malware-analysis", "forensics", "security-operations", "incident-response", "security-intelligence", "aws-services" ], "domainSpecificKnowledge" : [ "Cloud security", "National security", "Cryptography", "Network security", "Software security", "Malware analysis", "Forensics", "Security operations", "Incident response", "Security intelligence", "AWS services" ], "toolProficiency" : [ "Splunk", "ELK" ], "communicationSkills" : "Communicate at multiple levels; Communicate to multiple audiences", "problemSolvingSkills" : "Think like attacker; Think like defender; Mitigate risks", "specialRequirements" : "US Citizen, TS/SCI with polygraph, On-call responsibilities", "qualificationsBasic" : "Bachelor's degree or CCSP or CEH or CFR or Cloud+ or CySA+ or GCED or GICSP or PenTest+, 2+ years scripting or programming or security code review, Knowledge of networking protocols, Current, active US Government Security Clearance of TS/SCI with Polygraph", "qualificationsPreferred" : "AWS certification, Cloud Technology Certification, Knowledge of web protocols, Knowledge of common attacks, Knowledge of Linux/Unix tools, Knowledge of Linux/Unix architecture, Deep understanding of AWS service catalog, Used AWS services in production, Experience with log analysis systems, Familiarity with Windows logging systems, Familiarity with Linux logging systems, Understanding of high-level cryptography principles", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Web Services (AWS) is the leading cloud provider, providing infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS’s multi-tenant infrastructure. Governmental organizations are also looking to and depending on AWS for cloud solutions and services. The AWS Security Incident Response team is seeking a focused Security Engineer who can take on a leadership role in responding to security issues in support of our National Security program. This engineer will work as a part of a growing team of security engineers who are focused on protecting the AWS infrastructure that is used by our national security customers. Our security engineers perform many duties during an average day: log analysis, incident response, forensics, system/tooling development, and risk assessment, just to name a few. You must thrive in high-pressure situations, think like both an attacker and defender, and drive relevant teams to take the right actions in the right time frames to mitigate risks. They also need to balance technical risks against business needs and be able to articulate risks and mitigations to members of leadership at various levels. You should have a good mix of deep technical knowledge and a demonstrated background in information security. We value broad and deep technical knowledge, specifically in the fields of cryptography, network security, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active TS/SCI security clearance with polygraph. Key job responsibilities - Confidently and intelligently respond to security incidents, and proactively consider how to prevent the same type of incidents from occurring in the future. - Design and coordinate cohesive responses to security events that involve multiple teams across the organization. - Build security utilities and tools for internal use that enable you and your fellow Security Engineers to operate at high speed and wide scale. - Ability to communicate effectively at multiple levels of sensitivity, and multiple audiences. - Recognize, adopt and instill the best practices in security engineering fields throughout the organization: development, cryptography, network security, security operations, incident response, security intelligence. - Fulfill regular on-call responsibilities. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor's degree, or CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud+ or CySA+ (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest+ - 2+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience - Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP - Current, active US Government Security Clearance of TS/SCI with Polygraph Preferred Qualifications: - AWS certification, such as, AWS Solutions Architect, or a similar cloud certification, or Cloud Technology Certification - Knowledge of web protocols, common attacks, and Linux/Unix tools and architecture - Deep understanding of the AWS service catalog. Ideally, you have used AWS services in a production capacity. - Experience with log analysis systems, like Splunk or ELK. - Familiarity with Windows and Linux logging systems. - Understanding of high-level cryptography principles (PKI, encryption algorithms, etc) Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, VA, Herndon - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "AWS Security Operations/Incident Response Engineer at Amazon Web Services, Inc.. Skills: Incident response, Security operations, Cloud security. Respond to security incidents. Prevent future incidents", "postedDate" : "2026-06-13T14:00:19.237", "createdAt" : "2026-06-13T14:00:19.237", "lastUpdated" : "2026-06-15T08:10:44.516", "ingestTimestamp" : "2026-06-13T14:00:19.237", "mongoId" : "69cf3f052beec4dd3d9340a4", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10382311/apply", "salaryAnnualMin" : 159000, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Log analysis", "Incident response", "Forensics", "System tooling development", "Risk assessment", "Cryptography", "Network security", "Software security", "Malware analysis", "Security operations", "Security intelligence", "Leadership", "Cloud security", "Security engineering", "National security", "AWS services", "CCSP", "Certified Cloud Security Professional", "CEH", "Certified Ethical Hacker", "CFR", "CyberSec First Responder", "Cloud+", "CySA+", "CompTIA Cybersecurity Analyst", "GCED", "GIAC Certified Enterprise Defender", "GICSP", "Global Industrial Cyber Security Professional", "PenTest+", "AWS certification", "AWS Solutions Architect", "Splunk", "ELK" ], "skillCount" : 34, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Security" }, { "id" : "6a09f21e1663d49372a845c6", "title" : "Security Software Dev Engineer II, AWS Security Corporate Response", "company" : "Amazon Web Services, Inc.", "industry" : "Software Development, amazon security", "salary" : { "min" : 143700.0, "max" : 194400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T06:06:55.041", "fingerprint" : "904f0aa67a81b6232f23b2103c3a0821861d5aeddf314d79f37eabe4d6677bc4", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10410517/apply", "externalId" : "7b963d63-e85c-488e-8ac7-ba83a3f3d74f", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS, Gen AI, Amazon Bedrock", "professionalSkills" : [ "Security response", "Software development", "Automation" ], "hardSkillsList" : [ "Software development", "System design", "Automation" ], "hardSkills" : [ { "name" : "Software development", "level" : "intermediate" }, { "name" : "System design", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" } ], "majorSkills" : "Security software, Automation, AWS services", "majorSkillsList" : [ "Security software", "Automation", "AWS services" ], "coreResponsibilities" : "Drive operational excellence, Design software processes, Implement software processes, Design intelligent automations, Implement intelligent automations, Streamline security response workflows, Build agentic automations, Empower security engineers, Collaborate with global teams, Identify automation opportunities, Identify tooling improvements, Leverage modern technologies, Leverage AWS services, Create scalable solutions, Enhance security operations, Deliver delightful software", "teamCollaboration" : "Global security teams", "domainKnowledge" : "AWS security; Corporate network security; Security response", "domainList" : [ "aws-security", "corporate-network-security", "security-response" ], "domainSpecificKnowledge" : [ "AWS security", "Corporate network security", "Security response" ], "innovationCreativity" : "Develop innovative automations", "problemSolvingSkills" : "Troubleshoot security issues", "outcomesObjectives" : "Strengthen security posture; Increase engineer productivity", "qualificationsBasic" : "3+ years software development experience, 2+ years system design experience, Experience programming one language, Experience programming Amazon Bedrock, Experience programming Gen AI platform", "qualificationsPreferred" : "3+ years full SDLC experience, Bachelor's in computer science", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Join us in developing and scaling security solutions that protect Amazon's global operations. As a Security Software Development Engineer, you'll create innovative automations and tools that transform how our security teams respond to threats and vulnerabilities. Your work will directly impact the productivity of security engineers worldwide and strengthen the security posture of AWS and for our customers. Key job responsibilities • Drive operational excellence by designing and implementing software processes, procedures, and intelligent automations that streamline security response workflows • Build agentic automations that empower security engineers to work more efficiently and effectively • Collaborate with global security teams to identify high-impact opportunities for automation and tooling improvements • Leverage modern technologies and AWS services to create scalable solutions that enhance security operations • Deliver software that delights users with measurable efficiency and productivity gains About the team AWS Security Corporate Response (CorpSec) protects the corporate network environment that enables all Amazon employees to innovate securely for our customers. We respond to security issues across the corporate network with speed and precision, ensuring the world's largest cloud provider maintains the highest security standards. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences with amazing outcomes, don’t let it stop you from applying. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 3+ years of non-internship professional software development experience - 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience programming with at least one software programming language - Experience programming with Amazon Bedrock or another Gen AI platform. Preferred Qualifications: - 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually", "summaryDescription" : "Security Software Dev Engineer II, AWS Security Corporate Response at Amazon Web Services, Inc.. Skills: Security software, Automation, AWS services. Drive operational excellence. Design software processes", "postedDate" : "2026-06-13T16:08:57.360", "createdAt" : "2026-06-13T16:08:57.360", "lastUpdated" : "2026-06-15T06:06:55.041", "ingestTimestamp" : "2026-06-13T16:08:57.360", "mongoId" : "6a09f21e1663d49372a845c6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10410517/apply", "salaryAnnualMin" : 143700, "salaryAnnualMax" : 194400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Software development", "System design", "Automation", "Security software", "AWS services", "Security response", "AWS security", "Corporate network security" ], "skillCount" : 8, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "69d140072beec4dd3ddbe417", "title" : "Security Software Dev Engineer II, AWS Security Corporate Response", "company" : "Amazon.com Services LLC", "industry" : "Software Development, amazon security", "salary" : { "min" : 143700.0, "max" : 194400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T06:05:22.074", "fingerprint" : "e2894a4e26f433c9bfa4feb2c29c9e1333a0d467b9baa905cfe0e71496e2c170", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10383075/apply", "externalId" : "6879b3a1-ef52-4a67-b131-e0bccf3540b2", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS, Gen AI", "professionalSkills" : [ "Security response", "Automation development", "Tooling improvements", "Security operations" ], "hardSkillsList" : [ "Software development", "System design", "Reliability", "Scaling" ], "hardSkills" : [ { "name" : "Software development", "level" : "intermediate" }, { "name" : "System design", "level" : "intermediate" }, { "name" : "Reliability", "level" : "intermediate" }, { "name" : "Scaling", "level" : "intermediate" } ], "majorSkills" : "Security software, Automation, AWS services", "majorSkillsList" : [ "Security software", "Automation", "AWS services" ], "coreResponsibilities" : "Drive operational excellence, Design software processes, Implement software procedures, Streamline security response workflows, Build agentic automations, Empower security engineers, Collaborate with security teams, Identify automation opportunities, Identify tooling improvement opportunities, Leverage modern technologies, Create scalable solutions, Enhance security operations, Deliver software", "teamCollaboration" : "Global security teams", "domainKnowledge" : "AWS Security; Corporate network", "domainList" : [ "aws-security", "corporate-network" ], "domainSpecificKnowledge" : [ "AWS Security", "Corporate network" ], "innovationCreativity" : "Develop innovative automations", "problemSolvingSkills" : "Respond to threats; Respond to vulnerabilities", "outcomesObjectives" : "Strengthen security posture; Increase engineer productivity; Deliver efficiency gains; Deliver productivity gains", "qualificationsBasic" : "3+ years software development experience, 2+ years system design experience, Experience programming one language, Experience programming Gen AI platform", "qualificationsPreferred" : "3+ years full SDLC experience, Bachelor's in computer science", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Join us in developing and scaling security solutions that protect Amazon's global operations. As a Security Software Development Engineer, you'll create innovative automations and tools that transform how our security teams respond to threats and vulnerabilities. Your work will directly impact the productivity of security engineers worldwide and strengthen the security posture of AWS and for our customers. Key job responsibilities • Drive operational excellence by designing and implementing software processes, procedures, and intelligent automations that streamline security response workflows • Build agentic automations that empower security engineers to work more efficiently and effectively • Collaborate with global security teams to identify high-impact opportunities for automation and tooling improvements • Leverage modern technologies and AWS services to create scalable solutions that enhance security operations • Deliver software that delights users with measurable efficiency and productivity gains About the team AWS Security Corporate Response (CorpSec) protects the corporate network environment that enables all Amazon employees to innovate securely for our customers. We respond to security issues across the corporate network with speed and precision, ensuring the world's largest cloud provider maintains the highest security standards. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences with amazing outcomes, don’t let it stop you from applying. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 3+ years of non-internship professional software development experience - 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience programming with at least one software programming language - Experience programming with Amazon Bedrock or another Gen AI platform. Preferred Qualifications: - 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually", "summaryDescription" : "Security Software Dev Engineer II, AWS Security Corporate Response at Amazon.com Services LLC. Skills: Security software, Automation, AWS services. Drive operational excellence. Design software processes", "postedDate" : "2026-06-13T13:03:49.850", "createdAt" : "2026-06-13T13:03:49.850", "lastUpdated" : "2026-06-15T06:05:22.074", "ingestTimestamp" : "2026-06-13T13:03:49.850", "mongoId" : "69d140072beec4dd3ddbe417", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10383075/apply", "salaryAnnualMin" : 143700, "salaryAnnualMax" : 194400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Software development", "System design", "Reliability", "Scaling", "Security software", "Automation", "AWS services", "Security response", "Automation development", "Tooling improvements", "Security operations", "AWS Security", "Corporate network" ], "skillCount" : 13, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "69cf3f042beec4dd3d933fce", "title" : "Security Industry Specialist, CISC - Customer and Industry Security Compliance", "company" : "Amazon.com Services LLC", "industry" : "Project/Program/Product Management--Non-Tech, Security Industry Specialist, amazon security", "salary" : { "min" : 102000.0, "max" : 178400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Austin, Texas, USA", "locations" : [ "Austin, Texas, USA" ], "certifications" : [ "CISSP", "CISA", "CRISC", "CISM" ], "timestamp" : "2026-06-15T07:48:51.866", "fingerprint" : "8546ee4eeab6f9f10a0eec2ac52b9cf875cdb3ddfa07c69021dc00b6e62a1005", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10382474/apply", "externalId" : "4a9c5dce-8f81-4640-abea-3109f24fc433", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Cloud computing", "professionalSkills" : [ "Security compliance", "Regulatory compliance", "Process improvement", "Risk interpretation", "Project management" ], "hardSkillsList" : [ "Security controls", "Control activities", "Remediation strategies" ], "hardSkills" : [ { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Control activities", "level" : "intermediate" }, { "name" : "Remediation strategies", "level" : "intermediate" } ], "majorSkills" : "Security compliance, Regulatory compliance, Audit support", "majorSkillsList" : [ "Security compliance", "Regulatory compliance", "Audit support" ], "coreResponsibilities" : "Understand Amazon security controls, Serve as subject-matter expert, Dive deep into control environment, Develop domain understanding, Develop technical understanding, Articulate compliance to stakeholders, Develop knowledge base, Vet knowledge base with partners, Communicate key risks to leadership, Communicate areas of program improvement, Seek diverse opinions, Coordinate improvement efforts, Develop understanding of industry requirements, Develop understanding of regulatory expectations, Drive process improvement initiatives, Prepare for assessments, Support assessments, Prepare for audits, Support audits, Identify applicable controls, Assess control readiness, Recommend remediation strategies, Track remediation activities, Drive individual projects, Manage individual projects, Drive individual campaigns, Manage individual campaigns, Communicate vision to management, Communicate deliverables to management, Communicate project status to management, Communicate vision to stakeholders, Communicate deliverables to stakeholders, Communicate project status to stakeholders, Deliver recommendations, Deliver risk interpretations, Identify process improvements, Innovate process improvements", "teamCollaboration" : "Technical teams; Business leaders; Business partners; Security stakeholders; Internal organizations; Control owners", "projectManagementSkills" : [ "Project management" ], "domainKnowledge" : "ISO 27001; SOC2 type 2; PCI DSS; CE; CE+; US Government regulations/standards; GDPR; NIST", "domainList" : [ "iso-27001", "soc2-type-2", "pci-dss", "ce", "us-government-regulations-standards", "gdpr", "nist" ], "domainSpecificKnowledge" : [ "ISO 27001", "SOC2 type 2", "PCI DSS", "CE", "CE+", "US Government regulations/standards", "GDPR", "NIST" ], "toolProficiency" : [ "GRC tooling" ], "communicationSkills" : "Leadership communication; Stakeholder communication", "innovationCreativity" : "Process improvements", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Deliver Trust; Deliver Audits; Deliver Attestations", "qualificationsBasic" : "5+ years assessing technical processes, Experience developing unified frameworks, Experience working with security teams, Experience working with business teams", "qualificationsPreferred" : "Bachelor's degree, BS degree, Demonstrated understanding of cloud computing services/architecture, Experience with GRC tooling, Standard industry recognized certification", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Stores Security and Regulatory Compliance (Stores SRC) organization is currently hiring for a Security Industry Specialist to join our Customer and Industry Security Compliance (CISC) team. SRC is comprised of teams that provide consistent high-level judgement to help Amazon businesses and subsidiaries comply with security regulations, policies and Amazon’s high bar for security. The CISC Team sits within Stores SRC and serves as the primary Security Assurance team for Enterprise certifications of ISO 27001, SOC2 type 2, PCI DSS, CE and CE+ as well as Compliance reviews and external security due diligence reviews for sales enablement in Amazon. The CISC team is hiring a Security Compliance Specialist to focus on preparing for and supporting third-party attestation audits. This includes preparing reports and regulatory/industry certifications along with developing standard security response protocols for third-party inquiries submitted to Amazon, Amazon’s corporate customers, business associates, and other third party (3P) partners. The SRC team obsesses over our customers and work to ensure that they are confident that Amazon cares about data confidentiality, integrity, and availability by providing third-party attestations as proof of compliance. To support successful attestations, the SRC team identifies applicable controls, assesses their effectiveness, and works with control owners to remediate the findings. The successful candidate will be a technically experienced and innovative security and compliance professional who has the ability to understand security processes, effectively communicate with technical teams and business leaders alike, and be able to drive automated and scalable process improvements across internal organizations and teams. Key job responsibilities - Understand and serve as a subject-matter expert around Amazon security controls - Dive deep into the Amazon control environment to develop broad domain and technical understanding of control activities and implementation to articulate compliance to key stakeholders. - Developing a knowledge base of Amazon control activities and implementations; vetting with business partners and security stakeholders - Communicate to leadership key risks and areas of program improvement, as well as seek diverse opinions and coordinate improvement efforts. - Develop broad domain and technical understanding of Industry requirements and regulatory expectations to drive process improvement initiatives - Preparing for and supporting assessments and audits for PCI DSS, SOC2, ISO 27001, US Government regulations/standards, and other certifications and assessments by identifying applicable controls, assessing control readiness for third-party assessments, recommending appropriate remediation strategies, and tracking remediation activities to completion. - Driving and managing individual projects and campaigns with excellent project management skills. - Clearly communicating vision, deliverables, and project status to management and key technical and business stakeholders. - Delivering recommendations and risk interpretations in a clear, concise and audience-specific format. A day in the life Daily activities involve the full spectrum and full lifecycle of GRC activities in support of a range of different audits and attestation activities, and once familiar with workflows, including identifying and innovating ways to improve existing processes About the team About Amazon Security Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. The CISC Team has a manager responsible for several PCI DSS team members, an ISO 27001 team member also responsible for CE/CE+ certification, a SOC2 type 2 team member, a Sales Enablement team member, and one dedicated to Regulatory compliance risk assessment and implementation. Culture is per the Privacy main mission - deliver Trust to internal and external customers, nailing the North star of delivering Audits, Attestations and making things clear, repeatable and smooth for all stakeholders. Basic Qualifications: - 5+ years experience assessing complex technical processes - Experience in developing unified frameworks that include more than one of the following: ISO, SOC, NIST, PCI DSS, common regulatory regimes e.g. GDPR, US relevant regulations, etc. - Direct experience in working with security and business teams on controls design to address regulatory compliance requirements Preferred Qualifications: - Bachelor's degree, or BS degree - Demonstrated understanding of cloud computing services/architecture - Experience with using GRC tooling - Have a standard industry recognized certification such as (but not limited to) CISSP, CISA, CRISC and CISM. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, TX, Austin - 102,000.00 - 178,400.00 USD annually USA, WA, Seattle - 102,000.00 - 178,400.00 USD annually", "summaryDescription" : "Security Industry Specialist, CISC - Customer and Industry Security Compliance at Amazon.com Services LLC. Skills: Security compliance, Regulatory compliance, Audit support. Understand Amazon security controls. Serve as subject-matter expert", "postedDate" : "2026-06-13T17:46:41.835", "createdAt" : "2026-06-13T17:46:41.835", "lastUpdated" : "2026-06-15T07:48:51.866", "ingestTimestamp" : "2026-06-13T17:46:41.835", "mongoId" : "69cf3f042beec4dd3d933fce", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10382474/apply", "salaryAnnualMin" : 102000, "salaryAnnualMax" : 178400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security controls", "Control activities", "Remediation strategies", "Security compliance", "Regulatory compliance", "Audit support", "Process improvement", "Risk interpretation", "Project management", "ISO 27001", "SOC2 type 2", "PCI DSS", "CE", "CE+", "US Government regulations/standards", "GDPR", "NIST", "CISSP", "CISA", "CRISC", "CISM", "GRC tooling" ], "skillCount" : 22, "jobCategory" : "project-management", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Security" }, { "id" : "6a2a678074d8ee00a06304c9", "title" : "Sr Security Operations Engineer, Detection and Response", "company" : "Fortis Games", "salary" : { "min" : 75000.0, "max" : 110000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Operations Engineer in the UK technology industry, adjusted for remote work and senior experience level." }, "location" : "Remote - United Kingdom", "locations" : [ "Remote - United Kingdom" ], "certifications" : [ "CISSP", "CISM", "GCIA", "GCIH", "GCFA", "GNFA", "GCTI", "OSCP" ], "timestamp" : "2026-06-14T19:55:47.586", "fingerprint" : "099f566d6415cb50d24530d957f361c7c2bbd4190eea851709a55000e2c5ab55", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.fortisgames.com/careers/?gh_jid=4704045005", "externalId" : "4704045005", "structuredLocations" : [ { "country" : "United Kingdom", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "United Kingdom", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, IAM, CloudTrail, GuardDuty, VPC flow logs, S3, Python, Bash, PowerShell, SQL", "professionalSkills" : [ "Detection engineering", "Incident response", "Security operations", "SOC requirements", "Operational risk", "Audit readiness", "Control evidence", "Third-party reviews", "Policy documentation", "Governance activities", "Security judgment" ], "hardSkillsList" : [ "Detection logic", "SIEM workflows", "EDR workflows", "Detection-as-code", "Deception techniques", "Log ingestion", "Log parsing", "Log enrichment", "Correlation logic", "Alert routing", "Case management", "Canary tokens", "Decoy accounts", "Honey assets", "Tripwires", "Severity triage", "Containment", "Remediation", "Post-incident findings", "Security visibility", "Response readiness" ], "hardSkills" : [ { "name" : "Detection logic", "level" : "intermediate" }, { "name" : "SIEM workflows", "level" : "intermediate" }, { "name" : "EDR workflows", "level" : "intermediate" }, { "name" : "Detection-as-code", "level" : "intermediate" }, { "name" : "Deception techniques", "level" : "intermediate" }, { "name" : "Log ingestion", "level" : "intermediate" }, { "name" : "Log parsing", "level" : "intermediate" }, { "name" : "Log enrichment", "level" : "intermediate" }, { "name" : "Correlation logic", "level" : "intermediate" }, { "name" : "Alert routing", "level" : "intermediate" }, { "name" : "Case management", "level" : "intermediate" }, { "name" : "Canary tokens", "level" : "intermediate" }, { "name" : "Decoy accounts", "level" : "intermediate" }, { "name" : "Honey assets", "level" : "intermediate" }, { "name" : "Tripwires", "level" : "intermediate" }, { "name" : "Severity triage", "level" : "intermediate" }, { "name" : "Containment", "level" : "intermediate" }, { "name" : "Remediation", "level" : "intermediate" }, { "name" : "Post-incident findings", "level" : "intermediate" }, { "name" : "Security visibility", "level" : "intermediate" }, { "name" : "Response readiness", "level" : "intermediate" } ], "majorSkills" : "Detection engineering, Incident response, Security operations", "majorSkillsList" : [ "Detection engineering", "Incident response", "Security operations" ], "coreResponsibilities" : "Build security operations capability, Mature security operations capability, Turn attacker behavior into detections, Turn telemetry into detections, Turn operational risk into detections, Turn attacker behavior into response workflows, Turn telemetry into response workflows, Turn operational risk into response workflows, Turn attacker behavior into measurable security improvements, Turn telemetry into measurable security improvements, Turn operational risk into measurable security improvements, Own detection systems, Improve detection systems, Own investigation systems, Improve investigation systems, Own response systems, Improve response systems, Build detection logic, Maintain detection logic, Improve SIEM workflows, Improve EDR workflows, Develop detection-as-code practices, Use deception techniques, Create high-signal visibility, Design detections, Implement detections, Test detections, Tune detections, Build detection-as-code practices, Improve security telemetry pipelines, Design deception capabilities, Operate deception capabilities, Lead incident response investigations, Support incident response investigations, Perform severity triage, Coordinate containment, Coordinate remediation, Produce post-incident findings, Improve security visibility, Improve response readiness, Support GRC activities, Collect audit evidence, Document technical controls, Provide third-party risk input, Document policy, Document SOPs", "teamCollaboration" : "Work closely with IT; Work closely with infrastructure; Work closely with engineering; Work closely with game development teams", "projectManagementSkills" : [ "Version control", "Peer review", "Repeatable deployment" ], "domainKnowledge" : "Cloud-native security; Identity security; Endpoint security; Network security; Application security; SaaS security", "domainList" : [ "cloud-native-security", "identity-security", "endpoint-security", "network-security", "application-security", "saas-security" ], "domainSpecificKnowledge" : [ "Cloud-native security", "Identity security", "Endpoint security", "Network security", "Application security", "SaaS security" ], "toolProficiency" : [ "CrowdStrike Falcon" ], "communicationSkills" : "Direct communication; Thoughtful communication; Clear findings", "documentationSkills" : "Policy documentation; Control documentation; SOP documentation", "innovationCreativity" : "Builder mindset", "problemSolvingSkills" : "Tackling difficult problems", "specialRequirements" : "Weekend-inclusive schedule", "outcomesObjectives" : "Measurable security improvements", "qualificationsBasic" : "6+ years experience in security operations, Experience writing, tuning, validating, and maintaining detections, Hands-on experience with SIEM platforms, Hands-on experience with EDR tools, Practical AWS security knowledge, Ability to script or automate security workflows, Working knowledge of audit evidence, Working knowledge of control documentation, Working knowledge of third-party reviews, Working knowledge of policies, Working knowledge of standards, Working knowledge of security frameworks, Ability to work a weekend-inclusive schedule", "qualificationsPreferred" : "Experience in gaming, Experience in entertainment, Experience in SaaS, Experience in lean cloud-native security teams, Experience with threat hunting, Experience with adversary emulation, Experience with SOAR, Experience with workflow automation, Experience with deception technologies, Experience with security data engineering, Experience with security