{ "count" : 15616, "data" : [ { "id" : "69fc49a74c40e2acd1a8342c", "title" : "Cybersecurity Incident Responder", "company" : "Hyundai Capital America", "industry" : "FinTech", "salary" : { "min" : 105000.0, "max" : 155000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Incident Responder in Plano, United States, adjusted for the FinTech industry and company size." }, "location" : "United States-Texas-Plano", "locations" : [ "United States-Texas-Plano", "
Dallas, TX (HCA_DallasTX)
6100 W. Plano Parkway, Suite 2000
Suite 2000
Plano, 75093

" ], "timestamp" : "2026-06-15T05:14:30.811", "fingerprint" : "7fcffb731a6ed636f284a927012ffd15ceaa3c0f54aab8d152f57c85bc99c5b9", "source" : "taleo", "language" : "en", "applyUrl" : "https://hyundaicapital.taleo.net/careersection/ex/jobdetail.ftl?job=113023", "externalId" : "113023", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Plano", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.0136764,-96.6925096" } ], "locationText" : "Plano, Texas, United States", "technicalSkills" : "Cybersecurity, Incident Response, Security Operations, SIEM, EDR, Endpoint security, Network security, Cloud security, Log analysis, Forensic analysis, Threat intelligence, Detection rules, Automation, Vulnerability management", "professionalSkills" : [ "Incident lifecycle management", "Root cause analysis", "Threat analysis", "Detection enablement", "Cross functional response", "Security integration" ], "hardSkillsList" : [ "Endpoint forensics", "Log forensics", "Cloud forensics", "Incident metrics", "KPI reporting" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Endpoint forensics", "level" : "intermediate" }, { "name" : "Log forensics", "level" : "intermediate" }, { "name" : "Cloud forensics", "level" : "intermediate" }, { "name" : "Incident metrics", "level" : "intermediate" }, { "name" : "KPI reporting", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident Response, Security Monitoring, Threat Detection, SOC Tooling", "majorSkillsList" : [ "Incident Response", "Security Monitoring", "Threat Detection", "SOC Tooling" ], "coreResponsibilities" : "Monitor enterprise-wide incidents, Detect threats, Respond to incidents, Triage security alerts, Investigate security alerts, Contain security incidents, Remediate security incidents, Ensure integrity of digital assets, Ensure confidentiality of digital assets, Ensure availability of digital assets, Oversee third party vendors, Direct third party vendors, Drive detection turning, Maintain incident response playbooks, Maintain incident response procedures, Serve as lead responder, Correlate data from endpoints, Correlate data from networks, Correlate data from cloud environments, Identify true positives, Escalate critical incidents, Own incident lifecycle, Perform forensic analysis, Determine root cause, Determine scope, Determine impact, Develop incident response playbooks, Maintain incident response playbooks, Execute incident response playbooks, Develop runbooks, Maintain runbooks, Execute runbooks, Coordinate incident responders, Direct incident responders, Validate escalation, Ensure response quality, Maintain incident records, Maintain investigation notes, Maintain remediation documentation, Produce incident metrics, Produce SOC KPIs, Maintain incident response documentation, Maintain SOC procedures, Lead post incident reviews, Document lessons learned, Drive measurable improvements, Actively monitor security alerts, Investigate security alerts, Validate security alerts, Perform advanced alert triage, Perform advanced threat analysis, Correlate telemetry, Distinguish threats from noise, Tune SIEM detections, Optimize SIEM detections, Tune SIEM analytics, Optimize SIEM analytics, Tune SIEM alerting logic, Optimize SIEM alerting logic, Tune SIEM AI, Optimize SIEM AI, Leverage threat intelligence platforms, Identify emerging financial sector threats, Translate intelligence into detection use cases, Develop detection rules, Refine detection rules, Develop signatures, Refine signatures, Develop alert logic, Refine alert logic, Implement response automation, Implement enrichment, Accelerate triage, Accelerate containment, Partner with architecture teams, Partner with engineering teams, Ensure log visibility, Ensure telemetry coverage, Collaborate with IT Infrastructure, Collaborate with IAM, Collaborate with DLP, Collaborate with Application Security, Collaborate with Cloud teams, Support vulnerability management, Provide incident driven security input", "teamCollaboration" : "Co-managed SOC model; Cross functional teams; IT Infrastructure teams; IAM teams; DLP teams; Application Security teams; Cloud teams", "domainKnowledge" : "Financial services; MITRE ATT&CK framework; HIPAA; PCI-DSS; NIST; ISO 27001; GDPR", "domainList" : [ "financial-services", "mitre-att-ck-framework", "hipaa", "pci-dss", "nist", "iso-27001", "gdpr" ], "domainSpecificKnowledge" : [ "Financial services", "MITRE ATT&CK framework", "HIPAA", "PCI-DSS", "NIST", "ISO 27001", "GDPR" ], "toolProficiency" : [ "Splunk", "Crowdstrike", "Rapid 7" ], "communicationSkills" : "Incident documentation; Incident metrics; SOC KPIs; Risk communication; Operational performance communication", "documentationSkills" : "Incident records; Investigation notes; Remediation documentation; Incident response documentation; Playbooks; Runbooks; SOC procedures; Post incident reviews; Lessons learned", "continuousLearning" : "Continuous learning; Staying ahead of emerging threats", "problemSolvingSkills" : "Analytical mindset; Root cause analysis; Threat analysis", "outcomesObjectives" : "Improve signal quality; Reduce false positives; Accelerate triage; Accelerate containment; Drive measurable improvements", "qualificationsBasic" : "5-7 years progressive experience, Security Operations Center practices, Incident response processes, SIEM platforms experience, EDR solutions experience, Monitoring tools experience, Vulnerability management tools experience, Cyber threat landscapes understanding, Attack vectors understanding, MITRE ATT&CK framework understanding, Adversary tactics understanding, Adversary techniques understanding, Adversary procedures understanding, HIPAA compliance frameworks, PCI-DSS compliance frameworks, NIST compliance frameworks, ISO 27001 compliance frameworks, GDPR compliance frameworks, Develop incident response playbooks, Maintain incident response playbooks, Develop escalation procedures, Maintain escalation procedures, Develop SOC SOPs, Maintain SOC SOPs, Cybersecurity metrics experience, KPI experience, Communicate risk experience, Communicate operational performance experience, Analytical mindset, Attention to detail, Excellent communication skills, Excellent documentation skills, Work under pressure, Manage multiple incidents", "qualificationsPreferred" : "Financial services experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Who We Are Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 3 million consumers and businesses. Embodying our commitment to grow, innovate, and diversify, we strive to reimagine the customer and dealer experience and launch innovative new products that broaden our market reach. We believe that success comes from within and are proud to support our team members through skill development and career advancement. Hyundai Capital America is an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce. We are a values-driven company dedicated to supporting both internal and external communities through volunteering, philanthropy, and the empowerment of our Employee Resource Groups. Together, we strive to be the leader in financing freedom of movement. We Take Care of Our People Along with competitive pay, as an employee of HCA, you are eligible for: ·         Medical, dental, and vision plans with no-cost and low-cost options ·         Annual employer HSA contribution ·         401(k) matching and immediate vesting ·         Vehicle purchase and lease discounts, plus monthly vehicle allowances by job level: o    Associate / Sr. Associate: $350 o    Manager / Sr. Manager: $600 o    Director: $800 o    Executive Director: $900 o    VP or Above: $1,000 ·         100% employer-paid life and disability insurance ·         No-cost health and wellbeing programs, including a gym benefit ·         Six weeks of paid parental leave ·         Paid Volunteer Time Off, plus a company donation to a charity of your choice What to Expect The Cybersecurity Incident Responder is a hand-on, technical role responsible for the enterprise-wide incident monitoring, threat detection and incident response function within the Security Operations Center (SOC). This position is primarily focused on incident response and active security monitoring, serving as the escalation point for security alerts triage, investigation, containment and remediation activities while ensuring integrity, confidentiality, and availability of Hyundai Capital America’s digital assets and infrastructure. This role operates in a co-managed SOC model, overseeing and directing third party vendors of incident response resources, driving detection turning and maintaining incident response playbooks and procedures. What You Will Do Incident Response & Remediation: ·         Serve as a lead responder for cybersecurity incidents, correlating data from endpoints, networks, and cloud environments to identify true positives and escalate critical incidents. ·         Own the end to end incident lifecycle: identification, containment, eradication, recovery and post incident analysis. ·         Perform forensic analysis on endpoint, log and cloud data to determine root cause, scope and impact. ·         Develop, maintain an execute incident response playbooks and runbooks to ensure consistent and repeatable response. ·         Coordinate and direct MSSP and third party incident responders, validating escalation and ensuring response quality. ·         Maintain accurate incident records, investigation notes, and remediation documentation. ·         Produce incident metrics and SOC KPI’s (MTTD, MTTR, alert volume, escalation quality) ·         Maintain incident response documentation, playbooks, and SOC procedures to support audits and regulatory requirements. ·         Lead post incident reviews, documenting lessons learned and driving measurable improvements in detection and response. Security Monitoring & Threat Detection: ·         Actively monitor, investigate and validate security alerts across SIEM, EDR, E-Mail, identity, network and cloud platforms. ·         Perform advanced alert triage and threat analysis, correlating telemetry across multiple data sources to distinguish true threats from noise. ·         Tune and optimize SIEM detections, analytics and alerting logic and AI, to improve signal quality and reduce false positives. ·         Leverage threat intelligence platforms to identify emerging financial sector threats, and translate intelligence into actionable detection use cases. SOC Tooling & Detection Enablement: ·         Develop and refine detection rules, signatures, and alert logic aligned to current threat activity. ·         Implement response automation and enrichment to accelerate triage and containment. ·         Partner with architecture and engineering teams to ensure log visibility and telemetry coverage. Cross Functional Response & Security Integration: ·         Collaborate with IT Infrastructure, IAM, DLP, Application Security and Cloud teams during active incidents. ·         Support vulnerability management activities related to active incidents, threat exposure and detection gaps. ·         Provide incident driven security input into cloud migrations, application launches and infrastructure changes. What You Will Bring · Minimum 5-7 years progressive experience in cybersecurity with proven knowledge in Security Operations Center practices and incident response processes. ·      Experience in financial services a plus. ·      Hands-on experience with SIEM platforms, EDR solutions, and other Monitoring and Vulnerability management tools (e.g., Splunk, Crowdstrike, Rapid 7) ·     Strong understanding of cyber threat landscapes, attack vectors, MITRE ATT&CK framework, and adversary tactics, techniques, and procedures ·         Bachelor’s degree in Computer Science, Information Security, or related field; or equivalent work experience. ·      Certification in one of the following: CySA+, GCIH, CompTIA Security +, GIAC GSOC, GCFA, MS SC-200, CCSP, CISM, Splunk Core Certified User, or equivalent. ·     Demonstrated hands-on experience in incident response lifecycle, including detection, triage, containment, eradication, recovery, and post-incident review. ·    Demonstrated ability to manage major incident investigations, including root cause analysis, executive reporting, and coordination with legal, compliance, and law enforcement when necessary. ·      Familiarity with regulatory and compliance frameworks such as HIPAA, PCI-DSS, NIST, ISO 27001, and GDPR. ·       Proven ability to develop and maintain incident response playbooks, escalation procedures, and SOC standard operating procedures (SOPs). · Experience with cybersecurity metrics and KPIs, and the ability to communicate risk and operational performance to executive leadership. ·         Analytical mindset with attention to detail. ·         Excellent communication and documentation skills. ·         Ability to work under pressure and manage multiple incidents simultaneously. ·         Passion for continuous learning and staying ahead of emerging threats. Work Environment Employees in this class are subject to extended periods of sitting, standing, and walking, vision to monitor and moderate noise levels. Work is performed in an at home and office environment. The posted salary range for this job takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; geographic location, and other business and organizational needs. Successful candidates may be hired anywhere in the salary range based on these factors. It is uncommon to hire candidates at or near the top of the range. California Privacy Notice This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here . This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used, and whether that information is sold or shared, so that you can exercise meaningful control over our use of your personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (“CCPA”). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at Privacy2@hcs.com . United States-Texas-Plano", "summaryDescription" : "Cybersecurity Incident Responder at Hyundai Capital America. Skills: Incident Response, Security Monitoring, Threat Detection, SOC Tooling. Monitor enterprise-wide incidents. Detect threats", "createdAt" : "2026-06-14T02:01:21.884", "lastUpdated" : "2026-06-15T05:14:30.811", "ingestTimestamp" : "2026-06-14T02:01:21.884", "mongoId" : "69fc49a74c40e2acd1a8342c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 105000, "salaryAnnualMax" : 155000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Endpoint forensics", "Log forensics", "Cloud forensics", "Incident metrics", "KPI reporting", "Leadership", "Incident Response", "Security Monitoring", "Threat Detection", "SOC Tooling", "Incident lifecycle management", "Root cause analysis", "Threat analysis", "Detection enablement", "Cross functional response", "Security integration", "Financial services", "MITRE ATT&CK framework", "HIPAA", "PCI-DSS", "NIST", "ISO 27001", "GDPR", "Splunk", "Crowdstrike", "Rapid 7" ], "skillCount" : 26, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 874.5964, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "69fc49a74c40e2acd1a8342e", "title" : "Cybersecurity Incident Responder", "company" : "Hyundai Capital America", "industry" : "Cybersecurity", "salary" : { "min" : 135000.0, "max" : 195000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Incident Responder in Irvine, United States, adjusted for the financial services industry and company size." }, "location" : "United States-California-Irvine", "locations" : [ "United States-California-Irvine", "
Headquarters 1 (HCA_HQ1)
3161 Michelson Dr. Ste 1900
Irvine, 92612