metrics", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Who we are At Fortis Games we aspire to make great games that bring people together while redefining how game companies work. We believe in building a sense of belonging through our games, their communities, and how we operate and treat each other. Through our game communities, we will create powerful connections and lasting memories. We will foster a culture of diversity, equity and belonging where together our diverse skills, experiences and backgrounds impact the games we make. We are an early but mighty organization with a leadership team of game industry veterans. There are many opportunities for you to have a big impact on the products we'll be making as well as the overall direction of the company. If you're passionate about tackling difficult problems with direct and thoughtful communication and team first mentality, we may be the right place for you. About the Role Fortis Games is looking for a Senior Security Operations Engineer, Detection and Response to help build and mature our security operations capability. This is a senior, hands-on role for someone who understands SOC requirements at a high engineering level and can turn attacker behavior, telemetry, and operational risk into reliable detections, response workflows, and measurable security improvements. You will own and improve the systems we use to detect, investigate, and respond to threats across our corporate, cloud, identity, endpoint, and game development environments. You will build and maintain detection logic, improve SIEM and EDR workflows, develop detection-as-code practices, and use deception techniques to create high-signal visibility into suspicious activity. This role is ideal for someone who has a builder mindset, enjoys startup-style ownership, and wants to create practical security capability in a fast-moving environment. This is not primarily a GRC role; however, you should be comfortable spending approximately 20% of your time supporting audit readiness, control evidence, third-party reviews, policy documentation, and related governance activities where technical security judgment is required. This role requires participation in a weekend-inclusive schedule to support continuous security operations coverage across time zones. What You'll Achieve Design, implement, test, and tune detections across endpoint, identity, cloud, SaaS, network, and application telemetry. Build detection-as-code practices using version control, testing, peer review, documentation, and repeatable deployment methods. Improve SIEM and security telemetry pipelines, including log ingestion, parsing, enrichment, correlation logic, alert routing, and case management workflows. Design and operate practical deception capabilities such as canary tokens, decoy accounts, honey assets, and other high-signal tripwires. Lead and support incident response investigations — perform severity triage, coordinate containment and remediation, and produce clear post-incident findings. Work closely with IT, infrastructure, engineering, and game development teams to improve security visibility and response readiness across the environment. Support selected GRC activities including audit evidence collection, technical control documentation, third-party risk input, and policy or SOP documentation (approximately 20% of time). What You'll Need to Be Successful 6+ years of experience in security operations, detection engineering, incident response, or a similar hands-on technical security role. Strong experience writing, tuning, validating, and maintaining detections in SIEM, EDR, cloud, identity, or SaaS environments. Hands-on experience with SIEM platforms and EDR tools such as CrowdStrike Falcon or comparable technology. Practical AWS security knowledge including IAM, CloudTrail, GuardDuty, VPC flow logs, S3, and cloud-native detection opportunities. Ability to script or automate security workflows using Python, Bash, PowerShell, SQL, or similar tools. Working knowledge of audit evidence, control documentation, third-party reviews, policies, standards, and security frameworks. Ability to work a weekend-inclusive schedule to support continuous security operations coverage. Experience in gaming, entertainment, SaaS, or lean cloud-native security teams strongly preferred. BONUS! Experience with threat hunting, adversary emulation, SOAR or workflow automation, deception technologies, security data engineering, or security metrics would be valuable. Certifications such as CISSP, CISM, GCIA, GCIH, GCFA, GNFA, GCTI, or OSCP are welcome, but are not a replacement forhands-on technical judgmet. Why join us There are many reasons to join us, but here are a few: We strongly believe we are changing how games studios operate and at the core of what we do is making great games that create a connected community We're not just about making Games Where You Belong. We're also about building communities where our people belong. That's why Fortis is a thriving environment that celebrates diversity, embraces inclusivity, and fosters growth. Build and grow with a seasoned team of accomplished talent who have left an impactful mark in their disciplines, both in and out of gaming Fortis is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, protected veteran status, or any other basis protected by applicable law, and will not be discriminated against on the basis of disability.", "summaryDescription" : "Sr Security Operations Engineer, Detection and Response at Fortis Games. Skills: Detection engineering, Incident response, Security operations. Build security operations capability. Mature security operations capability", "postedDate" : "2026-06-11T18:47:09.970", "createdAt" : "2026-06-11T18:47:09.970", "lastUpdated" : "2026-06-14T19:55:47.586", "ingestTimestamp" : "2026-06-11T18:47:09.970", "mongoId" : "6a2a678074d8ee00a06304c9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Detection logic", "SIEM workflows", "EDR workflows", "Detection-as-code", "Deception techniques", "Log ingestion", "Log parsing", "Log enrichment", "Correlation logic", "Alert routing", "Case management", "Canary tokens", "Decoy accounts", "Honey assets", "Tripwires", "Severity triage", "Containment", "Remediation", "Post-incident findings", "Security visibility", "Response readiness", "Detection engineering", "Incident response", "Security operations", "SOC requirements", "Operational risk", "Audit readiness", "Control evidence", "Third-party reviews", "Policy documentation", "Governance activities", "Security judgment", "Version control", "Peer review", "Repeatable deployment", "Cloud-native security", "Identity security", "Endpoint security", "Network security", "Application security", "SaaS security", "CISSP", "CISM", "GCIA", "GCIH", "GCFA", "GNFA", "GCTI", "OSCP", "CrowdStrike Falcon" ], "skillCount" : 50, "jobCategory" : "other", "jobSubcategory" : "security", "dataQualityScore" : 0.8888889, "daysOld" : 3, "hasLocation" : true, "hasGeo" : false }, { "id" : "69d5e4962beec4dd3d931981", "title" : "AWS Security Operations/Incident Response Engineer", "company" : "Amazon Web Services, Inc.", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 136000.0, "max" : 184000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Herndon, Virginia, USA", "locations" : [ "Herndon, Virginia, USA" ], "certifications" : [ "GCIH", "GSEC", "Security+" ], "timestamp" : "2026-06-15T02:08:07.757", "fingerprint" : "0c97d9ed2d550c199650d60b2166fb48eb0e947fd71728e016fa19334f04915f", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10385139/apply", "externalId" : "f0a1c5b4-3fd4-4296-8fb3-027521c0d98b", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" } ], "locationText" : "Herndon, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Cryptography, Network security, Software security, Malware analysis, Forensics, Security operations, Incident response, Security intelligence", "professionalSkills" : [ "Risk assessment", "Information security" ], "hardSkillsList" : [ "Log analysis", "Forensics", "System development", "Tool development" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Forensics", "level" : "intermediate" }, { "name" : "System development", "level" : "intermediate" }, { "name" : "Tool development", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Security operations, Cloud security", "majorSkillsList" : [ "Incident response", "Security operations", "Cloud security" ], "coreResponsibilities" : "Respond to security incidents, Prevent future incidents, Design security responses, Coordinate security responses, Build security utilities, Build security tools, Communicate effectively, Instill best practices", "teamCollaboration" : "Multiple teams across organization; Security engineers", "domainKnowledge" : "Cloud security; National security program", "domainList" : [ "cloud-security", "national-security-program" ], "domainSpecificKnowledge" : [ "Cloud security", "National security program" ], "communicationSkills" : "Communicate at multiple levels", "problemSolvingSkills" : "Think like attacker; Think like defender", "specialRequirements" : "On-call responsibilities, US Citizen, TS/SCI with polygraph", "qualificationsBasic" : "Associate's degree or above, GCIH or GSEC or Security+, Current, active US Government Security Clearance of TS/SCI with Polygraph, US Citizen", "qualificationsPreferred" : "Experience with AWS products and services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Web Services (AWS) is the leading cloud provider, providing virtual infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS’s multi-tenant infrastructure. Governmental organizations are also looking to and depending on AWS for cloud solutions and services. The AWS Security Incident Response team is seeking a focused Security Engineer who can take on a leadership role in responding to security issues in support of our National Security program. This engineer will work as a part of a growing team of security engineers who are focused on protecting the AWS infrastructure that is used by our national security customers. Our security engineers perform many duties during an average day: log analysis, incident response, forensics, system/tooling development, and risk assessment, just to name a few. You must thrive in high-pressure situations, think like both an attacker and defender, and drive relevant teams to take the right actions in the right time frames to mitigate risks. They also need to balance technical risks against business needs and be able to articulate risks and mitigations to members of leadership at various levels. You should have a good mix of deep technical knowledge and a demonstrated background in information security. We value broad and deep technical knowledge, specifically in the fields of cryptography, network security, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active TS/SCI security clearance with polygraph. Key job responsibilities You should be able to accomplish most of the following: - Confidently and intelligently respond to security incidents, and proactively consider how to prevent the same type of incidents from occurring in the future. - Design and coordinate cohesive responses to security events that involve multiple teams across the organization. - Build security utilities and tools for internal use that enable you and your fellow Security Engineers to operate at high speed and wide scale. - Ability to communicate effectively at multiple levels of sensitivity, and multiple audiences. - Recognize, adopt and instill the best practices in security engineering fields throughout the organization: development, cryptography, network security, security operations, incident response, security intelligence. - Fulfill regular on-call responsibilities. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Associate's degree or above - GCIH (GIAC Certified Incident Handler) or GSEC (GIAC Security Essentials) or Security+ - Current, active US Government Security Clearance of TS/SCI with Polygraph Preferred Qualifications: - Experience with AWS products and services Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, VA, Herndon - 136,000.00 - 184,000.00 USD annually", "summaryDescription" : "AWS Security Operations/Incident Response Engineer at Amazon Web Services, Inc.. Skills: Incident response, Security operations, Cloud security. Respond to security incidents. Prevent future incidents", "postedDate" : "2026-06-13T01:35:14.469", "createdAt" : "2026-06-13T01:35:14.469", "lastUpdated" : "2026-06-15T02:08:07.757", "ingestTimestamp" : "2026-06-13T01:35:14.469", "mongoId" : "69d5e4962beec4dd3d931981", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10385139/apply", "salaryAnnualMin" : 136000, "salaryAnnualMax" : 184000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Log analysis", "Forensics", "System development", "Tool development", "Leadership", "Incident response", "Security operations", "Cloud security", "Risk assessment", "Information security", "National security program", "GCIH", "GSEC", "Security+" ], "skillCount" : 14, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "69d5e4972beec4dd3d931a94", "title" : "Security Software Dev Engineer II, AWS Security Corporate Response", "company" : "Amazon.com Services LLC", "industry" : "Software Development, amazon security", "salary" : { "min" : 143700.0, "max" : 194400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T01:59:48.176", "fingerprint" : "0ec424e9d2b35a133660b95692851a41677cd191ce06dcc34f0740d1755687ea", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10384824/apply", "externalId" : "07995b8f-98eb-495e-8b78-1e1267149e43", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS, Gen AI", "professionalSkills" : [ "Security response", "Automation development", "Tooling improvements", "Security operations" ], "hardSkillsList" : [ "Software development", "System design", "Reliability", "Scaling" ], "hardSkills" : [ { "name" : "Software development", "level" : "intermediate" }, { "name" : "System design", "level" : "intermediate" }, { "name" : "Reliability", "level" : "intermediate" }, { "name" : "Scaling", "level" : "intermediate" } ], "majorSkills" : "Security software development, Automation, AWS services", "majorSkillsList" : [ "Security software development", "Automation", "AWS services" ], "coreResponsibilities" : "Drive operational excellence, Design software processes, Implement software procedures, Streamline security response workflows, Build agentic automations, Empower security engineers, Collaborate with security teams, Identify automation opportunities, Identify tooling improvements, Leverage modern technologies, Create scalable solutions, Enhance security operations, Deliver software", "teamCollaboration" : "Global security teams", "domainKnowledge" : "AWS Security; Corporate network environment; Security response", "domainList" : [ "aws-security", "corporate-network-environment", "security-response" ], "domainSpecificKnowledge" : [ "AWS Security", "Corporate network environment", "Security response" ], "innovationCreativity" : "Develop innovative automations", "problemSolvingSkills" : "Troubleshoot security issues", "outcomesObjectives" : "Strengthen security posture; Impact engineer productivity; Enhance productivity gains", "qualificationsBasic" : "3+ years software development experience, 2+ years system design experience, Experience programming one language, Experience programming Gen AI platform", "qualificationsPreferred" : "3+ years full SDLC experience, Bachelor's in computer science", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Join us in developing and scaling security solutions that protect Amazon's global operations. As a Security Software Development Engineer, you'll create innovative automations and tools that transform how our security teams respond to threats and vulnerabilities. Your work will directly impact the productivity of security engineers worldwide and strengthen the security posture of AWS and for our customers. Key job responsibilities • Drive operational excellence by designing and implementing software processes, procedures, and intelligent automations that streamline security response workflows • Build agentic automations that empower security engineers to work more efficiently and effectively • Collaborate with global security teams to identify high-impact opportunities for automation and tooling improvements • Leverage modern technologies and AWS services to create scalable solutions that enhance security operations • Deliver software that delights users with measurable efficiency and productivity gains About the team AWS Security Corporate Response (CorpSec) protects the corporate network environment that enables all Amazon employees to innovate securely for our customers. We respond to security issues across the corporate network with speed and precision, ensuring the world's largest cloud provider maintains the highest security standards. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences with amazing outcomes, don’t let it stop you from applying. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 3+ years of non-internship professional software development experience - 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience programming with at least one software programming language - Experience programming with Amazon Bedrock or another Gen AI platform. Preferred Qualifications: - 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually", "summaryDescription" : "Security Software Dev Engineer II, AWS Security Corporate Response at Amazon.com Services LLC. Skills: Security software development, Automation, AWS services. Drive operational excellence. Design software processes", "postedDate" : "2026-06-13T02:52:31.356", "createdAt" : "2026-06-13T02:52:31.356", "lastUpdated" : "2026-06-15T01:59:48.176", "ingestTimestamp" : "2026-06-13T02:52:31.356", "mongoId" : "69d5e4972beec4dd3d931a94", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10384824/apply", "salaryAnnualMin" : 143700, "salaryAnnualMax" : 194400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Software development", "System design", "Reliability", "Scaling", "Security software development", "Automation", "AWS services", "Security response", "Automation development", "Tooling improvements", "Security operations", "AWS Security", "Corporate network environment" ], "skillCount" : 13, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "68c2e423f8b1b0376634c56d", "title" : "Senior Incident Response Engineer, Devices & Services Security", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 143300.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Hawthorne, California, USA", "locations" : [ "Hawthorne, California, USA" ], "certifications" : [ "CISSP", "CISM", "CRISC", "GCIH", "CCIR", "GCDA" ], "timestamp" : "2026-06-15T08:13:32.312", "fingerprint" : "3317fe4da3a6f579d3a5ccdc8430939e8a2a28d3935ec2384cf4f9b32c5db032", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3072356/apply", "externalId" : "2d1861cb-aa75-46c6-9067-b6a683645372", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Hawthorne", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.9128272,-118.3426122" } ], "locationText" : "Hawthorne, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, WAF, EDR/XDR, Python, PowerShell, Bash, Splunk, SOAR, SQL", "professionalSkills" : [ "Incident response", "Detection engineering", "Security operations", "Threat hunting", "Risk assessment", "Root cause analysis" ], "hardSkillsList" : [ "Log analysis", "Network telemetry", "Attacker TTPs", "MITRE ATT&CK", "Scripting", "Automation", "Forensic analysis", "Malware analysis", "SQL queries" ], "softSkillsList" : [ "Judgment under pressure", "Calmness" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Network telemetry", "level" : "intermediate" }, { "name" : "Attacker TTPs", "level" : "intermediate" }, { "name" : "MITRE ATT&CK", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" }, { "name" : "Forensic analysis", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "SQL queries", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Judgment under pressure" }, { "name" : "Calmness" } ], "majorSkills" : "Incident response, Security engineering, Detection engineering", "majorSkillsList" : [ "Incident response", "Security engineering", "Detection engineering" ], "coreResponsibilities" : "Investigate security incidents, Respond to security incidents, Drive rapid response, Drive effective response, Act as incident responder, Act as incident commander, Coordinate technical response, Keep stakeholders informed, Conduct post-mortem analysis, Identify root causes, Identify security improvement opportunities, Consult with builder teams, Ensure security designed into products, Collaborate with stakeholders, Execute incident response, Develop detections, Maintain detections, Respond to detections, Combat fraud, Combat abuse, Develop prevention capabilities, Develop detection capabilities, Develop response capabilities, Increase capability through automation, Increase efficiency through automation, Increase signal quality using AI/ML, Assist in runbook development, Assist in playbook tuning, Drive process improvements, Coordinate response efforts, Share learnings, Maintain WAF products, Support WAF products, Protect services from abuse, Drive WAF adoption, Evaluate WAF rules, Tune WAF rules, Develop SQL queries, Analyze log data, Extract information from logs, Extract information from databases, Extract information from services, Spearhead incident response, Drive decision-making, Conduct impact assessments, Implement containment strategies, Develop durable solutions, Proactively hunt threats, Create new detection mechanisms, Consult on security for new product designs, Analyze data, Identify hidden vulnerabilities", "teamCollaboration" : "Cross-functional teams; Global Amazon Security team; Other Incident Response teams", "projectManagementSkills" : [ "Runbook development", "Playbook tuning" ], "domainKnowledge" : "Devices and Services security; IoT platforms; Customer safety; Customer privacy; Fraud and abuse; Distributed systems; Cloud-native architectures; Service-oriented environments; IoT device security; Embedded systems", "domainList" : [ "devices-and-services-security", "iot-platforms", "customer-safety", "customer-privacy", "fraud-and-abuse", "distributed-systems", "cloud-native-architectures", "service-oriented-environments", "iot-device-security", "embedded-systems" ], "domainSpecificKnowledge" : [ "Devices and Services security", "IoT platforms", "Customer safety", "Customer privacy", "Fraud and abuse", "Distributed systems", "Cloud-native architectures", "Service-oriented environments", "IoT device security", "Embedded systems" ], "toolProficiency" : [ "AWS", "WAF", "EDR/XDR", "Splunk", "SOAR", "SQL" ], "communicationSkills" : "Clear communication; Stakeholder communication", "documentationSkills" : "Document work thoroughly; Contribute to post-incident reviews", "continuousLearning" : "Expand AI/ML skills", "innovationCreativity" : "Identify opportunities to raise the bar", "problemSolvingSkills" : "Problem-solvers; Investigative instincts; Troubleshooting", "specialRequirements" : "On-call rotation", "outcomesObjectives" : "Reduce or eliminate risk; Improve security for Amazon products; Improve security for Amazon services", "qualificationsBasic" : "5+ years cybersecurity experience, Incident response experience, Detection engineering experience, Security operations experience, Working knowledge of AWS, Working knowledge of WAF, Working knowledge of EDR/XDR tools, Working knowledge of network telemetry, Working knowledge of log analysis, Practical knowledge of attacker TTPs, Experience leveraging MITRE ATT&CK, Interpersonal skills, Communication skills, Proficiency with scripting, Proficiency with automation", "qualificationsPreferred" : "Proficiency with SIEM platform, Writing SIEM searches, Creating SIEM alerts, Analyzing SIEM log data, Forensic techniques, Threat hunting techniques, Identify adversary behavior, Detect anomalies, Analyze malware, Experience in large enterprise environments, Supporting multiple business lines, Experience securing distributed systems, Responding to incidents in distributed systems, Experience with cloud-native architectures, Experience with service-oriented environments, Experience with IoT device security, Experience with embedded systems forensics", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Are you ready to protect millions of homes and families as part of Amazon's elite Device Security Incident Response team? Join us in defending Ring, Blink, eero, and other industry-leading IoT platforms where every incident response decision impacts real people's safety and privacy. We’re looking for a seasoned security engineer to join a cross-functional Incident Response team supporting multiple Amazon devices brands. This is a hands-on role is focused on protecting the security and privacy of millions of customers by responding to incidents that impact real-world products and services. Our customers trust us with their safety and personal spaces, and it’s our responsibility to uphold that trust through strong, effective security practices. You will become a subject matter expert in the brands you support, leading our response to incidents through detection, assessment, containment, eradication, and post-mortem, while identifying opportunities to raise the bar on security for Amazon products and Customers. This high-visibility role requires clear communication, sound judgment under pressure, and the ability to work across organizational boundaries. You will be a strong advocate for customer safety and privacy, ensuring our devices deliver protection without compromise. You will document your work thoroughly, contribute to post-incident reviews, and collaborate with engineering teams to drive long-term improvements across the business. You will have opportunities to utilize, or expand your AI/ML skills, as we focus on automation. Key job responsibilities * Investigate and respond to security incidents in the Devices and Services org, setting the pace, and driving rapid, effective response that reduces or eliminates risk * Act as an incident responder or commander during active security events, coordinating technical response while keeping business stakeholders informed * Conduct thorough post-mortem analysis of security incidents, driving root cause identification, and identifying opportunities to improve security for Amazon products and services * Security consults with builder teams to ensure that security is designed into products from their inception * Collaborate with both technical, and non-technical stakeholders at all levels of the business, to execute rapid, and effective incident response * Develop, maintain, and respond to detections using Splunk/SOAR, as well as internal Amazon tooling * Combat various forms of fraud and abuse, by coordinating with business teams to develop comprehensive prevention/detection/response capabilities * Contribute to team efforts to increase capability and efficiency through automation of manual workloads and increase signal quality using AI/ML tools or approaches * Assist in runbook development, playbook tuning, and continuous process improvements * Participate in an on-call rotation (approx. two weekend days per month) * Work within a global, collaborative Amazon Security team where engineers and specialists support one another to solve complex problems and respond to security challenges together * Coordinate response efforts with other Incident Response teams at Amazon when appropriate, and share learnings * Maintain and support WAF products that protect Amazon services from abuse, drive adoption, evaluate or tune rules * Develop and update SQL queries to investigate security incidents, analyze log data, and extract relevant information from logs, databases and services. A day in the life As a Security Incident Response Engineer, you'll guide our team through complex security challenges impacting millions of customers. You'll: • Spearhead end-to-end incident response across Amazon's device ecosystem • Drive real-time decision-making during active incidents • Conduct impact assessments and implement containment strategies • Develop durable solutions with engineering teams • Proactively hunt threats and create new detection mechanisms • Consult on security for new product designs • Analyze data to identify hidden vulnerabilities We seek naturally curious problem-solvers who combine technical expertise with investigative instincts. You'll be the calm voice in the storm, transforming chaos into clarity and consistently safeguarding our customers' trust in Amazon's devices and services. About the team We're a tight-knit group of Security Engineers united by our mission to protect Amazon's customers. Though small, our impact is outsized. We've driven meaningful improvements across Amazon's device ecosystem through technical excellence and relentless customer advocacy. We're engineers first, approaching challenges with security expertise to create practical solutions. We champion \"better products\" over \"more products,\" solving problems collaboratively with empathy and partnership. We're not the team that just says \"no\" – we find secure paths forward. When incidents arise, we need our builders to feel relief when we arrive. We build bridges, not ivory towers, transforming security from a barrier into an enabler of innovation. Basic Qualifications: - * 5+ years of industry experience in cybersecurity, with a strong foundation in incident response, detection engineering, or security operations - * Working knowledge of AWS, WAF, EDR/XDR tools, network telemetry, and log analysis - * Practical knowledge of attacker tactics, techniques, and procedures (TTPs), with experience leveraging MITRE ATT&CK or similar frameworks to guide incident response or detection engineering - * Strong interpersonal and communication skills; able to calmly manage high-stakes coordination and decision-making - * Proficiency with scripting or automation (e.g., Python, PowerShell, Bash) Preferred Qualifications: - * Proficiency with at least one SIEM platform, including writing searches, creating alerts, and analyzing log data to support security investigations; experience with Splunk strongly preferred - * Exposure to AI/ML-driven anomaly detection, or behavior modeling tools - * Demonstrated ability to use forensic or threat hunting techniques to identify adversary behavior, detect anomalies, analyze potential malware to support containment and eradication - * Security certifications such as CISSP, CISM, CRISC, GCIH, CCIR, GCDA, etc. - * Prior experience in large enterprise environments or supporting multiple business lines - * Experience securing or responding to incidents in large-scale distributed systems, including cloud-native architectures and service-oriented environments - * Experience with IOT device security and embedded systems forensics Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Senior Incident Response Engineer, Devices & Services Security at Amazon.com Services LLC. Skills: Incident response, Security engineering, Detection engineering. Investigate security incidents. Respond to security incidents", "postedDate" : "2026-06-13T10:06:54.792", "createdAt" : "2026-06-13T10:06:54.792", "lastUpdated" : "2026-06-15T08:13:32.312", "ingestTimestamp" : "2026-06-13T10:06:54.792", "mongoId" : "68c2e423f8b1b0376634c56d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3072356/apply", "salaryAnnualMin" : 143300, "salaryAnnualMax" : 247600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Log analysis", "Network telemetry", "Attacker TTPs", "MITRE ATT&CK", "Scripting", "Automation", "Forensic analysis", "Malware analysis", "SQL queries", "Judgment under pressure", "Calmness", "Incident response", "Security engineering", "Detection engineering", "Security operations", "Threat hunting", "Risk assessment", "Root cause analysis", "Runbook development", "Playbook tuning", "Devices and Services security", "IoT platforms", "Customer safety", "Customer privacy", "Fraud and abuse", "Distributed systems", "Cloud-native architectures", "Service-oriented environments", "IoT device security", "Embedded systems", "CISSP", "CISM", "CRISC", "GCIH", "CCIR", "GCDA", "AWS", "WAF", "EDR/XDR", "Splunk", "SOAR", "SQL" ], "skillCount" : 42, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Security" }, { "id" : "6a0de91258b93c861eb99043", "title" : "Rapid Response RN", "company" : "Tampa General Hospital", "industry" : "Healthcare", "salary" : { "min" : 98000.0, "max" : 135000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Rapid Response RN in Tampa, FL, adjusted for the healthcare industry and hospital size." }, "location" : "United States-Florida-Tampa", "locations" : [ "United States-Florida-Tampa", "
TGH Main Campus (TGHMAIN)
1 Tampa General Circle