" ], "timestamp" : "2026-06-15T09:24:24.152", "fingerprint" : "7c883f724c7aebffb309e18fda9f927b1ceb1e3f904e382d522fc02772c83323", "source" : "taleo", "language" : "en", "applyUrl" : "https://hyundaicapital.taleo.net/careersection/ex/jobdetail.ftl?job=112985", "externalId" : "112985", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "technicalSkills" : "SIEM, EDR, Monitoring, Vulnerability management, Cloud environments, Endpoint data, Log data, Cloud data, Threat intelligence, Detection rules, Response automation", "professionalSkills" : [ "Incident response", "Threat detection", "Security monitoring", "Forensic analysis", "Detection engineering", "Risk communication", "Performance communication" ], "hardSkillsList" : [ "Incident lifecycle management", "Root cause analysis", "Alert triage", "Threat analysis", "SIEM tuning", "Detection tuning", "AI tuning", "Signal quality improvement", "False positive reduction", "Detection rule development", "Signature development", "Alert logic development", "Automation implementation", "Enrichment implementation", "Log visibility", "Telemetry coverage" ], "softSkillsList" : [ "Continuous learning" ], "hardSkills" : [ { "name" : "Incident lifecycle management", "level" : "intermediate" }, { "name" : "Root cause analysis", "level" : "intermediate" }, { "name" : "Alert triage", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "SIEM tuning", "level" : "intermediate" }, { "name" : "Detection tuning", "level" : "intermediate" }, { "name" : "AI tuning", "level" : "intermediate" }, { "name" : "Signal quality improvement", "level" : "intermediate" }, { "name" : "False positive reduction", "level" : "intermediate" }, { "name" : "Detection rule development", "level" : "intermediate" }, { "name" : "Signature development", "level" : "intermediate" }, { "name" : "Alert logic development", "level" : "intermediate" }, { "name" : "Automation implementation", "level" : "intermediate" }, { "name" : "Enrichment implementation", "level" : "intermediate" }, { "name" : "Log visibility", "level" : "intermediate" }, { "name" : "Telemetry coverage", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Continuous learning" } ], "majorSkills" : "Incident response, Threat detection, Security monitoring, SIEM platforms", "majorSkillsList" : [ "Incident response", "Threat detection", "Security monitoring", "SIEM platforms" ], "coreResponsibilities" : "Serve as lead responder for cybersecurity incidents, Correlate data from endpoints, Correlate data from networks, Correlate data from cloud environments, Identify true positives, Escalate critical incidents, Own incident lifecycle, Perform forensic analysis, Develop incident response playbooks, Maintain incident response playbooks, Execute incident response playbooks, Coordinate MSSP responders, Direct MSSP responders, Validate escalation, Ensure response quality, Maintain accurate incident records, Maintain investigation notes, Maintain remediation documentation, Produce incident metrics, Produce SOC KPIs, Maintain incident response documentation, Maintain SOC procedures, Lead post incident reviews, Document lessons learned, Drive measurable improvements, Actively monitor security alerts, Investigate security alerts, Validate security alerts, Perform advanced alert triage, Perform advanced threat analysis, Correlate telemetry, Distinguish threats from noise, Tune SIEM detections, Optimize SIEM detections, Tune SIEM analytics, Optimize SIEM analytics, Tune SIEM alerting logic, Optimize SIEM alerting logic, Tune SIEM AI, Optimize SIEM AI, Leverage threat intelligence platforms, Identify emerging financial sector threats, Translate intelligence into detection use cases, Refine detection rules, Refine signatures, Refine alert logic, Align logic to threat activity, Implement response automation, Implement enrichment, Accelerate triage, Accelerate containment, Partner with architecture teams, Partner with engineering teams, Ensure log visibility, Ensure telemetry coverage, Collaborate with IT Infrastructure, Collaborate with IAM, Collaborate with DLP, Collaborate with Application Security, Collaborate with Cloud teams, Support vulnerability management activities, Provide incident driven security input, Provide input into cloud migrations, Provide input into application launches, Provide input into infrastructure changes", "teamCollaboration" : "Co-managed SOC model; Cross functional response; Security integration; IT Infrastructure collaboration; IAM collaboration; DLP collaboration; Application Security collaboration; Cloud teams collaboration", "domainKnowledge" : "Financial services; MITRE ATT&CK framework; Adversary tactics; Adversary techniques; Financial sector threats; HIPAA; PCI-DSS; NIST; ISO 27001; GDPR", "domainList" : [ "financial-services", "mitre-att-ck-framework", "adversary-tactics", "adversary-techniques", "financial-sector-threats", "hipaa", "pci-dss", "nist", "iso-27001", "gdpr" ], "domainSpecificKnowledge" : [ "Financial services", "MITRE ATT&CK framework", "Adversary tactics", "Adversary techniques", "Financial sector threats", "HIPAA", "PCI-DSS", "NIST", "ISO 27001", "GDPR" ], "toolProficiency" : [ "Splunk", "Crowdstrike", "Rapid 7" ], "communicationSkills" : "Documentation skills", "documentationSkills" : "Incident records; Investigation notes; Remediation documentation; Incident response documentation; Playbooks; SOC procedures; Lessons learned", "continuousLearning" : "Passion for continuous learning; Staying ahead of emerging threats", "problemSolvingSkills" : "Analytical mindset; Root cause analysis", "specialRequirements" : "Extended periods of sitting, Extended periods of standing, Extended periods of walking", "outcomesObjectives" : "Reduce false positives; Improve signal quality; Accelerate triage; Accelerate containment; Drive measurable improvements", "qualificationsBasic" : "5-7 years progressive experience in cybersecurity, Proven knowledge in SOC practices, Proven knowledge in incident response processes, Hands-on experience with SIEM platforms, Hands-on experience with EDR solutions, Hands-on experience with Monitoring tools, Hands-on experience with Vulnerability management tools, Understanding of cyber threat landscapes, Understanding of attack vectors, Understanding of MITRE ATT&CK framework, Understanding of adversary tactics, Understanding of techniques, Proven ability to develop incident response playbooks, Proven ability to maintain incident response playbooks, Proven ability to develop escalation procedures, Proven ability to maintain escalation procedures, Proven ability to develop SOC SOPs, Proven ability to maintain SOC SOPs, Experience with cybersecurity metrics, Experience with SOC KPIs, Ability to communicate risk, Ability to communicate operational performance, Analytical mindset, Ability to work under pressure, Ability to manage multiple incidents", "qualificationsPreferred" : "Experience in financial services a plus", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Who We Are Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 3 million consumers and businesses. Embodying our commitment to grow, innovate, and diversify, we strive to reimagine the customer and dealer experience and launch innovative new products that broaden our market reach. We believe that success comes from within and are proud to support our team members through skill development and career advancement. Hyundai Capital America is an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce. We are a values-driven company dedicated to supporting both internal and external communities through volunteering, philanthropy, and the empowerment of our Employee Resource Groups. Together, we strive to be the leader in financing freedom of movement. We Take Care of Our People Along with competitive pay, as an employee of HCA, you are eligible for: ·         Medical, dental, and vision plans with no-cost and low-cost options ·         Annual employer HSA contribution ·         401(k) matching and immediate vesting ·         Vehicle purchase and lease discounts, plus monthly vehicle allowances by job level: o    Associate / Sr. Associate: $350 o    Manager / Sr. Manager: $600 o    Director: $800 o    Executive Director: $900 o    VP or Above: $1,000 ·         100% employer-paid life and disability insurance ·         No-cost health and wellbeing programs, including a gym benefit ·         Six weeks of paid parental leave ·         Paid Volunteer Time Off, plus a company donation to a charity of your choice What to Expect The Cybersecurity Incident Responder is a hand-on, technical role responsible for the enterprise-wide incident monitoring, threat detection and incident response function within the Security Operations Center (SOC). This position is primarily focused on incident response and active security monitoring, serving as the escalation point for security alerts triage, investigation, containment and remediation activities while ensuring integrity, confidentiality, and availability of Hyundai Capital America’s digital assets and infrastructure. This role operates in a co-managed SOC model, overseeing and directing third party vendors of incident response resources, driving detection turning and maintaining incident response playbooks and procedures. What You Will Do Incident Response & Remediation: ·         Serve as a lead responder for cybersecurity incidents, correlating data from endpoints, networks, and cloud environments to identify true positives and escalate critical incidents. ·         Own the end to end incident lifecycle: identification, containment, eradication, recovery and post incident analysis. ·         Perform forensic analysis on endpoint, log and cloud data to determine root cause, scope and impact. ·         Develop, maintain an execute incident response playbooks and runbooks to ensure consistent and repeatable response. ·         Coordinate and direct MSSP and third party incident responders, validating escalation and ensuring response quality. ·         Maintain accurate incident records, investigation notes, and remediation documentation. ·         Produce incident metrics and SOC KPI’s (MTTD, MTTR, alert volume, escalation quality) ·         Maintain incident response documentation, playbooks, and SOC procedures to support audits and regulatory requirements. ·         Lead post incident reviews, documenting lessons learned and driving measurable improvements in detection and response. Security Monitoring & Threat Detection: ·         Actively monitor, investigate and validate security alerts across SIEM, EDR, E-Mail, identity, network and cloud platforms. ·         Perform advanced alert triage and threat analysis, correlating telemetry across multiple data sources to distinguish true threats from noise. ·         Tune and optimize SIEM detections, analytics and alerting logic and AI, to improve signal quality and reduce false positives. ·         Leverage threat intelligence platforms to identify emerging financial sector threats, and translate intelligence into actionable detection use cases. SOC Tooling & Detection Enablement: ·         Develop and refine detection rules, signatures, and alert logic aligned to current threat activity. ·         Implement response automation and enrichment to accelerate triage and containment. ·         Partner with architecture and engineering teams to ensure log visibility and telemetry coverage. Cross Functional Response & Security Integration: ·         Collaborate with IT Infrastructure, IAM, DLP, Application Security and Cloud teams during active incidents. ·         Support vulnerability management activities related to active incidents, threat exposure and detection gaps. ·         Provide incident driven security input into cloud migrations, application launches and infrastructure changes. What You Will Bring · Minimum 5-7 years progressive experience in cybersecurity with proven knowledge in Security Operations Center practices and incident response processes. ·      Experience in financial services a plus. ·      Hands-on experience with SIEM platforms, EDR solutions, and other Monitoring and Vulnerability management tools (e.g., Splunk, Crowdstrike, Rapid 7) ·     Strong understanding of cyber threat landscapes, attack vectors, MITRE ATT&CK framework, and adversary tactics, techniques, and procedures ·         Bachelor’s degree in Computer Science, Information Security, or related field; or equivalent work experience. ·      Certification in one of the following: CySA+, GCIH, CompTIA Security +, GIAC GSOC, GCFA, MS SC-200, CCSP, CISM, Splunk Core Certified User, or equivalent. ·     Demonstrated hands-on experience in incident response lifecycle, including detection, triage, containment, eradication, recovery, and post-incident review. ·    Demonstrated ability to manage major incident investigations, including root cause analysis, executive reporting, and coordination with legal, compliance, and law enforcement when necessary. ·      Familiarity with regulatory and compliance frameworks such as HIPAA, PCI-DSS, NIST, ISO 27001, and GDPR. ·       Proven ability to develop and maintain incident response playbooks, escalation procedures, and SOC standard operating procedures (SOPs). · Experience with cybersecurity metrics and KPIs, and the ability to communicate risk and operational performance to executive leadership. ·         Analytical mindset with attention to detail. ·         Excellent communication and documentation skills. ·         Ability to work under pressure and manage multiple incidents simultaneously. ·         Passion for continuous learning and staying ahead of emerging threats. Work Environment Employees in this class are subject to extended periods of sitting, standing, and walking, vision to monitor and moderate noise levels. Work is performed in an at home and office environment. The posted salary range for this job takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; geographic location, and other business and organizational needs. Successful candidates may be hired anywhere in the salary range based on these factors. It is uncommon to hire candidates at or near the top of the range. California Privacy Notice This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here . This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used, and whether that information is sold or shared, so that you can exercise meaningful control over our use of your personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (“CCPA”). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at Privacy2@hcs.com . United States-California-Irvine", "summaryDescription" : "Cybersecurity Incident Responder at Hyundai Capital America. Skills: Incident response, Threat detection, Security monitoring, SIEM platforms. Serve as lead responder for cybersecurity incidents. Correlate data from endpoints", "createdAt" : "2026-06-14T06:55:41.268", "lastUpdated" : "2026-06-15T09:24:24.152", "ingestTimestamp" : "2026-06-14T06:55:41.268", "mongoId" : "69fc49a74c40e2acd1a8342e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 135000, "salaryAnnualMax" : 195000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Incident lifecycle management", "Root cause analysis", "Alert triage", "Threat analysis", "SIEM tuning", "Detection tuning", "AI tuning", "Signal quality improvement", "False positive reduction", "Detection rule development", "Signature development", "Alert logic development", "Automation implementation", "Enrichment implementation", "Log visibility", "Telemetry coverage", "Continuous learning", "Incident response", "Threat detection", "Security monitoring", "SIEM platforms", "Forensic analysis", "Detection engineering", "Risk communication", "Performance communication", "Financial services", "MITRE ATT&CK framework", "Adversary tactics", "Adversary techniques", "Financial sector threats", "HIPAA", "PCI-DSS", "NIST", "ISO 27001", "GDPR", "Splunk", "Crowdstrike", "Rapid 7" ], "skillCount" : 38, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.6666667, "_score" : 867.1134, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305653f292fd229cf27dba", "title" : "Security Engineer II, Security Incident Response Team (SIRT)", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 159000.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-16T08:11:33.016", "fingerprint" : "0987fca027bd6689942ce9706e1f89c85b280b67309ecc2a54aad3db41923465", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10443978/apply", "externalId" : "c8d18061-5e73-4845-8dc5-690328d5af3a", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Cloud security, Network security, Endpoint security, Vulnerability management, Incident response, SIEM, Forensics, Scripting languages, AWS, Azure, GCP", "professionalSkills" : [ "Problem solving", "Analytical thinking", "Decision making" ], "hardSkillsList" : [ "Incident analysis", "Malware analysis", "Digital forensics", "Network traffic analysis", "Log analysis" ], "hardSkills" : [ { "name" : "Incident analysis", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Digital forensics", "level" : "intermediate" }, { "name" : "Network traffic analysis", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" } ], "majorSkills" : "Security Incident Response, Cloud Security, Threat Detection", "majorSkillsList" : [ "Security Incident Response", "Cloud Security", "Threat Detection" ], "coreResponsibilities" : "Respond to security incidents, Investigate security breaches, Analyze security alerts, Perform digital forensics, Develop incident response playbooks, Collaborate with engineering teams, Improve security posture, Stay current with threats", "teamCollaboration" : "Cross-functional teams; Engineering teams", "domainKnowledge" : "Cloud computing; Network protocols; Operating systems; Cyber threats", "domainList" : [ "cloud-computing", "network-protocols", "operating-systems", "cyber-threats" ], "domainSpecificKnowledge" : [ "Cloud computing", "Network protocols", "Operating systems", "Cyber threats" ], "toolProficiency" : [ "SIEM tools", "Forensic tools", "Threat intelligence platforms" ], "communicationSkills" : "Incident reporting; Technical briefings", "documentationSkills" : "Incident reports; Post-incident reviews", "continuousLearning" : "Stay current with threats", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Minimize impact of incidents; Reduce incident response time; Enhance security defenses", "qualificationsBasic" : "Bachelor's degree or equivalent practical experience, 5+ years of experience in security engineering, Experience with security incident response, Experience with cloud security", "qualificationsPreferred" : "Master's degree in Computer Science or related field, Experience with scripting languages, Experience with SIEM tools, Experience with threat intelligence platforms, Experience with digital forensics", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon is seeking qualified Security Engineers to join our innovative, high energy Information Security team. In this role you will work within the Amazon Security Incident Response Team (SIRT). SIRT Security Engineers respond to security events, conduct analysis of threats such as malware and intrusion attempts, and provide security services to safeguard highly sensitive data. They work hands-on with detection systems and vulnerability analysis tools to respond to potential threats to Amazon systems. SIRT Security Engineers are unique individuals prepared to relentlessly resolve security issues by gathering and analyzing event data and conducting root-cause analysis. With your technical expertise, you will be solving security challenges at scale, working to protect the applications powering the most sophisticated e-commerce platform ever built. We value broad and deep technical knowledge, specifically in the fields of forensics, malware analysis, network security, application security, threat hunting, and threat intelligence. Key job responsibilities - Responding to security incidents, and coordinating a cohesive response involving multiple teams across Amazon. - Providing security engineering solutions and support during customer-facing incidents, proactively considering the prevention of similar incidents from occurring in the future. - Assisting in the development of pragmatic solutions that achieve business requirements while maintaining an acceptable level of risk. - Identifying and recommending solutions that improve or expand Amazon’s incident response capabilities, leveraging AI approaches where suitable. - Working alongside and mentoring Information Security engineers to improve security, reduce and quickly address risk. - Evaluating the impact of current security trends, advisories, publications, and academic research to Amazon, coordinating response as necessary across affected teams. - Keeping your knowledge and skills current with the rapidly changing threat landscape. - Participating in a follow-the-sun on-call rotation. A day in the life You will be part of an operational team, which owns and drives outcomes for security issues reported through a variety of mechanisms. When not \"on deck\" for those operational duties, you will be identifying and developing solutions to consistently and efficiently handle issues. You will also work with partner security teams across Amazon to raise our security bar and delight customers. There are also training and travel opportunities due to SIRT being a global team with presence in multiple countries. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Basic Qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience - 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience - Bachelor's degree in computer science or equivalent - Knowledge of networking protocols such as HTTP, DNS and TCP/IP - Knowledge of industry-based security vulnerabilities and remediation techniques Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks - Experience with AWS products and services - Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "Security Engineer II, Security Incident Response Team (SIRT) at Amazon.com Services LLC. Skills: Security Incident Response, Cloud Security, Threat Detection. Respond to security incidents. Investigate security breaches", "postedDate" : "2026-06-15T22:01:16.090", "createdAt" : "2026-06-15T22:01:16.090", "lastUpdated" : "2026-06-16T08:11:33.016", "ingestTimestamp" : "2026-06-15T22:01:16.090", "mongoId" : "6a305653f292fd229cf27dba", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10443978/apply", "salaryAnnualMin" : 159000, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Incident analysis", "Malware analysis", "Digital forensics", "Network traffic analysis", "Log analysis", "Security Incident Response", "Cloud Security", "Threat Detection", "Problem solving", "Analytical thinking", "Decision making", "Cloud computing", "Network protocols", "Operating systems", "Cyber threats", "SIEM tools", "Forensic tools", "Threat intelligence platforms" ], "skillCount" : 18, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 595.72565, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "68e6b1d770f0b99d58d669d3", "title" : "Associate Customer Incident Responder, AWS Customer Incident Response Team (CIRT)", "company" : "Amazon Web Services, Inc.", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 125500.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Arlington, Virginia, USA", "locations" : [ "Arlington, Virginia, USA" ], "timestamp" : "2026-06-15T03:07:34.087", "fingerprint" : "e41ba28c00f8a5fa7ff7a6b6f7e4b967a32c1d34e6140338d9bfa0a32bb978b0", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3103444/apply", "externalId" : "3edaebce-b7da-4159-88b6-ebd603fd4b2d", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, C, C++, Java, Ruby, PowerShell, AWS", "professionalSkills" : [ "Incident response", "Threat detection", "Security operations", "Cloud security" ], "hardSkillsList" : [ "Log collection", "Log analysis", "Root cause analysis", "Preventative guidance" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Log collection", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Root cause analysis", "level" : "intermediate" }, { "name" : "Preventative guidance", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Incident response, Threat detection, Security solutions", "majorSkillsList" : [ "Incident response", "Threat detection", "Security solutions" ], "coreResponsibilities" : "Support incident response operations, Become a technical resource, Contribute to build and deploy threat detection and, Collaborate to design, build, and deploy solutions to, Develop high-quality content, Innovate on behalf of customers, Mentor and invest in our team, partners and", "teamCollaboration" : "Part of a team; Collaborate with AWS service teams", "domainKnowledge" : "Cloud environments; Scalable computing architectures; Security incidents; Security operations; Shared security model", "domainList" : [ "cloud-environments", "scalable-computing-architectures", "security-incidents", "security-operations", "shared-security-model" ], "domainSpecificKnowledge" : [ "Cloud environments", "Scalable computing architectures", "Security incidents", "Security operations", "Shared security model" ], "communicationSkills" : "Communicate complex technical matters", "documentationSkills" : "Reference architectures; White papers; Blog posts", "innovationCreativity" : "Innovate with new technologies; Explore new challenges", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Periodic on-call required", "outcomesObjectives" : "Achieve more with AWS cloud; Respond to security incidents; Automate security operations; Deliver results", "qualificationsBasic" : "Experience with coding/scripting in one or more languages, Knowledge of networks, protocols, cloud and security fundamentals, 2+ years of hands-on technical experience in threat detection, log collection and analysis, incident response, and/or security operations", "qualificationsPreferred" : "Experience with core security functions, Hands-on technical experience in building scripts, tools, or methodologies, Experience with developing and training AI models, Communicate complex technical matters clearly and concisely orally and in writing, Ability to manage customers expectations during security events, and deliver results", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Global Services includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center. You’ll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud. Do you want to work on planetary scale incident response solutions in the cloud? Are you skilled at performing Incident Response activities and helping customers build threat detection and incident response capabilities using highly scalable computing architectures? Are you excited to help customers respond to security incidents and automate security operations giving them unprecedented capability and agility? Do you enjoy working on fast-paced complex projects focused on game changing business outcomes for customers globally? As a member of the Threat Detection and Incident Response Practice in the AWS Global Service Security you will have the opportunity to help customers respond to security incidents and pioneer technically superb security solutions to help customer operate securely in the cloud. Building on those experiences you’ll collaborate with AWS service teams on new features, innovate with new technologies, and explore new challenges. The Global Services Security team, a part of Amazon Web Services (AWS), leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world’s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers. The AWS Customer Incident Response Team (CIRT) is a specialized 24/7 global (AWS) team that provides support to customers in responding to active security events on their side of the shared security model. The team is made up of AWS Solutions Architects and Security Engineers who are experienced in incident response.to assist customers with identifying Indicators of Compromise, isolation, containment, log collection and analysis, determining root cause, recovery, and preventative guidance to avoid recurrence. Key job responsibilities • Support incident response operations • Become a technical resource that earns the trust of customer stakeholders before, during, and after a security event. • Contribute as part of a team to build and deploy threat detection and incident response capabilities. • Collaborate to design, build, and deploy solutions to automate security operations and incident response on AWS. • Develop high-quality content, such as reference architectures, white papers, and blog posts to help AWS customers secure their workloads. • Innovate on behalf of customers by translating your thoughts into action-driven results. • Mentor and invest in our team, partners and customers to raise the bar for our customers. • Periodic on-call required. About the team Diverse Experiences Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. Mentorship and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Basic Qualifications: - Experience with coding/scripting in one or more languages (e.g., Python, C, C++, Java, Ruby, or PowerShell) - Knowledge of networks, protocols, cloud and security fundamentals . - 2+ years of hands-on technical experience in threat detection, log collection and analysis, incident response, and/or security operations. Preferred Qualifications: - Experience with any combination of core security functions such as threat modeling, secure software development, data classification, identity management and authentication, cryptography, system administration, network security, and forensics. - Hands-on technical experience in building scripts, tools, or methodologies that enhance customers’ threat detection and incident response capabilities. - Experience with developing and training AI models. - Can communicate complex technical matters clearly and concisely orally and in writing. - Ability to manage customers expectations during security events, and deliver results. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $125,500/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Associate Customer Incident Responder, AWS Customer Incident Response Team (CIRT) at Amazon Web Services, Inc.. Skills: Incident response, Threat detection, Security solutions. Support incident response operations. Become a technical resource", "postedDate" : "2026-06-13T08:42:48.387", "createdAt" : "2026-06-13T08:42:48.387", "lastUpdated" : "2026-06-15T03:07:34.087", "ingestTimestamp" : "2026-06-13T08:42:48.387", "mongoId" : "68e6b1d770f0b99d58d669d3", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3103444/apply", "salaryAnnualMin" : 125500, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Log collection", "Log analysis", "Root cause analysis", "Preventative guidance", "Mentoring", "Incident response", "Threat detection", "Security solutions", "Security operations", "Cloud security", "Cloud environments", "Scalable computing architectures", "Security incidents", "Shared security model" ], "skillCount" : 14, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 594.2029, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a307ebbf292fd229c051fab", "title" : "Lead, Incidents & Escalations, User Operations", "company" : "OpenAI", "industry" : "User Operations", "salary" : { "min" : 234000.0, "max" : 315000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "timestamp" : "2026-06-16T14:32:14.127", "fingerprint" : "99856696b5845bcab1c80262b0d5d1649aafe9a6e0a8307ff86095e046f73d56", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/OpenAI/b0729478-f363-498e-a088-b659c40d4580/application", "externalId" : "b0729478-f363-498e-a088-b659c40d4580", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "ABOUT THE TEAM OpenAI’s User Operations team shepherds our customers’ adoption of AI and ensures that our customers' product experience is nothing short of exceptional. We are building the very first post-AGI support team. We resolve complex issues, provide technical guidance, and support customers in maximizing value and adoption from deploying our products. We work closely with Sales, Technical Success, Product, Engineering and others, to deliver the best possible experience to our customers at scale. OpenAI's customers represent a range of diverse backgrounds and maturity, from early-stage startups to established global enterprises. ABOUT THE ROLE We are looking for a hands-on lead to build and run OpenAI's Incidents & Escalations function within User Operations. This is a player-coach role with a meaningful hands-on operating component. You will set the operating model and also step into active incidents and urgent escalations when needed, coordinating with on-call teams, driving clear ownership, supporting communications, and ensuring issues move through resolution and post-incident closure. During active incidents, you will coordinate with the relevant on-call teams and cross-functional responders across Engineering, Infrastructure, Support Delivery, Product, and Go-To-Market. You will help keep teams aligned, maintain timelines, clarify ownership, escalate when needed, and ensure internal, executive, customer-facing, and external communications are accurate and timely, including status page updates when required. For escalations, you will build and run the processes for tracking, triaging, mitigating, and resolving critical customer and user issues. After incidents and escalations, you will own the follow-through: retrospectives, root cause identification, action item tracking, trend analysis, and process improvements that reduce repeat issues over time. You will also help define the long-term operating model for incidents and escalations across Support Delivery, Engineering, Infrastructure, and other cross-functional partners. This role is ideal for someone who can operate calmly under pressure, bring structure to ambiguity, communicate clearly across technical and non-technical audiences, and improve the system while overseeing day to day operations. This role is based in San Francisco. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees. IN THIS ROLE, YOU WILL - Participate in an on-call rotation and serve as the active incident lead during live incidents and urgent escalations. - Own alert intake and triage process across support, safety, customer, and service-impacting issues. - Assess severity, determine scope and impact, and initiate the appropriate response path. - Page and coordinate Engineering, Infrastructure, Support Delivery, Product, Legal, Policy, Go-To-Market, and other teams as needed. - Lead incident response calls, manage timelines, clarify roles, and keep responders focused and unblocked. - Set internal guidelines for incident communications to all users, including enterprise customers, and own internal updates, executive briefings, customer-facing updates, and external status page updates where required. - Maintain situational awareness across all customer-facing incidents and parallel workstreams, ensuring the response remains coordinated and customer impact is understood. - Create and operate the process for monitoring, processing, mitigating, and resolving critical escalations, including formal closure and handoff. - Identify root causes behind incidents and escalations, lead retrospectives, and coordinate corrective action with accountable teams. - Track corrective actions to closure and ensure follow-through is focused on the best possible customer outcome. - Identify recurring operational issues, escalation patterns, and product or process gaps. - Partner with Engineering, Infrastructure, Product and Support leaders to stay ahead of customer-facing incidents, reduce repeat issues, and improve readiness. - Improve incident response processes, severity frameworks, playbooks, tooling, reporting, and automation. - Build a durable operating model for incidents and escalations as OpenAI scales globally. YOU MIGHT THRIVE IN THIS ROLE IF YOU - Have 10+ years of experience in incident management, technical support, escalation management, SRE, technical program management, or production operations. - Have 5+ years of hands-on experience working in production, on-call, or high-urgency operational environments. - Have 5+ years of leadership experience, ideally in a Support, Engineering, or similar environment. - Are comfortable acting as Incident Commander, owning coordination, decision-making, communication, and accountability during live incidents. - Have direct experience with customer-impacting incidents, executive escalations, safety-sensitive escalations, or high-severity technical issues. - Can communicate clearly under pressure with engineers, support teams, executives, customer-facing teams, and external stakeholders. - Have hands-on experience with incident communications, including internal updates, executive briefings, customer updates, and status pages. - Are experienced with incident management, paging, and alerting tools such as incident.io http://incident.io, PagerDuty, Datadog, Jira, Salesforce, Zendesk, or similar systems. - Understand monitoring and observability well enough to reason about alerts, system health, customer impact, and incident scope. - Can lead post-incident retrospectives that produce clear root causes, corrective actions, and durable improvements. - Drive action items to closure and hold teams accountable without creating unnecessary process drag. - Are highly organized, calm, and structured in ambiguous or high-pressure situations. - Can balance hands-on incident execution with longer-term systems building. - Are excited to use AI and automation to improve triage, routing, summarization, reporting, knowledge management, and incident follow-through. About OpenAI OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. For additional information, please see OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement https://cdn.openai.com/policies/eeo-policy-statement.pdf. Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information. In addition, job duties require access to secure and protected information technology systems and related data security obligations. To notify OpenAI that you believe this job posting is non-compliant, please submit a report through this form https://form.asana.com/?d=57018692298241&k=5MqR40fZd7jlxVUh5J-UeA. No response will be provided to inquiries unrelated to job posting compliance. We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this link https://form.asana.com/?k=bQ7w9h3iexRlicUdWRiwvg&d=57018692298241. OpenAI Global Applicant Privacy Policy https://cdn.openai.com/policies/global-employee-and-contractor-privacy-policy.pdf At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.", "summaryDescription" : "Lead, Incidents & Escalations, User Operations at OpenAI", "createdAt" : "2026-06-16T01:59:53.113", "lastUpdated" : "2026-06-16T14:32:14.127", "ingestTimestamp" : "2026-06-16T01:59:53.113", "mongoId" : "6a307ebbf292fd229c051fab", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 234000, "salaryAnnualMax" : 315000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Lead", "dataQualityScore" : 0.7777778, "_score" : 558.44385, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3085e0f292fd229c07c507", "title" : "Lead, Incidents & Escalations, User Operations", "company" : "OpenAI", "industry" : "User Operations", "salary" : { "min" : 234000.0, "max" : 315000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "timestamp" : "2026-06-16T12:24:17.694", "fingerprint" : "4d410f347e0ada0af9167df1d611839916b669ebeed5e382975c076330af35cc", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/openai/b0729478-f363-498e-a088-b659c40d4580/application", "externalId" : "b0729478-f363-498e-a088-b659c40d4580", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "ABOUT THE TEAM OpenAI’s User Operations team shepherds our customers’ adoption of AI and ensures that our customers' product experience is nothing short of exceptional. We are building the very first post-AGI support team. We resolve complex issues, provide technical guidance, and support customers in maximizing value and adoption from deploying our products. We work closely with Sales, Technical Success, Product, Engineering and others, to deliver the best possible experience to our customers at scale. OpenAI's customers represent a range of diverse backgrounds and maturity, from early-stage startups to established global enterprises. ABOUT THE ROLE We are looking for a hands-on lead to build and run OpenAI's Incidents & Escalations function within User Operations. This is a player-coach role with a meaningful hands-on operating component. You will set the operating model and also step into active incidents and urgent escalations when needed, coordinating with on-call teams, driving clear ownership, supporting communications, and ensuring issues move through resolution and post-incident closure. During active incidents, you will coordinate with the relevant on-call teams and cross-functional responders across Engineering, Infrastructure, Support Delivery, Product, and Go-To-Market. You will help keep teams aligned, maintain timelines, clarify ownership, escalate when needed, and ensure internal, executive, customer-facing, and external communications are accurate and timely, including status page updates when required. For escalations, you will build and run the processes for tracking, triaging, mitigating, and resolving critical customer and user issues. After incidents and escalations, you will own the follow-through: retrospectives, root cause identification, action item tracking, trend analysis, and process improvements that reduce repeat issues over time. You will also help define the long-term operating model for incidents and escalations across Support Delivery, Engineering, Infrastructure, and other cross-functional partners. This role is ideal for someone who can operate calmly under pressure, bring structure to ambiguity, communicate clearly across technical and non-technical audiences, and improve the system while overseeing day to day operations. This role is based in San Francisco. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees. IN THIS ROLE, YOU WILL - Participate in an on-call rotation and serve as the active incident lead during live incidents and urgent escalations. - Own alert intake and triage process across support, safety, customer, and service-impacting issues. - Assess severity, determine scope and impact, and initiate the appropriate response path. - Page and coordinate Engineering, Infrastructure, Support Delivery, Product, Legal, Policy, Go-To-Market, and other teams as needed. - Lead incident response calls, manage timelines, clarify roles, and keep responders focused and unblocked. - Set internal guidelines for incident communications to all users, including enterprise customers, and own internal updates, executive briefings, customer-facing updates, and external status page updates where required. - Maintain situational awareness across all customer-facing incidents and parallel workstreams, ensuring the response remains coordinated and customer impact is understood. - Create and operate the process for monitoring, processing, mitigating, and resolving critical escalations, including formal closure and handoff. - Identify root causes behind incidents and escalations, lead retrospectives, and coordinate corrective action with accountable teams. - Track corrective actions to closure and ensure follow-through is focused on the best possible customer outcome. - Identify recurring operational issues, escalation patterns, and product or process gaps. - Partner with Engineering, Infrastructure, Product and Support leaders to stay ahead of customer-facing incidents, reduce repeat issues, and improve readiness. - Improve incident response processes, severity frameworks, playbooks, tooling, reporting, and automation. - Build a durable operating model for incidents and escalations as OpenAI scales globally. YOU MIGHT THRIVE IN THIS ROLE IF YOU - Have 10+ years of experience in incident management, technical support, escalation management, SRE, technical program management, or production operations. - Have 5+ years of hands-on experience working in production, on-call, or high-urgency operational environments. - Have 5+ years of leadership experience, ideally in a Support, Engineering, or similar environment. - Are comfortable acting as Incident Commander, owning coordination, decision-making, communication, and accountability during live incidents. - Have direct experience with customer-impacting incidents, executive escalations, safety-sensitive escalations, or high-severity technical issues. - Can communicate clearly under pressure with engineers, support teams, executives, customer-facing teams, and external stakeholders. - Have hands-on experience with incident communications, including internal updates, executive briefings, customer updates, and status pages. - Are experienced with incident management, paging, and alerting tools such as incident.io http://incident.io, PagerDuty, Datadog, Jira, Salesforce, Zendesk, or similar systems. - Understand monitoring and observability well enough to reason about alerts, system health, customer impact, and incident scope. - Can lead post-incident retrospectives that produce clear root causes, corrective actions, and durable improvements. - Drive action items to closure and hold teams accountable without creating unnecessary process drag. - Are highly organized, calm, and structured in ambiguous or high-pressure situations. - Can balance hands-on incident execution with longer-term systems building. - Are excited to use AI and automation to improve triage, routing, summarization, reporting, knowledge management, and incident follow-through. About OpenAI OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. For additional information, please see OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement https://cdn.openai.com/policies/eeo-policy-statement.pdf. Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information. In addition, job duties require access to secure and protected information technology systems and related data security obligations. To notify OpenAI that you believe this job posting is non-compliant, please submit a report through this form https://form.asana.com/?d=57018692298241&k=5MqR40fZd7jlxVUh5J-UeA. No response will be provided to inquiries unrelated to job posting compliance. We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this link https://form.asana.com/?k=bQ7w9h3iexRlicUdWRiwvg&d=57018692298241. OpenAI Global Applicant Privacy Policy https://cdn.openai.com/policies/global-employee-and-contractor-privacy-policy.pdf At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.", "summaryDescription" : "Lead, Incidents & Escalations, User Operations at OpenAI", "createdAt" : "2026-06-16T01:59:36.155", "lastUpdated" : "2026-06-16T12:24:17.694", "ingestTimestamp" : "2026-06-16T01:59:36.155", "mongoId" : "6a3085e0f292fd229c07c507", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 234000, "salaryAnnualMax" : 315000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Lead", "dataQualityScore" : 0.7777778, "_score" : 558.43274, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a25145374d8ee00a00bb369", "title" : "Incident Management Engineer (Spanish/English bilingual), Incident Detection and Response", "company" : "Amazon Web Services Australia Pty Ltd", "industry" : "Operations, IT, Support Engineering, Cloud Computing", "salary" : { "min" : 175000.0, "max" : 245000.0, "currency" : "AUD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Incident Management Engineer in Sydney, Australia, adjusted for the technology industry and a large company size." }, "location" : "Sydney, New South Wales, AUS", "locations" : [ "Sydney, New South Wales, AUS" ], "certifications" : [ "AWS Associate level certifications" ], "timestamp" : "2026-06-15T00:55:38.724", "fingerprint" : "215f83d4baf92237a7526340281af7ea6f4f60e3b3b81fb5e8d07800f2bec392", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10441540/apply", "externalId" : "6848a1ed-03fd-448c-825f-45e26cd76529", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Sydney", "state" : "New South Wales", "country" : "Australia", "continent" : "oc", "source" : "llm", "workMode" : "onsite", "geo" : "-33.8698439,151.2082848" } ], "locationText" : "Sydney, New South Wales, Australia", "employmentType" : "FULL_TIME", "technicalSkills" : "AWS", "professionalSkills" : [ "Incident Management", "Customer ownership", "Account ownership", "Problem solving", "Strategic planning" ], "hardSkillsList" : [ "Incident response", "Technical troubleshooting", "Runbook development", "Response plan development" ], "softSkillsList" : [ "Leadership", "Mentoring", "Critical thinking" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Technical troubleshooting", "level" : "intermediate" }, { "name" : "Runbook development", "level" : "intermediate" }, { "name" : "Response plan development", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" }, { "name" : "Critical thinking" } ], "majorSkills" : "Incident Management, Incident Response, Customer Support", "majorSkillsList" : [ "Incident Management", "Incident Response", "Customer Support" ], "coreResponsibilities" : "Drive resolution of large scale customer impacting incidents, Drive critical, complex customer escalations, Provide critical incident response/management, Lead calls with internal/external participants, Contribute to Problem Records, Conduct continuous real-time proactive monitoring, Prioritize, manage, and own customer issues, Monitor and manage communications during high impact events, Collaborate with key stakeholders across AWS, Improve customer experience, Develop mechanisms that support operational excellence, Lead projects and teams, Drive operational improvements, Create and review design, Influence new standard operating procedures, Identify and troubleshoot recurring platform issues, Own projects to drive improvements, Mentor peers, Perform other duties as required", "teamCollaboration" : "Cross-functional teams; Engineering Teams; Internal/external participants", "projectManagementSkills" : [ "Project management" ], "domainKnowledge" : "Cloud technologies; Distributed architectures; Mission critical applications", "domainList" : [ "cloud-technologies", "distributed-architectures", "mission-critical-applications" ], "domainSpecificKnowledge" : [ "Cloud technologies", "Distributed architectures", "Mission critical applications" ], "communicationSkills" : "Written communication; Verbal communication; Presenting to audience; Convey key details", "documentationSkills" : "Technical documentation", "problemSolvingSkills" : "Analytical acumen; Logical problem solving; Critical thinking; Troubleshoot recurring platform issues", "specialRequirements" : "Work weekends, Work public holidays", "qualificationsBasic" : "Business level Spanish and English, 3+ years Major Incident / Problem Manager Experience, 5+ years Support Engineering, Network Engineering, Solutions Architecture, or similar IT role, Bachelor’s degree in Computer Science, Information Science/Technology, Communications Engineering, Business, or related field (or 6+ years relevant work experience), Professional oral and written communication skills", "qualificationsPreferred" : "Industry specific accredited certification(s), AWS Associate level certifications, Knowledge of ITIL/Lean Processes, Ability to work in ambiguous environments, Demonstrated critical thinking and logical problem solving skills, Experience driving collaborative projects, Familiarity operating or designing distributed architectures, Ability to review complex technical details", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon has built a reputation for excellence with a mission to be the earth’s most customer-centric company, a company that customers from all over the globe will recognize, value, and trust for both our products and our service. Amazon Web Services (AWS) is carrying on that tradition while leading the world in cloud technologies. The AWS Incident Detection and Response team is part of the ASPIRE organisation within AWS Support, and is dedicated to offering eligible AWS Enterprise Support customers proactive engagement and incident management to reduce the potential for failure and to accelerate recovery of critical workloads from disruption. We achieve these objectives by working closely with customers to develop runbooks and response plans customized to the context of each workload onboarded to the service. Onboarded workloads are monitored 24x7 by a team of Incident Management Engineers (IMEs) to detect and engage customers on a call bridge within 5 minutes of a critical alarm. ABOUT YOU Incident Management Engineers have a broad skill set with demonstrated career progression and a proven track record of delivering results. The successful candidate will possess strong analytical acumen, solid technology experience, superb business judgment, strategic account ownership and a propensity to dive deep to solve complex problems. You will also have a passion for creating/providing a world class experience for our customers. The candidate must understand the competitive and industry landscape and must have the leadership presence and communication skills to effectively work with customers at all levels of their organization. You must be a self-starter and able to execute at both a tactical and strategic level – with a strong attention to detail. This is a global role that requires excellent written and verbal communication skills and a passion and desire for leading the resolution of critical incidents. Your decisions are not only fundamental to helping protect our most critical customers but will help maintain the health of AWS customers worldwide. Finally, you are passionate about technology with a desire to learn more and do more with AWS. ABOUT THE ROLE AWS Support is looking for a leader with a strong background in Incident Management and customer ownership to be there during the moments that matter for our most critical customers. We are looking for an Incident Management Engineer to join our team to provide incident response and account ownership. In this position, you will play a pivotal role in providing communication, emergency response, technical resolver engagement and incident management for our customers. Please note as a follow-the-sun organisation, IMEs work the core hours of 9am-5pm AEST. Successful applicants will be required to work some weekends (Sunday to Thursday, or Tuesday to Saturday), and public holidays. Key job responsibilities - Every day will bring new and exciting challenges that include elements of: - Drive the resolution of large scale customer impacting incidents as part of a team rotation - Drive critical, complex customer escalations in situations that are sometimes technically challenging in collaboration with Engineering Teams. - Provide critical incident response/management (including leading calls with internal/external participants) for customer’s critical workloads - Contribute to Problem Records for customers - Conduct continuous real-time proactive monitoring of customer metrics - Prioritize, manage, and own emerging and developing customer issues from start to finish - Monitor and manage communications during high impact events via relevant channels - Collaborate with key stakeholders across AWS to improve the customer experience and develop mechanisms that support operational excellence - Lead projects and teams to drive operational improvements - Create and review documentation; design/influence new standard operating procedures - Identify and troubleshoot recurring platform issues and own projects to drive improvements - Mentor peers in your areas of technical and operational strength - Perform other duties as required by the organization About the team Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS? Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Inclusive Team Culture Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Basic Qualifications: - Business level Spanish and English, verbal and written - 3+ years demonstrable Major Incident / Problem Manager Experience for organizations that run mission critical applications - 5+ years of experience in Support Engineering, Network Engineering, Solutions Architecture, or similar IT role. - Bachelor’s degree in Computer Science, Information Science/Technology, Communications Engineering, Business, or a related field (or 6+ years of relevant work experience) - Professional oral and written communication skills, presenting to an audience containing one or more executive team member(s) Preferred Qualifications: - Industry specific accredited certification(s) such as the AWS Associate level certifications - Knowledge of ITIL/Lean Processes - Ability to work in ambiguous environments - Demonstrated critical thinking and logical problem solving skills - Experience driving collaborative projects from conception to delivery - Familiarity operating or designing distributed architectures with the ability to correlate system behaviors based on known inter-dependencies - Ability to review complex technical details regarding ongoing issues/events and convey the key details to senior stakeholders to facilitate real-time decision making Acknowledgement of country: In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today. IDE statement: Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Incident Management Engineer (Spanish/English bilingual), Incident Detection and Response at Amazon Web Services Australia Pty Ltd. Skills: Incident Management, Incident Response, Customer Support. Drive resolution of large scale customer impacting incidents. Drive critical, complex customer escalations", "postedDate" : "2026-06-13T10:47:22.538", "createdAt" : "2026-06-13T10:47:22.538", "lastUpdated" : "2026-06-15T00:55:38.724", "ingestTimestamp" : "2026-06-13T10:47:22.538", "mongoId" : "6a25145374d8ee00a00bb369", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10441540/apply", "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ "Incident response", "Technical troubleshooting", "Runbook development", "Response plan development", "Leadership", "Mentoring", "Critical thinking", "Incident Management", "Incident Response", "Customer Support", "Customer ownership", "Account ownership", "Problem solving", "Strategic planning", "Project management", "Cloud technologies", "Distributed architectures", "Mission critical applications", "AWS Associate level certifications" ], "skillCount" : 19, "jobCategory" : "operations", "dataQualityScore" : 0.8888889, "_score" : 546.8799, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Technologies" }, { "id" : "6a2a660774d8ee00a062b91f", "title" : "Incident Management Engineer (Portuguese/English bilingual), Incident Detection and Response", "company" : "Amazon Web Services", "industry" : "Operations, IT, Support Engineering, Cloud Computing", "salary" : { "min" : 175000.0, "max" : 245000.0, "currency" : "AUD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Incident Management Engineer in Sydney, Australia, adjusted for the technology industry and a large company size." }, "location" : "Sydney, New South Wales, AUS", "locations" : [ "Sydney, New South Wales, AUS" ], "certifications" : [ "AWS Associate level certifications" ], "timestamp" : "2026-06-15T03:55:52.053", "fingerprint" : "25ae37cc0beb9911eb9aef47f1c37b8ceda01b802af3283a76e5dbf14e970920", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10443072/apply", "externalId" : "c7b14860-3b9e-4d9a-9511-058ca0f602ec", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Sydney", "state" : "New South Wales", "country" : "Australia", "continent" : "oc", "source" : "llm", "workMode" : "onsite", "geo" : "-33.8698439,151.2082848" } ], "locationText" : "Sydney, New South Wales, Australia", "employmentType" : "FULL_TIME", "technicalSkills" : "AWS", "professionalSkills" : [ "Incident Management", "Customer Ownership", "Account Ownership", "Problem Solving", "Strategic Planning" ], "hardSkillsList" : [ "Incident Response", "Customer Engagement", "Technical Troubleshooting", "Process Improvement" ], "softSkillsList" : [ "Leadership", "Mentoring", "Critical thinking" ], "hardSkills" : [ { "name" : "Incident Response", "level" : "intermediate" }, { "name" : "Customer Engagement", "level" : "intermediate" }, { "name" : "Technical Troubleshooting", "level" : "intermediate" }, { "name" : "Process Improvement", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" }, { "name" : "Critical thinking" } ], "majorSkills" : "Incident Management, Customer Support, Technical Resolution", "majorSkillsList" : [ "Incident Management", "Customer Support", "Technical Resolution" ], "coreResponsibilities" : "Drive resolution of customer impacting incidents, Drive customer escalations, Provide incident response/management, Lead calls with participants, Contribute to Problem Records, Conduct real-time proactive monitoring, Prioritize and manage customer issues, Monitor communications during high impact events, Collaborate with AWS stakeholders, Improve customer experience, Develop operational excellence mechanisms, Lead projects to drive improvements, Create and review design, Influence new standard operating procedures, Identify and troubleshoot platform issues, Own projects to drive improvements, Mentor peers, Perform other duties", "teamCollaboration" : "Collaboration with Engineering Teams; Work with key stakeholders", "projectManagementSkills" : [ "Project management" ], "domainKnowledge" : "Mission critical applications; Distributed architectures", "domainList" : [ "mission-critical-applications", "distributed-architectures" ], "domainSpecificKnowledge" : [ "Mission critical applications", "Distributed architectures" ], "communicationSkills" : "Written communication; Verbal communication; Oral communication; Professional communication", "documentationSkills" : "Develop runbooks; Develop response plans", "problemSolvingSkills" : "Analytical acumen; Dive deep to solve complex problems; Logical problem solving", "specialRequirements" : "Work weekends, Work public holidays", "outcomesObjectives" : "Reduce potential for failure; Accelerate recovery of critical workloads", "qualificationsBasic" : "Business level Portuguese and English, 3+ years Major Incident / Problem Manager Experience, 5+ years Support Engineering, Network Engineering, Solutions Architecture, or similar IT role, Bachelor's degree in CS, Info Sci/Tech, Comm Eng, Business, or related field (or 6+ years relevant work experience)", "qualificationsPreferred" : "AWS Associate level certifications, Knowledge of ITIL/Lean Processes, Ability to work in ambiguous environments, Demonstrated critical thinking and logical problem solving skills, Experience driving collaborative projects, Familiarity operating or designing distributed architectures, Ability to review technical details and convey to stakeholders", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon has built a reputation for excellence with a mission to be the earth’s most customer-centric company, a company that customers from all over the globe will recognize, value, and trust for both our products and our service. Amazon Web Services (AWS) is carrying on that tradition while leading the world in cloud technologies. The AWS Incident Detection and Response team is part of the ASPIRE organisation within AWS Support, and is dedicated to offering eligible AWS Enterprise Support customers proactive engagement and incident management to reduce the potential for failure and to accelerate recovery of critical workloads from disruption. We achieve these objectives by working closely with customers to develop runbooks and response plans customized to the context of each workload onboarded to the service. Onboarded workloads are monitored 24x7 by a team of Incident Management Engineers (IMEs) to detect and engage customers on a call bridge within 5 minutes of a critical alarm. ABOUT YOU Incident Management Engineers have a broad skill set with demonstrated career progression and a proven track record of delivering results. The successful candidate will possess strong analytical acumen, solid technology experience, superb business judgment, strategic account ownership and a propensity to dive deep to solve complex problems. You will also have a passion for creating/providing a world class experience for our customers. The candidate must understand the competitive and industry landscape and must have the leadership presence and communication skills to effectively work with customers at all levels of their organization. You must be a self-starter and able to execute at both a tactical and strategic level – with a strong attention to detail. This is a global role that requires excellent written and verbal communication skills and a passion and desire for leading the resolution of critical incidents. Your decisions are not only fundamental to helping protect our most critical customers but will help maintain the health of AWS customers worldwide. Finally, you are passionate about technology with a desire to learn more and do more with AWS. ABOUT THE ROLE AWS Support is looking for a leader with a strong background in Incident Management and customer ownership to be there during the moments that matter for our most critical customers. We are looking for an Incident Management Engineer to join our team to provide incident response and account ownership. In this position, you will play a pivotal role in providing communication, emergency response, technical resolver engagement and incident management for our customers. Please note as a follow-the-sun organisation, IMEs work the core hours of 9am-5pm AEST. Successful applicants will be required to work some weekends (Sunday to Thursday, or Tuesday to Saturday), and public holidays. Key job responsibilities - Every day will bring new and exciting challenges that include elements of: - Drive the resolution of large scale customer impacting incidents as part of a team rotation - Drive critical, complex customer escalations in situations that are sometimes technically challenging in collaboration with Engineering Teams. - Provide critical incident response/management (including leading calls with internal/external participants) for customer’s critical workloads - Contribute to Problem Records for customers - Conduct continuous real-time proactive monitoring of customer metrics - Prioritize, manage, and own emerging and developing customer issues from start to finish - Monitor and manage communications during high impact events via relevant channels - Collaborate with key stakeholders across AWS to improve the customer experience and develop mechanisms that support operational excellence - Lead projects and teams to drive operational improvements - Create and review documentation; design/influence new standard operating procedures - Identify and troubleshoot recurring platform issues and own projects to drive improvements - Mentor peers in your areas of technical and operational strength - Perform other duties as required by the organization About the team Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS? Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Inclusive Team Culture Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Basic Qualifications: - Business level Portuguese and English, verbal and written - 3+ years demonstrable Major Incident / Problem Manager Experience for organizations that run mission critical applications - 5+ years of experience in Support Engineering, Network Engineering, Solutions Architecture, or similar IT role. - Bachelor’s degree in Computer Science, Information Science/Technology, Communications Engineering, Business, or a related field (or 6+ years of relevant work experience) - Professional oral and written communication skills, presenting to an audience containing one or more executive team member(s) Preferred Qualifications: - Industry specific accredited certification(s) such as the AWS Associate level certifications - Knowledge of ITIL/Lean Processes - Ability to work in ambiguous environments - Demonstrated critical thinking and logical problem solving skills - Experience driving collaborative projects from conception to delivery - Familiarity operating or designing distributed architectures with the ability to correlate system behaviors based on known inter-dependencies - Ability to review complex technical details regarding ongoing issues/events and convey the key details to senior stakeholders to facilitate real-time decision making Acknowledgement of country: In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today. IDE statement: Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Incident Management Engineer (Portuguese/English bilingual), Incident Detection and Response at Amazon Web Services. Skills: Incident Management, Customer Support, Technical Resolution. Drive resolution of customer impacting incidents. Drive customer escalations", "postedDate" : "2026-06-13T08:34:45.450", "createdAt" : "2026-06-13T08:34:45.450", "lastUpdated" : "2026-06-15T03:55:52.053", "ingestTimestamp" : "2026-06-13T08:34:45.450", "mongoId" : "6a2a660774d8ee00a062b91f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10443072/apply", "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ "Incident Response", "Customer Engagement", "Technical Troubleshooting", "Process Improvement", "Leadership", "Mentoring", "Critical thinking", "Incident Management", "Customer Support", "Technical Resolution", "Customer Ownership", "Account Ownership", "Problem Solving", "Strategic Planning", "Project management", "Mission critical applications", "Distributed architectures", "AWS Associate level certifications" ], "skillCount" : 18, "jobCategory" : "operations", "dataQualityScore" : 0.8888889, "_score" : 541.08264, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Technologies" }, { "id" : "6a2cc3ac74d8ee00a0a0a0cb", "title" : "Incident Management Engineer, Incident Detection and Response", "company" : "Amazon Support Services Costa Rica SRL", "industry" : "Operations, IT, Support Engineering, Cloud Computing", "salary" : { "min" : 2.4E7, "max" : 3.6E7, "currency" : "CRC", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Incident Management Engineer in Heredia, Costa Rica, adjusted for the technology industry and company size." }, "location" : "Heredia, Heredia, CRI", "locations" : [ "Heredia, Heredia, CRI" ], "certifications" : [ "AWS Associate level certification", "AWS Professional level certification" ], "timestamp" : "2026-06-15T11:37:34.226", "fingerprint" : "5d9fa2a124987689dce9a3778556aa78ee2ede923573d115e5b96c169fc67d88", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10448063/apply", "externalId" : "31abe20c-5f53-4481-9de0-d8720e3bd201", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Heredia", "state" : "Heredia", "country" : "Costa Rica", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "9.9984272,-84.1171215" } ], "locationText" : "Heredia, Heredia, Costa Rica", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS", "professionalSkills" : [ "Incident Management", "Customer ownership", "Account ownership" ], "hardSkillsList" : [ "Incident response", "Technical resolution" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Technical resolution", "level" : "intermediate" } ], "majorSkills" : "Incident Management, Incident Response, Customer Engagement", "majorSkillsList" : [ "Incident Management", "Incident Response", "Customer Engagement" ], "coreResponsibilities" : "Drive resolution large scale incidents, Provide critical incident response, Lead calls internal/external participants, Monitor manage communications high impact events, Collaborate key stakeholders AWS, Improve customer experience, Develop mechanisms support operational excellence, Create review design procedures, Influence new standard operating procedures, Identify troubleshoot recurring platform issues, Own projects drive improvements, Mentor peers technical strength, Mentor peers operational strength", "teamCollaboration" : "Engineering Teams; Key stakeholders AWS", "domainKnowledge" : "Mission critical applications; Critical workloads", "domainList" : [ "mission-critical-applications", "critical-workloads" ], "domainSpecificKnowledge" : [ "Mission critical applications", "Critical workloads" ], "communicationSkills" : "Written communication; Verbal communication", "documentationSkills" : "Runbooks; Response plans", "problemSolvingSkills" : "Troubleshoot recurring issues", "specialRequirements" : "Work weekends, Work public holidays", "outcomesObjectives" : "Reduce potential for failure; Accelerate recovery critical workloads; Detect engage customers 5 minutes; Engage customers call bridge 5 minutes", "qualificationsBasic" : "Speak, write, read fluently Spanish, 3+ years systems engineering, 3+ years technical support, Bachelor's degree equivalent, Experience English communication, 3+ years Major Incident/Problem Management", "qualificationsPreferred" : "AWS Associate level certification, AWS Professional level certification, Knowledge Lean methodologies, Knowledge distributed architectures, Knowledge service-oriented architectures, Review complex technical details, Convey key details senior stakeholders", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The AWS Incident Detection and Response team is part of the ASPIRE organization within AWS Support, and is dedicated to offering eligible AWS Enterprise Support customers proactive engagement and incident management to reduce the potential for failure and to accelerate recovery of critical workloads from disruption. We achieve these objectives by working closely with customers to develop runbooks and response plans customized to the context of each workload onboarded to the service. Onboarded workloads are monitored 24x7 by a team of Incident Management Engineers (IMEs) to detect and engage customers on a call bridge within 5 minutes of a critical alarm. AWS Support is looking for a leader with a strong background in Incident Management and customer ownership to be there during the moments that matter for our most critical customers. We are looking for an Incident Management Engineer to join our team to provide incident response and account ownership. In this position, you will play a pivotal role in providing communication, emergency response, technical resolver engagement and incident management for our customers. This is a global role that requires excellent written and verbal communication skills and a passion and desire for leading the resolution of critical incidents. Your decisions are not only fundamental to helping protect our most critical customers but will help maintain the health of AWS customers worldwide. Please note as a follow-the-sun organization. Successful applicants will be required to work some weekends (Sunday to Thursday, or Tuesday to Saturday), and public holidays. Key job responsibilities - Drive the resolution of large scale customer impacting incidents or escalations in situations that are sometimes technically challenging in collaboration with Engineering Teams. - Provide critical incident response/management (including leading calls with internal/external participants) for customer’s critical workloads - Monitor and manage communications during high impact events via relevant channels - Collaborate with key stakeholders across AWS to improve the customer experience and develop mechanisms that support operational excellence - Create and review documentation; design/influence new standard operating procedures - Identify and troubleshoot recurring platform issues and own projects to drive improvements - Mentor peers in your areas of technical and operational strength About the team Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS? Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Inclusive Team Culture Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Basic Qualifications: - Speak, write, and read fluently in Spanish - 3+ years of systems engineering, or 3+ years of technical support experience - Bachelor's degree or equivalent, or experience in a relevant field - Experience in English-language communication skills, both written and verbal - 3+ years demonstrable Major Incident/Problem Management Experience for organizations that run mission critical applications Preferred Qualifications: - AWS Associate level certification, or AWS Professional level certification - Knowledge of Lean methodologies - Knowledge of distributed and service-oriented architectures - Ability to review complex technical details regarding ongoing issues/events and convey the key details to senior stakeholders to facilitate real-time decision making Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Incident Management Engineer, Incident Detection and Response at Amazon Support Services Costa Rica SRL. Skills: Incident Management, Incident Response, Customer Engagement. Drive resolution large scale incidents. Provide critical incident response", "postedDate" : "2026-06-12T00:00:00.000", "createdAt" : "2026-06-14T05:24:42.339", "lastUpdated" : "2026-06-15T11:37:34.226", "ingestTimestamp" : "2026-06-14T05:24:42.339", "mongoId" : "6a2cc3ac74d8ee00a0a0a0cb", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10448063/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Incident response", "Technical resolution", "Incident Management", "Incident Response", "Customer Engagement", "Customer ownership", "Account ownership", "Mission critical applications", "Critical workloads", "AWS Associate level certification", "AWS Professional level certification" ], "skillCount" : 11, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 538.7064, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3050faf292fd229cef7af9", "title" : "Environment Engineer", "company" : "Keyloop", "industry" : "Customer Enablement", "salary" : { "min" : 1150000.0, "max" : 1850000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an Environment Engineer in Hyderabad, India, adjusted for mid-seniority and the technology industry." }, "location" : "India (Hyderabad)", "locations" : [ "India (Hyderabad)" ], "timestamp" : "2026-06-16T12:41:20.427", "fingerprint" : "448e9a889246e506aa82801b429e9385cc353747903546c9042e1a6df2801676", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/keyloop/bf49a40f-07be-4683-8a25-de9a6f7b6740/apply", "externalId" : "bf49a40f-07be-4683-8a25-de9a6f7b6740", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Hyderabad", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "17.3605890,78.4740613" } ], "locationText" : "Hyderabad, India", "employmentType" : "FULL_TIME", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Description Keyloop bridges the gap between dealers, manufacturers, technology suppliers and car buyers. We empower car dealers and manufacturers to fully embrace digital transformation. How? By creating innovative technology that makes selling cars better for our customers, and buying and owning cars better for theirs. We use cutting-edge technology to link our clients’ systems, departments and sites. We provide an open technology platform that’s shaping the industry for the future. We use data to help clients become more efficient, increase profitability and give more customers an amazing experience. Want to be part of it? ## You will be part of Technical Services – providing support for Environment support cases relating to our technology, which have been raised by our customers globally. You will be highly analytical and will be an excellent problem solver with the ability to discover not only the problem but also the root cause. You will have excellent Technical/Application skills/in-depth Keyloop product knowledge and will be an outstanding communicator, working as part of a team to deliver concise communication to our customers and resolution of their cases. You will utilize your skills to discover opportunities to reduce or prevent issues from happening and improve customer self - help. This is an excellent role for someone who has a thirst to learn and enjoys challenging their own thinking, A flexible approach in terms of embracing new working practices and times is essential. ## Ensure cases are accurately investigated and ensure the cause and the symptom of problems are identified and resolved. Analyzing and resolving complex product issues, using analytical or technical skills Responding with empathy to customers, dealing with their needs, and acknowledging their operational pressures and deadlines Developing your own skills whilst also guiding, advising, and coaching both colleagues and customers on issue and problem resolution Documenting solutions and producing written guidance on resolution steps following the Knowledge Centric Service (KCS) process. Reporting issues and recommending process improvements to reduce/prevent incoming cases enabling our customers to focus on “experience first” Capacity and performance management of environments Follow Case Handling Standards expected Follow & Use 5W2H Problem Solving Methodology Follow & Use 5WHY Root Cause Methodology Follow CRI Processes ## Knowledge 1. Level of knowledge of principles, concepts within speciality area and company business: We look for people with the right cultural fit. That means being passionate and enthusiastic and having what it takes to drive our business forward. We also look for people who are keen to develop new knowledge and skills, because our growth is ultimately dependent on yours. ## Problem Solving Nature of problems solved and decisions made: Essential: Excellent problem-solving skills Ability to work across global teams and working with different cultures across time zones. Highly analytical Excellent written and verbal communication skills Demonstrable team working experience – working on joint projects or technical problems. Strong programming and Linux skills, regardless of programming background. Willingness to learn KCML, our proprietary language. Desirable: Experience with using UNIX is a plus, as it can be valuable in handling certain technical aspects of the role Basic to Intermediate Programming Code Reading Capability BTECH or Master’s Degree in Engineering or Computer Science Nature of influence on people, project, processes, strategy: Good written and verbal English skills ## Additional Information Why join us? We’re on a journey to become market leaders in our space – and with that comes some incredible opportunities. Collaborate and learn from industry experts from all over the globe. Work with game-changing products and services. Get the training and support you need to try new things, adapt to quick changes and explore different paths. Join Keyloop and progress your career, your way. An inclusive environment to thrive We’re committed to fostering an inclusive work environment. One that respects all dimensions of diversity. We promote an inclusive culture within our business, and we celebrate different employees and lifestyles – not just on key days, but every day. Be rewarded for your efforts We believe people should be paid based on their performance so our pay and benefits reflect this and are designed to attract the very best talent. We encourage everyone in our organisation to explore opportunities which enable them to grow their career through investment in their development but equally by working in a culture which fosters support and unbridled collaboration. Keyloop doesn’t require academic qualifications for this position. We select based on experience and potential, not credentials. We are also an equal opportunity employer committed to building a diverse and inclusive workforce. We value diversity and encourage candidates of all backgrounds to apply. \"At Keyloop, AI is a daily ally: We encourage and train every employee to use our AI tools to boost their creativity and productivity.\" ", "summaryDescription" : "Environment Engineer at Keyloop", "postedDate" : "2026-06-15T12:03:22.646", "createdAt" : "2026-06-15T12:03:22.646", "lastUpdated" : "2026-06-16T12:41:20.427", "ingestTimestamp" : "2026-06-16T03:20:29.137", "mongoId" : "6a3050faf292fd229cef7af9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 534.77246, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c5dc974d8ee00a08de8c0", "title" : "Incident Detection/Response Manager (SOC Manager)", "company" : "SkyePoint Decisions", "industry" : "Cybersecurity", "salary" : { "min" : 100000.0, "max" : 120000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Remote", "locations" : [ "Remote" ], "certifications" : [ "GCIH", "GCFA", "GREM" ], "timestamp" : "2026-06-14T18:54:22.893", "fingerprint" : "a26d854864141b72fd7fdda9b87bab40979eb929aca80323e4f63e8519d0c0a6", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/skyepointdecisionsinc/jobs/4240175009", "externalId" : "4240175009", "industryFunction" : { }, "structuredLocations" : [ { "workMode" : "remote" } ], "locationText" : "", "employmentType" : "CONTRACT", "minimumEducation" : "Bachelor's", "experienceMinYears" : 8, "experienceLevel" : "Manager", "technicalSkills" : "SIEM, SOAR, EDR, CDM, Malware analysis, AWS native services", "professionalSkills" : [ "Incident response", "Cybersecurity architecture", "Critical infrastructure", "Applications development", "Enterprise-wide solutions", "Mission awareness" ], "hardSkillsList" : [ "Operating systems", "Networking", "Malware analysis" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Operating systems", "level" : "intermediate" }, { "name" : "Networking", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident detection, Incident response, SOC management", "majorSkillsList" : [ "Incident detection", "Incident response", "SOC management" ], "coreResponsibilities" : "Manage SOC daily activities, Build schedules, Update documentation, Manage incident response operations, Coordinate containment activities, Coordinate eradication activities, Coordinate recovery activities, Lead post-incident reviews, Lead root cause analysis, Ensure compliance with NIST SP 800-61, Ensure compliance with FSA incident response SOPs, Manage SIEM event dashboards, Maintain coverage schedule, Maintain call tree", "teamCollaboration" : "Partner organizations; CSPs", "projectManagementSkills" : [ "SOPs", "Playbooks", "CONOPS" ], "domainKnowledge" : "Cybersecurity; NIST SP 800-61; Incident response", "domainList" : [ "cybersecurity", "nist-sp-800-61", "incident-response" ], "domainSpecificKnowledge" : [ "Cybersecurity", "NIST SP 800-61", "Incident response" ], "toolProficiency" : [ "SIEM", "SOAR", "EDR", "CDM" ], "communicationSkills" : "Documentation", "documentationSkills" : "SOPs; Playbooks; CONOPS", "continuousLearning" : "Certification incentive program", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Secret clearance, U. S. Citizen", "qualificationsBasic" : "Bachelor's degree, 8+ years IT experience, 4+ years incident response, Active Secret clearance, U. S. Citizen", "qualificationsPreferred" : "GCIH certification, GCFA certification, GREM certification", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U. S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results. This is a contingent position based upon contract win. SkyePoint Decisions is seeking a Incident Detection/Response Manager (SOC Manager) to join our team supporting the Department of Education’s (DoED) Federal Student Aid (FSA) Cybersecurity and Privacy Support Services (CPSS) in Washington, DC. This is a remote position. Responsibilities: Manages SOC daily activities including building schedules and making sure all documentation such as but not limited to SOPs, Playbooks, CONOPS are up to date. Manages Tiers I/II/III incident response operations. Coordinates containment, eradication, and recovery activities. Leads post-incident reviews and root cause analysis. Ensures compliance with NIST SP 800-61 and FSA incident response SOPs. Manages SIEM event “notables” dashboards. Maintains coverage schedule per shift. Maintains call tree including contact information for all partner organizations and CSPs. Required Qualifications: Bachelor's degree and 8+ years of IT experience with 4+ years in incident response. Must have at least an active Secret clearance. At least one of these certifications: GCIH, GCFA, GREM, among others. Experience with SIEM, SOAR, EDR, CDM, and malware analysis. Experience with operating systems and networking. Experience with AWS native services and tools. Experience managing SOC overseeing complex systems. Must be a U. S. Citizen. Compensation: Salary Range: $100,000-$120,000 The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package. Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations. In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched. What We Can Offer You: At SkyePoint, we go B.I. G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day. Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs. Flexible Work Environment SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives. SkyePoint Decisions is a participating E-Verify Employer. U. S. Citizenship is required for most positions. Equal Opportunity Employer/Veterans/Disabled. CCPA Disclosure Notice Here", "summaryDescription" : "Incident Detection/Response Manager (SOC Manager) at SkyePoint Decisions. Skills: Incident detection, Incident response, SOC management. Manage SOC daily activities. Build schedules", "postedDate" : "2026-06-12T21:38:51.252", "createdAt" : "2026-06-12T21:38:51.252", "lastUpdated" : "2026-06-14T18:54:22.893", "ingestTimestamp" : "2026-06-12T21:38:51.252", "mongoId" : "6a2c5dc974d8ee00a08de8c0", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 100000, "salaryAnnualMax" : 120000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Operating systems", "Networking", "Malware analysis", "Leadership", "Incident detection", "Incident response", "SOC management", "Cybersecurity architecture", "Critical infrastructure", "Applications development", "Enterprise-wide solutions", "Mission awareness", "SOPs", "Playbooks", "CONOPS", "Cybersecurity", "NIST SP 800-61", "GCIH", "GCFA", "GREM", "SIEM", "SOAR", "EDR", "CDM" ], "skillCount" : 24, "jobCategory" : "other", "jobSubcategory" : "billable-", "dataQualityScore" : 1.0, "_score" : 523.55054, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Cybersecurity" }, { "id" : "6a3085b0f292fd229c07ae98", "title" : "Associate Environment Artist", "industry" : "Art", "salary" : { "min" : 30000.0, "max" : 40000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Junior Associate Environment Artist in Guildford, United Kingdom, adjusted for entry-level experience and full-time employment." }, "location" : "Guildford, UK", "locations" : [ "Guildford, UK" ], "timestamp" : "2026-06-16T11:00:41.455", "fingerprint" : "5ce236b407c77b5ceadfc44d01fba5d95269bf1f2deea53a3ec4b818be9fdcc9", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/stellarentertainment/2d7a3167-2cc3-4261-8267-89b7528bfb24/application", "externalId" : "2d7a3167-2cc3-4261-8267-89b7528bfb24", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Guildford", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "51.2356068,-0.5732063" } ], "locationText" : "Guildford, United Kingdom", "employmentType" : "FULL_TIME", "experienceMinYears" : 0, "experienceMaxYears" : 2, "experienceLevel" : "Entry", "technicalSkills" : "Maya, Blender, Photoshop, Substance Designer, Substance Painter, Zbrush, Gaea, SpeedTree, Unreal Engine", "professionalSkills" : [ "Environment art", "Asset creation", "Prop creation", "Environment dressing" ], "hardSkillsList" : [ "3D modeling", "Texturing", "Environment design" ], "hardSkills" : [ { "name" : "3D modeling", "level" : "intermediate" }, { "name" : "Texturing", "level" : "intermediate" }, { "name" : "Environment design", "level" : "intermediate" } ], "majorSkills" : "Environment art, 3D modeling, Texturing", "majorSkillsList" : [ "Environment art", "3D modeling", "Texturing" ], "coreResponsibilities" : "Design environment assets, Create environment assets, Design props, Create props, Collaborate with Senior Artists, Collaborate with Designers, Collaborate with Tech Artists, Contribute ideas to workflows, Contribute ideas to processes, Contribute ideas to tools, Generate world art content, Dress environments, Create visually impressive worlds, Participate in team meetings, Flag pipeline impacts, Flag player experience impacts", "teamCollaboration" : "Work with different departments; Take direction from Leads; Work across disciplines; Work with varying experience levels", "domainKnowledge" : "AAA game development; Environment art", "domainList" : [ "aaa-game-development", "environment-art" ], "domainSpecificKnowledge" : [ "AAA game development", "Environment art" ], "toolProficiency" : [ "Maya", "Blender", "Photoshop", "Substance Designer", "Substance Painter", "Zbrush", "Gaea", "SpeedTree", "Unreal Engine" ], "innovationCreativity" : "Contribute fresh ideas", "specialRequirements" : "Must be based in UK, Right to work in UK, Minimum 3 days per week in office", "outcomesObjectives" : "Create immersive gameplay experiences; Create visually amazing environments; Create visually amazing terrains; Create visually amazing assets; Take ideas from concept to completion", "qualificationsBasic" : "Portfolio of 3D work, Excellent communication skills, Excellent collaboration skills, Sound knowledge of Maya, Sound knowledge of Blender, Sound knowledge of Photoshop, Sound knowledge of Substance Designer/Painter, Sound knowledge of Zbrush", "qualificationsPreferred" : "Previous work experience in games, Familiarity with Gaea, Familiarity with SpeedTree, Unreal Engine experience, Participation in Hackathons, Participation in Game Jams", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "The Studio: We are a video game development studio with offices in Guildford, UK and Utrecht, Netherlands. Sitting within the heart of thriving communities of game developers and publishers, we focus on quality and excellence, and our partners and players are always at the front of everything we do. Games are not just about gameplay. We believe in the importance of balancing every single aspect of a game that you, as a player will interact with; what you see, how you play and how it makes you feel. It couldn’t be a more exciting time to join us as we embark on a new unannounced project, pushing the boundaries of all aspects of the game to create a truly AAA experience. The Role This is a great opportunity for an Associate Environment Artist to join us. You'll work alongside experienced artists to craft the spaces, structures, and details that make our game worlds feel alive and believable. This is a great opportunity for someone early in their career who wants to grow within a collaborative, craft-focused studio environment. We’re looking for someone with experience working in a fast paced, AAA environment to join us. As our Associate Environment Artist, you will: - Design and create high quality environment assets and props - Collaborate with Senior Artists, Designers, and Tech Artists to work towards creative objectives - Contribute fresh ideas to the development of our workflows, processes and tools - Using Art Direction Briefs, Concept Imagery and Reference images, generate world art content and dress environments to create visually impressive worlds that players will have the best experience within - Be an active participant in team meetings, regularly flagging anything that could impact the pipeline or the player experience - Be a team player, show enthusiasm capable of working effectively across different disciplines and the levels of experience within the team Requirements What we’re looking to see on your CV and portfolio and when we speak with you: - A strong creative eye and a flair for creating immersive gameplay experiences through visually amazing environments, terrains and assets - A portfolio of 3D work that shows off your skills and passion for the craft, demonstrating your ability to take ideas from concept to completion. A mixture of personal and professional work is encouraged - Excellent communication and collaboration skills - we’re looking for someone who can work with different departments and take direction from their Leads - Sound knowledge of applications such as Maya, Blender, Photoshop, Substance Designer/Painter and Zbrush - Knowledge of what games are great right now, especially in terms of environment art, what ones you love to play and why Bonus points for: - Having previous work experience in games - Familiarity with Gaea or SpeedTree - Unreal Engine experience - Participation in Hackathons or Game Jams Some things to note before applying - We're not able to offer visa sponsorship or relocation assistance for this role, so you'll need to already be based in the UK with the right to work here. - This is an on-site role at our Guildford studio, with a minimum of 3 days per week in the office. - Start date: July - September 2026 - Application deadline: Wednesday 24th June 2026 at 12:00 BST. You will hear back on your application after this closing date. Benefits What you can expect from us: - Flexible hybrid working (we work 3 days per week on-site) - Holiday Accrual Scheme - International AAA game projects; - Access to cutting-edge hardware; - Discretionary bonus scheme - Private Healthcare Plan incl. Dental and Eye care - Pension Plan - Life Assurance - Employee Assistance Programme - Wellness Support - Regular Team Incentives and Social Events We’re on an important journey with our team mates, candidates and industry partners to tackle barriers to equality and promote diversity, inclusion and accessibility across the markets we work in. If you need any support during the interview process or any feedback on our processes, please let us know.", "summaryDescription" : "Associate Environment Artist. Skills: Environment art, 3D modeling, Texturing. Design environment assets. Create environment assets", "createdAt" : "2026-06-16T02:00:27.838", "lastUpdated" : "2026-06-16T11:00:41.455", "ingestTimestamp" : "2026-06-16T02:00:27.838", "mongoId" : "6a3085b0f292fd229c07ae98", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "30k-50k", "hasSalary" : false, "allSkills" : [ "3D modeling", "Texturing", "Environment design", "Environment art", "Asset creation", "Prop creation", "Environment dressing", "AAA game development", "Maya", "Blender", "Photoshop", "Substance Designer", "Substance Painter", "Zbrush", "Gaea", "SpeedTree", "Unreal Engine" ], "skillCount" : 17, "jobCategory" : "product", "jobSubcategory" : "design", "seniorityLevel" : "Junior", "dataQualityScore" : 0.7777778, "_score" : 519.2607, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Media", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305769f292fd229cf3977a", "title" : "Director, Environment & Permitting", "company" : "Blue Moon Metals", "industry" : "Manufacturing", "salary" : { "min" : 215000.0, "max" : 315000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Director of Environment & Permitting in Apex, United States, adjusted for the mining industry and director-level seniority." }, "location" : "Apex", "locations" : [ "Apex", "California", "United States", "Remote", "Henderson", "Nevada", "United States" ], "timestamp" : "2026-06-16T08:55:21.783", "fingerprint" : "1ca3c06c143aa13376aa758690ba893d369c74dccc38c3db04d62a0bd8e62ff2", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/bluemoonmetals/jobs/4285700009", "externalId" : "4285700009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Apex", "state" : "North Carolina", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "35.7325352,-78.8505516" } ], "locationText" : "Apex, North Carolina, United States", "experienceLevel" : "Director", "professionalSkills" : [ "Regulatory approvals", "Risk management", "Legal analysis", "Compliance oversight" ], "hardSkillsList" : [ "Environmental studies", "Impact assessments", "Technical reports" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Environmental studies", "level" : "intermediate" }, { "name" : "Impact assessments", "level" : "intermediate" }, { "name" : "Technical reports", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Environmental permitting, Regulatory compliance", "majorSkillsList" : [ "Environmental permitting", "Regulatory compliance" ], "coreResponsibilities" : "Translate implications into actionable guidance, Coordinate environmental baseline studies, Coordinate impact assessments, Coordinate technical reports, Coordinate supporting documentation, Manage relationships with regulatory agencies, Manage relationships with government authorities", "teamCollaboration" : "Project teams; Executive leadership; Regulatory agencies; Government authorities", "domainKnowledge" : "Environmental permitting; Regulatory requirements", "domainList" : [ "environmental-permitting", "regulatory-requirements" ], "domainSpecificKnowledge" : [ "Environmental permitting", "Regulatory requirements" ], "communicationSkills" : "Briefing C-suite; Briefing investors", "documentationSkills" : "Supporting documentation", "qualificationsBasic" : "Environmental compliance experience", "workSiteFlexibility" : "Onsite", "rawDescription" : "Reports to: President translate implications into actionable guidance for project teams and executive leadership. Coordinate environmental baseline studies, impact assessments, technical reports, and supporting documentation required for regulatory approvals. Manage relationships with regulatory agencies and government authorities Environmental Compliance comfortable briefing C-suite and investors.", "summaryDescription" : "Director, Environment & Permitting at Blue Moon Metals. Skills: Environmental permitting, Regulatory compliance. Translate implications into actionable guidance. Coordinate environmental baseline studies", "postedDate" : "2026-06-15T23:24:38.493", "createdAt" : "2026-06-15T23:24:38.493", "lastUpdated" : "2026-06-16T08:55:21.783", "ingestTimestamp" : "2026-06-15T23:24:38.493", "mongoId" : "6a305769f292fd229cf3977a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 215000, "salaryAnnualMax" : 315000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Environmental studies", "Impact assessments", "Technical reports", "Leadership", "Environmental permitting", "Regulatory compliance", "Regulatory approvals", "Risk management", "Legal analysis", "Compliance oversight", "Regulatory requirements" ], "skillCount" : 11, "jobCategory" : "operations", "jobSubcategory" : "legal", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "_score" : 504.60724, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Mining", "llmIndustryConfidence" : 0.92 }, { "id" : "6a2c751574d8ee00a09360f7", "title" : "Security Engineer, Detection and Response", "company" : "Serval", "industry" : "Engineering", "salary" : { "min" : 200000.0, "max" : 325000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "timestamp" : "2026-06-16T03:29:01.550", "fingerprint" : "a9b58b622fae2a5e015d888ceb1430e0f4c7af9bae19294b10f2e0362b229c6e", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/serval/5250c679-d490-407e-bd2e-b8b160c62aac/application", "externalId" : "5250c679-d490-407e-bd2e-b8b160c62aac", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "SIEM, Data lakes, EDR, Cloud telemetry, Logging", "professionalSkills" : [ "Detection engineering", "Incident response", "Security operations", "Instrumentation", "Observability", "Threat intelligence", "Program management", "Process improvement", "People management" ], "hardSkillsList" : [ "Security monitoring", "Incident investigation", "Incident containment", "Incident remediation", "Threat detection", "Response planning", "On-call management", "Escalation paths", "Tabletop exercises", "Telemetry analysis", "Adversary tradecraft" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Incident investigation", "level" : "intermediate" }, { "name" : "Incident containment", "level" : "intermediate" }, { "name" : "Incident remediation", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Response planning", "level" : "intermediate" }, { "name" : "On-call management", "level" : "intermediate" }, { "name" : "Escalation paths", "level" : "intermediate" }, { "name" : "Tabletop exercises", "level" : "intermediate" }, { "name" : "Telemetry analysis", "level" : "intermediate" }, { "name" : "Adversary tradecraft", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Detection engineering, Incident response, Security operations, Team leadership", "majorSkillsList" : [ "Detection engineering", "Incident response", "Security operations", "Team leadership" ], "coreResponsibilities" : "Design detection and response operations, Implement detection and response operations, Operate detection and response operations, Monitor security events, Triage security events, Investigate security events, Contain security events, Remediate security events, Build a team, Lead a team, Mentor a team, Hire for functions, Scale functions, Ensure operational rigor, Ensure operational readiness, Improve detection quality, Improve detection coverage, Ensure critical telemetry is available, Ensure critical telemetry is reliable, Ensure critical telemetry is actionable, Embed detection and response by design, Build a security program, Use Serval's agents for security problems, Use Serval's agents for security-operations problems", "teamCollaboration" : "Partner with Engineering; Partner with Product; Partner with Infrastructure; Work with stakeholders", "domainKnowledge" : "Modern observability stacks; Modern adversary tradecraft; Cloud environments; Corporate environments; Production environments; AI-native automation", "domainList" : [ "modern-observability-stacks", "modern-adversary-tradecraft", "cloud-environments", "corporate-environments", "production-environments", "ai-native-automation" ], "domainSpecificKnowledge" : [ "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments", "AI-native automation" ], "communicationSkills" : "Written communication; Verbal communication; Incident communication", "innovationCreativity" : "Solve frontier security problems; Solve frontier security-operations problems", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Scale detection and response operations; Improve response quality; Improve response speed", "qualificationsBasic" : "10+ years in cybersecurity, Deep expertise in detection engineering, Deep expertise in incident response, Deep expertise in security operations, Deep experience building detection and response teams, Deep experience building instrumentation/observability teams, Deep experience building threat intelligence teams, Stellar leadership skills, Demonstrated history of driving improvements, Exceptional written communication skills, Exceptional verbal communication skills, Remain calm under pressure, Effectively run command of security incidents, Deep expertise in modern observability stacks, Deep expertise in SIEM, Deep expertise in data lakes, Deep expertise in EDR, Deep expertise in cloud telemetry, Deep expertise in logging, Deep expertise in detection primitives, Understand modern adversary tradecraft (TTPs), Demonstrated experience translating TTPs into detection strategies, Demonstrated experience translating TTPs into response actions, Mission-oriented, Unimpeachable integrity, Passionate about detecting and responding to adversaries", "rawDescription" : "WHO WE ARE Serval http://serval.com is an AI-native automation platform transforming how enterprises operate. We build intelligent agents that understand real-world workflows and execute them end-to-end — replacing manual processes and rigid legacy systems with adaptive, learning software. Founded in early 2024, Serval is already trusted by companies like Fox, Notion, Perplexity, Vercel, and Brex to automate high-volume, high-friction operational work across their organizations. At the core of Serval is an agentic AI platform that turns natural language into production-grade workflows. Our agents don’t just respond to requests — they reason, take action across systems, and continuously improve with usage. What began with operational use cases has quickly evolved into a horizontal AI automation layer used across IT, HR, Finance, Security, Legal, and Engineering. Our mission is to eliminate repetitive, manual work across the enterprise and give teams leverage through intelligent automation. Long term, we’re building the universal AI operations layer — a system of agents that sits across business functions and runs the workflows that keep modern companies moving. We’re backed by leading investors including Sequoia Capital, Redpoint Ventures, Meritech, First Round, General Catalyst, Elad Gil, and others. ROLE OVERVIEW As Detection and Response Lead, you'll build and scale the foundations of Serval's cybersecurity detection and response operations. You will set the strategy and drive execution for security monitoring, incident response, recovery, and post-incident improvement across our infrastructure and the systems our customers trust us to operate in. You'll be a hands-on leader with deep technical credibility and strong operational instincts. You will build and mentor a team, partner closely with Engineering and Product, and ensure that detection and response capabilities are embedded by design into the systems that power Serval. WHAT YOU'LL DO - Design, implement, and operate detection and response operations, including continuous monitoring, triage, investigation, containment, and remediation of security events across a diverse set of networks and infrastructure. - Build, lead, and directly mentor a team spanning observability, detection and response, and threat intelligence, hiring and scaling these functions deliberately and proportionately as Serval's platform and customer footprint grow. - Ensure world-class operational rigor and readiness through incident playbooks, on-call and escalation paths, tabletop exercises, and continuous improvement of response quality and speed. - Improve detection quality and coverage by partnering with engineering teams to ensure critical telemetry is available, reliable, and actionable across cloud, corporate, and production environments. - Partner deeply across Engineering, Product, and Infrastructure to embed detection and response into Serval's systems by design rather than as an afterthought. - Build a security program capable of withstanding sophisticated adversaries, including by using Serval's own agents to solve frontier security and security-operations problems. WHAT YOU'LL NEED - Have 10+ years in cybersecurity with deep expertise in detection engineering, incident response, and security operations. - Have deep experience building and leading detection and response, instrumentation/observability, and threat intelligence teams. - Have stellar leadership skills and a demonstrated history of driving durable, continuous improvements to programs, processes, and people. - Have exceptional written and verbal communication skills, can remain calm under pressure, and can effectively run command of security incidents involving numerous stakeholders across a diverse gamut of teams, expertise, and seniority. - Have deep expertise in modern observability stacks (e.g., SIEM, data lakes, EDR, cloud telemetry, logging) and detection primitives. - Understand modern adversary tradecraft (TTPs) and have demonstrated experience translating it into practical detection strategies and response actions. - Are mission-oriented, have unimpeachable integrity, and are passionate about detecting and responding to adversaries in a highly complex, fast-paced environment. WHAT WE OFFER - Impact: Be a key player in shaping the success of our product and company. - Growth: Build a fundamentally new AI product offering with the support of our experienced team and investors. Grow rapidly with the company. - Culture: Join a culture that values innovation, ownership, accountability, and fun.", "summaryDescription" : "Security Engineer, Detection and Response at Serval. Skills: Detection engineering, Incident response, Security operations, Team leadership. Design detection and response operations. Implement detection and response operations", "createdAt" : "2026-06-14T19:27:55.217", "lastUpdated" : "2026-06-16T03:29:01.550", "ingestTimestamp" : "2026-06-14T19:27:55.217", "mongoId" : "6a2c751574d8ee00a09360f7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 200000, "salaryAnnualMax" : 325000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Security monitoring", "Incident investigation", "Incident containment", "Incident remediation", "Threat detection", "Response planning", "On-call management", "Escalation paths", "Tabletop exercises", "Telemetry analysis", "Adversary tradecraft", "Leadership", "Mentoring", "Detection engineering", "Incident response", "Security operations", "Team leadership", "Instrumentation", "Observability", "Threat intelligence", "Program management", "Process improvement", "People management", "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments", "AI-native automation" ], "skillCount" : 29, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "_score" : 502.40704, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c8c8374d8ee00a0975b5a", "title" : "Incident Response Lead", "company" : "WHOOP", "industry" : "Information Security", "salary" : { "min" : 130000.0, "max" : 170000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Boston, MA", "locations" : [ "Boston, MA" ], "certifications" : [ "GCIH", "GCFA", "CISSP" ], "timestamp" : "2026-06-15T12:05:20.732", "fingerprint" : "bddddbefd297cde0f29d2286596a2e145615d870cd25df0e237c4a59536e642a", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/whoop/90e465bb-f1fb-4763-892e-320780db4f6f/application", "externalId" : "90e465bb-f1fb-4763-892e-320780db4f6f", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Boston", "state" : "Massachusetts", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "42.3588336,-71.0578303" } ], "locationText" : "Boston, Massachusetts, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 7, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "SIEM, EDR, Cloud security monitoring, Digital forensics, Threat detection", "professionalSkills" : [ "Incident command", "Root cause analysis", "Breach impact assessment", "Regulatory notification" ], "hardSkillsList" : [ "Incident response", "Digital forensics", "Threat detection", "SOC operations", "Host investigation", "Cloud investigation", "Log investigation" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Digital forensics", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "SOC operations", "level" : "intermediate" }, { "name" : "Host investigation", "level" : "intermediate" }, { "name" : "Cloud investigation", "level" : "intermediate" }, { "name" : "Log investigation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Digital forensics, Threat detection, SOC operations", "majorSkillsList" : [ "Incident response", "Digital forensics", "Threat detection", "SOC operations" ], "coreResponsibilities" : "Lead incident response activities, Serve as incident commander, Partner with SOC, Validate alerts, Guide investigations, Drive containment, Drive eradication, Conduct host investigations, Conduct cloud investigations, Conduct log investigations, Coordinate with forensic firms, Maintain incident response playbooks, Improve escalation procedures, Improve communication workflows, Lead post-incident reviews, Lead root cause analysis, Define remediation actions, Track remediation actions, Develop tabletop exercises, Execute incident simulations, Support breach impact assessments, Support regulatory notification, Improve detection capabilities, Improve response capabilities, Own incident metrics, Own incident reporting, Report response times, Report trends, Report risk reduction", "teamCollaboration" : "24x7 SOC provider; Cross-functional stakeholders; Security, IT, GRC, Legal", "projectManagementSkills" : [ "Remediation tracking" ], "domainKnowledge" : "Cloud-native environments; MITRE ATT&CK; GDPR; HIPAA; PCI", "domainList" : [ "cloud-native-environments", "mitre-att-ck", "gdpr", "hipaa", "pci" ], "domainSpecificKnowledge" : [ "Cloud-native environments", "MITRE ATT&CK", "GDPR", "HIPAA", "PCI" ], "toolProficiency" : [ "SIEM platforms", "EDR tools", "Cloud monitoring" ], "communicationSkills" : "Cross-functional coordination", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "On-call escalation rotation", "outcomesObjectives" : "Systemic risk reduction", "qualificationsBasic" : "7+ years incident response, Lead incident investigations, Host, cloud, log investigations, SIEM platforms expertise, EDR tools expertise, Cloud security monitoring expertise, Work with external SOC, Attack frameworks understanding, GDPR, HIPAA, PCI support, Excellent communication skills, Bachelor's degree or certifications", "qualificationsPreferred" : "GCIH certification, GCFA certification, CISSP certification", "workSiteFlexibility" : "Onsite", "rawDescription" : "At WHOOP, we’re on a mission to unlock human performance and healthspan. Our wearable technology provides personalized insights that help millions of members better understand their bodies and make smarter decisions about training, recovery, and lifestyle. We are seeking a Incident Response Lead to drive security incident response across the enterprise. In this role, you will serve as the primary internal escalation point and hands-on responder for security incidents, partnering closely with WHOOP’s 24x7 SOC provider and cross-functional stakeholders to investigate, contain, and remediate threats. This is a highly technical individual contributor role with significant ownership and visibility across Security, IT, GRC, and Legal. RESPONSIBILITIES: - - Lead hands-on incident response activities, serving as the primary internal escalation point for security events - Serve as the central incident commander across Security, IT, GRC, and Legal during active incidents - Partner with the SOC to validate alerts, guide investigations, and drive containment and eradication efforts - Conduct host, cloud, and log-based investigations, and coordinate with external forensic firms when needed - Maintain and continuously improve incident response playbooks, escalation procedures, and communication workflows - Lead post-incident reviews and root cause analysis, ensuring remediation actions are clearly defined and tracked - Develop and execute tabletop exercises and incident simulations to test and strengthen response readiness - Partner with GRC and Legal to support breach impact assessments and regulatory notification processes - Drive continuous improvement of detection and response capabilities across SIEM, EDR, cloud monitoring, and identity systems - Own incident metrics and reporting, including response times, trends, and systemic risk reduction initiatives - Participate in an on-call escalation rotation to provide after-hours incident leadership when required QUALIFICATIONS: - - 7+ years of experience in incident response, digital forensics, threat detection, or SOC operations - Proven experience leading incident investigations in complex, cloud-native environments - Strong experience conducting host, cloud, and log-based investigations - Hands-on expertise with SIEM platforms, EDR tools, and cloud security monitoring - Experience working with external SOC or MDR providers - Strong understanding of attack frameworks (MITRE ATT&CK) and their application to detection and response - Experience supporting breach response obligations under GDPR, HIPAA, PCI, or similar regulatory frameworks - Excellent communication skills with the ability to coordinate cross-functional stakeholders under pressure - Bachelor’s degree or relevant certifications (GCIH, GCFA, CISSP, or equivalent) This role is based in the WHOOP office located in Boston, MA. The successful candidate must be prepared to relocate if necessary to work out of the Boston, MA office. Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply. WHOOP is an Equal Opportunity Employer and participates in E-verify https://www.e-verify.gov/to determine employment eligibility The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values. At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success. The U.S. base salary range for this full-time position is $130,000 - $170,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training. In addition to the base salary, the successful candidate will also receive benefits and a generous equity package. These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements. ", "summaryDescription" : "Incident Response Lead at WHOOP. Skills: Incident response, Digital forensics, Threat detection, SOC operations. Lead incident response activities. Serve as incident commander", "createdAt" : "2026-06-14T04:00:46.619", "lastUpdated" : "2026-06-15T12:05:20.732", "ingestTimestamp" : "2026-06-14T04:00:46.619", "mongoId" : "6a2c8c8374d8ee00a0975b5a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 130000, "salaryAnnualMax" : 170000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Incident response", "Digital forensics", "Threat detection", "SOC operations", "Host investigation", "Cloud investigation", "Log investigation", "Leadership", "Incident command", "Root cause analysis", "Breach impact assessment", "Regulatory notification", "Remediation tracking", "Cloud-native environments", "MITRE ATT&CK", "GDPR", "HIPAA", "PCI", "GCIH", "GCFA", "CISSP", "SIEM platforms", "EDR tools", "Cloud monitoring" ], "skillCount" : 24, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.8888889, "_score" : 481.165, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c8c8374d8ee00a0975b3c", "title" : "Security Detection Engineer", "company" : "WHOOP", "industry" : "Information Security", "salary" : { "min" : 130000.0, "max" : 170000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Boston, MA", "locations" : [ "Boston, MA" ], "timestamp" : "2026-06-15T09:30:31.941", "fingerprint" : "7f688e9b7c449c32eb3e186a1d2a0ed0a868c5c7a11f597c0eda04f763bd2c41", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/whoop/d14ac01e-5274-43da-b41d-19fe6ac0f588/application", "externalId" : "d14ac01e-5274-43da-b41d-19fe6ac0f588", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Boston", "state" : "Massachusetts", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "42.3588336,-71.0578303" } ], "locationText" : "Boston, Massachusetts, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Go, PowerShell, YARA, SIGMA, Suricata", "professionalSkills" : [ "Detection engineering strategy", "Threat intelligence translation", "Adversary emulation", "Automated enrichment", "Automated triage", "Detection KPIs", "Root cause analysis", "Automation development", "Visibility gap identification", "Advanced analytics application", "Machine learning application", "Emerging attack research" ], "hardSkillsList" : [ "Detection logic development", "Behavioral detection building", "Alert tuning", "False positive reduction", "Detection KPI tracking", "Threat modeling", "Scripting" ], "softSkillsList" : [ "Effective communicator" ], "hardSkills" : [ { "name" : "Detection logic development", "level" : "intermediate" }, { "name" : "Behavioral detection building", "level" : "intermediate" }, { "name" : "Alert tuning", "level" : "intermediate" }, { "name" : "False positive reduction", "level" : "intermediate" }, { "name" : "Detection KPI tracking", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Effective communicator" } ], "majorSkills" : "Detection engineering, Threat detection, Security operations, Cloud security", "majorSkillsList" : [ "Detection engineering", "Threat detection", "Security operations", "Cloud security" ], "coreResponsibilities" : "Design high-signal detections, Build high-signal detections, Scale high-signal detections, Develop detection logic, Maintain detection logic, Translate threat intelligence, Validate detection effectiveness, Build behavioral detections, Improve detection quality, Tune alerts, Reduce false positives, Implement automated enrichment, Implement automated triage, Define detection KPIs, Track detection KPIs, Implement measurement processes, Improve detection health, Support incident investigations, Lead incident investigations, Contribute to on-call rotation, Reduce operational overhead, Partner with Engineering, Partner with IT, Partner with Infrastructure, Partner with Product, Partner with GRC, Ensure monitoring coverage, Ensure detection coverage, Map detections to threat models, Identify visibility gaps, Improve coverage, Explore advanced analytics, Apply advanced analytics, Improve detection fidelity, Reduce detection noise, Enhance triage workflows, Enhance investigation workflows, Research emerging attacks, Incorporate learnings into strategy", "teamCollaboration" : "Partner with Engineering; Partner with IT; Partner with Infrastructure; Partner with Product; Partner with GRC; Collaborate with engineers; Collaborate with stakeholders", "domainKnowledge" : "Cloud environments; Identity environments; Endpoint environments; Application environments; Attacker tradecraft; MITRE ATT&CK; Account takeover; Credential abuse; API misuse; Automation attacks; Privilege escalation; Data exfiltration; Identity compromise; Cloud abuse; Lateral movement; Consumer-facing platforms", "domainList" : [ "cloud-environments", "identity-environments", "endpoint-environments", "application-environments", "attacker-tradecraft", "mitre-att-ck", "account-takeover", "credential-abuse", "api-misuse", "automation-attacks", "privilege-escalation", "data-exfiltration", "identity-compromise", "cloud-abuse", "lateral-movement", "consumer-facing-platforms" ], "domainSpecificKnowledge" : [ "Cloud environments", "Identity environments", "Endpoint environments", "Application environments", "Attacker tradecraft", "MITRE ATT&CK", "Account takeover", "Credential abuse", "API misuse", "Automation attacks", "Privilege escalation", "Data exfiltration", "Identity compromise", "Cloud abuse", "Lateral movement", "Consumer-facing platforms" ], "toolProficiency" : [ "YARA", "SIGMA", "Suricata" ], "communicationSkills" : "Explain detection strategy", "continuousLearning" : "Research emerging attacks", "problemSolvingSkills" : "Root cause analysis; Reducing noise; Increasing signal fidelity", "specialRequirements" : "On-call rotation", "outcomesObjectives" : "Protect member data; Ensure depth of coverage; Ensure signal precision; Ensure resilience; Reduce false positives; Improve detection health; Reduce operational overhead; Improve coverage as environment scales; Reduce noise; Enhance triage workflows; Enhance investigation workflows", "qualificationsBasic" : "4+ years Information Security, Detection engineering experience, Threat detection experience, Security operations experience, Writing detection logic, Tuning detection logic, Cloud telemetry analysis, SaaS telemetry analysis, Authentication events analysis, API activity analysis, System logs analysis, Python scripting skills, Go scripting skills, PowerShell scripting skills, Fast-paced environment, Analytical mindset, Systems-thinking approach, Incident response support, On-call rotations experience", "qualificationsPreferred" : "Experience building detective controls, Detecting authentication abuse at scale, Detecting API abuse at scale, Applying data analysis techniques, Applying machine learning techniques, Bachelor's degree, Relevant security certifications", "rawDescription" : "At WHOOP, we’re on a mission to unlock human performance. WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives. WHOOP is seeking a Security Detection Engineer to serve as a key technical contributor within our Information Security team, reporting to the Information Security Manager. In this role, you will drive the design and evolution of high-fidelity, scalable detection capabilities that protect millions of members’ biometric and health data. You will help define our detection engineering strategy across cloud, identity, endpoint, and application environments, ensuring depth of coverage, signal precision, and resilience against modern attacker tradecraft. This is an opportunity to shape a growing detection program within a rapidly evolving Information Security team. RESPONSIBILITIES: - As a member of the team, you will: - Design, build, and scale high-signal detections across cloud, identity, endpoint, network, and application layers using Detection-as-Code principles. - Develop and maintain detection logic aligned to real-world attacker behavior and frameworks such as MITRE ATT&CK across modern security platforms. - Translate threat intelligence into actionable detections and validate effectiveness through adversary emulation and testing. - Build behavioral detections to protect against threats such as account takeover, credential abuse, API misuse, automation attacks, privilege escalation, and data exfiltration. - Continuously improve detection quality by tuning alerts, reducing false positives, and implementing automated enrichment and triage. - Define and track detection KPIs (e.g., precision, recall, false positive rate, MTTD) and implement processes to measure and improve detection health. - Support and lead incident investigations, including containment, root cause analysis, and post-incident detection improvements. - Contribute to the on-call rotation while proactively reducing operational overhead through automation. - Partner with Engineering, IT, Infrastructure, Product, and GRC to ensure systems launch with strong monitoring and detection coverage. - Map detections to threat models, identify visibility gaps, and continuously improve coverage as the environment scales. - Explore and apply advanced analytics and machine learning techniques to improve detection fidelity, reduce noise, and enhance triage and investigation workflows. - Stay ahead of evolving threats by researching emerging attack techniques and incorporating learnings into detection strategy. QUALIFICATIONS: - - 4+ years of hands-on experience in Information Security, with a focus on detection engineering, threat detection, or security operations. - Demonstrated experience writing and tuning detections across cloud, identity, endpoint, or application environments. - Familiarity with detection frameworks and tooling such as YARA, SIGMA, Suricata, or similar rule-based detection methodologies. - Strong understanding of attacker techniques across identity compromise, cloud abuse, lateral movement, and data exfiltration. - Expertise analyzing and building detections on cloud and SaaS telemetry, including authentication events, API activity, and system logs. - Strong scripting skills in a scripting language such as Python, Go, or PowerShell for automation and tool development. - Ability to operate effectively in a fast-paced, high-growth environment. - Strong analytical mindset with a systems-thinking approach to reducing noise and increasing signal fidelity. - Experience supporting incident response investigations and participating in on-call rotations. - Experience building detective controls for consumer-facing platforms or detecting authentication and API abuse at scale is a strong plus. - Effective communicator who can collaborate with engineers and explain detection strategy clearly to both technical and non-technical stakeholders. - Familiarity with applying data analysis or machine learning techniques to security detection or alert triage is a plus. - Bachelor’s degree in Computer Science, Information Security, or a related technical field, and/or relevant security certifications are a plus. Interested in the role, but don’t meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply. WHOOP is an Equal Opportunity Employer and participates in E-verify to determine employment eligibility. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values. At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company’s long-term growth and success. The U.S. base salary range for this full-time position is $130,000 - $170,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training. In addition to the base salary, the successful candidate will also receive benefits and a generous equity package. These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate’s specific qualifications, expertise, and alignment with the role’s requirements.", "summaryDescription" : "Security Detection Engineer at WHOOP. Skills: Detection engineering, Threat detection, Security operations, Cloud security. Design high-signal detections. Build high-signal detections", "createdAt" : "2026-06-14T06:37:12.610", "lastUpdated" : "2026-06-15T09:30:31.941", "ingestTimestamp" : "2026-06-14T06:37:12.610", "mongoId" : "6a2c8c8374d8ee00a0975b3c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 130000, "salaryAnnualMax" : 170000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Detection logic development", "Behavioral detection building", "Alert tuning", "False positive reduction", "Detection KPI tracking", "Threat modeling", "Scripting", "Effective communicator", "Detection engineering", "Threat detection", "Security operations", "Cloud security", "Detection engineering strategy", "Threat intelligence translation", "Adversary emulation", "Automated enrichment", "Automated triage", "Detection KPIs", "Root cause analysis", "Automation development", "Visibility gap identification", "Advanced analytics application", "Machine learning application", "Emerging attack research", "Cloud environments", "Identity environments", "Endpoint environments", "Application environments", "Attacker tradecraft", "MITRE ATT&CK", "Account takeover", "Credential abuse", "API misuse", "Automation attacks", "Privilege escalation", "Data exfiltration", "Identity compromise", "Cloud abuse", "Lateral movement", "Consumer-facing platforms", "YARA", "SIGMA", "Suricata" ], "skillCount" : 43, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 476.59918, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a3064adf292fd229cfa263c", "title" : "Cloud Support Infrastructure Administrator", "company" : "Inetum", "industry" : "Information Technology And Services", "salary" : { "min" : 45000.0, "max" : 65000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "The estimated salary is based on 2024-2025 market data for a Senior Cloud Support Infrastructure Administrator in Lisbon, Portugal, with adjustments for the technology industry and company size." }, "location" : "Lisbon, Lisbon, PT", "locations" : [ "Lisbon", "Lisbon", "PT" ], "certifications" : [ "Certified Kubernetes Application Developer" ], "timestamp" : "2026-06-16T08:45:08.129", "fingerprint" : "3bd88fa3860ce611ad972eeb1219480821064f5d7385246ca41133ed744aac90", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Inetum2/744000132155957-cloud-support-infrastructure-administrator", "externalId" : "744000132155957", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Lisbon", "state" : "Lisbon", "country" : "Portugal", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "38.7077507,-9.1365919" } ], "locationText" : "Lisbon, Lisbon, Portugal", "employmentType" : "FULL_TIME", "minimumEducation" : "Master's", "experienceMinYears" : 15, "experienceMaxYears" : 99, "experienceLevel" : "executive", "technicalSkills" : "Linux, PL-SQL, Dynatrace, K8, Docker, Ansible, IBM Cloud, AWS, Azure, Google Cloud", "professionalSkills" : [ "Trouble shooting" ], "hardSkillsList" : [ "Banking operations" ], "hardSkills" : [ { "name" : "Banking operations", "level" : "intermediate" } ], "majorSkills" : "Cloud Support, Infrastructure Administration", "majorSkillsList" : [ "Cloud Support", "Infrastructure Administration" ], "coreResponsibilities" : "Handle Incidents, Handle service requests, Handle Application Support activities, Contribute to service improvement activities, Participate to support DR/Live play activities", "domainKnowledge" : "Core banking operations", "domainList" : [ "core-banking-operations" ], "domainSpecificKnowledge" : [ "Core banking operations" ], "toolProficiency" : [ "Dynatrace", "K8", "Docker", "Ansible" ], "problemSolvingSkills" : "Trouble shooting", "specialRequirements" : "On-call rotations, Shifts", "qualificationsBasic" : "Master’s degree in computer science, 5+ years of experience in IT Operations, 2+ years of hands-on experience with a Cloud provider, 2+ years of hands-on experience Ansible/Docker, Red Hat Enterprise Linux Automation with Ansible, Certified Kubernetes Application Developer, Developing Adv. Automation with Red Hat Ansible Automation Platform, Good Level of English B2+", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Inetum is a European leader in digital services , supporting organizations as they navigate continuous technological change. The company helps clients accelerate their digital transformation through a broad portfolio that includes consulting, application services, digital engineering, cloud, cybersecurity, platforms, and infrastructure services * Candidate will play a major role in handling Incidents, service requests and Application Support activities in shifts and on-call rotations. * This member will also contribute to the service improvement activities, and participate to support DR/Live play activities * Ideal candidate will have a strong understand of core banking operations, trouble shooting skills, and experience with L1/L2 support in a banking environment with expertise on Linux, PL-SQL, Dynatrace, K8, Docker and Ansible ## Qualifications * Master’s degree in computer science or computer engineering * 5+ years of experience in IT Operations or Software Engineering * At least 2+ years of hands-on experience with a Cloud provider (IBM/AWS/Azure/Google) * At least 2+ years of hands-on experience Ansible/Docker * Red Hat Enterprise Linux Automation with Ansible * Certified Kubernetes Application Developer * Developing Adv. Automation with Red Hat Ansible Automation Platform * Good Level of English B2+", "summaryDescription" : "Cloud Support Infrastructure Administrator at Inetum. Skills: Cloud Support, Infrastructure Administration. Handle Incidents. Handle service requests", "postedDate" : "2026-06-15T09:38:39.000", "createdAt" : "2026-06-16T00:05:43.627", "lastUpdated" : "2026-06-16T08:45:08.129", "ingestTimestamp" : "2026-06-16T00:05:43.627", "mongoId" : "6a3064adf292fd229cfa263c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "30k-50k", "hasSalary" : false, "allSkills" : [ "Banking operations", "Cloud Support", "Infrastructure Administration", "Trouble shooting", "Core banking operations", "Certified Kubernetes Application Developer", "Dynatrace", "K8", "Docker", "Ansible" ], "skillCount" : 10, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 471.67496, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a306853f292fd229cfc3576", "title" : "Cloud Support Infrastructure Administrator", "company" : "Inetum", "industry" : "Information Technology And Services", "salary" : { "min" : 45000.0, "max" : 65000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Cloud Support Infrastructure Administrator in Lisbon, Portugal, adjusted for the technology industry and full-time onsite employment." }, "location" : "Lisbon, Lisbon, PT", "locations" : [ "Lisbon", "Lisbon", "PT" ], "certifications" : [ "Certified Kubernetes Application Developer" ], "timestamp" : "2026-06-16T08:15:15.920", "fingerprint" : "20d97f5d7bc1f02ef9e9ec6d388fba1174f5bf967ee9d5c038356e45455885ba", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Inetum2/744000132155957-cloud-support-infrastructure-administrator", "externalId" : "744000132155957", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Lisbon", "state" : "Lisbon", "country" : "Portugal", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "38.7077507,-9.1365919" } ], "locationText" : "Lisbon, Lisbon, Portugal", "employmentType" : "FULL_TIME", "minimumEducation" : "Master's", "experienceMinYears" : 15, "experienceMaxYears" : 99, "experienceLevel" : "executive", "technicalSkills" : "Linux, PL-SQL, Dynatrace, K8, Docker, Ansible, IBM Cloud, AWS, Azure, Google Cloud", "professionalSkills" : [ "Trouble shooting" ], "hardSkillsList" : [ "Banking operations" ], "hardSkills" : [ { "name" : "Banking operations", "level" : "intermediate" } ], "majorSkills" : "Cloud Support, Infrastructure Administration", "majorSkillsList" : [ "Cloud Support", "Infrastructure Administration" ], "coreResponsibilities" : "Handle Incidents, Handle service requests, Handle Application Support activities, Contribute to service improvement activities, Participate to support DR/Live play activities", "domainKnowledge" : "Core banking operations", "domainList" : [ "core-banking-operations" ], "domainSpecificKnowledge" : [ "Core banking operations" ], "toolProficiency" : [ "Dynatrace", "K8", "Docker", "Ansible" ], "problemSolvingSkills" : "Trouble shooting", "specialRequirements" : "On-call rotations, Shifts", "qualificationsBasic" : "Master’s degree in computer science, 5+ years of experience in IT Operations, 2+ years of hands-on experience with a Cloud provider, 2+ years of hands-on experience Ansible/Docker, Red Hat Enterprise Linux Automation with Ansible, Certified Kubernetes Application Developer, Developing Adv. Automation with Red Hat Ansible Automation Platform, Good Level of English B2+", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Inetum is a European leader in digital services , supporting organizations as they navigate continuous technological change. The company helps clients accelerate their digital transformation through a broad portfolio that includes consulting, application services, digital engineering, cloud, cybersecurity, platforms, and infrastructure services * Candidate will play a major role in handling Incidents, service requests and Application Support activities in shifts and on-call rotations. * This member will also contribute to the service improvement activities, and participate to support DR/Live play activities * Ideal candidate will have a strong understand of core banking operations, trouble shooting skills, and experience with L1/L2 support in a banking environment with expertise on Linux, PL-SQL, Dynatrace, K8, Docker and Ansible ## Qualifications * Master’s degree in computer science or computer engineering * 5+ years of experience in IT Operations or Software Engineering * At least 2+ years of hands-on experience with a Cloud provider (IBM/AWS/Azure/Google) * At least 2+ years of hands-on experience Ansible/Docker * Red Hat Enterprise Linux Automation with Ansible * Certified Kubernetes Application Developer * Developing Adv. Automation with Red Hat Ansible Automation Platform * Good Level of English B2+", "summaryDescription" : "Cloud Support Infrastructure Administrator at Inetum. Skills: Cloud Support, Infrastructure Administration. Handle Incidents. Handle service requests", "postedDate" : "2026-06-15T09:38:39.000", "createdAt" : "2026-06-15T23:58:33.994", "lastUpdated" : "2026-06-16T08:15:15.920", "ingestTimestamp" : "2026-06-15T23:58:33.994", "mongoId" : "6a306853f292fd229cfc3576", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "30k-50k", "hasSalary" : false, "allSkills" : [ "Banking operations", "Cloud Support", "Infrastructure Administration", "Trouble shooting", "Core banking operations", "Certified Kubernetes Application Developer", "Dynatrace", "K8", "Docker", "Ansible" ], "skillCount" : 10, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 471.67496, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.92 }, { "id" : "6a306853f292fd229cfc3575", "title" : "Cloud Support Infrastructure Expert", "company" : "Inetum", "industry" : "Information Technology And Services", "salary" : { "min" : 45000.0, "max" : 65000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Cloud Support Infrastructure Expert in Lisbon, Portugal, adjusted for the banking industry and company size." }, "location" : "Lisbon, Lisbon, PT", "locations" : [ "Lisbon", "Lisbon", "PT" ], "certifications" : [ "Red Hat automation", "CKAD" ], "timestamp" : "2026-06-16T10:21:56.343", "fingerprint" : "b9ad8342fdc21e7eb5169d2df31cb3a25ff302c8707fa7add4d406b0d86eb90c", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Inetum2/744000132155890-cloud-support-infrastructure-expert-", "externalId" : "744000132155890", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Lisbon", "state" : "Lisbon", "country" : "Portugal", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "38.7077507,-9.1365919" } ], "locationText" : "Lisbon, Lisbon, Portugal", "employmentType" : "FULL_TIME", "experienceMinYears" : 15, "experienceMaxYears" : 99, "experienceLevel" : "executive", "technicalSkills" : "Linux, PL/SQL, Docker, Kubernetes, Python, Bash, Jenkins, Travis, Concourse, Ansible, Terraform, AWS, Azure, IBM Cloud, Google Cloud", "professionalSkills" : [ "System design", "Service quality", "Service availability" ], "hardSkillsList" : [ "Shell scripting", "Infrastructure automation", "Core banking operations" ], "hardSkills" : [ { "name" : "Shell scripting", "level" : "intermediate" }, { "name" : "Infrastructure automation", "level" : "intermediate" }, { "name" : "Core banking operations", "level" : "intermediate" } ], "majorSkills" : "Cloud Support, Infrastructure Expert, Application Support", "majorSkillsList" : [ "Cloud Support", "Infrastructure Expert", "Application Support" ], "coreResponsibilities" : "Handle incidents, Handle service requests, Handle production activities, Troubleshoot issues, Monitor systems, Ensure service quality, Ensure service availability, Automate processes, Support disaster recovery activities, Collaborate with global teams", "teamCollaboration" : "Global teams", "domainKnowledge" : "Core banking operations", "domainList" : [ "core-banking-operations" ], "domainSpecificKnowledge" : [ "Core banking operations" ], "toolProficiency" : [ "Ansible", "Terraform", "Docker", "Kubernetes", "Jenkins", "Travis", "Concourse" ], "problemSolvingSkills" : "Problem-solving skills; Analytical skills", "specialRequirements" : "24/7 setup", "outcomesObjectives" : "Focus on performance; Focus on reliability", "qualificationsBasic" : "5+ years of experience in IT Operations, 5+ years of experience in Software Engineering, Expertise in Linux systems, Proficient in scripting languages, Solid experience with CI/CD tools, Hands-on experience with infrastructure automation, Practical experience with Docker and Kubernetes, Knowledge of cloud platforms, Experience designing scalable infrastructure solutions, Experience automating scalable infrastructure solutions, Fluent in English", "qualificationsPreferred" : "Certified in Red Hat automation, Certified in Kubernetes (CKAD), Familiar with ITIL practices", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Inetum is a European leader in digital services , supporting organizations as they navigate continuous technological change. The company helps clients accelerate their digital transformation through a broad portfolio that includes consulting, application services, digital engineering, cloud, cybersecurity, platforms, and infrastructure services This role focuses on Application Support within a banking environment, handling incidents, service requests, and production activities in a 24/7 setup. It involves troubleshooting issues, monitoring systems, and ensuring service quality and availability. The position also includes automating processes using Ansible and Terraform, supporting disaster recovery activities, and collaborating with global teams. Strong technical skills in Linux, PL/SQL, Docker, Kubernetes, and monitoring tools are required, along with experience in L1/L2 support and core banking operations. ## Qualifications * 5+ years of experience in IT Operations and Software Engineering * Strong expertise in Linux systems (CLI, shell scripting) * Proficient in scripting languages (Python and Bash) * Solid experience with CI/CD tools (Jenkins, Travis, Concourse) * Hands-on experience with infrastructure automation (Ansible, Terraform) * Practical experience with Docker and Kubernetes (K8s) * Strong knowledge of cloud platforms (AWS, Azure, IBM Cloud, Google Cloud) * Experience designing and automating scalable infrastructure solutions * Certified in Red Hat automation and Kubernetes (CKAD) * Familiar with ITIL practices * Strong analytical and problem-solving skills * Results-driven with a focus on performance and reliability * Fluent in English", "summaryDescription" : "Cloud Support Infrastructure Expert at Inetum. Skills: Cloud Support, Infrastructure Expert, Application Support. Handle incidents. Handle service requests", "postedDate" : "2026-06-15T09:41:25.000", "createdAt" : "2026-06-16T00:19:08.639", "lastUpdated" : "2026-06-16T10:21:56.343", "ingestTimestamp" : "2026-06-16T00:19:08.639", "mongoId" : "6a306853f292fd229cfc3575", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "30k-50k", "hasSalary" : false, "allSkills" : [ "Shell scripting", "Infrastructure automation", "Core banking operations", "Cloud Support", "Infrastructure Expert", "Application Support", "System design", "Service quality", "Service availability", "Red Hat automation", "CKAD", "Ansible", "Terraform", "Docker", "Kubernetes", "Jenkins", "Travis", "Concourse" ], "skillCount" : 18, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 466.44965, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Banking", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3064adf292fd229cfa263b", "title" : "Cloud Support Infrastructure Expert", "company" : "Inetum", "industry" : "Information Technology And Services", "salary" : { "min" : 55000.0, "max" : 75000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Cloud Support Infrastructure Expert in Lisbon, Portugal, adjusted for the banking industry and company size." }, "location" : "Lisbon, Lisbon, PT", "locations" : [ "Lisbon", "Lisbon", "PT" ], "certifications" : [ "Red Hat automation", "CKAD" ], "timestamp" : "2026-06-16T09:49:02.388", "fingerprint" : "31ca66a90461d76c9961d7b93b9a40ed76558d43606c753fccd3d90686e88f48", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Inetum2/744000132155890-cloud-support-infrastructure-expert-", "externalId" : "744000132155890", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Lisbon", "state" : "Lisbon", "country" : "Portugal", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "38.7077507,-9.1365919" } ], "locationText" : "Lisbon, Lisbon, Portugal", "employmentType" : "FULL_TIME", "experienceMinYears" : 15, "experienceMaxYears" : 99, "experienceLevel" : "executive", "technicalSkills" : "Linux, PL/SQL, Docker, Kubernetes, Python, Bash, Jenkins, Travis, Concourse, Ansible, Terraform, AWS, Azure, IBM Cloud, Google Cloud", "professionalSkills" : [ "System design", "Service quality", "Service availability" ], "hardSkillsList" : [ "Shell scripting", "Infrastructure automation", "Core banking operations" ], "hardSkills" : [ { "name" : "Shell scripting", "level" : "intermediate" }, { "name" : "Infrastructure automation", "level" : "intermediate" }, { "name" : "Core banking operations", "level" : "intermediate" } ], "majorSkills" : "Cloud Support, Infrastructure Expert, Application Support", "majorSkillsList" : [ "Cloud Support", "Infrastructure Expert", "Application Support" ], "coreResponsibilities" : "Handle incidents, Handle service requests, Perform production activities, Troubleshoot issues, Monitor systems, Ensure service quality, Ensure service availability, Automate processes, Support disaster recovery activities, Collaborate with global teams", "teamCollaboration" : "Global teams", "domainKnowledge" : "Core banking operations", "domainList" : [ "core-banking-operations" ], "domainSpecificKnowledge" : [ "Core banking operations" ], "toolProficiency" : [ "Ansible", "Terraform", "Docker", "Kubernetes", "Jenkins", "Travis", "Concourse" ], "problemSolvingSkills" : "Analytical skills; Problem-solving skills", "specialRequirements" : "24/7 setup", "outcomesObjectives" : "Ensure service quality; Ensure service availability", "qualificationsBasic" : "5+ years of experience in IT Operations, 5+ years of experience in Software Engineering, Expertise in Linux systems, Proficient in scripting languages, Solid experience with CI/CD tools, Hands-on experience with infrastructure automation, Practical experience with Docker and Kubernetes, Knowledge of cloud platforms, Experience designing scalable infrastructure solutions, Experience automating scalable infrastructure solutions, Fluent in English", "qualificationsPreferred" : "Certified in Red Hat automation, Certified in Kubernetes (CKAD), Familiar with ITIL practices", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Inetum is a European leader in digital services , supporting organizations as they navigate continuous technological change. The company helps clients accelerate their digital transformation through a broad portfolio that includes consulting, application services, digital engineering, cloud, cybersecurity, platforms, and infrastructure services This role focuses on Application Support within a banking environment, handling incidents, service requests, and production activities in a 24/7 setup. It involves troubleshooting issues, monitoring systems, and ensuring service quality and availability. The position also includes automating processes using Ansible and Terraform, supporting disaster recovery activities, and collaborating with global teams. Strong technical skills in Linux, PL/SQL, Docker, Kubernetes, and monitoring tools are required, along with experience in L1/L2 support and core banking operations. ## Qualifications * 5+ years of experience in IT Operations and Software Engineering * Strong expertise in Linux systems (CLI, shell scripting) * Proficient in scripting languages (Python and Bash) * Solid experience with CI/CD tools (Jenkins, Travis, Concourse) * Hands-on experience with infrastructure automation (Ansible, Terraform) * Practical experience with Docker and Kubernetes (K8s) * Strong knowledge of cloud platforms (AWS, Azure, IBM Cloud, Google Cloud) * Experience designing and automating scalable infrastructure solutions * Certified in Red Hat automation and Kubernetes (CKAD) * Familiar with ITIL practices * Strong analytical and problem-solving skills * Results-driven with a focus on performance and reliability * Fluent in English", "summaryDescription" : "Cloud Support Infrastructure Expert at Inetum. Skills: Cloud Support, Infrastructure Expert, Application Support. Handle incidents. Handle service requests", "postedDate" : "2026-06-15T09:41:25.000", "createdAt" : "2026-06-16T00:12:50.628", "lastUpdated" : "2026-06-16T09:49:02.388", "ingestTimestamp" : "2026-06-16T00:12:50.628", "mongoId" : "6a3064adf292fd229cfa263b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Shell scripting", "Infrastructure automation", "Core banking operations", "Cloud Support", "Infrastructure Expert", "Application Support", "System design", "Service quality", "Service availability", "Red Hat automation", "CKAD", "Ansible", "Terraform", "Docker", "Kubernetes", "Jenkins", "Travis", "Concourse" ], "skillCount" : 18, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 466.44965, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Banking", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb0c074d8ee00a09daf1c", "title" : "Security Engineer, Detection and Response", "company" : "Serval", "industry" : "Engineering", "salary" : { "min" : 200000.0, "max" : 325000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "timestamp" : "2026-06-15T09:19:56.220", "fingerprint" : "14803e741daf8986e22ba67efd869ed1db5cb9f7c1f099fcc2a20c6ed18f6f72", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/Serval/5250c679-d490-407e-bd2e-b8b160c62aac/application", "externalId" : "5250c679-d490-407e-bd2e-b8b160c62aac", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "Cloud telemetry, Logging", "professionalSkills" : [ "Detection engineering", "Incident response", "Security operations", "Threat intelligence", "Observability", "Program management" ], "hardSkillsList" : [ "Adversary tradecraft", "Detection strategies", "Response actions" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Adversary tradecraft", "level" : "intermediate" }, { "name" : "Detection strategies", "level" : "intermediate" }, { "name" : "Response actions", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Detection engineering, Incident response, Security operations, Team leadership", "majorSkillsList" : [ "Detection engineering", "Incident response", "Security operations", "Team leadership" ], "coreResponsibilities" : "Design detection and response operations, Implement detection and response operations, Operate detection and response operations, Monitor security events, Triage security events, Investigate security events, Contain security events, Remediate security events, Build a team, Lead a team, Mentor a team, Hire functions, Scale functions, Ensure operational rigor, Ensure operational readiness, Improve detection quality, Improve detection coverage, Partner with engineering teams, Ensure telemetry availability, Ensure telemetry reliability, Ensure telemetry actionability, Embed detection and response, Build security program", "teamCollaboration" : "Partner with Engineering; Partner with Product; Partner with Infrastructure", "domainKnowledge" : "Modern observability stacks; Modern adversary tradecraft; Cloud environments; Corporate environments; Production environments", "domainList" : [ "modern-observability-stacks", "modern-adversary-tradecraft", "cloud-environments", "corporate-environments", "production-environments" ], "domainSpecificKnowledge" : [ "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments" ], "communicationSkills" : "Written communication; Verbal communication", "innovationCreativity" : "Use Serval's agents", "qualificationsBasic" : "10+ years cybersecurity, Deep expertise detection engineering, Deep expertise incident response, Deep expertise security operations, Deep experience building teams, Deep experience leading teams, Stellar leadership skills, Demonstrated history driving improvements, Exceptional written communication, Exceptional verbal communication, Remain calm under pressure, Effectively run incidents, Deep expertise observability stacks, Deep expertise detection primitives, Understand modern adversary tradecraft, Experience translating TTPs, Experience into detection strategies, Experience into response actions", "qualificationsPreferred" : "Experience with SIEM, Experience with data lakes, Experience with EDR, Experience with cloud telemetry, Experience with logging", "rawDescription" : "WHO WE ARE Serval http://serval.com is an AI-native automation platform transforming how enterprises operate. We build intelligent agents that understand real-world workflows and execute them end-to-end — replacing manual processes and rigid legacy systems with adaptive, learning software. Founded in early 2024, Serval is already trusted by companies like Fox, Notion, Perplexity, Vercel, and Brex to automate high-volume, high-friction operational work across their organizations. At the core of Serval is an agentic AI platform that turns natural language into production-grade workflows. Our agents don’t just respond to requests — they reason, take action across systems, and continuously improve with usage. What began with operational use cases has quickly evolved into a horizontal AI automation layer used across IT, HR, Finance, Security, Legal, and Engineering. Our mission is to eliminate repetitive, manual work across the enterprise and give teams leverage through intelligent automation. Long term, we’re building the universal AI operations layer — a system of agents that sits across business functions and runs the workflows that keep modern companies moving. We’re backed by leading investors including Sequoia Capital, Redpoint Ventures, Meritech, First Round, General Catalyst, Elad Gil, and others. ROLE OVERVIEW As Detection and Response Lead, you'll build and scale the foundations of Serval's cybersecurity detection and response operations. You will set the strategy and drive execution for security monitoring, incident response, recovery, and post-incident improvement across our infrastructure and the systems our customers trust us to operate in. You'll be a hands-on leader with deep technical credibility and strong operational instincts. You will build and mentor a team, partner closely with Engineering and Product, and ensure that detection and response capabilities are embedded by design into the systems that power Serval. WHAT YOU'LL DO - Design, implement, and operate detection and response operations, including continuous monitoring, triage, investigation, containment, and remediation of security events across a diverse set of networks and infrastructure. - Build, lead, and directly mentor a team spanning observability, detection and response, and threat intelligence, hiring and scaling these functions deliberately and proportionately as Serval's platform and customer footprint grow. - Ensure world-class operational rigor and readiness through incident playbooks, on-call and escalation paths, tabletop exercises, and continuous improvement of response quality and speed. - Improve detection quality and coverage by partnering with engineering teams to ensure critical telemetry is available, reliable, and actionable across cloud, corporate, and production environments. - Partner deeply across Engineering, Product, and Infrastructure to embed detection and response into Serval's systems by design rather than as an afterthought. - Build a security program capable of withstanding sophisticated adversaries, including by using Serval's own agents to solve frontier security and security-operations problems. WHAT YOU'LL NEED - Have 10+ years in cybersecurity with deep expertise in detection engineering, incident response, and security operations. - Have deep experience building and leading detection and response, instrumentation/observability, and threat intelligence teams. - Have stellar leadership skills and a demonstrated history of driving durable, continuous improvements to programs, processes, and people. - Have exceptional written and verbal communication skills, can remain calm under pressure, and can effectively run command of security incidents involving numerous stakeholders across a diverse gamut of teams, expertise, and seniority. - Have deep expertise in modern observability stacks (e.g., SIEM, data lakes, EDR, cloud telemetry, logging) and detection primitives. - Understand modern adversary tradecraft (TTPs) and have demonstrated experience translating it into practical detection strategies and response actions. - Are mission-oriented, have unimpeachable integrity, and are passionate about detecting and responding to adversaries in a highly complex, fast-paced environment. WHAT WE OFFER - Impact: Be a key player in shaping the success of our product and company. - Growth: Build a fundamentally new AI product offering with the support of our experienced team and investors. Grow rapidly with the company. - Culture: Join a culture that values innovation, ownership, accountability, and fun.", "summaryDescription" : "Security Engineer, Detection and Response at Serval. Skills: Detection engineering, Incident response, Security operations, Team leadership. Design detection and response operations. Implement detection and response operations", "createdAt" : "2026-06-14T03:16:25.185", "lastUpdated" : "2026-06-15T09:19:56.220", "ingestTimestamp" : "2026-06-14T03:16:25.185", "mongoId" : "6a2cb0c074d8ee00a09daf1c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 200000, "salaryAnnualMax" : 325000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Adversary tradecraft", "Detection strategies", "Response actions", "Leadership", "Mentoring", "Detection engineering", "Incident response", "Security operations", "Team leadership", "Threat intelligence", "Observability", "Program management", "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments" ], "skillCount" : 17, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "_score" : 460.41156, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a306fd5f292fd229cfed7df", "title" : "Security Incident Response Manager", "company" : "Stripe", "industry" : "FinTech", "salary" : { "min" : 110000.0, "max" : 150000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Manager-level Security Incident Response Manager in the FinTech industry in Ireland, adjusted for seniority and company size." }, "location" : "Ireland Locations", "locations" : [ "Ireland Locations" ], "timestamp" : "2026-06-16T11:17:32.753", "fingerprint" : "5f1795380bd689254fa4ec13a24c81721330e837ac870f097537d3dd799086da", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://stripe.com/jobs/search?gh_jid=8007205", "externalId" : "8007205", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Ireland", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Ireland", "experienceMinYears" : 5, "experienceLevel" : "Manager", "technicalSkills" : "Python, SQL, MacOS, Linux, Windows", "professionalSkills" : [ "Security management", "Data analytics", "Network security", "Digital forensics", "Incident response", "Threat intelligence", "Data processing", "Data analysis" ], "hardSkillsList" : [ "Incident response", "Threat analysis", "Forensic investigation", "Data analysis", "Network security", "System administration" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "System administration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident Response Management, Security Operations, Team Leadership, Threat Analysis", "majorSkillsList" : [ "Incident Response Management", "Security Operations", "Team Leadership", "Threat Analysis" ], "coreResponsibilities" : "Leverage security management experience, Improve incident response capabilities, Manage team of security analysts, Manage investigators, Manage responders, Hire team members, Train team members, Evaluate team performance, Provide technical guidance, Develop response procedures, Ensure timely resolution of casework, Collaborate with internal stakeholders, Make continuous improvements to incident response function, Lead team of security analysts, Support team of security analysts, Triage threats, Assess threats, Respond to threats, Provide technical guidance to team, Influence organizational mission, Influence organizational vision, Ensure prioritization of project work, Ensure delivery of project work, Align project work with security roadmaps, Strengthen KPIs for response operations, Strengthen metrics for response operations, Provide clear reporting to stakeholders, Provide consistent reporting to stakeholders, Work cross-functionally with security engineering teams, Gather requirements for analyzing security events data, Gather requirements for responding to security events data, Protect Stripe networks, Protect Stripe systems, Protect Stripe data, Develop strategies for incident response, Document strategies for incident response, Implement strategies for incident response, Develop runbooks for incident response, Document runbooks for incident response, Implement runbooks for incident response, Develop capabilities for incident response, Document capabilities for incident response, Implement capabilities for incident response, Continuously improve security processes, Continuously improve response capabilities, Collaborate with security engineers, Collaborate with security analysts, Coach individual contributors, Mentor individual contributors, Enable career development, Champion quality standards within team", "teamCollaboration" : "Cross-functional teams; Security Analytics teams; Detection teams; Security engineering teams", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Threat actor tactics; Threat actor techniques; Threat actor procedures; Security incident response; Network security; Digital forensics; Data analytics", "domainList" : [ "threat-actor-tactics", "threat-actor-techniques", "threat-actor-procedures", "security-incident-response", "network-security", "digital-forensics", "data-analytics" ], "domainSpecificKnowledge" : [ "Threat actor tactics", "Threat actor techniques", "Threat actor procedures", "Security incident response", "Network security", "Digital forensics", "Data analytics" ], "toolProficiency" : [ "Chronicle", "Tines", "Osquery", "Splunk" ], "communicationSkills" : "Operational reporting; Incident reporting", "documentationSkills" : "Response procedures; Runbooks", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Ensure timely and effective resolution of casework", "qualificationsBasic" : "5+ years leading Security Operations or Incident Response teams, Hands-on, technical management experience, B.S. or M.S. Computer Science or related field, Equivalent experience in Security, Experience recruiting, growing, and leading technical teams, Performance management experience, Excellent written and verbal communication skills, Ability to develop and deliver operational or incident-related information to leadership, Advanced knowledge of data analytics, Advanced knowledge of network security, Advanced knowledge of digital forensics, Advanced knowledge of incident response investigations, Experience with Python, Experience with SQL, Familiarity with macOS, Familiarity with Linux, Familiarity with Windows, Understanding of threat actor TTPs", "qualificationsPreferred" : "Broad knowledge across information security domain, Familiarity with endpoint security, Familiarity with email security, Familiarity with network security, Familiarity with identity management, Familiarity with cloud security, Familiarity with vulnerability management, Familiarity with incident response, Familiarity with threat intelligence, Experience with engineering, Experience with data processing and analysis tools, Familiarity with network observability, Familiarity with security software, Familiarity with data engineering solutions, Familiarity with Chronicle, Familiarity with Tines, Familiarity with osquery, Familiarity with Splunk", "remoteFriendly" : true, "rawDescription" : "Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Security Incident Response team is responsible for triaging and assessing the severity of incoming security alerts, responding with initial containment measures and escalating as needed to incident responders for further investigation and resolution. They analyze a variety of data sources to identify potential threats, collect requirements for operational enhancements to detection and response systems, and generally scale security processes. From external attacks to insider threats, our goal is to respond with speed and precision, remediate, and support the incident postmortem process. The team is distributed globally and regularly coordinates with stakeholders in North America, Europe, and Asia. What you’ll do You will leverage your security management experience to improve incident response capabilities at Stripe. You will manage a team of security analysts, investigators, and responders on the front lines of the incident response process, hiring, training, and evaluating their performance, providing technical guidance where needed, developing clear and consistent response procedures, and ensuring timely and effective resolution of casework. You will also collaborate with various internal stakeholders, including the Security Analytics and Detection teams, and make continuous improvements to Stripe’s security incident response function. Responsibilities Lead and support a team of security analysts, investigators, and responders who triage, assess, and respond to threats Provide technical guidance to the team, as a subject matter expert Influence the organizational mission and vision by ensuring prioritization and delivery of project work that is aligned with relevant security roadmaps Strengthen KPIs and metrics for measuring response operations effectiveness, for clear and consistent reporting to internal stakeholders Work cross-functionally with security engineering teams to gather requirements for analyzing and responding to security events data at scale while protecting Stripe networks, systems, and data from threats Develop, document, and implement strategies, runbooks, and capabilities to support the incident response process Continuously improve security processes and response capabilities by collaborating with security engineers and analysts Coach and mentor individual contributors, enabling career development and championing quality standards within the team Who you are We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement. Minimum requirements 5+ years experience leading Security Operations or Incident Response teams, including hands-on, technical management experience of security analysts or engineers B. S. or M. S. Computer Science or related field, or equivalent experience in Security Experience recruiting, growing, and leading technical teams, including performance management Excellent written and verbal communication skills, including the ability to develop and deliver operational or incident-related information to leadership Advanced knowledge of data analytics (e. g. logs for first or third party applications, system / data access events), network security, digital forensics, and incident response investigations Experience with Python and SQL, and/or familiarity with other programming languages Familiarity with operating systems, file systems, and memory on macOS, Linux, or Windows Strong understanding of threat actor tactics, techniques, and procedures (TTPs) Preferred qualifications Broad knowledge and experience across the information security domain, including familiarity with endpoint, email, network, identity management, cloud security, vulnerability management, incident response, and threat intelligence. Experience with engineering, data processing and analysis tools Familiarity with network observability, security software, or data engineering solutions (Chronicle, Tines, osquery, Splunk, etc.)", "summaryDescription" : "Security Incident Response Manager at Stripe. Skills: Incident Response Management, Security Operations, Team Leadership, Threat Analysis. Leverage security management experience. Improve incident response capabilities", "postedDate" : "2026-06-16T01:16:18.624", "createdAt" : "2026-06-16T01:16:18.624", "lastUpdated" : "2026-06-16T11:17:32.753", "ingestTimestamp" : "2026-06-16T01:16:18.624", "mongoId" : "6a306fd5f292fd229cfed7df", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Incident response", "Threat analysis", "Forensic investigation", "Data analysis", "Network security", "System administration", "Leadership", "Incident Response Management", "Security Operations", "Team Leadership", "Threat Analysis", "Security management", "Data analytics", "Digital forensics", "Threat intelligence", "Data processing", "Roadmap planning", "Threat actor tactics", "Threat actor techniques", "Threat actor procedures", "Security incident response", "Chronicle", "Tines", "Osquery", "Splunk" ], "skillCount" : 25, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 432.09055, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307a55f292fd229c03aba6", "title" : "Manager, AV Incident Management", "company" : "May Mobility", "salary" : { "min" : 150000.0, "max" : 225000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Ann Arbor, Michigan, United States", "locations" : [ "Ann Arbor", "Michigan", "United States" ], "timestamp" : "2026-06-16T10:30:40.536", "fingerprint" : "3053d197eb8333d33227ff4e5ed999fd054ab117a0661ad9829b7a124b47c017", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/maymobility/jobs/8587945002", "externalId" : "8587945002", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Ann Arbor", "state" : "Michigan", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "42.2813722,-83.7484616" } ], "locationText" : "Ann Arbor, Michigan, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "rawDescription" : "May Mobility is transforming cities through autonomous technology to create a safer, greener, more accessible world. Based in Ann Arbor, Michigan, May develops and deploys autonomous vehicles (AVs) powered by our innovative Multi-Policy Decision Making (MPDM) technology that literally reimagines the way AVs think. Our vehicles do more than just drive themselves - they provide value to communities, bridge public transit gaps and move people where they need to go safely, easily and with a lot more fun. We’re building the world’s best autonomy system to reimagine transit by minimizing congestion, expanding access and encouraging better land use in order to foster more green, vibrant and livable spaces. Since our founding in 2017, we’ve given more than 500,000 autonomous rides to real people around the globe. And we’re just getting started. We’re hiring people who share our passion for building the future, today, solving real-world problems and seeing the impact of their work. Join us. Job Summary The Manager, AV Incident Management is responsible for leading May Mobility's incident management function within the Systems Risk Management team. This role owns the end-to-end incident response process across our autonomous vehicle operations, ensuring every incident is identified, managed, and closed in a way that is accurate, timely, and defensible to regulators and partners. As May Mobility scales its fleet and expands toward continuous autonomous operations, this role provides the senior leadership and operational expertise needed to mature our incident management capability in line with that growth. This individual will develop and maintain the processes, standards, and team structures that keep our operations safe and our safety case credible. Essential Responsibilities Lead and continuously improve the incident management process across all AV operational sites, ensuring consistent, high-quality response to incidents of all severities Enable and support regulatory incident reporting, including NHTSA Standing General Order requirements and applicable state-level reporting, ensuring accurate and timely submissions Develop and maintain incident response standards, escalation frameworks, and operational protocols in alignment with May Mobility's safety case and risk management approach Design and lead a tiered incident response team structure that scales effectively with fleet growth, balancing full-time and contract resources to maintain coverage and quality Serve as the primary point of contact for regulators, first responders, and partners during significant incidents, coordinating response and communications in partnership with Legal and Safety leadership Work cross-functionally with Safety, Engineering, Legal, and Operations to ensure incidents drive systemic improvement, not just resolution Develop and lead the talent within the incident management team, building a clear career pathway and ensuring the team has the skills and capacity to meet operational demands Provide regular reporting to senior leadership on incident trends, team performance, and emerging risks Skills and Abilities Success in this role typically requires the following competencies: Deep understanding of AV operations and the regulatory environment governing autonomous vehicle deployment in the United States Proven ability to lead and make decisions under pressure, with clear judgment on escalation and regulatory reporting thresholds Strong process ownership instincts - able to design systems that work consistently across teams and time zones Effective communicator across technical, legal, and executive audiences Ability to build and develop a team from a small base, with a practical approach to scaling that stays ahead of operational demand High integrity in handling sensitive operational and safety information Qualifications and Experience Candidates most successful in this role typically hold the following qualifications or comparable knowledge or experience: Required Qualifications: 7+ years of experience in incident management, safety operations, or crisis management within an autonomous vehicle, aviation, rail, or similarly regulated industry Direct experience owning regulatory incident reporting to federal or state transportation authorities Demonstrated experience designing and implementing escalation structures and on-call coverage models for 24/7 operations Proven track record working across Safety, Engineering, Legal, and Operations functions at a senior level Experience building and leading small, high-performing teams in a fast-paced operational environment Desirable Qualifications: Experience at an AV company that has operated or launched driverless commercial service Background in first responder coordination and external communications during major incidents Familiarity with safety case frameworks and risk-based assessment methodologies Prior military experience, especially those with Special Operations or Officer Command roles, or equivalent Federal or State Government experience Physical Requirements Standard office working conditions which includes but not limited to: Prolonged sitting Prolonged standing Prolonged computer use Travel Required? 0-10% Benefits and Perks Comprehensive healthcare suite including medical, dental, vision, life, and disability plans. Domestic partners who have been residing together at least one year are also eligible to participate. Health Savings and Flexible Spending Healthcare and Dependent Care Accounts available. Rich retirement benefits, including an immediately vested employer safe harbor match. Generous paid parental leave as well as a phased return to work. Flexible vacation policy in addition to paid company holidays. Total Wellness Program providing numerous resources for overall wellbeing Don’t meet every single requirement? Studies have shown that women and/or people of color are less likely to apply to a job unless they meet every qualification. At May Mobility, we’re committed to building a diverse, inclusive, and authentic workforce, so if you’re excited about this role but your previous experience doesn’t align perfectly with every qualification, we encourage you to apply anyway! You may be the perfect candidate for this or another role at May. Want to learn more about our culture & benefits? Check out our website! May Mobility is an equal opportunity employer. All applicants for employment will be considered without regard to race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity or expression, veteran status, genetics or any other legally protected basis. Below, you have the opportunity to share your preferred gender pronouns, gender, ethnicity, and veteran status with May Mobility to help us identify areas of improvement in our hiring and recruitment processes. Completion of these questions is entirely voluntary. Any information you choose to provide will be kept confidential, and will not impact the hiring decision in any way. If you believe that you will need any type of accommodation, please let us know. Note to Recruitment Agencies: May Mobility does not accept unsolicited agency resumes. Furthermore, May Mobility does not pay placement fees for candidates submitted by any agency other than its approved partners. Salary Range $150,000—$225,000 USD", "summaryDescription" : "Manager, AV Incident Management at May Mobility", "postedDate" : "2026-06-16T01:15:48.328", "createdAt" : "2026-06-16T01:15:48.328", "lastUpdated" : "2026-06-16T10:30:40.536", "ingestTimestamp" : "2026-06-16T01:15:48.328", "mongoId" : "6a307a55f292fd229c03aba6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 150000, "salaryAnnualMax" : 225000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 429.00412, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "68c2e419f8b1b0376634c391", "title" : "Sr. Risk Manager, High Sev Incidents, Last Mile, High Severity Incidents", "company" : "Amazon UK Services Ltd.", "industry" : "Project/Program/Product Management--Non-Tech, Risk Family, transportation and logistics", "salary" : { "min" : 95000.0, "max" : 140000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Risk Manager in London, adjusted for the e-commerce industry and company size." }, "location" : "London, England, GBR", "locations" : [ "London, England, GBR" ], "timestamp" : "2026-06-15T00:57:39.395", "fingerprint" : "219ed764676894dd6cad1255f52b0682e4da3460487784e89c7598126d409d83", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3072193/apply", "externalId" : "34819713-a9b5-445f-9167-25e0200467bb", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "state" : "England", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, England, United Kingdom", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Risk management", "Incident management", "Process improvement" ], "hardSkillsList" : [ "Risk mitigation", "Incident prevention", "Data analysis" ], "softSkillsList" : [ "Empathy", "Influence", "Judgment", "Maturity", "Adaptability" ], "hardSkills" : [ { "name" : "Risk mitigation", "level" : "intermediate" }, { "name" : "Incident prevention", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Empathy" }, { "name" : "Influence" }, { "name" : "Judgment" }, { "name" : "Maturity" }, { "name" : "Adaptability" } ], "majorSkills" : "Risk management, Incident response, Stakeholder management", "majorSkillsList" : [ "Risk management", "Incident response", "Stakeholder management" ], "coreResponsibilities" : "Support incident management, Support risk mitigation, Provide empathetic experiences, Deep dive incidents, Drive accountability across organization, Generate insights to mitigate risk, Improve safety programs, Investigate sensitive tragedies, Handle sensitive tragedies, Coordinate response process, Communicate with involved parties, Communicate with senior leaders, Be responsible for customer experience, Be responsible for community member experience, Advocate for customers, Lead with empathy, Balance speed with evidence gathering, Champion customer trust, Dive into team workflows, Create efficiencies to scale, Lead process improvements, Identify risks, Identify key contributing factors, Assess risk, Partner across organization, Drive risk mitigation strategies, Drive incident prevention solutions, Provide support in emotionally charged situations, Remain composed, Remain empathetic, Remain supportive, Embrace ambiguity, Drive clarity across teams, Build relationships, Balance time between projects, Balance time for rapid response, Participate in on-call rotation, Lead rapid response activities", "teamCollaboration" : "Cross-functional coordination; Work with diverse audiences; Drive clarity across teams", "domainKnowledge" : "Last Mile logistics", "domainList" : [ "last-mile-logistics" ], "domainSpecificKnowledge" : [ "Last Mile logistics" ], "toolProficiency" : [ "Microsoft Office" ], "communicationSkills" : "Verbal communication; Written communication", "problemSolvingSkills" : "Root cause analysis; Analytical skills", "specialRequirements" : "Up to 15% international travel, Work flexibly across multiple time zones, On-call rotation", "qualificationsBasic" : "Knowledge of Microsoft Office products, Experience in compliance, audit or risk management, Bachelor's degree or equivalent", "qualificationsPreferred" : "Experience leveraging technology, Implementing lean principles / Six Sigma methodologies, Master's degree or equivalent, Emotional intelligence and experience supporting crisis, incident management or trauma", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "As the Sr. Risk Manager for High Severity Incidents (HSI), you will support scaling our program world-wide as well as support incident management and risk mitigation. You will provide world-class empathetic experiences to support internal and external stakeholders after an incident. In this role, you will deep dive incidents, driving accountability across the organization and generating insights that will mitigate risk and improve safety programs. This is a large-scale, rapid response coordination program designed to ensure timely and thorough management of the highest severity incidents that affect any of our Last Mile drivers, customers, or community members. We investigate and handle the most sensitive of tragedies with professionalism and care, and coordinate the process of response through thoughtful communication with all involved, including the most senior leaders at Amazon. You will be responsible for the experience of our customers and community members during some of the hardest moments of their lives. The role requires a leader who is connected to the details, advocates for customers, leads with empathy, and can effectively influence senior leaders. They will possess a detailed understanding of how to balance speed with evidence gathering and be able to champion customer trust. The leader will dive into team workflows and create efficiencies to scale and lead processes improvements, as well as identify risks and key contributing factors to high severity incidents. They will assess risk and partner across the organization to drive risk mitigation strategies and incident prevention solutions. A successful candidate will possess high emotional intelligence and the capacity to provide support in emotionally charged situations. This includes the ability to remain composed, empathetic, and supportive when dealing with individuals affected by a tragic incident. The candidate should embrace ambiguity and drive clarity across teams and organizations. This role requires strong relationship building skills and sound business judgment. They will be an excellent communicator, verbally and through writing, enabling them to work successfully with diverse audiences. Balancing time between projects and rapid response is a critical component for success in the position. Maturity, high judgment, negotiation skills, ability to influence, analytic skills, and leadership are essential to success in this role. This role is required to participate in an on-call rotation to lead rapid response activities. Emotional intelligence and experience supporting crisis, incident management or trauma strongly preferred. • Role requires up to 15% international travel • Must be able to work flexibly across multiple time zones • Experience working in fast-paced, ambiguous environments • Position requires strong adaptability to changing priorities • Ability to influence without direct authority • Experience in stakeholder management at senior levels Basic Qualifications: - Knowledge of Microsoft Office products and applications at an advanced level - Experience in compliance, audit or risk management - Bachelor's degree or equivalent Preferred Qualifications: - Experience leveraging technology and implementing lean principles / Six Sigma methodologies to drive process improvements or equivalent - Master's degree or equivalent Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice ( https://www.amazon.jobs/en/privacy_page ) to know more about how we collect, use and transfer the personal data of our candidates. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Sr. Risk Manager, High Sev Incidents, Last Mile, High Severity Incidents at Amazon UK Services Ltd.. Skills: Risk management, Incident response, Stakeholder management. Support incident management. Support risk mitigation", "postedDate" : "2026-06-13T12:15:59.407", "createdAt" : "2026-06-13T12:15:59.407", "lastUpdated" : "2026-06-15T00:57:39.395", "ingestTimestamp" : "2026-06-13T12:15:59.407", "mongoId" : "68c2e419f8b1b0376634c391", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3072193/apply", "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Risk mitigation", "Incident prevention", "Data analysis", "Empathy", "Influence", "Judgment", "Maturity", "Adaptability", "Risk management", "Incident response", "Stakeholder management", "Incident management", "Process improvement", "Last Mile logistics", "Microsoft Office" ], "skillCount" : 15, "jobCategory" : "project-management", "dataQualityScore" : 1.0, "_score" : 428.52362, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a30620ef292fd229cf98dc8", "title" : "Cloud Engineer - T Cloud Public (REF5058E)", "company" : "Deutsche Telekom IT Solutions", "industry" : "Telecommunications", "salary" : { "min" : 1.5E7, "max" : 2.2E7, "currency" : "HUF", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cloud Engineer in Hungary, adjusted for mid-level experience and the technology industry." }, "location" : "Budapest, Debrecen, Szeged, Pécs, HU", "locations" : [ "Budapest, Debrecen, Szeged, Pécs", "HU" ], "timestamp" : "2026-06-16T09:14:57.272", "fingerprint" : "e5f60fc8c57e010744480f8a58c0928baee45fea8e67500c6d2b26684d5a1ee7", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/DeutscheTelekomITSolutions/744000132190050-cloud-engineer-t-cloud-public-ref5058e-", "externalId" : "744000132190050", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Budapest", "country" : "Hungary", "continent" : "eu", "source" : "llm", "workMode" : "remote", "geo" : "47.4813896,19.1457723" }, { "city" : "Debrecen", "country" : "Hungary", "continent" : "eu", "source" : "llm", "workMode" : "remote", "geo" : "47.5313990,21.6259782" }, { "city" : "Szeged", "country" : "Hungary", "continent" : "eu", "source" : "llm", "workMode" : "remote", "geo" : "46.2546312,20.1486016" }, { "city" : "Pécs", "country" : "Hungary", "continent" : "eu", "source" : "llm", "workMode" : "remote", "geo" : "46.0765092,18.2280317" } ], "locationText" : "Budapest, Hungary; Debrecen, Hungary; Szeged, Hungary; Pécs, Hungary", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "Linux, Cloud technologies, Software defined networks, Networks, IT-Security, Infrastructure automation, OpenStack", "professionalSkills" : [ "Customer focus", "Infrastructure automation" ], "hardSkillsList" : [ "Network security", "Linux administration", "Infrastructure automation" ], "hardSkills" : [ { "name" : "Network security", "level" : "intermediate" }, { "name" : "Linux administration", "level" : "intermediate" }, { "name" : "Infrastructure automation", "level" : "intermediate" } ], "majorSkills" : "Cloud engineering, Network security, Infrastructure automation", "majorSkillsList" : [ "Cloud engineering", "Network security", "Infrastructure automation" ], "coreResponsibilities" : "Take on operational challenges in hyperscale cloud backend, Own hands-on change implementation, Own deep problem investigation, Own proactive fixes, Work directly at the console, Get up close with hardware, Get up close with tech, Join project rollouts, Help launch new features, Automate wherever possible, Share openly, Support each other, Solve big problems together", "teamCollaboration" : "High-trust expert team", "projectManagementSkills" : [ "Agile development processes" ], "domainKnowledge" : "Hyperscale cloud backend; Cloud technologies; Software defined networks; Network services; IT-Security", "domainList" : [ "hyperscale-cloud-backend", "cloud-technologies", "software-defined-networks", "network-services", "it-security" ], "domainSpecificKnowledge" : [ "Hyperscale cloud backend", "Cloud technologies", "Software defined networks", "Network services", "IT-Security" ], "continuousLearning" : "Learning opportunities", "innovationCreativity" : "Creative approaches", "problemSolvingSkills" : "Problem investigation; Proactive fixes", "specialRequirements" : "Work in European Union", "qualificationsBasic" : "Completed studies in technical, engineering or scientific subject or comparable professional training, 5-7 years of professional experience in IT, Securing Linux OS with focus on modern cloud technologies, Very good knowledge of software defined networks, Very good knowledge of routing, Very good knowledge of firewalls, Very good knowledge of IDS/IPS, Very good knowledge of Anti-DDoS, Very good knowledge of WAF, Very good knowledge of physical networks, Extensive knowledge in infrastructure automation, Experience in Linux and network related services, Experience in IT-Security, High level of customer focus, Knowledge of agile development processes, Ability to assess technical solutions, Ability to come up with creative approaches, Fluency in written and spoken English", "qualificationsPreferred" : "OpenStack experience is a plus, Programming experience in open source projects is a plus", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "As Hungary’s most attractive employer in 2025 (according to Randstad’s representative survey), Deutsche Telekom IT Solutions is a subsidiary of the Deutsche Telekom Group. The company provides a wide portfolio of IT and telecommunications services with more than 5300 employees. We have hundreds of large customers, corporations in Germany and in other European countries. DT-ITS recieved the Best in Educational Cooperation award from HIPA in 2019, acknowledged as the the Most Ethical Multinational Company in 2019. The company continuously develops its four sites in Budapest, Debrecen, Pécs and Szeged and is looking for skilled IT professionals to join its team. Your Department At T Cloud Public we don’t just operate a platform — we shape the future of secure, scalable. Powered by agile ways of working, lean structures, and a passionate, high-performance team, we thrive in one of the most dynamic environments in the industry. If you’re a cloud enthusiast and a hands-on professional ready to tackle complex challenges, you’ll feel right at home with us. Why you will love working here? * Advance your career on a major European cloud platform — gain hands-on experience with cutting-edge, hyper-scale cloud technologies that will strengthen your skills and make you a sought-after cloud expert. * Turn ideas into action with a vibrant, international team — collaborate with colleagues who thrive on creativity, excellence, and delivering customer satisfaction. * Grow your career in a supportive environment — our buddy program ensures a smooth start, mentoring helps with further integration, and we offer plenty of learning opportunities throughout your employment lifecycle to deepen your technical competencies. * Be recognized for your achievements — we celebrate your contributions through multiple recognition programs. The challenges You’ll tackle? As a Cloud Engineer for T Cloud Public , you will: * The challenges You’ll tackle? • Take on big operational challenges in our hyperscale cloud backend - owning everything from hands-on change implementation to deep problem investigation and proactive fixes that kill repetitive tasks before they spread. • Jump straight from insights to action by working directly at the console and getting up close with the hardware and tech that power our platform. • Turn your operational know-how into real impact by joining project rollouts and helping launch new features that evolve our cloud. • Automate wherever possible with modern frameworks, because smart workflows beat manual work every time. • Thrive in a high-trust expert team that shares openly, supports each other, and solves big problems together. ## Qualifications Your superpowers: * Completed studies in a technical, engineering or scientific subject or comparable professional training. * 5-7 years of professional experience in IT and securing Linux OS with a focus on modern cloud technologies. * Very good knowledge of software defined networks, routing, firewalls, IDS/IPS, Anti-DDoS, WAF and physical networks. * Extensive knowledge in infrastructure automation. * Strong experience in Linux and network related services and IT-Security. * High level of customer focus. * Knowledge of agile development processes. * Ability to assess technical solutions and come up with creative approaches. * OpenStack and programming experience in open source projects is a plus. * Fluency in written and spoken English. You will be working in the European Union to meet our customers' data security and privacy requirements. ## Additional Information Please be informed that our remote working possibility is only available within Hungary due to European taxation regulation. * Please be informed that our remote working possibility is only available within Hungary due to European taxation regulation.", "summaryDescription" : "Cloud Engineer - T Cloud Public (REF5058E) at Deutsche Telekom IT Solutions. Skills: Cloud engineering, Network security, Infrastructure automation. Take on operational challenges in hyperscale cloud backend. Own hands-on change implementation", "postedDate" : "2026-06-15T12:33:02.000", "createdAt" : "2026-06-15T23:49:30.416", "lastUpdated" : "2026-06-16T09:14:57.272", "ingestTimestamp" : "2026-06-15T23:49:30.416", "mongoId" : "6a30620ef292fd229cf98dc8", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Network security", "Linux administration", "Infrastructure automation", "Cloud engineering", "Customer focus", "Agile development processes", "Hyperscale cloud backend", "Cloud technologies", "Software defined networks", "Network services", "IT-Security" ], "skillCount" : 11, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 428.1966, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a30520df292fd229cf0acbe", "title" : "Cloud Engineer - T Cloud Public (REF5058E)", "company" : "Deutsche Telekom IT Solutions", "industry" : "Telecommunications", "salary" : { "min" : 1.4E7, "max" : 