Tampa, 33601

" ], "certifications" : [ "BLS", "ACLS", "PALS" ], "timestamp" : "2026-06-16T05:57:11.005", "fingerprint" : "a6e37ea7b731a3a467a87c900bafa7e8791b1d202db2f7c1042d96b338099342", "source" : "taleo", "language" : "en", "applyUrl" : "https://tas-tgh.taleo.net/careersection/ex/jobdetail.ftl?job=674017", "externalId" : "674017", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tampa", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "27.9449854,-82.4583107" } ], "locationText" : "Tampa, Florida, United States", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Nursing care", "Patient assessment", "Critical thinking", "Healthcare team collaboration" ], "hardSkillsList" : [ "Nursing documentation", "Patient rights assurance" ], "hardSkills" : [ { "name" : "Nursing documentation", "level" : "intermediate" }, { "name" : "Patient rights assurance", "level" : "intermediate" } ], "majorSkills" : "Rapid response nursing, Critical care, Emergency department care", "majorSkillsList" : [ "Rapid response nursing", "Critical care", "Emergency department care" ], "coreResponsibilities" : "Deliver nursing care to patients, Plan nursing care, Implement nursing care, Document nursing assessments, Report situations requiring intervention, Formulate goal directed plan of care, Communicate goal directed plan of care, Assure patient rights, Perform nursing assessment for complex issues, Intervene with complex patient issues, Manage complex patient issues, Respond to requests from direct care staff, Respond to requests from medical staff, Collaborate with healthcare team, Perform job duties per hospital mission", "teamCollaboration" : "Healthcare team collaboration", "domainKnowledge" : "Nursing; Critical care; Emergency department", "domainList" : [ "nursing", "critical-care", "emergency-department" ], "domainSpecificKnowledge" : [ "Nursing", "Critical care", "Emergency department" ], "communicationSkills" : "Communicate plan of care", "documentationSkills" : "Nursing documentation", "problemSolvingSkills" : "Critical thinking", "qualificationsBasic" : "Graduate of accredited School of Nursing, Registered Nurse in Florida, Five years' experience as professional nurse, Two years critical care/emergency department experience, BLS upon hire, ACLS upon hire, PALS upon hire", "qualificationsPreferred" : "National certification in critical care, National certification in emergency nursing, National certification in similar nursing specialty", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Under general supervision, following established policies, procedures, and professional guidelines, delivers nursing care to patients throughout the life span, neonatal through geriatric. Plans and implements nursing care; documents nursing assessments, identifies and reports situations requiring further intervention, formulates and communications goal directed plan of care; assures patient rights. Provides further nursing assessment and critical thinking to manage/intervene with patients presenting questionable or complex issues, or clinical deterioration in response to requests from direct care staff and medical staff, or from clinical concerns/observations during targeted rounds. Collaborates with all members of the healthcare team in regard to patient treatments, interventions and disposition according to existing policies and protocols. Responsible for performing job duties in accordance with the mission, vision and values of Tampa General Hospital and principles of quality improvement. Graduate of an accredited School of Nursing. Licensure to practice as a Registered Nurse in the State of Florida. Five years' experience as a professional nurse, including minimum two years in a critical care and/or hospital emergency department. Maintenance of BLS, ACLS and PALS is required upon hire. Achievement of national certification in critical care, emergency nursing or similar nursing specialty, within one year of hire is required . Tampa", "summaryDescription" : "Rapid Response RN at Tampa General Hospital. Skills: Rapid response nursing, Critical care, Emergency department care. Deliver nursing care to patients. Plan nursing care", "createdAt" : "2026-06-14T18:50:49.756", "lastUpdated" : "2026-06-16T05:57:11.005", "ingestTimestamp" : "2026-06-14T18:50:49.756", "mongoId" : "6a0de91258b93c861eb99043", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 98000, "salaryAnnualMax" : 135000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Nursing documentation", "Patient rights assurance", "Rapid response nursing", "Critical care", "Emergency department care", "Nursing care", "Patient assessment", "Critical thinking", "Healthcare team collaboration", "Nursing", "Emergency department", "BLS", "ACLS", "PALS" ], "skillCount" : 14, "jobCategory" : "healthcare", "jobSubcategory" : "support", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.98 }, { "id" : "6a307f5cf292fd229c05862a", "title" : "Senior Customer Engineer, National Security", "company" : "Google", "industry" : "Government", "salary" : { "min" : 215000.0, "max" : 330000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Customer Engineer in Reston, VA, adjusted for Google's size and industry, and senior experience level." }, "location" : "[Reston, VA, USA, [Reston, VA, USA], Reston, null, VA, US]", "locations" : [ "[Reston, VA, USA, [Reston, VA, USA], Reston, null, VA, US]", "[Washington D.C., DC, USA, [Washington, DC, USA], Washington, null, DC, US]" ], "timestamp" : "2026-06-16T12:15:17.458", "fingerprint" : "a707a9edaf36c15b69f78e5656356a7726a52d9f79c14c288a5d8b278a33b2a3", "source" : "google", "language" : "en", "externalId" : "84474898595881670", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Reston", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "remote", "geo" : "38.9532820,-77.3464516" } ], "locationText" : "Reston, Virginia, United States", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : true, "summaryDescription" : "Senior Customer Engineer, National Security at Google", "postedDate" : "2026-06-16T01:48:41.926", "createdAt" : "2026-06-16T01:48:41.926", "lastUpdated" : "2026-06-16T12:15:17.458", "ingestTimestamp" : "2026-06-16T01:48:41.926", "mongoId" : "6a307f5cf292fd229c05862a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 215000, "salaryAnnualMax" : 330000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.6666667, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c8c8374d8ee00a0975b5a", "title" : "Incident Response Lead", "company" : "WHOOP", "industry" : "Information Security", "salary" : { "min" : 130000.0, "max" : 170000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Boston, MA", "locations" : [ "Boston, MA" ], "certifications" : [ "GCIH", "GCFA", "CISSP" ], "timestamp" : "2026-06-15T12:05:20.732", "fingerprint" : "bddddbefd297cde0f29d2286596a2e145615d870cd25df0e237c4a59536e642a", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/whoop/90e465bb-f1fb-4763-892e-320780db4f6f/application", "externalId" : "90e465bb-f1fb-4763-892e-320780db4f6f", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Boston", "state" : "Massachusetts", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "42.3588336,-71.0578303" } ], "locationText" : "Boston, Massachusetts, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 7, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "SIEM, EDR, Cloud security monitoring, Digital forensics, Threat detection", "professionalSkills" : [ "Incident command", "Root cause analysis", "Breach impact assessment", "Regulatory notification" ], "hardSkillsList" : [ "Incident response", "Digital forensics", "Threat detection", "SOC operations", "Host investigation", "Cloud investigation", "Log investigation" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Digital forensics", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "SOC operations", "level" : "intermediate" }, { "name" : "Host investigation", "level" : "intermediate" }, { "name" : "Cloud investigation", "level" : "intermediate" }, { "name" : "Log investigation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Digital forensics, Threat detection, SOC operations", "majorSkillsList" : [ "Incident response", "Digital forensics", "Threat detection", "SOC operations" ], "coreResponsibilities" : "Lead incident response activities, Serve as incident commander, Partner with SOC, Validate alerts, Guide investigations, Drive containment, Drive eradication, Conduct host investigations, Conduct cloud investigations, Conduct log investigations, Coordinate with forensic firms, Maintain incident response playbooks, Improve escalation procedures, Improve communication workflows, Lead post-incident reviews, Lead root cause analysis, Define remediation actions, Track remediation actions, Develop tabletop exercises, Execute incident simulations, Support breach impact assessments, Support regulatory notification, Improve detection capabilities, Improve response capabilities, Own incident metrics, Own incident reporting, Report response times, Report trends, Report risk reduction", "teamCollaboration" : "24x7 SOC provider; Cross-functional stakeholders; Security, IT, GRC, Legal", "projectManagementSkills" : [ "Remediation tracking" ], "domainKnowledge" : "Cloud-native environments; MITRE ATT&CK; GDPR; HIPAA; PCI", "domainList" : [ "cloud-native-environments", "mitre-att-ck", "gdpr", "hipaa", "pci" ], "domainSpecificKnowledge" : [ "Cloud-native environments", "MITRE ATT&CK", "GDPR", "HIPAA", "PCI" ], "toolProficiency" : [ "SIEM platforms", "EDR tools", "Cloud monitoring" ], "communicationSkills" : "Cross-functional coordination", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "On-call escalation rotation", "outcomesObjectives" : "Systemic risk reduction", "qualificationsBasic" : "7+ years incident response, Lead incident investigations, Host, cloud, log investigations, SIEM platforms expertise, EDR tools expertise, Cloud security monitoring expertise, Work with external SOC, Attack frameworks understanding, GDPR, HIPAA, PCI support, Excellent communication skills, Bachelor's degree or certifications", "qualificationsPreferred" : "GCIH certification, GCFA certification, CISSP certification", "workSiteFlexibility" : "Onsite", "rawDescription" : "At WHOOP, we’re on a mission to unlock human performance and healthspan. Our wearable technology provides personalized insights that help millions of members better understand their bodies and make smarter decisions about training, recovery, and lifestyle. We are seeking a Incident Response Lead to drive security incident response across the enterprise. In this role, you will serve as the primary internal escalation point and hands-on responder for security incidents, partnering closely with WHOOP’s 24x7 SOC provider and cross-functional stakeholders to investigate, contain, and remediate threats. This is a highly technical individual contributor role with significant ownership and visibility across Security, IT, GRC, and Legal. RESPONSIBILITIES: - - Lead hands-on incident response activities, serving as the primary internal escalation point for security events - Serve as the central incident commander across Security, IT, GRC, and Legal during active incidents - Partner with the SOC to validate alerts, guide investigations, and drive containment and eradication efforts - Conduct host, cloud, and log-based investigations, and coordinate with external forensic firms when needed - Maintain and continuously improve incident response playbooks, escalation procedures, and communication workflows - Lead post-incident reviews and root cause analysis, ensuring remediation actions are clearly defined and tracked - Develop and execute tabletop exercises and incident simulations to test and strengthen response readiness - Partner with GRC and Legal to support breach impact assessments and regulatory notification processes - Drive continuous improvement of detection and response capabilities across SIEM, EDR, cloud monitoring, and identity systems - Own incident metrics and reporting, including response times, trends, and systemic risk reduction initiatives - Participate in an on-call escalation rotation to provide after-hours incident leadership when required QUALIFICATIONS: - - 7+ years of experience in incident response, digital forensics, threat detection, or SOC operations - Proven experience leading incident investigations in complex, cloud-native environments - Strong experience conducting host, cloud, and log-based investigations - Hands-on expertise with SIEM platforms, EDR tools, and cloud security monitoring - Experience working with external SOC or MDR providers - Strong understanding of attack frameworks (MITRE ATT&CK) and their application to detection and response - Experience supporting breach response obligations under GDPR, HIPAA, PCI, or similar regulatory frameworks - Excellent communication skills with the ability to coordinate cross-functional stakeholders under pressure - Bachelor’s degree or relevant certifications (GCIH, GCFA, CISSP, or equivalent) This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office. Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply. WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values. At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success. The U.S. base salary range for this full-time position is $130,000 - $170,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training. In addition to the base salary, the successful candidate will also receive benefits and a generous equity package. These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements. ", "summaryDescription" : "Incident Response Lead at WHOOP. Skills: Incident response, Digital forensics, Threat detection, SOC operations. Lead incident response activities. Serve as incident commander", "createdAt" : "2026-06-14T04:00:46.619", "lastUpdated" : "2026-06-15T12:05:20.732", "ingestTimestamp" : "2026-06-14T04:00:46.619", "mongoId" : "6a2c8c8374d8ee00a0975b5a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 130000, "salaryAnnualMax" : 170000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Incident response", "Digital forensics", "Threat detection", "SOC operations", "Host investigation", "Cloud investigation", "Log investigation", "Leadership", "Incident command", "Root cause analysis", "Breach impact assessment", "Regulatory notification", "Remediation tracking", "Cloud-native environments", "MITRE ATT&CK", "GDPR", "HIPAA", "PCI", "GCIH", "GCFA", "CISSP", "SIEM platforms", "EDR tools", "Cloud monitoring" ], "skillCount" : 24, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "69cf26132beec4dd3d90b545", "title" : "Rapid Response RN", "company" : "Tampa General Hospital", "industry" : "Healthcare", "salary" : { "min" : 85000.0, "max" : 115000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-seniority RN in Tampa, adjusted for the healthcare industry and hospital size." }, "location" : "United States-Florida-Tampa", "locations" : [ "United States-Florida-Tampa", "
TGH Main Campus (TGHMAIN)
1 Tampa General Circle

Tampa, 33601

" ], "certifications" : [ "Registered Nurse license", "BLS", "ACLS", "PALS", "National certification in critical care", "National certification in emergency nursing", "National certification in similar nursing specialty" ], "timestamp" : "2026-06-15T12:57:15.200", "fingerprint" : "1c0208561bdc62d74b15b149bd1525505ad401a698047fc1b528b00d201b4f8c", "source" : "taleo", "language" : "en", "applyUrl" : "https://tgh.taleo.net/careersection/ex/jobdetail.ftl?job=674017", "externalId" : "674017", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tampa", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "27.9449854,-82.4583107" } ], "locationText" : "Tampa, Florida, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Nursing care", "Patient assessment", "Critical thinking", "Healthcare team collaboration" ], "hardSkillsList" : [ "Nursing assessment", "Patient care planning" ], "softSkillsList" : [ "Critical thinking" ], "hardSkills" : [ { "name" : "Nursing assessment", "level" : "intermediate" }, { "name" : "Patient care planning", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Critical thinking" } ], "majorSkills" : "Rapid Response Nursing, Critical Care, Emergency Department", "majorSkillsList" : [ "Rapid Response Nursing", "Critical Care", "Emergency Department" ], "coreResponsibilities" : "Deliver nursing care to patients, Plan nursing care, Implement nursing care, Document nursing assessments, Report situations requiring intervention, Formulate goal directed plan, Communicate goal directed plan, Assure patient rights, Perform nursing assessment, Apply critical thinking, Manage patients with complex issues, Intervene with patients, Respond to requests from staff, Collaborate with healthcare team, Perform job duties", "teamCollaboration" : "Collaborate with healthcare team", "domainKnowledge" : "Nursing; Patient care; Critical care; Emergency department", "domainList" : [ "nursing", "patient-care", "critical-care", "emergency-department" ], "domainSpecificKnowledge" : [ "Nursing", "Patient care", "Critical care", "Emergency department" ], "communicationSkills" : "Communicate plan", "documentationSkills" : "Document nursing assessments", "problemSolvingSkills" : "Critical thinking", "outcomesObjectives" : "Assure patient rights; Achieve national certification within one year", "qualificationsBasic" : "Graduate of accredited School of Nursing, Registered Nurse in Florida, Five years' experience as professional nurse, Two years critical care experience, Two years hospital emergency department experience, Maintenance of BLS, Maintenance of ACLS, Maintenance of PALS", "qualificationsPreferred" : "National certification in critical care, National certification in emergency nursing, National certification in similar nursing specialty", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Under general supervision, following established policies, procedures, and professional guidelines, delivers nursing care to patients throughout the life span, neonatal through geriatric. Plans and implements nursing care; documents nursing assessments, identifies and reports situations requiring further intervention, formulates and communications goal directed plan of care; assures patient rights. Provides further nursing assessment and critical thinking to manage/intervene with patients presenting questionable or complex issues, or clinical deterioration in response to requests from direct care staff and medical staff, or from clinical concerns/observations during targeted rounds. Collaborates with all members of the healthcare team in regard to patient treatments, interventions and disposition according to existing policies and protocols. Responsible for performing job duties in accordance with the mission, vision and values of Tampa General Hospital and principles of quality improvement. Graduate of an accredited School of Nursing. Licensure to practice as a Registered Nurse in the State of Florida. Five years' experience as a professional nurse, including minimum two years in a critical care and/or hospital emergency department. Maintenance of BLS, ACLS and PALS is required upon hire. Achievement of national certification in critical care, emergency nursing or similar nursing specialty, within one year of hire is required . Tampa", "summaryDescription" : "Rapid Response RN at Tampa General Hospital. Skills: Rapid Response Nursing, Critical Care, Emergency Department. Deliver nursing care to patients. Plan nursing care", "createdAt" : "2026-06-14T01:10:22.844", "lastUpdated" : "2026-06-15T12:57:15.200", "ingestTimestamp" : "2026-06-14T01:10:22.844", "mongoId" : "69cf26132beec4dd3d90b545", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 85000, "salaryAnnualMax" : 115000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Nursing assessment", "Patient care planning", "Critical thinking", "Rapid Response Nursing", "Critical Care", "Emergency Department", "Nursing care", "Patient assessment", "Healthcare team collaboration", "Nursing", "Patient care", "Critical care", "Emergency department", "Registered Nurse license", "BLS", "ACLS", "PALS", "National certification in critical care", "National certification in emergency nursing", "National certification in similar nursing specialty" ], "skillCount" : 20, "jobCategory" : "healthcare", "jobSubcategory" : "support", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c950f74d8ee00a098c2a3", "title" : "Distinguished Engineer, End-to-End Security Architect", "company" : "Graphcore", "industry" : "Technology", "salary" : { "min" : 350000.0, "max" : 550000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an Executive Distinguished Engineer in Austin, United States, adjusted for the technology industry and company size." }, "location" : "Austin, Texas, United States", "locations" : [ "Austin", "Texas", "United States" ], "timestamp" : "2026-06-15T12:50:39.548", "fingerprint" : "f25244994aa3c7d247ea7a2aba9fa2dcc97964671d12b75e3946335030484cdb", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/graphcore/jobs/8589876002", "externalId" : "8589876002", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 10, "experienceMaxYears" : 99, "experienceLevel" : "Executive", "technicalSkills" : "AI, Machine Learning, Hardware, Software, Systems Infrastructure, Firmware, APIs, Cloud Security, Infrastructure Security, Network Security, Data Centre", "professionalSkills" : [ "Security Architecture", "Platform Security", "Service Security", "Threat Modelling", "Zero-Trust Principles", "Tenant Isolation", "Access Management", "Cryptographic Controls", "Secure Operations", "Network Architecture", "Segmentation Strategies", "Data Protection", "Audit Requirements", "Incident Response", "Security Posture", "Risk Management", "Stakeholder Management", "Technical Leadership", "Architectural Guidance", "Design Review" ], "hardSkillsList" : [ "Security Architecture", "Platform Security", "Cloud Security", "Infrastructure Security", "Service Security", "Threat Modelling", "Zero-Trust Principles", "Tenant Isolation", "Privileged Access Management", "Cryptographic Controls", "Secure Operations", "Trusted Execution", "Secure Boot", "Attestation", "Firmware Integrity", "Supply-Chain Security", "Physical Security", "Network Security Architecture", "Segmentation", "Management-Plane Protection", "Secure Communications", "Access Control", "Authentication", "Authorization", "Secrets Management", "Encryption", "Key Management", "Data Protection", "Audit Requirements", "Access Review", "Emergency Access", "Logging", "Monitoring", "Telemetry", "Incident Response", "Security Assurance", "Security Posture Assessment", "Risk-Based Decisions", "Penetration Testing", "Security Questionnaires", "Technical Assurance" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Security Architecture", "level" : "intermediate" }, { "name" : "Platform Security", "level" : "intermediate" }, { "name" : "Cloud Security", "level" : "intermediate" }, { "name" : "Infrastructure Security", "level" : "intermediate" }, { "name" : "Service Security", "level" : "intermediate" }, { "name" : "Threat Modelling", "level" : "intermediate" }, { "name" : "Zero-Trust Principles", "level" : "intermediate" }, { "name" : "Tenant Isolation", "level" : "intermediate" }, { "name" : "Privileged Access Management", "level" : "intermediate" }, { "name" : "Cryptographic Controls", "level" : "intermediate" }, { "name" : "Secure Operations", "level" : "intermediate" }, { "name" : "Trusted Execution", "level" : "intermediate" }, { "name" : "Secure Boot", "level" : "intermediate" }, { "name" : "Attestation", "level" : "intermediate" }, { "name" : "Firmware Integrity", "level" : "intermediate" }, { "name" : "Supply-Chain Security", "level" : "intermediate" }, { "name" : "Physical Security", "level" : "intermediate" }, { "name" : "Network Security Architecture", "level" : "intermediate" }, { "name" : "Segmentation", "level" : "intermediate" }, { "name" : "Management-Plane Protection", "level" : "intermediate" }, { "name" : "Secure Communications", "level" : "intermediate" }, { "name" : "Access Control", "level" : "intermediate" }, { "name" : "Authentication", "level" : "intermediate" }, { "name" : "Authorization", "level" : "intermediate" }, { "name" : "Secrets Management", "level" : "intermediate" }, { "name" : "Encryption", "level" : "intermediate" }, { "name" : "Key Management", "level" : "intermediate" }, { "name" : "Data Protection", "level" : "intermediate" }, { "name" : "Audit Requirements", "level" : "intermediate" }, { "name" : "Access Review", "level" : "intermediate" }, { "name" : "Emergency Access", "level" : "intermediate" }, { "name" : "Logging", "level" : "intermediate" }, { "name" : "Monitoring", "level" : "intermediate" }, { "name" : "Telemetry", "level" : "intermediate" }, { "name" : "Incident Response", "level" : "intermediate" }, { "name" : "Security Assurance", "level" : "intermediate" }, { "name" : "Security Posture Assessment", "level" : "intermediate" }, { "name" : "Risk-Based Decisions", "level" : "intermediate" }, { "name" : "Penetration Testing", "level" : "intermediate" }, { "name" : "Security Questionnaires", "level" : "intermediate" }, { "name" : "Technical Assurance", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Security Architecture, Platform Security, Cloud Security, Infrastructure Security", "majorSkillsList" : [ "Security Architecture", "Platform Security", "Cloud Security", "Infrastructure Security" ], "coreResponsibilities" : "Own security architecture for inference service platform, Define security principles, Define threat models, Define trust boundaries, Define tenant isolation requirements, Define architectural standards, Establish security requirements for deployment environments, Establish physical security controls, Establish operational controls, Establish access management controls, Establish asset protection controls, Define platform security requirements, Define hardware security requirements, Define firmware security requirements, Define secure boot requirements, Define attestation requirements, Define software integrity requirements, Define lifecycle management requirements, Lead design of network isolation controls, Lead design of service isolation controls, Lead design of secure communications, Lead design of segmentation strategies, Lead design of administrative access protections, Own security architecture for authentication, Own security architecture for authorization, Own security architecture for secrets management, Own security architecture for encryption, Own security architecture for key management, Own security architecture for data protection, Define privileged access management approaches, Define audit requirements, Define access review processes, Define emergency access procedures, Establish logging requirements, Establish monitoring requirements, Establish telemetry requirements, Establish incident response requirements, Establish security assurance requirements, Partner with engineering teams, Partner with operations teams, Ensure security requirements implemented, Ensure security requirements maintained, Ensure security requirements validated, Assess security posture, Manage risk-based decisions, Support customer security reviews, Support audits, Support penetration testing activities, Support security questionnaires, Support technical assurance discussions, Provide technical leadership, Provide architectural guidance, Provide mentoring, Provide design review expertise", "teamCollaboration" : "Cross-functional teams; Security architecture teams; Infrastructure engineering teams; Networking teams; Site reliability engineering teams; Platform software teams; Firmware teams; Data centre operations teams; Compliance teams; Legal teams; Customer engineering teams; Customer security teams; Engineering teams; Operations teams; Customer-facing teams", "domainKnowledge" : "AI Compute; AI Infrastructure; AI Services; Trusted Execution; Confidential Computing; Secure Enclaves; Measured Boot; Remote Attestation; High-Performance Networking; Accelerator Ecosystem; Supply-Chain Risk; Secure Manufacturing; Asset Lifecycle; Secure Disposal; Cryptographic Technologies; Security Trends", "domainList" : [ "ai-compute", "ai-infrastructure", "ai-services", "trusted-execution", "confidential-computing", "secure-enclaves", "measured-boot", "remote-attestation", "high-performance-networking", "accelerator-ecosystem", "supply-chain-risk", "secure-manufacturing", "asset-lifecycle", "secure-disposal", "cryptographic-technologies", "security-trends" ], "domainSpecificKnowledge" : [ "AI Compute", "AI Infrastructure", "AI Services", "Trusted Execution", "Confidential Computing", "Secure Enclaves", "Measured Boot", "Remote Attestation", "High-Performance Networking", "Accelerator Ecosystem", "Supply-Chain Risk", "Secure Manufacturing", "Asset Lifecycle", "Secure Disposal", "Cryptographic Technologies", "Security Trends" ], "toolProficiency" : [ "JIRA" ], "communicationSkills" : "Technical; Non-technical audiences", "remoteFriendly" : false, "workSiteFlexibility" : "Flexible", "rawDescription" : "About us Graphcore is one of the world’s leading innovators in Artificial Intelligence compute. It is developing hardware, software and systems infrastructure that will unlock the next generation of AI breakthroughs and power the widespread adoption of AI solutions across every industry. As part of the SoftBank Group, Graphcore is a member of an elite family of companies responsible for some of the world’s most transformative technologies. Together, they share a bold vision: to enable Artificial Super Intelligence and ensure its benefits are accessible to everyone. Graphcore’s teams are drawn from diverse backgrounds and bring a broad range of skills and perspectives. A melting pot of AI research specialists, silicon designers, software engineers and systems architects, Graphcore fosters continuous learning and innovation. Job Summary Reporting into the Systems Engineering organisation, the Distinguished Engineer, End-to-End Security Architect will define and lead the security architecture for Graphcore’s inference service platform. This role is responsible for establishing a comprehensive security strategy spanning platform, infrastructure, networking, service operations, customer assurance, and compliance readiness. Working across multiple engineering and operational functions, the successful candidate will provide technical leadership, drive security requirements, and ensure the platform delivers robust protection, resilience, and trust for customers. The Team You will work closely with teams across security architecture, infrastructure engineering, networking, site reliability engineering, platform software, firmware, data centre operations, compliance, legal, customer engineering, and customer security. The team collaborates across the business to deliver secure, reliable, and scalable AI infrastructure and services while supporting customer assurance, regulatory requirements, and operational excellence. Responsibilities and Duties Own the end-to-end security architecture for the inference service platform, covering infrastructure, networking, APIs, operational controls, monitoring, and customer assurance. Define security principles, threat models, trust boundaries, tenant isolation requirements, and architectural standards for the service. Establish security requirements for deployment environments, including physical security, operational controls, access management, and asset protection. Define platform security requirements across hardware, firmware, secure boot, attestation, software integrity, and lifecycle management. Lead the design of network and service isolation controls, secure communications, segmentation strategies, and administrative access protections. Own security architecture for authentication, authorisation, secrets management, encryption, key management, and data protection controls. Define privileged access management approaches, audit requirements, access review processes, and emergency access procedures. Establish logging, monitoring, telemetry, incident response, and security assurance requirements across the service lifecycle. Partner with engineering and operations teams to ensure security requirements are effectively implemented, maintained, and validated. Assess security posture against customer, contractual, regulatory, and internal requirements, managing risk-based decisions where required. Support customer security reviews, audits, penetration testing activities, security questionnaires, and technical assurance discussions. Provide technical leadership, architectural guidance, mentoring, and design review expertise across multiple teams and disciplines. Candidate Profile Essential Advanced degree in Computer Science, Computer Engineering, Cybersecurity, Electrical Engineering, or a related technical discipline, or equivalent practical experience. Significant experience in security architecture, platform security, cloud security, infrastructure security, or large-scale service security. Demonstrated experience defining and owning security architecture for customer-facing platforms, infrastructure services, or large-scale production environments. Deep understanding of threat modelling, zero-trust principles, tenant isolation, privileged access management, cryptographic controls, and secure operations. Strong knowledge of platform security technologies including trusted execution mechanisms, secure boot, attestation, firmware integrity, and supply-chain security concepts. Experience defining security requirements for data centre deployments, operational environments, and physical security controls. Expertise in network security architecture, segmentation, management-plane protection, secure communications, monitoring, and access control. Experience with key management, secrets management, certificate lifecycle management, and encryption technologies. Experience securing APIs, deployment pipelines, service control planes, and operational tooling. Strong understanding of logging, monitoring, incident response, security operations, and evidence management practices. Experience supporting customer security reviews, audits, penetration testing activities, and executive-level security discussions. Excellent communication and stakeholder management skills, with the ability to influence technical and non-technical audiences. Proven ability to lead through influence across engineering, security, operations, compliance, and customer-facing teams. Desirable Experience securing AI/ML inference platforms, model-serving infrastructure, accelerator-based systems, or confidential AI workloads. Experience with trusted execution environments, platform attestation technologies, secure firmware development, and workload identity solutions. Experience with confidential computing, secure enclaves, measured boot technologies, and remote attestation. Experience supporting highly regulated environments, critical infrastructure, or security-sensitive customer deployments. Familiarity with industry security and compliance frameworks such as SOC 2, ISO 27001, ISO 27017, ISO 27018, PCI DSS, FedRAMP, or NIST standards. Knowledge of hardware platform security, high-performance networking, storage security, and accelerator ecosystem technologies. Experience with supply-chain risk management, secure manufacturing practices, asset lifecycle controls, and secure disposal processes. Understanding of emerging cryptographic technologies and future security trends. Experience working with hyperscalers, enterprise customers, AI organisations, or managed infrastructure providers. In addition to a comprehensive benefits package, Graphcore offers flexible working arrangements designed to support your health, wellbeing and financial future. Our benefits include medical, dental and vision coverage, Flexible Spending Accounts (FSAs), Health Savings Accounts (HSAs), disability and life insurance, a 401(k) retirement plan, commuter benefits, wellness services and an Employee Assistance Programme (EAP). We welcome people of different backgrounds and experiences and are committed to building an inclusive work environment where everyone can thrive. We offer an equal opportunity recruitment process and can provide a flexible approach to interviews. Please let us know if you require any reasonable adjustments.", "summaryDescription" : "Distinguished Engineer, End-to-End Security Architect at Graphcore. Skills: Security Architecture, Platform Security, Cloud Security, Infrastructure Security. Own security architecture for inference service platform. Define security principles", "postedDate" : "2026-06-14T09:14:22.445", "createdAt" : "2026-06-14T09:14:22.445", "lastUpdated" : "2026-06-15T12:50:39.548", "ingestTimestamp" : "2026-06-14T09:14:22.445", "mongoId" : "6a2c950f74d8ee00a098c2a3", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 350000, "salaryAnnualMax" : 550000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Security Architecture", "Platform Security", "Cloud Security", "Infrastructure Security", "Service Security", "Threat Modelling", "Zero-Trust Principles", "Tenant Isolation", "Privileged Access Management", "Cryptographic Controls", "Secure Operations", "Trusted Execution", "Secure Boot", "Attestation", "Firmware Integrity", "Supply-Chain Security", "Physical Security", "Network Security Architecture", "Segmentation", "Management-Plane Protection", "Secure Communications", "Access Control", "Authentication", "Authorization", "Secrets Management", "Encryption", "Key Management", "Data Protection", "Audit Requirements", "Access Review", "Emergency Access", "Logging", "Monitoring", "Telemetry", "Incident Response", "Security Assurance", "Security Posture Assessment", "Risk-Based Decisions", "Penetration Testing", "Security Questionnaires", "Technical Assurance", "Leadership", "Mentoring", "Access Management", "Network Architecture", "Segmentation Strategies", "Security Posture", "Risk Management", "Stakeholder Management", "Technical Leadership", "Architectural Guidance", "Design Review", "AI Compute", "AI Infrastructure", "AI Services", "Confidential Computing", "Secure Enclaves", "Measured Boot", "Remote Attestation", "High-Performance Networking", "Accelerator Ecosystem", "Supply-Chain Risk", "Secure Manufacturing", "Asset Lifecycle", "Secure Disposal", "Cryptographic Technologies", "Security Trends", "JIRA" ], "skillCount" : 68, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c91ac74d8ee00a0983b94", "title" : "Application and Product Security Principal", "company" : "Global Relay", "industry" : "Technology", "salary" : { "min" : 125000.0, "max" : 160000.0, "currency" : "CAD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Vancouver, British Columbia, Canada", "locations" : [ "Vancouver", "British Columbia", "Canada" ], "timestamp" : "2026-06-16T01:25:39.012", "fingerprint" : "c9372300508434aa88d58f34a0de4f2f660f282f7599478c7b005af9b56b055b", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.globalrelay.com/careers/jobs?gh_jid=6004855004", "externalId" : "6004855004", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Vancouver", "state" : "British Columbia", "country" : "Canada", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "49.2608724,-123.1139520" } ], "locationText" : "Vancouver, British Columbia, Canada", "employmentType" : "FULL_TIME", "experienceMinYears" : 10, "experienceMaxYears" : 99, "experienceLevel" : "Principal", "technicalSkills" : "Python, Java, Bash, PowerShell, API security", "professionalSkills" : [ "Risk assessment", "Process improvement", "Team development", "Quality assurance" ], "hardSkillsList" : [ "Application security", "Product security", "DevSecOps", "Vulnerability management", "Secure coding", "Threat modeling", "Automated security framework", "Scripting languages", "Open-source solutions", "Vulnerability scanning", "Security report analysis", "False positive analysis", "Security issue investigation", "Test case documentation", "Security test coverage", "OWASP Top 10", "Test methodologies" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Application security", "level" : "intermediate" }, { "name" : "Product security", "level" : "intermediate" }, { "name" : "DevSecOps", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Secure coding", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Automated security framework", "level" : "intermediate" }, { "name" : "Scripting languages", "level" : "intermediate" }, { "name" : "Open-source solutions", "level" : "intermediate" }, { "name" : "Vulnerability scanning", "level" : "intermediate" }, { "name" : "Security report analysis", "level" : "intermediate" }, { "name" : "False positive analysis", "level" : "intermediate" }, { "name" : "Security issue investigation", "level" : "intermediate" }, { "name" : "Test case documentation", "level" : "intermediate" }, { "name" : "Security test coverage", "level" : "intermediate" }, { "name" : "OWASP Top 10", "level" : "intermediate" }, { "name" : "Test methodologies", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Application security, Product security, DevSecOps, Vulnerability management", "majorSkillsList" : [ "Application security", "Product security", "DevSecOps", "Vulnerability management" ], "coreResponsibilities" : "Lead DevSecOps areas, Integrate security practices, Input into strategy, Input into standards, Partner with engineering teams, Partner with platform teams, Partner with product teams, Embed automated controls, Embed secure design principles, Embed continuous assurance, Lead security sessions, Analyze security reports, Mitigate identified vulnerabilities, Improve processes, Develop automated security framework, Deploy automated security framework, Leverage scripting languages, Leverage open-source solutions, Embed security practices, Embed DevSecOps practices, Support CI/CD system, Integrate security tools, Prevent vulnerabilities, Shift-left security testing, Automate testing, Automate development, Provide technical expertise, Support DevSecOps tasks, Review vulnerability data, Identify security risks, Address false positives, Investigate security issues, Determine steps for reproduction, Determine scope of vulnerabilities, Provide encouragement to team members, Identify training needs, Mentor team members, Build security culture, Improve security efficacy, Oversee team member work, Create security documentation, Create developer training material, Improve test case documentation, Improve test case grouping, Act as subject matter expert, Lead selection of scanning tools, Lead deployment of scanning tools, Lead management of scanning tools, Develop competency in OWASP Top 10, Derive new test methodologies, Identify lacking security test coverage, Improve security test coverage, Provide suggestions for improvements, See improvements through to completion", "teamCollaboration" : "Partner with engineering; Partner with platform; Partner with product; Work with developers", "projectManagementSkills" : [ "Agile delivery methodology" ], "domainKnowledge" : "Application security; Product security; DevSecOps; Secure software development; Vulnerability management; CI/CD pipelines; API security; Container security; Kubernetes security; OpenShift security", "domainList" : [ "application-security", "product-security", "devsecops", "secure-software-development", "vulnerability-management", "ci-cd-pipelines", "api-security", "container-security", "kubernetes-security", "openshift-security" ], "domainSpecificKnowledge" : [ "Application security", "Product security", "DevSecOps", "Secure software development", "Vulnerability management", "CI/CD pipelines", "API security", "Container security", "Kubernetes security", "OpenShift security" ], "toolProficiency" : [ "Puppet", "Ansible", "Git", "Jenkins", "Docker", "Podman", "OpenShift", "Kubernetes" ], "communicationSkills" : "Verbal communication; Written communication", "documentationSkills" : "Security documentation; Developer training; Test case documentation", "continuousLearning" : "Skills development", "problemSolvingSkills" : "Methodical approach; Creative approach", "qualificationsBasic" : "8+ years application security experience, Expert knowledge software security, Experience with OWASP, Experience with Mitre, Experience with NIST SP800-115, Experience with SAST, Experience with DAST, Experience with SCA, Experience with Python, Experience with Java, Experience with Bash, Experience with PowerShell, Experience with Puppet, Experience with Ansible, Experience with Git repositories, Experience with Jenkins, Experience with Docker/Podman, Experience with CI/CD technologies, Experience with OpenShift/Kubernetes, Experience with API security", "remoteFriendly" : false, "workSiteFlexibility" : "Flexible", "rawDescription" : "Who we are: For over 25 years, Global Relay has set the standard in enterprise information archiving with industry-leading cloud archiving, surveillance, eDiscovery, and analytics solutions. We securely capture and preserve the communications data of the world’s most highly regulated firms, giving them greater visibility and control over their information and ensuring compliance with stringent regulations. Though we offer competitive compensation and benefits and all the other perks one would expect from an established company, we are not your typical technology company. Global Relay is a career-building company. A place for big ideas. New challenges. Groundbreaking innovation. It’s a place where you can genuinely make an impact – and be recognized for it. We believe great businesses thrive on diversity, inclusion, and the contributions of all employees. To that end, we recruit candidates from different backgrounds and foster a work environment that encourages employees to collaborate and learn from each other, completely free of barriers. Your role: The Application & Product Security Principal is responsible for leading the DevSecOps areas of application security, application vulnerability scanning and other daily security and compliance efforts. This role is positioned between software engineering, security and operations, driving the integration of robust security practices into every stage of the software development lifecycle. As a senior member of the Application & Product team you will input into strategy, standards and partner closely with engineering, platform and product teams to ensure security is built-in and aligned with business objectives. You will champion a proactive, risk-based approach to security, embedding automated controls, secure design principles and continuous assurance into the development pipelines. You will lead security sessions for development engineering teams with focus on risks, security report analysis, mitigations of identified vulnerabilities and process improvements. You will also be responsible for developing and deploying an automated security framework for robust deployment of tools and processes, leveraging scripting languages and open-source solutions. Your responsibilities: Extensive experience in Application Security, Product Security or DevSecOps roles Deep understanding of secure software development practices, including threat modeling, secure coding and vulnerability management Serve as the liaison for deployment of DevSecOps standards and input into new standards or policies Embed security and DevSecOps practices throughout the organization, within SDLC and support an automated continuous integration (CI) and continuous delivery (CD) system Work with APIs and plugins to integrate security tools into established CI/CD pipelines using agile delivery methodology Partner with developers and engineering teams to prevent vulnerabilities and ‘shift-left’ security testing in the SDLC Focus on automation to aid in efficiencies with both testing and development Provide hands-on technical expertise and support in general DevSecOps tasks Review and analyze vulnerability data to identify security risks to the organization's network, infrastructure, and applications, and effectively address false positives Investigate security issues in order to determine specific steps for reproduction and scope of vulnerabilities and risks Provide encouragement to team members, including identifying areas for additional training or skills development Mentor less experienced members of the team to help build a strong culture, improve security efficacy, and oversee team member work for quality and guideline compliance Create security documentation and developer training material Improve test case documentation and grouping Act as the senior subject matter expert for Global Relay software security testing related to the CI/CD pipeline Lead the selection, deployment, and management of appropriate scanning tools for security testing in the CI/CD pipeline Develop competency in the OWASP Top 10 and derive new test methodologies based on Global Relay applications Work with Application and Product Security Team Lead to identify areas where security test coverage is lacking, and work to improve the security test coverage Provide suggestions on improvements and see these through to completion About you: 8+ years of application security and operations experience and expert knowledge of software security Experience with at least one of each of the following: o OWASP, Mitre, NIST SP800-115 o SAST, DAST, SCA o Python, Java, Bash, PowerShell o Puppet, Ansible, Git repositories, Jenkins, Docker/Podman, CI/CD technologies o Container - OpenShift / Kubernetes o API security Working with Security, Developers, DevOps, and Engineering teams in a dynamic environment Secure development, coding, and engineering practices Experience with the following would be an asset: o AI tools / Machine learning o ISO 27000, SOC 2, GDPR and other security and privacy standards o CISM, CISSP, OSCP, or other relevant security certifications o Networking technologies, particularly with OSI layers and TCP/IP o Web-based protocols, including cookie management, encrypted traffic, TLS, HTTPS, HSTS, and webhooks o Security tools such as firewalls, IDS/IPS, anti-virus, anti-spam, and server and network device hardening o Encryption protocols and methodologies Ability to work under broad supervision with little instruction Ability to communicate effectively, in both written and verbal forms, with technical and non-technical cross-functional teams. Ability to communicate diplomatically and effectively at all levels of the organization with all classifications, including the very technical Proven competence using MS Office and other desktop applications Methodical and creative approach to problem-solving Excellent verbal and written communication skills Strong attention to detail and follow-up Compensation: Global Relay advertises the pay range for this role in compliance with British Columbia’s pay transparency laws. Individual pay rates are determined by evaluating factors such as expertise, skills, education, and professional background. The range below reflects the expected annual base salary, which is only one element of our comprehensive total rewards package designed to reflect our company pay philosophy, culture and values. We aim to foster an inspiring work environment and support employees' work-life rhythms. We provide a comprehensive extended health benefits program, including virtual healthcare and a wellness allowance. Employees also receive annual allotted vacation days, which increase based on tenure. Other benefits include: Paid sick days, maternity/parental enhancement program, bonus, and an RRSP contribution matching program. For Vancouver-based employees, we provide a subsidized meal program, courtesy of our talented in-house culinary team! British Columbia - Base salary range $125,000—$160,000 CAD What you can expect: At Global Relay, there’s no ceiling to what you can achieve. It’s the land of opportunity for the energetic, the intelligent, the driven. You’ll receive the mentoring, coaching, and support you need to reach your career goals. You’ll be part of a culture that breeds creativity and rewards perseverance and hard work. And you’ll be working alongside smart, talented individuals from diverse backgrounds, with complementary knowledge and skills. Global Relay is an equal-opportunity employer committed to diversity, equity, and inclusion. We seek to ensure reasonable adjustments, accommodations, and personal time are tailored to meet the unique needs of every individual. To learn more about our business, culture, and community involvement, visit www.globalrelay.com.", "summaryDescription" : "Application and Product Security Principal at Global Relay. Skills: Application security, Product security, DevSecOps, Vulnerability management. Lead DevSecOps areas. Integrate security practices", "postedDate" : "2026-06-14T19:12:43.198", "createdAt" : "2026-06-14T19:12:43.198", "lastUpdated" : "2026-06-16T01:25:39.012", "ingestTimestamp" : "2026-06-14T19:12:43.198", "mongoId" : "6a2c91ac74d8ee00a0983b94", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Application security", "Product security", "DevSecOps", "Vulnerability management", "Secure coding", "Threat modeling", "Automated security framework", "Scripting languages", "Open-source solutions", "Vulnerability scanning", "Security report analysis", "False positive analysis", "Security issue investigation", "Test case documentation", "Security test coverage", "OWASP Top 10", "Test methodologies", "Leadership", "Mentoring", "Risk assessment", "Process improvement", "Team development", "Quality assurance", "Agile delivery methodology", "Secure software development", "CI/CD pipelines", "API security", "Container security", "Kubernetes security", "OpenShift security", "Puppet", "Ansible", "Git", "Jenkins", "Docker", "Podman", "OpenShift", "Kubernetes" ], "skillCount" : 38, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a0de91358b93c861eb990ae", "title" : "CRITICAL CARE RESPONSE APP", "company" : "Tampa General Hospital", "industry" : "Healthcare", "salary" : { "min" : 85000.0, "max" : 125000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline data for Critical Care Response App roles in Tampa, adjusted for mid-seniority and the healthcare industry." }, "location" : "United States-Florida-Tampa", "locations" : [ "United States-Florida-Tampa", "
TGH Main Campus (TGHMAIN)
1 Tampa General Circle