2.0E7, "currency" : "HUF", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Cloud Engineer in Hungary, adjusted for mid-level experience and the technology industry." }, "location" : "Budapest, Debrecen, Szeged, Pécs, HU", "locations" : [ "Budapest, Debrecen, Szeged, Pécs", "HU" ], "timestamp" : "2026-06-16T07:59:41.445", "fingerprint" : "29ec65169630343e2f9e601a6bf39d480fbfc56c162996c9ff42ee693e2a5a6b", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/DeutscheTelekomITSolutions/744000132190050-cloud-engineer-t-cloud-public-ref5058e-", "externalId" : "744000132190050", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Budapest", "country" : "Hungary", "continent" : "eu", "source" : "llm", "workMode" : "remote", "geo" : "47.4813896,19.1457723" }, { "city" : "Debrecen", "country" : "Hungary", "continent" : "eu", "source" : "llm", "workMode" : "remote", "geo" : "47.5313990,21.6259782" }, { "city" : "Szeged", "country" : "Hungary", "continent" : "eu", "source" : "llm", "workMode" : "remote", "geo" : "46.2546312,20.1486016" }, { "city" : "Pécs", "country" : "Hungary", "continent" : "eu", "source" : "llm", "workMode" : "remote", "geo" : "46.0765092,18.2280317" } ], "locationText" : "Budapest, Hungary; Debrecen, Hungary; Szeged, Hungary; Pécs, Hungary", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "Linux, Cloud technologies, Software defined networks, Networks, IT-Security, Infrastructure automation, OpenStack", "professionalSkills" : [ "Customer focus", "Infrastructure automation" ], "hardSkillsList" : [ "Network security", "Linux administration", "Infrastructure automation" ], "hardSkills" : [ { "name" : "Network security", "level" : "intermediate" }, { "name" : "Linux administration", "level" : "intermediate" }, { "name" : "Infrastructure automation", "level" : "intermediate" } ], "majorSkills" : "Cloud engineering, Network security, Infrastructure automation", "majorSkillsList" : [ "Cloud engineering", "Network security", "Infrastructure automation" ], "coreResponsibilities" : "Take on operational challenges in hyperscale cloud backend, Own hands-on change implementation, Own deep problem investigation, Own proactive fixes, Work directly at the console, Get up close with hardware and tech, Turn operational know-how into impact, Join project rollouts, Help launch new features, Automate wherever possible with modern frameworks", "teamCollaboration" : "High-trust expert team; Shares openly; Supports each other; Solves big problems together", "projectManagementSkills" : [ "Agile development processes" ], "domainKnowledge" : "Hyperscale cloud backend; Cloud technologies", "domainList" : [ "hyperscale-cloud-backend", "cloud-technologies" ], "domainSpecificKnowledge" : [ "Hyperscale cloud backend", "Cloud technologies" ], "continuousLearning" : "Plenty of learning opportunities", "innovationCreativity" : "Creative approaches", "problemSolvingSkills" : "Problem investigation; Proactive fixes", "specialRequirements" : "Work in European Union", "qualificationsBasic" : "Completed studies in technical, engineering or scientific subject or comparable professional training, 5-7 years of professional experience in IT, Securing Linux OS with focus on modern cloud technologies, Very good knowledge of software defined networks, Very good knowledge of routing, Very good knowledge of firewalls, Very good knowledge of IDS/IPS, Very good knowledge of Anti-DDoS, Very good knowledge of WAF, Very good knowledge of physical networks, Extensive knowledge in infrastructure automation, Experience in Linux and network related services, Experience in IT-Security, High level of customer focus, Knowledge of agile development processes, Ability to assess technical solutions, Ability to come up with creative approaches, Fluency in written and spoken English", "qualificationsPreferred" : "OpenStack experience is a plus, Programming experience in open source projects is a plus", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "As Hungary’s most attractive employer in 2025 (according to Randstad’s representative survey), Deutsche Telekom IT Solutions is a subsidiary of the Deutsche Telekom Group. The company provides a wide portfolio of IT and telecommunications services with more than 5300 employees. We have hundreds of large customers, corporations in Germany and in other European countries. DT-ITS recieved the Best in Educational Cooperation award from HIPA in 2019, acknowledged as the the Most Ethical Multinational Company in 2019. The company continuously develops its four sites in Budapest, Debrecen, Pécs and Szeged and is looking for skilled IT professionals to join its team. Your Department At T Cloud Public we don’t just operate a platform — we shape the future of secure, scalable. Powered by agile ways of working, lean structures, and a passionate, high-performance team, we thrive in one of the most dynamic environments in the industry. If you’re a cloud enthusiast and a hands-on professional ready to tackle complex challenges, you’ll feel right at home with us. Why you will love working here? * Advance your career on a major European cloud platform — gain hands-on experience with cutting-edge, hyper-scale cloud technologies that will strengthen your skills and make you a sought-after cloud expert. * Turn ideas into action with a vibrant, international team — collaborate with colleagues who thrive on creativity, excellence, and delivering customer satisfaction. * Grow your career in a supportive environment — our buddy program ensures a smooth start, mentoring helps with further integration, and we offer plenty of learning opportunities throughout your employment lifecycle to deepen your technical competencies. * Be recognized for your achievements — we celebrate your contributions through multiple recognition programs. The challenges You’ll tackle? As a Cloud Engineer for T Cloud Public , you will: * The challenges You’ll tackle? • Take on big operational challenges in our hyperscale cloud backend - owning everything from hands-on change implementation to deep problem investigation and proactive fixes that kill repetitive tasks before they spread. • Jump straight from insights to action by working directly at the console and getting up close with the hardware and tech that power our platform. • Turn your operational know-how into real impact by joining project rollouts and helping launch new features that evolve our cloud. • Automate wherever possible with modern frameworks, because smart workflows beat manual work every time. • Thrive in a high-trust expert team that shares openly, supports each other, and solves big problems together. ## Qualifications Your superpowers: * Completed studies in a technical, engineering or scientific subject or comparable professional training. * 5-7 years of professional experience in IT and securing Linux OS with a focus on modern cloud technologies. * Very good knowledge of software defined networks, routing, firewalls, IDS/IPS, Anti-DDoS, WAF and physical networks. * Extensive knowledge in infrastructure automation. * Strong experience in Linux and network related services and IT-Security. * High level of customer focus. * Knowledge of agile development processes. * Ability to assess technical solutions and come up with creative approaches. * OpenStack and programming experience in open source projects is a plus. * Fluency in written and spoken English. You will be working in the European Union to meet our customers' data security and privacy requirements. ## Additional Information Please be informed that our remote working possibility is only available within Hungary due to European taxation regulation. * Please be informed that our remote working possibility is only available within Hungary due to European taxation regulation.", "summaryDescription" : "Cloud Engineer - T Cloud Public (REF5058E) at Deutsche Telekom IT Solutions. Skills: Cloud engineering, Network security, Infrastructure automation. Take on operational challenges in hyperscale cloud backend. Own hands-on change implementation", "postedDate" : "2026-06-15T12:33:02.000", "createdAt" : "2026-06-15T21:52:51.846", "lastUpdated" : "2026-06-16T07:59:41.445", "ingestTimestamp" : "2026-06-15T21:52:51.846", "mongoId" : "6a30520df292fd229cf0acbe", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Network security", "Linux administration", "Infrastructure automation", "Cloud engineering", "Customer focus", "Agile development processes", "Hyperscale cloud backend", "Cloud technologies" ], "skillCount" : 8, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 428.1966, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c68e074d8ee00a090519e", "title" : "Hardware-in-the-Loop (HIL) Engineer", "company" : "Applied Intuition", "industry" : "Government", "salary" : { "min" : 155000.0, "max" : 210000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Hardware-in-the-Loop (HIL) Engineer in Fort Walton Beach, United States, adjusted for the technology industry and company size." }, "location" : "Fort Walton Beach", "locations" : [ "Fort Walton Beach" ], "timestamp" : "2026-06-15T08:01:54.868", "fingerprint" : "dc2faba7d6ef78615ceef060a84cf5805f60b7e2f50b1bc86050604bbd7512a2", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/applied/f9fdc9e4-53d1-498f-9991-1ab905d9a2ef/application", "externalId" : "f9fdc9e4-53d1-498f-9991-1ab905d9a2ef", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Fort Walton Beach", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.4057552,-86.6188420" } ], "locationText" : "Fort Walton Beach, Florida, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "ARM, X86, Linux, Python, Bash, CI/CD", "professionalSkills" : [ "System configuration", "Performance tuning", "Network diagnostics", "Hardware debugging", "Automation", "Infrastructure scripting", "System provisioning", "Health-checking", "Monitoring", "Wiring harness design", "Interface board design", "Troubleshooting integration issues", "Timing constraints", "MAVLink latency", "Serial communication", "Sensor data", "Flight dynamics" ], "hardSkillsList" : [ "IP networking", "TCP/UDP", "Routing", "Subnets", "Oscilloscopes", "Logic analyzers", "Multimeters", "UART", "I2C", "SPI", "CAN" ], "hardSkills" : [ { "name" : "IP networking", "level" : "intermediate" }, { "name" : "TCP/UDP", "level" : "intermediate" }, { "name" : "Routing", "level" : "intermediate" }, { "name" : "Subnets", "level" : "intermediate" }, { "name" : "Oscilloscopes", "level" : "intermediate" }, { "name" : "Logic analyzers", "level" : "intermediate" }, { "name" : "Multimeters", "level" : "intermediate" }, { "name" : "UART", "level" : "intermediate" }, { "name" : "I2C", "level" : "intermediate" }, { "name" : "SPI", "level" : "intermediate" }, { "name" : "CAN", "level" : "intermediate" } ], "majorSkills" : "Hardware-in-the-Loop, HIL simulation, Embedded systems, Automation scripting", "majorSkillsList" : [ "Hardware-in-the-Loop", "HIL simulation", "Embedded systems", "Automation scripting" ], "coreResponsibilities" : "Manage fleet of HIL rigs, Scale fleet of HIL rigs, Integrate HIL solutions, Test HIL solutions, Deploy HIL solutions, Maintain HIL solutions, Integrate simulators with HIL hardware, Integrate simulators with flight stack software, Configure firmware, Flash firmware, Manage firmware, Develop automation scripts, Maintain automation scripts, Design custom wiring harnesses, Design interface boards, Troubleshoot hardware-software integration issues, Resolve hardware-software integration issues, Collaborate with embedded software teams, Collaborate with simulation teams", "teamCollaboration" : "Cross-functional teams; Embedded software teams; Simulation teams", "domainKnowledge" : "Physical AI; Moving machines; Automotive industry; Defense industry; Trucking industry; Construction industry; Mining industry; Agriculture industry; Physical intelligence; sUAS platforms; Flight stack software; Autonomous validation; Real-time operating systems; Embedded communication interfaces; Real-time environments; Autonomous vehicles", "domainList" : [ "physical-ai", "moving-machines", "automotive-industry", "defense-industry", "trucking-industry", "construction-industry", "mining-industry", "agriculture-industry", "physical-intelligence", "suas-platforms", "flight-stack-software", "autonomous-validation", "real-time-operating-systems", "embedded-communication-interfaces", "real-time-environments", "autonomous-vehicles" ], "domainSpecificKnowledge" : [ "Physical AI", "Moving machines", "Automotive industry", "Defense industry", "Trucking industry", "Construction industry", "Mining industry", "Agriculture industry", "Physical intelligence", "sUAS platforms", "Flight stack software", "Autonomous validation", "Real-time operating systems", "Embedded communication interfaces", "Real-time environments", "Autonomous vehicles" ], "toolProficiency" : [ "ArduPilot", "PX4", "Pixhawk", "ROS", "ROS 2", "DDS" ], "problemSolvingSkills" : "Troubleshoot integration issues; Resolve integration issues; Diagnose network bottlenecks", "qualificationsBasic" : "Extensive experience deploying hardware systems, Experience managing hardware systems, Experience maintaining hardware systems, Proficiency in Linux environments, Excellent networking skills, Deep hardware debugging capabilities, Solid understanding of embedded communication interfaces, Experience writing automation scripts, Experience writing testing scripts, Experience writing infrastructure scripts, Sense of ownership, Ability to work cross-functionally", "qualificationsPreferred" : "Hands-on experience with sUAS hardware, Hands-on experience with flight controllers, Experience with Pixhawk, Familiarity with ArduPilot, Familiarity with PX4, Working knowledge of MAVLink, Working knowledge of ROS, Working knowledge of ROS 2, Working knowledge of DDS, Experience developing RTOS applications", "workSiteFlexibility" : "Flexible", "rawDescription" : "ABOUT APPLIED INTUITION Applied Intuition, Inc. is powering the future of physical AI. Founded in 2017 and now valued at $15 billion, the Silicon Valley company is creating the digital infrastructure needed to bring intelligence to every moving machine on the planet. Applied Intuition services the automotive, defense, trucking, construction, mining and agriculture industries in three core areas: tools and infrastructure, operating systems, and autonomy. Eighteen of the top 20 global automakers, as well as the United States military and its allies, trust the company’s solutions to deliver physical intelligence. Applied Intuition is headquartered in Sunnyvale, California, with offices in Washington, D.C.; San Diego; Ft. Walton Beach, Florida; Ann Arbor, Michigan; London; Stuttgart; Munich; Stockholm; Bangalore; Seoul; and Tokyo. Learn more at applied.co http://applied.co. We are an in-office company, and our expectation is that employees primarily work from their Applied Intuition office 5 days a week. However, we also recognize the importance of flexibility and trust our employees to manage their schedules responsibly. This may include occasional remote work, starting the day with morning meetings from home before heading to the office, or leaving earlier when needed to accommodate family commitments. About the Role We are looking for an experienced engineer to manage and maintain our fleet of Hardware-In-the-Loop (HIL) rigs. You will help develop, integrate and deploy real-time Hardware-In-the-Loop simulation solutions. At Applied, we encourage all engineers to take ownership over technical and product decisions, closely interact with users to collect feedback, and contribute to a thoughtful, dynamic team culture. At Applied, you will: - Manage and scale our growing fleet of HIL rigs that have diverse requirements and run on both ARM and x86 architectures. - Integrate, test, deploy, and maintain HIL solutions that involve third-party hardware, specifically focusing on Group 1-3 sUAS platforms and companion computers. - Design, build, and integrate Applied’s simulators with HIL hardware and flight stack software (e.g., ArduPilot, PX4) to solve for our customers’ autonomous validation use-cases. - Configure, flash, and manage firmware across various flight controllers (like Pixhawk) and auxiliary hardware for automated testing. - Develop and maintain automation scripts (Python, Bash) for system provisioning, health-checking, and monitoring of the HIL fleet. - Design custom wiring harnesses or interface boards to bridge flight controllers, sensors, networking equipment, and simulation hosts. - Troubleshoot and resolve complex hardware-software integration issues, including timing constraints, MAVLink latency, and serial communication faults. - Collaborate closely with embedded software and simulation teams to ensure high-fidelity sensor data and flight dynamics translate accurately to the physical hardware. We're looking for someone who has: - Extensive experience deploying, managing, and maintaining complex hardware systems on both ARM and x86 architectures. - Strong proficiency in Linux environments, utilizing the command line for system configuration, performance tuning, and troubleshooting. - Excellent networking skills, including a deep understanding of IP networking (TCP/UDP, routing, subnets) and experience diagnosing network bottlenecks in real-time environments. - Deep, hands-on hardware debugging capabilities using standard lab equipment such as oscilloscopes, logic analyzers, and multimeters. - A solid understanding of standard embedded communication interfaces (UART, I2C, SPI, CAN) commonly used in sUAS hardware. - Experience writing robust automation, testing, and infrastructure scripts in Python or Bash. - Experience building or maintaining Continuous Integration/Continuous Deployment (CI/CD) pipelines that interact directly with hardware test benches. - A strong sense of ownership and the ability to work cross-functionally to drive ambiguous hardware/software integration problems to resolution. Nice to have: - Hands-on experience with Group 1-3 sUAS (small Unmanned Aircraft Systems) hardware and flight controllers, particularly Pixhawk. - Familiarity with configuring, debugging, and integrating open-source flight stack software such as ArduPilot and PX4. - Working knowledge of communication protocols commonly used in autonomous vehicles (e.g., MAVLink) and common robotics middlewares such as ROS, ROS 2, or DDS. - Experience developing applications for Real-time Operating Systems (RTOS) such as RT-Linux or NuttX (commonly used with PX4). Don’t meet every single requirement? If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles. Applied Intuition is an equal opportunity employer and federal contractor or subcontractor. Consequently, the parties agree that, as applicable, they will abide by the requirements of 41 CFR 60-1.4(a), 41 CFR 60-300.5(a) and 41 CFR 60-741.5(a) and that these laws are incorporated herein by reference. These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity or national origin. These regulations require that covered prime contractors and subcontractors take affirmative action to employ and advance in employment individuals without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status or disability. The parties also agree that, as applicable, they will abide by the requirements of Executive Order 13496 (29 CFR Part 471, Appendix A to Subpart A), relating to the notice of employee rights under federal labor laws.", "summaryDescription" : "Hardware-in-the-Loop (HIL) Engineer at Applied Intuition. Skills: Hardware-in-the-Loop, HIL simulation, Embedded systems, Automation scripting. Manage fleet of HIL rigs. Scale fleet of HIL rigs", "createdAt" : "2026-06-13T22:59:05.757", "lastUpdated" : "2026-06-15T08:01:54.868", "ingestTimestamp" : "2026-06-13T22:59:05.757", "mongoId" : "6a2c68e074d8ee00a090519e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 155000, "salaryAnnualMax" : 210000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "IP networking", "TCP/UDP", "Routing", "Subnets", "Oscilloscopes", "Logic analyzers", "Multimeters", "UART", "I2C", "SPI", "CAN", "Hardware-in-the-Loop", "HIL simulation", "Embedded systems", "Automation scripting", "System configuration", "Performance tuning", "Network diagnostics", "Hardware debugging", "Automation", "Infrastructure scripting", "System provisioning", "Health-checking", "Monitoring", "Wiring harness design", "Interface board design", "Troubleshooting integration issues", "Timing constraints", "MAVLink latency", "Serial communication", "Sensor data", "Flight dynamics", "Physical AI", "Moving machines", "Automotive industry", "Defense industry", "Trucking industry", "Construction industry", "Mining industry", "Agriculture industry", "Physical intelligence", "sUAS platforms", "Flight stack software", "Autonomous validation", "Real-time operating systems", "Embedded communication interfaces", "Real-time environments", "Autonomous vehicles", "ArduPilot", "PX4", "Pixhawk", "ROS", "ROS 2", "DDS" ], "skillCount" : 54, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 426.13107, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307252f292fd229cffcfe8", "title" : "Service Desk Incident Manager", "company" : "Link Solutions, Inc.", "industry" : "Information Technology And Services", "salary" : { "min" : 42000.0, "max" : 62000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Aberdeen Proving Ground, MD, United States", "locations" : [ "Aberdeen Proving Ground", "MD", "United States" ], "certifications" : [ "IAT Level II", "Microsoft 365 Certified: Endpoint Administrator Associate", "ITIL v4", "Microsoft operating system environment certification" ], "timestamp" : "2026-06-16T11:11:21.732", "fingerprint" : "800cd0221c425842d51bf55500bd1e37e5403736f8470c813b02d211cdf47b8c", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/LinkSolutionsInc/744000132276730-service-desk-incident-manager", "externalId" : "744000132276730", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Aberdeen Proving Ground", "state" : "Maryland", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.3890776,-76.2305823" } ], "locationText" : "Aberdeen Proving Ground, Maryland, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "mid", "technicalSkills" : "Microsoft Office, Microsoft 365", "professionalSkills" : [ "Problem solver", "Troubleshooter" ], "hardSkillsList" : [ "Incident management", "Service request management" ], "hardSkills" : [ { "name" : "Incident management", "level" : "intermediate" }, { "name" : "Service request management", "level" : "intermediate" } ], "majorSkills" : "Incident management, Service request management, Process improvement", "majorSkillsList" : [ "Incident management", "Service request management", "Process improvement" ], "coreResponsibilities" : "Oversee service request queue, Monitor ticket management system, Track service requests, Report on service requests, Lead incident response activities, Coordinate with Service Desk Leads, Coordinate with technical support teams, Track high-priority incidents, Manage high-priority incidents, Implement metrics-driven processes, Enforce metrics-driven processes, Identify incident trends, Analyze incident trends, Ensure SLAs are met, Support compliance requirements", "teamCollaboration" : "Coordinate with technical support teams", "domainKnowledge" : "DoD standards; DoD IT environments", "domainList" : [ "dod-standards", "dod-it-environments" ], "domainSpecificKnowledge" : [ "DoD standards", "DoD IT environments" ], "toolProficiency" : [ "ServiceNow ITSM" ], "communicationSkills" : "Written communication; Oral communication", "documentationSkills" : "Technical process documentation; Procedure documentation", "continuousLearning" : "Certification reimbursement", "problemSolvingSkills" : "Problem solving; Troubleshooting", "specialRequirements" : "U. S. Citizen, Active DoW Secret Clearance, Non-remote", "outcomesObjectives" : "Improve efficiency; Improve service delivery; Contribute to mission success; Contribute to national security", "qualificationsBasic" : "U. S. Citizen with active DoW Secret Clearance, Five (5+) years IT or Service Desk experience OR BAS degree with two (2+) years IT or Service Desk experience, IAT Level II Certification equivalent or higher, Microsoft Office products proficiency, Receive Microsoft 365 Certified: Endpoint Administrator Associate within 6 months", "qualificationsPreferred" : "Experience in Department of Defense environment, ITIL v4 certification, Microsoft operating system environment certification, Experience with ServiceNow ITSM platform, Experience creating and modifying documentation, Excellent communication skills, Excellent organizational skills, Ability to prioritize and manage multiple tasks", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Link Solutions, Inc. delivers reliable and effective Information Technology services to government clients in support of critical mission needs. Delivering a broad range of Infrastructure Operations, Application Development, Cybersecurity, Virtualization, Cloud and Mobility services. If you’re looking for a technology company that values innovation, with a vision toward the future of the technology landscape, look no further than Link Solutions! Link is quality and compliance-focused, under our guiding philosophy, “Mission First, Customer Always\". We are certified in ISO 9001:2015, ISO 20000-1:2018, and ISO 27001:2022; CMMC Level 2 certified; and appraised at CMMI Maturity Level 3 for Services and Development. Link Solutions is seeking a Service Desk Incident Manager to join our team at Aberdeen Proving Ground, MD. * U.S. Citizen with an active DoW Secret Clearance * IAT Level II certification equivalent or higher * Non-remote (relocation incentive available) In this critical role, the Service Desk Incident Manager will lead the coordination and execution of incident management and service request processes, ensuring seamless operations in support of the Army Research Laboratory’s vital mission. This position is responsible for driving efficient resolution, maintaining operational readiness, and continuously improving service delivery in alignment with Department of Defense (DoD) standards and industry best practices. The ideal candidate will play a key role in enhancing performance, streamlining processes, and fostering a culture of accountability and excellence—ultimately ensuring that technical support services directly contribute to mission success and national security objectives. Job Responsibilities: * Oversee and manage the service request queue, ensuring timely intake, assignment, escalation, and resolution of incidents. * Utilize the ticket management system to monitor, track, and report on service requests and incident statuses. * Lead incident response activities by coordinating with Service Desk Leads and technical support teams. * Track and manage high-priority incidents, ensuring proper escalation paths and communication protocols. * Implement and enforce metrics-driven processes to improve efficiency and service delivery. * Identify and analyze incident trends to drive problem management and continuous improvement efforts. * Ensure service level agreements (SLAs) are met and support compliance requirements for DoD IT environments. Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. ## Qualifications * U.S. Citizen with an active DoW Secret Clearance * Five (5+) years of relevant experience working in an IT or Service Desk environment OR a BA/BS degree in Information Technology, Computer Science, Engineering, or related field with two (2+) years of experience working in an IT or Service Desk environment. * IAT Level II Certification equivalent or higher per DoD 8570/DoD 8140 (CompTIA Security+ CE, CCNA Security, GICSP, GSEC, SSCP, etc.). * A problem solver and troubleshooter who thrives in resolving complex problems. * Strong self-starter requiring minimal supervision. * Proficiency with Microsoft Office products. * Must receive Microsoft 365 Certified: Endpoint Administrator Associate, or equivalent, within 6 months of start date. Preferred * Experience working in a Department of Defense (DoD) environment. * Information Technology Infrastructure Library (ITIL) v4 certification A Microsoft operating system environment certification (e.g., Windows 10, Windows 11, or Microsoft Server 2019, etc.). * Experience with incident management within the ServiceNow Information Technology Service Management (ITSM) platform. * Experience creating and modifying documentation for technical processes and procedures. * Excellent communication skills (written and oral) and interpersonal skills. * Excellent organizational skills, attention to detail, and ability to prioritize and manage multiple tasks. Salary Range: $42,000 - $62,000 Several factors influence the final salary or hourly rate, including but not limited to contract wage determinations, relevant work experience, role-specific skills and competencies, geographic location, educational background, certifications, and federal government contract labor categories. ## Additional Information Link Solutions Inc. offers a competitive compensation and benefits package to include paid holidays, paid time off, medical, dental, vision, company-paid long and short-term disability, life insurance, referral bonuses, relocation incentive program, certification reimbursement program, retirement, and more. Link Solutions, Inc. is an EOE. AA/M/F/D/V. We participate in the E-Verify Employment Verification Program. All your information will be kept confidential according to EEO guidelines.", "summaryDescription" : "Service Desk Incident Manager at Link Solutions, Inc.. Skills: Incident management, Service request management, Process improvement. Oversee service request queue. Monitor ticket management system", "postedDate" : "2026-06-15T20:00:03.000", "createdAt" : "2026-06-16T01:35:52.828", "lastUpdated" : "2026-06-16T11:11:21.732", "ingestTimestamp" : "2026-06-16T01:35:52.828", "mongoId" : "6a307252f292fd229cffcfe8", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 42000, "salaryAnnualMax" : 62000, "salaryBand" : "30k-50k", "hasSalary" : true, "allSkills" : [ "Incident management", "Service request management", "Process improvement", "Problem solver", "Troubleshooter", "DoD standards", "DoD IT environments", "IAT Level II", "Microsoft 365 Certified: Endpoint Administrator Associate", "ITIL v4", "Microsoft operating system environment certification", "ServiceNow ITSM" ], "skillCount" : 12, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "_score" : 425.25787, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a30795ef292fd229c031bc2", "title" : "Senior Cloud DevOps", "company" : "BABEL", "industry" : "Consulting", "salary" : { "min" : 55000.0, "max" : 75000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Cloud DevOps in Madrid, Spain, adjusted for the technology industry and full-time employment." }, "location" : "MADRID", "locations" : [ "MADRID", "Spain" ], "certifications" : [ "Certifications cloud", "Certifications DevOps", "Certifications Kubernetes", "Certifications security" ], "timestamp" : "2026-06-16T12:59:48.323", "fingerprint" : "bbec9f0e528bf3ff8f56fbaa3ac1595155369f66331310dbd99eb414ec419591", "source" : "workday", "language" : "es", "applyUrl" : "https://babelgroup.wd103.myworkdayjobs.com/REC_External_Career_Site/job/MADRID/Senior-cloud-devops_JR107896", "externalId" : "JR107896", "industryFunction" : { }, "locationPoint" : "9.26211,125.96437", "structuredLocations" : [ { "city" : "Madrid", "country" : "Spain", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "40.4167820,-3.7035070" } ], "locationText" : "Madrid, Spain", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Infrastructure as Code, Terraform, Bicep, CloudFormation, CI/CD, GitHub Actions, Azure DevOps, Jenkins, SonarQube, Fortify, Docker, Kubernetes, AKS, EKS, Helm, AWS, EC2, S3, Lambda, ApiGateway, RDS, IAM, VPC, ELB, CloudWatch, Azure, Data Factory, Key Vault, Azure Monitor, Prometheus, Grafana, ELK, Dynatrace, Python, SQL, ETL, Spark, REST APIs, Pytest", "professionalSkills" : [ "Technical leadership", "Architecture decisions", "System design", "Operational excellence" ], "hardSkillsList" : [ "Automation", "Deployment automation", "Configuration management", "System lifecycle management", "Container orchestration", "Workflow orchestration", "Monitoring", "Logging", "Observability", "Data pipelines", "Data analytics", "AI/ML integration" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Automation", "level" : "intermediate" }, { "name" : "Deployment automation", "level" : "intermediate" }, { "name" : "Configuration management", "level" : "intermediate" }, { "name" : "System lifecycle management", "level" : "intermediate" }, { "name" : "Container orchestration", "level" : "intermediate" }, { "name" : "Workflow orchestration", "level" : "intermediate" }, { "name" : "Monitoring", "level" : "intermediate" }, { "name" : "Logging", "level" : "intermediate" }, { "name" : "Observability", "level" : "intermediate" }, { "name" : "Data pipelines", "level" : "intermediate" }, { "name" : "Data analytics", "level" : "intermediate" }, { "name" : "AI/ML integration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Cloud-native, DevOps, DevSecOps, Kubernetes, CI/CD", "majorSkillsList" : [ "Cloud-native", "DevOps", "DevSecOps", "Kubernetes", "CI/CD" ], "coreResponsibilities" : "Implement cloud-native solutions, Evolve cloud-native solutions, Define infrastructure as code, Maintain infrastructure as code, Automate infrastructure as code, Build CI/CD pipelines, Maintain CI/CD pipelines, Integrate quality controls, Integrate security controls, Automate deployments, Automate configurations, Automate system lifecycle management, Operate container platforms, Operate Kubernetes platforms, Integrate workflow orchestration tools, Implement monitoring capabilities, Implement logging capabilities, Implement observability capabilities, Collaborate with Data Engineers, Collaborate with Data Scientists, Collaborate with Product Owners, Collaborate with platform teams, Ensure reliability, Ensure scalability, Ensure security, Align with product objectives", "teamCollaboration" : "Cross-functional teams; Data Engineers; Data Scientists; Product Owners; Platform teams", "projectManagementSkills" : [ "Agile" ], "domainKnowledge" : "Cloud-native architecture; DevSecOps practices; AI/ML workloads; Data analytics platforms; Big data ecosystems", "domainList" : [ "cloud-native-architecture", "devsecops-practices", "ai-ml-workloads", "data-analytics-platforms", "big-data-ecosystems" ], "domainSpecificKnowledge" : [ "Cloud-native architecture", "DevSecOps practices", "AI/ML workloads", "Data analytics platforms", "Big data ecosystems" ], "toolProficiency" : [ "Terraform", "Bicep", "CloudFormation", "GitHub Actions", "Azure DevOps", "Jenkins", "Docker", "Kubernetes", "AKS", "EKS", "Helm", "Prometheus", "Grafana", "ELK", "Dynatrace", "Airflow", "Control-M", "Databricks", "Cloudera", "Pytest" ], "continuousLearning" : "Training; Professional development", "innovationCreativity" : "Explore new ideas; Innovation", "problemSolvingSkills" : "Troubleshooting", "qualificationsBasic" : "4 years experience cloud-native Azure AWS, Experience deploying systems, Experience managing systems lifecycle, Experience with cross-functional teams, Experience supporting AI/ML workloads, University degree technical discipline, Fluent English B2, Fluent Spanish", "qualificationsPreferred" : "Cloud certifications, DevOps certifications, Kubernetes certifications, Security certifications", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We are**One Team.** We**make it happen.** We are **Unstoppable.** BABEL es una consultora tecnológica multinacional especializada en aplicar sus servicios y conocimiento tecnológico en los procesos de aceleración digital de sus clientes, grandes empresas y organismos públicos. **¿Cuál es nuestro plan estratégico?** ¡Miramos hacia el futuro! Nuestro**plan estratégico Hiperespacio 2029** promete ser un viaje emocionante, **lleno de oportunidades** para crecer y desarrollarse profesionalmente. Alcanzar **1000 millones** de facturación, un reto que estamos seguros de que con la **colaboración** y el **talento** de nuestra gente, será otra historia de éxito que escribiremos juntos y juntas. **¿Qué buscamos?** Santander Corporate & Investment Banking (Santander CIB) está buscando un/a Senior Cloud DevOps con base en Madrid. Formarás parte de SCIB Data & AI, impulsando la implantación, automatización y operación de soluciones cloud-native en entornos Azure y AWS. Tu trabajo ayudará a construir plataformas fiables, seguras y escalables para casos de uso de datos, analítica e inteligencia artificial, aplicando prácticas DevSecOps y una fuerte orientación a la excelencia operativa. Estamos redefiniendo nuestra forma de trabajar a través de la innovación, la tecnología de última generación, la colaboración y la libertad de explorar nuevas ideas. En este puesto, tus principales responsabilidades incluirán: · Implementar y evolucionar soluciones cloud-native en entornos multi-cloud, principalmente Azure y AWS. · Definir, mantener y automatizar infraestructura como código con Terraform y herramientas equivalentes como Bicep o CloudFormation. · Construir y mantener pipelines CI/CD con GitHub Actions, Azure DevOps o Jenkins, integrando controles de calidad y seguridad. · Automatizar despliegues, configuraciones y gestión del ciclo de vida de sistemas productivos. · Operar plataformas basadas en contenedores y Kubernetes, especialmente AKS y EKS, incluyendo Docker y Helm cuando aplique. · Integrar herramientas de orquestación de flujos de trabajo como Airflow, Control-M o schedulers similares. · Implantar capacidades de monitorización, logging y observabilidad con Prometheus, Grafana, ELK, Dynatrace y herramientas cloud-native. · Colaborar con Data Engineers, Data Scientists, Product Owners y equipos de plataforma para asegurar fiabilidad, escalabilidad, seguridad y alineamiento con los objetivos del producto. **LO QUE APORTARÁS AL EQUIPO** Nuestra gente es nuestra mayor fortaleza. Cada persona contribuye con perspectivas únicas que nos hacen más fuertes como equipo y como organización. Valoramos quiénes son y potenciamos lo que aportan. Los siguientes requisitos representan los conocimientos, habilidades y competencias esenciales para este puesto. **Experiencia profesional** • 4 años de experiencia trabajando e implementando soluciones cloud-native en entornos multi-cloud Azure y AWS. • Experiencia demostrada en despliegue, automatización y gestión del ciclo de vida de sistemas productivos. • Experiencia trabajando con equipos cross-funcionales de Data Engineers, Data Scientists, Product Owners y equipos de plataforma. • Experiencia en liderazgo técnico, mentoring y contribución a decisiones de arquitectura. • Experiencia dando soporte o integrando cargas de trabajo AI/ML en entornos productivos. **Educación** • Formación universitaria en Ingeniería Informática, Telecomunicaciones, Matemáticas, Física o disciplina técnica equivalente. • Certificaciones cloud, DevOps, Kubernetes o seguridad en Azure, AWS o tecnologías equivalentes. **Idiomas** • Inglés fluido, mínimo B2. • Español fluido. **Habilidades técnicas** • Infrastructure as Code con Terraform y herramientas equivalentes como Bicep o CloudFormation. • CI/CD con GitHub Actions, Azure DevOps o Jenkins, incluyendo integración con SonarQube, Fortify u otras herramientas de calidad y seguridad. • Contenerización y orquestación con Docker y Kubernetes, especialmente AKS y EKS. • Servicios cloud AWS: EC2, S3, EKS, Lambda, ApiGateway, RDS, IAM, VPC, ELB y CloudWatch. • Servicios cloud Azure: AKS, Azure DevOps, Data Factory, Key Vault y Azure Monitor. • Monitorización, logging y observabilidad con Prometheus, Grafana, ELK, Dynatrace y herramientas cloud-native. • Prácticas DevSecOps y marcos de seguridad aplicados a entornos cloud. • Herramientas de orquestación de workflows como Airflow, Control-M o schedulers similares. • Plataformas de datos cloud como Databricks, Cloudera o ecosistemas big data similares. • Programación en Python para automatización, scripting y tooling. • Experiencia avanzada con Kubernetes, AKS/EKS y Helm. • Conocimientos de SQL, pipelines de datos, ETL con Python o Spark, REST APIs y testing con Pytest o frameworks similares. • Conocimiento de MLflow, Kubeflow, Kafka, Event Hubs, Kinesis, ElasticSearch, MongoDB, PostgreSQL, Starburst, Power BI o herramientas similares. • Gobierno de infraestructura y políticas con Azure Policy, AWS Organizations o capacidades equivalentes. **Habilidades interpersonales** • Alto nivel de ownership, autonomía, organización y capacidad de resolución de problemas. • Comunicación sólida para presentar soluciones técnicas a stakeholders técnicos y no técnicos. • Capacidad de colaboración con equipos multidisciplinares y orientación a objetivos de producto. • Orientación de negocio con foco en fiabilidad, escalabilidad, optimización de costes y alineamiento con objetivos del área **¿Qué ofrecemos?** **Babel, the great way to achieve the success.** ¿Quieres formar parte de un equipo en expansión, comprometido e innovador que hace historia cada día? En Babel te acompañamos en tu camino hacia el éxito. Creemos en el talento de las personas y lo queremos potenciar ofreciéndote un gran entorno de trabajo basado en la colaboración y la solidaridad. Trabajar en Babel es mucho más que trabajar en una empresa, es unirse a un equipo de personas con una misión compartida y a un modelo de compañía centrado en valores. Y lo hacemos promoviendo la diversidad, la equidad y la inclusión, garantizando la igualdad de oportunidades a todas las personas candidatas, en un entorno libre de cualquier tipo de discriminación. Además, * Apostamos por la flexibilidad laboral-personal. (Sistema de vacaciones por puntos, teletrabajo y flexibilidad). * Invertimos en la formación de nuestros _Babelievers_. * Invertimos en tu salud física y emocional. (Seguro Médico Privado/ Seguro de vida, entrenador personal y programa de wellbeing). * Invertimos también en tu tiempo libre (Actividades en la naturaleza, campeonatos deportivos, suscripción a plataforma streaming (por Ej. Netflix) * Participamos del crecimiento de la compañía y reconocemos la participación de cada persona (Bono de Beneficios). * Ponemos foco en trabajar con últimas tecnologías y proyectos innovadores, pero sobre todo, acompañamos a la transformación digital y acercamos la tecnología a la sociedad. **¿Aceptas el desafío? ¡Te esperamos!** _En cumplimiento de la normativa vigente en materia de protección de datos te informamos que el responsable de tus datos personales es GRUPO BABEL (consultar empresas en la política de privacidad), y los utilizará para gestionar tus procesos de selección, tanto actuales como futuros y el resto de finalidades descritas en la web. Este tratamiento está basado en el consentimiento del candidato. Los datos personales recabados no serán en ningún caso cedidos a terceros salvo por obligaciones legales expresas. Puedes ejercer los derechos que te asisten sobre protección de datos en la dirección_[ _data.protection @babelgroup.com_](mailto:data.protection@babelgroup.com) _. Toda la información sobre política de privacidad en nuestra web._", "summaryDescription" : "Senior Cloud DevOps at BABEL. Skills: Cloud-native, DevOps, DevSecOps, Kubernetes, CI/CD. Implement cloud-native solutions. Evolve cloud-native solutions", "postedDate" : "2026-06-16T04:00:24.950", "createdAt" : "2026-06-16T04:00:24.942", "lastUpdated" : "2026-06-16T12:59:48.323", "ingestTimestamp" : "2026-06-16T04:00:24.942", "mongoId" : "6a30795ef292fd229c031bc2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://babelgroup.wd103.myworkdayjobs.com/REC_External_Career_Site/job/MADRID/Senior-cloud-devops_JR107896", "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Automation", "Deployment automation", "Configuration management", "System lifecycle management", "Container orchestration", "Workflow orchestration", "Monitoring", "Logging", "Observability", "Data pipelines", "Data analytics", "AI/ML integration", "Leadership", "Mentoring", "Cloud-native", "DevOps", "DevSecOps", "Kubernetes", "CI/CD", "Technical leadership", "Architecture decisions", "System design", "Operational excellence", "Agile", "Cloud-native architecture", "DevSecOps practices", "AI/ML workloads", "Data analytics platforms", "Big data ecosystems", "Certifications cloud", "Certifications DevOps", "Certifications Kubernetes", "Certifications security", "Terraform", "Bicep", "CloudFormation", "GitHub Actions", "Azure DevOps", "Jenkins", "Docker", "AKS", "EKS", "Helm", "Prometheus", "Grafana", "ELK", "Dynatrace", "Airflow", "Control-M", "Databricks", "Cloudera", "Pytest" ], "skillCount" : 52, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "senior", "dataQualityScore" : 1.0, "_score" : 415.7222, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "68c2e423f8b1b0376634c56d", "title" : "Senior Incident Response Engineer, Devices & Services Security", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 143300.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Hawthorne, California, USA", "locations" : [ "Hawthorne, California, USA" ], "certifications" : [ "CISSP", "CISM", "CRISC", "GCIH", "CCIR", "GCDA" ], "timestamp" : "2026-06-15T08:13:32.312", "fingerprint" : "3317fe4da3a6f579d3a5ccdc8430939e8a2a28d3935ec2384cf4f9b32c5db032", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3072356/apply", "externalId" : "2d1861cb-aa75-46c6-9067-b6a683645372", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Hawthorne", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.9128272,-118.3426122" } ], "locationText" : "Hawthorne, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, WAF, EDR/XDR, Python, PowerShell, Bash, Splunk, SOAR, SQL", "professionalSkills" : [ "Incident response", "Detection engineering", "Security operations", "Threat hunting", "Risk assessment", "Root cause analysis" ], "hardSkillsList" : [ "Log analysis", "Network telemetry", "Attacker TTPs", "MITRE ATT&CK", "Scripting", "Automation", "Forensic analysis", "Malware analysis", "SQL queries" ], "softSkillsList" : [ "Judgment under pressure", "Calmness" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Network telemetry", "level" : "intermediate" }, { "name" : "Attacker TTPs", "level" : "intermediate" }, { "name" : "MITRE ATT&CK", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" }, { "name" : "Forensic analysis", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "SQL queries", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Judgment under pressure" }, { "name" : "Calmness" } ], "majorSkills" : "Incident response, Security engineering, Detection engineering", "majorSkillsList" : [ "Incident response", "Security engineering", "Detection engineering" ], "coreResponsibilities" : "Investigate security incidents, Respond to security incidents, Drive rapid response, Drive effective response, Act as incident responder, Act as incident commander, Coordinate technical response, Keep stakeholders informed, Conduct post-mortem analysis, Identify root causes, Identify security improvement opportunities, Consult with builder teams, Ensure security designed into products, Collaborate with stakeholders, Execute incident response, Develop detections, Maintain detections, Respond to detections, Combat fraud, Combat abuse, Develop prevention capabilities, Develop detection capabilities, Develop response capabilities, Increase capability through automation, Increase efficiency through automation, Increase signal quality using AI/ML, Assist in runbook development, Assist in playbook tuning, Drive process improvements, Coordinate response efforts, Share learnings, Maintain WAF products, Support WAF products, Protect services from abuse, Drive WAF adoption, Evaluate WAF rules, Tune WAF rules, Develop SQL queries, Analyze log data, Extract information from logs, Extract information from databases, Extract information from services, Spearhead incident response, Drive decision-making, Conduct impact assessments, Implement containment strategies, Develop durable solutions, Proactively hunt threats, Create new detection mechanisms, Consult on security for new product designs, Analyze data, Identify hidden vulnerabilities", "teamCollaboration" : "Cross-functional teams; Global Amazon Security team; Other Incident Response teams", "projectManagementSkills" : [ "Runbook development", "Playbook tuning" ], "domainKnowledge" : "Devices and Services security; IoT platforms; Customer safety; Customer privacy; Fraud and abuse; Distributed systems; Cloud-native architectures; Service-oriented environments; IoT device security; Embedded systems", "domainList" : [ "devices-and-services-security", "iot-platforms", "customer-safety", "customer-privacy", "fraud-and-abuse", "distributed-systems", "cloud-native-architectures", "service-oriented-environments", "iot-device-security", "embedded-systems" ], "domainSpecificKnowledge" : [ "Devices and Services security", "IoT platforms", "Customer safety", "Customer privacy", "Fraud and abuse", "Distributed systems", "Cloud-native architectures", "Service-oriented environments", "IoT device security", "Embedded systems" ], "toolProficiency" : [ "AWS", "WAF", "EDR/XDR", "Splunk", "SOAR", "SQL" ], "communicationSkills" : "Clear communication; Stakeholder communication", "documentationSkills" : "Document work thoroughly; Contribute to post-incident reviews", "continuousLearning" : "Expand AI/ML skills", "innovationCreativity" : "Identify opportunities to raise the bar", "problemSolvingSkills" : "Problem-solvers; Investigative instincts; Troubleshooting", "specialRequirements" : "On-call rotation", "outcomesObjectives" : "Reduce or eliminate risk; Improve security for Amazon products; Improve security for Amazon services", "qualificationsBasic" : "5+ years cybersecurity experience, Incident response experience, Detection engineering experience, Security operations experience, Working knowledge of AWS, Working knowledge of WAF, Working knowledge of EDR/XDR tools, Working knowledge of network telemetry, Working knowledge of log analysis, Practical knowledge of attacker TTPs, Experience leveraging MITRE ATT&CK, Interpersonal skills, Communication skills, Proficiency with scripting, Proficiency with automation", "qualificationsPreferred" : "Proficiency with SIEM platform, Writing SIEM searches, Creating SIEM alerts, Analyzing SIEM log data, Forensic techniques, Threat hunting techniques, Identify adversary behavior, Detect anomalies, Analyze malware, Experience in large enterprise environments, Supporting multiple business lines, Experience securing distributed systems, Responding to incidents in distributed systems, Experience with cloud-native architectures, Experience with service-oriented environments, Experience with IoT device security, Experience with embedded systems forensics", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Are you ready to protect millions of homes and families as part of Amazon's elite Device Security Incident Response team? Join us in defending Ring, Blink, eero, and other industry-leading IoT platforms where every incident response decision impacts real people's safety and privacy. We’re looking for a seasoned security engineer to join a cross-functional Incident Response team supporting multiple Amazon devices brands. This is a hands-on role is focused on protecting the security and privacy of millions of customers by responding to incidents that impact real-world products and services. Our customers trust us with their safety and personal spaces, and it’s our responsibility to uphold that trust through strong, effective security practices. You will become a subject matter expert in the brands you support, leading our response to incidents through detection, assessment, containment, eradication, and post-mortem, while identifying opportunities to raise the bar on security for Amazon products and Customers. This high-visibility role requires clear communication, sound judgment under pressure, and the ability to work across organizational boundaries. You will be a strong advocate for customer safety and privacy, ensuring our devices deliver protection without compromise. You will document your work thoroughly, contribute to post-incident reviews, and collaborate with engineering teams to drive long-term improvements across the business. You will have opportunities to utilize, or expand your AI/ML skills, as we focus on automation. Key job responsibilities * Investigate and respond to security incidents in the Devices and Services org, setting the pace, and driving rapid, effective response that reduces or eliminates risk * Act as an incident responder or commander during active security events, coordinating technical response while keeping business stakeholders informed * Conduct thorough post-mortem analysis of security incidents, driving root cause identification, and identifying opportunities to improve security for Amazon products and services * Security consults with builder teams to ensure that security is designed into products from their inception * Collaborate with both technical, and non-technical stakeholders at all levels of the business, to execute rapid, and effective incident response * Develop, maintain, and respond to detections using Splunk/SOAR, as well as internal Amazon tooling * Combat various forms of fraud and abuse, by coordinating with business teams to develop comprehensive prevention/detection/response capabilities * Contribute to team efforts to increase capability and efficiency through automation of manual workloads and increase signal quality using AI/ML tools or approaches * Assist in runbook development, playbook tuning, and continuous process improvements * Participate in an on-call rotation (approx. two weekend days per month) * Work within a global, collaborative Amazon Security team where engineers and specialists support one another to solve complex problems and respond to security challenges together * Coordinate response efforts with other Incident Response teams at Amazon when appropriate, and share learnings * Maintain and support WAF products that protect Amazon services from abuse, drive adoption, evaluate or tune rules * Develop and update SQL queries to investigate security incidents, analyze log data, and extract relevant information from logs, databases and services. A day in the life As a Security Incident Response Engineer, you'll guide our team through complex security challenges impacting millions of customers. You'll: • Spearhead end-to-end incident response across Amazon's device ecosystem • Drive real-time decision-making during active incidents • Conduct impact assessments and implement containment strategies • Develop durable solutions with engineering teams • Proactively hunt threats and create new detection mechanisms • Consult on security for new product designs • Analyze data to identify hidden vulnerabilities We seek naturally curious problem-solvers who combine technical expertise with investigative instincts. You'll be the calm voice in the storm, transforming chaos into clarity and consistently safeguarding our customers' trust in Amazon's devices and services. About the team We're a tight-knit group of Security Engineers united by our mission to protect Amazon's customers. Though small, our impact is outsized. We've driven meaningful improvements across Amazon's device ecosystem through technical excellence and relentless customer advocacy. We're engineers first, approaching challenges with security expertise to create practical solutions. We champion \"better products\" over \"more products,\" solving problems collaboratively with empathy and partnership. We're not the team that just says \"no\" – we find secure paths forward. When incidents arise, we need our builders to feel relief when we arrive. We build bridges, not ivory towers, transforming security from a barrier into an enabler of innovation. Basic Qualifications: - * 5+ years of industry experience in cybersecurity, with a strong foundation in incident response, detection engineering, or security operations - * Working knowledge of AWS, WAF, EDR/XDR tools, network telemetry, and log analysis - * Practical knowledge of attacker tactics, techniques, and procedures (TTPs), with experience leveraging MITRE ATT&CK or similar frameworks to guide incident response or detection engineering - * Strong interpersonal and communication skills; able to calmly manage high-stakes coordination and decision-making - * Proficiency with scripting or automation (e.g., Python, PowerShell, Bash) Preferred Qualifications: - * Proficiency with at least one SIEM platform, including writing searches, creating alerts, and analyzing log data to support security investigations; experience with Splunk strongly preferred - * Exposure to AI/ML-driven anomaly detection, or behavior modeling tools - * Demonstrated ability to use forensic or threat hunting techniques to identify adversary behavior, detect anomalies, analyze potential malware to support containment and eradication - * Security certifications such as CISSP, CISM, CRISC, GCIH, CCIR, GCDA, etc. - * Prior experience in large enterprise environments or supporting multiple business lines - * Experience securing or responding to incidents in large-scale distributed systems, including cloud-native architectures and service-oriented environments - * Experience with IOT device security and embedded systems forensics Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Senior Incident Response Engineer, Devices & Services Security at Amazon.com Services LLC. Skills: Incident response, Security engineering, Detection engineering. Investigate security incidents. Respond to security incidents", "postedDate" : "2026-06-13T10:06:54.792", "createdAt" : "2026-06-13T10:06:54.792", "lastUpdated" : "2026-06-15T08:13:32.312", "ingestTimestamp" : "2026-06-13T10:06:54.792", "mongoId" : "68c2e423f8b1b0376634c56d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3072356/apply", "salaryAnnualMin" : 143300, "salaryAnnualMax" : 247600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Log analysis", "Network telemetry", "Attacker TTPs", "MITRE ATT&CK", "Scripting", "Automation", "Forensic analysis", "Malware analysis", "SQL queries", "Judgment under pressure", "Calmness", "Incident response", "Security engineering", "Detection engineering", "Security operations", "Threat hunting", "Risk assessment", "Root cause analysis", "Runbook development", "Playbook tuning", "Devices and Services security", "IoT platforms", "Customer safety", "Customer privacy", "Fraud and abuse", "Distributed systems", "Cloud-native architectures", "Service-oriented environments", "IoT device security", "Embedded systems", "CISSP", "CISM", "CRISC", "GCIH", "CCIR", "GCDA", "AWS", "WAF", "EDR/XDR", "Splunk", "SOAR", "SQL" ], "skillCount" : 42, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 411.32532, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Security" }, { "id" : "6a2c6d1a74d8ee00a091d367", "title" : "Associate Environment Artist (NST)", "company" : "Nintendo Software Technology", "salary" : { "min" : 64480.0, "max" : 97720.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Redmond, WA", "locations" : [ "Redmond", "WA" ], "timestamp" : "2026-06-16T05:01:50.569", "fingerprint" : "cc68ef74297559537c7c812882e7073e88f7a7112e5669b298d768e6fe2e4a05", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://careers.nintendo.com/?gh_jid=4259160009", "externalId" : "4259160009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Redmond", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "47.6694141,-122.1238767" } ], "locationText" : "Redmond, Washington, United States", "employmentType" : "CONTRACT", "minimumEducation" : "Associate's", "experienceMinYears" : 1, "experienceMaxYears" : 2, "experienceLevel" : "Entry", "technicalSkills" : "3D modeling, Texturing, Maya, Photoshop, Substance Painter, ZBrush, Marmoset Toolbag, Unity, Unreal Engine, Substance Designer, Substance Alchemist, Houdini", "professionalSkills" : [ "Game development" ], "hardSkillsList" : [ "3D modeling", "Texturing" ], "hardSkills" : [ { "name" : "3D modeling", "level" : "intermediate" }, { "name" : "Texturing", "level" : "intermediate" } ], "majorSkills" : "3D modeling, Texturing, Unity, Unreal Engine", "majorSkillsList" : [ "3D modeling", "Texturing", "Unity", "Unreal Engine" ], "coreResponsibilities" : "Create 3D assets, Create textures, Create materials, Create shaders, Optimize assets, Integrate assets into game engine, Collaborate with art director, Collaborate with technical artists, Collaborate with engineers, Collaborate with designers, Maintain art style, Contribute to art pipeline", "teamCollaboration" : "Art director; Technical artists; Engineers; Designers", "domainKnowledge" : "Game development; 3D art pipeline", "domainList" : [ "game-development", "3d-art-pipeline" ], "domainSpecificKnowledge" : [ "Game development", "3D art pipeline" ], "toolProficiency" : [ "Maya", "Photoshop", "Substance Painter", "ZBrush", "Marmoset Toolbag", "Unity", "Unreal Engine", "Substance Designer", "Substance Alchemist", "Houdini" ], "qualificationsBasic" : "1+ years of experience in game development, Experience with 3D modeling software, Experience with texturing software, Experience with Maya, Experience with Photoshop, Experience with Substance Painter, Experience with ZBrush, Experience with Marmoset Toolbag, Experience with Unity, Experience with Unreal Engine", "qualificationsPreferred" : "Experience with Substance Designer, Experience with Substance Alchemist, Experience with Houdini, Experience with Substance Painter, Experience with Substance Designer, Experience with Substance Alchemist, Experience with Houdini, Experience with Substance Painter, Experience with Substance Designer, Experience with Substance Alchemist, Experience with Houdini", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Nintendo Software Technology Corporation Nintendo Software Technology Corporation, based in Redmond, Washington , is a wholly owned subsidiary of the world's largest manufacturer and marketer of video games, Nintendo Co., Ltd., headquartered in Kyoto, Japan. Nintendo Software Technology's mission is to design, develop and deliver the very best video games. We conduct research, use state-of-the-art equipment and review methods of operation so that we may continually improve the quality of the games that we produce. Each person employed at Nintendo Software Technology Corporation is a valued team member and is encouraged to participate in our efforts to create the highest quality games. Nintendo is an equal opportunity employer. We offer a welcoming and inclusive environment in service to one another, our products, the diverse consumers we represent, and the communities we call home. We do all of this with kindness, empathy and respect for each other. Nintendo Software Technology is a tight-knit game development studio located in Redmond, WA. As part of the Nintendo family, we're passionate about creating games designed to surprise and delight our customers. We're always on the lookout for exceptional artist to help support our Art Department. As an Environment Artist, you will have proven Substance Designer experience and a deep passion for stylized texture authoring for hard surface and organic subjects. If this sounds like you then we’d love to see your portfolio! SUMMARY: A developing individual contributor that participates and assists in creations of visual assets for digital entertainment products. Implement defined subset of visual asset tasks of assigned team or project DESCRIPTION OF DUTIES Participates in the creation of 3D content that meets required direction and quality specifications. Participates in assigned illustrations, 3D models, and textures for characters, environments, and objects. Participates in assigned animations for 3D and 2D assets. Utilizes and maintains proficient knowledge of required commercial and Nintendo proprietary art production tools. Implements game play features aligned to game design goals. Applies professional expertise to review, analyze and test products under development as a contributing member of a production team to ensure delivery of Nintendo's high standard of quality and timeliness. SUMMARY OF REQUIREMENTS Minimum of 1 year of professional experience having shipped at least 1 game. Proven artistic and technical skills in basic 3D and or 2D art production. Experienced with game development pipelines and game engines (E. g. Unreal, Unity or a proprietary engine) Proven proficiency with commercial art production software (E. g. Photoshop, Maya, Zbrush, Substance Painter, etc). Capable of excellent organizational and communication skills. Can respond to feedback and iterations quickly and efficiently. Undergraduate degree in art or related field; or equivalent education and experience. This position is hybrid in Redmond, WA. Hybrid positions require regular onsite work following the schedule and guidelines for their division. This position is not open to fully remote status at this time. This contract position includes the base pay range listed below and is eligible for benefits through the employing agency. Agency benefits include eligibility for medical insurance, employee assistance program, and paid sick leave. All benefits are subject to elections, eligibility requirements, plan and program terms. Benefits offerings will be confirmed at the time of offer by the employing agency, and may differ depending on the employing agency partner. Pay range: $31—$47 USD", "summaryDescription" : "Associate Environment Artist (NST) at Nintendo Software Technology. Skills: 3D modeling, Texturing, Unity, Unreal Engine. Create 3D assets. Create textures", "postedDate" : "2026-06-14T20:04:30.392", "createdAt" : "2026-06-14T20:04:30.392", "lastUpdated" : "2026-06-16T05:01:50.569", "ingestTimestamp" : "2026-06-14T20:04:30.392", "mongoId" : "6a2c6d1a74d8ee00a091d367", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 64480, "salaryAnnualMax" : 97720, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "3D modeling", "Texturing", "Unity", "Unreal Engine", "Game development", "3D art pipeline", "Maya", "Photoshop", "Substance Painter", "ZBrush", "Marmoset Toolbag", "Substance Designer", "Substance Alchemist", "Houdini" ], "skillCount" : 14, "jobCategory" : "product", "jobSubcategory" : "design", "seniorityLevel" : "Junior", "dataQualityScore" : 1.0, "_score" : 410.77475, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "694ae6ce70f0b99d589b2804", "title" : "Security Operations and Incident Response Manager", "company" : "Hyundai Capital America", "industry" : "FinTech", "salary" : { "min" : 155000.0, "max" : 210000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager in Security Operations and Incident Response in Irvine, United States, adjusted for the FinTech industry and company size." }, "location" : "United States-California-Irvine", "locations" : [ "United States-California-Irvine", "
Headquarters 1 (HCA_HQ1)
3161 Michelson Dr. Ste 1900
Irvine, 92612

" ], "timestamp" : "2026-06-15T08:40:47.148", "fingerprint" : "d5f865261d9c50964a8d89f96af400da1cdb2f3eecdc20e0391203f2e5cc71a5", "source" : "taleo", "language" : "en", "applyUrl" : "https://hyundaicapital.taleo.net/careersection/ex/jobdetail.ftl?job=105024", "externalId" : "105024", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "experienceLevel" : "Manager", "technicalSkills" : "SIEM, EDR, Threat intelligence, Ransomware, Phishing, Account takeover, Forensic analysis, Automation, Cloud security, AWS, Azure, Google Cloud, Oracle Cloud, Python, PowerShell", "professionalSkills" : [ "Incident response", "Threat hunting", "Tool administration", "Rule tuning", "Vulnerability management", "IAM", "DLP", "Application security", "Risk assessment", "Operational performance" ], "hardSkillsList" : [ "Security monitoring", "Threat detection", "Alert triage", "Incident handling", "Forensic investigation", "Playbook development", "Post-incident review", "Tool configuration", "Detection rule tuning", "Automation scripting", "Cloud monitoring", "Vulnerability scanning" ], "softSkillsList" : [ "Analytical mindset", "Leadership" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Alert triage", "level" : "intermediate" }, { "name" : "Incident handling", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" }, { "name" : "Playbook development", "level" : "intermediate" }, { "name" : "Post-incident review", "level" : "intermediate" }, { "name" : "Tool configuration", "level" : "intermediate" }, { "name" : "Detection rule tuning", "level" : "intermediate" }, { "name" : "Automation scripting", "level" : "intermediate" }, { "name" : "Cloud monitoring", "level" : "intermediate" }, { "name" : "Vulnerability scanning", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Analytical mindset" }, { "name" : "Leadership" } ], "majorSkills" : "Incident response, Security operations, Threat detection, SIEM management", "majorSkillsList" : [ "Incident response", "Security operations", "Threat detection", "SIEM management" ], "coreResponsibilities" : "Monitor security events, Analyze security events, Detect threats, Respond to threats, Tune SIEM rules, Optimize SIEM ingestion, Leverage threat intelligence, Analyze financial threats, Develop detection strategies, Triage security alerts, Correlate data, Escalate critical incidents, Lead incident response, Support incident response, Perform forensic investigations, Document findings, Create incident response playbooks, Maintain incident response playbooks, Conduct post-incident reviews, Recommend improvements, Update security controls, Coordinate with MSSP partners, Validate escalations, Provide tuning feedback, Manage security tools, Configure security tools, Ensure tool performance, Ensure tool coverage, Develop detection rules, Tune detection rules, Develop alerts, Tune alerts, Implement automation responses, Streamline tasks, Monitor cloud environments, Secure cloud environments, Protect financial data, Protect workloads, Integrate security tools, Partner with vulnerability management, Partner with IAM teams, Collaborate with IT Infrastructure, Collaborate with IT Application Teams, Collaborate with DevOps, Collaborate with IAM, Collaborate with DLP, Collaborate with Application Security, Integrate security operations, Conduct vulnerability scans", "teamCollaboration" : "Cross-functional collaboration; Collaborate with IT Infrastructure; Collaborate with IT Application Teams; Collaborate with DevOps; Collaborate with IAM; Collaborate with DLP; Collaborate with Application Security; Collaborate with threat intelligence; Collaborate with vulnerability management; Collaborate with engineering teams; Collaborate with cybersecurity architecture; Collaborate with cybersecurity engineering", "domainKnowledge" : "Financial systems; Cybersecurity; Cloud environments; MITRE framework", "domainList" : [ "financial-systems", "cybersecurity", "cloud-environments", "mitre-framework" ], "domainSpecificKnowledge" : [ "Financial systems", "Cybersecurity", "Cloud environments", "MITRE framework" ], "toolProficiency" : [ "Splunk", "NGSIEM", "EDR", "SIEM", "Firewalls", "Vulnerability scanners" ], "communicationSkills" : "Communicate risk; Communicate operational performance; Documentation skills", "documentationSkills" : "Document findings", "continuousLearning" : "Continuous learning; Staying ahead of threats; Tuition reimbursement", "problemSolvingSkills" : "Analytical mindset; Root cause analysis", "specialRequirements" : "Work at home, Office environment", "outcomesObjectives" : "Reduce false positives; Improve detection fidelity; Enhance detection strategies; Prevent recurrence", "qualificationsBasic" : "5+ years experience, Experience with SIEM platforms, Experience with EDR, Experience with threat intelligence platforms, Experience with incident response lifecycle, Experience with cybersecurity metrics, Experience with KPIs, Experience communicating risk, Experience communicating operational performance, Experience with cloud environments, Experience with automation scripts, Experience with vulnerability scanners, Experience with firewalls", "qualificationsPreferred" : "Experience with Splunk, Experience with NGSIEM, Experience with AWS, Experience with Azure, Experience with Google Cloud, Experience with Oracle Cloud, Experience with Python, Experience with PowerShell", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Who We Are Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 2 million consumers and businesses. Embodying our commitment to grow, innovate, and diversify, we strive to reimagine the customer and dealer experience and launch innovative new products that broaden our market reach. We believe that success comes from within and are proud to support our team members through skill development and career advancement. Hyundai Capital America is an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce. We are a values-driven company dedicated to supporting both internal and external communities through volunteering, philanthropy, and the empowerment of our Employee Resource Groups. Together, we strive to be the leader in financing freedom of movement. We Take Care of Our People Along with competitive pay, as an employee of HCA, you are eligible for the following benefits: ·          Medical, Dental and Vision plans that include no-cost and low-cost plan options ·          Immediate 401(k) matching and vesting ·          Vehicle purchase and lease discounts plus monthly vehicle allowances ·          Paid Volunteer Time Off with company donation to a charity of your choice ·          Tuition reimbursement What to Expect The Security Operations & Incident Response (SOIR) Manager is responsible for the enterprise-wide incident response function within the Security Operations Center (SOC), ensuring rapid detection, containment, and remediation of cybersecurity threats. This role is pivotal in maintaining the integrity, confidentiality, and availability of Hyundai Capital America’s digital assets and infrastructure. This role will oversee 3 rd party vendor of incident responders and collaborate with threat intelligence, vulnerability management, and engineering teams to drive continuous improvement in detection and response capabilities. In addition, this role will create and maintain incident response playbooks and establish processes for proactive threat hunting, as well as be responsible for administration and day-to-day support of HCA EDR, SIEM, and HCA Monitoring, Threat detection, and remediation tools. What You Will Do 1.      Security Monitoring & Threat Detection : ·          Monitor and analyze security events in real-time using SIEM platforms (e.g., Splunk, NGSIEM etc.) to detect and respond to threats targeting financial systems, such as ransomware, phishing, or account takeover. ·          Tune and optimize SIEM correlation rules and ingestion pipelines to reduce false positives and improve detection fidelity. ·          Leverage threat intelligence platforms to analyze emerging financial-specific threats, correlate intelligence with internal data, and develop actionable insights to enhance detection and prevention strategies. 2.      Incident Response & Remediation : ·          Alert Triage: Investigate and triage security alerts, correlating data from endpoints, networks, and cloud environments to identify true positives and escalate critical incidents. ·          Incident Handling: Lead and support incident response activities, including containment, eradication, and recovery, for security incidents spanning the MITRE framework. ·          Forensic Analysis: Perform forensic investigations to determine the root cause of incidents, and document findings for audits and legal purposes. ·          Playbook Development: Create and maintain incident response playbooks, ensuring rapid and consistent response processes. ·          Post-Incident Review: Conduct post-Incident reviews to identify lessons learned, recommend improvements, and update security controls to prevent recurrence. ·          Coordinate with MSSP partners in a co-managed SIEM/SOC model to validate escalations and provide tuning feedback. 3.      Tool Administration and Management of SOC Solutions : ·          Tool Administration: Manage and configure security tools, including SIEM, EDR, firewalls, and vulnerability scanners, to ensure optimal performance and coverage. ·          Rule Tuning: Develop and tune detection rules, signatures, and alerts to reduce false positives and improve detection accuracy in financial environments. ·          Automation: Implement automation responses (e.g. SOUR) scripts (e.g., Python, PowerShell) to streamline tasks like alert enrichment, incident triage, or vulnerability scans. ·          Cloud Security Monitoring: Monitor and secure cloud environments (e.g., AWS, Azure, Google Cloud, Oracle Cloud) using native security tools and third-party integrations, protecting financial data and workloads. ·          Collaborate with cybersecurity architecture & engineering team to ensure proper integration of security tools across cloud, network, and endpoint environments. ·          Partner with vulnerability management and IAM teams to ensure holistic security coverage. 4.      Collaboration, Automation, and Innovation Activities : ·          Cross-Functional Collaboration: Partner with IT Infrastructure and IT Application Teams, DevOps, IAM, DLP, and Application Security teams to integrate security operations with broader cybersecurity initiatives, such as cloud migrations or fintech development. ·          Vulnerability Management: Collaborate with Vulnerability Management team to conduct regular vulnerability scans across networks, systems, and applications to identify weaknesses, such as unpatched software or misconfigurations and support the patching management and/or adequate remediation plan. 5.      Documentation, Reporting, and Compliance Activities : ·          Incident Documentation: Document security incidents, investigations, and remediation actions in detail to support audits, compliance, and lessons learned. ·          Vulnerability and Penetration Test Reports: Produce comprehensive reports on vulnerability scans and penetration tests, including risk assessments, remediation plans, and validation results. ·          Metrics and Reporting: Develop and report on SOC metrics (e.g., Mean Time to Detect, Mean Time to Respond, vulnerability remediation rates, penetration test coverage) to demonstrate operational effectiveness. ·          Runbooks and Procedures: Maintain and update SOC runbooks, standard operating procedures (SOPs), and knowledge bases for incident response, vulnerability management, and penetration testing. What You Will Bring ·         Minimum 5-7 years progressive experience in cybersecurity with proven knowledge in Security Operations Center practices and incident response processes; including 3+ years of experience in financial services, with a strong understanding of financial threats (e.g., fraud, data breaches) and regulations (e.g., PCI DSS, Korean SOX, GDPR) ·       Hands-on experience with SIEM platforms, EDR solutions, and other Monitoring and Vulnerability management tools (e.g., Splunk, Crowdstrike, Rapid 7) ·          Strong understanding of cyber threat landscapes, attack vectors, MITRE ATT&CK framework, and adversary tactics, techniques, and procedures ·          Bachelor’s degree in Computer Science, Information Security, or related field ·          Master’s degree preferred ·          Certification in one of the following: CISSP, CCSP, CISM, TOGAF or equivalent ·          Demonstrated ability to manage major incident investigations, including root cause analysis, executive reporting, and coordination with legal, compliance, and law enforcement when necessary ·          Familiarity with regulatory and compliance frameworks such as HIPAA, PCI-DSS, NIST, ISO 27001, and GDPR. ·          Proven ability to develop and maintain incident response playbooks, escalation procedures, and SOC standard operating procedures (SOPs) ·          Experience with cybersecurity metrics and KPIs, and the ability to communicate risk and operational performance to executive leadership ·          Demonstrated expertise in incident response lifecycle, including detection, triage, containment, eradication, recovery, and post-incident review ·          Analytical mindset with attention to detail ·          Excellent communication and documentation skills ·          Ability to work under pressure and manage multiple incidents simultaneously ·          Passion for continuous learning and staying ahead of emerging threats Work Environment Employees in this class are subject to extended periods of sitting, standing, and walking, vision to monitor and moderate noise levels. Work is performed in an at home and office environment. The posted salary range for this job takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; geographic location, and other business and organizational needs. Successful candidates may be hired anywhere in the salary range based on these factors. It is uncommon to hire candidates at or near the top of the range. California Privacy Notice This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here . This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used, and whether that information is sold or shared, so that you can exercise meaningful control over our use of your personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (“CCPA”). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at Privacy2@hcs.com . United States-California-Irvine", "summaryDescription" : "Security Operations and Incident Response Manager at Hyundai Capital America. Skills: Incident response, Security operations, Threat detection, SIEM management. Monitor security events. Analyze security events", "createdAt" : "2026-06-14T08:13:57.992", "lastUpdated" : "2026-06-15T08:40:47.148", "ingestTimestamp" : "2026-06-14T08:13:57.992", "mongoId" : "694ae6ce70f0b99d589b2804", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 155000, "salaryAnnualMax" : 210000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Security monitoring", "Threat detection", "Alert triage", "Incident handling", "Forensic investigation", "Playbook development", "Post-incident review", "Tool configuration", "Detection rule tuning", "Automation scripting", "Cloud monitoring", "Vulnerability scanning", "Analytical mindset", "Leadership", "Incident response", "Security operations", "SIEM management", "Threat hunting", "Tool administration", "Rule tuning", "Vulnerability management", "IAM", "DLP", "Application security", "Risk assessment", "Operational performance", "Financial systems", "Cybersecurity", "Cloud environments", "MITRE framework", "Splunk", "NGSIEM", "EDR", "SIEM", "Firewalls", "Vulnerability scanners" ], "skillCount" : 36, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.7777778, "_score" : 408.0099, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c693774d8ee00a09068b1", "title" : "Senior Detection Researcher", "company" : "HUMAN", "industry" : "Engineering & Research", "salary" : { "min" : 360000.0, "max" : 540000.0, "currency" : "ILS", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Detection Researcher in Tel Aviv, Israel, adjusted for the cybersecurity industry and company size." }, "location" : "Tel Aviv, Israel", "locations" : [ "Tel Aviv, Israel" ], "timestamp" : "2026-06-15T07:39:21.122", "fingerprint" : "a8e278a07551a0dcce1657b4bb73a9b61a4b2c145fafecd7ab3caec1c25e6a06", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/human/693b7485-a747-4a70-92fd-67be915f41e4/application", "externalId" : "693b7485-a747-4a70-92fd-67be915f41e4", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tel Aviv", "country" : "Israel", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "32.0852997,34.7818064" } ], "locationText" : "Tel Aviv, Israel", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SQL, Python, Machine learning, AI", "professionalSkills" : [ "Research initiatives", "Adversarial attack patterns", "Feature engineering", "Detection models", "Reputation systems", "Detection quality", "Traffic analysis", "Data-driven analysis", "Creative thinking" ], "hardSkillsList" : [ "Data analysis", "Statistical methods", "ML frameworks", "BI platforms", "Cloud data stacks", "Modelling skills", "HTTP", "Web protocols", "Client-server interactions" ], "hardSkills" : [ { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Statistical methods", "level" : "intermediate" }, { "name" : "ML frameworks", "level" : "intermediate" }, { "name" : "BI platforms", "level" : "intermediate" }, { "name" : "Cloud data stacks", "level" : "intermediate" }, { "name" : "Modelling skills", "level" : "intermediate" }, { "name" : "HTTP", "level" : "intermediate" }, { "name" : "Web protocols", "level" : "intermediate" }, { "name" : "Client-server interactions", "level" : "intermediate" } ], "majorSkills" : "Detection research, Machine learning, Data engineering, Applied machine learning", "majorSkillsList" : [ "Detection research", "Machine learning", "Data engineering", "Applied machine learning" ], "coreResponsibilities" : "Lead research initiatives, Design detection methods, Implement detection methods, Deploy detection methods, Investigate attack patterns, Dissect threat actor operations, Develop countermeasures, Engineer features, Curate features, Fuel detection models, Fuel algorithms, Fuel reputation systems, Collaborate with engineering, Collaborate with product, Collaborate with security research, Collaborate with data science, Collaborate with incident response, Translate research findings, Own customer-facing research, Conduct traffic analysis, Resolve escalations, Drive detection improvements, Contribute to detection quality, Review colleagues' work, Monitor production anomalies, Iterate on trade-offs", "teamCollaboration" : "Cross-functional environment; Engineering teams; Product teams; Security research teams; Data science teams; Incident response teams", "domainKnowledge" : "Cybersecurity research; Bot operations; Fraud schemes; Credential stuffing; Application-layer attacks; Reputation systems; Anomaly detection; Behavioral modeling; Real-time enforcement; Online enrichment; ML-driven detection; HTTP; Web protocols; Client-server interactions", "domainList" : [ "cybersecurity-research", "bot-operations", "fraud-schemes", "credential-stuffing", "application-layer-attacks", "reputation-systems", "anomaly-detection", "behavioral-modeling", "real-time-enforcement", "online-enrichment", "ml-driven-detection", "http", "web-protocols", "client-server-interactions" ], "domainSpecificKnowledge" : [ "Cybersecurity research", "Bot operations", "Fraud schemes", "Credential stuffing", "Application-layer attacks", "Reputation systems", "Anomaly detection", "Behavioral modeling", "Real-time enforcement", "Online enrichment", "ML-driven detection", "HTTP", "Web protocols", "Client-server interactions" ], "communicationSkills" : "Convey technical findings", "innovationCreativity" : "Innovative detection methods", "problemSolvingSkills" : "Formulate hypotheses; Design experiments; Turn ambiguous problems into outcomes", "outcomesObjectives" : "Maximize output; Drive high-quality results", "qualificationsBasic" : "5+ years experience with data, Proficiency in SQL, Proficiency in Python, Comfort handling large datasets", "qualificationsPreferred" : "Familiarity with cybersecurity research, Experience with feature engineering, Experience with reputation systems, Experience with anomaly detection, Experience with behavioral modeling, Exposure to real-time enforcement systems, Exposure to online enrichment pipelines, Exposure to ML-driven detection, Academic background in data science, Professional background in data science, Academic background in statistics, Professional background in statistics, Academic background in machine learning, Professional background in machine learning", "remoteFriendly" : true, "rawDescription" : "ABOUT THE TEAM The Enterprise Research team at HUMAN protects the internet by disrupting the economics of cybercrime. We are the detection engine behind HUMAN's products - our algorithms make trillions of decisions per day, distinguishing real humans from sophisticated automated threats. Our team of security researchers, data researchers, and data scientists works at the intersection of adversarial security, data engineering, and applied machine learning to build defenses that stay ahead of constantly adapting attackers. We are looking for a Senior Detection Researcher to join us and play a key role in designing the next generation of our detection and enforcement systems. WHAT YOU'LL DO - Lead research initiatives to design, implement, and deploy innovative detection methods at scale, from early-stage discovery to production rollout. - Investigate adversarial attack patterns, dissect how threat actors operate, and develop countermeasures that are resilient to adaptation and evasion. - Engineer and curate features across large-scale data pipelines (Reputation signals, behavioral signals, network-level attributes) to fuel detection models and algorithms and reputation systems. - Collaborate closely with engineering, product, security research, data science, and incident response teams to translate research findings into production-grade enforcement rules and models. - Leverage AI tools daily to maximize output and drive high-quality results - Own end-to-end customer-facing research for strategic accounts. conduct deep-dive traffic analysis, resolve complex escalations, and drive detection improvements based on real-world adversarial activity. - Contribute to the team's detection quality practices by reviewing colleagues' work, monitoring production anomalies, and iterating on precision/recall trade-offs. WHO YOU ARE - 5+ years of experience working with data at scale: strong proficiency in SQL and Python and comfort handling large, complex datasets. - A researcher mindset. You know how to formulate hypotheses, design experiments, and turn ambiguous problems into measurable outcomes. - Demonstrated ability to solve real-world problems through data-driven analysis and creative thinking. - Deep curiosity about how the internet works, with a solid understanding of HTTP, web protocols, and client-server interactions. - Strong sense of ownership: you hold yourself accountable for accuracy and impact, and you proactively look for ways to improve. - Great communication skills: able to convey technical findings clearly to both technical and non-technical stakeholders. - A collaborative team player who thrives in a fast-paced, cross-functional environment. WHAT WILL SET YOU APART - Familiarity with the cybersecurity research: understanding of bot operations, fraud schemes, credential stuffing, scraping, or application-layer attacks. - Experience with feature engineering for detection or classification systems, especially in adversarial or security contexts. - Experience with reputation systems, anomaly detection, or behavioral modeling. - Exposure to real-time enforcement systems, online enrichment pipelines, or ML-driven detection. - Academic or professional background in data science, statistics, or machine learning. About HUMAN Security HUMAN was founded in a Brooklyn sci-fi bookstore with a hacker mindset and the lofty mission of making the internet safer by putting humans first. Today, our Human Defense Platform safeguards enterprises from sophisticated bots, fraud, and account abuse, verifying the humanity of more than 20 trillion interactions per week for the world’s biggest brands and internet platforms. HUMAN is an equal opportunity workplace dedicated to protecting the internet's integrity for everyone. We believe in putting people first, embracing diversity of thought from our global teams, and welcoming all individuals to share their unique experiences as we fight cybercrime together. We support our Humans with a comprehensive total rewards package for personal and professional development, including well-being and learning stipends, flexible work options, and dedicated time off. While our HQ is in NYC, we have teams worldwide. HUMAN is growing fast, and there’s never been a more meaningful time to join us. If you thrive on solving complex problems and want to help shape the future of cybersecurity, join us as we build a safer, more human internet. If you are an individual with a disability or special need that requires accommodation, please contact us directly.", "summaryDescription" : "Senior Detection Researcher at HUMAN. Skills: Detection research, Machine learning, Data engineering, Applied machine learning. Lead research initiatives. Design detection methods", "createdAt" : "2026-06-13T23:19:29.882", "lastUpdated" : "2026-06-15T07:39:21.122", "ingestTimestamp" : "2026-06-13T23:19:29.882", "mongoId" : "6a2c693774d8ee00a09068b1", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Data analysis", "Statistical methods", "ML frameworks", "BI platforms", "Cloud data stacks", "Modelling skills", "HTTP", "Web protocols", "Client-server interactions", "Detection research", "Machine learning", "Data engineering", "Applied machine learning", "Research initiatives", "Adversarial attack patterns", "Feature engineering", "Detection models", "Reputation systems", "Detection quality", "Traffic analysis", "Data-driven analysis", "Creative thinking", "Cybersecurity research", "Bot operations", "Fraud schemes", "Credential stuffing", "Application-layer attacks", "Anomaly detection", "Behavioral modeling", "Real-time enforcement", "Online enrichment", "ML-driven detection" ], "skillCount" : 32, "jobCategory" : "engineering", "jobSubcategory" : "data", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 406.76163, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a308757f292fd229c087fde", "title" : "Cloud Infrastructure Engineer", "company" : "RefinedScience", "industry" : "Biotech", "salary" : { "min" : 110000.0, "max" : 130000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Aurora, CO", "locations" : [ "Aurora", "CO" ], "certifications" : [ "Google Cloud Professional certification" ], "timestamp" : "2026-06-16T11:59:18.472", "fingerprint" : "050b3612bc2e9645b776f246e1624582a41c7293a654ce3176ebe1626cad879a", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/refinedscience/jobs/5262462008", "externalId" : "5262462008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Aurora", "state" : "Colorado", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.7401441,-104.8733376" } ], "locationText" : "Aurora, Colorado, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "technicalSkills" : "GCP, Infrastructure as code, VPCs, Load balancers, DNS, Cloud Router, NAT, Firewall rules, GCE instances, Cloud Run, CI/CD pipelines, GitHub Actions, Google Cloud Build, Observability infrastructure, Metrics collection, Log aggregation, Dashboards, Backup, Disaster recovery, Containerization, Kubernetes, Python", "professionalSkills" : [ "Infrastructure platform support", "Scalable deployments", "Secure infrastructure", "Reliable infrastructure", "Containerized workload deployments", "Cross-functional collaboration", "Technical documentation", "Architecture diagrams" ], "hardSkillsList" : [ "Cloud networking", "Compute resource management", "Deployment pipeline management", "Observability infrastructure design", "Security control implementation", "Containerization best practices", "Infrastructure automation" ], "softSkillsList" : [ "Independent work", "Collaborative work" ], "hardSkills" : [ { "name" : "Cloud networking", "level" : "intermediate" }, { "name" : "Compute resource management", "level" : "intermediate" }, { "name" : "Deployment pipeline management", "level" : "intermediate" }, { "name" : "Observability infrastructure design", "level" : "intermediate" }, { "name" : "Security control implementation", "level" : "intermediate" }, { "name" : "Containerization best practices", "level" : "intermediate" }, { "name" : "Infrastructure automation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Independent work" }, { "name" : "Collaborative work" } ], "majorSkills" : "Cloud Infrastructure, Infrastructure as Code, CI/CD, GCP", "majorSkillsList" : [ "Cloud Infrastructure", "Infrastructure as Code", "CI/CD", "GCP" ], "coreResponsibilities" : "Design cloud infrastructure on GCP, Implement cloud infrastructure on GCP, Manage cloud networking components, Manage cloud compute resources, Build CI/CD pipelines, Maintain CI/CD pipelines, Design observability infrastructure, Maintain observability infrastructure, Implement security controls, Maintain compliance controls, Manage cloud services, Support internal applications deployment, Support internal applications maintenance, Champion containerization best practices, Support containerized workload deployments, Collaborate with cross-functional teams, Troubleshoot cloud infrastructure issues, Resolve cloud infrastructure issues, Troubleshoot deployment issues, Resolve deployment issues, Create technical documentation, Maintain technical documentation, Create runbooks, Maintain runbooks, Create architecture diagrams, Maintain architecture diagrams, Stay current with cloud trends, Evaluate new tools", "teamCollaboration" : "Software development teams; Data science teams; Clinical teams; Informatics teams; Cross-functional teams", "projectManagementSkills" : [ "Agile" ], "domainKnowledge" : "Regulated research environment; Healthcare research; HIPAA compliance", "domainList" : [ "regulated-research-environment", "healthcare-research", "hipaa-compliance" ], "domainSpecificKnowledge" : [ "Regulated research environment", "Healthcare research", "HIPAA compliance" ], "toolProficiency" : [ "Terraform", "Pulumi", "GitHub Actions", "Google Cloud Build", "Prometheus", "Grafana", "Kubernetes" ], "communicationSkills" : "Technical documentation; Clear technical documentation", "documentationSkills" : "Technical documentation; Runbooks; Architecture diagrams", "continuousLearning" : "Stay current with cloud technology trends; Evaluate new tools and approaches", "innovationCreativity" : "Evaluate new tools and approaches", "problemSolvingSkills" : "Troubleshoot and resolve issues", "qualificationsBasic" : "Bachelor's degree in Computer Science, Cloud engineering experience, Infrastructure engineering experience, Linux administration, Infrastructure as code experience, CI/CD pipelines experience, Cloud networking knowledge, Metrics collection experience, Operational dashboards experience, Scripting or automating infrastructure tasks, Written communication skills, Verbal communication skills, Technical documentation production", "qualificationsPreferred" : "Healthcare or life sciences experience, HIPAA compliance knowledge, GCP-native observability tooling experience, Prometheus/Grafana experience, Cloud IAM best practices experience, Security controls experience, Front-end application hosting infrastructure experience, Google Cloud Professional certification, Containerization technologies familiarity, Kubernetes exposure", "remoteFriendly" : false, "workSiteFlexibility" : "Flexible", "rawDescription" : "Cloud Infrastructure Engineer At RefinedScience, our mission is to advance care by bringing together the best science, data and minds – disease by disease, patient by patient, cell by cell to discover pathways to life beyond disease. WHAT WE ARE LOOKING FOR We are seeking a Cloud Infrastructure Engineer to join our team. You will be responsible for designing, implementing, and maintaining cloud-based infrastructure and automation to meet the evolving needs of our organization. The ideal candidate has hands-on cloud engineering experience, is proficient with infrastructure as code, and is comfortable owning cloud networking, compute, and deployment pipelines in a regulated research environment. A key part of this role is serving as the infrastructure platform support layer for our software development and data science teams — helping them build, deploy, and observe their work reliably and at scale. You will collaborate closely with our development, data science, clinical, and informatics teams to deliver scalable, secure, and reliable infrastructure on Google Cloud Platform (GCP). KEY ACTIVITIES Design and implement cloud infrastructure on GCP using infrastructure as code Manage cloud networking components including VPCs, load balancers, DNS, Cloud Router, NAT, and firewall rules Manage and optimize cloud compute resources including GCE instances, Cloud Run, and related services Build and maintain CI/CD pipelines using tools such as GitHub Actions or Google Cloud Build to support reliable, repeatable deployments Design and maintain observability infrastructure including metrics collection, log aggregation, and dashboards to surface actionable insights for engineering and research teams Implement and maintain security and compliance controls appropriate to a regulated healthcare research environment Manage cloud services including backup and disaster recovery Support deployment and maintenance of internal applications and their underlying infrastructure Champion containerization best practices and support containerized workload deployments Collaborate with cross-functional teams to ensure seamless integration with existing systems and workflows Troubleshoot and resolve cloud infrastructure and deployment issues Create and maintain clear technical documentation, runbooks, and architecture diagrams Stay current with cloud technology trends and evaluate new tools and approaches relevant to the organization MUST HAVES Bachelor’s degree in Computer Science, Engineering, or equivalent practical experience Experience in cloud engineering, infrastructure engineering, or a closely related role Strong proficiency with GCP; equivalent experience with AWS or Azure will be considered Linux administration and comfort working in Linux-based environments via command line Hands-on experience with infrastructure as code with Terraform and or Pulumi Demonstrated experience building and maintaining CI/CD pipelines (GitHub Actions, Google Cloud Build, or similar) Solid understanding of cloud networking: VPC design, load balancers, DNS, NAT, and firewall rule management Hands-on experience with metrics collection and building operational dashboards Experience scripting or automating infrastructure tasks in Python or a similar language Strong written and verbal communication skills with an ability to produce clear technical documentation Ability to work both independently and collaboratively within a cross-functional team NICE TO HAVES Experience in a healthcare or life sciences environment; working knowledge of HIPAA compliance requirements Experience with GCP-native observability tooling (Cloud Monitoring, Cloud Logging) in addition to Prometheus/Grafana Experience with cloud IAM best practices and security controls (VPC Service Controls, service accounts, least-privilege patterns) Experience with front-end application hosting infrastructure (load balancers, SSL/TLS termination, CDN) Google Cloud Professional certification (Cloud Architect, DevOps Engineer, or similar) Familiarity with containerization technologies, primarily Docker; Kubernetes exposure is a plus but not required WHY YOU’LL LOVE REFINED SCIENCE Team + Values At RefinedScience, we seamlessly integrate top-tier clinical and biological data with expert knowledge to provide unparalleled insights. We maximize patient impact with these unique insights by optimizing clinical trial probability of success and time to actionable results. We work across biopharma and we are a trusted partner in achieving better results, faster – working together to unlock strategic advantage. Our Values Act with Purpose – We believe in rigor through deliberate and thoughtful actions Be Curious – Curiosity is the spark that ignites innovation and growth Take Ownership – True ownership leads to pride and commitment in the work we do Invest in Relationships – Building strong connections is the foundation for effective collaboration and trust for long term success Embrace Agility – We celebrate agile thinking, resilience, and adaptability WHAT WE OFFER The target salary range is $110,000 to $130,000 annually. Base pay offered may vary within the posted range based on several factors, including but not limited to education, job-related knowledge, skills, experience, and location. BENEFITS Medical, Dental and Vision insurance Life, AD&D, Short-term and Long-term Disability Insurance (none is100% covered) HSA Spending Accounts 22 Vacation days 10 Paid Holidays and Sick Time (120 hours per year) 401(K) Plan", "summaryDescription" : "Cloud Infrastructure Engineer at RefinedScience. Skills: Cloud Infrastructure, Infrastructure as Code, CI/CD, GCP. Design cloud infrastructure on GCP. Implement cloud infrastructure on GCP", "postedDate" : "2026-06-16T01:21:04.442", "createdAt" : "2026-06-16T01:21:04.442", "lastUpdated" : "2026-06-16T11:59:18.472", "ingestTimestamp" : "2026-06-16T01:21:04.442", "mongoId" : "6a308757f292fd229c087fde", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 110000, "salaryAnnualMax" : 130000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Cloud networking", "Compute resource management", "Deployment pipeline management", "Observability infrastructure design", "Security control implementation", "Containerization best practices", "Infrastructure automation", "Independent work", "Collaborative work", "Cloud Infrastructure", "Infrastructure as Code", "CI/CD", "GCP", "Infrastructure platform support", "Scalable deployments", "Secure infrastructure", "Reliable infrastructure", "Containerized workload deployments", "Cross-functional collaboration", "Technical documentation", "Architecture diagrams", "Agile", "Regulated research environment", "Healthcare research", "HIPAA compliance", "Google Cloud Professional certification", "Terraform", "Pulumi", "GitHub Actions", "Google Cloud Build", "Prometheus", "Grafana", "Kubernetes" ], "skillCount" : 33, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 404.176, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Biotech", "llmIndustryConfidence" : 0.95 }, { "id" : "69e104402beec4dd3def2577", "title" : "Security Engineer, AWS Security Incident Response", "company" : "Amazon Web Services", "industry" : "Solutions Architect, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 135000.0, "max" : 195000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Security Engineer in Singapore, adjusted for the technology industry and a large company size." }, "location" : "SGP", "locations" : [ "SGP" ], "certifications" : [ "GCIH", "GSEC", "Security+" ], "timestamp" : "2026-06-15T02:22:21.224", "fingerprint" : "40bb89751ca82072e1830c381dd327c4aca04b10b3800fda172ae2e11fc89203", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10386227/apply", "externalId" : "bf3e3eb2-1460-4e11-bafb-1fe3f4b46363", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "technicalSkills" : "AWS, Amazon GuardDuty, CrowdStrike Falcon, Wiz Defend", "professionalSkills" : [ "Security response", "Threat detection", "Incident response", "Security automation", "Security posture improvement", "Risk assessment", "Vulnerability assessment", "Remediation proposal" ], "hardSkillsList" : [ "Threat analysis", "Security monitoring", "Incident documentation", "Incident reporting", "Auto-remediation capabilities" ], "softSkillsList" : [ "Learning new concepts" ], "hardSkills" : [ { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Incident documentation", "level" : "intermediate" }, { "name" : "Incident reporting", "level" : "intermediate" }, { "name" : "Auto-remediation capabilities", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Learning new concepts" } ], "majorSkills" : "Incident response, Threat detection, Security automation", "majorSkillsList" : [ "Incident response", "Threat detection", "Security automation" ], "coreResponsibilities" : "Respond to threat findings, Identify security threats, Evaluate security threats, Communicate security threats, Propose remediation for security issues, Contribute to security automation development, Contribute to security posture improvements, Track effectiveness of detective controls, Report effectiveness of detective controls, Develop processes for response effectiveness, Develop policies for response effectiveness, Monitor networks for potential threats, Monitor systems for potential threats, Perform triage for security alerts, Document suspicious activity, Report security issues, Perform threat detection, Perform incident response, Detect cyber threats, Mitigate cyber threats, Protect AWS Customers, Learn new technologies, Learn new procedures", "teamCollaboration" : "Work alongside security engineers; Work with partner teams", "domainKnowledge" : "AWS Security; Incident response; Threat monitoring; Detective controls; Protective controls; Attack techniques; Cyber threats", "domainList" : [ "aws-security", "incident-response", "threat-monitoring", "detective-controls", "protective-controls", "attack-techniques", "cyber-threats" ], "domainSpecificKnowledge" : [ "AWS Security", "Incident response", "Threat monitoring", "Detective controls", "Protective controls", "Attack techniques", "Cyber threats" ], "toolProficiency" : [ "CrowdStrike Falcon", "Wiz Defend" ], "communicationSkills" : "Explain technical concepts", "documentationSkills" : "Document suspicious activity", "continuousLearning" : "Learning new concepts; Learning new technologies; Learning new procedures", "problemSolvingSkills" : "Work through ambiguity; Identify suspicious activity", "specialRequirements" : "On-call support, Periodic on-call responsibilities, On-call responsibilities including weekends", "outcomesObjectives" : "Keep customers secure; Increase security response effectiveness; Minimize disruption to customer workloads", "qualificationsBasic" : "Bachelor's degree in Engineering, Experience with web protocols, Experience with common security attacks, Experience with remediation, Knowledge of system, Knowledge of network, Knowledge of OS, Experience solving problems by writing code, Experience solving problems with scripts", "qualificationsPreferred" : "Experience with AWS services, Experience with other cloud offerings, Experience triaging security alerts, Front-line analysis experience, Escalation experience, GCIH certification, GSEC certification, Security+ certification", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Security Incident Response is looking for technical Security Engineers that are passionate about learning new concepts and work well within a team environment to keep customers secure. We value engineers that can work through ambiguity to identify suspicious activity, lead security response, and can explain technical security concepts to non-technical audiences. Key job responsibilities * Respond to threat findings that indicate unauthorized activity has occurred * Identify, evaluate and communicate security threats, risks and vulnerabilities, and propose recommended remediation for security issues. * Contribute to the development of security automation and security posture improvements. * Track and report on the effectiveness of AWS detective controls such as Amazon GuardDuty and partner products such as CrowdStrike Falcon or Wiz Defend * Develop processes and policies to increase security response effectiveness. * On-call support: This role requires periodic on-call responsibilities including weekends. A day in the life As a Security Engineer in AWS Security Incident Response, your responsibilities include monitoring networks and systems for potential threats, performing triage for security alerts, documenting suspicious activity, and reporting issues so they can be adequately handled. You will work alongside our security engineers and partner teams to perform daily threat detection and incident response, using the full capability of AWS technologies and services to detect and mitigate cyber threats at a massive scale and help protect AWS Customers. You should also enjoy learning about the most up-to-date new technologies and procedures to protect information systems and data. About the team AWS Security Incident Response provides 24/7 threat monitoring, investigation, and response across for customer’s AWS environments. The service enhances existing security capabilities by providing security monitoring for all native AWS services and supports vendor agnostic detective and protective controls to provide holistic security controls for customers. This is done by leveraging data on common attack techniques to enhance detective controls and incident response, then building auto-remediation capabilities to minimize disruption to customer workloads. When a security event does happen, you will be there provide guidance. Basic Qualifications: - Bachelor's degree in Engineering, Computer Science, or a related field - Experience with web protocols, common security attacks, and remediation (non-internship) - Knowledge of system, network and OS - Experience solving basic problems by writing code or scripts with some assistance Preferred Qualifications: - Experience with AWS services or other cloud offerings - Experience triaging security alerts, front-line analysis, and escalation - GCIH (GIAC Certified Incident Handler) or GSEC (GIAC Security Essentials) or Security+ Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security Engineer, AWS Security Incident Response at Amazon Web Services. Skills: Incident response, Threat detection, Security automation. Respond to threat findings. Identify security threats", "postedDate" : "2026-06-13T04:14:17.343", "createdAt" : "2026-06-13T04:14:17.343", "lastUpdated" : "2026-06-15T02:22:21.224", "ingestTimestamp" : "2026-06-13T04:14:17.343", "mongoId" : "69e104402beec4dd3def2577", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10386227/apply", "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Threat analysis", "Security monitoring", "Incident documentation", "Incident reporting", "Auto-remediation capabilities", "Learning new concepts", "Incident response", "Threat detection", "Security automation", "Security response", "Security posture improvement", "Risk assessment", "Vulnerability assessment", "Remediation proposal", "AWS Security", "Threat monitoring", "Detective controls", "Protective controls", "Attack techniques", "Cyber threats", "GCIH", "GSEC", "Security+", "CrowdStrike Falcon", "Wiz Defend" ], "skillCount" : 25, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 404.08624, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "69cf3f052beec4dd3d9340a4", "title" : "AWS Security Operations/Incident Response Engineer", "company" : "Amazon Web Services, Inc.", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 159000.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Herndon, Virginia, USA", "locations" : [ "Herndon, Virginia, USA" ], "certifications" : [ "CCSP", "Certified Cloud Security Professional", "CEH", "Certified Ethical Hacker", "CFR", "CyberSec First Responder", "Cloud+", "CySA+", "CompTIA Cybersecurity Analyst", "GCED", "GIAC Certified Enterprise Defender", "GICSP", "Global Industrial Cyber Security Professional", "PenTest+", "AWS certification", "AWS Solutions Architect" ], "timestamp" : "2026-06-15T08:10:44.516", "fingerprint" : "e7b6067f8d5e1ee3cf111fd915ee7bae8c724b95799fbd946bdb1b7400dc7409", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10382311/apply", "externalId" : "49079c29-efa4-48bb-96db-5c916f303463", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" } ], "locationText" : "Herndon, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Java, C++, HTTP(S), DNS, TCP/IP, Cryptography, Network security, Software security, Malware analysis, Forensics, Security operations, Incident response, Security intelligence, AWS", "professionalSkills" : [ "Risk assessment", "Security engineering" ], "hardSkillsList" : [ "Log analysis", "Incident response", "Forensics", "System tooling development", "Risk assessment", "Cryptography", "Network security", "Software security", "Malware analysis", "Security operations", "Security intelligence" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Forensics", "level" : "intermediate" }, { "name" : "System tooling development", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Software security", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Security intelligence", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Security operations, Cloud security", "majorSkillsList" : [ "Incident response", "Security operations", "Cloud security" ], "coreResponsibilities" : "Respond to security incidents, Prevent future incidents, Design cohesive responses, Coordinate responses across teams, Build security utilities, Build security tools, Communicate effectively", "teamCollaboration" : "Multiple teams across organization; Fellow Security Engineers", "domainKnowledge" : "Cloud security; National security; Cryptography; Network security; Software security; Malware analysis; Forensics; Security operations; Incident response; Security intelligence; AWS services", "domainList" : [ "cloud-security", "national-security", "cryptography", "network-security", "software-security", "malware-analysis", "forensics", "security-operations", "incident-response", "security-intelligence", "aws-services" ], "domainSpecificKnowledge" : [ "Cloud security", "National security", "Cryptography", "Network security", "Software security", "Malware analysis", "Forensics", "Security operations", "Incident response", "Security intelligence", "AWS services" ], "toolProficiency" : [ "Splunk", "ELK" ], "communicationSkills" : "Communicate at multiple levels; Communicate to multiple audiences", "problemSolvingSkills" : "Think like attacker; Think like defender; Mitigate risks", "specialRequirements" : "US Citizen, TS/SCI with polygraph, On-call responsibilities", "qualificationsBasic" : "Bachelor's degree or CCSP or CEH or CFR or Cloud+ or CySA+ or GCED or GICSP or PenTest+, 2+ years scripting or programming or security code review, Knowledge of networking protocols, Current, active US Government Security Clearance of TS/SCI with Polygraph", "qualificationsPreferred" : "AWS certification, Cloud Technology Certification, Knowledge of web protocols, Knowledge of common attacks, Knowledge of Linux/Unix tools, Knowledge of Linux/Unix architecture, Deep understanding of AWS service catalog, Used AWS services in production, Experience with log analysis systems, Familiarity with Windows logging systems, Familiarity with Linux logging systems, Understanding of high-level cryptography principles", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Web Services (AWS) is the leading cloud provider, providing infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS’s multi-tenant infrastructure. Governmental organizations are also looking to and depending on AWS for cloud solutions and services. The AWS Security Incident Response team is seeking a focused Security Engineer who can take on a leadership role in responding to security issues in support of our National Security program. This engineer will work as a part of a growing team of security engineers who are focused on protecting the AWS infrastructure that is used by our national security customers. Our security engineers perform many duties during an average day: log analysis, incident response, forensics, system/tooling development, and risk assessment, just to name a few. You must thrive in high-pressure situations, think like both an attacker and defender, and drive relevant teams to take the right actions in the right time frames to mitigate risks. They also need to balance technical risks against business needs and be able to articulate risks and mitigations to members of leadership at various levels. You should have a good mix of deep technical knowledge and a demonstrated background in information security. We value broad and deep technical knowledge, specifically in the fields of cryptography, network security, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active TS/SCI security clearance with polygraph. Key job responsibilities - Confidently and intelligently respond to security incidents, and proactively consider how to prevent the same type of incidents from occurring in the future. - Design and coordinate cohesive responses to security events that involve multiple teams across the organization. - Build security utilities and tools for internal use that enable you and your fellow Security Engineers to operate at high speed and wide scale. - Ability to communicate effectively at multiple levels of sensitivity, and multiple audiences. - Recognize, adopt and instill the best practices in security engineering fields throughout the organization: development, cryptography, network security, security operations, incident response, security intelligence. - Fulfill regular on-call responsibilities. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor's degree, or CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud+ or CySA+ (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest+ - 2+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience - Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP - Current, active US Government Security Clearance of TS/SCI with Polygraph Preferred Qualifications: - AWS certification, such as, AWS Solutions Architect, or a similar cloud certification, or Cloud Technology Certification - Knowledge of web protocols, common attacks, and Linux/Unix tools and architecture - Deep understanding of the AWS service catalog. Ideally, you have used AWS services in a production capacity. - Experience with log analysis systems, like Splunk or ELK. - Familiarity with Windows and Linux logging systems. - Understanding of high-level cryptography principles (PKI, encryption algorithms, etc) Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, VA, Herndon - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "AWS Security Operations/Incident Response Engineer at Amazon Web Services, Inc.. Skills: Incident response, Security operations, Cloud security. Respond to security incidents. Prevent future incidents", "postedDate" : "2026-06-13T14:00:19.237", "createdAt" : "2026-06-13T14:00:19.237", "lastUpdated" : "2026-06-15T08:10:44.516", "ingestTimestamp" : "2026-06-13T14:00:19.237", "mongoId" : "69cf3f052beec4dd3d9340a4", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10382311/apply", "salaryAnnualMin" : 159000, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Log analysis", "Incident response", "Forensics", "System tooling development", "Risk assessment", "Cryptography", "Network security", "Software security", "Malware analysis", "Security operations", "Security intelligence", "Leadership", "Cloud security", "Security engineering", "National security", "AWS services", "CCSP", "Certified Cloud Security Professional", "CEH", "Certified Ethical Hacker", "CFR", "CyberSec First Responder", "Cloud+", "CySA+", "CompTIA Cybersecurity Analyst", "GCED", "GIAC Certified Enterprise Defender", "GICSP", "Global Industrial Cyber Security Professional", "PenTest+", "AWS certification", "AWS Solutions Architect", "Splunk", "ELK" ], "skillCount" : 34, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 402.72955, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Security" }, { "id" : "6a2c68fa74d8ee00a09057f9", "title" : "Assistant Manager, Cybersecurity Incident Response", "company" : "telecommunications organization", "industry" : "Cygnify", "salary" : { "min" : 120000.0, "max" : 180000.0, "currency" : "MYR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager-level Cybersecurity Incident Response Assistant Manager in Kuala Lumpur, Malaysia, adjusted for the telecommunications industry." }, "location" : "Kuala Lumpur, Malaysia", "locations" : [ "Kuala Lumpur, Malaysia" ], "certifications" : [ "CISSP", "GCIH", "GCIA", "CEH", "Elastic Certified Engineer" ], "timestamp" : "2026-06-15T07:44:00.220", "fingerprint" : "56e79a26aaf2e95b5e453b798552e77ada7580d02d519917696520bc1ab763d7", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/cygnify/f736808f-ea19-4fe2-8933-8ca7e3e0efd4/application", "externalId" : "f736808f-ea19-4fe2-8933-8ca7e3e0efd4", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Kuala Lumpur", "country" : "Malaysia", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "3.1516964,101.6942371" } ], "locationText" : "Kuala Lumpur, Malaysia", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 8, "experienceLevel" : "Manager", "technicalSkills" : "Elastic SIEM, Elastic Stack, Elasticsearch, Logstash, Kibana, Beats, EDR, Cloud platforms", "professionalSkills" : [ "Incident management", "Detection engineering", "Use case development", "Stakeholder coordination", "Incident reporting", "Operational excellence", "Threat detection", "Root cause analysis", "Lessons learned" ], "hardSkillsList" : [ "Log analysis", "Event correlation", "Rule creation", "Rule tuning", "Integration efforts" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Event correlation", "level" : "intermediate" }, { "name" : "Rule creation", "level" : "intermediate" }, { "name" : "Rule tuning", "level" : "intermediate" }, { "name" : "Integration efforts", "level" : "intermediate" } ], "majorSkills" : "Incident Response, SIEM administration, Detection Engineering", "majorSkillsList" : [ "Incident Response", "SIEM administration", "Detection Engineering" ], "coreResponsibilities" : "Manage cybersecurity incidents, Achieve MTTD benchmarks, Achieve MTTR benchmarks, Administer Elastic SIEM platform, Create detection rules, Tune detection rules, Integrate SIEM, Develop detection use cases, Escalate incidents, Coordinate with stakeholders, Report incidents, Monitor alerts, Triage alerts, Investigate alerts, Refine SIEM rules, Manage Elastic Stack components, Lead integration efforts, Collaborate with IT teams, Collaborate with Network teams, Collaborate with Cloud teams, Present incident findings, Present root cause analyses, Present remediation plans, Document playbooks, Enhance SOPs, Conduct post-incident reviews, Implement lessons learned", "teamCollaboration" : "Internal stakeholders; External stakeholders; Data Engineering teams; Architecture teams; Security teams; Infrastructure teams; Tooling teams; IT teams; Network teams; Cloud teams", "domainKnowledge" : "Cybersecurity incidents; Threat patterns; Attack patterns; MITRE ATT&CK", "domainList" : [ "cybersecurity-incidents", "threat-patterns", "attack-patterns", "mitre-att-ck" ], "domainSpecificKnowledge" : [ "Cybersecurity incidents", "Threat patterns", "Attack patterns", "MITRE ATT&CK" ], "toolProficiency" : [ "Elastic SIEM", "Elastic Stack", "EDR", "Ticketing systems" ], "communicationSkills" : "Incident reporting; Incident discussions", "documentationSkills" : "Incident response playbooks; Standard operating procedures", "problemSolvingSkills" : "Incident investigation; Log analysis; Event correlation; Root cause analysis", "outcomesObjectives" : "Achieve MTTD benchmarks; Achieve MTTR benchmarks; Strengthen security posture", "qualificationsBasic" : "5-8 years experience, SIEM administration, Elastic Stack environments, Incident triage, Log analysis, Detection rule engineering, MITRE ATT&CK-aligned use cases, Cross-department collaboration, Incident coordination, Presentation experience, Communication experience", "qualificationsPreferred" : "CISSP, GCIH, GCIA, CEH, Elastic Certified Engineer", "remoteFriendly" : true, "rawDescription" : "We are currently partnering with a leading technology-driven telecommunications organization that is scaling rapidly to support new digital initiatives and platforms. As part of this expansion, multiple roles are open across key functions to help build, maintain, and enhance next-generation solutions. This opportunity offers exposure to large-scale systems, innovative technologies, and a collaborative environment where skills and ideas make a real impact. Accountabilities: - End-to-end management of cybersecurity incidents, ensuring timely detection, triage, investigation, and resolution - Achieving and maintaining target MTTD (Mean Time to Detect) and MTTR (Mean Time to Respond) benchmarks. - Effective administration and optimization of the Elastic SIEM platform, including rule creation, tuning, and integrations. - Development of accurate and relevant detection use cases aligned with evolving threat patterns and organizational needs. - Ensuring timely escalation and coordination with internal and external stakeholders during major incidents. - Providing transparent and comprehensive incident reporting to leadership and relevant teams. - Drive operational excellence through monitoring, alerting, timely investigation and continuous fine tuning the alerts - Partner with Data Engineering, Architecture, Security, Infrastructure & Tooling teams to ensure aligned technical cyber security discussions Responsibilities: - Monitor, triage, and investigate alerts from multiple log sources (network, endpoint, cloud, and application). - Create, refine, and manage SIEM detection rules to capture the latest attack patterns. - Conduct log analysis and event correlation to identify potential intrusions or malicious behavior. - Drive use case ideation and validation to improve threat detection coverage and accuracy. - Manage and maintain Elastic Stack components (Elasticsearch, Logstash, Kibana, Beats) for operational efficiency. - Lead integration efforts with tools such as EDR, firewalls, cloud platforms, and ticketing systems. - Collaborate with IT, Network, and Cloud teams for incident follow-up, containment, and recovery. - Present incident findings, root cause analyses, and remediation plans to key stakeholders (internal leadership and external partners). - Document and enhance incident response playbooks and standard operating procedures (SOPs). - Conduct post-incident reviews and implement lessons learned to strengthen the organization's security posture. Requirements - 5-8 years of experience in Security Operations Center (SOC), Incident Response, or Detection Engineering roles. - Proven success in SIEM administration, particularly Elastic Stack (ELK) environments. - Hands-on expertise in incident triage, log analysis, and detection rule engineering. - Demonstrated ability to design and operationalize MITRE ATT&CK-aligned use cases. - Experience in cross-department collaboration and incident coordination with IT and business teams. - Strong presentation and communication experience in stakeholder-level incident discussions. - Relevant certifications such as CISSP,GCIH, GCIA, CEH, or Elastic Certified Engineer preferred.", "summaryDescription" : "Assistant Manager, Cybersecurity Incident Response at telecommunications organization. Skills: Incident Response, SIEM administration, Detection Engineering. Manage cybersecurity incidents. Achieve MTTD benchmarks", "createdAt" : "2026-06-13T22:02:53.611", "lastUpdated" : "2026-06-15T07:44:00.220", "ingestTimestamp" : "2026-06-13T22:02:53.611", "mongoId" : "6a2c68fa74d8ee00a09057f9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Log analysis", "Event correlation", "Rule creation", "Rule tuning", "Integration efforts", "Incident Response", "SIEM administration", "Detection Engineering", "Incident management", "Detection engineering", "Use case development", "Stakeholder coordination", "Incident reporting", "Operational excellence", "Threat detection", "Root cause analysis", "Lessons learned", "Cybersecurity incidents", "Threat patterns", "Attack patterns", "MITRE ATT&CK", "CISSP", "GCIH", "GCIA", "CEH", "Elastic Certified Engineer", "Elastic SIEM", "Elastic Stack", "EDR", "Ticketing systems" ], "skillCount" : 30, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 402.2615, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305119f292fd229cefa250", "title" : "Senior Cloud Software Architect", "industry" : "IT", "salary" : { "min" : 240000.0, "max" : 400000.0, "currency" : "BRL", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cloud Software Architect in Brazil, adjusted for seniority and full-time employment." }, "location" : "Brazil", "locations" : [ "Brazil" ], "timestamp" : "2026-06-16T12:14:20.936", "fingerprint" : "61f892248879ecb22525cb935cae7a08a2119047969855c781cef62281b8bbe0", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/872a5e6e-9047-418e-ba28-01bf77c60e8d/apply", "externalId" : "872a5e6e-9047-418e-ba28-01bf77c60e8d", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Brazil", "continent" : "sa", "workMode" : "remote" } ], "locationText" : "Brazil", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, HTML, CSS, React, Vue, Angular, Python, Node.js, PHP, Ruby, PostgreSQL, MySQL, MongoDB, CI/CD, Infrastructure as Code", "professionalSkills" : [ "System design", "Technical direction", "Backlog management", "Agile ceremonies", "Stakeholder alignment", "Service management", "Requirements gathering", "Architecture discussions", "Knowledge sharing", "System reliability", "Automation strategies", "Observability practices", "Technical documentation" ], "hardSkillsList" : [ "Unit testing", "Integration testing" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Unit testing", "level" : "intermediate" }, { "name" : "Integration testing", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Cloud-native applications, AWS environments, DevOps practices, Scalable architectures", "majorSkillsList" : [ "Cloud-native applications", "AWS environments", "DevOps practices", "Scalable architectures" ], "coreResponsibilities" : "Lead architecture design, Lead technical direction, Translate client requirements, Guide engineering teams, Facilitate Agile ceremonies, Ensure alignment across stakeholders, Ensure alignment across engineering teams, Ensure alignment across client representatives, Design DevOps practices, Oversee DevOps practices, Write production-quality code, Support system troubleshooting, Drive requirements gathering, Drive backlog grooming, Drive architecture discussions, Mentor engineers, Provide technical guidance, Support knowledge sharing, Ensure system reliability, Document architectures, Document processes, Document technical decisions", "teamCollaboration" : "Cross-functional teams; Engineering teams; Client representatives; Global engineering teams", "projectManagementSkills" : [ "Agile ceremonies", "Backlog grooming" ], "domainKnowledge" : "Cloud-native applications; AWS environments; Scalable architectures; Modern software engineering; Web technologies; Frontend frameworks; Backend development; Relational databases; NoSQL databases; API integrations; Microservices; Event-driven systems; Distributed architectures; DevOps practices; CI/CD pipelines; Infrastructure as code; Cloud automation", "domainList" : [ "cloud-native-applications", "aws-environments", "scalable-architectures", "modern-software-engineering", "web-technologies", "frontend-frameworks", "backend-development", "relational-databases", "nosql-databases", "api-integrations", "microservices", "event-driven-systems", "distributed-architectures", "devops-practices", "ci-cd-pipelines", "infrastructure-as-code", "cloud-automation" ], "domainSpecificKnowledge" : [ "Cloud-native applications", "AWS environments", "Scalable architectures", "Modern software engineering", "Web technologies", "Frontend frameworks", "Backend development", "Relational databases", "NoSQL databases", "API integrations", "Microservices", "Event-driven systems", "Distributed architectures", "DevOps practices", "CI/CD pipelines", "Infrastructure as code", "Cloud automation" ], "toolProficiency" : [ "CI/CD pipelines", "Cloud automation tools" ], "communicationSkills" : "Simplify complex technical concepts", "documentationSkills" : "Document architectures; Document processes; Document technical decisions", "continuousLearning" : "Annual learning and development budget; Certifications and training support; Continuous learning", "problemSolvingSkills" : "System troubleshooting", "qualificationsBasic" : "5+ years of experience in software development, 5+ years of experience in cloud-native system architecture, Expertise in application design, Expertise in scalable architectures, Expertise in modern software engineering practices, Hands-on experience with AWS, Hands-on experience with other major cloud platforms, Proficiency in web technologies, Backend development experience, Solid understanding of relational databases, Solid understanding of NoSQL databases, Experience with API integrations, Experience with microservices, Experience with event-driven systems, Experience with distributed architectures, Proven ability to lead technical workstreams, Proven ability to collaborate effectively, Communication skills, Experience with DevOps practices", "qualificationsPreferred" : "Exposure to Generative AI, Exposure to LLMs, Exposure to testing automation, Exposure to UI/UX, Exposure to developer productivity tools", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Accountabilities Lead architecture design and technical direction for cloud-native applications built on AWS environments. Translate client requirements into actionable technical backlogs and guide engineering teams through delivery execution. Facilitate Agile ceremonies and ensure alignment across stakeholders, engineering teams, and client representatives. Design and oversee DevOps practices including CI/CD pipelines, infrastructure as code, monitoring, and security frameworks. Write production-quality code, including unit and integration tests, while supporting system troubleshooting in all environments. Drive requirements gathering, backlog grooming, and architecture discussions with cross-functional teams. Mentor engineers, provide technical guidance, and support knowledge sharing across teams. Ensure system reliability through automation, testing strategies, and observability practices. Document architectures, processes, and technical decisions clearly for both technical and non-technical audiences. Requirements: 5+ years of experience in software development and cloud-native system architecture. Strong expertise in application design, scalable architectures, and modern software engineering practices. Hands-on experience with AWS or other major cloud platforms, including configuration and service management. Proficiency in web technologies such as HTML, CSS, and modern frontend frameworks (React, Vue, Angular, or similar). Strong backend development experience using languages such as Python, Node.js, PHP, Ruby, or equivalent. Solid understanding of relational and NoSQL databases such as PostgreSQL, MySQL, and MongoDB. Experience with API integrations, microservices, event-driven systems, and distributed architectures. Proven ability to lead technical workstreams and collaborate effectively across cross-functional teams. Strong communication skills with the ability to simplify complex technical concepts for diverse audiences. Experience with DevOps practices including CI/CD, infrastructure as code, and cloud automation tools. Nice to have: exposure to Generative AI, LLMs, testing automation, UI/UX, and developer productivity tools. Benefits: Fully remote role with flexibility to work from anywhere within Brazil. Competitive compensation package with performance-based incentives. Private health insurance and comprehensive well-being support. Flexible time off and paid vacation policies. Home office and equipment stipends to support remote work setup. Annual learning and development budget, including certifications and training support. Access to cutting-edge cloud technologies and global engineering teams. Strong engineering culture focused on mentorship, growth, and continuous learning. Inclusive, remote-first environment with global collaboration opportunities. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Senior Cloud Software Architect. Skills: Cloud-native applications, AWS environments, DevOps practices, Scalable architectures. Lead architecture design. Lead technical direction", "postedDate" : "2026-06-15T05:21:51.153", "createdAt" : "2026-06-15T05:21:51.153", "lastUpdated" : "2026-06-16T12:14:20.936", "ingestTimestamp" : "2026-06-16T03:21:23.012", "mongoId" : "6a305119f292fd229cefa250", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Unit testing", "Integration testing", "Mentoring", "Cloud-native applications", "AWS environments", "DevOps practices", "Scalable architectures", "System design", "Technical direction", "Backlog management", "Agile ceremonies", "Stakeholder alignment", "Service management", "Requirements gathering", "Architecture discussions", "Knowledge sharing", "System reliability", "Automation strategies", "Observability practices", "Technical documentation", "Backlog grooming", "Modern software engineering", "Web technologies", "Frontend frameworks", "Backend development", "Relational databases", "NoSQL databases", "API integrations", "Microservices", "Event-driven systems", "Distributed architectures", "CI/CD pipelines", "Infrastructure as code", "Cloud automation", "Cloud automation tools" ], "skillCount" : 35, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 402.21198, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "69ce5e3b9bc74574cb677a0e", "title" : "Service Integration & Management - Major Incident Manager", "salary" : { "min" : 2200000.0, "max" : 3500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Service Integration & Management - Major Incident Manager in Bangalore, India, adjusted for industry and seniority." }, "location" : "India-Karnataka-Bangalore", "locations" : [ "India-Karnataka-Bangalore", "Brigade Tech Gardens, Katha No. 119, Kundalahalli Village, K.R. Puram Hobli, Ward No. 85, Bangalore" ], "certifications" : [ "ITIL v3/v4 Foundation", "ITIL Managing Professional", "ITIL Intermediate (Operational Support & Analysis)", "SIAM Foundation", "SIAM Professional", "ISO/IEC 20000", "IT governance frameworks" ], "timestamp" : "2026-06-15T21:15:31.770", "fingerprint" : "f132727d6c8d45b859a45b835eeafd3197eda7d9cc8fc6bc23e946404e78e82c", "source" : "taleo", "language" : "en", "applyUrl" : "https://daimler.taleo.net/careersection/ex/jobdetail.ftl?job=882033", "externalId" : "882033", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bangalore", "state" : "Karnataka", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "12.9767936,77.5900820" } ], "locationText" : "Bangalore, Karnataka, India", "minimumEducation" : "Bachelor's", "experienceMinYears" : 7, "experienceMaxYears" : 12, "experienceLevel" : "Senior", "technicalSkills" : "ITSM tools", "professionalSkills" : [ "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement" ], "hardSkillsList" : [ "Major Incident Management", "IT Service Management", "IT Operations", "Incident management", "Problem management", "Change management", "Service Level management", "Configuration management", "Process performance reporting", "KPI review", "SLA review", "Root Cause Analysis", "Post Incident Review" ], "hardSkills" : [ { "name" : "Major Incident Management", "level" : "intermediate" }, { "name" : "IT Service Management", "level" : "intermediate" }, { "name" : "IT Operations", "level" : "intermediate" }, { "name" : "Incident management", "level" : "intermediate" }, { "name" : "Problem management", "level" : "intermediate" }, { "name" : "Change management", "level" : "intermediate" }, { "name" : "Service Level management", "level" : "intermediate" }, { "name" : "Configuration management", "level" : "intermediate" }, { "name" : "Process performance reporting", "level" : "intermediate" }, { "name" : "KPI review", "level" : "intermediate" }, { "name" : "SLA review", "level" : "intermediate" }, { "name" : "Root Cause Analysis", "level" : "intermediate" }, { "name" : "Post Incident Review", "level" : "intermediate" } ], "majorSkills" : "Major Incident Management, IT Service Management, Process Improvement", "majorSkillsList" : [ "Major Incident Management", "IT Service Management", "Process Improvement" ], "coreResponsibilities" : "Manage Major Incidents (P1/P2) from detection through resolution, Manage service restoration, Coordinate across internal teams, Coordinate across multiple vendors, Coordinate across external service providers, Assess business impact, Classify incidents correctly, Provide clear communications to business stakeholders, Provide timely communications to business stakeholders, Provide consistent communications to business stakeholders, Provide clear communications to IT leadership, Provide timely communications to IT leadership, Provide consistent communications to IT leadership, Provide clear communications to executive management, Provide timely communications to executive management, Provide consistent communications to executive management, Lead Post Incident Reviews (PIRs), Facilitate Post Incident Reviews (PIRs), Lead Root Cause Analysis (RCA), Facilitate Root Cause Analysis (RCA), Review periodic metrics, Take action to enforce process and standards, Ensure continued process maturity, Produce Process Performance Reports, Extend support for Process audits, Extend support for Process assessments, Monitor effectiveness of ITSM tool, Ensure ITSM tool alignment to process execution, Collaborate with Problem teams, Collaborate with Change teams, Collaborate with Service Level teams, Collaborate with Service Operations teams, Reduce business impact, Conduct workshops to identify process deficiencies, Conduct workshops to assess process deficiencies, Conduct workshops to address process deficiencies, Ensure common understanding of process intention, Ensure common understanding of process operation, Ensure organization understands process guidelines, Ensure individual associates understand process guidelines, Ensure organization follows process guidelines, Ensure individual associates follow process guidelines", "teamCollaboration" : "Cross-functional technical teams; Internal teams; Multiple vendors; External service providers; Problem teams; Change teams; Service Level teams; Service Operations teams", "domainKnowledge" : "ITIL principles; SIAM principles; IT Service Management; ISO/IEC 20000; IT governance frameworks", "domainList" : [ "itil-principles", "siam-principles", "it-service-management", "iso-iec-20000", "it-governance-frameworks" ], "domainSpecificKnowledge" : [ "ITIL principles", "SIAM principles", "IT Service Management", "ISO/IEC 20000", "IT governance frameworks" ], "toolProficiency" : [ "ServiceNow", "BMC Remedy" ], "communicationSkills" : "Stakeholder communication; Executive communication; Business communication", "documentationSkills" : "Process performance reports", "problemSolvingSkills" : "Root Cause Analysis; Incident classification", "outcomesObjectives" : "Rapid service restoration; Continued process maturity; Reduce business impact", "qualificationsBasic" : "Bachelor’s degree in Information Technology, Computer Science, Engineering, or related discipline, ITIL v3/v4 Foundation certification, 4–6 years in Major Incident Management, IT Service Management, or IT Operations roles, Proven experience managing P1/P2 incidents in a complex, multi-vendor or SIAM-based environment, Hands-on experience leading incident bridges, Hands-on experience coordinating cross-functional technical teams, Hands-on experience driving rapid service restoration, Demonstrated ability to communicate effectively with business stakeholders, senior leadership, and executive management during high-impact incidents, Experience leading Post Incident Reviews (PIRs), Experience facilitating Root Cause Analysis (RCA) sessions, Understanding of ITIL processes, Experience preparing process performance reports, Experience reviewing KPIs/SLAs, Experience driving continual service improvement initiatives, Exposure to audit, compliance, and governance requirements within IT Service Management, Hands-on experience with ITSM tools", "qualificationsPreferred" : "Master's degree (MBA/MS in IT, Systems, or Operations Management), ITIL Managing Professional or Intermediate (Operational Support & Analysis) certification, SIAM Foundation/Professional certification, Additional certifications in IT Service Management, ISO/IEC 20000, or IT governance frameworks, Experience working in global delivery models, Experience working in cross-cultural environments", "remoteFriendly" : false, "rawDescription" : "MAJOR INCIDENT MANAGER Position Overview: As a member of Mercedes Benz SIAM team (Service Integration and Management), the SIAM Major Incident Manager (MIM) is responsible for the end-to-end management of Major Incidents across a multi-supplier IT ecosystem. The role ensures rapid service restoration, effective coordination across service providers, clear stakeholder communication, and continuous improvement of the Major Incident Management process in line with ITIL/SIAM principles. Responsibilities: Own and manage Major Incidents (P1/P2) from detection through resolution and service restoration. Act as the single point of coordination across internal teams, multiple vendors, and external service providers. Quickly assess business impact and classify incidents correctly.Provide clear, timely, and consistent communications to business stakeholders, IT leadership, and executive management. Lead or facilitate Post Incident Reviews (PIRs) / Root Cause Analysis (RCA). Responsible for reviewing periodic metrics and take action where necessary to enforce process and standards to ensure continued process maturity. Produce the Process Performance Reports and extending the Support for Process audits and assessments. Monitor the effectiveness of the IT Service Management tool and ensure it is aligned to the process execution.Collaborate with Problem, Change, Service Level, and Service Operations teams to reduce business impact. Conducts workshops as required to identify, assess and address process deficiencies, ensure common understanding of process intention and operation, and ensure organization and individual associates understand and follow process guidelines. Education: Bachelor’s degree in Information Technology, Computer Science, Engineering, or a related discipline. Master’s degree (MBA/MS in IT, Systems, or Operations Management) is an added advantage. ITIL v3/v4 Foundation certification (mandatory); ITIL Managing Professional or Intermediate (Operational Support & Analysis) preferred. SIAM Foundation/Professional certification is desirable. Additional certifications in IT Service Management, ISO/IEC 20000, or IT governance frameworks are a plus. Experience: 7–12 years of overall IT experience, with at least 4–6 years in Major Incident Management, IT Service Management, or IT Operations roles. Proven experience managing P1/P2 (critical) incidents in a complex, multi-vendor or SIAM-based environment. Strong hands-on experience in leading incident bridges, coordinating cross-functional technical teams, and driving rapid service restoration. Demonstrated ability to communicate effectively with business stakeholders, senior leadership, and executive management during high-impact incidents. Experience leading Post Incident Reviews (PIRs) and facilitating Root Cause Analysis (RCA) sessions. Strong understanding of ITIL processes, including Incident, Problem, Change, Service Level, and Configuration Management. Experience in preparing process performance reports, reviewing KPIs/SLAs, and driving continual service improvement initiatives. Exposure to audit, compliance, and governance requirements within IT Service Management. Hands-on experience with ITSM tools such as ServiceNow, BMC Remedy, or similar platforms. Experience working in global delivery models and cross-cultural environments is preferred. Mercedes-Benz Research and Development India Private Limited", "summaryDescription" : "Service Integration & Management - Major Incident Manager. Skills: Major Incident Management, IT Service Management, Process Improvement. Manage Major Incidents (P1/P2) from detection through resolution. Manage service restoration", "createdAt" : "2026-06-14T20:46:11.907", "lastUpdated" : "2026-06-15T21:15:31.770", "ingestTimestamp" : "2026-06-14T20:46:11.907", "mongoId" : "69ce5e3b9bc74574cb677a0e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Major Incident Management", "IT Service Management", "IT Operations", "Incident management", "Problem management", "Change management", "Service Level management", "Configuration management", "Process performance reporting", "KPI review", "SLA review", "Root Cause Analysis", "Post Incident Review", "Process Improvement", "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement", "ITIL principles", "SIAM principles", "ISO/IEC 20000", "IT governance frameworks", "ITIL v3/v4 Foundation", "ITIL Managing Professional", "ITIL Intermediate (Operational Support & Analysis)", "SIAM Foundation", "SIAM Professional", "ServiceNow", "BMC Remedy" ], "skillCount" : 32, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Senior", "dataQualityScore" : 0.6666667, "_score" : 400.23877, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "694ae6ce70f0b99d589b27dd", "title" : "Sr. Cloud Security Architect", "company" : "Hyundai Capital America", "location" : "United States-Texas-Plano", "locations" : [ "United States-Texas-Plano", "
Dallas, TX (HCA_DallasTX)
6100 W. Plano Parkway, Suite 2000
Suite 2000
Plano, 75093