Tampa, 33601

" ], "certifications" : [ "PA-C", "Acute Care NP", "AG ACNP", "ACNP", "BLS", "ACLS" ], "timestamp" : "2026-06-16T01:11:44.457", "fingerprint" : "92300c13260769916e0cc71ec59212005305e48bd184a0fc8a6089ff8d15b4e6", "source" : "taleo", "language" : "en", "applyUrl" : "https://tas-tgh.taleo.net/careersection/ex/jobdetail.ftl?job=620697", "externalId" : "620697", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tampa", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "27.9449854,-82.4583107" } ], "locationText" : "Tampa, Florida, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Microsoft Office, EMR systems", "professionalSkills" : [ "Clinical skills", "Patient assessment", "Critical thinking", "Quality improvement" ], "hardSkillsList" : [ "Patient data integration", "Evidence-based protocols" ], "softSkillsList" : [ "Conflict resolution" ], "hardSkills" : [ { "name" : "Patient data integration", "level" : "intermediate" }, { "name" : "Evidence-based protocols", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Conflict resolution" } ], "majorSkills" : "Critical care management, Patient resuscitation, ICU transfers", "majorSkillsList" : [ "Critical care management", "Patient resuscitation", "ICU transfers" ], "coreResponsibilities" : "Manage complex critical care cases, Manage deteriorating patients outside ICU, Perform rapid assessment, Stabilize acutely decompensating patients, Manage acutely decompensating patients, Collaborate with Care-Comm, Collaborate with Rapid Response Team, Collaborate with Hospital Medicine, Collaborate with quality office, Refine workflows, Optimize resource utilization, Facilitate timely ICU transfers, Facilitate timely consults, Ensure continuity of care, Liaise with Physician, Facilitate patient bed placement, Navigate capacity limitations, Navigate ICU acceptance, Ensure appropriate patient transfers, Ensure safe patient transfers, Mitigate transfer risks, Consult necessary teams, Utilize evidence-based protocols, Enhance patient outcomes, Contribute to quality improvement, Advance patient safety, Advance operational efficiency, Assist in managing patients awaiting ICU transfer, Interpret patient data, Integrate patient data, Make informed decisions, Provide comprehensive care, Conduct history assessments, Conduct physical assessments, Assess patient response to treatment, Adjust care plan, Provide patient education, Promote communication with patients, Promote communication with families, Promote communication with healthcare team, Ensure timely documentation, Ensure accurate documentation, Ensure complete documentation, Participate in education of trainees, Participate in education of professionals, Provide teaching, Provide mentorship, Attend weekly conferences, Attend academic meetings", "teamCollaboration" : "Collaborate with physicians; Collaborate with Care-Comm; Collaborate with Hospital Medicine; Collaborate with quality office; Work with transfer center; Collaborate with subspecialty ICUs; Collaborate with healthcare team", "domainKnowledge" : "Critical care; Acute emergencies; Infection control standards", "domainList" : [ "critical-care", "acute-emergencies", "infection-control-standards" ], "domainSpecificKnowledge" : [ "Critical care", "Acute emergencies", "Infection control standards" ], "toolProficiency" : [ "Epic" ], "communicationSkills" : "Written communication; Oral communication; Patient education; Provider collaboration", "documentationSkills" : "Electronic medical record documentation", "continuousLearning" : "Teaching; Mentorship; Academic meetings", "innovationCreativity" : "Quality improvement initiatives", "problemSolvingSkills" : "Critical thinking", "specialRequirements" : "Weekend rotations, Holiday rotations", "outcomesObjectives" : "Improve patient outcomes; Advance patient safety; Advance operational efficiency", "qualificationsBasic" : "Graduate of accredited PA or NP program, Active PA or APRN license in Florida, National certification as PA-C or Acute Care NP, BLS certification required, ACLS certification required", "qualificationsPreferred" : "2 years critical care experience as NP or PA, Experience placing central lines, Experience placing arterial lines", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "JOB SUMMARY — CRITICAL CARE RESPONSE APP The Critical Care Response Advanced Practitioner (APP) works in collaboration with critical care-intensivist physicians to manage complex critical care cases. This collaborative initiative is designed to actively manage deteriorating and critically ill patients outside the ICU. This role ensures prompt resuscitation, seamless coordination with subspecialty ICUs, and timely patient transfers to improve outcomes. All team members at TGH are expected to perform their duties in alignment with the mission, vision, and values of Tampa General Hospital. RESPONSIBILITIES Possesses in-depth understanding of the causes, risk factors, pathophysiology, and clinical signs of acute emergencies. Provide rapid assessment, stabilization, and management of acutely decompensating patients. Collaborate with Care-Comm, the Rapid Response Team, Hospital Medicine, and the quality office to refine workflows and optimize resource utilization. Facilitate timely ICU transfers and consults while ensuring continuity of care. Liases with Physician in collaboration of AOD to help facilitate getting critically ill patients to the right bed at the right time. Assist in navigating routine encountered complexities r/t capacity limitations, ideal ICU acceptance. Works closely with the transfer center to ensure appropriate and safe transfers of critically ill patients, with mitigation of potential risks and consultations of necessary teams as indicated. Utilize evidence-based critical care protocols to enhance patient outcomes. Contribute to quality improvement initiatives to advance patient safety and operational efficiency. Assisting in management of critically ill patients awaiting ICU transfer. Utilizes critical thinking skills to effectively interpret and integrate patient data, ensuring informed decision-making and comprehensive care Conducts thorough and accurate history and physical assessments for critically ill adult patients. Assesses patient response to treatment and adjusts the care plan as necessary. Provides education regarding medical procedures and treatment plans and promotes ongoing communication with patients, families, and healthcare team members. Ensures timely, accurate, and complete documentation in the electronic medical record. Actively participates in the education of trainees and healthcare professionals through teaching and mentorship, and attends required weekly conferences and academic meetings hosted by the Critical Care team and the Division of Advanced Practice. TECHNICAL KNOWLEDGE, SKILLS & ABILITIES Demonstrates current knowledge and level of expertise utilizing evidence and theory-based practice, infection control standards and clinical evaluations in providing care to patients in hospital-based settings, as evidenced by following established protocols. Proficiency in Microsoft Office suite and electronic medical records (EMR) systems, preferably Epic Ability to multitask in a dynamic environment. Strong written and oral communication skills. Outstanding customer service and conflict resolution abilities. Excellent communication skills for patient education and provider collaboration. A commitment to advancing care through research and quality improvement. Graduate of an accredited Physician Assistant (PA) program or Acute Care Nurse Practitioner (NP) program. Active PA or APRN license in the state of Florida. National certification as a PA-C or Acute Care NP (AG ACNP or ACNP) BLS and ACLS certification required. Preferred: Experience of working at least two (2) years in the critical care setting as an NP or PA Strong clinical skills in patient assessment (experience in placing central and arterial lines) Eligible for Remote Work: No Schedule: Various shifts, 3 x 13-hour shifts. Weekend & holiday rotations. No on call requirements. Primary Location: Tampa Work Location: TGH Main Campus Eligible for Remote Work: No Schedule: Various shifts, 3 x 13-hour shifts. Weekend & holiday rotations. No on call requirements. Tampa", "summaryDescription" : "CRITICAL CARE RESPONSE APP at Tampa General Hospital. Skills: Critical care management, Patient resuscitation, ICU transfers. Manage complex critical care cases. Manage deteriorating patients outside ICU", "createdAt" : "2026-06-14T19:49:25.289", "lastUpdated" : "2026-06-16T01:11:44.457", "ingestTimestamp" : "2026-06-14T19:49:25.289", "mongoId" : "6a0de91358b93c861eb990ae", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 85000, "salaryAnnualMax" : 125000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Patient data integration", "Evidence-based protocols", "Conflict resolution", "Critical care management", "Patient resuscitation", "ICU transfers", "Clinical skills", "Patient assessment", "Critical thinking", "Quality improvement", "Critical care", "Acute emergencies", "Infection control standards", "PA-C", "Acute Care NP", "AG ACNP", "ACNP", "BLS", "ACLS", "Epic" ], "skillCount" : 20, "jobCategory" : "healthcare", "jobSubcategory" : "support", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305691f292fd229cf2b223", "title" : "RFP & Bid Manager - AI Solutions", "company" : "Mistral AI", "industry" : "Business", "salary" : { "min" : 75000.0, "max" : 105000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level RFP & Bid Manager in the Technology industry in Paris, France, adjusted for company size and seniority." }, "location" : "Paris", "locations" : [ "Paris", "Abu Dhabi", "London", "Munich" ], "timestamp" : "2026-06-16T11:51:41.109", "fingerprint" : "493041dee2a51c3f30365bd7f44fde93b6286fe59ca73dba0f8c1a345b5edc1b", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/mistral/ca891ff4-2b47-41cd-9815-168688922d91/apply", "externalId" : "ca891ff4-2b47-41cd-9815-168688922d91", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Paris", "country" : "France", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "48.8534951,2.3483915" } ], "locationText" : "Paris, France", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "professionalSkills" : [ "RFP management", "Bid management", "Commercial deal support", "Cost modeling", "Commercial frameworks" ], "hardSkillsList" : [ "Proposal writing", "Content development" ], "hardSkills" : [ { "name" : "Proposal writing", "level" : "intermediate" }, { "name" : "Content development", "level" : "intermediate" } ], "majorSkills" : "RFP response process, Client-focused proposals, Commercial structuring", "majorSkillsList" : [ "RFP response process", "Client-focused proposals", "Commercial structuring" ], "coreResponsibilities" : "Lead end-to-end response process for RFPs, RFIs, and, Ensure high-quality, on-time submissions, Coordinate inputs from sales, product, engineering, legal, security,, Craft cohesive, client-focused proposals, Ensure responses meet customer requirements and deadlines, Develop and maintain a library of reusable RFP, Partner with GTM leadership to structure scalable AI, Align solutions with pricing models and client needs, Support creation of Statements of Work (SoW), Support creation of Delivery plans and resource assumptions, Support creation of Cost models and commercial frameworks, Act as central hub between GTM/Sales, Product, Engineering/Research,, Ensure proposals accurately reflect product capabilities, roadmap alignment,", "teamCollaboration" : "Cross-functional teams; Sales; Product; Engineering; Legal; Security; Delivery teams; GTM leadership", "projectManagementSkills" : [ "RFP management", "Bid management" ], "domainKnowledge" : "AI solutions; Public sector tenders; Cloud computing; Enterprise software", "domainList" : [ "ai-solutions", "public-sector-tenders", "cloud-computing", "enterprise-software" ], "domainSpecificKnowledge" : [ "AI solutions", "Public sector tenders", "Cloud computing", "Enterprise software" ], "communicationSkills" : "Persuasive proposals", "outcomesObjectives" : "Secure multi-million-euro contracts; Accelerate market leadership in AI; Deliver winning bids", "qualificationsBasic" : "Proven track record in RFPid management, Experience in AI, tech, or public sector, Manage multiple deadlines, Prioritize tasks, Maintain meticulous documentation", "qualificationsPreferred" : "Experience in Middle East AND European RFP, Familiarity with public sector tenders, MEA region experience, Background in AI, Background in cloud computing, Background in enterprise software, Fluency in Arabic, Fluency in French", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "## Description About Us Mistral AI is at the forefront of AI innovation, delivering cutting-edge solutions to public and private sector clients across the globe. With a rapidly growing pipeline of opportunities in the MEA region—including the UAE, Morocco, KSA, and the Gulf—we are scaling our operations to meet demand. Our team is expanding, and we are seeking a dedicated RFP & Bid Manager to drive our response to complex, high-stakes RFPs, RFIs, and RFQs. This role is critical to our success in securing multi-million-euro contracts and accelerating our market leadership in AI. Why This Role MattersAs we expand across the MEA region, the volume and complexity of RFPs will only increase. You will play a pivotal role in ensuring our proposals are compliant, competitive, and compelling, while collaborating closely with cross-functional teams to deliver winning bids. Key Responsibilities 1. RFP & Bid Management Lead the end-to-end response process for RFPs, RFIs, and RFQs, ensuring high-quality, on-time submissions. Coordinate inputs from sales, product, engineering, legal, security, and delivery teams to craft cohesive, client-focused proposals. Ensure all responses meet customer requirements and deadlines, with zero tolerance for compliance gaps. Develop and maintain a library of reusable RFP content, including AI capabilities, technical architecture, security, and compliance documentation. 2. Commercial Deal Support Partner with GTM leadership to structure scalable AI solutions that align with pricing models and client needs. Support the creation of: Statements of Work (SoW) Delivery plans and resource assumptions Cost models and commercial frameworks 3. Cross-Functional Coordination Act as the central hub between GTM/Sales, Product, Engineering/Research, Legal & Compliance, and Delivery/Professional Services. Ensure proposals accurately reflect product capabilities, roadmap alignment, and client expectations. Who You Are Experienced: Proven track record in RFP/bid management, preferably in AI, tech, or public sector environments. Experience in the Middle East AND European RFP (EU Institutions, National Governments) is a plus. Detail-Oriented: Exceptional ability to manage multiple deadlines, prioritize tasks, and maintain meticulous documentation. Collaborative: Strong interpersonal skills to align diverse stakeholders and drive consensus. Strategic: Ability to translate technical and commercial requirements into persuasive, client-centric proposals. Adaptable: Thrives in a fast-paced, high-growth environment with evolving priorities. Nice-to-Haves: Familiarity with public sector tenders (MEA region experience is a plus). Background in AI, cloud computing, or enterprise software. Fluency in English (additional languages, e.g., Arabic or French, are advantageous). Why Join Us? Impact: Shape the future of AI adoption in the MEA region by winning transformational deals. Growth: Work alongside a talented, ambitious team in a dynamic, innovative company. Ownership: Take end-to-end ownership of bids that drive revenue and market expansion.", "summaryDescription" : "RFP & Bid Manager - AI Solutions at Mistral AI. Skills: RFP response process, Client-focused proposals, Commercial structuring. Lead end-to-end response process for RFPs, RFIs, and. Ensure high-quality, on-time submissions", "postedDate" : "2026-06-15T08:03:03.865", "createdAt" : "2026-06-15T08:03:03.865", "lastUpdated" : "2026-06-16T11:51:41.109", "ingestTimestamp" : "2026-06-16T03:22:26.389", "mongoId" : "6a305691f292fd229cf2b223", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Proposal writing", "Content development", "RFP response process", "Client-focused proposals", "Commercial structuring", "RFP management", "Bid management", "Commercial deal support", "Cost modeling", "Commercial frameworks", "AI solutions", "Public sector tenders", "Cloud computing", "Enterprise software" ], "skillCount" : 14, "jobCategory" : "sales", "jobSubcategory" : "revenue", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "68e6b1d770f0b99d58d669d3", "title" : "Associate Customer Incident Responder, AWS Customer Incident Response Team (CIRT)", "company" : "Amazon Web Services, Inc.", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 125500.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Arlington, Virginia, USA", "locations" : [ "Arlington, Virginia, USA" ], "timestamp" : "2026-06-15T03:07:34.087", "fingerprint" : "e41ba28c00f8a5fa7ff7a6b6f7e4b967a32c1d34e6140338d9bfa0a32bb978b0", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3103444/apply", "externalId" : "3edaebce-b7da-4159-88b6-ebd603fd4b2d", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, C, C++, Java, Ruby, PowerShell, AWS", "professionalSkills" : [ "Incident response", "Threat detection", "Security operations", "Cloud security" ], "hardSkillsList" : [ "Log collection", "Log analysis", "Root cause analysis", "Preventative guidance" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Log collection", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Root cause analysis", "level" : "intermediate" }, { "name" : "Preventative guidance", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Incident response, Threat detection, Security solutions", "majorSkillsList" : [ "Incident response", "Threat detection", "Security solutions" ], "coreResponsibilities" : "Support incident response operations, Become a technical resource, Contribute to build and deploy threat detection and, Collaborate to design, build, and deploy solutions to, Develop high-quality content, Innovate on behalf of customers, Mentor and invest in our team, partners and", "teamCollaboration" : "Part of a team; Collaborate with AWS service teams", "domainKnowledge" : "Cloud environments; Scalable computing architectures; Security incidents; Security operations; Shared security model", "domainList" : [ "cloud-environments", "scalable-computing-architectures", "security-incidents", "security-operations", "shared-security-model" ], "domainSpecificKnowledge" : [ "Cloud environments", "Scalable computing architectures", "Security incidents", "Security operations", "Shared security model" ], "communicationSkills" : "Communicate complex technical matters", "documentationSkills" : "Reference architectures; White papers; Blog posts", "innovationCreativity" : "Innovate with new technologies; Explore new challenges", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Periodic on-call required", "outcomesObjectives" : "Achieve more with AWS cloud; Respond to security incidents; Automate security operations; Deliver results", "qualificationsBasic" : "Experience with coding/scripting in one or more languages, Knowledge of networks, protocols, cloud and security fundamentals, 2+ years of hands-on technical experience in threat detection, log collection and analysis, incident response, and/or security operations", "qualificationsPreferred" : "Experience with core security functions, Hands-on technical experience in building scripts, tools, or methodologies, Experience with developing and training AI models, Communicate complex technical matters clearly and concisely orally and in writing, Ability to manage customers expectations during security events, and deliver results", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Global Services includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center. You’ll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud. Do you want to work on planetary scale incident response solutions in the cloud? Are you skilled at performing Incident Response activities and helping customers build threat detection and incident response capabilities using highly scalable computing architectures? Are you excited to help customers respond to security incidents and automate security operations giving them unprecedented capability and agility? Do you enjoy working on fast-paced complex projects focused on game changing business outcomes for customers globally? As a member of the Threat Detection and Incident Response Practice in the AWS Global Service Security you will have the opportunity to help customers respond to security incidents and pioneer technically superb security solutions to help customer operate securely in the cloud. Building on those experiences you’ll collaborate with AWS service teams on new features, innovate with new technologies, and explore new challenges. The Global Services Security team, a part of Amazon Web Services (AWS), leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world’s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers. The AWS Customer Incident Response Team (CIRT) is a specialized 24/7 global (AWS) team that provides support to customers in responding to active security events on their side of the shared security model. The team is made up of AWS Solutions Architects and Security Engineers who are experienced in incident response.to assist customers with identifying Indicators of Compromise, isolation, containment, log collection and analysis, determining root cause, recovery, and preventative guidance to avoid recurrence. Key job responsibilities • Support incident response operations • Become a technical resource that earns the trust of customer stakeholders before, during, and after a security event. • Contribute as part of a team to build and deploy threat detection and incident response capabilities. • Collaborate to design, build, and deploy solutions to automate security operations and incident response on AWS. • Develop high-quality content, such as reference architectures, white papers, and blog posts to help AWS customers secure their workloads. • Innovate on behalf of customers by translating your thoughts into action-driven results. • Mentor and invest in our team, partners and customers to raise the bar for our customers. • Periodic on-call required. About the team Diverse Experiences Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. Mentorship and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Basic Qualifications: - Experience with coding/scripting in one or more languages (e.g., Python, C, C++, Java, Ruby, or PowerShell) - Knowledge of networks, protocols, cloud and security fundamentals . - 2+ years of hands-on technical experience in threat detection, log collection and analysis, incident response, and/or security operations. Preferred Qualifications: - Experience with any combination of core security functions such as threat modeling, secure software development, data classification, identity management and authentication, cryptography, system administration, network security, and forensics. - Hands-on technical experience in building scripts, tools, or methodologies that enhance customers’ threat detection and incident response capabilities. - Experience with developing and training AI models. - Can communicate complex technical matters clearly and concisely orally and in writing. - Ability to manage customers expectations during security events, and deliver results. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $125,500/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Associate Customer Incident Responder, AWS Customer Incident Response Team (CIRT) at Amazon Web Services, Inc.. Skills: Incident response, Threat detection, Security solutions. Support incident response operations. Become a technical resource", "postedDate" : "2026-06-13T08:42:48.387", "createdAt" : "2026-06-13T08:42:48.387", "lastUpdated" : "2026-06-15T03:07:34.087", "ingestTimestamp" : "2026-06-13T08:42:48.387", "mongoId" : "68e6b1d770f0b99d58d669d3", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3103444/apply", "salaryAnnualMin" : 125500, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Log collection", "Log analysis", "Root cause analysis", "Preventative guidance", "Mentoring", "Incident response", "Threat detection", "Security solutions", "Security operations", "Cloud security", "Cloud environments", "Scalable computing architectures", "Security incidents", "Shared security model" ], "skillCount" : 14, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a307efbf292fd229c0541e4", "title" : "Deal Pricing and Monetization Principal, Security", "industry" : "Banking", "salary" : { "min" : 125000.0, "max" : 175000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Lead Principal in the Technology industry in Dublin, Ireland, adjusted for seniority and full-time employment." }, "location" : "[Dublin, Ireland, [1 Grand Canal Plaza, Grand Canal Street Upper, Dublin, D04 HR25, Ireland], Dublin, D04 HR25, D, IE]", "locations" : [ "[Dublin, Ireland, [1 Grand Canal Plaza, Grand Canal Street Upper, Dublin, D04 HR25, Ireland], Dublin, D04 HR25, D, IE]", "[Paris, France, [Paris, France], Paris, null, IDF, FR]", "[London, UK, [London, UK], London, null, England, GB]" ], "timestamp" : "2026-06-16T12:40:10.519", "fingerprint" : "2b39dbb86b5e50d1ec5e92048c50cd171cf69b27058ca5e69bb787674a779675", "source" : "google", "language" : "en", "externalId" : "109425179662131910", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Dublin", "state" : "Leinster", "country" : "Ireland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "53.3493795,-6.2605593" } ], "locationText" : "Dublin, Leinster, Ireland", "experienceMinYears" : 10, "experienceMaxYears" : 99, "experienceLevel" : "Principal", "summaryDescription" : "Deal Pricing and Monetization Principal, Security", "postedDate" : "2026-06-16T01:49:45.230", "createdAt" : "2026-06-16T01:49:45.230", "lastUpdated" : "2026-06-16T12:40:10.519", "ingestTimestamp" : "2026-06-16T01:49:45.230", "mongoId" : "6a307efbf292fd229c0541e4", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "finance", "jobSubcategory" : "accounting", "seniorityLevel" : "Lead", "dataQualityScore" : 0.5555556, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c94ba74d8ee00a098b69c", "title" : "PRN Clinical Response Specialist", "company" : "ERC Pathlight", "industry" : "Healthcare", "salary" : { "min" : 23.0, "max" : 29.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Aspen Remote", "locations" : [ "Aspen Remote", "Denver", "Colorado", "United States" ], "timestamp" : "2026-06-15T10:13:20.652", "fingerprint" : "a128a410592f3a4d00ae4ccd339b650e884038a885c5453243c82cb75daba78c", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/erc8585757pathlight53t353/jobs/4274631009", "externalId" : "4274631009", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "professionalSkills" : [ "Customer relationships", "Customer retention", "Customer satisfaction", "Value realization" ], "hardSkillsList" : [ "Clinical intake" ], "hardSkills" : [ { "name" : "Clinical intake", "level" : "intermediate" } ], "majorSkills" : "Clinical intake, Customer service", "majorSkillsList" : [ "Clinical intake", "Customer service" ], "coreResponsibilities" : "Assist patients, families, providers, Navigate admissions process, Manage calls and correspondence, Complete clinical intake screens, Provide excellent customer service", "domainKnowledge" : "Eating disorders; Mood disorders; Anxiety disorders; Trauma-related conditions", "domainList" : [ "eating-disorders", "mood-disorders", "anxiety-disorders", "trauma-related-conditions" ], "domainSpecificKnowledge" : [ "Eating disorders", "Mood disorders", "Anxiety disorders", "Trauma-related conditions" ], "continuousLearning" : "Tuition reimbursement", "specialRequirements" : "Saturday and Sunday work", "qualificationsBasic" : "Clinical intake screens, Sharp clinical knowledge, Excellent customer service", "workSiteFlexibility" : "Remote", "rawDescription" : "Who We Are At ERC Pathlight, we’re on a mission to change lives—and we’re looking for people who feel called to do the same. As one of the nation’s leading treatment providers for eating disorders and mood, anxiety, and trauma-related conditions, we bring innovative, evidence-based, and deeply compassionate care to patients across the country. With multiple locations nationwide and extensive virtual programming, we meet patients exactly where they are and help them move toward lasting recovery. Founded in 2008 by renowned psychiatrists and psychologists, ERC Pathlight now supports more than 6,000 patients each year. And as the need for world-class mental health care continues to rise, our commitment is stronger than ever: to expand access, elevate the standard of care, and empower every patient to rebuild their life with dignity and hope. Why Join Us When you join ERC Pathlight, you become part of a team that shows up every day to make a real difference. You’ll work alongside passionate clinicians, dedicated support staff, and mission-driven leaders who believe in collaboration, growth, and doing the right thing—always. Here, your work matters. Your ideas matter. You matter. If you’re energized by purpose, motivated by impact, and ready to help transform the future of mental health treatment, you belong here. Come build hope. Come save lives. Come grow with us. What You'll Be Doing: The Clinical Response Specialist I is responsible for assisting patients, families, and providers in navigating the admissions process with ERC Pathlight. This role will help to manage calls and correspondence on a national level by completing clinical intake screens that demonstrate sharp clinical knowledge and skills, all while providing excellent customer service to patients, families, and providers seeking care with ERC Pathlight. Essential Duties 8:00 AM to 4:30 PM MT on Saturday and Sunday. The compensation range for this position is based upon candidate experience and market expectations. Colorado pay range $23—$29 USD What We Offer At ERC Pathlight, caring for people is our mission and that begins with caring for our own team. Your well-being matters, and our benefit program is designed to support every part of your life. We offer competitive compensation; comprehensive medical, dental, and vision coverage; generous Paid Time Off; Parental Leave benefits; Retirement benefits; and tuition reimbursement to help you continue growing in your career. We also recognize that mental health is part of every person’s experience. That’s why we strive to create a workplace where you feel supported, seen, and encouraged—personally, professionally, and at home. When you thrive, you can do your best work. And your best work changes lives.", "summaryDescription" : "PRN Clinical Response Specialist at ERC Pathlight. Skills: Clinical intake, Customer service. Assist patients, families, providers. Navigate admissions process", "postedDate" : "2026-06-14T09:40:33.363", "createdAt" : "2026-06-14T09:40:33.363", "lastUpdated" : "2026-06-15T10:13:20.652", "ingestTimestamp" : "2026-06-14T09:40:33.363", "mongoId" : "6a2c94ba74d8ee00a098b69c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMax" : 29, "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Clinical intake", "Customer service", "Customer relationships", "Customer retention", "Customer satisfaction", "Value realization", "Eating disorders", "Mood disorders", "Anxiety disorders", "Trauma-related conditions" ], "skillCount" : 10, "jobCategory" : "sales", "jobSubcategory" : "customer_success", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6a8f74d8ee00a090c9b3", "title" : "Project Manager, Incident Response", "company" : "ABACUS", "industry" : "Cybersecurity", "salary" : { "min" : 145000.0, "max" : 205000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Project Manager, Incident Response in the US Technology industry, adjusted for a remote work mode and manager experience level." }, "location" : "Remote in US", "locations" : [ "Remote in US" ], "certifications" : [ "PMP certification" ], "timestamp" : "2026-06-15T10:35:48.757", "fingerprint" : "1c88e11e9a6dddc3effeac573435e516572e6903d0011c5dae97ea2497aee0f5", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://abacustechnology.com/about/careers/current-vacancies/?gh_jid=7731438003", "externalId" : "7731438003", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "Systems engineering, Infrastructure deployment, Infrastructure enhancement", "professionalSkills" : [ "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Resource planning", "Continuous improvement", "Client-facing communication", "Expectation management", "Timeline management", "Consultative rapport" ], "hardSkillsList" : [ "Event log analysis", "Syslog analysis", "Monitoring data analysis", "Memory dump analysis", "Troubleshoot issues", "Configure systems", "Test systems", "Implement systems", "Refine systems", "Document systems", "Monitor systems", "Transition systems" ], "softSkillsList" : [ "Leadership", "Persistence", "Calm under pressure" ], "hardSkills" : [ { "name" : "Event log analysis", "level" : "intermediate" }, { "name" : "Syslog analysis", "level" : "intermediate" }, { "name" : "Monitoring data analysis", "level" : "intermediate" }, { "name" : "Memory dump analysis", "level" : "intermediate" }, { "name" : "Troubleshoot issues", "level" : "intermediate" }, { "name" : "Configure systems", "level" : "intermediate" }, { "name" : "Test systems", "level" : "intermediate" }, { "name" : "Implement systems", "level" : "intermediate" }, { "name" : "Refine systems", "level" : "intermediate" }, { "name" : "Document systems", "level" : "intermediate" }, { "name" : "Monitor systems", "level" : "intermediate" }, { "name" : "Transition systems", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Persistence" }, { "name" : "Calm under pressure" } ], "majorSkills" : "Incident response, Project delivery, Client management", "majorSkillsList" : [ "Incident response", "Project delivery", "Client management" ], "coreResponsibilities" : "Coordinate external technical projects, Follow established core processes, Follow project templates, Follow methodologies, Lead Professional Services stand-ups, Review event logs, Review Syslogs, Review monitoring data, Review memory dumps, Troubleshoot issues, Provide security-enhancing solutions, Maintain billable utilization targets, Generate mandatory reports, Update mandatory reports daily, Meet project