" ], "timestamp" : "2026-06-15T06:59:07.829", "fingerprint" : "0ee2df7efadcb13fe21cf01235418393eb1d72cc119588ed2bdf8d18d1e04e72", "source" : "taleo", "applyUrl" : "https://hyundaicapital.taleo.net/careersection/ex/jobdetail.ftl?job=107963", "externalId" : "107963", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Plano", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite" } ], "locationText" : "Plano, Texas, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor", "experienceMinYears" : 8, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, OCI, GCP, M365, Salesforce, AI/ML, generative AI, IAM, encryption, PCI DSS, GDPR, Korean SOX, FFIEC, NYDFS", "professionalSkills" : [ "Experience in financial services with an understanding of financial threats (e.g., fraud, data breaches) and regulations (e.g., PCI DSS, Korean SOX, GDPR). Expertise in cloud security architecture or engineering roles designing secure cloud-native systems." ], "hardSkillsList" : [ "CISSP", "CCSP", "CISM", "TOGAF", "Microsoft Azure Security Engineer", "Microsoft 365 Security" ], "softSkillsList" : [ "strategic technical leader, subject matter expert" ], "hardSkills" : [ { "name" : "CISSP", "level" : "intermediate" }, { "name" : "CCSP", "level" : "intermediate" }, { "name" : "CISM", "level" : "intermediate" }, { "name" : "TOGAF", "level" : "intermediate" }, { "name" : "Microsoft Azure Security Engineer", "level" : "intermediate" }, { "name" : "Microsoft 365 Security", "level" : "intermediate" } ], "softSkills" : [ { "name" : "strategic technical leader, subject matter expert" } ], "majorSkills" : "Cloud Security Architecture, Zero Trust, Risk Assessment", "majorSkillsList" : [ "Cloud Security Architecture, Zero Trust, Risk Assessment" ], "coreResponsibilities" : "The Sr. Cloud Security Architect designs and implements secure cloud architecture across AWS, OCI, GCP, and other platforms, ensuring IaaS, PaaS, and SaaS solutions align with cybersecurity standards and Zero Trust principles. This role involves assessing and securing cloud environments, leading threat modeling, and providing guidance for security operations and incident response. The architect also collaborates with cross-functional teams to integrate security into digital transformation initiatives and ensures compliance with financial regulations.", "teamCollaboration" : "Partners with IT Infrastructure and IT Application teams, DevOps, IAM, DLP, Security Operations, Information Protection Governance, and business units to integrate security into digital transformation initiatives. Mentors junior architects and engineers, sharing best practices and fostering a culture of security awareness.", "toolProficiency" : [ "Microsoft 365, CSPM, CWPP, CIEM, SIEM, SOAR, Splunk SOAR, Palo Alto Cortex" ], "communicationSkills" : "executive communication; Knowledge Sharing", "documentationSkills" : "architecture diagrams; design documents; standards; runbooks", "continuousLearning" : "Researches and evaluates emerging cybersecurity technologies (e.g., AI-driven threat detection, PasswordLess authentication) to enhance architectural resilience and efficiency. Mentors junior architects and engineers, sharing best practices.", "innovationCreativity" : "Drives automation and infrastructure-as-code (IaC) practices. Designs automated security workflows using tools like SOAR platforms. Influences strategic decisions around cloud adoption, migration, and modernization with a security-first mindset.", "problemSolvingSkills" : "root cause analysis; risk assessments", "specialRequirements" : "Must be authorized to work in the US. Location: United States-Texas-Plano.", "outcomesObjectives" : "Ensures enterprise cloud environments are resilient, compliant, and aligned with cybersecurity standards. Integrates security into digital transformation initiatives. Develops metrics to validate architectural effectiveness and drive continuous improvement.", "qualificationsBasic" : "Minimum 8 years of progressive experience in cybersecurity with proven knowledge in cloud security architecture or engineering role designing secure cloud native systems. 3+ years of experience in financial services. Bachelor’s degree in computer science, Information Security, or related field. Hands-on experience architecting secure network, cloud, and SaaS environments in complex, regulated industries. Hands-on security testing experience in cloud platforms, especially AWS and M365.", "qualificationsPreferred" : "Master’s degree preferred. At least one of the following: CISSP, CCSP, CISM, TOGAF, or equivalent. Cloud security certifications such as: AWS Certified Security - Specialty, Microsoft Azure Security Engineer, Microsoft 365 Security, Google Professional Cloud Security Engineer, or other comparable certifications.", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Who We Are Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 2 million consumers and businesses. Embodying our commitment to grow, innovate, and diversify, we strive to reimagine the customer and dealer experience and launch innovative new products that broaden our market reach. We believe that success comes from within and are proud to support our team members through skill development and career advancement. Hyundai Capital America is an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce. We are a values-driven company dedicated to supporting both internal and external communities through volunteering, philanthropy, and the empowerment of our Employee Resource Groups. Together, we strive to be the leader in financing freedom of movement. We Take Care of Our People Along with competitive pay, as an employee of HCA, you are eligible for the following benefits: ·         Medical, Dental and Vision plans that include no-cost and low-cost plan options ·         Immediate 401(k) matching and vesting ·         Vehicle purchase and lease discounts plus monthly vehicle allowances ·         Paid Volunteer Time Off with company donation to a charity of your choice ·         Tuition reimbursement What to Expect The Sr. Cloud Security Architect is a strategic technical leader responsible for designing and implementing secure cloud architecture across multiple platforms and service models. This role ensures that enterprise cloud environments—including SaaS, PaaS, and IaaS—are resilient, compliant, and aligned with cybersecurity standards. The architect will work closely with the IT Infrastructure Platform team to integrate security into infrastructure services and cloud-native platforms, including securing the Microsoft 365 (M365) ecosystem. This role will champion the adoption of Zero Trust principles and industry best practices, working cross-functionally to elevate the organization’s cloud security posture. What You Will Do 1.       Cloud Security Architecture & Design: ·         Design Secure Cloud Infrastructure Environments: design and implement secure cloud architecture across AWS, OCI, GCP and other platforms. ·         Assess and Secure IaaS, PaaS, SaaS solutions: Identify cybersecurity risk and remediation activities to ensure our SaaS solutions such a Salesforce, M365, and other solutions are aligned with industry’s best practices to ensure the security of our data stored and processed within these services. ·         Secure AI Utilization : design and implement security controls for AI/ML workloads in cloud environments, including securing model training pipelines, protecting sensitive data, and mitigating risks associated with adversarial AI, model drift, and generative AI misuse. ·         Develop reference architectures and security patterns that align with Zero Trust principles. ·         Lead threat modeling and risk assessments for cloud and hybrid workloads. 2.       Cloud Security Engineering, Implementation and Operations Support: ·         Cloud Security Solution Management: manage and monitor our cloud native security solutions and monitoring tools to ensure optimal performance and visibility. ·         Provide Support and Guidance for Security Operations: Provide technical leadership and guidance to our Security ops teams and lead incident responses related to Cloud security events. ·         Review, monitor and Optimize: review current Cloud solution implementations, optimize cloud security utilization and improve efficiency and integration when possible. Create continuous monitoring of Cloud Security Compliance. ·         Collaborate with infrastructure and DevOps teams to implement security controls including IAM, encryption, segmentation, and monitoring. ·         Integrate cloud security tools (CSPM, CWPP, CIEM) into CI/CD pipelines and runtime environments. ·         Drive automation and infrastructure-as-code (IaC) practices using tools. ·         Define cloud security monitoring requirements and integrate with SIEM and SOAR platforms. ·         Support incident response and forensic investigations related to cloud and hybrid environments. ·         Conduct root cause analysis and recommend architectural improvements to prevent recurrence. 3.       Collaboration and Innovation: ·         Cross-Functional Collaboration: Partner with IT Infrastructure and IT Application teams, DevOps, IAM, DLP, Security Operations, Information Protection Governance and business units to integrate security into digital transformation initiatives, such as cloud migrations, fintech innovations, and core banking systems. ·         Technology Evaluation: Research and evaluate emerging cybersecurity technologies (e.g., AI-driven threat detection, PasswordLess authentication) to enhance architectural resilience and efficiency. ·         Automation and Orchestration: Design automated security workflows using tools like SOAR platforms (e.g., Splunk SOAR, Palo Alto Cortex) to improve incident response and operational efficiency. ·         Knowledge Sharing: Mentor junior architects and engineers, sharing best practices and fostering a culture of security awareness across the organization . ·         Act as a subject matter expert (SME) for cloud and hybrid security across the enterprise. ·         Influence strategic decisions around cloud adoption, migration, and modernization with a security-first mindset. 4.       Compliance and Regulatory Alignment: ·         Regulatory Compliance: Ensure cloud security architecture meets financial regulations (e.g., PCI DSS, GDPR, Korean SOX, FFIEC, NYDFS) through secure design, documentation, and audit-ready configurations. ·         Policy Development: Contribute to the development of cybersecurity policies and standards, ensuring architectural designs align with regulatory and organizational requirements. ·         Vendor Evaluation: Assess third-party vendors and Managed Security Service Providers (MSSPs) for compatibility with architectural designs and compliance needs ·         Promote and enforce industry best practices for cloud security architecture, operations, and governance. 5.       Documentation and Reporting: ·         Architecture Documentation: Create and maintain detailed architectural diagrams, design documents, standards and runbooks to support implementation, audits, and incident response. ·         Executive Communication: Present architectural designs, risk assessments, and recommendations to the Director of Cybersecurity, CISO, and senior leadership, articulating business impacts. ·         Metrics and Validation: Develop metrics to validate architectural effectiveness (e.g., threat detection coverage, compliance adherence) and drive continuous improvement. What You Will Bring ·         Minimum 8 years progressive experience in cybersecurity with proven knowledge in cloud security architecture or engineering role designing secure cloud native systems. ·         3+ years of experience in financial services, with a strong understanding of financial threats (e.g., fraud, data breaches) and regulations (e.g., PCI DSS, Korean SOX, GDPR). ·         Hands-on experience architecting secure network, cloud, and SaaS environments in complex, regulated industries. ·         Bachelor’s degree in computer science, Information Security, or related field; Master’s degree preferred ·         At least one of the following: CISSP, CCSP, CISM, TOGAF, or equivalent. ·         Hands-on security testing experience in cloud platforms, especially AWS and M365. ·         Cloud security certifications such as: o    AWS Certified Security - Specialty o    Microsoft Azure Security Engineer o    Microsoft 365 Security o    Google Professional Cloud Security Engineer o    Other comparable certifications. Technical Skills : ·         Technical expert with deep experience in financial services, a strategic mindset, and the ability to align cybersecurity architecture with business objectives. ·         Expertise in network security (e.g., NGFW, IDS/IPS, VPNs) and cloud security (AWS, Azure, Google Cloud, Oracle Cloud) ·         Proficiency in Microsoft 365 Security Tools : Microsoft Defender, Intune, Azure AD (Entra), ADFS ·         Knowledge of security frameworks such as NIST, ISO 27001, and COBIT. ·         Strong knowledge of Cloud Native Security solutions and monitoring technology – (AWS CloudTrail, SecurityHub, GuardDuty) ·         Experience with secure software development lifecycles (SDLC) and DevSecOps practices. ·         Familiarity with automation and scripting (e.g., Python, PowerShell, Terraform) for infrastructure-as-code and security orchestration. ·         Hands-on experience with cloud security posture management (CSPM) and workload protection platforms. ·         Proficiency in IAM frameworks (RBAC, MFA, PAM) and DLP technologies (data classification, policy enforcement). ·         Strong knowledge of SIEM (e.g., Splunk), SOAR, and threat intelligence platforms for architectural integration. ·         Deep experience in the design and implementation of robust security architectures for SaaS platforms, ensuring secure integration, data protection, and compliance with industry standards such as SOC 2, ISO 27001, and others. ·         Experience designing and implementing security controls for AI/ML workloads in cloud environments. ·         Knowledge of financial systems (e.g., core banking platforms, payment gateways) and their security requirements. Soft Skills : ·         Strong problem-solving skills to address complex architectural challenges. ·         Excellent communication skills to articulate technical concepts to technical and non-technical stakeholders. ·         Strategic thinker with the ability to align cybersecurity architectures with business and regulatory goals. Preferred ·         Experience with AI-driven cybersecurity tools (e.g., ReliaQuest GreyMatter, Rapid7, etc.) for threat detection and response. ·         Familiarity with zero-trust architectures and emerging technologies, such as SASE or decentralized identity. ·         Knowledge of data encryption, tokenization, and secure API design for financial applications. ·         Experience working with MSSPs to integrate external security services. ·         Understanding of threat modeling frameworks. Work Environment Employees in this class are subject to extended periods of sitting, standing, and walking, vision to monitor and moderate noise levels. Work is performed in an at home and office environment. The posted salary range for this job takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; geographic location, and other business and organizational needs. Successful candidates may be hired anywhere in the salary range based on these factors. It is uncommon to hire candidates at or near the top of the range. California Privacy Notice This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here . This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used, and whether that information is sold or shared, so that you can exercise meaningful control over our use of your personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (“CCPA”). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at Privacy2@hcs.com . United States-Texas-Plano", "summaryDescription" : "Sr. Cloud Security Architect at Hyundai Capital America. Skills: Cloud Security Architecture, Zero Trust, Risk Assessment. The Sr. Cloud Security Architect designs and implements secure cloud architecture across AWS, OCI, GCP, and other platforms, ensuring IaaS, PaaS, and SaaS solutions align with cybersecurity standards and Zero Trust principles. This role involves assessing and securing cloud environments, leading threat modeling, and providing guidance for security operations and incident res", "createdAt" : "2026-06-14T18:49:07.143", "lastUpdated" : "2026-06-15T06:59:07.829", "ingestTimestamp" : "2026-06-14T18:49:07.143", "mongoId" : "694ae6ce70f0b99d589b27dd", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "hasSalary" : false, "allSkills" : [ "CISSP", "CCSP", "CISM", "TOGAF", "Microsoft Azure Security Engineer", "Microsoft 365 Security", "strategic technical leader, subject matter expert", "Cloud Security Architecture, Zero Trust, Risk Assessment", "Experience in financial services with an understanding of financial threats (e.g., fraud, data breaches) and regulations (e.g., PCI DSS, Korean SOX, GDPR). Expertise in cloud security architecture or engineering roles designing secure cloud-native systems.", "Microsoft 365, CSPM, CWPP, CIEM, SIEM, SOAR, Splunk SOAR, Palo Alto Cortex" ], "skillCount" : 10, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 399.77228, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a30550bf292fd229cf1d871", "title" : "Principal Cloud Architect", "company" : "Devoteam", "industry" : "Information Technology And Services", "salary" : { "min" : 1700000.0, "max" : 2500000.0, "currency" : "CZK", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Lead Principal Cloud Architect in Prague, Czech Republic, adjusted for the consulting industry and senior experience level." }, "location" : "Praha 1, Hlavní město Praha, CZ", "locations" : [ "Praha 1", "Hlavní město Praha", "CZ" ], "certifications" : [ "Google Professional Cloud Architect certification" ], "timestamp" : "2026-06-16T07:41:39.255", "fingerprint" : "c4c1c5bf944aa7f3bd2510f2f93486e1994031bffffddbed00126e8bd4635eb1", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Devoteam/744000132166792-principal-cloud-architect", "externalId" : "744000132166792", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Praha", "state" : "Hlavní město Praha", "country" : "Czech Republic", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "50.1029026,14.3946353" } ], "locationText" : "Praha, Hlavní město Praha, Czech Republic", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "Google Cloud, AWS, Azure, Docker, Kubernetes, GKE, Terraform", "professionalSkills" : [ "Cloud strategy", "Solution design", "Technical leadership", "Presales activities" ], "hardSkillsList" : [ "Infrastructure engineering", "Cloud consulting", "CI/CD pipelines", "Infrastructure automation", "Compute", "Storage", "Networking", "Identity management", "VPC design", "Hybrid connectivity", "Security controls" ], "hardSkills" : [ { "name" : "Infrastructure engineering", "level" : "intermediate" }, { "name" : "Cloud consulting", "level" : "intermediate" }, { "name" : "CI/CD pipelines", "level" : "intermediate" }, { "name" : "Infrastructure automation", "level" : "intermediate" }, { "name" : "Compute", "level" : "intermediate" }, { "name" : "Storage", "level" : "intermediate" }, { "name" : "Networking", "level" : "intermediate" }, { "name" : "Identity management", "level" : "intermediate" }, { "name" : "VPC design", "level" : "intermediate" }, { "name" : "Hybrid connectivity", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" } ], "majorSkills" : "Cloud architecture, Google Cloud, DevOps practices, Container technologies", "majorSkillsList" : [ "Cloud architecture", "Google Cloud", "DevOps practices", "Container technologies" ], "coreResponsibilities" : "Design end-to-end Google Cloud migrations, Own end-to-end Google Cloud architectures, Guide team members, Mentor team members, Serve as SME, Contribute knowledge, Manage presentations, Direct communication with clients, Provide technical leadership, Create architecture documentation, Create solution designs, Ensure solutions meet security requirements, Ensure solutions meet compliance requirements, Ensure solutions meet availability requirements, Ensure solutions meet cost-optimization requirements", "teamCollaboration" : "Technical Lead for Cloud Architects; Technical Lead for Cloud Engineers; Bridging gap between customers; Bridging gap between delivery teams", "domainKnowledge" : "Cloud infrastructure; Cloud networking; Data warehouse migrations", "domainList" : [ "cloud-infrastructure", "cloud-networking", "data-warehouse-migrations" ], "domainSpecificKnowledge" : [ "Cloud infrastructure", "Cloud networking", "Data warehouse migrations" ], "toolProficiency" : [ "Terraform" ], "communicationSkills" : "Present architecture solutions; Technical documentation", "documentationSkills" : "Architecture documentation; Solution designs", "continuousLearning" : "Career Management; Training; Certifications; Udemy for business account", "specialRequirements" : "Foreign business trips", "qualificationsBasic" : "5+ years of experience in cloud architecture, Experience designing solutions on Google Cloud, Experience leading enterprise workload migrations, Experience implementing DevOps practices, Understanding of cloud infrastructure, Experience with container technologies, Experience implementing Infrastructure-as-Code, Understanding of cloud networking, Excellent communication skills, Fluent English", "qualificationsPreferred" : "Google Professional Cloud Architect certification, Experience with multi-cloud architectures, Experience with hybrid architectures, Hands-on experience leading large data warehouse migrations, Hands-on experience leading infrastructure migrations", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Tech native for over 30 years, Devoteam guides businesses through sustainable digital transformation to deliver value. With over 11,000 tech architects in more than 25 countries across Europe, the Middle East, and Africa, Devoteam is committed to using technology to serve people. Devoteam has been a ServiceNow Elite Partner since 2019. In 2026, it was recognised as ServiceNow Partner of the Year for the fourth consecutive year. At Devoteam, we deliver innovative technology consulting for leading organizations across Europe and beyond. As a Google Cloud Premier Partner, we support our clients in their digital transformation journeys by designing and implementing secure, scalable, and high-performance cloud solutions. We are expanding our Cloud & Data team and are looking for a Principal Cloud Architect to join us and lead the design of complex cloud architectures for enterprise clients across various industries. Your main duties and responsibilities: As a Principal cloud Architect you will act as a trusted technical advisor for our customers, shaping cloud strategies and translating business requirements into robust Google Cloud solutions. You will also serve as a Technical Lead for your fellow Cloud Architects and Cloud Engineers, providing hands-on expertise to team members and clients alike. Your responsibilities will include: * Design and own end-to-end Google Cloud migrations and architectures * Guide and mentor team members, serving as an SME and knowledge contributor to the wider global Google Cloud practice * Manage presentations and direct communication with clients, bridging the gap between customers and delivery teams * Provide technical leadership during presales activities, workshops, and client presentations. * Create detailed architecture documentation and solution designs. * Ensure solutions meet security, compliance, availability, and cost-optimization requirements. ## Qualifications Must be * Bachelor’s degree in Computer Science, Information Technology, or related field. * 5+ years of experience in cloud architecture, infrastructure engineering, or cloud consulting roles. * Strong experience designing solutions on Google Cloud, AWS, or Azure. * Experience leading enterprise workload migrations to public cloud environments. * Experience implementing DevOps practices including CI/CD pipelines and infrastructure automation. * Strong understanding of cloud infrastructure including compute, storage, networking, and identity management. * Experience with container technologies such as Docker and Kubernetes (GKE preferred). * Experience implementing Infrastructure-as-Code using Terraform or similar tools. * Strong understanding of cloud networking including VPC design, hybrid connectivity, and security controls. * Excellent communication skills and ability to present architecture solutions to technical and business stakeholders. * Fluent English. You will be a great fit for this role if you have… * Google Professional Cloud Architect certification, or equivalent * Experience with multi-cloud and hybrid architectures. * Hands-on experience leading large data warehouse and infrastructure migrations between on-prem and Cloud(s) ## Additional Information What will you get apart from the salary? * 5 weeks of vacation per year (= 1 week extra) * 4 My Days per year * Hybrid office * Flexible working hours * Career Management, training and certifications in the best breed of technologies - focused on technical skills (ServiceNow, Google), Project Management methodology etc., including Udemy for business account. * Meal allowance up to 28.000 CZK/year (123,90 CZK/day) * Cafeteria 1000 CZK/month (MultiSport Card available) * Phone tariff (unlimited calls, texts messages within the EU, 20GB of Internet) * Employee Referral Program * Sabbatical leave * Repurchase of hardware Moreover, we offer: * Foreign business trips * Above standard working equipment * Company Mobile Phone (selection from Android/iPhone) * Company Laptop (Windows/macOS) * Coffee, tea, snacks and breakfasts in the office * Company events and teambuildings * Gifts for work anniversaries, promotion or childbirth * Friendly and open culture And last but not least, you can rely on: * Transparent framework for career growth, reinforced by annual performance evaluations * Trust and autonomy, with no micro-management * Learning from senior colleagues and opportunities to collaborate with professionals from various industries * Opportunities to attend conferences to keep skills up-to-date * Working on a variety of projects for a broader range of experience * Adoption and utilization of evolving IT technologies", "summaryDescription" : "Principal Cloud Architect at Devoteam. Skills: Cloud architecture, Google Cloud, DevOps practices, Container technologies. Design end-to-end Google Cloud migrations. Own end-to-end Google Cloud architectures", "postedDate" : "2026-06-15T10:54:19.000", "createdAt" : "2026-06-15T23:38:37.056", "lastUpdated" : "2026-06-16T07:41:39.255", "ingestTimestamp" : "2026-06-15T23:38:37.056", "mongoId" : "6a30550bf292fd229cf1d871", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Infrastructure engineering", "Cloud consulting", "CI/CD pipelines", "Infrastructure automation", "Compute", "Storage", "Networking", "Identity management", "VPC design", "Hybrid connectivity", "Security controls", "Cloud architecture", "Google Cloud", "DevOps practices", "Container technologies", "Cloud strategy", "Solution design", "Technical leadership", "Presales activities", "Cloud infrastructure", "Cloud networking", "Data warehouse migrations", "Google Professional Cloud Architect certification", "Terraform" ], "skillCount" : 24, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 1.0, "_score" : 398.5145, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Consulting", "llmIndustryConfidence" : 0.95 }, { "id" : "6a30574cf292fd229cf3777e", "title" : "Senior Cloud Engineer", "company" : "LVT", "salary" : { "min" : 131400.0, "max" : 176400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "American Fork, Utah, United States", "locations" : [ "American Fork", "Utah", "United States" ], "timestamp" : "2026-06-16T07:21:48.526", "fingerprint" : "0f0ad89a0f595535973b06b55b842e5b901b597c8e4906e688f3934d3c3fe44d", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/liveviewtechnologiesinc/jobs/5262884008", "externalId" : "5262884008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "American Fork", "state" : "Utah", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "40.3768064,-111.7959146" } ], "locationText" : "American Fork, Utah, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "ABOUT LVT LVT is redefining how businesses operate in the physical world, moving beyond traditional security solutions to deliver AI-driven, actionable intelligence that makes sites smarter, safer, and more secure. Since pioneering our first mobile, solar-powered units, our commitment to scrappy, hands-on innovation has made us an established leader and one of the fastest-growing companies in intelligent site technology. We are building the next generation of solutions—from our physical units in the field to a powerful Agentic AI platform—that allows our customers to gain unprecedented visibility and control over safety, compliance, and operations. This is your chance to join a cutting-edge team that isn't just watching the world change, but actively building the technology that is changing it. We’re a team that’s focused on growth and innovation, and we’re proud that our crew, products, and leadership are being recognized for it. A Top-Tier Growth Company: Named one of the Financial Times’ Fastest Growing Companies 2025 and #10 on the Inc. 5000 Rocky Mountain Regional list for 2025. Innovative Leadership: Our CEO, Ryan Porter, was named an EY Entrepreneur of the Year 2025, and our CTO, Steve Lindsey, was inducted into the Silicon Slopes CTO Hall of Fame in 2024. Product & Software Excellence: We were named one of The Software Report’s Top 100 Software Companies of 2023 and are a winner of the Security Today Govies Award for 2025. ABOUT THIS ROLE As a Senior Cloud Engineer at LVT, you will be a primary architect of the infrastructure that powers our global fleet of intelligent units and our sophisticated Agentic AI platform. We are looking for a high-level individual contributor who thrives on building elegant, automated systems rather than just maintaining them. You will bridge the gap between software and physical hardware, ensuring our AWS environment is scalable, secure, and resilient. If you are passionate about GitOps, complex networking, and \"infrastructure as code\" as a standard, you will find a home here. This role is based in-office out of our Headquarters in American Fork, Utah. ROLE RESPONSIBILITIES Architect and Implement scalable, secure, and highly available infrastructure within AWS to support our rapidly expanding AI and IoT ecosystems. Drive Automation by developing and maintaining robust Infrastructure as Code (IaC) using Terraform, reducing manual overhead and ensuring environment consistency. Orchestrate Containerized Workloads using Kubernetes, managing cluster health, scaling, and performance optimization. Develop CI/CD Pipelines via GitHub Actions and ArgoCD to enable seamless, automated deployments across multiple environments. Engineer Complex Networking Solutions to ensure secure, low-latency communication between our cloud infrastructure and physical units in the field. Build Internal Tooling and custom tooling to empower the broader engineering team and streamline operational workflows. Enhance Observability by implementing monitoring, logging, and alerting frameworks that provide deep visibility into system health. Lead Technical Design Reviews and provide mentorship to junior team members, acting as a subject matter expert on cloud-native best practices. OUR IDEAL CANDIDATE Cloud Expert: You are a senior-level engineer with experience engineering complex environments within AWS and hold a deep understanding of its core services. Ideally you also have some experience in Azure and other cloud providers as well. Kubernetes Veteran: You possess hands-on experience managing production Kubernetes clusters and understand the nuances of container orchestration. Automation Enthusiast: You are an expert with Terraform and believe that if a task is done twice, it should be automated. GitOps Practitioner: You have a proven track record of using GitHub Actions and ArgoCD to manage sophisticated deployment lifecycles. Network Architect: You have a strong grasp of advanced networking concepts, including VPCs, VPNs, routing, and security protocols. Tool Builder: You are proficient in at least one scripting or programming language (e.g., Python, Go, or Bash) for creating custom automation tools. Problem Solver: You possess a \"scrappy\" innovative mindset, capable of troubleshooting complex distributed systems under pressure. Collaborator: You communicate technical concepts clearly to both technical and non-technical stakeholders, fostering a culture of transparency. COMPENSATION The beginning annual salary range for this role is $131,400.00 - $176,400.00 USD and is determined by location, job-related experience, and education/training. Your total earning potential is amplified by a bonus structure tied to meeting goals, and you will become an owner from day one through our employee equity program. BENEFITS We believe you do your best work when your whole life is supported. We invest in our crew’s health, families, and financial futures with a benefits package designed to support you inside and outside the office. Full-time benefits include, but not limited to: Comprehensive health, dental and vision coverage, retirement benefits (401k match up to 4%), and flexible PTO. LVT IS PROUD TO BE AN EQUAL OPPORTUNITY EMPLOYER. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status. All candidates must pass a drug screening and background check upon employment. Some roles may also require passing a federal background check and fingerprinting. Must be authorized to work in the U. S. If reasonable accommodation is needed to participate in the job application or interview process, and/or to perform essential job functions, please reach out to your recruiter.", "summaryDescription" : "Senior Cloud Engineer at LVT", "postedDate" : "2026-06-15T23:24:55.443", "createdAt" : "2026-06-15T23:24:55.443", "lastUpdated" : "2026-06-16T07:21:48.526", "ingestTimestamp" : "2026-06-15T23:24:55.443", "mongoId" : "6a30574cf292fd229cf3777e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 131400, "salaryAnnualMax" : 176400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 396.3152, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a3064e7f292fd229cfa39d0", "title" : "Product Manager - Fraud Detection & Operational Intelligence", "company" : "Block Labs", "industry" : "Product", "salary" : { "min" : 65000.0, "max" : 95000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Product Manager in the Technology industry in Portugal, adjusted for company size and specific role focus." }, "location" : "Portugal", "locations" : [ "Portugal", "Spain", "Malta" ], "timestamp" : "2026-06-16T08:46:06.518", "fingerprint" : "c9bbeb494e0be8ebc1bcd94fa6354544c0cde0c2d6510546cfac8079a242db3a", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/block-labs/fe9ba871-f6ed-43eb-af1a-13f6de19295b/application", "externalId" : "fe9ba871-f6ed-43eb-af1a-13f6de19295b", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Portugal", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Portugal", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AI", "professionalSkills" : [ "Product strategy", "Roadmap development", "User story creation", "Cross-functional collaboration", "Risk management", "Compliance", "Payments risk", "Transaction monitoring", "Decisioning", "Case management", "Product ownership", "System design", "Discovery", "Requirements definition", "Prioritization", "Delivery", "Stakeholder management", "Iteration", "Data analysis", "Root-cause analysis" ], "hardSkillsList" : [ "Fraud detection", "Operational intelligence" ], "hardSkills" : [ { "name" : "Fraud detection", "level" : "intermediate" }, { "name" : "Operational intelligence", "level" : "intermediate" } ], "majorSkills" : "Fraud detection, Risk management, Product management", "majorSkillsList" : [ "Fraud detection", "Risk management", "Product management" ], "coreResponsibilities" : "Own product lifecycle of Shield and Insights, Own vision, roadmap, discovery, prioritization, requirements, iteration, Improve Shield performance, Improve Insights performance, Partner with cross-functional squads, Ensure alignment and accountability, Run discovery with operators and stakeholders, Define and maintain product artifacts, Translate requirements into product requirements, Shape Shield's risk decisioning capabilities, Shape Insights' operator intelligence capabilities, Partner with data and AI Technical Product Manager, Deliver clear data and AI requirements, Use data actively and critically, Engage stakeholders with clarity and intent", "teamCollaboration" : "Cross-functional squads; Design, dev, QA, delivery teams", "projectManagementSkills" : [ "Roadmap planning", "Prioritization", "Discovery", "Requirements definition" ], "domainKnowledge" : "Web3; Artificial Intelligence; iGaming; Fraud detection; Risk management; Compliance; AML; KYC; Payments risk; Transaction monitoring; Decisioning; Case management; Casino platform; Sportsbook platform; Gambling platform; Wallet risk; Identity risk; Device intelligence; Payment fraud; Chargebacks; Withdrawal risk; Rules engines; Fraud review tools; Compliance tooling; Case management systems; Bonus abuse; Multi-accounting; Gameplay risk; Operator back-office workflows; Dashboards; Reports; Alerts; Anomaly detection; Operator intelligence; B2B; SaaS; Platform; White-label environments; AI-assisted analysis; AI-assisted decision-support", "domainList" : [ "web3", "artificial-intelligence", "igaming", "fraud-detection", "risk-management", "compliance", "aml", "kyc", "payments-risk", "transaction-monitoring", "decisioning", "case-management", "casino-platform", "sportsbook-platform", "gambling-platform", "wallet-risk", "identity-risk", "device-intelligence", "payment-fraud", "chargebacks", "withdrawal-risk", "rules-engines", "fraud-review-tools", "compliance-tooling", "case-management-systems", "bonus-abuse", "multi-accounting", "gameplay-risk", "operator-back-office-workflows", "dashboards", "reports", "alerts", "anomaly-detection", "operator-intelligence", "b2b", "saas", "platform", "white-label-environments", "ai-assisted-analysis", "ai-assisted-decision-support" ], "domainSpecificKnowledge" : [ "Web3", "Artificial Intelligence", "iGaming", "Fraud detection", "Risk management", "Compliance", "AML", "KYC", "Payments risk", "Transaction monitoring", "Decisioning", "Case management", "Casino platform", "Sportsbook platform", "Gambling platform", "Wallet risk", "Identity risk", "Device intelligence", "Payment fraud", "Chargebacks", "Withdrawal risk", "Rules engines", "Fraud review tools", "Compliance tooling", "Case management systems", "Bonus abuse", "Multi-accounting", "Gameplay risk", "Operator back-office workflows", "Dashboards", "Reports", "Alerts", "Anomaly detection", "Operator intelligence", "B2B", "SaaS", "Platform", "White-label environments", "AI-assisted analysis", "AI-assisted decision-support" ], "toolProficiency" : [ "Chainalysis", "TRM", "SEON", "FingerprintJS", "ThreatMetrix", "Sumsub", "Onfido" ], "communicationSkills" : "Gathering input; Retaining ownership", "documentationSkills" : "Product artifacts", "problemSolvingSkills" : "Root-cause analysis; Data-driven decision making", "outcomesObjectives" : "Faster case review; Better review quality; More consistent decisions; Reduced false positives; Clearer reason codes; Stronger auditability; Alert relevance; Report usefulness; Root-cause clarity; Faster understanding of performance changes", "qualificationsBasic" : "3+ years in Product Management, Experience owning fraud/risk/compliance/AML/payments risk/transaction monitoring/decisioning/case management products, Experience with complex backend logic, data dependencies, rules, scoring, workflows, or operational decision-making, Product Management fundamentals, Data fluency, Comfort operating in compliance/regulatory/financial/high-trust constraints", "qualificationsPreferred" : "IGaming/casino/sportsbook/gambling platform experience, Experience with AML/KYT, wallet risk, KYC, identity risk, device intelligence, payment fraud, chargebacks, or withdrawal risk, Experience with rules engines, risk scoring, fraud review tools, compliance tooling, or case management systems, Experience with third-party risk/fraud providers, Exposure to bonus abuse, multi-accounting, gameplay risk, shared wallet/payment method detection, account velocity, or operator back-office workflows, Experience building dashboards, reports, alerts, anomaly detection, or operator intelligence products, Experience in B2B, SaaS, platform, or white-label environments, Practical AI literacy", "remoteFriendly" : true, "rawDescription" : "ABOUT BLOCK LABS Block Labs is a premier technology studio operating at the bleeding edge of Web3, Artificial Intelligence, and iGaming. We don't just ship features; we engineer high-scale, production-grade platforms that power the next generation of digital products. We are a collective of senior engineers, product strategists, and builders who refuse to compromise on architecture. Whether we are designing autonomous multi-agent AI systems, building decentralized financial infrastructure, or architecting high-frequency iGaming platforms, our standard is excellence. We move fast, but we build for the long term. If you are looking to work alongside a team that values deep technical expertise, thoughtful system design, and product ownership, Block Labs is where you belong. THE ROLE We are hiring a senior, strategically minded Product Manager to act as a mini-business owner, with end-to-end ownership of Shield and Insights: two key modules within a soon-to-launch, next-generation white-label casino platform. Shield: helps operators prevent fraud and abuse. It is our unified risk and decisioning layer. It brings together third-party risk tools such as Chainalysis, TRM, SEON, PSP fraud tools, and KYC providers, alongside internal behavioural data, into a single layer to provide risk scoring, review workflows, case management, reason codes, and auditability. Insights: helps operators understand performance changes across the business. It is our operator intelligence layer moving from “what happened?” to “why did this happen?” and “what should we look at next?” through focused dashboards, reports, alerts, root-cause analysis, and human-language queries. This role is weighted heavily toward Shield. We are looking for a Product Manager with strong product fundamentals and direct experience in fraud, risk, compliance, payments risk, transaction monitoring, decisioning, or case management products. iGaming experience is highly valuable, but fraud/risk product experience is the priority. Your focus is the product: operator workflows, fraud/risk logic, decision experience, auditability, requirements, prioritisation, and commercial usefulness. This is a hands-on role for someone who can turn complex operational workflows into clear, scalable product systems. WHAT YOU’LL OWN - Full product lifecycle of Shield and Insights, owning vision, roadmap, discovery, prioritisation, requirements, and iteration. - Shield Performance: faster case review, better review quality, more consistent decisions, reduced false positives, clearer reason codes, and stronger auditability. - Insights Performance: alert relevance, report usefulness, root-cause clarity, and faster understanding of performance changes. - Cross-functional squads including design, dev, QA, and delivery - ensuring alignment, unblocking delivery, and holding the team accountable to outcomes. WHAT YOU’LL BE DOING This is a hands-on role. You will: - Run discovery with operators, fraud/risk teams, compliance stakeholders, analysts, casino teams, payment teams, and internal experts to understand real operational workflows. - Define and maintain product artefacts covering problem statements, user journeys, workflows, success metrics, constraints, assumptions, trade-offs, and decisions. - Translate fraud, AML, payments, gameplay, bonus abuse, and operator intelligence requirements into clear product requirements for design and engineering. - Shape Shield’s risk decisioning capabilities, including risk scores, rule logic, case queues, review flows, reason codes, audit logs, operator permissions, and escalation paths. - Shape Insights’ operator intelligence capabilities, including monitoring views, KPI definitions, report formats, alert logic, baseline comparisons, and AI-assisted explanations. - Partner closely with the data and AI Technical Product Manager, delivering clear data and AI requirements so Shield and Insights get the technical support they need. - Use data actively and critically, ensuring tracking reflects reality and turning operational insights into concrete product decisions. - Engage stakeholders with clarity and intent, gathering input while retaining ownership of prioritisation and trade-offs. EXPERIENCE WE’RE LOOKING FOR We don’t expect a unicorn - but we do expect strong Product Management fundamentals and directly relevant experience. Required: - 3+ years in a Product Management role. - Experience owning or significantly contributing to fraud, risk, compliance, AML, payments risk, transaction monitoring, decisioning, or case management products. - Experience working on products with complex backend logic, data dependencies, rules, scoring, workflows, or operational decision-making. - Strong understanding of Product Management fundamentals, including discovery, requirements definition, prioritisation, delivery, stakeholder management, and iteration. - Strong data fluency and the ability to turn operational insight into clear product decisions. - Comfort operating in environments with compliance, regulatory, financial, or high-trust constraints. Useful: - iGaming, casino, sportsbook, or gambling platform experience. - Experience with AML/KYT, wallet risk, KYC, identity risk, device intelligence, payment fraud, chargebacks, or withdrawal risk. - Experience with rules engines, risk scoring, fraud review tools, compliance tooling, or case management systems. - Experience with third-party risk or fraud providers such as Chainalysis, TRM, Elliptic, SEON, FingerprintJS, ThreatMetrix, Sumsub, Onfido, PSPs, or onramp providers. - Exposure to bonus abuse, multi-accounting, gameplay risk, shared wallet/payment method detection, account velocity, or operator back-office workflows. - Experience building dashboards, reports, alerts, anomaly detection, or operator intelligence products. - Experience in B2B, SaaS, platform, or white-label environments. - Practical AI literacy, especially around AI-assisted analysis, summaries, alerts, or decision-support workflows. What kind of culture can I expect? Mature, mission-driven, and low-ego. We value clarity over noise, outcomes over theatrics, and pace without chaos. If you’re one of the smartest minds in your craft and want to build with other experts, you’ll feel at home here.", "summaryDescription" : "Product Manager - Fraud Detection & Operational Intelligence at Block Labs. Skills: Fraud detection, Risk management, Product management. Own product lifecycle of Shield and Insights. Own vision, roadmap, discovery, prioritization, requirements, iteration", "createdAt" : "2026-06-16T00:24:10.542", "lastUpdated" : "2026-06-16T08:46:06.518", "ingestTimestamp" : "2026-06-16T00:24:10.542", "mongoId" : "6a3064e7f292fd229cfa39d0", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Fraud detection", "Operational intelligence", "Risk management", "Product management", "Product strategy", "Roadmap development", "User story creation", "Cross-functional collaboration", "Compliance", "Payments risk", "Transaction monitoring", "Decisioning", "Case management", "Product ownership", "System design", "Discovery", "Requirements definition", "Prioritization", "Delivery", "Stakeholder management", "Iteration", "Data analysis", "Root-cause analysis", "Roadmap planning", "Web3", "Artificial Intelligence", "iGaming", "AML", "KYC", "Casino platform", "Sportsbook platform", "Gambling platform", "Wallet risk", "Identity risk", "Device intelligence", "Payment fraud", "Chargebacks", "Withdrawal risk", "Rules engines", "Fraud review tools", "Compliance tooling", "Case management systems", "Bonus abuse", "Multi-accounting", "Gameplay risk", "Operator back-office workflows", "Dashboards", "Reports", "Alerts", "Anomaly detection", "Operator intelligence", "B2B", "SaaS", "Platform", "White-label environments", "AI-assisted analysis", "AI-assisted decision-support", "Chainalysis", "TRM", "SEON", "FingerprintJS", "ThreatMetrix", "Sumsub", "Onfido" ], "skillCount" : 64, "jobCategory" : "product", "jobSubcategory" : "product_management", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 394.54544, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a210e3374d8ee00a0af6357", "title" : "Practice Customer Engineer II, Cloud AI, Google Cloud", "company" : "Google", "industry" : "Technology", "salary" : { "min" : 155000.0, "max" : 230000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Practice Customer Engineer II in Singapore, adjusted for Google's size and the Technology industry." }, "location" : "[Singapore, [Singapore], null, null, null, SG]", "locations" : [ "[Singapore, [Singapore], null, null, null, SG]" ], "timestamp" : "2026-06-16T14:35:00.282", "fingerprint" : "a532eecb7cf8a6447eec25e6834faa8fbe31eec218694db12b16523b12e74e90", "source" : "google", "language" : "en", "externalId" : "92705249835262662", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Cloud AI, Google Cloud", "majorSkills" : "Cloud AI", "majorSkillsList" : [ "Cloud AI" ], "domainKnowledge" : "AI; Machine Learning", "domainList" : [ "ai", "machine-learning" ], "domainSpecificKnowledge" : [ "AI", "Machine Learning" ], "remoteFriendly" : false, "summaryDescription" : "Practice Customer Engineer II, Cloud AI, Google Cloud at Google. Skills: Cloud AI", "postedDate" : "2026-06-16T01:48:03.989", "createdAt" : "2026-06-16T01:48:03.989", "lastUpdated" : "2026-06-16T14:35:00.282", "ingestTimestamp" : "2026-06-16T01:48:03.989", "mongoId" : "6a210e3374d8ee00a0af6357", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ "Cloud AI", "AI", "Machine Learning" ], "skillCount" : 3, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 388.37018, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb01a74d8ee00a09d8d04", "title" : "Oracle Cloud Architect - System Dynamics", "industry" : "Portfolio Companies", "salary" : { "min" : 145000.0, "max" : 195000.0, "currency" : "CAD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Oracle Cloud Architect in Canada, adjusted for the technology industry and onsite work mode." }, "location" : "Canada", "locations" : [ "Canada" ], "timestamp" : "2026-06-16T02:51:30.627", "fingerprint" : "a93b1bfd13b7c5d295dbe3eca27aacd1be8a9c95112ee6a647394d71a907ea5a", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/beaconsoftware/a2e46dd3-02e6-4bc4-8745-d3d286311ce6/application", "externalId" : "a2e46dd3-02e6-4bc4-8745-d3d286311ce6", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Canada", "continent" : "na", "workMode" : "onsite" } ], "locationText" : "Canada", "employmentType" : "FULL_TIME", "experienceMinYears" : 7, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Oracle 19c, Multitenancy, Oracle APEX, Oracle Forms, Oracle Reports, Oracle Linux, Windows Server, OCI, VCNs, Load Balancers, Cloud Storage, Networking protocols, IPSec VPN, PL/SQL", "professionalSkills" : [ "System design", "Infrastructure engineering", "Cloud architecture", "Secure networking", "Database administration", "Performance tuning", "Automation", "Standardization" ], "hardSkillsList" : [ "Multi-tenant architecture", "Containerized databases", "Database patching", "PL/SQL optimization", "Cloud migration", "Network engineering", "Firewall management", "VPN tunnels", "Disaster recovery", "Oracle native replication" ], "softSkillsList" : [ "Honesty", "Hunger" ], "hardSkills" : [ { "name" : "Multi-tenant architecture", "level" : "intermediate" }, { "name" : "Containerized databases", "level" : "intermediate" }, { "name" : "Database patching", "level" : "intermediate" }, { "name" : "PL/SQL optimization", "level" : "intermediate" }, { "name" : "Cloud migration", "level" : "intermediate" }, { "name" : "Network engineering", "level" : "intermediate" }, { "name" : "Firewall management", "level" : "intermediate" }, { "name" : "VPN tunnels", "level" : "intermediate" }, { "name" : "Disaster recovery", "level" : "intermediate" }, { "name" : "Oracle native replication", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Honesty" }, { "name" : "Hunger" } ], "majorSkills" : "Oracle Cloud Infrastructure, Oracle Database Administration, Systems Engineering, Network Engineering", "majorSkillsList" : [ "Oracle Cloud Infrastructure", "Oracle Database Administration", "Systems Engineering", "Network Engineering" ], "coreResponsibilities" : "Manage Multi-tenant environment, Optimize Multi-tenant environment, Use containerized databases, Act as authority for Oracle 19c, Patch Oracle 19c, Tune Oracle 19c performance, Optimize PL/SQL, Drive client migrations to OCI, Ensure uniform Oracle Linux versions, Ensure uniform application server versions, Manage internal firewalls, Manage secure client connectivity, Configure VPN tunnels, Configure IPSec, Maintain high availability in-house servers, Scale cloud infrastructure, Own Disaster Recovery strategy, Leverage Oracle replication technologies, Implement software customizations, Implement customer interfaces", "teamCollaboration" : "Collaborate with customers", "domainKnowledge" : "Cloud-native architecture; ERP systems", "domainList" : [ "cloud-native-architecture", "erp-systems" ], "domainSpecificKnowledge" : [ "Cloud-native architecture", "ERP systems" ], "toolProficiency" : [ "Oracle Linux", "Windows Server" ], "communicationSkills" : "Translate technical requirements", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Reduce complexity through automation; Reduce complexity through standardization", "qualificationsBasic" : "7+ years Oracle DBA experience, 7+ years Systems Engineering experience, Expert Oracle 19c knowledge, Expert Multitenancy knowledge, Expert Oracle APEX knowledge, Expert legacy Oracle Forms/Reports knowledge, Proven OCI experience, Advanced Oracle Linux administration, Advanced Windows Server administration, Deep networking protocols understanding, Deep firewall management understanding, Deep IPSec VPN setup understanding, Ability to operate independently, Maintain high visibility remotely, Translate technical requirements for stakeholders", "qualificationsPreferred" : "Prior ERP systems experience, Experience supporting large-scale ERP, Experience integrating large-scale ERP", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "ROLE SUMMARY One of our portfolio companies is seeking a high-caliber Senior Oracle DBA & Infrastructure Engineer to lead our transition into a cloud-native future. This is a high-impact role requiring a \"full-stack\" infrastructure mindset. You will manage the intersection of enterprise database administration, cloud architecture, and secure networking. You will be responsible for the performance, security, and scalability of our proprietary ERP solution across 36 modules, ensuring seamless integration for a global client base. KEY RESPONSIBILITIES - Multi-tenant Architecture: Manage and optimize a sophisticated Multi-tenant (CDB/PDB) environment. Use containerized databases on single instances to maximize resource utilization and simplify administration. - Oracle 19c Oversight: Act as the primary authority for Oracle 19c databases, including patching, performance tuning, and PL/SQL optimization. - Cloud Migration & Standardization: Drive the final stages of client migrations from on-premises to OCI, ensuring all environments adhere to uniform Oracle Linux and application server versions. - Network Engineering: Manage internal firewalls and secure client connectivity via VPN tunnels and IPSec configurations to OCI. - Hybrid Environment Management: Maintain high availability for the remaining in-house servers while scaling SDC’s proprietary cloud infrastructure. - Business Continuity: Own the Disaster Recovery (DR) strategy, leveraging Oracle native replication technologies across separate data centers to ensure zero-data-loss for major clients. - Technical Customizations: Collaborate directly with customers to implement complex software customizations and interfaces. WHAT WE’RE LOOKING FOR - 7+ years of experience in Oracle Database Administration and Systems Engineering. - Expert-level knowledge of Oracle 19c, Multitenancy, Oracle APEX, and legacy Oracle Forms/Reports. - Proven experience with Oracle Cloud Infrastructure (OCI), specifically VCNs, Load Balancers, and Cloud Storage. - Advanced administration of Oracle Linux (RHEL) and Windows Server environments. - Deep understanding of networking protocols, firewall management, and IPSec VPN setup. - Prior experience supporting or integrating large-scale ERP systems is highly preferred. - Ability to operate independently in a 100% remote environment while maintaining high visibility - Comfortable translating complex technical requirements for business stakeholders and customers. - Shift-focus from \"maintenance\" to \"optimization,\" identifying ways to reduce complexity through automation and standardization. Beacon Software https://beaconsoftware.com/ is a permanent capital holding company which acquires and grows essential businesses. We are a profitable series B+ firm that combines great technologists, operators and M&A professionals to accelerate the scale of the ambition of the dozens of businesses we own and operate. We are supported by capital from tier-1 venture capital, crossover, and endowment investors as well as the founders of the leading technology companies from the past decade. Our Values at Beacon Software - Humility: We acknowledge that the path to getting to the right answer involves being wrong along the way. We have strong beliefs which are weakly held. We actively seek new ideas and believe we can learn from anyone at any time. - Honesty: We are truth seeking in our approach to business problems. Business is a repeat game and we believe that human relationships generate alpha. We understand that trust is earned over a lifetime and can be lost in an instant. - Hunger: We play to win. We hold ourselves to high standards and will not be outworked. We take pride in having a deep sense of responsibility to ourselves, each other, our partners, and our customers. We believe to whom much is given much is expected. - Horizon: We seek to build a generational software company. This will take decades. We manage our expectations and those of our partners to take advantage of the 8th wonder of the world - compounding growth. How We Use AI in Our Hiring Process: To ensure transparency, we want candidates to know that Beacon Software uses Artificial Intelligence and AI-enabled tools to assist with screening, reviewing, organizing and highlighting profiles and applications that match the key requirements for each role. AI does not make hiring decisions: Every application is reviewed by a member of our team, and all decisions throughout the process are made by humans. We use AI to support efficiency and consistency, not to replace human judgment. We are committed to a fair, thoughtful, and equitable experience for every candidate.", "summaryDescription" : "Oracle Cloud Architect - System Dynamics. Skills: Oracle Cloud Infrastructure, Oracle Database Administration, Systems Engineering, Network Engineering. Manage Multi-tenant environment. Optimize Multi-tenant environment", "createdAt" : "2026-06-14T20:12:07.926", "lastUpdated" : "2026-06-16T02:51:30.627", "ingestTimestamp" : "2026-06-14T20:12:07.926", "mongoId" : "6a2cb01a74d8ee00a09d8d04", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Multi-tenant architecture", "Containerized databases", "Database patching", "PL/SQL optimization", "Cloud migration", "Network engineering", "Firewall management", "VPN tunnels", "Disaster recovery", "Oracle native replication", "Honesty", "Hunger", "Oracle Cloud Infrastructure", "Oracle Database Administration", "Systems Engineering", "Network Engineering", "System design", "Infrastructure engineering", "Cloud architecture", "Secure networking", "Database administration", "Performance tuning", "Automation", "Standardization", "Cloud-native architecture", "ERP systems", "Oracle Linux", "Windows Server" ], "skillCount" : 28, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 387.79803, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c7e8f74d8ee00a0952d79", "title" : "Ingeniero/a Junior de Operaciones Cloud AWS / SRE", "company" : "NEORIS", "industry" : "Consulting", "salary" : { "min" : 28000.0, "max" : 38000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Junior Cloud Operations Engineer/SRE in Spain, adjusted for the technology industry and remote work." }, "location" : "Spain", "locations" : [ "Spain" ], "certifications" : [ "AWS basic certifications" ], "timestamp" : "2026-06-15T09:40:59.681", "fingerprint" : "f67eb6803ddca527a321cd1b5bd5a3504b4e0d34e2f57dc754eccfbea0ddcfc7", "source" : "greenhouse", "language" : "es", "applyUrl" : "https://job-boards.eu.greenhouse.io/neoris/jobs/4890974101", "externalId" : "4890974101", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Spain", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Spain", "employmentType" : "FULL_TIME", "experienceMinYears" : 1, "experienceMaxYears" : 3, "experienceLevel" : "Entry", "technicalSkills" : "AWS, EKS, Kubernetes, CI/CD, Terraform, CloudFormation", "professionalSkills" : [ "Quality orientation" ], "hardSkillsList" : [ "Infrastructure as Code" ], "softSkillsList" : [ "Teamwork" ], "hardSkills" : [ { "name" : "Infrastructure as Code", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Teamwork" } ], "majorSkills" : "Cloud Operations, SRE, AWS, Kubernetes", "majorSkillsList" : [ "Cloud Operations", "SRE", "AWS", "Kubernetes" ], "coreResponsibilities" : "Monitor AWS environments, Support incident response, Manage infrastructure, Improve infrastructure, Apply patches, Update systems, Maintain technical documentation, Update runbooks, Update knowledge bases, Prepare operational reports", "domainKnowledge" : "AWS Landing Zone; AWS Organizations; SCPs; Direct Connect", "domainList" : [ "aws-landing-zone", "aws-organizations", "scps", "direct-connect" ], "domainSpecificKnowledge" : [ "AWS Landing Zone", "AWS Organizations", "SCPs", "Direct Connect" ], "toolProficiency" : [ "Terraform", "CloudFormation", "ServiceNow", "JIRA" ], "documentationSkills" : "Technical documentation", "continuousLearning" : "Continuous training; Personalized career plan", "specialRequirements" : "On-call rotation, Occasional interventions", "qualificationsBasic" : "1-3 years AWS experience, 1-3 years operations/SRE roles, AWS knowledge, EKS knowledge, Kubernetes knowledge, CI/CD pipelines knowledge, Infrastructure as Code knowledge, B2 English level", "qualificationsPreferred" : "Observability knowledge, Monitoring knowledge, Logging knowledge, ServiceNow familiarity, JIRA familiarity, AWS basic certifications, Interest in SRE career, Interest in automation career", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "En EPAM NEORIS, creemos que la transformación empieza por las personas. Hoy, como parte de EPAM, ampliamos nuestro alcance global y nuestras capacidades, pero mantenemos lo más importante: una cultura donde cada persona puede crecer, aportar y ser protagonista. No buscamos solo cubrir puestos. Buscamos incorporar talento que quiera superarse, aprender constantemente y dejar huella en cada proyecto. Somos un equipo diverso, inclusivo y en constante evolució n. Impulsamos ideas, no jerarquías. Apostamos por el desarrollo real de cada persona. Si quieres trabajar en un lugar donde tu crecimiento importa tanto como los resultados, te estamos buscando. Respaldados por más de 60,000 profesionales en más de 55 países y un sólido modelo Nearshore, conectamos capacidades globales con confianza local para generar impacto real, crecimiento sostenible y resultados de alto valor para nuestros clientes. Estamos en búsqueda de: Ingeniero/a Junior de Operaciones Cloud AWS / SRE Principales responsabilidades: • Monitorizar entornos AWS y dar soporte en la respuesta a incidencias bajo supervisió n. • Colaborar en la gestión y mejora de infraestructuras mediante Infrastructure as Code (Terraform, CloudFormation). • Apoyar en la aplicación de parches y actualizaciones para garantizar seguridad y estabilidad. • Mantener y actualizar documentación técnica, runbooks y bases de conocimiento. • Participar en la elaboración de reportes operativos periódicos (diarios, semanales y mensuales). Requerimientos: Excluyentes: • Experiencia inicial (1-3 años) en entornos cloud AWS o en roles de operaciones / SRE. • Conocimientos de AWS (Landing Zone, AWS Organizations, SCPs, Direct Connect). • Conocimientos de EKS, Kubernetes y pipelines CI/CD. • Experiencia o conocimientos en Infrastructure as Code (Terraform, CloudFormation). • Nivel de inglés mínimo B2 (recomendable C1). • Disponibilidad para guardias: 1 semana completa al mes. • Disponibilidad para intervenciones puntuales: 4–8 horas/mes. • Capacidad de aprendizaje, trabajo en equipo y orientación a la calidad. Deseables: • Conocimientos en observabilidad, monitorización y logging. • Familiaridad con herramientas de gestión de incidencias (ServiceNow, JIRA). • Certificaciones básicas en AWS. • Interés en desarrollo de carrera en SRE y automatizació n. Ofrecemos • Contrato indefinido con salario competitivo • Modalidad flexible y posibilidad de trabajo remoto. • Plan de carrera personalizado y formación continua • Participación en proyectos estables con alto componente técnico. • Flexibilidad horaria y enfoque en la conciliació n. • Beneficios sociales adaptados a tus necesidades Te invitamos a conocernos en http://www.neoris.com, Facebook, LinkedIn, Twitter o Instagram: @NEORIS. #LI-SA1", "summaryDescription" : "Ingeniero/a Junior de Operaciones Cloud AWS / SRE at NEORIS. Skills: Cloud Operations, SRE, AWS, Kubernetes. Monitor AWS environments. Support incident response", "postedDate" : "2026-06-14T09:18:52.554", "createdAt" : "2026-06-14T09:18:52.554", "lastUpdated" : "2026-06-15T09:40:59.681", "ingestTimestamp" : "2026-06-14T09:18:52.554", "mongoId" : "6a2c7e8f74d8ee00a0952d79", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Infrastructure as Code", "Teamwork", "Cloud Operations", "SRE", "AWS", "Kubernetes", "Quality orientation", "AWS Landing Zone", "AWS Organizations", "SCPs", "Direct Connect", "AWS basic certifications", "Terraform", "CloudFormation", "ServiceNow", "JIRA" ], "skillCount" : 16, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Junior", "dataQualityScore" : 1.0, "_score" : 386.6922, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305303f292fd229cf10b5a", "title" : "Principal Cloud Architect", "company" : "Devoteam", "industry" : "Information Technology And Services", "salary" : { "min" : 1750000.0, "max" : 2500000.0, "currency" : "CZK", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Lead Principal Cloud Architect in Prague, Czech Republic, adjusted for the consulting industry and senior experience level." }, "location" : "Praha 1, Hlavní město Praha, CZ", "locations" : [ "Praha 1", "Hlavní město Praha", "CZ" ], "certifications" : [ "Google Professional Cloud Architect certification" ], "timestamp" : "2026-06-16T06:46:48.801", "fingerprint" : "cca797123f13d7bdb2a39c1029c6bb675ccbb3b2fb4cde3b0ab939c69160a87d", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Devoteam/744000132166792-principal-cloud-architect", "externalId" : "744000132166792", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Praha", "state" : "Hlavní město Praha", "country" : "Czech Republic", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "50.1029026,14.3946353" } ], "locationText" : "Praha, Hlavní město Praha, Czech Republic", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "Google Cloud, AWS, Azure, Docker, Kubernetes, GKE, Terraform", "professionalSkills" : [ "Cloud strategy", "Solution design", "Technical leadership", "Presales activities" ], "hardSkillsList" : [ "Infrastructure engineering", "Cloud consulting", "CI/CD pipelines", "Infrastructure automation", "Compute", "Storage", "Networking", "Identity management", "VPC design", "Hybrid connectivity", "Security controls" ], "hardSkills" : [ { "name" : "Infrastructure engineering", "level" : "intermediate" }, { "name" : "Cloud consulting", "level" : "intermediate" }, { "name" : "CI/CD pipelines", "level" : "intermediate" }, { "name" : "Infrastructure automation", "level" : "intermediate" }, { "name" : "Compute", "level" : "intermediate" }, { "name" : "Storage", "level" : "intermediate" }, { "name" : "Networking", "level" : "intermediate" }, { "name" : "Identity management", "level" : "intermediate" }, { "name" : "VPC design", "level" : "intermediate" }, { "name" : "Hybrid connectivity", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" } ], "majorSkills" : "Cloud architecture, Google Cloud, DevOps, Migrations", "majorSkillsList" : [ "Cloud architecture", "Google Cloud", "DevOps", "Migrations" ], "coreResponsibilities" : "Act as trusted technical advisor, Shape cloud strategies, Translate business requirements, Design Google Cloud solutions, Serve as Technical Lead, Provide hands-on expertise, Design end-to-end Google Cloud migrations, Own end-to-end Google Cloud architectures, Guide team members, Mentor team members, Serve as SME, Contribute knowledge, Manage presentations, Direct communication with clients, Bridge gap between customers and delivery teams, Provide technical leadership during presales, Provide technical leadership during workshops, Provide technical leadership during client presentations, Create detailed architecture documentation, Create solution designs, Ensure solutions meet security requirements, Ensure solutions meet compliance requirements, Ensure solutions meet availability requirements, Ensure solutions meet cost-optimization requirements", "teamCollaboration" : "Client communication; Delivery teams; Global practice", "domainKnowledge" : "Cloud infrastructure; Cloud networking; Enterprise workload migrations; Multi-cloud architectures; Hybrid architectures; Data warehouse migrations", "domainList" : [ "cloud-infrastructure", "cloud-networking", "enterprise-workload-migrations", "multi-cloud-architectures", "hybrid-architectures", "data-warehouse-migrations" ], "domainSpecificKnowledge" : [ "Cloud infrastructure", "Cloud networking", "Enterprise workload migrations", "Multi-cloud architectures", "Hybrid architectures", "Data warehouse migrations" ], "toolProficiency" : [ "Terraform" ], "communicationSkills" : "Present architecture solutions; Technical documentation", "documentationSkills" : "Architecture documentation; Solution designs", "continuousLearning" : "Training; Certifications; Udemy for business", "specialRequirements" : "Foreign business trips", "qualificationsBasic" : "5+ years of experience in cloud architecture, Experience designing solutions on Google Cloud, Experience leading enterprise workload migrations, Experience implementing DevOps practices, Understanding of cloud infrastructure, Experience with container technologies, Experience implementing Infrastructure-as-Code, Understanding of cloud networking, Excellent communication skills, Fluent English", "qualificationsPreferred" : "Google Professional Cloud Architect certification, Experience with multi-cloud architectures, Experience with hybrid architectures, Hands-on experience leading large data warehouse migrations, Hands-on experience leading infrastructure migrations", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Tech native for over 30 years, Devoteam guides businesses through sustainable digital transformation to deliver value. With over 11,000 tech architects in more than 25 countries across Europe, the Middle East, and Africa, Devoteam is committed to using technology to serve people. Devoteam has been a ServiceNow Elite Partner since 2019. In 2026, it was recognised as ServiceNow Partner of the Year for the fourth consecutive year. At Devoteam, we deliver innovative technology consulting for leading organizations across Europe and beyond. As a Google Cloud Premier Partner, we support our clients in their digital transformation journeys by designing and implementing secure, scalable, and high-performance cloud solutions. We are expanding our Cloud & Data team and are looking for a Principal Cloud Architect to join us and lead the design of complex cloud architectures for enterprise clients across various industries. Your main duties and responsibilities: As a Principal cloud Architect you will act as a trusted technical advisor for our customers, shaping cloud strategies and translating business requirements into robust Google Cloud solutions. You will also serve as a Technical Lead for your fellow Cloud Architects and Cloud Engineers, providing hands-on expertise to team members and clients alike. Your responsibilities will include: * Design and own end-to-end Google Cloud migrations and architectures * Guide and mentor team members, serving as an SME and knowledge contributor to the wider global Google Cloud practice * Manage presentations and direct communication with clients, bridging the gap between customers and delivery teams * Provide technical leadership during presales activities, workshops, and client presentations. * Create detailed architecture documentation and solution designs. * Ensure solutions meet security, compliance, availability, and cost-optimization requirements. ## Qualifications Must be * Bachelor’s degree in Computer Science, Information Technology, or related field. * 5+ years of experience in cloud architecture, infrastructure engineering, or cloud consulting roles. * Strong experience designing solutions on Google Cloud, AWS, or Azure. * Experience leading enterprise workload migrations to public cloud environments. * Experience implementing DevOps practices including CI/CD pipelines and infrastructure automation. * Strong understanding of cloud infrastructure including compute, storage, networking, and identity management. * Experience with container technologies such as Docker and Kubernetes (GKE preferred). * Experience implementing Infrastructure-as-Code using Terraform or similar tools. * Strong understanding of cloud networking including VPC design, hybrid connectivity, and security controls. * Excellent communication skills and ability to present architecture solutions to technical and business stakeholders. * Fluent English. You will be a great fit for this role if you have… * Google Professional Cloud Architect certification, or equivalent * Experience with multi-cloud and hybrid architectures. * Hands-on experience leading large data warehouse and infrastructure migrations between on-prem and Cloud(s) ## Additional Information What will you get apart from the salary? * 5 weeks of vacation per year (= 1 week extra) * 4 My Days per year * Hybrid office * Flexible working hours * Career Management, training and certifications in the best breed of technologies - focused on technical skills (ServiceNow, Google), Project Management methodology etc., including Udemy for business account. * Meal allowance up to 28.000 CZK/year (123,90 CZK/day) * Cafeteria 1000 CZK/month (MultiSport Card available) * Phone tariff (unlimited calls, texts messages within the EU, 20GB of Internet) * Employee Referral Program * Sabbatical leave * Repurchase of hardware Moreover, we offer: * Foreign business trips * Above standard working equipment * Company Mobile Phone (selection from Android/iPhone) * Company Laptop (Windows/macOS) * Coffee, tea, snacks and breakfasts in the office * Company events and teambuildings * Gifts for work anniversaries, promotion or childbirth * Friendly and open culture And last but not least, you can rely on: * Transparent framework for career growth, reinforced by annual performance evaluations * Trust and autonomy, with no micro-management * Learning from senior colleagues and opportunities to collaborate with professionals from various industries * Opportunities to attend conferences to keep skills up-to-date * Working on a variety of projects for a broader range of experience * Adoption and utilization of evolving IT technologies", "summaryDescription" : "Principal Cloud Architect at Devoteam. Skills: Cloud architecture, Google Cloud, DevOps, Migrations. Act as trusted technical advisor. Shape cloud strategies", "postedDate" : "2026-06-15T10:54:19.000", "createdAt" : "2026-06-15T21:43:08.023", "lastUpdated" : "2026-06-16T06:46:48.801", "ingestTimestamp" : "2026-06-15T21:43:08.023", "mongoId" : "6a305303f292fd229cf10b5a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Infrastructure engineering", "Cloud consulting", "CI/CD pipelines", "Infrastructure automation", "Compute", "Storage", "Networking", "Identity management", "VPC design", "Hybrid connectivity", "Security controls", "Cloud architecture", "Google Cloud", "DevOps", "Migrations", "Cloud strategy", "Solution design", "Technical leadership", "Presales activities", "Cloud infrastructure", "Cloud networking", "Enterprise workload migrations", "Multi-cloud architectures", "Hybrid architectures", "Data warehouse migrations", "Google Professional Cloud Architect certification", "Terraform" ], "skillCount" : 27, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 1.0, "_score" : 386.4773, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Consulting", "llmIndustryConfidence" : 0.95 }, { "id" : "69ce5e3b9bc74574cb677984", "title" : "Manager - Environment, Health & Safety", "industry" : "Manufacturing", "salary" : { "min" : 1850000.0, "max" : 3250000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Manager - Environment, Health & Safety in Bangalore, India, adjusted for the automotive industry and manager seniority." }, "location" : "India-Karnataka-Bangalore", "locations" : [ "India-Karnataka-Bangalore", "'Embassy Crest' Plot No 5, , EPIP Zone, Phase 1, " ], "certifications" : [ "ISO 14001 Lead Auditor", "ISO 45001 Lead Auditor", "ISO 14001 Implementer", "ISO 45001 Implementer" ], "timestamp" : "2026-06-16T02:18:58.913", "fingerprint" : "064efbd446831f630fe3d259fe358d9cb0cc399dadb76b503d6f744f548afdfb", "source" : "taleo", "language" : "en", "applyUrl" : "https://daimler.taleo.net/careersection/ex/jobdetail.ftl?job=889624", "externalId" : "889624", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bangalore", "state" : "Karnataka", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "12.9767936,77.5900820" } ], "locationText" : "Bangalore, Karnataka, India", "minimumEducation" : "Master's", "experienceMinYears" : 10, "experienceMaxYears" : 15, "experienceLevel" : "Manager", "technicalSkills" : "ISO 14001, ISO 45001", "professionalSkills" : [ "Risk assessment", "Incident investigation", "Compliance management", "Systems thinking", "Problem-solving", "Decision-making" ], "hardSkillsList" : [ "Environmental impact evaluation", "Hazard assessment", "Root cause analysis", "Preventive actions" ], "softSkillsList" : [ "Leadership", "Influencing" ], "hardSkills" : [ { "name" : "Environmental impact evaluation", "level" : "intermediate" }, { "name" : "Hazard assessment", "level" : "intermediate" }, { "name" : "Root cause analysis", "level" : "intermediate" }, { "name" : "Preventive actions", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Influencing" } ], "majorSkills" : "EHS Management System, Risk Management, Regulatory Compliance", "majorSkillsList" : [ "EHS Management System", "Risk Management", "Regulatory Compliance" ], "coreResponsibilities" : "Own EHS Management System, Drive EHS Management System deployment, Improve EHS Management System, Integrate EHS governance, Lead certification readiness, Lead surveillance audits, Lead internal compliance assessments, Establish management review, Monitor EHS performance, Ensure Indian statutory compliance, Ensure corporate policy compliance, Ensure global Daimler standards compliance, Lead risk identification, Lead hazard assessment, Lead environmental impact evaluation, Provide oversight for incident investigation, Provide oversight for root cause analysis, Provide oversight for preventive actions, Advise leadership on EHS risks, Advise leadership on compliance posture, Advise leadership on improvement opportunities, Provide EHS performance insights, Provide EHS risk exposure dashboards, Support leadership decisions, Strengthen organizational EHS culture, Promote accountability, Promote awareness, Promote leadership engagement, Design training programs, Deploy training programs, Design communication initiatives, Deploy communication initiatives, Enhance EHS maturity, Enable cross-functional collaboration, Embed safety-by-design, Embed sustainability thinking, Support environmental performance initiatives, Support sustainability outcomes initiatives, Enhance resource efficiency, Enhance waste reduction, Enhance emissions management, Align environmental management practices", "teamCollaboration" : "Cross-functional collaboration; Engage with senior leadership; Engage with cross-functional teams", "domainKnowledge" : "Environmental Management Systems; Occupational Health & Safety; EHS regulatory frameworks; Sustainability objectives; Safety-by-design; Environmental stewardship", "domainList" : [ "environmental-management-systems", "occupational-health-safety", "ehs-regulatory-frameworks", "sustainability-objectives", "safety-by-design", "environmental-stewardship" ], "domainSpecificKnowledge" : [ "Environmental Management Systems", "Occupational Health & Safety", "EHS regulatory frameworks", "Sustainability objectives", "Safety-by-design", "Environmental stewardship" ], "communicationSkills" : "Influencing capability", "innovationCreativity" : "Innovate and operate safely", "problemSolvingSkills" : "Structured problem-solving", "qualificationsBasic" : "Master's degree in EHS discipline, 10-15 years EHS management experience, Experience implementing ISO 14001, Experience managing ISO 45001, Experience in EHS governance, Experience in EHS audits, Experience in regulatory compliance", "qualificationsPreferred" : "Additional certifications in ISO 14001 Lead Auditor, Additional certifications in ISO 45001 Lead Auditor, Additional certifications in ISO 14001 Implementer, Additional certifications in ISO 45001 Implementer, EHS management experience in GCC, EHS management experience in automotive, EHS management experience in engineering, EHS management experience in manufacturing, EHS management experience in R&D", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Role Context At Mercedes-Benz Research & Development India, engineering excellence must be supported by robust governance, responsible environmental stewardship, and uncompromising safety standards. As the organization continues to expand its R&D capabilities, it is critical that Environment, Health & Safety principles are embedded into the operating DNA of our engineering and corporate functions. The EHS Manager within Corporate Quality plays a pivotal role in ensuring that EHS management systems are not only compliant but strategically integrated into the organization’s quality and operational framework. The role acts as a central enabler of risk transparency, regulatory assurance, and sustainability alignment, ensuring that teams can innovate and operate in a safe, responsible, and environmentally conscious manner. This position requires a leader who can translate EHS standards into practical governance mechanisms, influence stakeholders across functions, and strengthen the organization’s safety and environmental culture. Key Responsibilities 1. EHS Governance & Management System Leadership Own and drive the design, deployment, and continual improvement of the EHS Management System aligned with ISO 14001 and ISO 45001 standards. Ensure integration of EHS governance within the Corporate Quality framework and organizational processes. Lead certification readiness, surveillance audits, and internal compliance assessments. Establish a structured management review and performance monitoring mechanism for EHS. 2. Risk, Compliance & Assurance Ensure compliance with Indian statutory requirements, corporate policies, and global Daimler standards related to environment, health, and safety. Lead systematic risk identification, hazard assessment, and environmental impact evaluation across R&D operations. Provide oversight for incident investigation, root cause analysis, and preventive actions. 3. Strategic Advisory to Leadership Act as a trusted advisor to leadership on EHS risks, compliance posture, and improvement opportunities. Provide data-driven insights and dashboards on EHS performance and risk exposure. Support leadership decisions with proactive risk mitigation strategies. 4. Culture & Organizational Capability Strengthen organizational EHS culture by promoting accountability, awareness, and leadership engagement. Design and deploy training programs and communication initiatives that enhance EHS maturity across teams. Enable cross-functional collaboration to embed safety-by-design and sustainability thinking within engineering operations. 5. Environmental Sustainability Integration Support initiatives that enhance environmental performance and sustainability outcomes, including resource efficiency, waste reduction, and emissions management. Ensure alignment of environmental management practices with global sustainability objectives. Candidate Profile Education (Mandatory) Master’s degree or Equivalent in Environmental Science, Environmental Engineering, Industrial Safety, Occupational Health & Safety, or related EHS discipline. Additional certifications in ISO 14001 / ISO 45001 Lead Auditor or Implementer. Experience 10–15 years of relevant experience in EHS management, preferably within GCC, automotive, engineering, manufacturing, or R&D environments. Proven experience in implementing and managing ISO 14001 and ISO 45001 management systems. Experience in organizational EHS governance, audits, and regulatory compliance. Critical Capabilities Domain Expertise Strong knowledge of ISO 14001 Environmental Management Systems Strong knowledge of ISO 45001 Occupational Health & Safety Management Systems EHS regulatory frameworks and compliance management Risk assessment, incident investigation, and preventive systems Leadership Attributes Exceptional communication and influencing capability across diverse stakeholders. Ability to operate with strategic perspective and systems thinking. Strong structured problem-solving and decision-making skills. Capability to engage effectively with senior leadership and cross-functional teams. Mercedes-Benz Research and Development India Private Limited", "summaryDescription" : "Manager - Environment, Health & Safety. Skills: EHS Management System, Risk Management, Regulatory Compliance. Own EHS Management System. Drive EHS Management System deployment", "createdAt" : "2026-06-14T19:53:49.537", "lastUpdated" : "2026-06-16T02:18:58.913", "ingestTimestamp" : "2026-06-14T19:53:49.537", "mongoId" : "69ce5e3b9bc74574cb677984", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Environmental impact evaluation", "Hazard assessment", "Root cause analysis", "Preventive actions", "Leadership", "Influencing", "EHS Management System", "Risk Management", "Regulatory Compliance", "Risk assessment", "Incident investigation", "Compliance management", "Systems thinking", "Problem-solving", "Decision-making", "Environmental Management Systems", "Occupational Health & Safety", "EHS regulatory frameworks", "Sustainability objectives", "Safety-by-design", "Environmental stewardship", "ISO 14001 Lead Auditor", "ISO 45001 Lead Auditor", "ISO 14001 Implementer", "ISO 45001 Implementer" ], "skillCount" : 25, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Manager", "dataQualityScore" : 0.6666667, "_score" : 386.32983, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Automotive", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305640f292fd229cf264ed", "title" : "Cloud Security Engineer", "company" : "Delivery Hero", "industry" : "Internet", "salary" : { "min" : 45000.0, "max" : 65000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cloud Security Engineer in Barcelona, Spain, adjusted for the technology industry and company size." }, "location" : "Barcelona, Spain", "locations" : [ "Barcelona", "Spain" ], "certifications" : [ "CISSP-ISSAP", "AWS Certified Security - Specialty" ], "timestamp" : "2026-06-16T08:05:04.365", "fingerprint" : "a3a7a4141832bbc3dd02a36aefabdec4959bb664156bbacb6efb2302b1f4cbab", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/DeliveryHero/744000132192620-cloud-security-engineer-", "externalId" : "744000132192620", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Barcelona", "country" : "Spain", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "41.3825802,2.1770730" } ], "locationText" : "Barcelona, Spain", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "AWS, GCP, Kubernetes, Python, Golang, Terraform, AWS CloudTrail, AWS Config, AWS Inspector", "professionalSkills" : [ "Policy as code", "Infrastructure as code", "Incident response", "Operational security" ], "hardSkillsList" : [ "Log source analysis", "Security policy creation", "Security standards creation", "Security procedures creation", "Security guidelines creation" ], "softSkillsList" : [ "Interpersonal skills", "Relationship building" ], "hardSkills" : [ { "name" : "Log source analysis", "level" : "intermediate" }, { "name" : "Security policy creation", "level" : "intermediate" }, { "name" : "Security standards creation", "level" : "intermediate" }, { "name" : "Security procedures creation", "level" : "intermediate" }, { "name" : "Security guidelines creation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Interpersonal skills" }, { "name" : "Relationship building" } ], "majorSkills" : "Cloud Security, AWS, GCP, Terraform", "majorSkillsList" : [ "Cloud Security", "AWS", "GCP", "Terraform" ], "coreResponsibilities" : "Design internal solutions, Build internal solutions, Identify compliance failures, Remedy compliance failures, Identify security failures, Remedy security failures, Develop policy as code, Develop templates, Develop modules, Implement secure patterns, Enforce secure patterns, Implement secure guidance, Enforce secure guidance, Respond to alerts, Participate in incidence response, Participate in on-call response, Analyze log sources, Understand log sources, Collaborate with teams, Consult on improvements, Respond to incidents, Ensure cloud security pipelines operational, Ensure cloud infrastructure operational, Help create security policies, Help create security standards, Help create security procedures, Help create security guidelines", "teamCollaboration" : "Cross-functional teams", "domainKnowledge" : "GDPR security; GDPR privacy; NIST CSF; ISO 27001", "domainList" : [ "gdpr-security", "gdpr-privacy", "nist-csf", "iso-27001" ], "domainSpecificKnowledge" : [ "GDPR security", "GDPR privacy", "NIST CSF", "ISO 27001" ], "toolProficiency" : [ "AWS CloudTrail", "AWS Config", "AWS Inspector" ], "communicationSkills" : "Written communication; Verbal communication", "specialRequirements" : "On-call response", "qualificationsBasic" : "Operational experience with AWS, Operational experience with GCP, Proficiency in Python or Golang, Operational experience with Terraform, Excellent written skills, Excellent communication skills, Excellent interpersonal skills, Excellent relationship building skills", "qualificationsPreferred" : "Operational experience securing Kubernetes, CISSP-ISSAP, AWS Certified Security - Specialty, Knowledge of GDPR security requirements, Knowledge of GDPR privacy requirements, Knowledge of NIST CSF, Knowledge of ISO 27001", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Glovo is part of the Delivery Hero Group, the world’s pioneering local delivery platform, our mission is to deliver an amazing experience—fast, easy, and to your door. We operate in around 65 countries worldwide. Headquartered in Berlin, Germany. Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index. YOUR MISSION Glovo’s success and constant growth is introducing new challenges in securing our assets. We are looking for a Cloud Security Engineer to join our team and play a critical role in safeguarding our digital infrastructure and protecting against potential threats. THE JOURNEY * Design and build internal solutions to identify and remedy compliance and security failures. * Develop policy as code, templates and modules to implement and enforce secure patterns and guidance * Respond to alerts and participate in the overall incidence response and on-call response * Experience with analyzing and understanding the log sources * Collaborate with cross-functional teams to consult on improvements to the operational security requirements vis-a-vis * Respond to detected incidents in the cloud environment and ensure that all cloud security pipelines and infrastructure are operational * Help create security policies, standards, procedures, and guidelines for engineers to consume ## Qualifications WHAT YOU WILL BRING TO THE RIDE * Operational experience with AWS, GCP * Operational experience securing Kubernetes is an extra plus * Proficiency in at least one programming language such as Python or Golang * Operational experience with infrastructure as a code: Terraform * Excellent written and communications skills, as well as strong interpersonal and relationship building skills; * Proven team player, collaborating well with others to tackle problems in a team-focused dynamic * Familiarity with cloud-native security platforms and tools like AWS CloudTrail, AWS Config, AWS Inspector, etc.) Nice-to-haves: * CISSP-ISSAP, AWS Certified Security - Specialty or similar certifications * Knowledge of GDPR security and privacy requirements * Knowledge of basic security frameworks (NIST CSF, ISO 27001) Individuals representing diverse profiles, and abilities, encompassing various genders, ethnicities, and backgrounds, are less likely to apply for this role if they do not possess solid experience in 100% of these areas. Even if it seems you don't meet our musts don't let it stop you, we are all about finding the best talent out there! Skills can be learned, and embracing diversity is invaluable. We believe driven talent deserves: * \uD83C\uDF1F An enticing equity plan that lets you own a piece of the action. * \uD83D\uDCAA Top-notch private health insurance to keep you at your peak. * \uD83C\uDF54 Monthly Glovo credit to satisfy your cravings! * \uD83D\uDCB3 Discounts on transportation, food, and even kindergarten expenses. * \uD83C\uDFCA Discounted gym memberships to keep you energized. * \uD83C\uDFD6️ Extra time off, the freedom to work from home two days a week, and the opportunity to work from anywhere for up to three weeks a year! * \uD83D\uDC6A Enhanced parental leave, and office-based nursery. * \uD83E\uDDE0 Online therapy and wellbeing benefits to ensure your mental well-being. Here at Glovo, we thrive on diversity, we believe it enhances our teams, products, and culture. We know that the best ideas come from a mashup of brilliant diverse minds. This is why we are committed to providing equal opportunities to talent from all backgrounds - all genders, racial/diverse backgrounds, abilities, ages, sexual orientations and all other unique characteristics that make you YOU. We will encourage you to bring your authentic self to work, fostering an inclusive environment where everyone feels heard. Feel free to note your pronouns in your application (e.g., she/her/hers, he/him/his, they/them/theirs, etc). So, ready to take the wheel and make this the ride of your life? Delve into our culture by taking a peek at our [Instagram](https://www.instagram.com/lifeatglovo/) and check out our [Linkedin](https://www.linkedin.com/company/glovo-app/) and [website](https://about.glovoapp.com/)! ## Additional Information At Glovo, your success is defined by both results and behaviors. We hire for excellence in craft and for the Leadership Principles that shape how we think, decide, and collaborate. What you achieve matters and how you achieve it defines us. Together, they move the business forward and deliver great experiences. Learn more about our Leadership Principles[ here](https://careers.deliveryhero.com/leadership-principles). Here at Glovo, we thrive on diversity, we believe it enhances our teams, products, and culture. We know that the best ideas come from a mashup of brilliant diverse minds. This is why we are committed to providing equal opportunities to talent from all backgrounds – all genders, racial/diverse backgrounds, abilities, ages, sexual orientations and all other unique characteristics that make you YOU. We will encourage you to bring your authentic self to work, fostering an inclusive environment where everyone feels heard. Feel free to note your pronouns in your application (e.g., she/her/hers, he/him/his, they/them/theirs, etc). So, ready to take the wheel and make this the ride of your life? Delve into our culture by taking a peek at our [Instagram](https://www.instagram.com/lifeatglovo/) and check out our [LinkedIn](https://www.linkedin.com/company/glovo-app/) and [website](https://about.glovoapp.com/)!", "summaryDescription" : "Cloud Security Engineer at Delivery Hero. Skills: Cloud Security, AWS, GCP, Terraform. Design internal solutions. Build internal solutions", "postedDate" : "2026-06-15T12:46:17.000", "createdAt" : "2026-06-15T23:39:46.442", "lastUpdated" : "2026-06-16T08:05:04.365", "ingestTimestamp" : "2026-06-15T23:39:46.442", "mongoId" : "6a305640f292fd229cf264ed", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "30k-50k", "hasSalary" : false, "allSkills" : [ "Log source analysis", "Security policy creation", "Security standards creation", "Security procedures creation", "Security guidelines creation", "Interpersonal skills", "Relationship building", "Cloud Security", "AWS", "GCP", "Terraform", "Policy as code", "Infrastructure as code", "Incident response", "Operational security", "GDPR security", "GDPR privacy", "NIST CSF", "ISO 27001", "CISSP-ISSAP", "AWS Certified Security - Specialty", "AWS CloudTrail", "AWS Config", "AWS Inspector" ], "skillCount" : 24, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 384.87125, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ce89374d8ee00a0a6b327", "title" : "Incident and Escalation Manager", "company" : "Vapi", "industry" : "Engineering, Product & Design", "salary" : { "min" : 180000.0, "max" : 250000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "timestamp" : "2026-06-15T07:14:55.204", "fingerprint" : "60c917ee3c64b5678f66ce6a86c18e0c6ac5a4b02e9a8a6aa640d0caadd520e0", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/vapi/f07ff2a1-8b8a-4769-ab0d-dea7cc7ad3a7/application", "externalId" : "f07ff2a1-8b8a-4769-ab0d-dea7cc7ad3a7", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "PagerDuty, Incident.io, Opsgenie", "professionalSkills" : [ "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement" ], "hardSkillsList" : [ "Incident response", "Escalation management", "Root cause analysis", "Service level agreements", "Customer communication", "Credit process governance", "Metrics reporting", "Partnership building", "Customer RCA", "Post-incident review", "Executive escalation list", "Pattern spotting" ], "softSkillsList" : [ "Leadership", "Critical thinking" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Escalation management", "level" : "intermediate" }, { "name" : "Root cause analysis", "level" : "intermediate" }, { "name" : "Service level agreements", "level" : "intermediate" }, { "name" : "Customer communication", "level" : "intermediate" }, { "name" : "Credit process governance", "level" : "intermediate" }, { "name" : "Metrics reporting", "level" : "intermediate" }, { "name" : "Partnership building", "level" : "intermediate" }, { "name" : "Customer RCA", "level" : "intermediate" }, { "name" : "Post-incident review", "level" : "intermediate" }, { "name" : "Executive escalation list", "level" : "intermediate" }, { "name" : "Pattern spotting", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Critical thinking" } ], "majorSkills" : "Incident management, Escalation management, Program building", "majorSkillsList" : [ "Incident management", "Escalation management", "Program building" ], "coreResponsibilities" : "Define incident criteria, Author severity model, Design live incident process, Write incident process documentation, Build incident commander rotation, Train incident commander rotation, Balance hiring and utilizing resources, Own pager rotation, Command incidents during shifts, Step down pager share, Own rotation operations, Stand up incident tooling, Set up on-call, Build customer communication templates, Govern customer credit process, Approve financial decisions, Stand up metrics, Report monthly metrics, Build standing partnerships, Train go-to-market teams, Train support teams, Train customer success teams, Train engineering teams, Build feedback loop, Shape engineering roadmap, Own customer-facing RCA, Translate engineering root cause, Ship RCA within SLA, Run blameless post-incident review, Drive action items to closure, Close loop with customers, Hold high-severity issues, Run executive escalation list, Keep owner on escalation, Spot patterns across customers, Force patterns into engineering, Force patterns into product, Be single point of contact, Partner with account team, Build cross-functional recovery plan, Keep written handoff, Keep named deputy", "teamCollaboration" : "Partnerships with engineering; Partnerships with support; Partnerships with CTO office; Partnerships with legal; Partnerships with security; Partnerships with comms; Partnerships with carrier operations; Partner with account team", "projectManagementSkills" : [ "Incident program management", "Escalation program management" ], "domainKnowledge" : "Infrastructure company; Telephony company; Platform company; Carrier dependency; Voice AI infrastructure", "domainList" : [ "infrastructure-company", "telephony-company", "platform-company", "carrier-dependency", "voice-ai-infrastructure" ], "domainSpecificKnowledge" : [ "Infrastructure company", "Telephony company", "Platform company", "Carrier dependency", "Voice AI infrastructure" ], "toolProficiency" : [ "PagerDuty", "Incident.io", "Opsgenie", "Slack", "Status page" ], "communicationSkills" : "Customer communication; Executive presentations; Customer RCA", "documentationSkills" : "Write incident process; Write RCA; Build runbook library", "problemSolvingSkills" : "Decision-making; Root cause analysis; Troubleshooting", "specialRequirements" : "On-call rotation, Off-hours shifts", "outcomesObjectives" : "Protect engineering from noise; Ensure consistent response; Protect renewals; Protect engineering focus; Protect executive confidence; Build scalable program; Resolve incidents; Hold relationship; Track action items to closure; Protect revenue", "qualificationsBasic" : "8 to 12 years experience, Incident management experience, Escalation management experience, Technical support escalations experience, Technical program management experience, Building incident program from zero, Owning incident program growth, Standing up incident commander rotation, Calm under pressure, Decision-making with incomplete information, Clear writing under pressure, Comfort with technical depth, Willingness to work rotation", "qualificationsPreferred" : "Experience hiring a team is a plus, Familiarity with telephony is a plus, Familiarity with carrier dynamics is a plus, Familiarity with real-time systems is a plus", "remoteFriendly" : true, "rawDescription" : "Voice AI that resolves, not transfers. Most phone systems trap callers in menus and scripts. Vapi is the platform for deploying voice agents that know your business and can listen, adapt, and resolve in minutes. - The numbers: 1 billion calls. 1 million developers. 10x enterprise ARR growth - The customers: Amazon Ring, ServiceTitan, New York Life, Intuit, Kavak, and thousands more, from YC startups to the Fortune 500 - The news: a $50M Series B led by Peak XV Partners, with Bessemer Venture Partners, Kleiner Perkins, M12 (Microsoft's Venture Fund), Y Combinator, and our earlier backers. Total raised: $72M Incident and Escalation Manager Why this role exists Vapi runs voice AI infrastructure at tens of millions of minutes a month for enterprise customers who route business-critical traffic through us. When something breaks, it breaks in real time, in front of a customer's own customers, and often through a carrier dependency we don't fully control. Today the response is run by whoever is in the Slack thread. That works once. It does not scale, and it costs us renewals, engineering focus, and executive confidence every time it happens. This is the first dedicated hire for the function, and the job is to build it. You will design the program that runs our incident response, train the people who command incidents, and own the customer relationship through the weeks that follow a serious one. You own the pager and you work part of the rotation yourself, because the fastest way to build a program that works is to run inside it while you build it. You are not the engineer fixing the system. You are the person who builds the system so a trained bench can run it, and who takes a real turn on the pager. Building the program This is the core of the role. - Define what counts as an incident and what does not, with entrance and exit criteria that protect engineering from noise. - Author the severity model with response-time targets per level, so a SEV0 means the same thing Monday morning and Friday night. - Design how a live incident runs: the command structure, the update cadence, the single source of truth, the decision rights, and when the call gets escalated past the commander. Write it down so anyone on rotation runs it the same way. - Build and train the incident commander rotation. Build a realistic balance of hiring and utilizing existing resources across humans and AI to stand up the rotation. - Own the pager and work part of the rotation yourself - personally commanding incidents during your shifts and stepping your share down as the bench matures and proves out. Own how the rotation runs regardless of whose shift it is. - Stand up the incident tooling and on-call setup: paging, escalation policies, incident channels, status page, and the runbook library. - Build customer communication templates for each severity and channel, pre-approved so they are not written from scratch under pressure. - Govern the customer credit process with a clear approval chain, so financial decisions stop happening in ad hoc threads. - Stand up the metrics: resolution time, response velocity, escalation volume, RCA SLA adherence, and revenue protected. Report monthly in terms execs use to make resource decisions. - Build standing partnerships with engineering, support, the office of the CTO, legal, security, comms, and carrier operations before the next critical situation. - Train go-to-market, support, customer success, and engineering on where to bring customer-critical issues and how the function works. - Build a feedback loop so incident and escalation data shapes the engineering roadmap instead of dying in postmortems. After the incident - Own the customer-facing RCA. Translate engineering root cause into plain language that tells the truth and holds the relationship. Ship it within the SLA we commit to. - Run the blameless post-incident review. Drive action items to named owners with dates, and track them to closure instead of letting them die in a doc. - Close the loop with affected customers directly, including the credits or commitments made during the incident. Escalation management - Hold the high-severity customer issues that do not rise to a full incident but threaten a renewal or a relationship. - Run the standing executive escalation list. Keep an owner, a next step, and a date on every item. - Spot patterns across customers that no single team owns, and force them into engineering or product as prioritized work. - Be the single point of contact for a regulated customer or a regulatory inquiry that surfaces weeks after the technical fix. - Partner with the account team on at-risk accounts driven by reliability, and build the cross-functional recovery plan. - Keep a written handoff and a named deputy so escalations stay covered when you are out. What you bring - 8 to 12 years across incident management, escalation management, technical support escalations, or technical program management, ideally at an infrastructure, telephony, or platform company operating at scale. - A track record building an incident and escalation program from zero, or owning a meaningful piece of one through its growth, including standing up an incident commander rotation rather than being the sole responder. Experience hiring a team is a plus. - Hands-on familiarity with incident tooling such as PagerDuty, incident.io http://incident.io, Opsgenie, or equivalent, and the Slack and status-page workflows around them. - Calm under pressure as a learned discipline. Gravitas to direct a response and the willingness to remove a distraction from a call even when it outranks you. - Decision-making with incomplete information, and the judgment to know when to escalate and how to do it without losing time. - Clear writing under pressure. You can produce a clean read of a live situation for a senior leader, and a customer RCA that holds a relationship together. - Comfort with technical depth. You do not need to write the fix, but you need to follow the conversation, ask the right question, and know when an answer does not add up. Familiarity with telephony, carrier dynamics, or real-time systems is a strong plus. - Willingness to work part of the incident commander rotation, including off-hours shifts, especially in the first year.", "summaryDescription" : "Incident and Escalation Manager at Vapi. Skills: Incident management, Escalation management, Program building. Define incident criteria. Author severity model", "createdAt" : "2026-06-14T04:46:08.267", "lastUpdated" : "2026-06-15T07:14:55.204", "ingestTimestamp" : "2026-06-14T04:46:08.267", "mongoId" : "6a2ce89374d8ee00a0a6b327", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 180000, "salaryAnnualMax" : 250000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Incident response", "Escalation management", "Root cause analysis", "Service level agreements", "Customer communication", "Credit process governance", "Metrics reporting", "Partnership building", "Customer RCA", "Post-incident review", "Executive escalation list", "Pattern spotting", "Leadership", "Critical thinking", "Incident management", "Program building", "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement", "Incident program management", "Escalation program management", "Infrastructure company", "Telephony company", "Platform company", "Carrier dependency", "Voice AI infrastructure", "PagerDuty", "Incident.io", "Opsgenie", "Slack", "Status page" ], "skillCount" : 35, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 383.7325, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 } ], "status" : 200, "message" : "OK", "pagination" : { "page" : 0, "limit" : 50, "totalCount" : 15616, "totalPages" : 313, "hasNext" : true, "hasPrevious" : false } }