deadlines, Exceed project deadlines, Keep projects profitable, Measure project success, Leverage cost variance, Leverage schedule variance, Contribute to customer satisfaction, Record change details, Record time worked, Record work notes in ServiceNow, Identify process improvement opportunities, Execute project deliverables, Transition deliverables to stakeholders, Perform approved changes, Communicate project status internally, Communicate project status externally, Provide project follow-ups, Provide requested feedback", "teamCollaboration" : "Cross-functional teams; Client calls; Internal communication; External communication", "projectManagementSkills" : [ "Project management", "Waterfall projects", "Process management", "Methodologies" ], "domainKnowledge" : "Incident response; Technical environments; Containment strategies; Recovery strategies; MFA; Endpoint protection; Systems; Applications; Infrastructures", "domainList" : [ "incident-response", "technical-environments", "containment-strategies", "recovery-strategies", "mfa", "endpoint-protection", "systems", "applications", "infrastructures" ], "domainSpecificKnowledge" : [ "Incident response", "Technical environments", "Containment strategies", "Recovery strategies", "MFA", "Endpoint protection", "Systems", "Applications", "Infrastructures" ], "toolProficiency" : [ "ServiceNow" ], "communicationSkills" : "Client-facing communication; Verbal communication; Writing skills; Professional wording; Grammatically pristine; Clear communication; Effective communication; Persuasive communication; Translate technical to C-Suite; Convey energy; Convey confidence; Convey interest; Convey competence; Convey professionalism; Convey trustworthiness", "documentationSkills" : "Thorough documentation; Status updates", "continuousLearning" : "Online courses", "problemSolvingSkills" : "Troubleshoot issues; Sort through chaos; Make order; Uncover hidden gems; Scale roadblocks; Dodge roadblocks; Blast through roadblocks", "specialRequirements" : "On-call rotation, Work into evenings, Work into weekends, Work into holidays, Minimal travel, Open to travel", "outcomesObjectives" : "Result in progressive change; Result in secure enhancements; Establish ownership of direction; Ensure parties are aligned; Deliver strategic initiatives; Achieve high customer satisfaction scores; Keep projects profitable; Not skimp on quality", "qualificationsBasic" : "5 years of experience delivering IT waterfall projects, Managed projects as assigned PM, Owned client-facing projects, Experience with systems and virtualization, Exposure to enterprise infrastructures, Adaptable approach to working hours, Open to travel when needed", "qualificationsPreferred" : "Four-year degree in relevant field, PMP certification", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Job Summary: As our Incident Response Project Manager, you will be primarily dedicated to external, client-facing projects within our Incident Response team. You will be the driving force behind successful, thorough, and robust project deliverables that result in progressive change and secure enhancements to our client’s technical environments.As the primary face of the team on client calls, you will field questions, establish trust, and set precedent as the go-to person for all incident-related matters. You will be tasked with understanding the current state of an incident, establishing ownership of the overall direction of containment and recovery, and ensuring all parties are aligned with the verticals defined. Constantly in sync with the primary lead engineer leading containment and recovery strategies and delivering agreed-upon strategic initiatives to all parties, you will work as part of a dynamic, flexing team – ready to respond at a moment’s notice mapping into your team's on-call rotation. This position will report directly to our Director of Incident Response PMO. Responsibilities (including, but not limited to): Project Management Coordinates multiple, external technical projects from inception to completion: Follows established core processes, project templates, and methodologies Takes a lead in Professional Services stand-ups review event logs, Syslogs, monitoring data, and memory dumps to troubleshoot issues. Security-enhancing solutions for systems and applications (including MFA and endpoint protection). Metrics Measuring Success Maintains billable utilization targets Ensures all mandatory reports are generated and updated daily Meets or exceeds deadlines for all assigned projects Keeps projects profitable while not skimping on quality Leverages cost variance and schedule variance formulas to measure project success Contributes to the team’s attainment of high customer satisfaction scores on project delivery Records complete change details, time worked entries, and work notes in ServiceNow in real-time Identifies opportunities for process improvement Following Process Follows Entara’s project process to execute project deliverables: configure, test, implement, refine, document, monitor, and transition to appropriate stakeholders. Follows Entara’s Change Management Process to perform approved changes in client environments Communicates internally and (as directed) externally to provide timely information regarding project status, promised follow-ups, and requested feedback on a detailed and professional basis. Skills and Experience: You’re a knowledge seeker. Regardless of method, you have obtained and exposed yourself to knowledge centers that have qualified you to master technical project delivery and the systems engineering required to successfully recover, deploy, and enhance infrastructures. You ideally have a four-year degree in a relevant field and are working towards or have already obtained your PMP certification. You’ve managed projects as the assigned “PM” instead of only having delivered them as an engineer. You enjoy the dynamic of wearing multiple hats and taking the lead on client-facing communication, expectations, and timelines. You’ve owned client-facing projects and have established a consultative rapport resulting in high client satisfaction levels upon project closure. You have at least 5 years of experience delivering IT waterfall projects working with systems and virtualization with exposure to enterprise infrastructures. You keep us true to our word. You have a tried-and-true organizational system to keep yourself (and others) on task while ensuring exceptional quality. You possess a winning combination of superb writing skills and highly refined verbal communication skills. You convey energy, confidence, and genuine interest over a call just as easily as you convey competence, professionalism, and trustworthiness in person. You translate to a C-Suite audience as seamlessly as you “talk tech” with engineers. Your emails are professionally worded, grammatically pristine, with the right pinch of personality. In any medium, you pride yourself in clear, effective, and persuasive communication. You have an approach to working hours that is more adaptable than the traditional \"9-to-5\". As this team responds to business-critical remediation projects, we are looking for an individual who is career-driven and won’t shrink back when work requirements extend into evenings, weekends, and holidays. While travel is minimal, you’re also open to getting on a plane when needed to be present at client sites when a project requires it. On the flip side, your hard work is rewarded with a generous comp plan that grows with the efforts you contribute, a flexible PTO policy, and an equally inspiring team that climbs mountains together. You are ready to be an effective remote worker and have a dedicated, private space for a home office with a private internet connection with at least 50MBPS bandwidth. Public WiFi and shared common spaces do not meet these standards. Desired Personality Traits: A Mythical Character. You aren’t alarmed when someone expects you to be a hero; in fact, you pride yourself on frequently delivering big just when all hope seems lost. Your persistence is notable, and you are a determined soul who insists on turning “We can’t” into “We can” If you meet a roadblock, you’ll try to scale it, dodge it, or blast through it before ever admitting defeat. The Devil is in the Details. You have an angelic ability to sort through chaos and make order. Your eye and attention for details helps you uncover hidden gems, while your thorough documentation and status updates capture and convey every facet of each stone. Corporate Usain Bolt. You’re capable of moving rapidly from task to task without getting rattled. Your desk is clear, your email inbox is empty, your kitchen counters aren’t cluttered, and you never spend 15 minutes tearing around the house in a desperate hunt for your car keys or train pass. You are a lean, mean, well-oiled machine. A Combo Meal. Your style is winningly ambidextrous. While you are known to be a loyal teammate and never falter on your commitment to seeing others thrive, you are not a push-over. You will fight back and advocate for the best marriage of client desires and superb delivery-pushing us along the path towards perfection. If Samwise Gamgee and Monica Geller had a child, it would be you. Emotionally Mature. Through your years of experience, you’ve learned that occasional hiccups are inevitable and now know enough to just keep moving towards the end goal. You’re calm under pressure, encourage respectful dialog, and understand that communication is the balm that can soothe the sting of conflict. The Benefits of Working for Entara, an Abacus Group Company: Exposure to a diverse array of technologies. Internal opportunities for career advancement. Part of a team of experienced professionals that aim to deliver exceptional service Competitive compensation. Robust benefits package: medical, dental, vision, disability, life insurance, 401k, and PTO. Opportunities to further technical education through online courses. Positive, friendly, and supportive office environment.", "summaryDescription" : "Project Manager, Incident Response at ABACUS. Skills: Incident response, Project delivery, Client management. Coordinate external technical projects. Follow established core processes", "postedDate" : "2026-06-14T01:43:32.664", "createdAt" : "2026-06-14T01:43:32.664", "lastUpdated" : "2026-06-15T10:35:48.757", "ingestTimestamp" : "2026-06-14T01:43:32.664", "mongoId" : "6a2c6a8f74d8ee00a090c9b3", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 145000, "salaryAnnualMax" : 205000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Event log analysis", "Syslog analysis", "Monitoring data analysis", "Memory dump analysis", "Troubleshoot issues", "Configure systems", "Test systems", "Implement systems", "Refine systems", "Document systems", "Monitor systems", "Transition systems", "Leadership", "Persistence", "Calm under pressure", "Incident response", "Project delivery", "Client management", "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Resource planning", "Continuous improvement", "Client-facing communication", "Expectation management", "Timeline management", "Consultative rapport", "Project management", "Waterfall projects", "Methodologies", "Technical environments", "Containment strategies", "Recovery strategies", "MFA", "Endpoint protection", "Systems", "Applications", "Infrastructures", "PMP certification", "ServiceNow" ], "skillCount" : 41, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2a8c2074d8ee00a06843cf", "title" : "Threat Detection and Response Specialist", "company" : "Pwc", "salary" : { "min" : 1100000.0, "max" : 1650000.0, "currency" : "CZK", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-Senior Threat Detection and Response Specialist in Prague, Czech Republic, adjusted for the consulting industry and a large company size." }, "location" : "Prague", "locations" : [ "Prague", "Czechia" ], "certifications" : [ "GIAC", "CompTIA CySA+", "Splunk certifications", "SC-200" ], "timestamp" : "2026-06-12T20:57:53.987", "fingerprint" : "c22e61503fa1409a9bdaf0a8d59e34dfbde5ff38623aee2efd96b3f7ad8b0621", "source" : "workday", "language" : "en", "applyUrl" : "https://pwc.wd3.myworkdayjobs.com/Global_Campus_Careers/job/Prague/Threat-Detection-and-Response-Specialist_723663WD", "externalId" : "723663WD", "locationPoint" : "50.08804,14.42076", "structuredLocations" : [ { "city" : "Prague", "country" : "Czech Republic", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "50.0874654,14.4212535" } ], "locationText" : "Prague, Czech Republic", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SIEM, Splunk, Microsoft Sentinel, Log management, Azure, AWS", "professionalSkills" : [ "Threat detection", "Incident response", "Threat hunting", "Threat intelligence", "Vulnerability management", "Forensic analysis", "Detection engineering", "Security monitoring", "Consulting", "Problem structuring", "Solution design", "Client communication", "Technical analysis", "Risk assessment", "Service offerings" ], "hardSkillsList" : [ "Data analysis", "Technical writing", "Security architecture" ], "softSkillsList" : [ "Structured thinking" ], "hardSkills" : [ { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Technical writing", "level" : "intermediate" }, { "name" : "Security architecture", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Structured thinking" } ], "majorSkills" : "Threat Detection, Incident Response, SIEM, Splunk", "majorSkillsList" : [ "Threat Detection", "Incident Response", "SIEM", "Splunk" ], "coreResponsibilities" : "Engage in hands-on SIEM work, Configure SIEM, Optimize SIEM, Troubleshoot SIEM, Develop detection rules, Refine detection use cases, Conduct threat hunting, Search for threats, Support incident response, Analyze incidents, Recommend remediation actions, Work with log management, Onboard log data sources, Assess detection maturity, Lead technical workshops, Lead working sessions, Present technical findings, Present recommendations, Participate in status meetings, Discuss scope, Discuss priorities, Discuss next steps, Build client relationships, Maintain client relationships, Prepare deliverables, Prepare assessment reports, Prepare solution proposals, Prepare recommendations, Prepare roadmaps, Compile executive summaries, Outline business impacts, Assist in proposal preparation, Provide technical input, Estimate labor, Define scope, Contribute to knowledge base, Develop service offerings", "teamCollaboration" : "Client security teams; Cross-functional teams", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Cybersecurity; Cyber threats; Cloud security; Security Operation Centers; Threat landscapes", "domainList" : [ "cybersecurity", "cyber-threats", "cloud-security", "security-operation-centers", "threat-landscapes" ], "domainSpecificKnowledge" : [ "Cybersecurity", "Cyber threats", "Cloud security", "Security Operation Centers", "Threat landscapes" ], "toolProficiency" : [ "Splunk", "Microsoft Sentinel" ], "communicationSkills" : "Client presentations; Technical communication", "documentationSkills" : "Deliverables preparation; Report writing; Proposal writing", "continuousLearning" : "Ongoing training; Certification training; Business skills training; Digital skills training", "problemSolvingSkills" : "Problem structuring; Analytical skills", "qualificationsBasic" : "3–6 years cybersecurity experience, Hands-on SIEM experience, Hands-on Threat Hunting experience, Hands-on Incident Response experience, Hands-on Detection Engineering experience, Analyze data and draw conclusions, Prepare technical outputs, Present work results to clients, Proficient in English (B2+)", "qualificationsPreferred" : "Experience with Microsoft Sentinel, Cloud security experience (Azure/AWS), Familiarity with SOAR platforms, Automation of security processes, GIAC certifications, CompTIA CySA+ certification, Splunk certifications, SC-200 certification, Consulting experience", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "**Job Description & Summary** ## About the Team For us, SOC is not just a ticket or detections „ _washing machine_ “. We perceive incident response as a mandatory part of our services, along with other proactive activities such as: Threat Hunting, Threat Intelligence, Vulnerability Management, as well as post-incident activities like Forensic Analysis and more. Threat Management team consists of cybersecurity professionals focused on prevention of the cyberattacks via detection and responding to cyber threats. The key pillars consist of incident response, threat hunting, threat intelligence, security monitoring, vulnerability management, engineering and consulting services. ## About your Manager [Lubomír](http://www.linkedin.com/in/lubomir-almer/) has over 10 years of cyber security experience with different projects related to mainly cyber security managed services, building and operating Security Operation Centers (SOC), Threat Hunting & Intelligence and Vulnerability Management. Lubomír is also responsible for team leading, project management, designing of cyber security managed services, creation and development of training plans and is a proven coach to train other team members or client staff. Outside of work, he is involved in teaching, science, and research at the University of Hradec Králové, where he guarantees and teaches the course Surveillance Systems and Forensic Analysis. ## Job Description & Summary We are building a new, compact delivery team (2-3 FTE) focused on Threat Detection & Response (TDR), which will be the backbone of our professional services offering. This team does not operate purely as a specialized \"tool team\" nor solely as an advisory team without technical depth. We are looking for individuals who want to combine hands-on technical work with a consulting overlay—a skill set that includes structuring problems, designing solutions, communicating them effectively to clients, and seeing projects through to completion. If you are looking for a role where you spend 80% of your time on slides and only 20% on technology, this position is not for you. if you also prefer to work exclusively in a SOC and have no interest in client context, this role is also not suitable. As a Senior Associate in our TDR team, you will be a key member of our delivery team, combining technical depth with a consulting approach. You will work directly on client projects, handling everything from technical analysis and implementation, to preparing deliverables and presenting findings to the client. You are not just a \"_tool operator_ \" – you are a \"security thinker\" who understands not only technology but also its impact on our clients' business. **Technical Delivery (~50% of Time)** * Engage in hands-on work with SIEM (primarily Splunk, secondarily Microsoft Sentinel) including configuration, optimization, and troubleshooting. * Develop and refine detection rules/use cases based on threat landscapes and client requirements. * Conduct threat hunting activities by proactively searching for threats within client environments. * Support incident response processes, including analyzing incidents and recommending remediation actions. * Work with log management architectures, data sources, and log onboarding. * Assess the maturity of clients' detection and response capabilities. **Client Communication (~30% of Time)** * Independently lead technical workshops and working sessions with client security teams. * Present technical findings and recommendations with the ability to translate technical jargon into understandable conclusions. * Participate in status meetings, discussing scope, priorities, and next steps. * Build and maintain working relationships with client security teams. **Documentation and Business Development (~20% of Time)** * Prepare high-quality deliverables: assessment reports, solution proposals, recommendations, and roadmaps. * Compile executive summaries and outline business impacts of technical findings. * Assist in proposal preparation—providing technical input, labor estimation, and scope definition. * Contribute to the internal knowledge base and aid in the development of service offerings. **What This Role Is NOT:** ⚠️ To avoid misunderstandings: * This is NOT a purely technical role where you'll spend all day in the console. Client communication and documentation are expected. * This is NOT a purely consulting role where you are only working on slides. We expect hands-on technical work. * This is NOT a SOC analyst role with rotational shifts. We work on projects, not in monitoring. * This is NOT a \"tool specialist\" role focused on a single product. We require breadth and adaptability. * This is NOT a role where you'll wait a year for something to happen. You'll be involved in projects starting from the first month. ## Requirements of the Role * 3–6 years of experience in the field of cybersecurity (consulting experience not mandatory). * Practical hands-on experience in at least one of the following areas: SIEM (preferably Splunk), Threat Hunting, Incident Response, Detection Engineering. * Ability to independently analyze data, draw conclusions, and prepare technical outputs. * Capable of presenting work results to clients (you don’t need to be a showman, but clear communication is essential). * Proficient in English at a working level (B2+); Czech is an advantage. * Structured thinking with the ability to break down problems into parts and design a plan of action. * Willingness to work in a hybrid model: combining technical work, client interaction, and documentation _**Nice to have**_ * Experience with Microsoft Sentinel and cloud security (Azure/AWS). * Familiarity with SOAR platforms or automation of security processes. * Certifications such as GIAC (GCIH, GCIA, GCDA), CompTIA CySA+, Splunk certifications, SC-200. * Previous experience in a consulting or professional services environment. * Knowledge of the MITRE ATT&CK framework and its practical application. ## **How this role will advance your career** * Deep understanding of the Threat Detection & Response (TDR) domain from both technical and business perspectives. * Development of consulting skills such as problem structuring, stakeholder management, and presentation skills. * Direct experience with diverse client environments and security challenges. * A clear path to a Manager role within 2–3 years, contingent on demonstrated competencies. * Opportunity to co-develop new service offerings and contribute to the growth of the practice ## Our Benefits and Fun * Concentrated experience and rapid career growth. It may sound like a platitude, but it really is. * Flexible working hours. * Fair salary plus paid overtime and annual bonus. * Paid time off 20 + 5 days, 3 wellbeing days and 2 extra days off from the company at the end of the year. * High-end Ultrabook and iPhone with unlimited data. * Benefit program with 45.000 points that you can use for holidays, education, food vouchers, sports, health... Simply on what you enjoy. * Support for your [education and development](https://www.youtube.com/watch?v=nshQrtPKmPQ): business and digital skills training (e.g. Alteryx, Power BI, Tableau), ongoing training and certification, for example in Microsoft (Azure, PowerApps), project management (Prince2, PMI), service management (ITIL), agile development (Scrum, SAFe), DAMA, Salesforce, coaching and presentation skills and more. We pay for technical certifications and the time you spend studying them. * Opportunity to work in the future at a foreign PwC office, for example in the USA, Canada and there are others in the selection. * [Extra-work activities](https://www.facebook.com/163939170375/posts/pfbid07FyCSNT4sdUkH6FtV3tCeAFbVwVwSAFi4bi9pWi4JJomw7vrH7i53LML76qDJ6nLl/) and [Away Days](https://www.facebook.com/pwccr/posts/10154732053300376/) (team building, etc.). * Regular feedback on your work, also consultation with a coach with whom you can address your further development and career direction. Check us out on: [Cyber & Privacy | Czech Republic](http://www.pwc.com/cz/en/sluzby/cyberandprivacy.html) PwC is the largest audit team in the Czech Republic, but also law, tax, consulting and technology, data or forensic teams. Find out how easy it is to combine this knowledge when you're in the right place. With us, you will get the opportunity to see how business is done in large companies. We are part of an international network of companies with more than 364,000 colleagues in 151 countries. At PwC, we create an inclusive work environment where everyone can be themselves and find their place and opportunity to develop. This year, we have successfully maintained the prestigious **Equal Pay Certification** , making us one of only four companies in the Czech Republic (and the only one from the Big 4) that demonstrably implements fair compensation practices regardless of gender. [Ochrana osobních údajů pro žadatele o zaměstnání ](https://www.pwc.com/cz/cs/kariera-dnes/ochrana-osobnich-udaju.html) / [Privacy Statement for Recruitment Applicants ](https://www.pwc.com/cz/en/kariera-dnes/ochrana-osobnich-udaju.html) #LI-EK1", "summaryDescription" : "Threat Detection and Response Specialist at Pwc. Skills: Threat Detection, Incident Response, SIEM, Splunk. Engage in hands-on SIEM work. Configure SIEM", "postedDate" : "2026-06-11T16:41:02.598", "createdAt" : "2026-06-11T16:41:02.268", "lastUpdated" : "2026-06-12T20:57:53.987", "ingestTimestamp" : "2026-06-11T16:41:02.268", "mongoId" : "6a2a8c2074d8ee00a06843cf", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://pwc.wd3.myworkdayjobs.com/Global_Campus_Careers/job/Prague/Threat-Detection-and-Response-Specialist_723663WD", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Data analysis", "Technical writing", "Security architecture", "Structured thinking", "Threat Detection", "Incident Response", "SIEM", "Splunk", "Threat detection", "Incident response", "Threat hunting", "Threat intelligence", "Vulnerability management", "Forensic analysis", "Detection engineering", "Security monitoring", "Consulting", "Problem structuring", "Solution design", "Client communication", "Technical analysis", "Risk assessment", "Service offerings", "Roadmap planning", "Cybersecurity", "Cyber threats", "Cloud security", "Security Operation Centers", "Threat landscapes", "GIAC", "CompTIA CySA+", "Splunk certifications", "SC-200", "Microsoft Sentinel" ], "skillCount" : 34, "jobCategory" : "human-resources", "seniorityLevel" : "mid", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "69d5e4972beec4dd3d931a4b", "title" : "Security Engineer SoC, Devices and Services Security", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 159000.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T08:45:33.623", "fingerprint" : "6c8641e4d0b21d44b043cbc71acbabf46b2c1a41aa4579901d0a4634be7d5a12", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10384840/apply", "externalId" : "386d4521-cc5c-4dc0-8398-757729495e80", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Perl, Linux, RTOS, Secure boot, Cryptography", "professionalSkills" : [ "Threat modeling", "Secure coding", "Identity management", "System administration", "Network security", "Hardware security", "Secure chip architecture", "System review", "Firmware security" ], "hardSkillsList" : [ "Hardware security mechanisms", "Secure boot", "Trusted execution environments", "Operating system internals", "Semiconductor reverse engineering", "Fault injection", "Side channel attack", "Side channel mitigation" ], "hardSkills" : [ { "name" : "Hardware security mechanisms", "level" : "intermediate" }, { "name" : "Secure boot", "level" : "intermediate" }, { "name" : "Trusted execution environments", "level" : "intermediate" }, { "name" : "Operating system internals", "level" : "intermediate" }, { "name" : "Semiconductor reverse engineering", "level" : "intermediate" }, { "name" : "Fault injection", "level" : "intermediate" }, { "name" : "Side channel attack", "level" : "intermediate" }, { "name" : "Side channel mitigation", "level" : "intermediate" } ], "majorSkills" : "Security design, Threat modeling, Code reviews, Security testing, Hardware security", "majorSkillsList" : [ "Security design", "Threat modeling", "Code reviews", "Security testing", "Hardware security" ], "coreResponsibilities" : "Guide secure development of devices, Perform security design, Perform threat modeling, Perform code reviews, Perform security testing, Perform fuzzing, Propose tools and techniques, Research tools and techniques, Develop tools and techniques, Improve security posture of devices, Provide technical security expertise, Provide consultation to device teams, Identify security risks, Create mitigations, Develop new security policies, Develop new security procedures, Promote security awareness, Develop training materials, Participate in IP development projects", "teamCollaboration" : "Partner with business teams; Work with product engineers", "domainKnowledge" : "Hardware security; Secure boot; Trusted execution environments; Operating system internals; Linux; RTOS; Semiconductor reverse engineering; Fault injection; Side channel attack", "domainList" : [ "hardware-security", "secure-boot", "trusted-execution-environments", "operating-system-internals", "linux", "rtos", "semiconductor-reverse-engineering", "fault-injection", "side-channel-attack" ], "domainSpecificKnowledge" : [ "Hardware security", "Secure boot", "Trusted execution environments", "Operating system internals", "Linux", "RTOS", "Semiconductor reverse engineering", "Fault injection", "Side channel attack" ], "continuousLearning" : "Ongoing DEI events; Learning experiences; Knowledge-sharing; Training", "innovationCreativity" : "Develop new intellectual property", "problemSolvingSkills" : "Identify security flaws; Find bugs in chips", "qualificationsBasic" : "3+ years threat modeling, 3+ years secure coding, 3+ years identity management, 3+ years software development, 3+ years cryptography, 3+ years system administration, 3+ years network security, Bachelor's degree in EE, Bachelor's degree in Computer Engineering, Knowledge of hardware security, Knowledge of secure boot, Knowledge of trusted execution environments, Knowledge of OS internals, Knowledge of Linux, Knowledge of common RTOS, Semiconductor reverse engineering", "qualificationsPreferred" : "Master's degree or above, Experience using Python, Experience using Perl, Experience using Linux bash, Experience with hardware security, Experience with system security, Experience with network security, Experience using cryptography, Code review experience, Exploit development experience, Fault injection experience, Side channel attack experience, Side channel mitigation experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Role Have you wanted an opportunity to find security issues in the chips and low level software that enables various Amazon digital products? Are you able to find bugs in chips by reviewing design and code and by performing tests? This position will provide you with a unique opportunity to do both The Security team is responsible for identifying security flaws and guiding device business to achieve secure hardware architecture for chips used in Amazon devices like Fire TV, Eero, Alexa to name a few. This team partners with business team and performs chip level security testing, secure chip architecture design and advisory, system review, security review for Secure boot code, bootloader code and firmware. In this role, you will: *Help guide the secure development of devices at Amazon, from security design, threat modeling to code reviews, security testing and fuzzing *Propose, research and develop tools and techniques to improve the security posture of devices at scale *Provide technical security expertise and consultation to device product teams *Identify security risks and work with product engineers to create mitigations *Develop new security policies and procedures *Empower others to improve their security acumen by promoting awareness and developing training materials *Participate in projects that develop new intellectual property About the team About AmSec: Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 3+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Bachelor's degree in Electrical Engineering, Computer Engineering, or a related technical field - Knowledge of hardware security mechanisms, including secure boot, trusted execution environments - Knowledge of operating system internals, with emphasis on Linux and common RTOS environments - Semiconductor reverse engineering Preferred Qualifications: - Master's degree or above in Computer Science, Computer Engineering, Electrical Engineering, or related fields - Experience using scripting languages, such as Python, Perl, Linux bash - Experience with hardware, system and network security, including use of cryptography in these verticals - Strong code review and exploit development - Hands on Fault injection and side channel attack and mitigation experience Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "Security Engineer SoC, Devices and Services Security at Amazon.com Services LLC. Skills: Security design, Threat modeling, Code reviews, Security testing, Hardware security. Guide secure development of devices. Perform security design", "postedDate" : "2026-06-13T15:13:07.070", "createdAt" : "2026-06-13T15:13:07.070", "lastUpdated" : "2026-06-15T08:45:33.623", "ingestTimestamp" : "2026-06-13T15:13:07.070", "mongoId" : "69d5e4972beec4dd3d931a4b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10384840/apply", "salaryAnnualMin" : 159000, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Hardware security mechanisms", "Secure boot", "Trusted execution environments", "Operating system internals", "Semiconductor reverse engineering", "Fault injection", "Side channel attack", "Side channel mitigation", "Security design", "Threat modeling", "Code reviews", "Security testing", "Hardware security", "Secure coding", "Identity management", "System administration", "Network security", "Secure chip architecture", "System review", "Firmware security", "Linux", "RTOS" ], "skillCount" : 22, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "69cf26122beec4dd3d90b514", "title" : "Service Response Center Representative", "company" : "Tampa General Hospital", "industry" : "Healthcare", "salary" : { "min" : 37000.0, "max" : 48000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline data for an Entry level Service Response Center Representative in Tampa, FL, adjusted for the healthcare industry and company size." }, "location" : "United States-Florida-Tampa", "locations" : [ "United States-Florida-Tampa", "
TGH Main Campus (TGHMAIN)
1 Tampa General Circle