Responding To Detected Incidents In The Cloud Environment Jobs in Austin

Cybersecurity Incident Responder

Cybersecurity Incident Responder

Security Engineer II, Security Incident Response Team (SIRT)

Associate Customer Incident Responder, AWS Customer Incident Response Team (CIRT)

Lead, Incidents & Escalations, User Operations

Lead, Incidents & Escalations, User Operations

Incident Management Engineer (Spanish/English bilingual), Incident Detection and Response

Incident Management Engineer (Portuguese/English bilingual), Incident Detection and Response

Incident Management Engineer, Incident Detection and Response

Environment Engineer

Incident Detection/Response Manager (SOC Manager)

Associate Environment Artist

Director, Environment & Permitting

Security Engineer, Detection and Response

Incident Response Lead

Security Detection Engineer

Cloud Support Infrastructure Administrator

Cloud Support Infrastructure Administrator

Cloud Support Infrastructure Expert

Cloud Support Infrastructure Expert

Security Engineer, Detection and Response

Security Incident Response Manager

Manager, AV Incident Management

Sr. Risk Manager, High Sev Incidents, Last Mile, High Severity Incidents

Cloud Engineer - T Cloud Public (REF5058E)

Cloud Engineer - T Cloud Public (REF5058E)

Hardware-in-the-Loop (HIL) Engineer

Service Desk Incident Manager

Senior Cloud DevOps

Senior Incident Response Engineer, Devices & Services Security

Associate Environment Artist (NST)

Security Operations and Incident Response Manager

Senior Detection Researcher

Cloud Infrastructure Engineer

Security Engineer, AWS Security Incident Response

AWS Security Operations/Incident Response Engineer

Assistant Manager, Cybersecurity Incident Response

Senior Cloud Software Architect

Service Integration & Management - Major Incident Manager

Sr. Cloud Security Architect

Principal Cloud Architect

Senior Cloud Engineer

Product Manager - Fraud Detection & Operational Intelligence

Practice Customer Engineer II, Cloud AI, Google Cloud

Oracle Cloud Architect - System Dynamics

Ingeniero/a Junior de Operaciones Cloud AWS / SRE

Principal Cloud Architect

Manager - Environment, Health & Safety

Cloud Security Engineer

Incident and Escalation Manager

Common Questions