Tampa, 33601

" ], "timestamp" : "2026-06-15T06:49:16.909", "fingerprint" : "bc4e751ffa939da5b8a30134ab0f9d03e52c6a657081408cf4f10897c143e9b0", "source" : "taleo", "language" : "en", "applyUrl" : "https://tgh.taleo.net/careersection/ex/jobdetail.ftl?job=675591", "externalId" : "675591", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tampa", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "27.9449854,-82.4583107" } ], "locationText" : "Tampa, Florida, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "High School", "technicalSkills" : "Word, Windows, Excel", "professionalSkills" : [ "Issue resolution", "Documentation", "Dispatching", "Monitoring services", "Service tracking" ], "hardSkillsList" : [ "Call center operations", "Office procedures", "Office equipment operation", "Office software proficiency" ], "hardSkills" : [ { "name" : "Call center operations", "level" : "intermediate" }, { "name" : "Office procedures", "level" : "intermediate" }, { "name" : "Office equipment operation", "level" : "intermediate" }, { "name" : "Office software proficiency", "level" : "intermediate" } ], "majorSkills" : "Customer service, Call handling, Issue resolution, Service tracking", "majorSkillsList" : [ "Customer service", "Call handling", "Issue resolution", "Service tracking" ], "coreResponsibilities" : "Answer calls from customers, Resolve issues within scope, Exhaust all avenues for resolution, Document support services, Communicate support services, Dispatch support services, Monitor support services, Utilize Service Tracking Software, Respond to code calls, Communicate vital information, Maintain documentation for work orders, Maintain reporting for work orders, Perform job duties in accordance with mission", "domainKnowledge" : "Plant Operations; Environmental Services; Transport; Pest Control; Linen; Equipment Cleaning; Hospital policy", "domainList" : [ "plant-operations", "environmental-services", "transport", "pest-control", "linen", "equipment-cleaning", "hospital-policy" ], "domainSpecificKnowledge" : [ "Plant Operations", "Environmental Services", "Transport", "Pest Control", "Linen", "Equipment Cleaning", "Hospital policy" ], "toolProficiency" : [ "Service Tracking Software" ], "communicationSkills" : "Communicate clearly; Disseminate information", "documentationSkills" : "Maintain documentation; Maintain reporting", "problemSolvingSkills" : "Issue resolution", "outcomesObjectives" : "Provide best possible service; One call resolution", "qualificationsBasic" : "High school graduate or GED, Customer service experience, Telephone experience, Call center experience, Ability to communicate clearly, Obtain and disseminate information correctly, Knowledge of office procedures, Operation of standard office equipment, Proficiency in standard office software", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Job Summary Under direct supervision of Manager, Service Response Center this position is responsible for answering calls from both internal and external customers and resolving issues within the scope of their duties. Representatives are expected to exhaust all avenues towards one call resolution. Documenting, communicating, dispatching and monitoring a wide variety of support services expected of this position. Utilizing the Service Tracking Software for Support Service areas to include Plant Operations, Environmental Services, Transport, Pest Control, Linen, and Equipment Cleaning as well as other areas as assigned is required. Responding to code calls as outlined by hospital policy and accurately communicating vital information and direction is also a requirement of this position. The Service Response Representative’s goal is to provide the best possible service to all customers in a pleasant and courteous manner. Will maintain documentation and reporting for all work orders and equipment on which work has been performed. Responsible for performing job duties in accordance with mission, vision and values of Tampa General Hospital. Qualifications High School graduate or GED Previous customer service and telephone experience, preferably in a call center environment is required. The ability to communicate clearly and ensure required information is obtained and disseminated correctly is required. Education and/or experience that provides knowledge of office procedures, operation of standard office equipment, and proficiency in standard office software (Word, Windows, Excel) Tampa", "summaryDescription" : "Service Response Center Representative at Tampa General Hospital. Skills: Customer service, Call handling, Issue resolution, Service tracking. Answer calls from customers. Resolve issues within scope", "createdAt" : "2026-06-14T06:05:06.987", "lastUpdated" : "2026-06-15T06:49:16.909", "ingestTimestamp" : "2026-06-14T06:05:06.987", "mongoId" : "69cf26122beec4dd3d90b514", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 37000, "salaryAnnualMax" : 48000, "salaryBand" : "30k-50k", "hasSalary" : true, "allSkills" : [ "Call center operations", "Office procedures", "Office equipment operation", "Office software proficiency", "Customer service", "Call handling", "Issue resolution", "Service tracking", "Documentation", "Dispatching", "Monitoring services", "Plant Operations", "Environmental Services", "Transport", "Pest Control", "Linen", "Equipment Cleaning", "Hospital policy", "Service Tracking Software" ], "skillCount" : 19, "jobCategory" : "sales", "jobSubcategory" : "customer_success", "seniorityLevel" : "Entry", "dataQualityScore" : 0.7777778, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c7bce74d8ee00a094b1e1", "title" : "Mobile Response Peer Support Specialist", "company" : "Crestwood Behavioral Health", "salary" : { "min" : 40000.0, "max" : 55000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an Entry-level Mobile Response Peer Support Specialist in Napa, United States, adjusted for the healthcare industry and part-time employment." }, "location" : "Napa, California, United States", "locations" : [ "Napa", "California", "United States" ], "timestamp" : "2026-06-16T05:08:51.304", "fingerprint" : "45b73e7436dc0e9283e1ce370b50af5f1e68daa27320dd6855ed3b5f61c4457c", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/crestwoodcareers/jobs/7770181003", "externalId" : "7770181003", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Napa", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.4898675,-122.3218414" } ], "locationText" : "Napa, California, United States", "employmentType" : "PART_TIME", "minimumEducation" : "High School", "experienceMinYears" : 0, "experienceMaxYears" : 2, "experienceLevel" : "Entry", "coreResponsibilities" : "Provide peer support, Assist with crisis intervention, Facilitate support groups, Educate clients on recovery, Connect clients to resources, Document client interactions, Collaborate with treatment team", "teamCollaboration" : "Treatment team", "domainKnowledge" : "Mental health recovery; Crisis intervention; Peer support principles", "domainList" : [ "mental-health-recovery", "crisis-intervention", "peer-support-principles" ], "domainSpecificKnowledge" : [ "Mental health recovery", "Crisis intervention", "Peer support principles" ], "documentationSkills" : "Client interaction documentation", "problemSolvingSkills" : "Crisis intervention", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Are you looking for a meaningful role in behavioral health and have the desire to work with an organization that puts people first? If you have a passion for helping others along their recovery journey, then we invite you to join our Crestwood family! For more than 50+ years Crestwood has been committed to creating innovative recovery programs and developing compassionate communities that support each client in their journey. Our model of care focuses on a personal and self-directed process that empowers the people we serve and helps them to develop the skills to thrive! Title: Mobile Response Peer Support Specialist Job Duties: The Peer Support Specialist is an entry-level role designated to provide peer support work under the direct supervision of an LMFT, LCSW, or LPCC. The Peer Support Specialist is responsible for assisting and supporting individuals in a mobile crisis in our Mobile Response Program. The Peer Support Specialist will engage in a range of activities to support individuals seeking recovery from substance abuse disorder, mental illness, or both. Activities may include mentoring, advocating for people in recovery, and building relationships. The Crestwood Behavioral Health Mobile Response Team (MRT) provides community-based interventions for those experiencing a mental health crisis. Our team is available to deploy into the community to provide crisis intervention, de-escalation, and stabilization. The MRT is staffed by Licensed/Registered Mental Health Counselors and Peer Support Specialists who can provide services throughout Napa County, including residences, parks, shelters, schools, and hospitals. The goal of MRT is to de-escalate the crisis and safely connect individuals with mental health care and resources. Schedule: Part-Time: PM (Monday - Friday, 5:00PM-9:00PM) Qualifications: Minimum of a high school diploma/GED. A mental health/SUD lived experience. Medi-Cal Peer Support Specialist certification or ability to obtain after hire within an agreed upon time frame. 80-hour Peer Support Learning or equivalent – successfully completed within 90 days of hire or has taken the training within 2-years of hire. Has current techniques of behavioral intervention training within six (6) months of hire. Crestwood Offers Comprehensive Benefits Packages to Full-Time Employees Including: Medical, Dental, and Vision Coverage Life Insurance Vacation Paid Sick Leave Sick Leave Buy Back 401(k) Retirement Scholarship Program Qualifying Supervision for BBS Associates Competitive Pay Paid Holidays Service Awards Jury Duty Pay About the Campus: Crestwood’s Mobile Crisis Services program through our Napa Crisis Stabilization Unit provides crisis services as part of a 24-hour crisis response continuum of care. Our program services are centered on crisis stabilization that utilizes evidence-based practices and features peer support. Our Mobile Crisis Services include screening, assessment, stabilization, de-escalation, follow up, and coordination with healthcare services and other supports. The salary range listed below represents the minimum and maximum base pay per hour at the time of posting. Final salary offered to the candidate selected for the position will be based on factors including but not limited to candidate's skills, experience, licensure, and program acuity. Pay Range: $21—$24 USD It’s About Growth! Our employees are our most valuable assets. Did you know that at Crestwood you can gain experience at one of California’s leading behavioral health service providers? We deliver industry leading education and training that allows our team members to succeed and continue to grow their careers with Crestwood. Check out our Career Page to learn more about being a part the Crestwood Family and the benefits available. https://workatcrestwood.com/ Crestwood is proud to be an Equal Opportunity Employer that is committed to inclusion, equity and diversity. We embrace all differences and are fully committed to fostering a sense of belonging for everyone. We also take affirmative action to offer employment and advancement opportunities to all qualified applicants without regard to race, color, religion, age, sex, national origin, disability status, veteran status, sexual orientation, pregnancy, marital status, gender identity or expression, or any other characteristic protected by federal, state, or local laws. If you need assistance and/or a reasonable accommodation due to ability during the application or recruiting process, please talk with your hiring contact/recruiter or send a request to HR@CBHI.net. Employment is contingent upon successful completion of a background investigation including criminal history and identity check. Pursuant to the California Consumer Privacy Act (CCPA), please review this link to provide information on how we collect and use your data. Crestwood is required to participate in the E-Verify program. To learn more, please see: E-Verify Participation, Right to Work notices, or visit www.e-verify.gov.", "summaryDescription" : "Mobile Response Peer Support Specialist at Crestwood Behavioral Health. Provide peer support. Assist with crisis intervention", "postedDate" : "2026-06-14T20:03:00.151", "createdAt" : "2026-06-14T20:03:00.151", "lastUpdated" : "2026-06-16T05:08:51.304", "ingestTimestamp" : "2026-06-14T20:03:00.151", "mongoId" : "6a2c7bce74d8ee00a094b1e1", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 40000, "salaryAnnualMax" : 55000, "salaryBand" : "30k-50k", "hasSalary" : true, "allSkills" : [ "Mental health recovery", "Crisis intervention", "Peer support principles" ], "skillCount" : 3, "jobCategory" : "general", "jobSubcategory" : "general", "seniorityLevel" : "Entry", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.95 }, { "id" : "68b706967fc9a711f0f6ee8b", "title" : "Security Engineer, Kuiper Security Controls and Assurance", "company" : "Amazon Kuiper Manufacturing Enterprises LLC", "industry" : "Software Development, Systems Security Engineering, alexa and amazon devices", "salary" : { "min" : 136000.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Bellevue, Washington, USA", "locations" : [ "Bellevue, Washington, USA" ], "timestamp" : "2026-06-15T06:40:44.232", "fingerprint" : "87990c5b9e9dab60e2baf20c89f54f22b4d770ba93363e48295179c2f0689e02", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3055222/apply", "externalId" : "b78f429b-5b90-47b4-96af-24ba2b325630", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bellevue", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6144219,-122.1923370" }, { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "40.7127281,-74.0060152" }, { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" }, { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Bellevue, Washington, United States; New York, New York, United States; Austin, Texas, United States; Arlington, Virginia, United States", "employmentType" : "FULL_TIME", "remoteFriendly" : false, "workSiteFlexibility" : "onsite", "rawDescription" : "Project Kuiper is Amazon’s low Earth orbit satellite broadband network. Its mission is to deliver fast, reliable internet to customers and communities around the world, and we’ve designed the system with the capacity, flexibility, and performance to serve a wide range of customers, from individual households to schools, hospitals, businesses, government agencies, and other organizations operating in locations without reliable connectivity. Export Control : This position requires that the candidate selected be a U.S. Citizen in order to comply with U.S. government-imposed requirements related to the nature of the work and/or where it will be performed. We are looking for a highly autonomous person motivated to take on challenges with a technical background to be part of a growing team that analyzes and implements Kuiper controls. As part of the Kuiper Enterprise Technology team, be seen as an expert in delivering Kuiper control systems and processes to meet Kuiper security and compliance standards. Be a key liaison with Kuiper service teams, infrastructure teams, Kuiper Security, and Global Trade and Compliance. Have the ability to dive deep, understand, document, communicate and implement controls for IT systems and processes, and be able to drive innovative process changes and automation throughout the Kuiper organization. You are someone who loves working across many stakeholders to design solutions for complex compliance challenges. We have a team culture that encourages ownership, diversity, inclusion, and innovation. We expect team members and management alike to take a high degree of ownership for their program vision of ideas. You will have an opportunity to work across the entire Kuiper organization implementing and managing various controls along side of Kuiper Security. Kuiper security owns policy and definition of controls, this role owns the coordination, development, implementation, and change management of controls as well as managing defects and improvements. Key job responsibilities • Understand and implements ISO 27001, NIST, and other security controls • Understanding of threat modeling, manual source code review, security vulnerabilities, attacker exploit techniques, and methods for their remediation. • Assisting certifications and assessments programs by liaising with Kuiper Security, auditors, and Kuiper service teams, articulating control implementation and impact, and documenting procedures • Establishing credibility and maintaining strong working relationships with groups involved with Information Security and compliance teams (Kuiper Sec, Info Sec, Legal, Internal Audit, Physical Security, Developer Community, Networking, Systems, etc.) • Identify automation opportunities while working across engineering teams • Helps drive continuous improvements to the Kuiper compliance program, the program management process, and control implementation projects in coordination with the service teams and Kuiper Security • Captures and tracks information security metrics and goals for all required controls • Develop dashboards, canaries, and alarms for all automated controls • Clearly communicating vision, deliverables, and project status to management and key technical and business stakeholders • Delivers recommendations and risk interpretations in a clear, concise, and audience-specific format A day in the life This is a fast-paced, intellectually challenging position, and will work with leaders in multiple technology areas. Have relentlessly high standards for yourself and everyone you work with, and be constantly looking for ways to improve your product’s performance, quality and cost. We want individuals who are ready for this challenge and want to reach beyond what is possible today. About the team Here at Amazon, we embrace our differences. We are committed to furthering our culture of inclusion. Amazon has ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and host annual and ongoing learning experiences. Amazon’s culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust. At Amazon, our mission is to be the most customer-centric company on Earth. To get there, we need exceptionally talented, bright and driven people. We're dedicated to supporting new team members. Our team has a broad mix of experience levels and Amazon tenures, and we’re building an environment that celebrates knowledge sharing and mentorship Basic Qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - Bachelor's degree in computer science or equivalent - Knowledge of networking protocols such as HTTP, DNS and TCP/IP Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Experience with AWS products and services - Experience with programming languages such as Python, Java, C++ Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $136,000/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Engineer, Kuiper Security Controls and Assurance at Amazon Kuiper Manufacturing Enterprises LLC", "postedDate" : "2026-06-13T18:29:07.609", "createdAt" : "2026-06-13T18:29:07.609", "lastUpdated" : "2026-06-15T06:40:44.232", "ingestTimestamp" : "2026-06-13T18:29:07.609", "mongoId" : "68b706967fc9a711f0f6ee8b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3055222/apply", "salaryAnnualMin" : 136000, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.97 }, { "id" : "6a2cc29974d8ee00a0a06f13", "title" : "RFP Strategy & Operations Analyst", "company" : "Sierra", "industry" : "Operations", "salary" : { "min" : 150000.0, "max" : 180000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco, CA", "locations" : [ "San Francisco, CA" ], "timestamp" : "2026-06-15T08:28:33.484", "fingerprint" : "8b5609e62ad368e72e22400f60e3e796fb065b729ce627956fd182235233c00a", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/Sierra/03424869-528d-4db1-b099-5d7f736d1a39/application", "externalId" : "03424869-528d-4db1-b099-5d7f736d1a39", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "AI tooling, Workflow automation", "professionalSkills" : [ "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement" ], "hardSkillsList" : [ "RFP response", "Content infrastructure" ], "hardSkills" : [ { "name" : "RFP response", "level" : "intermediate" }, { "name" : "Content infrastructure", "level" : "intermediate" } ], "majorSkills" : "RFP strategy, Operations analysis", "majorSkillsList" : [ "RFP strategy", "Operations analysis" ], "coreResponsibilities" : "Own RFP response, Triage incoming RFP requests, Coordinate with internal stakeholders, Deliver accurate responses on time, Drive cross-functional coordination, Partner with SMEs, Get right answers fast, Manage competing priorities, Own content infrastructure, Maintain RFP knowledge base, Identify knowledge gaps, Work with SMEs to close gaps, Raise quality bar, Build toward automation, Implement AI tooling, Iterate on workflow automation, Reduce manual work, Increase consistency, Support Sales in evaluations, Help AEs navigate requirements, Flag patterns and themes, Inform how Sales positions Sierra, Ensure response puts Sierra's best foot forward", "teamCollaboration" : "Coordinate with SMEs; Partner with Security; Partner with Legal; Partner with Product; Support Sales", "domainKnowledge" : "Enterprise security; Compliance questionnaires; SOC 2; ISO 27001; GDPR", "domainList" : [ "enterprise-security", "compliance-questionnaires", "soc-2", "iso-27001", "gdpr" ], "domainSpecificKnowledge" : [ "Enterprise security", "Compliance questionnaires", "SOC 2", "ISO 27001", "GDPR" ], "toolProficiency" : [ "Conveyor", "Loopio", "Responsive" ], "communicationSkills" : "Written communication; Translate complex information", "innovationCreativity" : "AI tooling; Workflow automation", "qualificationsBasic" : "2-3 years experience, Exceptional attention to detail, Manage multiple competing priorities, Sustain high output and quality, Improve processes inherited", "qualificationsPreferred" : "Prior experience with RFP platforms, Exposure to enterprise security questionnaires, Experience in sales-adjacent function, Experience in customer trust function", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "ABOUT US At Sierra, we’re creating a platform to help businesses build better, more human customer experiences with AI. We are primarily an in-person company based in San Francisco, with growing offices in Atlanta, New York, London, Paris, Madrid, Munich, Singapore, Japan, and Sydney. We are guided by a set of values that are at the core of our actions and define our culture: Trust, Customer Obsession, Craftsmanship, Intensity, and Family. These values are the foundation of our work, and we are committed to upholding them in everything we do. Our co-founders are Bret Taylor https://www.linkedin.com/in/brettaylor/ and Clay Bavor https://www.linkedin.com/in/claybavor/. Bret currently serves as Board Chair of OpenAI. Previously, he was co-CEO of Salesforce (which had acquired the company he founded, Quip) and CTO of Facebook. Bret was also one of Google's earliest product managers and co-creator of Google Maps. Before founding Sierra, Clay spent 18 years at Google, where he most recently led Google Labs. Earlier, he started and led Google’s AR/VR effort, Project Starline, and Google Lens. Before that, Clay led the product and design teams for Google Workspace. WHAT YOU’LL DO Sierra closes large, complex enterprise deals, and RFPs are an increasingly critical part of that process. This role is the operational backbone of Sierra's RFP response function, owning day-to-day execution with an emphasis on accuracy, speed, and quality. - Own Sierra’s RFP response: Triage incoming RFP requests, coordinate with internal stakeholders, and deliver accurate, polished responses back to sales on time - Drive cross-functional coordination: Partner with subject-matter experts (SMEs) in Security, Legal, and Product to get the right answers fast, managing competing stakeholder priorities without losing momentum or quality - Own the content infrastructure: Maintain and continuously improve Sierra's RFP knowledge base, identifying gaps, working with SMEs to close them, and raising the quality bar on every response - Build toward automation: Implement and iterate on AI tooling and workflow automation to reduce manual work and increase consistency across the response process - Support Sales in high-stakes evaluations: Help AEs navigate complex RFP requirements, flag patterns and themes in prospect questions that inform how Sales positions Sierra, and ensure every response puts Sierra's best foot forward WHAT YOU’LL BRING - 2-3 years of experience at a high-growth technology company in product operations, revenue operations, legal operations, deal desk, solutions engineering, or investment banking - Exceptional attention to detail and the ability to manage multiple competing priorities simultaneously without losing quality - Strong written communication skills - you can translate complex, technical information into clear and accurate language quickly - Proven ability to sustain high output and high quality simultaneously - you don’t cut corners when the workload spikes - A track record of improving the processes you inherit, not just running them - Genuine enthusiasm for applying AI and automation tools to make repetitive work faster and better EVEN BETTER… - Prior experience with RFP or proposal platforms (Conveyor, Loopio, or Responsive) - Exposure to enterprise security or compliance questionnaires (SOC 2, ISO 27001, GDPR, etc.) - Experience in a sales-adjacent or customer trust function OUR VALUES - Trust: We build trust with our customers with our accountability, empathy, quality, and responsiveness. We build trust in AI by making it more accessible, safe, and useful. We build trust with each other by showing up for each other professionally and personally, creating an environment that enables all of us to do our best work. - Customer Obsession: We deeply understand our customers’ business goals and relentlessly focus on driving outcomes, not just technical milestones. Everyone at the company knows and spends time with our customers. When our customer is having an issue, we drop everything and fix it. - Craftsmanship: We get the details right, from the words on the page to the system architecture. We have good taste. When we notice something isn’t right, we take the time to fix it. We are proud of the products we produce. We continuously self-reflect to continuously self-improve. - Intensity: We know we don’t have the luxury of patience. We play to win. We care about our product being the best, and when it isn’t, we fix it. When we fail, we talk about it openly and without blame so we succeed the next time. - Family: We know that balance and intensity are compatible, and we model it in our actions and processes. We are the best technology company for parents. We support and respect each other and celebrate each other’s personal and professional achievements. WHAT WE OFFER We want our benefits to reflect our values and offer the following to full-time employees: - Flexible (unlimited) paid time off - Medical, dental, and vision benefits for you and your family - Life insurance and disability benefits - Retirement plan dependent on country of employment - Parental leave - Fertility and family building benefits through Carrot - Lunch, as well as delicious snacks and coffee to keep you energized - Discretionary benefit stipend giving people the ability to spend where it matters most - Free alphorn lessons These benefits are further detailed in Sierra's policies, may vary by region, and are subject to change at any time, consistent with the terms of any applicable compensation or benefits plans. Eligible full-time employees can participate in Sierra's equity plans subject to the terms of the applicable plans and policies. BE YOU, WITH US We're working to bring the transformative power of AI to every organization in the world. To do so, it is important to us that the diversity of our employees represents the diversity of our customers. We believe that our work and culture are better when we encourage, support, and respect different skills and experiences represented within our team. We encourage you to apply even if your experience doesn't precisely match the job description. We strive to evaluate all applicants consistently without regard to race, color, religion, gender, national origin, age, disability, veteran status, pregnancy, gender expression or identity, sexual orientation, citizenship, or any other legally protected class.", "summaryDescription" : "RFP Strategy & Operations Analyst at Sierra. Skills: RFP strategy, Operations analysis. Own RFP response. Triage incoming RFP requests", "createdAt" : "2026-06-14T05:06:55.990", "lastUpdated" : "2026-06-15T08:28:33.484", "ingestTimestamp" : "2026-06-14T05:06:55.990", "mongoId" : "6a2cc29974d8ee00a0a06f13", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 150000, "salaryAnnualMax" : 180000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "RFP response", "Content infrastructure", "RFP strategy", "Operations analysis", "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement", "Enterprise security", "Compliance questionnaires", "SOC 2", "ISO 27001", "GDPR", "Conveyor", "Loopio", "Responsive" ], "skillCount" : 19, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c8bbe74d8ee00a097397f", "title" : "Project Manager (Incident Response)", "company" : "MOXFIVE", "industry" : "PMO", "salary" : { "min" : 80000.0, "max" : 120000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "Remote", "locations" : [ "Remote" ], "certifications" : [ "CAPM", "PMP", "CSM" ], "timestamp" : "2026-06-15T05:22:05.118", "fingerprint" : "3d1634295f9f4c519ba215312b85f54aa5fdb74d333a0d872e01a70dca4acf3e", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/moxfive/67da822e-6f01-4495-be15-23a58c291040/application", "externalId" : "67da822e-6f01-4495-be15-23a58c291040", "industryFunction" : { }, "structuredLocations" : [ { "workMode" : "remote" } ], "locationText" : "", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceLevel" : "Manager", "professionalSkills" : [ "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement" ], "hardSkillsList" : [ "Financial tracking", "Budget monitoring", "Time tracking", "Project accounting" ], "hardSkills" : [ { "name" : "Financial tracking", "level" : "intermediate" }, { "name" : "Budget monitoring", "level" : "intermediate" }, { "name" : "Time tracking", "level" : "intermediate" }, { "name" : "Project accounting", "level" : "intermediate" } ], "majorSkills" : "Incident response, Project management, Client communication", "majorSkillsList" : [ "Incident response", "Project management", "Client communication" ], "coreResponsibilities" : "Coordinate incident response projects, Align technical workstreams, Serve as connection to clients, Serve as connection to technical teams, Serve as connection to legal counsel, Serve as connection to stakeholders, Own project documentation, Generate Statements of Work, Generate change orders, Generate level of efforts, Compile status updates, Distribute status updates, Monitor project budgets, Track time, Track expenses, Flag scope creep, Coordinate scheduling for meetings, Coordinate scheduling for technical activities, Coordinate scheduling for stakeholder briefings, Identify project risks, Surface project risks, Contribute to process improvement, Contribute to system improvement", "teamCollaboration" : "Cross-functional workstreams; Client coordination; Technical team coordination; Legal counsel coordination; Stakeholder coordination", "projectManagementSkills" : [ "Project coordination", "Project management", "Milestone logging", "Deliverable scheduling", "Call cadence management", "Scope creep management", "Risk identification" ], "domainKnowledge" : "Incident response; Cybersecurity; IT services; Ransomware attacks; Forensics; Restoration; Remediation; Legal documentation; Client communications", "domainList" : [ "incident-response", "cybersecurity", "it-services", "ransomware-attacks", "forensics", "restoration", "remediation", "legal-documentation", "client-communications" ], "domainSpecificKnowledge" : [ "Incident response", "Cybersecurity", "IT services", "Ransomware attacks", "Forensics", "Restoration", "Remediation", "Legal documentation", "Client communications" ], "toolProficiency" : [ "Microsoft Office", "Excel", "PowerPoint", "Salesforce", "HubSpot" ], "communicationSkills" : "Status reports; Client-facing documentation; Stakeholder briefings", "documentationSkills" : "Project documentation; Trackers; Status reports; Milestone logs; Deliverable schedules; Call cadence", "continuousLearning" : "Process improvement; System improvement", "problemSolvingSkills" : "Complexity management", "specialRequirements" : "On-call schedule rotation", "outcomesObjectives" : "Keep projects organized; Shape client experience; Keep response on track; Maintain client trust; Engagements close with precision; Engagements close with professionalism", "qualificationsBasic" : "3+ years project coordination experience, 3+ years project management experience, Bachelor's degree or equivalent experience", "qualificationsPreferred" : "Background in consulting, Background in professional services, Background in client-facing coordination, Exposure to cybersecurity, Exposure to IT services, Exposure to incident response, Experience generating SOWs, Experience generating proposals, Experience generating contract documentation, Familiarity with legal requirements, Familiarity with insurance requirements, Experience with CRM systems, CAPM certification, PMP certification, CSM certification, Actively working toward certification", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Project Manager (Incident Response) Who You Are You are the person who makes chaos look manageable. When a cyberattack hits and five workstreams are spinning at once, you're the one holding the center, tracking every moving part, keeping every stakeholder informed, and making sure nothing falls through the cracks. You don't need to speak fluent threat actor, but you know exactly what needs to happen next and who needs to know about it. You speak with clients just as fluently as you speak with the technical team. You know the difference between a status update that actually helps and one that just creates more questions. You've managed projects under pressure before, and you've learned that in high-stakes environments, precision and calm are superpowers. You're wired for complexity. Juggling 5–8 concurrent engagements doesn't overwhelm you, it's where you do your best work. You care about the details that others overlook, because you know those details are what keep a response on track and a client's trust intact. Why You Matter You'll be joining MOXFIVE as a Project Manager supporting our Incident Response practice - the operational backbone that keeps our engagements running when organizations need us most. When ransomware strikes, the technical work is only part of the story. Forensics, restoration, remediation, legal documentation, client communications all must move simultaneously, and someone has to orchestrate it all. That's you. You're the reason our technical teams can stay focused on the response itself, our clients stay informed without feeling lost, and our engagements close with the precision and professionalism MOXFIVE is known for. Your work doesn't just keep projects organized. It directly shapes how organizations experience one of the most stressful moments they'll ever face. What You'll Do - Coordinate incident response projects across concurrent technical workstreams keeping everything and everyone aligned - Serve as the connection between clients, technical teams, legal counsel, and internal MOXFIVE stakeholders - Own project documentation: trackers, status reports, milestone logs, deliverable schedules, call cadence. They must be accurate, complete, and always current - Generate Statements of Work, change orders, and level of efforts with clear scope and pricing - Compile and distribute timely status updates that tell the story of where an engagement stands - Monitor project budgets, track time and expenses, and flag potential scope creep before they become a problem - Coordinate scheduling for client meetings, technical activities, and stakeholder briefings across a portfolio of active engagements - Identify and surface project risks early, working with stakeholders to keep things on course - Participate in a rotating on-call schedule (roughly once every six weeks) to support active incident response operations - Contribute to the ongoing improvement of MOXFIVE's project management processes and systems What You'll Bring - 3+ years of project coordination or project management experience, ideally in consulting, professional services, or technology environments - Exceptional organizational skills and meticulous attention to detail, you manage multiple concurrent projects without losing track of what matters - Strong written and verbal communication skills, with the ability to create clear, confident status reports and client-facing documentation - Proficiency with project management platforms - Advanced skills in Microsoft Office, particularly Excel and PowerPoint - Comfort interfacing with clients, partners, and senior stakeholders in fast-moving, high-pressure situations - Financial tracking experience - budget monitoring, time tracking, and basic project accounting - A process-oriented mindset with an eye for where things can be done better - Bachelor's degree in business, communications, or a related field. Or the equivalent in real-world experience Bonus points for: - Background in consulting, professional services, or client-facing coordination roles - Exposure to cybersecurity, IT services, or incident response environments - Experience generating SOWs, proposals, or contract documentation - Familiarity with legal or insurance-related project requirements - Experience with CRM systems like Salesforce or HubSpot - CAPM, PMP, CSM, or other project management certification (or actively working toward one)", "summaryDescription" : "Project Manager (Incident Response) at MOXFIVE. Skills: Incident response, Project management, Client communication. Coordinate incident response projects. Align technical workstreams", "createdAt" : "2026-06-13T22:06:35.396", "lastUpdated" : "2026-06-15T05:22:05.118", "ingestTimestamp" : "2026-06-13T22:06:35.396", "mongoId" : "6a2c8bbe74d8ee00a097397f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 80000, "salaryAnnualMax" : 120000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Financial tracking", "Budget monitoring", "Time tracking", "Project accounting", "Incident response", "Project management", "Client communication", "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement", "Project coordination", "Milestone logging", "Deliverable scheduling", "Call cadence management", "Scope creep management", "Risk identification", "Cybersecurity", "IT services", "Ransomware attacks", "Forensics", "Restoration", "Remediation", "Legal documentation", "Client communications", "CAPM", "PMP", "CSM", "Microsoft Office", "Excel", "PowerPoint", "Salesforce", "HubSpot" ], "skillCount" : 36, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.95 }, { "id" : "69f9b8024c40e2acd1113f75", "title" : "WHS Regulatory Response Case Manager, Governance and External Affairs", "company" : "Amazon.com Services LLC", "industry" : "Corporate Operations, Risk Family, Logistics", "salary" : { "min" : 74200.0, "max" : 129800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Arlington, Virginia, USA", "locations" : [ "Arlington, Virginia, USA" ], "certifications" : [ "Professional auditing qualification" ], "timestamp" : "2026-06-15T07:26:26.424", "fingerprint" : "a9ef2d54ba4344b7e46b732a0c1f34fae4fb0695dd3dcaf1dbcb028163c98c71", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10410963/apply", "externalId" : "2edfaf1e-9106-4749-abdf-4b8cea497b6b", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceLevel" : "Manager", "technicalSkills" : "SQL, Excel", "professionalSkills" : [ "Regulatory compliance", "Case management", "Risk mitigation", "Process implementation" ], "hardSkillsList" : [ "Regulatory response", "Governance frameworks", "Policy development", "Procedure development", "Case assessment", "Control implementation", "Risk analysis", "Trend analysis" ], "hardSkills" : [ { "name" : "Regulatory response", "level" : "intermediate" }, { "name" : "Governance frameworks", "level" : "intermediate" }, { "name" : "Policy development", "level" : "intermediate" }, { "name" : "Procedure development", "level" : "intermediate" }, { "name" : "Case assessment", "level" : "intermediate" }, { "name" : "Control implementation", "level" : "intermediate" }, { "name" : "Risk analysis", "level" : "intermediate" }, { "name" : "Trend analysis", "level" : "intermediate" } ], "majorSkills" : "WHS governance, Regulatory response, Case management", "majorSkillsList" : [ "WHS governance", "Regulatory response", "Case management" ], "coreResponsibilities" : "Develop WHS governance frameworks, Maintain WHS governance frameworks, Develop WHS policies, Maintain WHS policies, Develop WHS procedures, Maintain WHS procedures, Lead case assessment processes, Implement control measures, Manage WHS regulatory cases, Analyze WHS data, Analyze WHS trends, Provide expert advice, Coordinate with stakeholders, Conduct regular audits, Review WHS systems, Review WHS processes", "teamCollaboration" : "Coordinate with stakeholders", "domainKnowledge" : "Workplace Health & Safety; High-risk operations regulations; Canadian regulations", "domainList" : [ "workplace-health-safety", "high-risk-operations-regulations", "canadian-regulations" ], "domainSpecificKnowledge" : [ "Workplace Health & Safety", "High-risk operations regulations", "Canadian regulations" ], "documentationSkills" : "Regulatory filings; Regulatory reports", "problemSolvingSkills" : "Risk mitigation", "qualificationsBasic" : "5+ years compliance program management, 5+ years legal experience, 5+ years governance experience, 5+ years audit experience, 5+ years risk/loss prevention experience, Experience handling confidential information, Experience with regulatory filings, Experience with regulatory reports", "qualificationsPreferred" : "3+ years program requirements definition, 3+ years data and metrics leveraging, Professional auditing qualification, Risk credentials, Compliance credentials", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon is seeking an experienced Workplace Health & Safety (WHS) professional to join the Governance Regulatory Response and Activity (RRA) team who will be responsible for regulatory response case managing. This role combines strategic planning with practical implementation to ensure regulatory compliance and promote a safety-first culture of all Amazon operations in North America. A strong background in health and safety management is required, specifically in regulations governing high-risk operations. Experience in varying Amazon operations and business unit processes is needed. Canadian experience is a plus. Key job responsibilities - Develop and maintain WHS governance frameworks, policies, and procedures aligned with current legislation and industry’s best practices - Lead case assessment processes and implement control measures across various operational areas - Manage complex WHS regulatory cases, including external agency investigations, associate claims and complaints, and execution of programs and procedures. - Analyze WHS data and trends to identify emerging risks and opportunities for improvement - Provide expert advice to senior management on WHS matters and risk mitigation strategies - Coordinate with stakeholders to ensure effective implementation of WHS initiatives - Conduct regular audits and reviews of WHS systems and processes Basic Qualifications: - 5+ years of compliance program management, legal, governance, audit, risk/loss prevention, or equivalent experience - Experience handling confidential information - Experience with regulatory filings and reports or equivalent - Bachelor's degree or above Preferred Qualifications: - 3+ years of program requirements definition and data and metrics leveraging to drive improvements experience - Professional auditing qualification, or similar risk or compliance credentials - Experience with SQL and Excel Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, TN, Nashville - 66,800.00 - 116,800.00 USD annually USA, VA, Arlington - 74,200.00 - 129,800.00 USD annually USA, WA, Bellevue - 82,700.00 - 129,800.00 USD annually", "summaryDescription" : "WHS Regulatory Response Case Manager, Governance and External Affairs at Amazon.com Services LLC. Skills: WHS governance, Regulatory response, Case management. Develop WHS governance frameworks. Maintain WHS governance frameworks", "postedDate" : "2026-06-13T19:35:26.277", "createdAt" : "2026-06-13T19:35:26.277", "lastUpdated" : "2026-06-15T07:26:26.424", "ingestTimestamp" : "2026-06-13T19:35:26.277", "mongoId" : "69f9b8024c40e2acd1113f75", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10410963/apply", "salaryAnnualMin" : 74200, "salaryAnnualMax" : 129800, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "Regulatory response", "Governance frameworks", "Policy development", "Procedure development", "Case assessment", "Control implementation", "Risk analysis", "Trend analysis", "WHS governance", "Case management", "Regulatory compliance", "Risk mitigation", "Process implementation", "Workplace Health & Safety", "High-risk operations regulations", "Canadian regulations", "Professional auditing qualification" ], "skillCount" : 17, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "E-Commerce", "llmIndustryConfidence" : 0.95 }, { "id" : "69dde45b2beec4dd3d9a3edc", "title" : "Clinical Nurse III - Rapid Response", "company" : "City of Hope", "industry" : "Healthcare", "salary" : { "min" : 105000.0, "max" : 145000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Clinical Nurse III - Rapid Response in Duarte, California, adjusted for the healthcare industry and company size." }, "location" : "United States-California-Duarte", "locations" : [ "United States-California-Duarte", "ICU", "Onsite, Nights, Nights" ], "certifications" : [ "RN", "BLS", "ACLS" ], "timestamp" : "2026-06-16T07:09:11.787", "fingerprint" : "1fb13d553a8f26a7210dfb05c91bf0f88a23b446ef8544b3717e60426a380337", "source" : "taleo", "language" : "en", "applyUrl" : "https://aa067.taleo.net/careersection/ex/jobdetail.ftl?job=233264", "externalId" : "233264", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Duarte", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "34.1394513,-117.9772873" } ], "locationText" : "Duarte, California, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "professionalSkills" : [ "Clinical documentation", "Patient assessment", "Care coordination" ], "hardSkillsList" : [ "Rapid response", "Ventilator management", "ECG interpretation" ], "hardSkills" : [ { "name" : "Rapid response", "level" : "intermediate" }, { "name" : "Ventilator management", "level" : "intermediate" }, { "name" : "ECG interpretation", "level" : "intermediate" } ], "majorSkills" : "Rapid Response Team, Critical Care, Patient Care", "majorSkillsList" : [ "Rapid Response Team", "Critical Care", "Patient Care" ], "coreResponsibilities" : "Provide rapid response, Assess patient condition, Administer medications, Collaborate with healthcare team, Document patient care, Educate patients and families", "teamCollaboration" : "Healthcare team; Physicians; Nurses", "domainKnowledge" : "Critical care protocols; Rapid response procedures; HIPAA", "domainList" : [ "critical-care-protocols", "rapid-response-procedures", "hipaa" ], "domainSpecificKnowledge" : [ "Critical care protocols", "Rapid response procedures", "HIPAA" ], "toolProficiency" : [ "Epic EHR" ], "communicationSkills" : "Patient education; Family education", "documentationSkills" : "Clinical documentation", "problemSolvingSkills" : "Patient assessment; Clinical decision making", "outcomesObjectives" : "Improve patient outcomes; Ensure patient safety", "qualificationsBasic" : "3-5 years experience, Current CA RN license, BLS certification required", "qualificationsPreferred" : "ACLS certification preferred, Critical care experience preferred, Epic experience preferred", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Join the transformative team at City of Hope , where we're changing lives and making a real difference in the fight against cancer, diabetes, and other life-threatening illnesses. City of Hope’s growing national system includes its Los Angeles campus, a network of clinical care locations across Southern California, a new cancer center in Orange County, California, and treatment facilities in Atlanta, Chicago and Phoenix. Our dedicated and compassionate employees are driven by a common mission: To deliver the cures of tomorrow to the people who need them today. The Clinical Nurse is a vital part of the healthcare team, dedicated to maintaining continuous and high-quality patient care. This position requires flexibility, strong clinical skills, and the ability to work effectively with diverse teams and patient populations. As a Rapid Response nurse you will play a crucial role in providing high quality patient care to critically ill oncology patients. As a successful candidate, you will: Integrates and practices according to the City of Hope Professional Practice Model to deliver care service excellence. In alignment with City of Hope mission and values, the Division of Nursing and Patient Care Services vision and mission, and with continuous focus on the patient, family and community, carries out the nursing process, coordinates interdisciplinary care planning, documents according to standards, including validation of the patient and caregiver’s understanding of the plan of care and expected outcomes. The nurse is a change agent, committed to lifelong learning, professional development and embodiment of City of Hope organizational mission and values, and the values and ethos of the profession of nursing. Must be able to work 7pm - 7:30am - Nights Full time Your qualifications should include: Bachelor's degree in Nursing 3-5 years experience Current CA RN License BLS, ACLS, PALS through American Heart Association ICU/Critical Care experience preferred Chemotherapy/ Biotherapy Certificate or Chemotherapy/ Immunotherapy Certificate (Must be obtained within 6 months of hire) City of Hope employees pay is based on the following criteria: work experience, qualifications, and work location. City of Hope is an equal opportunity employer. To learn more about our Comprehensive Benefits, please CLICK HERE . United States-California-Duarte", "summaryDescription" : "Clinical Nurse III - Rapid Response at City of Hope. Skills: Rapid Response Team, Critical Care, Patient Care. Provide rapid response. Assess patient condition", "createdAt" : "2026-06-14T18:47:39.000", "lastUpdated" : "2026-06-16T07:09:11.787", "ingestTimestamp" : "2026-06-14T18:47:39.000", "mongoId" : "69dde45b2beec4dd3d9a3edc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 105000, "salaryAnnualMax" : 145000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Rapid response", "Ventilator management", "ECG interpretation", "Rapid Response Team", "Critical Care", "Patient Care", "Clinical documentation", "Patient assessment", "Care coordination", "Critical care protocols", "Rapid response procedures", "HIPAA", "RN", "BLS", "ACLS", "Epic EHR" ], "skillCount" : 16, "jobCategory" : "healthcare", "jobSubcategory" : "support", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.98 }, { "id" : "6a307fb3f292fd229c05c989", "title" : "RFP - Workforce Capability Development and Platform Solution", "company" : "Imagine Worldwide", "industry" : "Education", "salary" : { "min" : 1500000.0, "max" : 2500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "The estimation is based on the mid-seniority level for a Workforce Capability Development and Platform Solution role in the Education industry, with adjustments for company size and location within India." }, "location" : "IW - Global", "locations" : [ "IW - Global" ], "certifications" : [ "Automatic certification" ], "timestamp" : "2026-06-16T09:28:45.668", "fingerprint" : "575d1cf5bf93edcfc6a15bddacbb927363f0a9926834b97789ac249d6d59d72b", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/imagineworldwide/jobs/4286664009", "externalId" : "4286664009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "iwo", "state" : "osun state", "country" : "Nigeria", "continent" : "africa", "source" : "locations-index", "geo" : "7.63527,4.18156" } ], "locationText" : "IW - Global", "technicalSkills" : "SQL, Python, R, Scala, Spark, Dbt, Tableau, Power BI, Looker, Metabase, Superset, Qlik, MicroStrategy, Snowflake, BigQuery, Redshift, Databricks, Fivetran, Airflow, Dbt Cloud, Delta Lake, Scikit-learn, TensorFlow, PyTorch, XGBoost, LightGBM, Hugging Face, MLflow, AWS, GCP, Azure", "professionalSkills" : [ "Capability building", "Operational excellence", "Performance capacity", "Role development", "Content creation", "Microlearning delivery", "Evidence-based model", "Continuous improvement", "Data analysis", "Data engineering", "ML/AI", "Business intelligence", "Analytics engineering", "Quantitative analysis", "Statistical methods", "ML frameworks", "BI platforms", "Cloud data stacks", "Modelling skills" ], "hardSkillsList" : [ "Regression", "Classification", "Clustering", "Time-series", "A/B testing", "Causal inference" ], "hardSkills" : [ { "name" : "Regression", "level" : "intermediate" }, { "name" : "Classification", "level" : "intermediate" }, { "name" : "Clustering", "level" : "intermediate" }, { "name" : "Time-series", "level" : "intermediate" }, { "name" : "A/B testing", "level" : "intermediate" }, { "name" : "Causal inference", "level" : "intermediate" } ], "majorSkills" : "Workforce capability, Platform solution, Learning ecosystem, Competency-based model", "majorSkillsList" : [ "Workforce capability", "Platform solution", "Learning ecosystem", "Competency-based model" ], "coreResponsibilities" : "Design learning paths, Build learning paths, Deliver learning paths, Create content, Deliver microlearning, Host platform, Drive operational excellence, Strengthen performance, Strengthen capacity, Provide role-specific training, Deliver mandatory training, Map skills to standards, Enable staff performance, Support organization growth, Deliver concise modules, Track mandatory training, Provide compliance reporting, Design tailored paths, Develop role-specific training, Deliver organization-wide training, Deliver ongoing development, Master skill sets, Ensure platform reliability, Perform under low-bandwidth", "teamCollaboration" : "Global team", "projectManagementSkills" : [ "RFP process" ], "domainKnowledge" : "Literacy skills; Numeracy skills; Autonomous learning; Foundational skills; Child-directed learning; Tech-enabled learning; Educational opportunities; Health outcomes; Wealth outcomes; Social outcomes; Evidence-based model; Learning gains; Universal literacy; Workforce development; Competency-based learning; Operational processes; Role development; Professional development; Core competencies; New responsibilities; Learning ecosystem; Mandatory policy training; Child Protection Policy; SWAP Process; Deviations Management; Risk Management; Program Metrics; Internal Reporting; External Reporting; Technical requirements; Field Implementation; Government Liaison; Data Analytics; Program Management; International standards; Competence standards; ISO 10015:2019", "domainList" : [ "literacy-skills", "numeracy-skills", "autonomous-learning", "foundational-skills", "child-directed-learning", "tech-enabled-learning", "educational-opportunities", "health-outcomes", "wealth-outcomes", "social-outcomes", "evidence-based-model", "learning-gains", "universal-literacy", "workforce-development", "competency-based-learning", "operational-processes", "role-development", "professional-development", "core-competencies", "new-responsibilities", "learning-ecosystem", "mandatory-policy-training", "child-protection-policy", "swap-process", "deviations-management", "risk-management", "program-metrics", "internal-reporting", "external-reporting", "technical-requirements", "field-implementation", "government-liaison", "data-analytics", "program-management", "international-standards", "competence-standards", "iso-10015-2019" ], "domainSpecificKnowledge" : [ "Literacy skills", "Numeracy skills", "Autonomous learning", "Foundational skills", "Child-directed learning", "Tech-enabled learning", "Educational opportunities", "Health outcomes", "Wealth outcomes", "Social outcomes", "Evidence-based model", "Learning gains", "Universal literacy", "Workforce development", "Competency-based learning", "Operational processes", "Role development", "Professional development", "Core competencies", "New responsibilities", "Learning ecosystem", "Mandatory policy training", "Child Protection Policy", "SWAP Process", "Deviations Management", "Risk Management", "Program Metrics", "Internal Reporting", "External Reporting", "Technical requirements", "Field Implementation", "Government Liaison", "Data Analytics", "Program Management", "International standards", "Competence standards", "ISO 10015:2019" ], "toolProficiency" : [ "Onebillion software" ], "communicationSkills" : "Platform demo; Live demonstration", "documentationSkills" : "Compliance reporting", "continuousLearning" : "Ongoing professional development", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "African-based vendor", "outcomesObjectives" : "Empower children; Reach full potential; Become literate; Become numerate; Deliver foundational skills; Improve outcomes; Scale toward goal; Deliver measurable gains; Strengthen core competencies; Adapt to new responsibilities; Deliver at optimal level; Drive operational excellence; Strengthen performance; Strengthen capacity; Perform at world-class level; Support organization growth; Master skill sets; Ensure operational reliability", "qualificationsBasic" : "90-person global team, African-based vendor", "qualificationsPreferred" : "PhD preferred, GCP Professional Data Engineer, AWS Data Analytics, Databricks Certified, Dbt Certified", "rawDescription" : "PLEASE NOTE: This is an RFP, not a job application. Proposals submitted through Greenhouse will not be reviewed. All submissions must be emailed to rfp.global@imagineworldwide.org. Who We Are Imagine Worldwide is a nonprofit organization on a mission to empower millions of children with the literacy and numeracy skills they need to reach their full potential. Imagine exists to demonstrate that children with personalized technology in their hands can become literate and numerate with little or no adult instruction. We are partnering with organizations across the globe to pilot promising autonomous learning solutions, building an evidence base on what works, why, and under what conditions, and using data to drive continuous improvement of content, approach, and implementation. We believe child-directed, tech-enabled learning can deliver foundational literacy and numeracy skills to hundreds of millions of children, increasing their educational opportunities and improving their health, wealth, and social outcomes. In our programs, learners use custom tablets and headsets that rotate among as many as eight children per day. Children drive their own learning at their own pace, using software developed by our partners onebillion, which provides a complete, research-based curriculum and pedagogy. The software can be adapted to each child’s cultural and linguistic context, enabling deployments in multiple countries, languages, and contexts — in-school, out-of-school, and refugee camps. Our evidence-based model, rigorously proven across nine randomized controlled trials (RCTs), currently operates in seven Sub-Saharan African countries, delivering measurable learning gains in some of the world’s most challenging environments. As we scale toward our goal of universal literacy, including massive initiatives like the BEFIT program serving 3.8 million children in Malawi, our internal operations must keep pace. To achieve this, we require a workforce development partner who can meet the same standard of precision and effectiveness we apply to our student-facing programs. Purpose of this RFP Imagine Worldwide seeks a comprehensive learning solution that supports organization-wide capability building across onboarding, mandatory policy training, operational processes, role development, and ongoing professional development for our 90-person global team. We invest significantly in recruiting and placing the right people in the right roles. That investment requires an equal commitment in how we onboard, train, develop, and equip our staff to strengthen core competencies, adapt to new responsibilities, and deliver at their optimal level throughout their tenure. To deliver on that commitment, we are issuing this Request for Proposals to identify a qualified African-based vendor to design, build, and deliver a competency-based learning ecosystem, including content creation, microlearning delivery, and a hosted platform. The solution must be grounded in evidence of its ability to drive operational excellence and strengthen the performance and capacity of our global team. We are looking for a partner who can provide role-specific learning paths, organization-wide mandatory training (e.g., Child Protection Policy, SWAP Process), and ongoing professional development, all delivered through a hosted learning platform and benchmarked against internationally recognized standards and frameworks. Where international competency standards exist, all skills-based training must be mapped against them, including but not limited to ISO 10015:2019, and vendors must clearly indicate which standard applies to each skill domain. Our standard is that every staff member is enabled to perform at a world-class level through relevant learning experiences, grounded in evidence, and aligned with recognized standards of competence. We invite qualified vendors to demonstrate their ability to meet this expectation and deliver a solution that can support our organization as it grows in scale and complexity. Core Objectives Our primary goal is to adopt a Competency-Based Workforce Model. We require a solution that delivers on four core objectives: Organization-Wide Mandatory Training: Concise, trackable modules for all staff on critical policies and processes, including HR and Child Protection Policies, SWAP Process, Deviations Management, Risk Management, Program Metrics, and Internal/External Reporting. Each module must carry automatic certification and full compliance reporting. Tailored Role-Specific Training: Learning paths designed specifically for the technical requirements of each role within Imagine Worldwide. This includes everything from Field Implementation and Government Liaison work to Data Analytics and Program Management. Ongoing, Measured Professional Development: Learning must be a continuous journey. We require a roadmap that includes micro-credentials and formal certification benchmarked against international standards to track and reward the growth of our staff over time. Exceptional and Culturally Relevant Onboarding: A rapid-deployment system that integrates new hires into our mission, culture, and operational philosophy. Scope of Work To ensure operational alignment and minimize deployment risk, this project will be executed in two distinct, iterative phases: Phase 1: Proof of Concept (PoC) – The SWAP Process: The vendor will design, package, and deliver a microlearning intervention focused exclusively on our priority capability: The SWAP Process. This initial phase will serve to test and validate the content framework, user engagement, and knowledge mastery mechanisms across global and country teams before full-scale deployment. Phase 2: Organization-Wide Strategic Scaling: Upon successful verification and completion of the PoC, the vendor will systematically scale the methodology to analyze, audit, and build out learning paths for all remaining organizational capabilities (estimated at approximately 20 core areas). The proposal must provide a comprehensive solution across these four specific components: Component I: Content Development using a Skill-Based Framework We seek a partner who can: Conduct a Skills and Capability Audit: Assess the current operational maturity and map existing capability gaps across all departments and functions. This baseline evaluation must explicitly pinpoint critical execution risks by role to guide content prioritization. Identify International Skill Standards: Map our internal roles against international competency frameworks to ensure our staff are performing and delivering at a world-class level. Develop Skill Taxonomies: Build a skills framework for each role that can be updated as our programs and field operations evolve. Ensure Practical Application: 100% of the content is tied to \"on-the-job\" performance, focusing on what staff need to do and what they need to know. Establish Competency Benchmarking and Proficiency Thresholds: Propose how they would define role-specific proficiency thresholds and competency benchmarks appropriate to Imagine Worldwide’s operating context. Deliver a Robust Existing Content Library: Bring a proven, field-tested content library that can be adapted to our roles, context, and standards. Please clearly describe what existing content you would draw from and how it would be tailored to Imagine Worldwide, and what, if anything, would need to be built from scratch. Enable Content Ownership and Internal Adaptability: Our programs evolve constantly, and our training must keep pace. We require a solution that allows Imagine Worldwide staff to independently create, update, and publish content without returning to the vendor for every revision. Vendors must describe what internal content and LMS management capabilities are included, and what training they will provide to ensure our team can manage the platform fully and independently. Component II: Packaging into Microlearning Materials We hold engagement to the highest standard. How content is packaged and delivered matters as much as the learning material. Content must be delivered in high-impact, short-form formats, including: Micro-Videos: Professional, 3–5 minute videos that simplify complex tasks. Active Assessments: Question-based checks that require the learner to demonstrate mastery before they can move to the next level. Low-Bandwidth Optimization: All materials must be designed to perform reliably in low-bandwidth environments, as internet connectivity across Sub-Saharan Africa remains inconsistent. Mobile Adaptability: All materials must render cleanly across screen sizes to accommodate the full range of how and where our team accesses content. Component III: The Learning Tool Platform We are seeking a learning management platform that serves as a central home for our learning ecosystem for all staff learning and development. It must feature: Extreme User-Friendliness: The platform must demonstrate a high degree of usability, requiring minimal onboarding for end users. Guided Learning Paths: The platform must assign and recommend content based on a staff member's role, progress, and assessment results, ensuring each person follows a learning journey that reflects where they are. Analytics SSO (Single Sign-On) capability is preferred. Content Standards: The platform must support SCORM and xAPI content standards to ensure compatibility with third-party content and portability of learning data. Data Security: Vendors must describe their data security protocols, including where staff data is hosted, encryption standards, and access controls. Data Ownership: Imagine Worldwide must retain full ownership of all staff learning data and any custom content developed or adapted under this contract. Data Consumption/Bandwidth: Given that staff operate in low-bandwidth environments, the platform must minimize data consumption and support offline or low-data modes. Platform Certifications: Vendors must disclose relevant platform certifications, including but not limited to SOC 2 Type II, ISO 27001, or equivalent data security and privacy standards. Vendor Qualifications Proposals must include the following to be considered: Organizational Profile: A concise overview of your organization, its mission, and demonstrated expertise in workforce development, instructional design, and LMS platforms. Include the year of founding, the current team size, and the countries or regions in which your organization actively operates. Relevant Experience: A minimum of 8–10 years of demonstrated expertise in capability-led learning design, workforce development, and organizational performance management. Preference will be given to vendors with proven experience delivering scalable, role-based training solutions within nonprofits, INGOs, or organizations operating directly in Sub-Saharan Africa. Certifications: Vendors must list all relevant professional and platform certifications. This may include, but is not limited to: Instructional design credentials (e.g., ATD CPTD, CPLP) LMS/platform security certifications (e.g., SOC 2, ISO 27001) Industry accreditation for micro-credentials or digital badging (e.g., 1EdTech/IMS Global, Credly-compatible issuance) Client References: Please provide a minimum of two client references from comparable organizations. References will not be contacted unless a vendor advances to the shortlist stage. The Standard of Excellence Our standard of excellence is defined by: A mastery-based approach: Moving away from passive video-watching toward question-based active learning, where a staff member must demonstrate a skill to progress. International Benchmarking: All training must be mapped against recognized international competency standards, including ISO 10015:2019, where applicable. Operational Integration: The solution must fit seamlessly into our Sub-Saharan African field operations, accounting for low-bandwidth environments and high-stakes implementation. Implementation and Support: Vendors must describe their implementation approach, expected go-live timeline, ongoing technical support model, and platform uptime guarantee. We expect a structured handover process that does not leave our team dependent on the vendor for day-to-day operations. Time to Competency: Vendors must demonstrate how their solution tracks the time it takes any staff member to reach proficiency, whether joining the organization, moving into a new role, or completing a mandatory or skills-based training module. Proficiency thresholds will be defined collaboratively during the implementation phase. This is a primary performance indicator for us. Manager Visibility: The platform must provide managers with regular, up-to-date insight into staff learning progress and assessment performance, enabling proactive support and targeted intervention where needed. Every member of our team deserves a learning experience built for their role, and we do not accept \"one-size-fits-all\" training. Budget and Duration Budget: A fixed budget ceiling is not disclosed for this procurement. All pricing proposals will be evaluated against our 'Cost Effectiveness & Value' criterion, which constitutes 15% of the total evaluation score. We are a nonprofit organization and welcome mission-aligned and nonprofit pricing structures where applicable. Please clearly itemize your pricing, including: Content development or adaptation costs Platform licensing or subscription fees (per user, per year, or alternative model) Implementation and onboarding support costs Any optional add-ons or tiered service levels Contract Duration: The initial contract term is 12 months from project commencement. Contract renewal for subsequent capability scaling will be contingent upon performance outcomes, delivery metrics, and successful completion of the Phase 1 milestones. Selection Criteria: The Evidence-Based Live Demo Imagine Worldwide will evaluate proposals through a two-stage process designed to assess both theoretical capability and practical performance. Stage 1: Technical & Commercial Written Evaluation (Paper Shortlist) Written proposals will be scored out of a baseline of 100 points using the following weighted criteria to determine the competitive shortlist: Technical Approach & Pragmatism (30%): Evaluation of the proposed competency-based methodology, microlearning packaging, and alignment with our organizational goals. Relevant Experience & Capability (30%): Assessment of the vendor’s organizational track record (8–10 years) in global workforce development, particularly in Sub-Saharan Africa or the NGO sector. Work Plan & Risk Management (25%): Evaluation of the implementation timeline, including the operational readiness of the Phase 1 Proof of Concept (SWAP process). Cost Effectiveness & Value (15%): Assessment of commercial sustainability, transparent pricing structures, and nonprofit considerations. Stage 2: Holistic Live Demonstration (The Final Selection) Vendors who pass the written threshold will be invited to a live demonstration. This stage allows the evaluation panel to holistically experience the platform's functionality, content relevance, and User Experience (UX) all at once. The demo will be evaluated against these core operational experiences: Role Customization: Show us how the learning experience is built differently for two distinct roles (e.g., a Data Coordinator vs. a Field Manager). Mandatory Training: Show us how a staff member is assigned, completes, and is certified on an organization-wide mandatory training module, and how compliance is tracked and reported to leadership. Ongoing Skills Development: Show us how a staff member follows a role-specific learning path, earns a micro-credential, and is automatically re-engaged with refresher content over time. Onboarding Strength: Show us how a new hire's journey becomes mission and role-ready. Platform Usability and User Experience: Prove that your platform is modern, clear, engaging, and user-centric. Certification: Demonstrate how a staff member earns a digital certificate after mastering a skill set. Operational Reliability: Demonstrate how the platform performs under low-bandwidth conditions. Proposal Format Proposals must be submitted in a PDF format and remain concise and focused with a maximum of 6 pages. Proposals should include: Cover Page: Each proposal must open with a cover page including the following: Organization name and logo Primary contact name and title Email address and phone number Organization website Registered office location and country of incorporation Date of submission Organizational overview: Who you are and your relevant experience Technical approach: How you would address each of the four components in the Scope of Work Platform Demo: A link to a pre-recorded platform walkthrough or demo video. Shortlisted vendors will subsequently be invited to present a live demonstration to the Imagine Worldwide team. Certifications: List of all relevant credentials and platform certifications Pricing proposal: Clearly itemized Client references: Minimum two, with contact details Submission Vendors should note the following key dates and plan their submissions accordingly. Milestone Submission Timeline RFP Release June 12, 2026 Deadline for Vendor Questions June 19, 2026 (11:59 PM GMT) Responses to Vendor Questions Issued June 26, 2026 Proposal Submission Deadline July 10, 2026 (11:59 PM GMT) (Round 2 submissions) Shortlisted Vendor Notification July 24, 2026 Shortlisted Demos July 31, 2026 Contract Award August 14, 2026 Onboarding and Scoping with Vendor September 1, 2026 Target Implementation Start October 1, 2026 All proposals must be submitted by July 3, 2026, in PDF format via email to Karabo Moloko and Sane Ngidi at rfp.global@imagineworldwide.org. Please direct all inquiries to the same address. Shortlisted vendors will be notified by July 24, 2026, and contacted directly to schedule their live demonstration. Imagine Worldwide looks forward to reviewing proposals that demonstrate a genuine commitment to staff excellence and operational precision as we scale for impact.", "summaryDescription" : "RFP - Workforce Capability Development and Platform Solution at Imagine Worldwide. Skills: Workforce capability, Platform solution, Learning ecosystem, Competency-based model. Design learning paths. Build learning paths", "postedDate" : "2026-06-16T01:20:24.858", "createdAt" : "2026-06-16T01:20:24.858", "lastUpdated" : "2026-06-16T09:28:45.668", "ingestTimestamp" : "2026-06-16T01:20:24.858", "mongoId" : "6a307fb3f292fd229c05c989", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Regression", "Classification", "Clustering", "Time-series", "A/B testing", "Causal inference", "Workforce capability", "Platform solution", "Learning ecosystem", "Competency-based model", "Capability building", "Operational excellence", "Performance capacity", "Role development", "Content creation", "Microlearning delivery", "Evidence-based model", "Continuous improvement", "Data analysis", "Data engineering", "ML/AI", "Business intelligence", "Analytics engineering", "Quantitative analysis", "Statistical methods", "ML frameworks", "BI platforms", "Cloud data stacks", "Modelling skills", "RFP process", "Literacy skills", "Numeracy skills", "Autonomous learning", "Foundational skills", "Child-directed learning", "Tech-enabled learning", "Educational opportunities", "Health outcomes", "Wealth outcomes", "Social outcomes", "Learning gains", "Universal literacy", "Workforce development", "Competency-based learning", "Operational processes", "Professional development", "Core competencies", "New responsibilities", "Mandatory policy training", "Child Protection Policy", "SWAP Process", "Deviations Management", "Risk Management", "Program Metrics", "Internal Reporting", "External Reporting", "Technical requirements", "Field Implementation", "Government Liaison", "Data Analytics", "Program Management", "International standards", "Competence standards", "ISO 10015:2019", "Automatic certification", "Onebillion software" ], "skillCount" : 66, "jobCategory" : "engineering", "jobSubcategory" : "data", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Education", "llmIndustryConfidence" : 0.0 }, { "id" : "6a3051cbf292fd229cf06d4c", "title" : "Merchant Security Expert with Spanish and English", "company" : "SumUp", "industry" : "FinTech", "salary" : { "min" : 65000.0, "max" : 95000.0, "currency" : "BGN", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for FinTech in Sofia, Bulgaria, adjusted for mid-seniority and full-time employment." }, "location" : "Sofia, Bulgaria", "locations" : [ "Sofia", "Bulgaria" ], "timestamp" : "2026-06-16T09:36:44.092", "fingerprint" : "189df21854cfafe74ec3852e1dd4ca1a1508a18e931bb27d855692813d995637", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://sumup.com/careers/positions/8416344002?gh_jid=8416344002", "externalId" : "8416344002", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Sofia", "country" : "Bulgaria", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "42.6977028,23.3217359" } ], "locationText" : "Sofia, Bulgaria", "professionalSkills" : [ "Decision making" ], "majorSkills" : "Merchant security, Risk and fraud", "majorSkillsList" : [ "Merchant security", "Risk and fraud" ], "coreResponsibilities" : "Address transaction-related requests, Adhere to security rules, Contact merchants, Verify documents, Monitor merchant behavior, Adjust payment limits, Provide support to customers", "teamCollaboration" : "Customer Support team; Risk and Fraud Team", "domainKnowledge" : "AML rules; Internal T&Cs rules", "domainList" : [ "aml-rules", "internal-t-cs-rules" ], "domainSpecificKnowledge" : [ "AML rules", "Internal T&Cs rules" ], "continuousLearning" : "Individual learning budget; Educational leave", "qualificationsBasic" : "Excellent Spanish and English skills, Communication skills, Patience, Curiosity, Persistence, Organizational skills, Attention to detail", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "At SumUp, we are driven to empower small businesses across the globe by de-hassling their lives and helping them to succeed. Our vision as a global FinTech company is to build the first-ever global card acceptance brand, and we are well on our way as small businesses in over 31 countries around the world rely on SumUp to get paid.If you would like to be part of a global team, putting business partnering and innovation in the core of its priorities, this might be the right role for you. Join our dynamic and international Customer Support team, specializing in Risk & Fraud. Our team spans across four continents, bringing together diverse talents from over 60 countries. We thrive on challenges and collaborate seamlessly to ensure the success of small businesses globally. What you’ll be doing: Proactively addressing a variety of transaction-related requests from our merchants while adhering to security rules and procedures. Acting as the voice of our internal Risk and Fraud Team by contacting merchants and verifying documents based on risk assessments. Monitoring merchant behavior in compliance with AML and internal T&Cs rules. Utilizing decision-making abilities for reviewing customer business and adjusting payment limits. Providing support to Dutch and English-speaking customers through various communication channels, via phone, chat or email. The role primarily involves specialized security calls with low phone volume, and each issue is handled through the most suitable channel. You’ll be great for this role if: You possess excellent language skills in both Spanish and English Communication is your strength, and you handle customer interactions with ease and patience. Curiosity and persistence drive you to solve issues efficiently. Your organizational skills shine, even in stressful situations Attention to detail is a defining characteristic Why you should join SumUp: \uD83C\uDF0D You’ll play a key role in a scale-up that in turn is part of a truly global team of 3000+ people from 60+ countries, spread across 4 continents. \uD83D\uDE80 You'll have the opportunity to make an impact irrespective of your job description. You'll have the space to drive your career and take ownership of projects. \uD83D\uDCAF You'll get a Referral bonus if your friend is hired successfully. \uD83C\uDF34 You’ll receive 25 days’ paid leave, increasing with tenure, and paid vacation for certain occasions. \uD83D\uDD0B You’d enjoy a paid 1 month Sabbatical vacation after 3 years. \uD83D\uDCDA You’ll receive an individual learning budget and can take 10 days educational leave to expand your skillset. \uD83C\uDF4E You’d have monthly digital food vouchers. ⭐️ You’d have monthly budget for a wide choice of benefits and discounts ranging from transport, food, learning and more (re:benefit platform) \uD83D\uDE8C\uD83C\uDF57\uD83D\uDCA1\uD83C\uDF81. ❤️ You'd have access to additional health insurance, life insurance and co-sponsored Multisport card \uD83C\uDFBE. \uD83D\uDC9C You’d enjoy funded therapy & coaching sessions with licensed psychotherapists. \uD83D\uDC76\uD83C\uDFFC You’d enjoy a child birth/adoption bonus. \uD83D\uDE8C You’d have access to a free shuttle buses from Joliot-Curie metro station and more. This job is on-site - Sofia MORE ABOUT US: We believe in the everyday hero.Small business owners are at the heart of all we do, so we create powerful, easy-to-use financial solutions to help them run their businesses. With a founder’s mentality and a 'team-first’ attitude, our diverse teams across Europe, South America and the United States work together to ensure that the small business owners we partner with can be successful doing what they love. SumUp is an Equal Employment Opportunity employer that proudly pursues and hires a diverse workforce. SumUp does not make hiring or employment decisions on the basis of race, color, religion or religious belief, ethnic or national origin, nationality, sex, gender, gender identity, sexual orientation, disability, age or any other basis protected by applicable laws or prohibited by company policy. SumUp also strives for a healthy and safe workplace and strictly prohibits harassment of any kind.SumUp will not accept unsolicited resumes from any source other than directly from a candidate. #SumUpOps Job Application Tip We recognise that candidates feel they need to meet 100% of the job criteria in order to apply for a job. Please note that this is only a guide. If you don’t tick every box, it’s ok too because it means you have room to learn and develop your career at SumUp.", "summaryDescription" : "Merchant Security Expert with Spanish and English at SumUp. Skills: Merchant security, Risk and fraud. Address transaction-related requests. Adhere to security rules", "postedDate" : "2026-06-15T23:20:21.794", "createdAt" : "2026-06-15T23:20:21.794", "lastUpdated" : "2026-06-16T09:36:44.092", "ingestTimestamp" : "2026-06-15T23:20:21.794", "mongoId" : "6a3051cbf292fd229cf06d4c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Merchant security", "Risk and fraud", "Decision making", "AML rules", "Internal T&Cs rules" ], "skillCount" : 5, "jobCategory" : "sales", "jobSubcategory" : "customer_success", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 } ], "status" : 200, "message" : "response efforts to customer rfps rfis and security questionnaires jobs", "metadata" : { "title" : "response efforts to customer rfps rfis and security questionnaires" }, "pagination" : { "page" : 0, "limit" : 50, "totalCount" : 47964, "totalPages" : 960, "hasNext" : true, "hasPrevious" : false } }

Remote Response Efforts To Customer Rfps Rfis And Security Questionnaires Jobs

Top Skills

Security Engineer, Detection and Response

Security Incident Response Manager

Security Engineer, Detection and Response

Security Operations and Incident Response Manager

Security Engineer II, Security Incident Response Team (SIRT)

Senior Security Engineer, AWS Security Incident Response

Security Engineer II, Vulnerability Management and Response - Strategic Enablement

Senior Incident Response Specialist, Cyber Security

Security Engineer, AWS Security Incident Response

Security Incident Response Lead

Security Engineer, Detection and Response

Senior Security Incident Response Engineer

Security Engineer II, Vulnerability Management and Response - Strategic Enablement

Security Engineer, Incident Response, CorpSec

Senior Security Engineer, Detection and Response

Sr. Security Engineer, AWS Cloud Security Response

Senior Security Engineer, Detection and Response

Security Engineer III, Vulnerability Management and Response - Strategic Enablement

Customer Incident Response Program Manager

AWS Security Operations/Incident Response Engineer

Security Software Dev Engineer II, AWS Security Corporate Response

Security Software Dev Engineer II, AWS Security Corporate Response

Security Industry Specialist, CISC - Customer and Industry Security Compliance

Sr Security Operations Engineer, Detection and Response

AWS Security Operations/Incident Response Engineer

Security Software Dev Engineer II, AWS Security Corporate Response

Senior Incident Response Engineer, Devices & Services Security

Rapid Response RN

Senior Customer Engineer, National Security

Incident Response Lead

Rapid Response RN

Distinguished Engineer, End-to-End Security Architect

Application and Product Security Principal

CRITICAL CARE RESPONSE APP

RFP & Bid Manager - AI Solutions

Associate Customer Incident Responder, AWS Customer Incident Response Team (CIRT)

Deal Pricing and Monetization Principal, Security

PRN Clinical Response Specialist

Project Manager, Incident Response

Threat Detection and Response Specialist

Security Engineer SoC, Devices and Services Security

Service Response Center Representative

Mobile Response Peer Support Specialist

Security Engineer, Kuiper Security Controls and Assurance

RFP Strategy & Operations Analyst

Project Manager (Incident Response)

WHS Regulatory Response Case Manager, Governance and External Affairs

Clinical Nurse III - Rapid Response

RFP - Workforce Capability Development and Platform Solution

Merchant Security Expert with Spanish and English

Related Searches

All Response Efforts To Customer Rfps Rfis And Security Questionnaires Jobs by City

More Remote Jobs

Common Questions